@pikku/addon-console 0.12.36 → 0.12.40

package/dist/src/lib/resolve-audit-users.js

@@ -0,0 +1,56 @@
+/**
+ * Resolves the user ids on a page of the trail to the people behind them.
+ *
+ * The trail stores an id because that is the only thing stable enough to record
+ * — a name can change after the event, and an audit row must not. The join
+ * therefore happens at read time, and it happens here rather than in SQL: the
+ * sink and the user table are routinely different databases (and on a queue
+ * sink, different systems entirely), so there is no query that spans both.
+ *
+ * Read through better-auth's own adapter as the server, not as the caller.
+ * `pikku:audit:read` already grants "every recorded action, and which user took
+ * it", so a reader who may see the id may see the name — an opaque id would be
+ * the same disclosure, just unreadable. Reading the adapter directly also
+ * reaches actor rows, which the admin user list deliberately hides: nobody
+ * picks a scenario actor out of a people-picker, but a trail that cannot say an
+ * actor did it is worse than one that names them.
+ *
+ * An id missing from the result is not an error: a deleted account leaves its
+ * events behind on purpose, and the caller falls back to showing the id.
+ */
+export const resolveAuditUsers = async (auth, userIds, logger) => {
+    const ids = [...new Set(userIds.filter((id) => !!id))];
+    if (!auth || ids.length === 0) {
+        return {};
+    }
+    let adapter;
+    try {
+        adapter = (await (await auth()).$context)?.internalAdapter;
+    }
+    catch (error) {
+        logger?.warn(`Audit users could not be resolved, showing ids instead: ${error}`);
+        return {};
+    }
+    if (!adapter?.findUserById) {
+        return {};
+    }
+    const directory = {};
+    await Promise.all(ids.map(async (id) => {
+        try {
+            const user = await adapter.findUserById(id);
+            if (user) {
+                directory[id] = {
+                    name: user.name || undefined,
+                    email: user.email || undefined,
+                    actor: user.actor === true ? true : undefined,
+                };
+            }
+        }
+        catch (error) {
+            // One unreadable row must not cost the whole page its names.
+            logger?.debug?.(`Audit user '${id}' could not be resolved: ${error}`);
+        }
+    }));
+    return directory;
+};
+//# sourceMappingURL=resolve-audit-users.js.map

package/dist/src/lib/resolve-audit-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-audit-users.js","sourceRoot":"","sources":["../../../src/lib/resolve-audit-users.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,IAAqD,EACrD,OAAkC,EAClC,MAAwC,EACX,EAAE;IAC/B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACpE,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,OAAoE,CAAA;IACxE,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,CACV,2DAA2D,KAAK,EAAE,CACnE,CAAA;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,SAAS,GAAuB,EAAE,CAAA;IACxC,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAa,CAAC,EAAE,CAAC,CAAA;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,GAAG;oBACd,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;oBAC5B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;oBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBAC9C,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,MAAM,EAAE,KAAK,EAAE,CAAC,eAAe,EAAE,4BAA4B,KAAK,EAAE,CAAC,CAAA;QACvE,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA"}

package/dist/src/lib/resolve-audit-users.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolve-audit-users.test.d.ts.map

package/dist/src/lib/resolve-audit-users.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-audit-users.test.d.ts","sourceRoot":"","sources":["../../../src/lib/resolve-audit-users.test.ts"],"names":[],"mappings":""}

package/dist/src/lib/resolve-audit-users.test.js

@@ -0,0 +1,91 @@
+import { strict as assert } from 'assert';
+import { describe, test } from 'node:test';
+import { resolveAuditUsers } from './resolve-audit-users.js';
+/**
+ * A stand-in for better-auth exposing only what the resolver reaches for, plus
+ * a record of the ids it was asked about — the dedupe is only observable there.
+ */
+const fakeAuth = (users, asked = []) => (async () => ({
+    $context: Promise.resolve({
+        internalAdapter: {
+            findUserById: async (id) => {
+                asked.push(id);
+                const user = users[id];
+                if (user instanceof Error)
+                    throw user;
+                return user;
+            },
+        },
+    }),
+}));
+const silentLogger = {
+    warn: () => { },
+    debug: () => { },
+};
+describe('resolveAuditUsers', () => {
+    test('names the ids it was given', async () => {
+        const directory = await resolveAuditUsers(fakeAuth({
+            usr_1: { name: 'Ada', email: 'ada@example.com' },
+            usr_2: { email: 'bob@example.com' },
+        }), ['usr_1', 'usr_2']);
+        assert.deepEqual(directory, {
+            usr_1: { name: 'Ada', email: 'ada@example.com', actor: undefined },
+            usr_2: { name: undefined, email: 'bob@example.com', actor: undefined },
+        });
+    });
+    test('asks about each id once, however often a page repeats it', async () => {
+        const asked = [];
+        await resolveAuditUsers(fakeAuth({ usr_1: { name: 'Ada' } }, asked), [
+            'usr_1',
+            'usr_1',
+            undefined,
+            'usr_1',
+        ]);
+        assert.deepEqual(asked, ['usr_1']);
+    });
+    test('flags a scenario actor so synthetic traffic is not read as real', async () => {
+        const directory = await resolveAuditUsers(fakeAuth({ usr_1: { name: 'Admin', actor: true } }), ['usr_1']);
+        assert.equal(directory.usr_1?.actor, true);
+    });
+    test('leaves an ordinary user unflagged rather than false', async () => {
+        const directory = await resolveAuditUsers(fakeAuth({ usr_1: { name: 'Ada', actor: false } }), ['usr_1']);
+        assert.equal(directory.usr_1?.actor, undefined);
+    });
+    test('omits an account deleted since the event, leaving the id to show', async () => {
+        const directory = await resolveAuditUsers(fakeAuth({ usr_1: undefined }), [
+            'usr_1',
+        ]);
+        assert.deepEqual(directory, {});
+    });
+    test('one unreadable row does not cost the page its other names', async () => {
+        const directory = await resolveAuditUsers(fakeAuth({
+            usr_1: new Error('row is gone'),
+            usr_2: { name: 'Bob' },
+        }), ['usr_1', 'usr_2'], silentLogger);
+        assert.deepEqual(Object.keys(directory), ['usr_2']);
+    });
+    test('an app without auth resolves nothing rather than throwing', async () => {
+        assert.deepEqual(await resolveAuditUsers(undefined, ['usr_1']), {});
+    });
+    test('skips the lookup entirely when the page named nobody', async () => {
+        const asked = [];
+        await resolveAuditUsers(fakeAuth({}, asked), [undefined, undefined]);
+        assert.deepEqual(asked, []);
+    });
+    test('warns and falls back to ids when auth itself fails', async () => {
+        const warnings = [];
+        const directory = await resolveAuditUsers((async () => {
+            throw new Error('auth is down');
+        }), ['usr_1'], { warn: (m) => warnings.push(m), debug: () => { } });
+        assert.deepEqual(directory, {});
+        assert.equal(warnings.length, 1, 'the failure is reported, not swallowed');
+        assert.match(warnings[0], /auth is down/);
+    });
+    test('resolves nothing when the adapter cannot look users up', async () => {
+        const directory = await resolveAuditUsers((async () => ({
+            $context: Promise.resolve({ internalAdapter: {} }),
+        })), ['usr_1']);
+        assert.deepEqual(directory, {});
+    });
+});
+//# sourceMappingURL=resolve-audit-users.test.js.map

package/dist/src/lib/resolve-audit-users.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-audit-users.test.js","sourceRoot":"","sources":["../../../src/lib/resolve-audit-users.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,QAAQ,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAI5D;;;GAGG;AACH,MAAM,QAAQ,GAAG,CACf,KAA+C,EAC/C,QAAkB,EAAE,EACpB,EAAE,CACF,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC;QACxB,eAAe,EAAE;YACf,YAAY,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;gBACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACd,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;gBACtB,IAAI,IAAI,YAAY,KAAK;oBAAE,MAAM,IAAI,CAAA;gBACrC,OAAO,IAAI,CAAA;YACb,CAAC;SACF;KACF,CAAC;CACH,CAAC,CAAQ,CAAA;AAEZ,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CACT,CAAA;AAER,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,QAAQ,CAAC;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAChD,KAAK,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE;SACpC,CAAC,EACF,CAAC,OAAO,EAAE,OAAO,CAAC,CACnB,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE;YAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;YAClE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;SACvE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACnE,OAAO;YACP,OAAO;YACP,SAAS;YACT,OAAO;SACR,CAAC,CAAA;QACF,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EACnD,CAAC,OAAO,CAAC,CACV,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAClD,CAAC,OAAO,CAAC,CACV,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;YACxE,OAAO;SACR,CAAC,CAAA;QACF,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,QAAQ,CAAC;YACP,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC;YAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACvB,CAAC,EACF,CAAC,OAAO,EAAE,OAAO,CAAC,EAClB,YAAY,CACb,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,CAAC,SAAS,CAAC,MAAM,iBAAiB,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;QACpE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAa,EAAE,CAAA;QAC7B,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,CAAC,KAAK,IAAI,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;QACjC,CAAC,CAAQ,EACT,CAAC,OAAO,CAAC,EACT,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAS,CAClE,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,wCAAwC,CAAC,CAAA;QAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,cAAc,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACZ,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;SACnD,CAAC,CAAQ,EACV,CAAC,OAAO,CAAC,CACV,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/scopes.js

@@ -55,6 +55,14 @@ defineScope({
                     },
                 },
             },
+            audit: {
+                description: 'The audit trail',
+                scopes: {
+                    read: {
+                        description: 'Read the audit trail — every recorded action, and which user took it',
+                    },
+                },
+            },
         },
     },
 });

package/dist/src/scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,qDAAqD;QAClE,MAAM,EAAE;YACN,WAAW,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACnD,WAAW,EAAE;gBACX,WAAW,EAAE,8BAA8B;gBAC3C,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBACjE;aACF;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,oBAAoB;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBAC9C,MAAM,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACnD,GAAG,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBAC3C,MAAM,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBAC1D,QAAQ,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACrD,QAAQ,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;iBACnD;aACF;SACF;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,WAAW,EAAE,0BAA0B;gBACvC,MAAM,EAAE;oBACN,IAAI,EAAE;wBACJ,WAAW,EAAE,iDAAiD;qBAC/D;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,wEAAwE;qBAC3E;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,qDAAqD;QAClE,MAAM,EAAE;YACN,WAAW,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACnD,WAAW,EAAE;gBACX,WAAW,EAAE,8BAA8B;gBAC3C,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBACjE;aACF;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,oBAAoB;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBAC9C,MAAM,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACnD,GAAG,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBAC3C,MAAM,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBAC1D,QAAQ,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACrD,QAAQ,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;iBACnD;aACF;SACF;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,WAAW,EAAE,0BAA0B;gBACvC,MAAM,EAAE;oBACN,IAAI,EAAE;wBACJ,WAAW,EAAE,iDAAiD;qBAC/D;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,wEAAwE;qBAC3E;iBACF;aACF;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,iBAAiB;gBAC9B,MAAM,EAAE;oBACN,IAAI,EAAE;wBACJ,WAAW,EACT,sEAAsE;qBACzE;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}

package/dist/src/services/secret-admin.service.d.ts

@@ -0,0 +1,20 @@
+import type { SecretService } from '@pikku/core/services';
+/**
+ * Secret administration for the console.
+ *
+ * The secret id arrives as user input, so no static declaration can cover it —
+ * administering arbitrary secrets is the job. Holding the `SecretService` here
+ * keeps it out of the services a function receives, and makes the plaintext
+ * disclosure a single greppable `.reveal()` rather than one per function.
+ */
+export declare class SecretAdminService {
+    private secrets;
+    constructor(secrets: SecretService);
+    has(secretId: string): Promise<boolean>;
+    read(secretId: string): Promise<{
+        exists: boolean;
+        value: unknown;
+    }>;
+    write(secretId: string, value: unknown): Promise<void>;
+}
+//# sourceMappingURL=secret-admin.service.d.ts.map

package/dist/src/services/secret-admin.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.d.ts","sourceRoot":"","sources":["../../../src/services/secret-admin.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEpC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAQpE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7D"}

package/dist/src/services/secret-admin.service.js

@@ -0,0 +1,27 @@
+/**
+ * Secret administration for the console.
+ *
+ * The secret id arrives as user input, so no static declaration can cover it —
+ * administering arbitrary secrets is the job. Holding the `SecretService` here
+ * keeps it out of the services a function receives, and makes the plaintext
+ * disclosure a single greppable `.reveal()` rather than one per function.
+ */
+export class SecretAdminService {
+    constructor(secrets) {
+        this.secrets = secrets;
+    }
+    async has(secretId) {
+        return this.secrets.hasSecret(secretId);
+    }
+    async read(secretId) {
+        if (!(await this.secrets.hasSecret(secretId))) {
+            return { exists: false, value: null };
+        }
+        const secret = await this.secrets.getSecret(secretId);
+        return { exists: true, value: secret.reveal() };
+    }
+    async write(secretId, value) {
+        await this.secrets.setSecret(secretId, value);
+    }
+}
+//# sourceMappingURL=secret-admin.service.js.map

package/dist/src/services/secret-admin.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.js","sourceRoot":"","sources":["../../../src/services/secret-admin.service.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAC7B,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QACvC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,KAAc;QAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC/C,CAAC;CACF"}

package/dist/src/services/secret-admin.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret-admin.service.test.d.ts.map

package/dist/src/services/secret-admin.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.test.d.ts","sourceRoot":"","sources":["../../../src/services/secret-admin.service.test.ts"],"names":[],"mappings":""}

package/dist/src/services/secret-admin.service.test.js

@@ -0,0 +1,69 @@
+import { describe, test } from 'node:test';
+import assert from 'node:assert/strict';
+import { SecretAdminService } from './secret-admin.service.js';
+const secretValue = (value) => ({ reveal: () => value });
+const stubSecrets = (store) => {
+    const calls = [];
+    const secrets = {
+        calls,
+        async hasSecret(key) {
+            calls.push(`hasSecret:${key}`);
+            return key in store;
+        },
+        async getSecret(key) {
+            calls.push(`getSecret:${key}`);
+            if (!(key in store)) {
+                throw new Error(`missing: ${key}`);
+            }
+            return secretValue(store[key]);
+        },
+        async setSecret(key, value) {
+            calls.push(`setSecret:${key}`);
+            store[key] = value;
+        },
+        async deleteSecret() { },
+        async getSecrets() {
+            return {};
+        },
+    };
+    return secrets;
+};
+describe('SecretAdminService', () => {
+    test('reports an existing secret without reading its value', async () => {
+        const secrets = stubSecrets({ STRIPE_KEY: 'sk_live' });
+        const admin = new SecretAdminService(secrets);
+        assert.equal(await admin.has('STRIPE_KEY'), true);
+        assert.deepEqual(secrets.calls, ['hasSecret:STRIPE_KEY']);
+    });
+    test('reports a missing secret', async () => {
+        const admin = new SecretAdminService(stubSecrets({}));
+        assert.equal(await admin.has('NOPE'), false);
+    });
+    test('reveals the value of an existing secret', async () => {
+        const admin = new SecretAdminService(stubSecrets({ STRIPE_KEY: 'sk_live' }));
+        assert.deepEqual(await admin.read('STRIPE_KEY'), {
+            exists: true,
+            value: 'sk_live',
+        });
+    });
+    test('reads a missing secret as absent rather than throwing', async () => {
+        const admin = new SecretAdminService(stubSecrets({}));
+        assert.deepEqual(await admin.read('NOPE'), { exists: false, value: null });
+    });
+    test('writes a secret through to the underlying service', async () => {
+        const store = {};
+        const admin = new SecretAdminService(stubSecrets(store));
+        await admin.write('STRIPE_KEY', 'sk_test');
+        assert.equal(store.STRIPE_KEY, 'sk_test');
+    });
+    test('administers an id it was never told about ahead of time', async () => {
+        const store = {};
+        const admin = new SecretAdminService(stubSecrets(store));
+        await admin.write('ARBITRARY_RUNTIME_ID', 'value');
+        assert.deepEqual(await admin.read('ARBITRARY_RUNTIME_ID'), {
+            exists: true,
+            value: 'value',
+        });
+    });
+});
+//# sourceMappingURL=secret-admin.service.test.js.map

package/dist/src/services/secret-admin.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.test.js","sourceRoot":"","sources":["../../../src/services/secret-admin.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAE9D,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAQ,CAAA;AAExE,MAAM,WAAW,GAAG,CAAC,KAA8B,EAAE,EAAE;IACrD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG;QACd,KAAK;QACL,KAAK,CAAC,SAAS,CAAC,GAAW;YACzB,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAA;YAC9B,OAAO,GAAG,IAAI,KAAK,CAAA;QACrB,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAW;YACzB,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAA;YAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC,CAAA;YACpC,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAChC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAc;YACzC,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAA;YAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,CAAC;QACD,KAAK,CAAC,YAAY,KAAI,CAAC;QACvB,KAAK,CAAC,UAAU;YACd,OAAO,EAAE,CAAA;QACX,CAAC;KACF,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,OAAc,CAAC,CAAA;QAEpD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;QACjD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAQ,CAAC,CAAA;QAE5D,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAClC,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAQ,CAC9C,CAAA;QAED,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YAC/C,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,SAAS;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAQ,CAAC,CAAA;QAE5D,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAA4B,EAAE,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAQ,CAAC,CAAA;QAE/D,MAAM,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QAE1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAA4B,EAAE,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAQ,CAAC,CAAA;QAE/D,MAAM,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;QAElD,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE;YACzD,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,OAAO;SACf,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,uBAAuB,0MAiFnC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,uBAAuB,0MA0FnC,CAAA"}

package/dist/src/services.js

@@ -4,14 +4,16 @@ import { AddonService } from './services/addon.service.js';
 import { StateDiffService } from './services/state-diff.service.js';
 import { DbSchemaService } from './services/db-schema.service.js';
 import { KnowledgeService } from './services/knowledge.service.js';
+import { SecretAdminService } from './services/secret-admin.service.js';
 import { findProjectRoot } from './lib/find-project-root.js';
-export const createSingletonServices = pikkuAddonServices(async (_config, { variables, metaService: existingMetaService, aiAgentRunner, schedulerService, agentRunService, workflowService, workflowRunService, aiStorage, aiRunState, deploymentService, credentialService, coverageService, scopeService, webhookService, auth, }) => {
+export const createSingletonServices = pikkuAddonServices(async (_config, { variables, secrets, metaService: existingMetaService, aiAgentRunner, schedulerService, agentRunService, workflowService, workflowRunService, aiStorage, aiRunState, deploymentService, credentialService, coverageService, scopeService, webhookService, audit, auth, }) => {
     if (!existingMetaService) {
         throw new Error('metaService is required for the console addon. Set it in your createSingletonServices using PikkuMetaService from #pikku/pikku-meta-service.gen.js');
     }
     const metaService = existingMetaService;
     const fabricApiUrl = (await variables.get('FABRIC_API_URL')) ?? 'https://api.pikkufabric.com';
     const wiringService = new WiringService(metaService);
+    const secretAdminService = new SecretAdminService(secrets);
     const addonService = new AddonService(fabricApiUrl);
     await addonService.init();
     const metaBasePath = existingMetaService?.basePath;
@@ -41,6 +43,7 @@ export const createSingletonServices = pikkuAddonServices(async (_config, { vari
     return {
         metaService,
         wiringService,
+        secretAdminService,
         addonService,
         workflowService,
         workflowRunService,
@@ -54,6 +57,11 @@ export const createSingletonServices = pikkuAddonServices(async (_config, { vari
         coverageService,
         scopeService,
         webhookService,
+        // Forwarded rather than constructed: the sink is the application's
+        // choice, and an addon that made its own would read a trail nobody
+        // writes to. Absent when the app configured none, which is what
+        // `getAudits` reports as `readable: false`.
+        audit,
         codeEditService,
         stateDiffService,
         dbSchemaService,

package/dist/src/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EACH,OAAO,EACP,EACE,SAAS,EACT,WAAW,EAAE,mBAAmB,EAChC,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,IAAI,GACL,EACD,EAAE;IACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAA;IACvC,MAAM,YAAY,GAChB,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,6BAA6B,CAAA;IAE1E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IAEzB,MAAM,YAAY,GAAG,mBAAmB,EAAE,QAAQ,CAAA;IAClD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QACjD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAClD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAClE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,iCAAiC,CAAA;YACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa;QACb,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,eAAe;QACf,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,YAAY;QACZ,cAAc;QACd,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,IAAI;KACL,CAAA;AACH,CAAC,CACF,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EACH,OAAO,EACP,EACE,SAAS,EACT,OAAO,EACP,WAAW,EAAE,mBAAmB,EAChC,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,KAAK,EACL,IAAI,GACL,EACD,EAAE;IACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAA;IACvC,MAAM,YAAY,GAChB,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,6BAA6B,CAAA;IAE1E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IAEzB,MAAM,YAAY,GAAG,mBAAmB,EAAE,QAAQ,CAAA;IAClD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QACjD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAClD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAClE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,iCAAiC,CAAA;YACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa;QACb,kBAAkB;QAClB,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,eAAe;QACf,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,YAAY;QACZ,cAAc;QACd,mEAAmE;QACnE,mEAAmE;QACnE,gEAAgE;QAChE,4CAA4C;QAC5C,KAAK;QACL,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,IAAI;KACL,CAAA;AACH,CAAC,CACF,CAAA"}

package/dist/types/application-types.d.ts

@@ -0,0 +1,43 @@
+import type {
+  CoreConfig,
+  CoreServices,
+  CoreSingletonServices,
+  CoreUserSession,
+} from '@pikku/core'
+import type { MetaService } from '@pikku/core/services'
+import type { WiringService } from '../src/services/wiring.service.js'
+import type { AddonService } from '../src/services/addon.service.js'
+import type { CodeEditService } from '../src/services/code-edit.service.js'
+import type { StateDiffService } from '../src/services/state-diff.service.js'
+import type { DbSchemaService } from '../src/services/db-schema.service.js'
+import type { KnowledgeService } from '../src/services/knowledge.service.js'
+import type { SecretAdminService } from '../src/services/secret-admin.service.js'
+import type { BetterAuthInstance } from '@pikku/better-auth'
+
+export interface Config extends CoreConfig {}
+
+export interface UserSession extends CoreUserSession {}
+
+export interface SingletonServices extends CoreSingletonServices<Config> {
+  metaService: MetaService
+  wiringService: WiringService
+  /**
+   * Secret administration. The console's own surface for it — the addon holds
+   * the `SecretService` so no console function has to.
+   */
+  secretAdminService: SecretAdminService
+  addonService: AddonService
+  codeEditService: CodeEditService | null
+  stateDiffService: StateDiffService | null
+  dbSchemaService: DbSchemaService | null
+  knowledgeService: KnowledgeService | null
+  /**
+   * The host's resolved better-auth instance, wired by `pikkuBetterAuth`. The
+   * console never constructs it — it is declared here only so the functions
+   * that read the auth adapter (e.g. the user directory) are typed rather than
+   * casting. Absent when the host wires no auth at all.
+   */
+  auth?: () => Promise<BetterAuthInstance>
+}
+
+export interface Services extends CoreServices<SingletonServices> {}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@pikku/addon-console",
-  "version": "0.12.36",
+  "version": "0.12.40",
   "description": "Console addon for Pikku — functions powering the Pikku Console UI",
   "type": "module",
   "imports": {
     "#pikku": {
-      "types": "./.pikku/pikku-types.gen.ts",
+      "types": "./dist/.pikku/pikku-types.gen.d.ts",
       "import": "./dist/.pikku/pikku-types.gen.js",
       "default": "./dist/.pikku/pikku-types.gen.js"
     }
@@ -32,15 +32,15 @@
     "dist"
   ],
   "scripts": {
-    "build": "pikku all && tsc && (cp .pikku/rpc/*.d.ts dist/.pikku/rpc/ 2>/dev/null || true) && (cp .pikku/agent/*.d.ts dist/.pikku/agent/ 2>/dev/null || true) && (cp .pikku/workflow/*.d.ts dist/.pikku/workflow/ 2>/dev/null || true) && (mkdir -p dist/.pikku/function && cp .pikku/function/*-verbose.gen.json dist/.pikku/function/ 2>/dev/null || true)",
+    "build": "pikku all && tsc && (cp .pikku/rpc/*.d.ts dist/.pikku/rpc/ 2>/dev/null || true) && (cp .pikku/agent/*.d.ts dist/.pikku/agent/ 2>/dev/null || true) && (cp .pikku/workflow/*.d.ts dist/.pikku/workflow/ 2>/dev/null || true) && (mkdir -p dist/.pikku/function && cp .pikku/function/*-verbose.gen.json dist/.pikku/function/ 2>/dev/null || true) && (mkdir -p dist/types && cp types/*.d.ts dist/types/)",
     "pikku": "pikku all",
     "pretest": "pikku all",
     "test": "tsc --noEmit",
     "test:coverage": "bash run-tests.sh --coverage"
   },
   "peerDependencies": {
-    "@pikku/better-auth": "^0.12.20",
-    "@pikku/core": "^0.12.74"
+    "@pikku/better-auth": "^0.12.23",
+    "@pikku/core": "^0.12.82"
   },
   "peerDependenciesMeta": {
     "@pikku/better-auth": {
@@ -48,14 +48,14 @@
     }
   },
   "devDependencies": {
-    "@pikku/better-auth": "^0.12.20",
-    "@pikku/cli": "^0.12.95",
-    "@pikku/core": "^0.12.74",
+    "@pikku/better-auth": "^0.12.23",
+    "@pikku/cli": "^0.12.102",
+    "@pikku/core": "^0.12.82",
     "oauth2-mock-server": "^7.1.1",
     "typescript": "^6.0.3"
   },
   "dependencies": {
-    "@pikku/knowledge": "^0.12.3",
+    "@pikku/knowledge": "^0.12.5",
     "json-schema": "^0.4.0",
     "open": "^10.0.0"
   },

package/dist/.pikku/schemas/schemas/FunctionCoverageReport.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "generatedAt": { "type": "string" }, "summary": { "type": "object", "properties": { "total": { "type": "number" }, "covered": { "type": "number" }, "partial": { "type": "number" }, "uncovered": { "type": "number" }, "unknown": { "type": "number" }, "overallRatio": { "type": "number" } }, "required": ["total", "covered", "partial", "uncovered", "unknown", "overallRatio"], "additionalProperties": false }, "functions": { "type": "array", "items": { "$ref": "#/definitions/FunctionCoverageEntry" } } }, "required": ["generatedAt", "summary", "functions"], "additionalProperties": false, "definitions": { "FunctionCoverageEntry": { "type": "object", "properties": { "name": { "type": "string" }, "sourceFile": { "type": "string" }, "exposed": { "type": "boolean" }, "description": { "type": ["string", "null"] }, "coveredLines": { "type": "number" }, "totalLines": { "type": "number" }, "missedLines": { "type": "array", "items": { "type": "number" } }, "ratio": { "type": "number" }, "status": { "$ref": "#/definitions/CoverageStatus" } }, "required": ["name", "sourceFile", "exposed", "description", "coveredLines", "totalLines", "missedLines", "ratio", "status"], "additionalProperties": false }, "CoverageStatus": { "type": "string", "enum": ["covered", "partial", "uncovered", "unknown"] } } }

package/dist/.pikku/schemas/schemas/GetAIWorkflowsInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "agentName": { "type": "string" } }, "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/GetAIWorkflowsOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "array", "items": { "type": "object", "properties": { "workflowName": { "type": "string" }, "graphHash": { "type": "string" }, "graph": {} }, "required": ["workflowName", "graphHash", "graph"], "additionalProperties": false }, "definitions": {} }

package/dist/.pikku/schemas/schemas/GetAddonMetaOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "array", "items": { "$ref": "#/definitions/AddonPackageInfo" }, "definitions": { "AddonPackageInfo": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "displayName": { "type": "string" }, "version": { "type": "string" }, "description": { "type": "string" }, "author": { "type": "string" }, "repository": { "type": "string" }, "license": { "type": "string" }, "readme": { "type": "string" }, "icon": { "type": "string" }, "publishedAt": { "type": "string" }, "updatedAt": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "categories": { "type": "array", "items": { "type": "string" } }, "functions": { "$ref": "#/definitions/FunctionsMeta" }, "agents": { "type": "object", "additionalProperties": {} }, "secrets": { "type": "object", "additionalProperties": {} }, "credentials": { "type": "object", "additionalProperties": {}, "description": "OAuth2 + wire credentials the addon declares (from its own `credentials/pikku-credentials-meta.gen.json`). Entries with an `oauth2` field are OAuth integrations to connect; the rest are wire credentials." }, "variables": { "type": "object", "additionalProperties": {} }, "httpRoutes": { "$ref": "#/definitions/HTTPWiringsMeta" }, "channels": { "$ref": "#/definitions/ChannelsMeta" }, "cli": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLIProgramMeta" } }, "mcp": { "anyOf": [{ "$ref": "#/definitions/McpMeta" }, { "type": "null" }] }, "schemas": { "type": "object", "additionalProperties": {} } }, "required": ["id", "name", "displayName", "version", "description", "author", "publishedAt", "updatedAt", "tags", "categories", "functions", "agents", "secrets", "credentials", "variables", "httpRoutes", "channels", "cli", "mcp", "schemas"], "additionalProperties": false }, "FunctionsMeta": { "type": "object", "additionalProperties": { "$ref": "#/definitions/FunctionMeta" } }, "FunctionMeta": { "type": "object", "additionalProperties": false, "properties": { "name": { "type": "string" }, "functionType": { "type": "string", "enum": ["user", "inline", "helper"] }, "funcWrapper": { "type": "string" }, "services": { "$ref": "#/definitions/FunctionServicesMeta" }, "wires": { "$ref": "#/definitions/FunctionWiresMeta" }, "inputs": { "anyOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }] }, "outputs": { "anyOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }] }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "permissions": { "type": "array", "items": { "$ref": "#/definitions/PermissionMetadata" } }, "isDirectFunction": { "type": "boolean" }, "sourceFile": { "type": "string" }, "exportedName": { "type": "string" }, "bodySourceFile": { "type": "string", "description": "File containing the handler body when it differs from sourceFile (imported handlers)" }, "bodyStart": { "type": "number", "description": "1-indexed first line of the handler body (verbose meta; coverage mapping)" }, "bodyEnd": { "type": "number", "description": "1-indexed last line of the handler body (verbose meta; coverage mapping)" }, "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "title": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "inputSchemaName": { "type": ["string", "null"] }, "outputSchemaName": { "type": ["string", "null"] }, "scopes": { "type": "array", "items": { "type": "string" }, "description": "Scopes the session must hold to run this function. All are required (AND)." }, "expose": { "type": "boolean" }, "remote": { "type": "boolean" }, "mcp": { "type": "boolean" }, "readonly": { "type": "boolean" }, "deploy": { "type": "string", "enum": ["serverless", "server", "auto"] }, "sessionless": { "type": "boolean" }, "workflowQueued": { "type": "boolean", "description": "When true, workflow steps calling this function are dispatched via the queue. No queue service configured is a hard error." }, "workflowRetries": { "type": "number", "description": "Retry count when this function is used as a workflow step." }, "workflowTimeout": { "type": "string", "description": "Timeout when this function is used as a workflow step (e.g. '30s', '5m')." }, "version": { "type": "number" }, "approvalRequired": { "type": "boolean" }, "approvalDescription": { "type": "string" }, "implementationHash": { "type": "string" }, "contractHash": { "type": "string" }, "inputHash": { "type": "string" }, "outputHash": { "type": "string" } }, "required": ["inputSchemaName", "outputSchemaName", "pikkuFuncId"] }, "FunctionServicesMeta": { "type": "object", "properties": { "optimized": { "type": "boolean" }, "services": { "type": "array", "items": { "type": "string" } } }, "required": ["optimized", "services"], "additionalProperties": false }, "FunctionWiresMeta": { "type": "object", "properties": { "optimized": { "type": "boolean" }, "wires": { "type": "array", "items": { "type": "string" } } }, "required": ["optimized", "wires"], "additionalProperties": false }, "MiddlewareMetadata": { "anyOf": [{ "type": "object", "properties": { "type": { "type": "string", "const": "http" }, "route": { "type": "string" } }, "required": ["type", "route"], "additionalProperties": false }, { "type": "object", "properties": { "type": { "type": "string", "const": "tag" }, "tag": { "type": "string" } }, "required": ["type", "tag"], "additionalProperties": false }, { "type": "object", "properties": { "type": { "type": "string", "const": "wire" }, "name": { "type": "string" }, "inline": { "type": "boolean" } }, "required": ["type", "name"], "additionalProperties": false }], "description": "Metadata for middleware at any level\n- type: 'http' = HTTP route middleware group (references httpGroup in pikkuState)\n- type: 'tag' = Tag-based middleware group (references tagGroup in pikkuState)\n- type: 'wire' = Wire-level individual middleware" }, "PermissionMetadata": { "type": "object", "properties": { "type": { "type": "string", "const": "wire" }, "name": { "type": "string" }, "inline": { "type": "boolean" } }, "required": ["type", "name"], "additionalProperties": false, "description": "A reference to a permission function a function declares, resolved by name. Used at filter time (e.g. listing agent tools) to run the session-only (pikkuAuth) predicates without request data. Permissions are function-scoped only — there are no wire- or tag-level permission references." }, "HTTPWiringsMeta": { "type": "object", "properties": { "post": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "get": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "delete": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "patch": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "head": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "put": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "options": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } } }, "required": ["post", "get", "delete", "patch", "head", "put", "options"], "additionalProperties": false }, "HTTPWiringMeta": { "type": "object", "additionalProperties": false, "properties": { "route": { "type": "string" }, "method": { "$ref": "#/definitions/HTTPMethod" }, "refTarget": { "type": "string" }, "params": { "type": "array", "items": { "type": "string" } }, "query": { "type": "array", "items": { "type": "string" } }, "inputTypes": { "$ref": "#/definitions/HTTPFunctionMetaInputTypes" }, "headersSchemaName": { "type": "string" }, "sse": { "type": "boolean", "const": true }, "groupBasePath": { "type": "string" }, "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "title": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "permissions": { "type": "array", "items": { "$ref": "#/definitions/PermissionMetadata" } } }, "required": ["method", "pikkuFuncId", "route"], "description": "Represents metadata for a set of HTTP wirings, including HTTP wiring details, methods, input/output types, and documentation." }, "HTTPMethod": { "type": "string", "enum": ["post", "get", "delete", "patch", "head", "put", "options"], "description": "Represents the HTTP methods supported for API HTTP wirings." }, "HTTPFunctionMetaInputTypes": { "type": "object", "properties": { "params": { "type": "string" }, "query": { "type": "string" }, "body": { "type": "string" } }, "additionalProperties": false, "description": "Represents the input types for HTTP wiring metadata, including parameters, query, and body types." }, "ChannelsMeta": { "type": "object", "additionalProperties": { "$ref": "#/definitions/ChannelMeta" } }, "ChannelMeta": { "type": "object", "properties": { "name": { "type": "string" }, "route": { "type": "string" }, "params": { "type": "array", "items": { "type": "string" } }, "query": { "type": "array", "items": { "type": "string" } }, "input": { "type": ["string", "null"] }, "inputTypes": { "$ref": "#/definitions/HTTPFunctionMetaInputTypes" }, "connect": { "anyOf": [{ "$ref": "#/definitions/ChannelMessageMeta" }, { "type": "null" }] }, "disconnect": { "anyOf": [{ "$ref": "#/definitions/ChannelMessageMeta" }, { "type": "null" }] }, "message": { "anyOf": [{ "$ref": "#/definitions/ChannelMessageMeta" }, { "type": "null" }] }, "messageWirings": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": { "$ref": "#/definitions/ChannelMessageMeta" } } }, "binary": { "type": ["boolean", "null"] }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "channelMiddleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } } }, "required": ["name", "route", "input", "connect", "disconnect", "message", "messageWirings"], "additionalProperties": false }, "ChannelMessageMeta": { "type": "object", "properties": { "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } } }, "required": ["pikkuFuncId"], "additionalProperties": false }, "CLIProgramMeta": { "type": "object", "properties": { "program": { "type": "string" }, "commands": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLICommandMeta" } }, "options": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLIOption" } }, "defaultRenderName": { "type": "string" } }, "required": ["program", "commands", "options"], "additionalProperties": false, "description": "CLI metadata collection (per program)" }, "CLICommandMeta": { "type": "object", "properties": { "parameters": { "type": "string" }, "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "positionals": { "type": "array", "items": { "$ref": "#/definitions/CLIPositional" } }, "options": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLIOption" } }, "renderName": { "type": "string" }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "subcommands": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLICommandMeta" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "isDefault": { "type": "boolean" } }, "required": ["pikkuFuncId", "positionals", "options"], "additionalProperties": false, "description": "CLI command metadata for runtime" }, "CLIPositional": { "type": "object", "properties": { "name": { "type": "string" }, "required": { "type": "boolean" }, "variadic": { "type": "boolean" } }, "required": ["name", "required"], "additionalProperties": false, "description": "Positional argument definition" }, "CLIOption": { "type": "object", "properties": { "description": { "type": "string" }, "short": { "type": "string" }, "default": {}, "choices": { "type": "array", "items": {} }, "array": { "type": "boolean" }, "required": { "type": "boolean" } }, "required": ["description"], "additionalProperties": false, "description": "CLI option definition" }, "McpMeta": { "type": "object", "properties": { "toolsMeta": { "$ref": "#/definitions/MCPToolMeta" }, "resourcesMeta": { "$ref": "#/definitions/MCPResourceMeta" }, "promptsMeta": { "$ref": "#/definitions/MCPPromptMeta" } }, "required": ["toolsMeta", "resourcesMeta", "promptsMeta"], "additionalProperties": false }, "MCPToolMeta": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": false, "properties": { "pikkuFuncId": { "type": "string" }, "inputSchema": { "type": ["string", "null"] }, "outputSchema": { "type": ["string", "null"] }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "name": { "type": "string" }, "title": { "type": "string" }, "description": { "type": "string" }, "summary": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "streaming": { "type": "boolean" } }, "required": ["inputSchema", "name", "outputSchema", "pikkuFuncId"] }, "description": "Represents metadata for MCP tools, including name, description, and documentation." }, "MCPResourceMeta": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": false, "properties": { "pikkuFuncId": { "type": "string" }, "inputSchema": { "type": ["string", "null"] }, "outputSchema": { "type": ["string", "null"] }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "uri": { "type": "string" }, "title": { "type": "string" }, "description": { "type": "string" }, "summary": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "mimeType": { "type": "string" }, "size": { "type": "number" }, "streaming": { "type": "boolean" }, "tags": { "type": "array", "items": { "type": "string" } } }, "required": ["description", "inputSchema", "outputSchema", "pikkuFuncId", "title", "uri"] }, "description": "Represents metadata for MCP resources, including name, description, and documentation." }, "MCPPromptMeta": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": false, "properties": { "pikkuFuncId": { "type": "string" }, "inputSchema": { "type": ["string", "null"] }, "outputSchema": { "type": ["string", "null"] }, "arguments": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "required": { "type": "boolean" } }, "required": ["name", "description", "required"], "additionalProperties": false } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "name": { "type": "string" }, "description": { "type": "string" }, "summary": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } } }, "required": ["arguments", "description", "inputSchema", "name", "outputSchema", "pikkuFuncId"] }, "description": "Represents metadata for MCP prompts, including name, description, and arguments." } } }

package/dist/.pikku/schemas/schemas/GetStubCallsInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "service": { "type": "string" } }, "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/GetStubCallsOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "array", "items": { "$ref": "#/definitions/StubCallEntry" }, "definitions": { "StubCallEntry": { "type": "object", "properties": { "service": { "type": "string" }, "method": { "type": "string" }, "args": { "type": "array", "items": {} } }, "required": ["service", "method", "args"], "additionalProperties": false } } }

package/dist/.pikku/schemas/schemas/OauthConnectInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" }, "callbackUrl": { "type": "string" }, "userId": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthConnectOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "authUrl": { "type": "string" } }, "required": ["authUrl"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthDisconnectInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthExchangeTokensInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "code": { "type": "string" }, "state": { "type": "string" } }, "required": ["code", "state"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthExchangeTokensOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthRefreshTokenInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthRefreshTokenOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "success": { "type": "boolean" }, "error": { "type": "string" } }, "required": ["success"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthStatusInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthStatusOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "connected": { "type": "boolean" }, "hasRefreshToken": { "type": "boolean" }, "expiresAt": { "type": "number" }, "isExpired": { "type": "boolean" } }, "required": ["connected"], "additionalProperties": false, "definitions": {} }