@pikku/addon-console 0.12.22 → 0.12.23

package/dist/src/functions/run-security-audit.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-security-audit.function.d.ts","sourceRoot":"","sources":["../../../src/functions/run-security-audit.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGtD,eAAO,MAAM,gBAAgB,6VAmB3B,CAAA"}

package/dist/src/functions/run-security-audit.function.js

@@ -0,0 +1,18 @@
+import { dirname } from 'node:path';
+import { pikkuFunc } from '#pikku';
+import { readAuditReport, runPikkuAudit } from '../lib/audit-exec.js';
+export const runSecurityAudit = pikkuFunc({
+    title: 'Run Security Audit',
+    description: 'Runs `pikku audit --outdated`, regenerating .pikku/audit.json, and returns the fresh report. Mirrors the Run Tests action.',
+    expose: true,
+    func: async ({ metaService }) => {
+        if (!metaService?.basePath) {
+            throw new Error('Meta service is not configured. Ensure the console addon is set up with a MetaService.');
+        }
+        // basePath is the project's `.pikku` dir; run from the dir that holds it
+        // (the project root with pikku.config.json) so audit.json lands back in it.
+        await runPikkuAudit(dirname(metaService.basePath));
+        return readAuditReport(metaService);
+    },
+});
+//# sourceMappingURL=run-security-audit.function.js.map

package/dist/src/functions/run-security-audit.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-security-audit.function.js","sourceRoot":"","sources":["../../../src/functions/run-security-audit.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAErE,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,4HAA4H;IAC9H,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;QAClD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-agent-config.function.d.ts

@@ -5,13 +5,13 @@ export declare const updateAgentConfig: import("#pikku").PikkuFunctionConfig<{
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
     sourceFile: string;
     exportedName: string;
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
     sourceFile: string;
     exportedName: string;
     changes: AgentConfigChanges;

package/dist/src/functions/update-agent-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;uEAgBlB,CAAA"}
+{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;uEAelB,CAAA"}

package/dist/src/functions/update-agent-config.function.js

@@ -1,10 +1,9 @@
 import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuSessionlessFunc } from '#pikku';
-export const updateAgentConfig = pikkuSessionlessFunc({
+import { pikkuFunc } from '#pikku';
+export const updateAgentConfig = pikkuFunc({
     title: 'Update Agent Config',
     description: 'Updates the config properties of a pikku AI agent definition in source code and triggers a rebuild.',
     expose: true,
-    auth: false,
     func: async ({ codeEditService }, { sourceFile, exportedName, changes }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-agent-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAG7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAOnD;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-dependency.function.d.ts

@@ -0,0 +1,12 @@
+import type { SecurityAuditReport } from '@pikku/core';
+export declare const updateDependency: import("#pikku").PikkuFunctionConfig<{
+    package: string;
+    version: string;
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").PikkuFunction<{
+    package: string;
+    version: string;
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    package: string;
+    version: string;
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=update-dependency.function.d.ts.map

package/dist/src/functions/update-dependency.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AA0CtD,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;mGAmClC,CAAA"}

package/dist/src/functions/update-dependency.function.js

@@ -0,0 +1,62 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { pikkuFunc } from '#pikku';
+import { readAuditReport, runPikkuAudit, spawnProcess } from '../lib/audit-exec.js';
+const DEP_SECTIONS = [
+    'dependencies',
+    'devDependencies',
+    'optionalDependencies',
+    'peerDependencies',
+];
+// Bump `pkg` to `version` in package.json, preserving the existing range
+// operator (^, ~, or exact). Returns false if it is not a direct dependency.
+function bumpPackageJson(pkgPath, pkg, version) {
+    const manifest = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+    for (const section of DEP_SECTIONS) {
+        const current = manifest[section]?.[pkg];
+        if (typeof current === 'string') {
+            // Only plain semver ranges (^, ~, or exact) can be safely rewritten to a
+            // bare version. workspace:/file:/link:/git/url specifiers carry semantics
+            // a version string would silently destroy — refuse rather than clobber.
+            if (/^(workspace:|file:|link:|git\+|github:|https?:|npm:)/.test(current)) {
+                throw new Error(`${pkg} uses a non-semver specifier (${current}) — cannot bump it here.`);
+            }
+            const prefix = /^[\^~]/.test(current) ? current[0] : '';
+            manifest[section][pkg] = `${prefix}${version}`;
+            writeFileSync(pkgPath, `${JSON.stringify(manifest, null, 2)}\n`);
+            return true;
+        }
+    }
+    return false;
+}
+// Accept only a concrete semver (optionally with a prerelease/build tag) so a
+// caller can't inject an arbitrary install specifier (tag, url, `../evil`).
+const SEMVER_RE = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z-.]+)?$/;
+export const updateDependency = pikkuFunc({
+    title: 'Update Dependency',
+    description: 'Bumps a dependency to the given version in package.json, runs `bun install`, re-runs `pikku audit`, and returns the refreshed report. The mechanical (free) remediation — it does NOT run the app or verify anything still works.',
+    expose: true,
+    func: async ({ metaService }, { package: pkg, version }) => {
+        if (!SEMVER_RE.test(version)) {
+            throw new Error(`Invalid version "${version}" — expected a concrete semver like 1.2.3.`);
+        }
+        if (!metaService?.basePath) {
+            throw new Error('Meta service is not configured. Ensure the console addon is set up with a MetaService.');
+        }
+        const projectDir = dirname(metaService.basePath);
+        const pkgPath = join(projectDir, 'package.json');
+        if (!existsSync(pkgPath)) {
+            throw new Error(`package.json not found at ${pkgPath}`);
+        }
+        if (!bumpPackageJson(pkgPath, pkg, version)) {
+            throw new Error(`${pkg} is not a direct dependency in package.json — cannot update it here.`);
+        }
+        // Resolve the lockfile against the new package.json. A non-zero exit is a
+        // real failure (surfaced to the caller); the app is never run or tested.
+        await spawnProcess('bun', ['install'], projectDir, { failOnNonZero: true });
+        // Refresh the audit so the finding clears in the UI.
+        await runPikkuAudit(projectDir);
+        return readAuditReport(metaService);
+    },
+});
+//# sourceMappingURL=update-dependency.function.js.map

package/dist/src/functions/update-dependency.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnF,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-email-template.function.d.ts

@@ -3,12 +3,12 @@ export declare const updateEmailTemplate: import("#pikku").PikkuFunctionConfig<{
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
     templateName: string;
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
     templateName: string;
     source: string;
 }, {

package/dist/src/functions/update-email-template.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;uEA6BlB,CAAA"}
+{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;uEA4BlB,CAAA"}

package/dist/src/functions/update-email-template.function.js

@@ -1,11 +1,10 @@
 import { NotFoundError } from '@pikku/core';
 import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuSessionlessFunc } from '#pikku';
-export const updateEmailTemplate = pikkuSessionlessFunc({
+import { pikkuFunc } from '#pikku';
+export const updateEmailTemplate = pikkuFunc({
     title: 'Update Email Template',
     description: 'Overwrites an email template HTML source file (templates/<name>.html) so small edits can be made from the console.',
     expose: true,
-    auth: false,
     func: async ({ metaService, codeEditService }, { templateName, source }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-email-template.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAE7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAMrD;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-body.function.d.ts

@@ -4,13 +4,13 @@ export declare const updateFunctionBody: import("#pikku").PikkuFunctionConfig<{
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
     sourceFile: string;
     exportedName: string;
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
     sourceFile: string;
     exportedName: string;
     body: string;

package/dist/src/functions/update-function-body.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;uEAgBlB,CAAA"}
+{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;uEAelB,CAAA"}

package/dist/src/functions/update-function-body.function.js

@@ -1,10 +1,9 @@
 import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuSessionlessFunc } from '#pikku';
-export const updateFunctionBody = pikkuSessionlessFunc({
+import { pikkuFunc } from '#pikku';
+export const updateFunctionBody = pikkuFunc({
     title: 'Update Function Body',
     description: 'Replaces the function body of a pikku function definition in source code and triggers a rebuild.',
     expose: true,
-    auth: false,
     func: async ({ codeEditService }, { sourceFile, exportedName, body }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-function-body.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAOpD;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-config.function.d.ts

@@ -5,13 +5,13 @@ export declare const updateFunctionConfig: import("#pikku").PikkuFunctionConfig<
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
     sourceFile: string;
     exportedName: string;
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
     sourceFile: string;
     exportedName: string;
     changes: FunctionConfigChanges;

package/dist/src/functions/update-function-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;uEAoBlB,CAAA"}
+{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;uEAmBlB,CAAA"}

package/dist/src/functions/update-function-config.function.js

@@ -1,10 +1,9 @@
 import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuSessionlessFunc } from '#pikku';
-export const updateFunctionConfig = pikkuSessionlessFunc({
+import { pikkuFunc } from '#pikku';
+export const updateFunctionConfig = pikkuFunc({
     title: 'Update Function Config',
     description: 'Updates the config properties of a pikku function definition in source code and triggers a rebuild.',
     expose: true,
-    auth: false,
     func: async ({ codeEditService }, { sourceFile, exportedName, changes }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-function-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAG7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAOtD;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/lib/audit-exec.d.ts

@@ -0,0 +1,10 @@
+import type { MetaService } from '@pikku/core/services';
+import type { SecurityAuditReport } from '@pikku/core';
+export declare function findBin(name: string, searchFrom: string): string;
+export declare function readAuditReport(metaService: MetaService): Promise<SecurityAuditReport | null>;
+export declare function spawnProcess(command: string, args: string[], cwd: string, { failOnNonZero, timeoutMs, }?: {
+    failOnNonZero?: boolean;
+    timeoutMs?: number;
+}): Promise<void>;
+export declare function runPikkuAudit(projectDir: string): Promise<void>;
+//# sourceMappingURL=audit-exec.d.ts.map

package/dist/src/lib/audit-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-exec.d.ts","sourceRoot":"","sources":["../../../src/lib/audit-exec.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAItD,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAUhE;AAID,wBAAsB,eAAe,CACnC,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAQrC;AAQD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,EACE,aAAqB,EACrB,SAAsB,GACvB,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,IAAI,CAAC,CAqCf;AAGD,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrE"}

package/dist/src/lib/audit-exec.js

@@ -0,0 +1,75 @@
+import { existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { spawn } from 'node:child_process';
+// Walk up from `searchFrom` for a `node_modules/.bin/<name>` executable,
+// falling back to the bare name (resolved via PATH) if none is found.
+export function findBin(name, searchFrom) {
+    let dir = searchFrom;
+    for (let i = 0; i < 6; i++) {
+        const candidate = join(dir, 'node_modules', '.bin', name);
+        if (existsSync(candidate))
+            return candidate;
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return name;
+}
+// Read + parse `.pikku/audit.json`. Absent or malformed → null (the UI treats
+// that as "no report yet"); a parse/read error here is not actionable.
+export async function readAuditReport(metaService) {
+    try {
+        const content = await metaService.readFile('audit.json');
+        if (!content)
+            return null;
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+// Spawn a process, resolving on close. Rejects on a spawn error, on a timeout
+// (kills the child so a hung `bun install` can't hang the request forever), and
+// — when `failOnNonZero` is set — on a non-zero exit. stderr is captured and
+// included in the rejection so failures are diagnosable. `pikku audit` exits
+// non-zero when it *finds* advisories yet still writes a valid report, so audit
+// runs stay lenient; `bun install` uses failOnNonZero so a real failure surfaces.
+export function spawnProcess(command, args, cwd, { failOnNonZero = false, timeoutMs = 5 * 60_000, } = {}) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn(command, args, {
+            cwd,
+            env: { ...process.env },
+            stdio: ['ignore', 'ignore', 'pipe'],
+        });
+        let stderr = '';
+        proc.stderr?.on('data', (d) => {
+            if (stderr.length < 8192)
+                stderr += d.toString();
+        });
+        const timer = setTimeout(() => {
+            proc.kill('SIGKILL');
+            reject(new Error(`${command} ${args.join(' ')} timed out after ${timeoutMs}ms`));
+        }, timeoutMs);
+        proc.on('close', (code) => {
+            clearTimeout(timer);
+            if (failOnNonZero && code !== 0) {
+                reject(new Error(`${command} ${args.join(' ')} failed (exit ${code})` +
+                    (stderr.trim() ? `: ${stderr.trim()}` : '')));
+            }
+            else {
+                resolve();
+            }
+        });
+        proc.on('error', (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+// Re-run `pikku audit --outdated` in the project, regenerating audit.json.
+export async function runPikkuAudit(projectDir) {
+    const pikku = findBin('pikku', projectDir);
+    await spawnProcess(process.execPath, [pikku, 'audit', '--outdated'], projectDir);
+}
+//# sourceMappingURL=audit-exec.js.map

package/dist/src/lib/audit-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-exec.js","sourceRoot":"","sources":["../../../src/lib/audit-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAI1C,yEAAyE;AACzE,sEAAsE;AACtE,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,UAAkB;IACtD,IAAI,GAAG,GAAG,UAAU,CAAA;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACzD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAK;QACzB,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAwB;IAExB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QACxD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AAChF,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,IAAc,EACd,GAAW,EACX,EACE,aAAa,GAAG,KAAK,EACrB,SAAS,GAAG,CAAC,GAAG,MAAM,MAC6B,EAAE;IAEvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAChC,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QAClD,CAAC,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACpB,MAAM,CACJ,IAAI,KAAK,CACP,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,SAAS,IAAI,CAC9D,CACF,CAAA;QACH,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,aAAa,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,CACJ,IAAI,KAAK,CACP,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG;oBAClD,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CACF,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,GAAG,CAAC,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC1C,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,CAAA;AAClF,CAAC"}

package/dist/src/lib/find-project-root.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolve the project root (the directory containing pikku.config.json) from
+ * the MetaService basePath. For a flat pikku project, dirname(basePath) IS
+ * the root. In a monorepo layout (e.g. the Fabric sandbox, where basePath is
+ * `packages/functions/.pikku`), pikku.config.json lives further up — walk up
+ * until we find it, matching the CLI's own findConfigFile() behavior.
+ */
+export declare function findProjectRoot(basePath: string): string;
+//# sourceMappingURL=find-project-root.d.ts.map

package/dist/src/lib/find-project-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-project-root.d.ts","sourceRoot":"","sources":["../../../src/lib/find-project-root.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQxD"}

package/dist/src/lib/find-project-root.js

@@ -0,0 +1,21 @@
+import { existsSync } from 'node:fs';
+import { dirname } from 'node:path';
+/**
+ * Resolve the project root (the directory containing pikku.config.json) from
+ * the MetaService basePath. For a flat pikku project, dirname(basePath) IS
+ * the root. In a monorepo layout (e.g. the Fabric sandbox, where basePath is
+ * `packages/functions/.pikku`), pikku.config.json lives further up — walk up
+ * until we find it, matching the CLI's own findConfigFile() behavior.
+ */
+export function findProjectRoot(basePath) {
+    let dir = dirname(basePath);
+    while (true) {
+        if (existsSync(`${dir}/pikku.config.json`))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return dirname(basePath);
+        dir = parent;
+    }
+}
+//# sourceMappingURL=find-project-root.js.map

package/dist/src/lib/find-project-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-project-root.js","sourceRoot":"","sources":["../../../src/lib/find-project-root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,GAAG,GAAG,oBAAoB,CAAC;YAAE,OAAO,GAAG,CAAA;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC5C,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/src/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,uBAAuB,0MAyEnC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,uBAAuB,0MAwEnC,CAAA"}

package/dist/src/services.js

@@ -4,6 +4,7 @@ import { AddonService } from './services/addon.service.js';
 import { OAuthService } from './services/oauth.service.js';
 import { StateDiffService } from './services/state-diff.service.js';
 import { DbSchemaService } from './services/db-schema.service.js';
+import { findProjectRoot } from './lib/find-project-root.js';
 export const createSingletonServices = pikkuAddonServices(async (_config, { variables, metaService: existingMetaService, aiAgentRunner, schedulerService, agentRunService, workflowService, workflowRunService, aiStorage, aiRunState, deploymentService, credentialService, }) => {
     if (!existingMetaService) {
         throw new Error('metaService is required for the console addon. Set it in your createSingletonServices using PikkuMetaService from #pikku/pikku-meta-service.gen.js');
@@ -19,8 +20,7 @@ export const createSingletonServices = pikkuAddonServices(async (_config, { vari
     let stateDiffService = null;
     let dbSchemaService = null;
     if (metaBasePath) {
-        const { dirname } = await import('node:path');
-        const projectRoot = dirname(metaBasePath);
+        const projectRoot = findProjectRoot(metaBasePath);
         stateDiffService = new StateDiffService(projectRoot);
         dbSchemaService = new DbSchemaService(metaService);
         // code-edit.service pulls in the TypeScript compiler and is deliberately a

package/dist/src/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAEjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EACH,OAAO,EACP,EACE,SAAS,EACT,WAAW,EAAE,mBAAmB,EAChC,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,iBAAiB,GAClB,EACD,EAAE;IACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAA;IACvC,MAAM,YAAY,GAChB,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,6BAA6B,CAAA;IAE1E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IACzB,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAA;IAEvC,MAAM,YAAY,GAAG,mBAAmB,EAAE,QAAQ,CAAA;IAClD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;QACzC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAClD,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,iCAAiC,CAAA;YACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,eAAe;QACf,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,gBAAgB;QAChB,eAAe;KAChB,CAAA;AACH,CAAC,CACF,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EACH,OAAO,EACP,EACE,SAAS,EACT,WAAW,EAAE,mBAAmB,EAChC,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,iBAAiB,GAClB,EACD,EAAE;IACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAA;IACvC,MAAM,YAAY,GAChB,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,6BAA6B,CAAA;IAE1E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IACzB,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAA;IAEvC,MAAM,YAAY,GAAG,mBAAmB,EAAE,QAAQ,CAAA;IAClD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QACjD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAClD,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,iCAAiC,CAAA;YACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,eAAe;QACf,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,gBAAgB;QAChB,eAAe;KAChB,CAAA;AACH,CAAC,CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/addon-console",
-  "version": "0.12.22",
+  "version": "0.12.23",
   "type": "module",
   "imports": {
     "#pikku": {
@@ -38,11 +38,11 @@
     "test:coverage": "bash run-tests.sh --coverage"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.50"
+    "@pikku/core": "^0.12.51"
   },
   "devDependencies": {
-    "@pikku/cli": "^0.12.66",
-    "@pikku/core": "^0.12.50",
+    "@pikku/cli": "^0.12.67",
+    "@pikku/core": "^0.12.51",
     "oauth2-mock-server": "^7.1.1",
     "typescript": "^6.0.3"
   },