@pikku/addon-console 0.12.26 → 0.12.27

package/dist/src/functions/install-addon.function.js

@@ -1,24 +1,25 @@
-import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
+import { BadRequestError, ConflictError, LocalEnvironmentOnlyError, } from '@pikku/core/errors';
 import { pikkuSessionlessFunc } from '#pikku';
 import { findProjectRoot } from '../lib/find-project-root.js';
+import { deriveInstanceOverrides, readAddonDeclaredNames, } from '../lib/derive-instance-overrides.js';
 export const installAddon = pikkuSessionlessFunc({
     title: 'Install Addon',
     description: 'Installs a community addon package and creates the wiring file.',
     expose: true,
     auth: false,
     func: async ({ metaService }, { packageName, namespace, version }) => {
-        const { readFile, writeFile, mkdir } = await import('node:fs/promises');
+        const { readFile, writeFile, mkdir, readdir } = await import('node:fs/promises');
         const { join, dirname } = await import('node:path');
         const { existsSync } = await import('node:fs');
         const validPkg = /^(@[a-z0-9-]+\/)?[a-z0-9._-]+$/;
         if (!validPkg.test(packageName)) {
-            throw new Error(`Invalid package name: ${packageName}`);
+            throw new BadRequestError(`Invalid package name: ${packageName}`);
         }
         if (!/^[a-z0-9-]+$/.test(namespace)) {
-            throw new Error(`Invalid namespace: ${namespace}`);
+            throw new BadRequestError(`Invalid namespace: ${namespace}`);
         }
         if (version && !/^[a-z0-9._^~><=|-]+$/i.test(version)) {
-            throw new Error(`Invalid version: ${version}`);
+            throw new BadRequestError(`Invalid version: ${version}`);
         }
         const metaBasePath = metaService?.basePath;
         if (!metaBasePath) {
@@ -38,7 +39,7 @@ export const installAddon = pikkuSessionlessFunc({
         await mkdir(addonDir, { recursive: true });
         const wiringFile = join(addonDir, `${namespace}.addon.ts`);
         if (existsSync(wiringFile)) {
-            throw new Error(`Addon wiring file already exists: ${wiringFile}`);
+            throw new ConflictError(`An addon is already installed under the name "${namespace}". Pick a different instance name.`);
         }
         const pkg = version ? `${packageName}@${version}` : packageName;
         const pmLock = {
@@ -63,12 +64,23 @@ export const installAddon = pikkuSessionlessFunc({
         const cp = 'node:child_process';
         const { execFileSync } = await import(cp);
         execFileSync(pm, installArgs[pm], { cwd: rootDir, stdio: 'pipe' });
-        const typesImport = config.scaffold?.pikkuDir
-            ? `../${config.scaffold.pikkuDir.split('/').pop()}/pikku-types.gen.js`
-            : '../../.pikku/pikku-types.gen.js';
-        const wiringContent = `import { wireAddon } from '${typesImport}'
+        // A second-or-later instance of the SAME package would otherwise resolve to
+        // the same secrets/variables/credentials as the first — namespace-scope the
+        // new one so the two instances stay isolated. The first instance keeps the
+        // package's documented logical names (no overrides). Overrides are a
+        // sensible default only; the user owns this file and can drop or edit them.
+        const alreadyWired = await packageIsAlreadyWired(addonDir, packageName, readdir, readFile);
+        const overrides = alreadyWired
+            ? deriveInstanceOverrides(namespace, packageName, await readAddonDeclaredNames(rootDir, packageName))
+            : {};
+        // Import via the project's `#pikku` subpath alias, not a computed relative
+        // path: every pikku project defines `#pikku/*`, and it resolves to the
+        // generated types regardless of where the addon wiring physically sits (a
+        // relative guess breaks the moment scaffold.pikkuDir and the real .pikku
+        // location diverge).
+        const wiringContent = `import { wireAddon } from '#pikku/pikku-types.gen.js'
 
-wireAddon({ name: '${namespace}', package: '${packageName}' })
+wireAddon(${serializeWireAddon(namespace, packageName, overrides)})
 `;
         await writeFile(wiringFile, wiringContent, 'utf-8');
         return {
@@ -77,4 +89,46 @@ wireAddon({ name: '${namespace}', package: '${packageName}' })
         };
     },
 });
+/** True if any existing `*.addon.ts` in the addons dir already wires this
+ *  package — i.e. this install is a second-or-later instance. */
+async function packageIsAlreadyWired(addonDir, packageName, readdir, readFile) {
+    let entries;
+    try {
+        entries = await readdir(addonDir);
+    }
+    catch {
+        return false;
+    }
+    for (const entry of entries) {
+        if (!entry.endsWith('.addon.ts'))
+            continue;
+        const content = await readFile(`${addonDir}/${entry}`, 'utf-8').catch(() => '');
+        // Match `package: 'x'` / `package: "x"` for this exact package name.
+        if (new RegExp(`package:\\s*['"]${packageName.replace(/[.*+?^${}()|[\]\\/-]/g, '\\$&')}['"]`).test(content)) {
+            return true;
+        }
+    }
+    return false;
+}
+/** Serialize the `wireAddon({...})` argument. A plain instance stays a compact
+ *  one-liner; an instance with overrides expands to a readable multi-line form. */
+function serializeWireAddon(namespace, packageName, overrides) {
+    const maps = Object.entries(overrides).filter(([, m]) => m && Object.keys(m).length > 0);
+    if (maps.length === 0) {
+        return `{ name: '${namespace}', package: '${packageName}' }`;
+    }
+    const lines = [
+        `{`,
+        `  name: '${namespace}',`,
+        `  package: '${packageName}',`,
+        ...maps.map(([kind, map]) => {
+            const pairs = Object.entries(map)
+                .map(([k, v]) => `'${k}': '${v}'`)
+                .join(', ');
+            return `  ${kind}: { ${pairs} },`;
+        }),
+        `}`,
+    ];
+    return lines.join('\n');
+}
 //# sourceMappingURL=install-addon.function.js.map

package/dist/src/functions/install-addon.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"install-addon.function.js","sourceRoot":"","sources":["../../../src/functions/install-addon.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAO9C;IACA,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,iEAAiE;IACnE,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;QACnE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACvE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,gCAAgC,CAAA;QACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,EAAE,QAAQ,CAAA;QAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QAE7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;QAE9D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAA;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC3D,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,WAAW,CAAC,CAAA;QAC1D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAA;QACpE,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;QAE/D,MAAM,MAAM,GAA2B;YACrC,WAAW,EAAE,MAAM;YACnB,gBAAgB,EAAE,MAAM;YACxB,mBAAmB,EAAE,KAAK;YAC1B,WAAW,EAAE,KAAK;SACnB,CAAA;QACD,IAAI,EAAE,GAAG,MAAM,CAAA;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACpC,EAAE,GAAG,IAAI,CAAA;gBACT,MAAK;YACP,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAA6B;YAC5C,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;YAClB,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;YACrB,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;YAClB,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;SAClB,CAAA;QAED,MAAM,EAAE,GAAG,oBAAoB,CAAA;QAC/B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAA;QACzC,YAAY,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAEnE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ;YAC3C,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,qBAAqB;YACtE,CAAC,CAAC,iCAAiC,CAAA;QAErC,MAAM,aAAa,GAAG,8BAA8B,WAAW;;qBAE9C,SAAS,gBAAgB,WAAW;CACxD,CAAA;QACG,MAAM,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAEnD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,aAAa,WAAW,gBAAgB,UAAU,EAAE;SAC9D,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"install-addon.function.js","sourceRoot":"","sources":["../../../src/functions/install-addon.function.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,yBAAyB,GAC1B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,qCAAqC,CAAA;AAE5C,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAO9C;IACA,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,iEAAiE;IACnE,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;QACnE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAC3C,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAClC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,gCAAgC,CAAA;QACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAA;QACnE,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,eAAe,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,eAAe,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,EAAE,QAAQ,CAAA;QAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QAE7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;QAE9D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAA;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC3D,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,WAAW,CAAC,CAAA;QAC1D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACrB,iDAAiD,SAAS,oCAAoC,CAC/F,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;QAE/D,MAAM,MAAM,GAA2B;YACrC,WAAW,EAAE,MAAM;YACnB,gBAAgB,EAAE,MAAM;YACxB,mBAAmB,EAAE,KAAK;YAC1B,WAAW,EAAE,KAAK;SACnB,CAAA;QACD,IAAI,EAAE,GAAG,MAAM,CAAA;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACpC,EAAE,GAAG,IAAI,CAAA;gBACT,MAAK;YACP,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAA6B;YAC5C,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;YAClB,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;YACrB,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;YAClB,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;SAClB,CAAA;QAED,MAAM,EAAE,GAAG,oBAAoB,CAAA;QAC/B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAA;QACzC,YAAY,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAEnE,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,qEAAqE;QACrE,4EAA4E;QAC5E,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAC9C,QAAQ,EACR,WAAW,EACX,OAAO,EACP,QAAQ,CACT,CAAA;QACD,MAAM,SAAS,GAAG,YAAY;YAC5B,CAAC,CAAC,uBAAuB,CACrB,SAAS,EACT,WAAW,EACX,MAAM,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CACnD;YACH,CAAC,CAAC,EAAE,CAAA;QAEN,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,aAAa,GAAG;;YAEd,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC;CAChE,CAAA;QACG,MAAM,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAEnD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,aAAa,WAAW,gBAAgB,UAAU,EAAE;SAC9D,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;iEACiE;AACjE,KAAK,UAAU,qBAAqB,CAClC,QAAgB,EAChB,WAAmB,EACnB,OAA4C,EAC5C,QAA8D;IAE9D,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAQ;QAC1C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CACnE,GAAG,EAAE,CAAC,EAAE,CACT,CAAA;QACD,qEAAqE;QACrE,IACE,IAAI,MAAM,CACR,mBAAmB,WAAW,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAC9E,CAAC,IAAI,CAAC,OAAO,CAAC,EACf,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;mFACmF;AACnF,SAAS,kBAAkB,CACzB,SAAiB,EACjB,WAAmB,EACnB,SAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CACJ,CAAA;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,YAAY,SAAS,gBAAgB,WAAW,KAAK,CAAA;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,GAAG;QACH,YAAY,SAAS,IAAI;QACzB,eAAe,WAAW,IAAI;QAC9B,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;iBACjC,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,CAAA;QACnC,CAAC,CAAC;QACF,GAAG;KACJ,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/src/functions/list-webhook-deliveries.function.d.ts

@@ -0,0 +1,12 @@
+import type { WebhookDeliveryRecord } from '@pikku/core/services';
+export declare const listWebhookDeliveries: import("#pikku").PikkuFunctionConfig<{
+    organizationId?: string;
+    limit?: number;
+}, WebhookDeliveryRecord[], "rpc" | "session", import("#pikku").PikkuFunction<{
+    organizationId?: string;
+    limit?: number;
+}, WebhookDeliveryRecord[], "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    organizationId?: string;
+    limit?: number;
+}, WebhookDeliveryRecord[], "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=list-webhook-deliveries.function.d.ts.map

package/dist/src/functions/list-webhook-deliveries.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-webhook-deliveries.function.d.ts","sourceRoot":"","sources":["../../../src/functions/list-webhook-deliveries.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAGjE,eAAO,MAAM,qBAAqB;qBACb,MAAM;YAAU,MAAM;;qBAAtB,MAAM;YAAU,MAAM;;qBAAtB,MAAM;YAAU,MAAM;gGAazC,CAAA"}

package/dist/src/functions/list-webhook-deliveries.function.js

@@ -0,0 +1,14 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const listWebhookDeliveries = pikkuFunc({
+    title: 'List Webhook Deliveries',
+    description: 'Lists outgoing webhook deliveries (most recent first), optionally scoped to an organization.',
+    expose: true,
+    func: async ({ webhookService }, input) => {
+        if (!webhookService) {
+            throw new MissingServiceError('webhookService is not configured');
+        }
+        return webhookService.listDeliveries(input ?? undefined);
+    },
+});
+//# sourceMappingURL=list-webhook-deliveries.function.js.map

package/dist/src/functions/list-webhook-deliveries.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-webhook-deliveries.function.js","sourceRoot":"","sources":["../../../src/functions/list-webhook-deliveries.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAExD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAG5C;IACA,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,8FAA8F;IAChG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAA;QACnE,CAAC;QACD,OAAO,cAAc,CAAC,cAAc,CAAC,KAAK,IAAI,SAAS,CAAC,CAAA;IAC1D,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-add-scope-to-user.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeAddScopeToUser: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-add-scope-to-user.function.d.ts.map

package/dist/src/functions/scope-add-scope-to-user.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-scope-to-user.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-add-scope-to-user.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,mBAAmB;YACpB,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-add-scope-to-user.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeAddScopeToUser = pikkuFunc({
+    title: 'Grant Scope',
+    description: 'Grants a scope directly to a user, outside of any role. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, scope }, { session }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.addScopeToUser(userId, scope, session?.userId);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-add-scope-to-user.function.js.map

package/dist/src/functions/scope-add-scope-to-user.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-scope-to-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-scope-to-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAG1C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-add-user-to-role.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeAddUserToRole: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-add-user-to-role.function.d.ts.map

package/dist/src/functions/scope-add-user-to-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-user-to-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-add-user-to-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;YACnB,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-add-user-to-role.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeAddUserToRole = pikkuFunc({
+    title: 'Grant Role',
+    description: 'Grants a role to a user. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, role }, { session }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.addUserToRole(userId, role, session?.userId);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-add-user-to-role.function.js.map

package/dist/src/functions/scope-add-user-to-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-add-user-to-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-user-to-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,4EAA4E;IAC9E,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-create-role.function.d.ts

@@ -0,0 +1,20 @@
+export declare const scopeCreateRole: import("#pikku").PikkuFunctionConfig<{
+    name: string;
+    description?: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    name: string;
+    description?: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    name: string;
+    description?: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-create-role.function.d.ts.map

package/dist/src/functions/scope-create-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-create-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-create-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe;UAClB,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;aAC3C,OAAO;;UADV,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;aAC3C,OAAO;;UADV,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;aAC3C,OAAO;uEAelB,CAAA"}

package/dist/src/functions/scope-create-role.function.js

@@ -0,0 +1,18 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeCreateRole = pikkuFunc({
+    title: 'Create Role',
+    description: 'Creates a role granting the given scopes.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { name, description, scopes }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        // An undeclared scope is rejected by the pikku_scopes foreign key, so the
+        // database is the one enforcing the vocabulary — not this function.
+        await scopeService.createRole({ name, description, scopes });
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-create-role.function.js.map

package/dist/src/functions/scope-create-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-create-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-create-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-delete-role.function.d.ts

@@ -0,0 +1,14 @@
+export declare const scopeDeleteRole: import("#pikku").PikkuFunctionConfig<{
+    name: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    name: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    name: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-delete-role.function.d.ts.map

package/dist/src/functions/scope-delete-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-delete-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-delete-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe;UAClB,MAAM;;aACH,OAAO;;UADV,MAAM;;aACH,OAAO;;UADV,MAAM;;aACH,OAAO;uEAalB,CAAA"}

package/dist/src/functions/scope-delete-role.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeDeleteRole = pikkuFunc({
+    title: 'Delete Role',
+    description: 'Deletes a role, revoking it from every user who holds it.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { name }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.deleteRole(name);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-delete-role.function.js.map

package/dist/src/functions/scope-delete-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-delete-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-delete-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACzC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-declared.function.d.ts

@@ -0,0 +1,18 @@
+export type DeclaredScopeEntry = {
+    id: string;
+    description?: string;
+    /**
+     * False for a scope still in the store but no longer declared in code. It
+     * authorizes nothing — no function can require it — and is awaiting
+     * `pikku scopes prune`.
+     */
+    declared: boolean;
+};
+export declare const scopeListDeclared: import("#pikku").PikkuFunctionConfig<null, {
+    scopes: DeclaredScopeEntry[];
+}, "rpc" | "session", import("#pikku").PikkuFunction<null, {
+    scopes: DeclaredScopeEntry[];
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<null, {
+    scopes: DeclaredScopeEntry[];
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-list-declared.function.d.ts.map

package/dist/src/functions/scope-list-declared.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-declared.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-declared.function.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,iBAAiB;YAElB,kBAAkB,EAAE;;YAApB,kBAAkB,EAAE;;YAApB,kBAAkB,EAAE;uEAe9B,CAAA"}

package/dist/src/functions/scope-list-declared.function.js

@@ -0,0 +1,15 @@
+import { pikkuFunc } from '#pikku';
+export const scopeListDeclared = pikkuFunc({
+    title: 'List Declared Scopes',
+    description: 'Lists the scope vocabulary a role can be composed from, flagging any that are no longer declared in code.',
+    expose: true,
+    scopes: ['pikku:scopes:read'],
+    func: async ({ scopeService }) => {
+        if (!scopeService) {
+            return { scopes: [] };
+        }
+        const scopes = await scopeService.listScopes();
+        return { scopes: scopes.sort((a, b) => a.id.localeCompare(b.id)) };
+    },
+});
+//# sourceMappingURL=scope-list-declared.function.js.map

package/dist/src/functions/scope-list-declared.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-declared.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-declared.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAalC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;QAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACpE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-roles.function.d.ts

@@ -0,0 +1,9 @@
+import type { Role } from '@pikku/core/services';
+export declare const scopeListRoles: import("#pikku").PikkuFunctionConfig<null, {
+    roles: Role[];
+}, "rpc" | "session", import("#pikku").PikkuFunction<null, {
+    roles: Role[];
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<null, {
+    roles: Role[];
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-list-roles.function.d.ts.map

package/dist/src/functions/scope-list-roles.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAEhD,eAAO,MAAM,cAAc;WAA4B,IAAI,EAAE;;WAAN,IAAI,EAAE;;WAAN,IAAI,EAAE;uEAW3D,CAAA"}

package/dist/src/functions/scope-list-roles.function.js

@@ -0,0 +1,14 @@
+import { pikkuFunc } from '#pikku';
+export const scopeListRoles = pikkuFunc({
+    title: 'List Roles',
+    description: 'Lists every role and the scopes it grants.',
+    expose: true,
+    scopes: ['pikku:scopes:read'],
+    func: async ({ scopeService }) => {
+        if (!scopeService) {
+            return { roles: [] };
+        }
+        return { roles: await scopeService.listRoles() };
+    },
+});
+//# sourceMappingURL=scope-list-roles.function.js.map

package/dist/src/functions/scope-list-roles.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAA0B;IAC/D,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,4CAA4C;IACzD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACtB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,CAAA;IAClD,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-user-roles.function.d.ts

@@ -0,0 +1,20 @@
+export declare const scopeListUserRoles: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+}, {
+    roles: string[];
+    scopes: string[];
+    directScopes: string[];
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+}, {
+    roles: string[];
+    scopes: string[];
+    directScopes: string[];
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+}, {
+    roles: string[];
+    scopes: string[];
+    directScopes: string[];
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-list-user-roles.function.d.ts.map

package/dist/src/functions/scope-list-user-roles.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-user-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;YACnB,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;uEAwB3D,CAAA"}

package/dist/src/functions/scope-list-user-roles.function.js

@@ -0,0 +1,23 @@
+import { pikkuFunc } from '#pikku';
+export const scopeListUserRoles = pikkuFunc({
+    title: 'List User Roles',
+    description: 'Lists the roles a user holds, the scopes granted to them directly, and the full set those resolve to.',
+    expose: true,
+    scopes: ['pikku:scopes:read'],
+    func: async ({ scopeService }, { userId }) => {
+        if (!scopeService) {
+            return { roles: [], scopes: [], directScopes: [] };
+        }
+        const [roles, scopes, directScopes] = await Promise.all([
+            scopeService.listUserRoles(userId),
+            scopeService.resolveScopes(userId),
+            scopeService.listUserScopes(userId),
+        ]);
+        return {
+            roles: roles.sort(),
+            scopes: scopes.sort(),
+            directScopes: directScopes.sort(),
+        };
+    },
+});
+//# sourceMappingURL=scope-list-user-roles.function.js.map

package/dist/src/functions/scope-list-user-roles.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list-user-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;SAClC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeRemoveScopeFromUser: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    scope: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-remove-scope-from-user.function.d.ts.map

package/dist/src/functions/scope-remove-scope-from-user.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-scope-from-user.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,wBAAwB;YACzB,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeRemoveScopeFromUser = pikkuFunc({
+    title: 'Revoke Scope',
+    description: 'Revokes a directly-granted scope from a user. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, scope }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.removeScopeFromUser(userId, scope);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-remove-scope-from-user.function.js.map

package/dist/src/functions/scope-remove-scope-from-user.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-scope-from-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,iGAAiG;IACnG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeRemoveUserFromRole: import("#pikku").PikkuFunctionConfig<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    userId: string;
+    role: string;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-remove-user-from-role.function.d.ts.map

package/dist/src/functions/scope-remove-user-from-role.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-user-from-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,uBAAuB;YACxB,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeRemoveUserFromRole = pikkuFunc({
+    title: 'Revoke Role',
+    description: 'Revokes a role from a user. Takes effect on their next request — no re-login.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { userId, role }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.removeUserFromRole(userId, role);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-remove-user-from-role.function.js.map

package/dist/src/functions/scope-remove-user-from-role.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-remove-user-from-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAG9C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,+EAA+E;IACjF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,YAAY,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.d.ts

@@ -0,0 +1,17 @@
+export declare const scopeSetRoleScopes: import("#pikku").PikkuFunctionConfig<{
+    name: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    name: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunctionSessionless<{
+    name: string;
+    scopes: string[];
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+//# sourceMappingURL=scope-set-role-scopes.function.d.ts.map

package/dist/src/functions/scope-set-role-scopes.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-set-role-scopes.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;UACrB,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;uEAclB,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.js

@@ -0,0 +1,16 @@
+import { MissingServiceError } from '@pikku/core/errors';
+import { pikkuFunc } from '#pikku';
+export const scopeSetRoleScopes = pikkuFunc({
+    title: 'Set Role Scopes',
+    description: 'Replaces the scopes a role grants. Users holding it see the change on their next request.',
+    expose: true,
+    scopes: ['pikku:scopes:manage'],
+    func: async ({ scopeService }, { name, scopes }) => {
+        if (!scopeService) {
+            throw new MissingServiceError('ScopeService is not configured');
+        }
+        await scopeService.setRoleScopes(name, scopes);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=scope-set-role-scopes.function.js.map