@pikku/addon-console 0.12.38 → 0.12.40

package/dist/src/functions/secret-get.function.d.ts

@@ -0,0 +1,17 @@
+export declare const secretGet: import("#pikku").PikkuFunctionConfig<{
+    secretId: string;
+}, {
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    secretId: string;
+}, {
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    secretId: string;
+}, {
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=secret-get.function.d.ts.map

package/dist/src/functions/secret-get.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-get.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;qFAQjC,CAAA"}

package/dist/src/functions/secret-get.function.js

@@ -0,0 +1,10 @@
+import { pikkuFunc } from '#pikku';
+export const secretGet = pikkuFunc({
+    title: 'Get Secret',
+    description: 'Gets the current value of a secret.',
+    expose: true,
+    func: async ({ secretAdminService }, { secretId }) => {
+        return secretAdminService.read(secretId);
+    },
+});
+//# sourceMappingURL=secret-get.function.js.map

package/dist/src/functions/secret-get.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-get.function.js","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-has.function.d.ts

@@ -0,0 +1,14 @@
+export declare const secretHas: import("#pikku").PikkuFunctionConfig<{
+    secretId: string;
+}, {
+    exists: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    secretId: string;
+}, {
+    exists: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    secretId: string;
+}, {
+    exists: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=secret-has.function.d.ts.map

package/dist/src/functions/secret-has.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-has.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cAAyB,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;qFAQxE,CAAA"}

package/dist/src/functions/secret-has.function.js

@@ -0,0 +1,11 @@
+import { pikkuFunc } from '#pikku';
+export const secretHas = pikkuFunc({
+    title: 'Has Secret',
+    description: 'Checks whether a secret exists without reading its value.',
+    expose: true,
+    func: async ({ secretAdminService }, { secretId }) => {
+        const exists = await secretAdminService.has(secretId);
+        return { exists };
+    },
+});
+//# sourceMappingURL=secret-has.function.js.map

package/dist/src/functions/secret-has.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-has.function.js","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAA4C;IAC5E,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-set.function.d.ts

@@ -0,0 +1,17 @@
+export declare const secretSet: import("#pikku").PikkuFunctionConfig<{
+    secretId: string;
+    value: unknown;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    secretId: string;
+    value: unknown;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    secretId: string;
+    value: unknown;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=secret-set.function.d.ts.map

package/dist/src/functions/secret-set.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-set.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;qFASlB,CAAA"}

package/dist/src/functions/secret-set.function.js

@@ -0,0 +1,11 @@
+import { pikkuFunc } from '#pikku';
+export const secretSet = pikkuFunc({
+    title: 'Set Secret',
+    description: 'Sets the value of a secret.',
+    expose: true,
+    func: async ({ secretAdminService }, { secretId, value }) => {
+        await secretAdminService.write(secretId, value);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=secret-set.function.js.map

package/dist/src/functions/secret-set.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-set.function.js","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/stream-workflow-run.function.d.ts

@@ -2,7 +2,7 @@ export declare const streamWorkflowRun: import("#pikku").PikkuFunctionConfig<{
     runId: string;
 }, any, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
     runId: string;
-}, any, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunction<{
+}, any, "rpc" | "session", import("#pikku").WiredServices, unknown> | import("#pikku").PikkuFunction<{
     runId: string;
 }, any, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
 //# sourceMappingURL=stream-workflow-run.function.d.ts.map

package/dist/src/functions/update-agent-config.function.d.ts

@@ -17,5 +17,5 @@ export declare const updateAgentConfig: import("#pikku").PikkuFunctionConfig<{
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-agent-config.function.d.ts.map

package/dist/src/functions/update-agent-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;4EAelB,CAAA"}
+{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;qFAelB,CAAA"}

package/dist/src/functions/update-dependency.function.d.ts

@@ -8,5 +8,5 @@ export declare const updateDependency: import("#pikku").PikkuFunctionConfig<{
 }, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
     package: string;
     version: string;
-}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-dependency.function.d.ts.map

package/dist/src/functions/update-dependency.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AA0CtD,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;wGAmClC,CAAA"}
+{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AA0CtD,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;iHAmClC,CAAA"}

package/dist/src/functions/update-email-template.function.d.ts

@@ -13,5 +13,5 @@ export declare const updateEmailTemplate: import("#pikku").PikkuFunctionConfig<{
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-email-template.function.d.ts.map

package/dist/src/functions/update-email-template.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;4EA4BlB,CAAA"}
+{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;qFA4BlB,CAAA"}

package/dist/src/functions/update-function-body.function.d.ts

@@ -16,5 +16,5 @@ export declare const updateFunctionBody: import("#pikku").PikkuFunctionConfig<{
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-function-body.function.d.ts.map

package/dist/src/functions/update-function-body.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;4EAelB,CAAA"}
+{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;qFAelB,CAAA"}

package/dist/src/functions/update-function-config.function.d.ts

@@ -17,5 +17,5 @@ export declare const updateFunctionConfig: import("#pikku").PikkuFunctionConfig<
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-function-config.function.d.ts.map

package/dist/src/functions/update-function-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;4EAmBlB,CAAA"}
+{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;qFAmBlB,CAAA"}

package/dist/src/services/secret-admin.service.d.ts

@@ -0,0 +1,20 @@
+import type { SecretService } from '@pikku/core/services';
+/**
+ * Secret administration for the console.
+ *
+ * The secret id arrives as user input, so no static declaration can cover it —
+ * administering arbitrary secrets is the job. Holding the `SecretService` here
+ * keeps it out of the services a function receives, and makes the plaintext
+ * disclosure a single greppable `.reveal()` rather than one per function.
+ */
+export declare class SecretAdminService {
+    private secrets;
+    constructor(secrets: SecretService);
+    has(secretId: string): Promise<boolean>;
+    read(secretId: string): Promise<{
+        exists: boolean;
+        value: unknown;
+    }>;
+    write(secretId: string, value: unknown): Promise<void>;
+}
+//# sourceMappingURL=secret-admin.service.d.ts.map

package/dist/src/services/secret-admin.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.d.ts","sourceRoot":"","sources":["../../../src/services/secret-admin.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEpC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAQpE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7D"}

package/dist/src/services/secret-admin.service.js

@@ -0,0 +1,27 @@
+/**
+ * Secret administration for the console.
+ *
+ * The secret id arrives as user input, so no static declaration can cover it —
+ * administering arbitrary secrets is the job. Holding the `SecretService` here
+ * keeps it out of the services a function receives, and makes the plaintext
+ * disclosure a single greppable `.reveal()` rather than one per function.
+ */
+export class SecretAdminService {
+    constructor(secrets) {
+        this.secrets = secrets;
+    }
+    async has(secretId) {
+        return this.secrets.hasSecret(secretId);
+    }
+    async read(secretId) {
+        if (!(await this.secrets.hasSecret(secretId))) {
+            return { exists: false, value: null };
+        }
+        const secret = await this.secrets.getSecret(secretId);
+        return { exists: true, value: secret.reveal() };
+    }
+    async write(secretId, value) {
+        await this.secrets.setSecret(secretId, value);
+    }
+}
+//# sourceMappingURL=secret-admin.service.js.map

package/dist/src/services/secret-admin.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.js","sourceRoot":"","sources":["../../../src/services/secret-admin.service.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAC7B,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QACvC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,KAAc;QAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC/C,CAAC;CACF"}

package/dist/src/services/secret-admin.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret-admin.service.test.d.ts.map

package/dist/src/services/secret-admin.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.test.d.ts","sourceRoot":"","sources":["../../../src/services/secret-admin.service.test.ts"],"names":[],"mappings":""}

package/dist/src/services/secret-admin.service.test.js

@@ -0,0 +1,69 @@
+import { describe, test } from 'node:test';
+import assert from 'node:assert/strict';
+import { SecretAdminService } from './secret-admin.service.js';
+const secretValue = (value) => ({ reveal: () => value });
+const stubSecrets = (store) => {
+    const calls = [];
+    const secrets = {
+        calls,
+        async hasSecret(key) {
+            calls.push(`hasSecret:${key}`);
+            return key in store;
+        },
+        async getSecret(key) {
+            calls.push(`getSecret:${key}`);
+            if (!(key in store)) {
+                throw new Error(`missing: ${key}`);
+            }
+            return secretValue(store[key]);
+        },
+        async setSecret(key, value) {
+            calls.push(`setSecret:${key}`);
+            store[key] = value;
+        },
+        async deleteSecret() { },
+        async getSecrets() {
+            return {};
+        },
+    };
+    return secrets;
+};
+describe('SecretAdminService', () => {
+    test('reports an existing secret without reading its value', async () => {
+        const secrets = stubSecrets({ STRIPE_KEY: 'sk_live' });
+        const admin = new SecretAdminService(secrets);
+        assert.equal(await admin.has('STRIPE_KEY'), true);
+        assert.deepEqual(secrets.calls, ['hasSecret:STRIPE_KEY']);
+    });
+    test('reports a missing secret', async () => {
+        const admin = new SecretAdminService(stubSecrets({}));
+        assert.equal(await admin.has('NOPE'), false);
+    });
+    test('reveals the value of an existing secret', async () => {
+        const admin = new SecretAdminService(stubSecrets({ STRIPE_KEY: 'sk_live' }));
+        assert.deepEqual(await admin.read('STRIPE_KEY'), {
+            exists: true,
+            value: 'sk_live',
+        });
+    });
+    test('reads a missing secret as absent rather than throwing', async () => {
+        const admin = new SecretAdminService(stubSecrets({}));
+        assert.deepEqual(await admin.read('NOPE'), { exists: false, value: null });
+    });
+    test('writes a secret through to the underlying service', async () => {
+        const store = {};
+        const admin = new SecretAdminService(stubSecrets(store));
+        await admin.write('STRIPE_KEY', 'sk_test');
+        assert.equal(store.STRIPE_KEY, 'sk_test');
+    });
+    test('administers an id it was never told about ahead of time', async () => {
+        const store = {};
+        const admin = new SecretAdminService(stubSecrets(store));
+        await admin.write('ARBITRARY_RUNTIME_ID', 'value');
+        assert.deepEqual(await admin.read('ARBITRARY_RUNTIME_ID'), {
+            exists: true,
+            value: 'value',
+        });
+    });
+});
+//# sourceMappingURL=secret-admin.service.test.js.map

package/dist/src/services/secret-admin.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-admin.service.test.js","sourceRoot":"","sources":["../../../src/services/secret-admin.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAE9D,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAQ,CAAA;AAExE,MAAM,WAAW,GAAG,CAAC,KAA8B,EAAE,EAAE;IACrD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG;QACd,KAAK;QACL,KAAK,CAAC,SAAS,CAAC,GAAW;YACzB,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAA;YAC9B,OAAO,GAAG,IAAI,KAAK,CAAA;QACrB,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAW;YACzB,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAA;YAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC,CAAA;YACpC,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAChC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAc;YACzC,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAA;YAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,CAAC;QACD,KAAK,CAAC,YAAY,KAAI,CAAC;QACvB,KAAK,CAAC,UAAU;YACd,OAAO,EAAE,CAAA;QACX,CAAC;KACF,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,OAAc,CAAC,CAAA;QAEpD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;QACjD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAQ,CAAC,CAAA;QAE5D,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAClC,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAQ,CAC9C,CAAA;QAED,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YAC/C,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,SAAS;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAQ,CAAC,CAAA;QAE5D,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAA4B,EAAE,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAQ,CAAC,CAAA;QAE/D,MAAM,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QAE1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAA4B,EAAE,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAQ,CAAC,CAAA;QAE/D,MAAM,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;QAElD,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE;YACzD,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,OAAO;SACf,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,uBAAuB,0MAuFnC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,uBAAuB,0MA0FnC,CAAA"}

package/dist/src/services.js

@@ -4,14 +4,16 @@ import { AddonService } from './services/addon.service.js';
 import { StateDiffService } from './services/state-diff.service.js';
 import { DbSchemaService } from './services/db-schema.service.js';
 import { KnowledgeService } from './services/knowledge.service.js';
+import { SecretAdminService } from './services/secret-admin.service.js';
 import { findProjectRoot } from './lib/find-project-root.js';
-export const createSingletonServices = pikkuAddonServices(async (_config, { variables, metaService: existingMetaService, aiAgentRunner, schedulerService, agentRunService, workflowService, workflowRunService, aiStorage, aiRunState, deploymentService, credentialService, coverageService, scopeService, webhookService, audit, auth, }) => {
+export const createSingletonServices = pikkuAddonServices(async (_config, { variables, secrets, metaService: existingMetaService, aiAgentRunner, schedulerService, agentRunService, workflowService, workflowRunService, aiStorage, aiRunState, deploymentService, credentialService, coverageService, scopeService, webhookService, audit, auth, }) => {
     if (!existingMetaService) {
         throw new Error('metaService is required for the console addon. Set it in your createSingletonServices using PikkuMetaService from #pikku/pikku-meta-service.gen.js');
     }
     const metaService = existingMetaService;
     const fabricApiUrl = (await variables.get('FABRIC_API_URL')) ?? 'https://api.pikkufabric.com';
     const wiringService = new WiringService(metaService);
+    const secretAdminService = new SecretAdminService(secrets);
     const addonService = new AddonService(fabricApiUrl);
     await addonService.init();
     const metaBasePath = existingMetaService?.basePath;
@@ -41,6 +43,7 @@ export const createSingletonServices = pikkuAddonServices(async (_config, { vari
     return {
         metaService,
         wiringService,
+        secretAdminService,
         addonService,
         workflowService,
         workflowRunService,

package/dist/src/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EACH,OAAO,EACP,EACE,SAAS,EACT,WAAW,EAAE,mBAAmB,EAChC,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,KAAK,EACL,IAAI,GACL,EACD,EAAE;IACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAA;IACvC,MAAM,YAAY,GAChB,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,6BAA6B,CAAA;IAE1E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IAEzB,MAAM,YAAY,GAAG,mBAAmB,EAAE,QAAQ,CAAA;IAClD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QACjD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAClD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAClE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,iCAAiC,CAAA;YACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa;QACb,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,eAAe;QACf,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,YAAY;QACZ,cAAc;QACd,mEAAmE;QACnE,mEAAmE;QACnE,gEAAgE;QAChE,4CAA4C;QAC5C,KAAK;QACL,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,IAAI;KACL,CAAA;AACH,CAAC,CACF,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EACH,OAAO,EACP,EACE,SAAS,EACT,OAAO,EACP,WAAW,EAAE,mBAAmB,EAChC,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,KAAK,EACL,IAAI,GACL,EACD,EAAE;IACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAA;IACvC,MAAM,YAAY,GAChB,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,6BAA6B,CAAA;IAE1E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IAEzB,MAAM,YAAY,GAAG,mBAAmB,EAAE,QAAQ,CAAA;IAClD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,eAAe,GAA2B,IAAI,CAAA;IAClD,IAAI,gBAAgB,GAA4B,IAAI,CAAA;IACpD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QACjD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAClD,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAClE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,iCAAiC,CAAA;YACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,eAAe,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa;QACb,kBAAkB;QAClB,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,eAAe;QACf,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,YAAY;QACZ,cAAc;QACd,mEAAmE;QACnE,mEAAmE;QACnE,gEAAgE;QAChE,4CAA4C;QAC5C,KAAK;QACL,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,IAAI;KACL,CAAA;AACH,CAAC,CACF,CAAA"}

package/dist/types/application-types.d.ts

@@ -0,0 +1,43 @@
+import type {
+  CoreConfig,
+  CoreServices,
+  CoreSingletonServices,
+  CoreUserSession,
+} from '@pikku/core'
+import type { MetaService } from '@pikku/core/services'
+import type { WiringService } from '../src/services/wiring.service.js'
+import type { AddonService } from '../src/services/addon.service.js'
+import type { CodeEditService } from '../src/services/code-edit.service.js'
+import type { StateDiffService } from '../src/services/state-diff.service.js'
+import type { DbSchemaService } from '../src/services/db-schema.service.js'
+import type { KnowledgeService } from '../src/services/knowledge.service.js'
+import type { SecretAdminService } from '../src/services/secret-admin.service.js'
+import type { BetterAuthInstance } from '@pikku/better-auth'
+
+export interface Config extends CoreConfig {}
+
+export interface UserSession extends CoreUserSession {}
+
+export interface SingletonServices extends CoreSingletonServices<Config> {
+  metaService: MetaService
+  wiringService: WiringService
+  /**
+   * Secret administration. The console's own surface for it — the addon holds
+   * the `SecretService` so no console function has to.
+   */
+  secretAdminService: SecretAdminService
+  addonService: AddonService
+  codeEditService: CodeEditService | null
+  stateDiffService: StateDiffService | null
+  dbSchemaService: DbSchemaService | null
+  knowledgeService: KnowledgeService | null
+  /**
+   * The host's resolved better-auth instance, wired by `pikkuBetterAuth`. The
+   * console never constructs it — it is declared here only so the functions
+   * that read the auth adapter (e.g. the user directory) are typed rather than
+   * casting. Absent when the host wires no auth at all.
+   */
+  auth?: () => Promise<BetterAuthInstance>
+}
+
+export interface Services extends CoreServices<SingletonServices> {}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@pikku/addon-console",
-  "version": "0.12.38",
+  "version": "0.12.40",
   "description": "Console addon for Pikku — functions powering the Pikku Console UI",
   "type": "module",
   "imports": {
     "#pikku": {
-      "types": "./.pikku/pikku-types.gen.ts",
+      "types": "./dist/.pikku/pikku-types.gen.d.ts",
       "import": "./dist/.pikku/pikku-types.gen.js",
       "default": "./dist/.pikku/pikku-types.gen.js"
     }
@@ -32,15 +32,15 @@
     "dist"
   ],
   "scripts": {
-    "build": "pikku all && tsc && (cp .pikku/rpc/*.d.ts dist/.pikku/rpc/ 2>/dev/null || true) && (cp .pikku/agent/*.d.ts dist/.pikku/agent/ 2>/dev/null || true) && (cp .pikku/workflow/*.d.ts dist/.pikku/workflow/ 2>/dev/null || true) && (mkdir -p dist/.pikku/function && cp .pikku/function/*-verbose.gen.json dist/.pikku/function/ 2>/dev/null || true)",
+    "build": "pikku all && tsc && (cp .pikku/rpc/*.d.ts dist/.pikku/rpc/ 2>/dev/null || true) && (cp .pikku/agent/*.d.ts dist/.pikku/agent/ 2>/dev/null || true) && (cp .pikku/workflow/*.d.ts dist/.pikku/workflow/ 2>/dev/null || true) && (mkdir -p dist/.pikku/function && cp .pikku/function/*-verbose.gen.json dist/.pikku/function/ 2>/dev/null || true) && (mkdir -p dist/types && cp types/*.d.ts dist/types/)",
     "pikku": "pikku all",
     "pretest": "pikku all",
     "test": "tsc --noEmit",
     "test:coverage": "bash run-tests.sh --coverage"
   },
   "peerDependencies": {
-    "@pikku/better-auth": "^0.12.21",
-    "@pikku/core": "^0.12.76"
+    "@pikku/better-auth": "^0.12.23",
+    "@pikku/core": "^0.12.82"
   },
   "peerDependenciesMeta": {
     "@pikku/better-auth": {
@@ -48,14 +48,14 @@
     }
   },
   "devDependencies": {
-    "@pikku/better-auth": "^0.12.21",
-    "@pikku/cli": "^0.12.98",
-    "@pikku/core": "^0.12.76",
+    "@pikku/better-auth": "^0.12.23",
+    "@pikku/cli": "^0.12.102",
+    "@pikku/core": "^0.12.82",
     "oauth2-mock-server": "^7.1.1",
     "typescript": "^6.0.3"
   },
   "dependencies": {
-    "@pikku/knowledge": "^0.12.4",
+    "@pikku/knowledge": "^0.12.5",
     "json-schema": "^0.4.0",
     "open": "^10.0.0"
   },

package/dist/.pikku/schemas/schemas/FunctionCoverageReport.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "generatedAt": { "type": "string" }, "summary": { "type": "object", "properties": { "total": { "type": "number" }, "covered": { "type": "number" }, "partial": { "type": "number" }, "uncovered": { "type": "number" }, "unknown": { "type": "number" }, "overallRatio": { "type": "number" } }, "required": ["total", "covered", "partial", "uncovered", "unknown", "overallRatio"], "additionalProperties": false }, "functions": { "type": "array", "items": { "$ref": "#/definitions/FunctionCoverageEntry" } } }, "required": ["generatedAt", "summary", "functions"], "additionalProperties": false, "definitions": { "FunctionCoverageEntry": { "type": "object", "properties": { "name": { "type": "string" }, "sourceFile": { "type": "string" }, "exposed": { "type": "boolean" }, "description": { "type": ["string", "null"] }, "coveredLines": { "type": "number" }, "totalLines": { "type": "number" }, "missedLines": { "type": "array", "items": { "type": "number" } }, "ratio": { "type": "number" }, "status": { "$ref": "#/definitions/CoverageStatus" } }, "required": ["name", "sourceFile", "exposed", "description", "coveredLines", "totalLines", "missedLines", "ratio", "status"], "additionalProperties": false }, "CoverageStatus": { "type": "string", "enum": ["covered", "partial", "uncovered", "unknown"] } } }

package/dist/.pikku/schemas/schemas/GetAIWorkflowsInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "agentName": { "type": "string" } }, "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/GetAIWorkflowsOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "array", "items": { "type": "object", "properties": { "workflowName": { "type": "string" }, "graphHash": { "type": "string" }, "graph": {} }, "required": ["workflowName", "graphHash", "graph"], "additionalProperties": false }, "definitions": {} }

package/dist/.pikku/schemas/schemas/GetAddonMetaOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "array", "items": { "$ref": "#/definitions/AddonPackageInfo" }, "definitions": { "AddonPackageInfo": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "displayName": { "type": "string" }, "version": { "type": "string" }, "description": { "type": "string" }, "author": { "type": "string" }, "repository": { "type": "string" }, "license": { "type": "string" }, "readme": { "type": "string" }, "icon": { "type": "string" }, "publishedAt": { "type": "string" }, "updatedAt": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "categories": { "type": "array", "items": { "type": "string" } }, "functions": { "$ref": "#/definitions/FunctionsMeta" }, "agents": { "type": "object", "additionalProperties": {} }, "secrets": { "type": "object", "additionalProperties": {} }, "credentials": { "type": "object", "additionalProperties": {}, "description": "OAuth2 + wire credentials the addon declares (from its own `credentials/pikku-credentials-meta.gen.json`). Entries with an `oauth2` field are OAuth integrations to connect; the rest are wire credentials." }, "variables": { "type": "object", "additionalProperties": {} }, "httpRoutes": { "$ref": "#/definitions/HTTPWiringsMeta" }, "channels": { "$ref": "#/definitions/ChannelsMeta" }, "cli": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLIProgramMeta" } }, "mcp": { "anyOf": [{ "$ref": "#/definitions/McpMeta" }, { "type": "null" }] }, "schemas": { "type": "object", "additionalProperties": {} } }, "required": ["id", "name", "displayName", "version", "description", "author", "publishedAt", "updatedAt", "tags", "categories", "functions", "agents", "secrets", "credentials", "variables", "httpRoutes", "channels", "cli", "mcp", "schemas"], "additionalProperties": false }, "FunctionsMeta": { "type": "object", "additionalProperties": { "$ref": "#/definitions/FunctionMeta" } }, "FunctionMeta": { "type": "object", "additionalProperties": false, "properties": { "name": { "type": "string" }, "functionType": { "type": "string", "enum": ["user", "inline", "helper"] }, "funcWrapper": { "type": "string" }, "services": { "$ref": "#/definitions/FunctionServicesMeta" }, "wires": { "$ref": "#/definitions/FunctionWiresMeta" }, "inputs": { "anyOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }] }, "outputs": { "anyOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }] }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "permissions": { "type": "array", "items": { "$ref": "#/definitions/PermissionMetadata" } }, "isDirectFunction": { "type": "boolean" }, "sourceFile": { "type": "string" }, "exportedName": { "type": "string" }, "bodySourceFile": { "type": "string", "description": "File containing the handler body when it differs from sourceFile (imported handlers)" }, "bodyStart": { "type": "number", "description": "1-indexed first line of the handler body (verbose meta; coverage mapping)" }, "bodyEnd": { "type": "number", "description": "1-indexed last line of the handler body (verbose meta; coverage mapping)" }, "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "title": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "inputSchemaName": { "type": ["string", "null"] }, "outputSchemaName": { "type": ["string", "null"] }, "scopes": { "type": "array", "items": { "type": "string" }, "description": "Scopes the session must hold to run this function. All are required (AND)." }, "expose": { "type": "boolean" }, "remote": { "type": "boolean" }, "mcp": { "type": "boolean" }, "readonly": { "type": "boolean" }, "deploy": { "type": "string", "enum": ["serverless", "server", "auto"] }, "sessionless": { "type": "boolean" }, "workflowQueued": { "type": "boolean", "description": "When true, workflow steps calling this function are dispatched via the queue. No queue service configured is a hard error." }, "workflowRetries": { "type": "number", "description": "Retry count when this function is used as a workflow step." }, "workflowTimeout": { "type": "string", "description": "Timeout when this function is used as a workflow step (e.g. '30s', '5m')." }, "version": { "type": "number" }, "approvalRequired": { "type": "boolean" }, "approvalDescription": { "type": "string" }, "implementationHash": { "type": "string" }, "contractHash": { "type": "string" }, "inputHash": { "type": "string" }, "outputHash": { "type": "string" } }, "required": ["inputSchemaName", "outputSchemaName", "pikkuFuncId"] }, "FunctionServicesMeta": { "type": "object", "properties": { "optimized": { "type": "boolean" }, "services": { "type": "array", "items": { "type": "string" } } }, "required": ["optimized", "services"], "additionalProperties": false }, "FunctionWiresMeta": { "type": "object", "properties": { "optimized": { "type": "boolean" }, "wires": { "type": "array", "items": { "type": "string" } } }, "required": ["optimized", "wires"], "additionalProperties": false }, "MiddlewareMetadata": { "anyOf": [{ "type": "object", "properties": { "type": { "type": "string", "const": "http" }, "route": { "type": "string" } }, "required": ["type", "route"], "additionalProperties": false }, { "type": "object", "properties": { "type": { "type": "string", "const": "tag" }, "tag": { "type": "string" } }, "required": ["type", "tag"], "additionalProperties": false }, { "type": "object", "properties": { "type": { "type": "string", "const": "wire" }, "name": { "type": "string" }, "inline": { "type": "boolean" } }, "required": ["type", "name"], "additionalProperties": false }], "description": "Metadata for middleware at any level\n- type: 'http' = HTTP route middleware group (references httpGroup in pikkuState)\n- type: 'tag' = Tag-based middleware group (references tagGroup in pikkuState)\n- type: 'wire' = Wire-level individual middleware" }, "PermissionMetadata": { "type": "object", "properties": { "type": { "type": "string", "const": "wire" }, "name": { "type": "string" }, "inline": { "type": "boolean" } }, "required": ["type", "name"], "additionalProperties": false, "description": "A reference to a permission function a function declares, resolved by name. Used at filter time (e.g. listing agent tools) to run the session-only (pikkuAuth) predicates without request data. Permissions are function-scoped only — there are no wire- or tag-level permission references." }, "HTTPWiringsMeta": { "type": "object", "properties": { "post": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "get": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "delete": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "patch": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "head": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "put": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } }, "options": { "type": "object", "additionalProperties": { "$ref": "#/definitions/HTTPWiringMeta" } } }, "required": ["post", "get", "delete", "patch", "head", "put", "options"], "additionalProperties": false }, "HTTPWiringMeta": { "type": "object", "additionalProperties": false, "properties": { "route": { "type": "string" }, "method": { "$ref": "#/definitions/HTTPMethod" }, "refTarget": { "type": "string" }, "params": { "type": "array", "items": { "type": "string" } }, "query": { "type": "array", "items": { "type": "string" } }, "inputTypes": { "$ref": "#/definitions/HTTPFunctionMetaInputTypes" }, "headersSchemaName": { "type": "string" }, "sse": { "type": "boolean", "const": true }, "groupBasePath": { "type": "string" }, "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "title": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "permissions": { "type": "array", "items": { "$ref": "#/definitions/PermissionMetadata" } } }, "required": ["method", "pikkuFuncId", "route"], "description": "Represents metadata for a set of HTTP wirings, including HTTP wiring details, methods, input/output types, and documentation." }, "HTTPMethod": { "type": "string", "enum": ["post", "get", "delete", "patch", "head", "put", "options"], "description": "Represents the HTTP methods supported for API HTTP wirings." }, "HTTPFunctionMetaInputTypes": { "type": "object", "properties": { "params": { "type": "string" }, "query": { "type": "string" }, "body": { "type": "string" } }, "additionalProperties": false, "description": "Represents the input types for HTTP wiring metadata, including parameters, query, and body types." }, "ChannelsMeta": { "type": "object", "additionalProperties": { "$ref": "#/definitions/ChannelMeta" } }, "ChannelMeta": { "type": "object", "properties": { "name": { "type": "string" }, "route": { "type": "string" }, "params": { "type": "array", "items": { "type": "string" } }, "query": { "type": "array", "items": { "type": "string" } }, "input": { "type": ["string", "null"] }, "inputTypes": { "$ref": "#/definitions/HTTPFunctionMetaInputTypes" }, "connect": { "anyOf": [{ "$ref": "#/definitions/ChannelMessageMeta" }, { "type": "null" }] }, "disconnect": { "anyOf": [{ "$ref": "#/definitions/ChannelMessageMeta" }, { "type": "null" }] }, "message": { "anyOf": [{ "$ref": "#/definitions/ChannelMessageMeta" }, { "type": "null" }] }, "messageWirings": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": { "$ref": "#/definitions/ChannelMessageMeta" } } }, "binary": { "type": ["boolean", "null"] }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "channelMiddleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } } }, "required": ["name", "route", "input", "connect", "disconnect", "message", "messageWirings"], "additionalProperties": false }, "ChannelMessageMeta": { "type": "object", "properties": { "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } } }, "required": ["pikkuFuncId"], "additionalProperties": false }, "CLIProgramMeta": { "type": "object", "properties": { "program": { "type": "string" }, "commands": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLICommandMeta" } }, "options": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLIOption" } }, "defaultRenderName": { "type": "string" } }, "required": ["program", "commands", "options"], "additionalProperties": false, "description": "CLI metadata collection (per program)" }, "CLICommandMeta": { "type": "object", "properties": { "parameters": { "type": "string" }, "pikkuFuncId": { "type": "string" }, "packageName": { "type": "string" }, "positionals": { "type": "array", "items": { "$ref": "#/definitions/CLIPositional" } }, "options": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLIOption" } }, "renderName": { "type": "string" }, "summary": { "type": "string" }, "description": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "subcommands": { "type": "object", "additionalProperties": { "$ref": "#/definitions/CLICommandMeta" } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "isDefault": { "type": "boolean" } }, "required": ["pikkuFuncId", "positionals", "options"], "additionalProperties": false, "description": "CLI command metadata for runtime" }, "CLIPositional": { "type": "object", "properties": { "name": { "type": "string" }, "required": { "type": "boolean" }, "variadic": { "type": "boolean" } }, "required": ["name", "required"], "additionalProperties": false, "description": "Positional argument definition" }, "CLIOption": { "type": "object", "properties": { "description": { "type": "string" }, "short": { "type": "string" }, "default": {}, "choices": { "type": "array", "items": {} }, "array": { "type": "boolean" }, "required": { "type": "boolean" } }, "required": ["description"], "additionalProperties": false, "description": "CLI option definition" }, "McpMeta": { "type": "object", "properties": { "toolsMeta": { "$ref": "#/definitions/MCPToolMeta" }, "resourcesMeta": { "$ref": "#/definitions/MCPResourceMeta" }, "promptsMeta": { "$ref": "#/definitions/MCPPromptMeta" } }, "required": ["toolsMeta", "resourcesMeta", "promptsMeta"], "additionalProperties": false }, "MCPToolMeta": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": false, "properties": { "pikkuFuncId": { "type": "string" }, "inputSchema": { "type": ["string", "null"] }, "outputSchema": { "type": ["string", "null"] }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "name": { "type": "string" }, "title": { "type": "string" }, "description": { "type": "string" }, "summary": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } }, "streaming": { "type": "boolean" } }, "required": ["inputSchema", "name", "outputSchema", "pikkuFuncId"] }, "description": "Represents metadata for MCP tools, including name, description, and documentation." }, "MCPResourceMeta": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": false, "properties": { "pikkuFuncId": { "type": "string" }, "inputSchema": { "type": ["string", "null"] }, "outputSchema": { "type": ["string", "null"] }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "uri": { "type": "string" }, "title": { "type": "string" }, "description": { "type": "string" }, "summary": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "mimeType": { "type": "string" }, "size": { "type": "number" }, "streaming": { "type": "boolean" }, "tags": { "type": "array", "items": { "type": "string" } } }, "required": ["description", "inputSchema", "outputSchema", "pikkuFuncId", "title", "uri"] }, "description": "Represents metadata for MCP resources, including name, description, and documentation." }, "MCPPromptMeta": { "type": "object", "additionalProperties": { "type": "object", "additionalProperties": false, "properties": { "pikkuFuncId": { "type": "string" }, "inputSchema": { "type": ["string", "null"] }, "outputSchema": { "type": ["string", "null"] }, "arguments": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "required": { "type": "boolean" } }, "required": ["name", "description", "required"], "additionalProperties": false } }, "middleware": { "type": "array", "items": { "$ref": "#/definitions/MiddlewareMetadata" } }, "name": { "type": "string" }, "description": { "type": "string" }, "summary": { "type": "string" }, "errors": { "type": "array", "items": { "type": "string" } }, "tags": { "type": "array", "items": { "type": "string" } } }, "required": ["arguments", "description", "inputSchema", "name", "outputSchema", "pikkuFuncId"] }, "description": "Represents metadata for MCP prompts, including name, description, and arguments." } } }

package/dist/.pikku/schemas/schemas/GetStubCallsInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "service": { "type": "string" } }, "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/GetStubCallsOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "array", "items": { "$ref": "#/definitions/StubCallEntry" }, "definitions": { "StubCallEntry": { "type": "object", "properties": { "service": { "type": "string" }, "method": { "type": "string" }, "args": { "type": "array", "items": {} } }, "required": ["service", "method", "args"], "additionalProperties": false } } }

package/dist/.pikku/schemas/schemas/OauthConnectInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" }, "callbackUrl": { "type": "string" }, "userId": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthConnectOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "authUrl": { "type": "string" } }, "required": ["authUrl"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthDisconnectInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthExchangeTokensInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "code": { "type": "string" }, "state": { "type": "string" } }, "required": ["code", "state"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthExchangeTokensOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthRefreshTokenInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthRefreshTokenOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "success": { "type": "boolean" }, "error": { "type": "string" } }, "required": ["success"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthStatusInput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "credentialName": { "type": "string" } }, "required": ["credentialName"], "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/OauthStatusOutput.schema.json

@@ -1 +0,0 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "connected": { "type": "boolean" }, "hasRefreshToken": { "type": "boolean" }, "expiresAt": { "type": "number" }, "isExpired": { "type": "boolean" } }, "required": ["connected"], "additionalProperties": false, "definitions": {} }