@pikku/addon-console 0.12.25 → 0.12.27

package/dist/src/functions/list-webhook-deliveries.function.d.ts

@@ -0,0 +1,12 @@
+import type { WebhookDeliveryRecord } from '@pikku/core/services';
+export declare const listWebhookDeliveries: import("#pikku").PikkuFunctionConfig<{
+    organizationId?: string;
+    limit?: number;
+}, WebhookDeliveryRecord[], "rpc" | "session", import("#pikku").PikkuFunction<{
+    organizationId?: string;
+    limit?: number;
+}, WebhookDeliveryRecord[], "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    organizationId?: string;
+    limit?: number;
+}, WebhookDeliveryRecord[], "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=list-webhook-deliveries.function.d.ts.map

package/dist/src/functions/list-webhook-deliveries.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-webhook-deliveries.function.d.ts","sourceRoot":"","sources":["../../../src/functions/list-webhook-deliveries.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAGjE,eAAO,MAAM,qBAAqB;qBACb,MAAM;YAAU,MAAM;;qBAAtB,MAAM;YAAU,MAAM;;qBAAtB,MAAM;YAAU,MAAM;gGAazC,CAAA"}

package/dist/src/functions/list-webhook-deliveries.function.js

@@ -0,0 +1,14 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const listWebhookDeliveries = pikkuFunc({
+    title: 'List Webhook Deliveries',
+    description: 'Lists outgoing webhook deliveries (most recent first), optionally scoped to an organization.',
+    expose: true,
+    func: async ({ webhookService }, input) => {
+        if (!webhookService) {
+            throw new MissingServiceError('webhookService is not configured');
+        }
+        return webhookService.listDeliveries(input ?? undefined);
+    },
+});
+//# sourceMappingURL=list-webhook-deliveries.function.js.map

package/dist/src/functions/list-webhook-deliveries.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-webhook-deliveries.function.js","sourceRoot":"","sources":["../../../src/functions/list-webhook-deliveries.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAExD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAG5C;IACA,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,8FAA8F;IAChG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAA;QACnE,CAAC;QACD,OAAO,cAAc,CAAC,cAAc,CAAC,KAAK,IAAI,SAAS,CAAC,CAAA;IAC1D,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-add-scope-to-user.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeAddScopeToUser: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-add-scope-to-user.function.d.ts.map

package/dist/src/functions/scope-add-scope-to-user.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-scope-to-user.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-add-scope-to-user.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,mBAAmB;YACpB,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-add-scope-to-user.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeAddScopeToUser = pikkuFunc({
+    title: 'Grant Scope',
+    description: 'Grants a scope directly to a user, outside of any role. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, scope }, { session }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.addScopeToUser(userId, scope, session?.userId);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-add-scope-to-user.function.js.map

package/dist/src/functions/scope-add-scope-to-user.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-scope-to-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-scope-to-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAG1C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-add-user-to-role.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeAddUserToRole: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-add-user-to-role.function.d.ts.map

package/dist/src/functions/scope-add-user-to-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-user-to-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-add-user-to-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;YACnB,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-add-user-to-role.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeAddUserToRole = pikkuFunc({
+    title: 'Grant Role',
+    description: 'Grants a role to a user. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, role }, { session }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.addUserToRole(userId, role, session?.userId);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-add-user-to-role.function.js.map

package/dist/src/functions/scope-add-user-to-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-user-to-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-user-to-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,4EAA4E;IAC9E,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-create-role.function.d.ts

@@ -0,0 +1,20 @@
+export declare const scopeCreateRole: import("#pikku").PikkuFunctionConfig<{
+    name: string;
+    description?: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    name: string;
+    description?: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    name: string;
+    description?: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-create-role.function.d.ts.map

package/dist/src/functions/scope-create-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-create-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-create-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe;UAClB,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;aAC3C,OAAO;;UADV,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;aAC3C,OAAO;;UADV,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;aAC3C,OAAO;uEAelB,CAAA"}

package/dist/src/functions/scope-create-role.function.js

@@ -0,0 +1,18 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeCreateRole = pikkuFunc({
+    title: 'Create Role',
+    description: 'Creates a role granting the given scopes.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { name, description, scopes }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        // An undeclared scope is rejected by the pikku_scopes foreign key, so the
+        // database is the one enforcing the vocabulary — not this function.
+        await scopeService.createRole({ name, description, scopes });
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-create-role.function.js.map

package/dist/src/functions/scope-create-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-create-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-create-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-delete-role.function.d.ts

@@ -0,0 +1,14 @@
+export declare const scopeDeleteRole: import("#pikku").PikkuFunctionConfig<{
+    name: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    name: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    name: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-delete-role.function.d.ts.map

package/dist/src/functions/scope-delete-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-delete-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-delete-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe;UAClB,MAAM;;aACH,OAAO;;UADV,MAAM;;aACH,OAAO;;UADV,MAAM;;aACH,OAAO;uEAalB,CAAA"}

package/dist/src/functions/scope-delete-role.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeDeleteRole = pikkuFunc({
+    title: 'Delete Role',
+    description: 'Deletes a role, revoking it from every user who holds it.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { name }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.deleteRole(name);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-delete-role.function.js.map

package/dist/src/functions/scope-delete-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-delete-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-delete-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACzC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-declared.function.d.ts

@@ -0,0 +1,18 @@
+export type DeclaredScopeEntry = {
+    id: string;
+    description?: string;
+    /**
+     * False for a scope still in the store but no longer declared in code. It
+     * authorizes nothing — no function can require it — and is awaiting
+     * `pikku scopes prune`.
+     */
+    declared: boolean;
+};
+export declare const scopeListDeclared: import("#pikku").PikkuFunctionConfig<null, {
+    scopes: DeclaredScopeEntry[];
+}, "rpc" | "session", import("#pikku").PikkuFunction<null, {
+    scopes: DeclaredScopeEntry[];
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<null, {
+    scopes: DeclaredScopeEntry[];
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-list-declared.function.d.ts.map

package/dist/src/functions/scope-list-declared.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-declared.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-declared.function.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,iBAAiB;YAElB,kBAAkB,EAAE;;YAApB,kBAAkB,EAAE;;YAApB,kBAAkB,EAAE;uEAe9B,CAAA"}

package/dist/src/functions/scope-list-declared.function.js

@@ -0,0 +1,15 @@
+import { pikkuFunc } from '#pikku';
+export const scopeListDeclared = pikkuFunc({
+    title: 'List Declared Scopes',
+    description: 'Lists the scope vocabulary a role can be composed from, flagging any that are no longer declared in code.',
+    expose: true,
+    scopes: ['pikku:scopes:read'],
+    func: async ({ scopeService }) => {
+        if (!scopeService) {
+            return { scopes: [] };
+        }
+        const scopes = await scopeService.listScopes();
+        return { scopes: scopes.sort((a, b) => a.id.localeCompare(b.id)) };
+    },
+});
+//# sourceMappingURL=scope-list-declared.function.js.map

package/dist/src/functions/scope-list-declared.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-declared.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-declared.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAalC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;QAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACpE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-roles.function.d.ts

@@ -0,0 +1,9 @@
+import type { Role } from '@pikku/core/services';
+export declare const scopeListRoles: import("#pikku").PikkuFunctionConfig<null, {
+    roles: Role[];
+}, "rpc" | "session", import("#pikku").PikkuFunction<null, {
+    roles: Role[];
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<null, {
+    roles: Role[];
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-list-roles.function.d.ts.map

package/dist/src/functions/scope-list-roles.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAEhD,eAAO,MAAM,cAAc;WAA4B,IAAI,EAAE;;WAAN,IAAI,EAAE;;WAAN,IAAI,EAAE;uEAW3D,CAAA"}

package/dist/src/functions/scope-list-roles.function.js

@@ -0,0 +1,14 @@
+import { pikkuFunc } from '#pikku';
+export const scopeListRoles = pikkuFunc({
+    title: 'List Roles',
+    description: 'Lists every role and the scopes it grants.',
+    expose: true,
+    scopes: ['pikku:scopes:read'],
+    func: async ({ scopeService }) => {
+        if (!scopeService) {
+            return { roles: [] };
+        }
+        return { roles: await scopeService.listRoles() };
+    },
+});
+//# sourceMappingURL=scope-list-roles.function.js.map

package/dist/src/functions/scope-list-roles.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAA0B;IAC/D,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,4CAA4C;IACzD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACtB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,CAAA;IAClD,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-user-roles.function.d.ts

@@ -0,0 +1,20 @@
+export declare const scopeListUserRoles: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+}, {
+    roles: string[];
+    scopes: string[];
+    directScopes: string[];
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+}, {
+    roles: string[];
+    scopes: string[];
+    directScopes: string[];
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+}, {
+    roles: string[];
+    scopes: string[];
+    directScopes: string[];
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-list-user-roles.function.d.ts.map

package/dist/src/functions/scope-list-user-roles.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-user-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;YACnB,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;uEAwB3D,CAAA"}

package/dist/src/functions/scope-list-user-roles.function.js

@@ -0,0 +1,23 @@
+import { pikkuFunc } from '#pikku';
+export const scopeListUserRoles = pikkuFunc({
+    title: 'List User Roles',
+    description: 'Lists the roles a user holds, the scopes granted to them directly, and the full set those resolve to.',
+    expose: true,
+    scopes: ['pikku:scopes:read'],
+    func: async ({ scopeService }, { userId }) => {
+        if (!scopeService) {
+            return { roles: [], scopes: [], directScopes: [] };
+        }
+        const [roles, scopes, directScopes] = await Promise.all([
+            scopeService.listUserRoles(userId),
+            scopeService.resolveScopes(userId),
+            scopeService.listUserScopes(userId),
+        ]);
+        return {
+            roles: roles.sort(),
+            scopes: scopes.sort(),
+            directScopes: directScopes.sort(),
+        };
+    },
+});
+//# sourceMappingURL=scope-list-user-roles.function.js.map

package/dist/src/functions/scope-list-user-roles.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-user-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;SAClC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeRemoveScopeFromUser: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-remove-scope-from-user.function.d.ts.map

package/dist/src/functions/scope-remove-scope-from-user.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-scope-from-user.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,wBAAwB;YACzB,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeRemoveScopeFromUser = pikkuFunc({
+    title: 'Revoke Scope',
+    description: 'Revokes a directly-granted scope from a user. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, scope }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.removeScopeFromUser(userId, scope);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-remove-scope-from-user.function.js.map

package/dist/src/functions/scope-remove-scope-from-user.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-scope-from-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,iGAAiG;IACnG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeRemoveUserFromRole: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-remove-user-from-role.function.d.ts.map

package/dist/src/functions/scope-remove-user-from-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-user-from-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,uBAAuB;YACxB,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeRemoveUserFromRole = pikkuFunc({
+    title: 'Revoke Role',
+    description: 'Revokes a role from a user. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, role }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.removeUserFromRole(userId, role);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-remove-user-from-role.function.js.map

package/dist/src/functions/scope-remove-user-from-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-user-from-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAG9C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,+EAA+E;IACjF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeSetRoleScopes: import("#pikku").PikkuFunctionConfig<{
+    name: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    name: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    name: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-set-role-scopes.function.d.ts.map

package/dist/src/functions/scope-set-role-scopes.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-set-role-scopes.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;UACrB,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeSetRoleScopes = pikkuFunc({
+    title: 'Set Role Scopes',
+    description: 'Replaces the scopes a role grants. Users holding it see the change on their next request.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { name, scopes }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.setRoleScopes(name, scopes);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-set-role-scopes.function.js.map

package/dist/src/functions/scope-set-role-scopes.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-set-role-scopes.function.js","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,2FAA2F;IAC7F,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/take-live-coverage.function.d.ts

@@ -1,3 +1,3 @@
-import type { FunctionCoverageReport } from './get-function-coverage.function.js';
+import type { FunctionCoverageReport } from '../lib/coverage-types.js';
 export declare const takeLiveCoverage: import("#pikku").PikkuFunctionConfig<null, FunctionCoverageReport | null, "rpc" | "session", import("#pikku").PikkuFunction<null, FunctionCoverageReport | null, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<null, FunctionCoverageReport | null, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
 //# sourceMappingURL=take-live-coverage.function.d.ts.map

package/dist/src/functions/take-live-coverage.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"take-live-coverage.function.d.ts","sourceRoot":"","sources":["../../../src/functions/take-live-coverage.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AAOjF,eAAO,MAAM,gBAAgB,sWAiC3B,CAAA"}
+{"version":3,"file":"take-live-coverage.function.d.ts","sourceRoot":"","sources":["../../../src/functions/take-live-coverage.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AAOtE,eAAO,MAAM,gBAAgB,sWAiC3B,CAAA"}

package/dist/src/lib/coverage-types.d.ts

@@ -0,0 +1,25 @@
+export type CoverageStatus = 'covered' | 'partial' | 'uncovered' | 'unknown';
+export interface FunctionCoverageEntry {
+    name: string;
+    sourceFile: string;
+    exposed: boolean;
+    description: string | null;
+    coveredLines: number;
+    totalLines: number;
+    missedLines: number[];
+    ratio: number;
+    status: CoverageStatus;
+}
+export interface FunctionCoverageReport {
+    generatedAt: string;
+    summary: {
+        total: number;
+        covered: number;
+        partial: number;
+        uncovered: number;
+        unknown: number;
+        overallRatio: number;
+    };
+    functions: FunctionCoverageEntry[];
+}
+//# sourceMappingURL=coverage-types.d.ts.map

package/dist/src/lib/coverage-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-types.d.ts","sourceRoot":"","sources":["../../../src/lib/coverage-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;AAE5E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,SAAS,EAAE,qBAAqB,EAAE,CAAA;CACnC"}

package/dist/src/lib/coverage-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=coverage-types.js.map

package/dist/src/lib/coverage-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-types.js","sourceRoot":"","sources":["../../../src/lib/coverage-types.ts"],"names":[],"mappings":""}

package/dist/src/lib/derive-instance-overrides.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Per-instance override derivation for a second-or-later `wireAddon` of the
+ * same package. The first instance of a package uses the package's documented
+ * logical names as-is (no overrides); once a package is installed a second
+ * time, both instances would otherwise resolve to the SAME secret/variable/
+ * credential. Namespace-scoping the new instance's names keeps them isolated.
+ *
+ * Overrides are only a sensible default the console writes into the generated
+ * wiring — the user owns the file and can drop or edit them (the runtime and
+ * inspector both treat overrides as optional, falling back to the logical name).
+ */
+export interface AddonDeclaredNames {
+    secrets: string[];
+    variables: string[];
+    credentials: string[];
+}
+export interface InstanceOverrides {
+    secretOverrides?: Record<string, string>;
+    variableOverrides?: Record<string, string>;
+    credentialOverrides?: Record<string, string>;
+}
+/** `@pikku/addon-mandrill` -> `mandrill`. */
+export declare const packageBase: (packageName: string) => string;
+export declare function deriveInstanceOverrides(namespace: string, packageName: string, declared: AddonDeclaredNames): InstanceOverrides;
+/**
+ * Read a freshly-installed addon package's declared logical names from the
+ * `.pikku` meta it ships in node_modules. Missing meta files are treated as
+ * "declares none" — an addon may have no secrets/variables/credentials.
+ */
+export declare function readAddonDeclaredNames(rootDir: string, packageName: string): Promise<AddonDeclaredNames>;
+//# sourceMappingURL=derive-instance-overrides.d.ts.map

package/dist/src/lib/derive-instance-overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-instance-overrides.d.ts","sourceRoot":"","sources":["../../../src/lib/derive-instance-overrides.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC7C;AASD,6CAA6C;AAC7C,eAAO,MAAM,WAAW,GAAI,aAAa,MAAM,KAAG,MACW,CAAA;AA2B7D,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,kBAAkB,GAC3B,iBAAiB,CAoBnB;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,kBAAkB,CAAC,CAyB7B"}