@pikku/addon-console 0.12.38 → 0.12.41

package/dist/src/functions/get-addon-instances.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-addon-instances.function.js","sourceRoot":"","sources":["../../../src/functions/get-addon-instances.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAajD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,mFAAmF;IACrF,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;QACxD,MAAM,SAAS,GAAoB,EAAE,CAAA;QACrC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;gBAAE,SAAQ;YAC5C,SAAS,CAAC,IAAI,CAAC;gBACb,SAAS;gBACT,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;aAChD,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-addon-instances.function.js","sourceRoot":"","sources":["../../../src/functions/get-addon-instances.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAalD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,mFAAmF;IACrF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;QACxD,MAAM,SAAS,GAAoB,EAAE,CAAA;QACrC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;gBAAE,SAAQ;YAC5C,SAAS,CAAC,IAAI,CAAC;gBACb,SAAS;gBACT,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;aAChD,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-addon-meta.function.d.ts

@@ -1,3 +1,3 @@
 import type { AddonMetaPage, AddonMetaQuery } from '../services/addon.service.js';
-export declare const getAddonMeta: import("#pikku").PikkuFunctionConfig<AddonMetaQuery | null, AddonMetaPage, "rpc" | "session", import("#pikku").PikkuFunction<AddonMetaQuery | null, AddonMetaPage, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<AddonMetaQuery | null, AddonMetaPage, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getAddonMeta: import("#pikku").PikkuFunctionConfig<AddonMetaQuery | null, AddonMetaPage, "rpc" | "session", import("#pikku").PikkuFunction<AddonMetaQuery | null, AddonMetaPage, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<AddonMetaQuery | null, AddonMetaPage, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-addon-meta.function.d.ts.map

package/dist/src/functions/get-addon-meta.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-addon-meta.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-addon-meta.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACf,MAAM,8BAA8B,CAAA;AAErC,eAAO,MAAM,YAAY,mXAQvB,CAAA"}
+{"version":3,"file":"get-addon-meta.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-addon-meta.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACf,MAAM,8BAA8B,CAAA;AAErC,eAAO,MAAM,YAAY,4XASvB,CAAA"}

package/dist/src/functions/get-addon-meta.function.js

@@ -3,6 +3,7 @@ export const getAddonMeta = pikkuFunc({
     title: 'Get Addon Metadata',
     description: 'Returns one page of the addon catalogue. Search, category and sort are applied by the registry rather than the caller, so they cover every package and not just the pages already loaded.',
     expose: true,
+    scopes: ['pikku:console:addons:read'],
     func: async ({ addonService }, input) => {
         return await addonService.readAddonsMeta(input ?? {});
     },

package/dist/src/functions/get-addon-meta.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-addon-meta.function.js","sourceRoot":"","sources":["../../../src/functions/get-addon-meta.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAMlC,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAuC;IAC1E,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,2LAA2L;IAC7L,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE;QACtC,OAAO,MAAM,YAAY,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IACvD,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-addon-meta.function.js","sourceRoot":"","sources":["../../../src/functions/get-addon-meta.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAMlC,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAuC;IAC1E,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,2LAA2L;IAC7L,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE;QACtC,OAAO,MAAM,YAAY,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IACvD,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-addon-package.function.d.ts

@@ -5,5 +5,5 @@ export declare const getAddonCommunityPackage: import("#pikku").PikkuFunctionCon
     id: string;
 }, AddonPackageInfo | null, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
     id: string;
-}, AddonPackageInfo | null, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, AddonPackageInfo | null, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-addon-package.function.d.ts.map

package/dist/src/functions/get-addon-package.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-addon-package.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-addon-package.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAEpE,eAAO,MAAM,wBAAwB;QAC7B,MAAM;;QAAN,MAAM;;QAAN,MAAM;qGAUZ,CAAA"}
+{"version":3,"file":"get-addon-package.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-addon-package.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAEpE,eAAO,MAAM,wBAAwB;QAC7B,MAAM;;QAAN,MAAM;;QAAN,MAAM;8GAWZ,CAAA"}

package/dist/src/functions/get-addon-package.function.js

@@ -3,6 +3,7 @@ export const getAddonCommunityPackage = pikkuFunc({
     title: 'Get Community Addon Package',
     description: 'Returns the full details of a community addon by ID from the registry',
     expose: true,
+    scopes: ['pikku:console:addons:read'],
     func: async ({ addonService }, { id }) => {
         return await addonService.readAddon(id);
     },

package/dist/src/functions/get-addon-package.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-addon-package.function.js","sourceRoot":"","sources":["../../../src/functions/get-addon-package.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,uEAAuE;IACzE,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACvC,OAAO,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-addon-package.function.js","sourceRoot":"","sources":["../../../src/functions/get-addon-package.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,uEAAuE;IACzE,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACvC,OAAO,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-run-scores.function.d.ts

@@ -0,0 +1,8 @@
+export declare const getAgentRunScores: import("#pikku").PikkuFunctionConfig<{
+    runId: string;
+}, any[], "rpc" | "session", import("#pikku").PikkuFunction<{
+    runId: string;
+}, any[], "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    runId: string;
+}, any[], "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=get-agent-run-scores.function.d.ts.map

package/dist/src/functions/get-agent-run-scores.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-run-scores.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-run-scores.function.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,iBAAiB;WAAsB,MAAM;;WAAN,MAAM;;WAAN,MAAM;4FAuBxD,CAAA"}

package/dist/src/functions/get-agent-run-scores.function.js

@@ -0,0 +1,24 @@
+import { hasScopes, NotFoundError } from '@pikku/core';
+import { canAccessThread } from '@pikku/core/ai-agent';
+import { pikkuFunc } from '#pikku';
+const ADMIN_SCOPE_ROOT = 'admin';
+export const getAgentRunScores = pikkuFunc({
+    title: 'Get Agent Run Scores',
+    description: 'Returns every grade recorded against one AI agent run, newest first. A run accumulates one row per scorer, and a re-grade appends rather than replaces — so a run may carry the same scorer more than once. A caller without the admin scope may only read the grades of runs its own session owns.',
+    expose: true,
+    func: async ({ aiRunState }, input, { session }) => {
+        const run = await aiRunState.getRun(input.runId);
+        // A grade quotes the run it graded — a judge's reason is written about the
+        // prompt and the answer — so reading one is reading the run. The same gate
+        // the thread it belongs to would apply, applied here, and a run the caller
+        // may not see is reported as absent rather than as forbidden: otherwise the
+        // refusal itself confirms the id exists.
+        if (!run ||
+            (!hasScopes([ADMIN_SCOPE_ROOT], session?.scopes) &&
+                !canAccessThread(run.resourceId, session))) {
+            throw new NotFoundError(`No agent run '${input.runId}'`);
+        }
+        return await aiRunState.getScores(input.runId);
+    },
+});
+//# sourceMappingURL=get-agent-run-scores.function.js.map

package/dist/src/functions/get-agent-run-scores.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-run-scores.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-run-scores.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAA2B;IACnE,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,qSAAqS;IACvS,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAEhD,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,yCAAyC;QACzC,IACE,CAAC,GAAG;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC;gBAC9C,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,EAC5C,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,iBAAiB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAA;QAC1D,CAAC;QAED,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAChD,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-run-scores.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-agent-run-scores.function.test.d.ts.map

package/dist/src/functions/get-agent-run-scores.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-run-scores.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-run-scores.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/get-agent-run-scores.function.test.js

@@ -0,0 +1,34 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { getAgentRunScores } from './get-agent-run-scores.function.js';
+const SCORES = [{ runId: 'run-1', scorerName: 'brevity', score: 1 }];
+const services = (resourceId) => ({
+    aiRunState: {
+        getRun: async () => (resourceId === null ? null : { resourceId }),
+        getScores: async () => SCORES,
+    },
+});
+const read = (resourceId, session) => getAgentRunScores.func(services(resourceId), { runId: 'run-1' }, {
+    session,
+});
+test('the owner of the run reads its grades', async () => {
+    assert.deepEqual(await read('alice', { userId: 'alice', scopes: [] }), SCORES);
+});
+test("a run belonging to someone else is absent, not forbidden", async () => {
+    // Reported as missing rather than refused: a refusal would confirm the id
+    // exists, which is most of what an enumeration needs.
+    await assert.rejects(() => read('bob', { userId: 'alice', scopes: [] }), /No agent run 'run-1'/);
+});
+test('a sub-partition of the caller principal still belongs to them', async () => {
+    assert.deepEqual(await read('alice:thread-7', { userId: 'alice', scopes: [] }), SCORES);
+});
+test('an admin reads any run', async () => {
+    assert.deepEqual(await read('bob', { userId: 'root', scopes: ['admin'] }), SCORES);
+});
+test('a session with no principals reads nothing', async () => {
+    await assert.rejects(() => read('alice', { scopes: [] }), /No agent run/);
+});
+test('a run that does not exist reads the same as one that is not yours', async () => {
+    await assert.rejects(() => read(null, { userId: 'root', scopes: ['admin'] }), /No agent run 'run-1'/);
+});
+//# sourceMappingURL=get-agent-run-scores.function.test.js.map

package/dist/src/functions/get-agent-run-scores.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-run-scores.function.test.js","sourceRoot":"","sources":["../../../src/functions/get-agent-run-scores.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AAEtE,MAAM,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;AAEpE,MAAM,QAAQ,GAAG,CAAC,UAAyB,EAAE,EAAE,CAC7C,CAAC;IACC,UAAU,EAAE;QACV,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACjE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;KAC9B;CACF,CAAU,CAAA;AAEb,MAAM,IAAI,GAAG,CAAC,UAAyB,EAAE,OAAgB,EAAE,EAAE,CAC3D,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAW,EAAE;IACxE,OAAO;CACC,CAAC,CAAA;AAEb,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;IACvD,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;AAChF,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAClD,sBAAsB,CACvB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,CAAC,SAAS,CACd,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAC7D,MAAM,CACP,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;IACxC,MAAM,CAAC,SAAS,CACd,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EACxD,MAAM,CACP,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;IAC5D,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,cAAc,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EACvD,sBAAsB,CACvB,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.d.ts

@@ -4,5 +4,5 @@ export declare const getAgentThreadMessages: import("#pikku").PikkuFunctionConfi
     threadId: string;
 }, any[], "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
     threadId: string;
-}, any[], "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, any[], "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-agent-thread-messages.function.d.ts.map

package/dist/src/functions/get-agent-thread-messages.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-messages.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;mFAQhE,CAAA"}
+{"version":3,"file":"get-agent-thread-messages.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;4FAShE,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.js

@@ -3,6 +3,7 @@ export const getAgentThreadMessages = pikkuFunc({
     title: 'Get Agent Thread Messages',
     description: 'Returns all messages for a given AI agent thread, ordered by creation time.',
     expose: true,
+    scopes: ['pikku:console:agents:read'],
     func: async ({ agentRunService }, input) => {
         return await agentRunService.getThreadMessages(input.threadId);
     },

package/dist/src/functions/get-agent-thread-messages.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-messages.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAA8B;IAC3E,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,6EAA6E;IAC/E,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-agent-thread-messages.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAA8B;IAC3E,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,6EAA6E;IAC/E,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-runs.function.d.ts

@@ -4,5 +4,5 @@ export declare const getAgentThreadRuns: import("#pikku").PikkuFunctionConfig<{
     threadId: string;
 }, any[], "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
     threadId: string;
-}, any[], "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, any[], "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-agent-thread-runs.function.d.ts.map

package/dist/src/functions/get-agent-thread-runs.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-runs.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-runs.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;mFAQ5D,CAAA"}
+{"version":3,"file":"get-agent-thread-runs.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-runs.function.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,kBAAkB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;4FAiB5D,CAAA"}

package/dist/src/functions/get-agent-thread-runs.function.js

@@ -1,10 +1,22 @@
+import { hasScopes } from '@pikku/core';
+import { canAccessThread } from '@pikku/core/ai-agent';
 import { pikkuFunc } from '#pikku';
+const ADMIN_SCOPE_ROOT = 'admin';
 export const getAgentThreadRuns = pikkuFunc({
     title: 'Get Agent Thread Runs',
-    description: 'Returns all runs for a given AI agent thread, ordered by creation time descending.',
+    description: 'Returns all runs for a given AI agent thread, ordered by creation time descending. A caller without the admin scope sees only the runs its own session owns.',
     expose: true,
-    func: async ({ agentRunService }, input) => {
-        return await agentRunService.getThreadRuns(input.threadId);
+    scopes: ['pikku:console:agents:read'],
+    func: async ({ agentRunService }, input, { session }) => {
+        const runs = await agentRunService.getThreadRuns(input.threadId);
+        if (hasScopes([ADMIN_SCOPE_ROOT], session?.scopes)) {
+            return runs;
+        }
+        // A run names the model, the tools it reached for and why it failed, so it
+        // is read under the same ownership as the thread it belongs to. Filtered
+        // rather than refused: an empty list is what a thread with no runs returns
+        // too, so the answer never confirms that someone else's thread exists.
+        return runs.filter((run) => canAccessThread(run.resourceId, session));
     },
 });
 //# sourceMappingURL=get-agent-thread-runs.function.js.map

package/dist/src/functions/get-agent-thread-runs.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-runs.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-runs.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAA8B;IACvE,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oFAAoF;IACtF,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC5D,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-agent-thread-runs.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-runs.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAA8B;IACvE,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,8JAA8J;IAChK,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChE,IAAI,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IACvE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-runs.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-agent-thread-runs.function.test.d.ts.map

package/dist/src/functions/get-agent-thread-runs.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-runs.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-runs.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/get-agent-thread-runs.function.test.js

@@ -0,0 +1,27 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { getAgentThreadRuns } from './get-agent-thread-runs.function.js';
+const RUNS = [
+    { runId: 'run-1', resourceId: 'alice' },
+    { runId: 'run-2', resourceId: 'bob' },
+];
+const services = {
+    agentRunService: { getThreadRuns: async () => RUNS },
+};
+const read = (session) => getAgentThreadRuns.func(services, { threadId: 'thread-1' }, {
+    session,
+});
+test('a caller sees only the runs their own session owns', async () => {
+    assert.deepEqual(await read({ userId: 'alice', scopes: [] }), [RUNS[0]]);
+});
+test('an admin sees every run on the thread', async () => {
+    assert.deepEqual(await read({ userId: 'root', scopes: ['admin'] }), RUNS);
+});
+test("someone else's thread reads the same as an empty one", async () => {
+    // Filtered, not refused: a refusal would confirm the thread exists.
+    assert.deepEqual(await read({ userId: 'carol', scopes: [] }), []);
+});
+test('a session with no principals sees nothing', async () => {
+    assert.deepEqual(await read({ scopes: [] }), []);
+});
+//# sourceMappingURL=get-agent-thread-runs.function.test.js.map

package/dist/src/functions/get-agent-thread-runs.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-runs.function.test.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-runs.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAA;AAExE,MAAM,IAAI,GAAG;IACX,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;IACvC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE;CACtC,CAAA;AAED,MAAM,QAAQ,GAAG;IACf,eAAe,EAAE,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE;CAC5C,CAAA;AAEV,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE,CAChC,kBAAkB,CAAC,IAAI,CACrB,QAAQ,EACR,EAAE,QAAQ,EAAE,UAAU,EAAW,EACjC;IACE,OAAO;CACC,CACX,CAAA;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1E,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;IACvD,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,oEAAoE;IACpE,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;IAC3D,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-agent-threads.function.d.ts

@@ -13,5 +13,5 @@ export declare const getAgentThreads: import("#pikku").PikkuFunctionConfig<{
     resourceId?: string;
     limit?: number;
     offset?: number;
-}, any[], "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, any[], "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-agent-threads.function.d.ts.map

package/dist/src/functions/get-agent-threads.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-threads.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-threads.function.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,eAAe;gBACZ,MAAM;iBAAe,MAAM;YAAU,MAAM;aAAW,MAAM;;gBAA5D,MAAM;iBAAe,MAAM;YAAU,MAAM;aAAW,MAAM;;gBAA5D,MAAM;iBAAe,MAAM;YAAU,MAAM;aAAW,MAAM;mFAmB1E,CAAA"}
+{"version":3,"file":"get-agent-threads.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-threads.function.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,eAAe;gBACZ,MAAM;iBAAe,MAAM;YAAU,MAAM;aAAW,MAAM;;gBAA5D,MAAM;iBAAe,MAAM;YAAU,MAAM;aAAW,MAAM;;gBAA5D,MAAM;iBAAe,MAAM;YAAU,MAAM;aAAW,MAAM;4FAoB1E,CAAA"}

package/dist/src/functions/get-agent-threads.function.js

@@ -6,6 +6,7 @@ export const getAgentThreads = pikkuFunc({
     title: 'Get Agent Threads',
     description: 'Returns a list of AI agent threads from the database. Accepts optional filters: agentName, resourceId, limit, and offset for pagination. A caller without the admin scope sees only the threads its own session owns.',
     expose: true,
+    scopes: ['pikku:console:agents:read'],
     func: async ({ agentRunService }, input, { session }) => {
         const owners = hasScopes([ADMIN_SCOPE_ROOT], session?.scopes)
             ? undefined

package/dist/src/functions/get-agent-threads.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-threads.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-threads.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,uNAAuN;IACzN,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC;YAC3D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAA;QAClC,OAAO,MAAM,eAAe,CAAC,WAAW,CAAC;YACvC,SAAS,EAAE,KAAK,EAAE,SAAS;YAC3B,UAAU,EAAE,KAAK,EAAE,UAAU;YAC7B,MAAM;YACN,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-agent-threads.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-threads.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,uNAAuN;IACzN,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC;YAC3D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAA;QAClC,OAAO,MAAM,eAAe,CAAC,WAAW,CAAC;YACvC,SAAS,EAAE,KAAK,EAAE,SAAS;YAC3B,UAAU,EAAE,KAAK,EAAE,UAAU;YAC7B,MAAM;YACN,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-threads.function.test.js

@@ -18,7 +18,11 @@ const recordingAgentRunService = () => {
 test('a non-admin session lists only the threads its principals own', async () => {
     const { calls, services } = recordingAgentRunService();
     await getAgentThreads.func(services, {}, {
-        session: { userId: 'alice', orgId: 'org-x', scopes: ['pikku:scopes:read'] },
+        session: {
+            userId: 'alice',
+            orgId: 'org-x',
+            scopes: ['pikku:console:scopes:read'],
+        },
     });
     assert.deepEqual(calls[0].owners, ['alice', 'org-x']);
 });
@@ -45,7 +49,11 @@ test('an admin grant nested under the umbrella still lists every thread', async
 });
 test('input filters cannot widen the owners constraint', async () => {
     const { calls, services } = recordingAgentRunService();
-    await getAgentThreads.func(services, { agentName: 'support', resourceId: 'mallory', owners: ['mallory'] }, { session: { userId: 'alice', scopes: [] } });
+    await getAgentThreads.func(services, {
+        agentName: 'support',
+        resourceId: 'mallory',
+        owners: ['mallory'],
+    }, { session: { userId: 'alice', scopes: [] } });
     assert.deepEqual(calls[0].owners, ['alice']);
     assert.equal(calls[0].resourceId, 'mallory');
 });

package/dist/src/functions/get-agent-threads.function.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-threads.function.test.js","sourceRoot":"","sources":["../../../src/functions/get-agent-threads.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAEjE,MAAM,wBAAwB,GAAG,GAAG,EAAE;IACpC,MAAM,KAAK,GAAU,EAAE,CAAA;IACvB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE;YACR,eAAe,EAAE;gBACf,WAAW,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;oBAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBACnB,OAAO,EAAE,CAAA;gBACX,CAAC;aACF;SACO;KACX,CAAA;AACH,CAAC,CAAA;AAED,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAW,EAAE;QAChD,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE;KACnE,CAAC,CAAA;IACX,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AACvD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAW,EAAE;QAChD,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACf,CAAC,CAAA;IACX,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;IACrD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAW,EAAE;QAChD,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;KACtC,CAAC,CAAA;IACX,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAW,EAAE;QAChD,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;KACxC,CAAC,CAAA;IACX,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CACxB,QAAQ,EACR,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAW,EAC7E,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAW,CACtD,CAAA;IACD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;AAC9C,CAAC,CAAC,CAAA"}
+{"version":3,"file":"get-agent-threads.function.test.js","sourceRoot":"","sources":["../../../src/functions/get-agent-threads.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAEjE,MAAM,wBAAwB,GAAG,GAAG,EAAE;IACpC,MAAM,KAAK,GAAU,EAAE,CAAA;IACvB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE;YACR,eAAe,EAAE;gBACf,WAAW,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;oBAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBACnB,OAAO,EAAE,CAAA;gBACX,CAAC;aACF;SACO;KACX,CAAA;AACH,CAAC,CAAA;AAED,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CACxB,QAAQ,EACR,EAAW,EACX;QACE,OAAO,EAAE;YACP,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,CAAC,2BAA2B,CAAC;SACtC;KACO,CACX,CAAA;IACD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AACvD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CACxB,QAAQ,EACR,EAAW,EACX;QACE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACf,CACX,CAAA;IACD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;IACrD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CACxB,QAAQ,EACR,EAAW,EACX;QACE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;KACtC,CACX,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CACxB,QAAQ,EACR,EAAW,EACX;QACE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;KACxC,CACX,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CACxB,QAAQ,EACR;QACE,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,CAAC,SAAS,CAAC;KACX,EACV,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAW,CACtD,CAAA;IACD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;AAC9C,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-all-meta.function.d.ts

@@ -1,3 +1,3 @@
 import type { AllMeta } from '../services/wiring.service.js';
-export declare const getAllMeta: import("#pikku").PikkuFunctionConfig<null, AllMeta, "rpc" | "session", import("#pikku").PikkuFunction<null, AllMeta, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, AllMeta, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getAllMeta: import("#pikku").PikkuFunctionConfig<null, AllMeta, "rpc" | "session", import("#pikku").PikkuFunction<null, AllMeta, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, AllMeta, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-all-meta.function.d.ts.map

package/dist/src/functions/get-all-meta.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-all-meta.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-all-meta.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAA;AAE5D,eAAO,MAAM,UAAU,8SAQrB,CAAA"}
+{"version":3,"file":"get-all-meta.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-all-meta.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAA;AAE5D,eAAO,MAAM,UAAU,uTASrB,CAAA"}

package/dist/src/functions/get-all-meta.function.js

@@ -3,6 +3,7 @@ export const getAllMeta = pikkuFunc({
     title: 'Get All Metadata',
     description: 'Reads and returns a combined object containing metadata for every wiring type (HTTP, RPC, channels, schedulers, queues, workflows, CLI, MCP, gateways, triggers, trigger sources, services, functions, and secrets) by delegating to wiringService.readAllMeta()',
     expose: true,
+    scopes: ['pikku:console:wirings:read'],
     func: async ({ wiringService }) => {
         return await wiringService.readAllMeta();
     },

package/dist/src/functions/get-all-meta.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-all-meta.function.js","sourceRoot":"","sources":["../../../src/functions/get-all-meta.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAgB;IACjD,KAAK,EAAE,kBAAkB;IACzB,WAAW,EACT,kQAAkQ;IACpQ,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QAChC,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-all-meta.function.js","sourceRoot":"","sources":["../../../src/functions/get-all-meta.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAgB;IACjD,KAAK,EAAE,kBAAkB;IACzB,WAAW,EACT,kQAAkQ;IACpQ,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QAChC,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-audit-filters.function.d.ts

@@ -19,5 +19,5 @@ export type GetAuditFiltersOutput = {
  * never be used to reach anything else. It also lets the console cache it once
  * rather than recomputing two distinct scans on every page of an infinite list.
  */
-export declare const getAuditFilters: import("#pikku").PikkuFunctionConfig<null, GetAuditFiltersOutput, "rpc" | "session", import("#pikku").PikkuFunction<null, GetAuditFiltersOutput, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, GetAuditFiltersOutput, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getAuditFilters: import("#pikku").PikkuFunctionConfig<null, GetAuditFiltersOutput, "rpc" | "session", import("#pikku").PikkuFunction<null, GetAuditFiltersOutput, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, GetAuditFiltersOutput, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-audit-filters.function.d.ts.map

package/dist/src/functions/get-audit-filters.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-audit-filters.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-audit-filters.function.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,+BAA+B,CAAA;AAEtC,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;;OAIG;IACH,KAAK,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB,CAAC,CAAA;IACnD,0DAA0D;IAC1D,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,wVAoB1B,CAAA"}
+{"version":3,"file":"get-audit-filters.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-audit-filters.function.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,+BAA+B,CAAA;AAEtC,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;;OAIG;IACH,KAAK,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB,CAAC,CAAA;IACnD,0DAA0D;IAC1D,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,iWAoB1B,CAAA"}

package/dist/src/functions/get-audit-filters.function.js

@@ -12,7 +12,7 @@ export const getAuditFilters = pikkuFunc({
     title: 'Get Audit Filters',
     description: 'Returns the distinct users and event types present in the audit trail, for populating the audit screen filters.',
     expose: true,
-    scopes: ['pikku:audit:read'],
+    scopes: ['pikku:console:audit:read'],
     func: async ({ audit, auth, logger }) => {
         if (!audit?.facets) {
             return { users: [], types: [] };

package/dist/src/functions/get-audit-filters.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-audit-filters.function.js","sourceRoot":"","sources":["../../../src/functions/get-audit-filters.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAA;AAatC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAA8B;IACpE,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,iHAAiH;IACnH,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,kBAAkB,CAAC;IAC5B,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACjC,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;QAC/C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAChE,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,MAAM;gBACN,GAAG,SAAS,CAAC,MAAM,CAAC;aACrB,CAAC,CAAC;YACH,KAAK;SACN,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-audit-filters.function.js","sourceRoot":"","sources":["../../../src/functions/get-audit-filters.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAA;AAatC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAA8B;IACpE,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,iHAAiH;IACnH,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACjC,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;QAC/C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAChE,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,MAAM;gBACN,GAAG,SAAS,CAAC,MAAM,CAAC;aACrB,CAAC,CAAC;YACH,KAAK;SACN,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-audits.function.d.ts

@@ -30,5 +30,5 @@ export type GetAuditsOutput = {
      */
     readable: boolean;
 };
-export declare const getAudits: import("#pikku").PikkuFunctionConfig<GetAuditsInput, GetAuditsOutput, "rpc" | "session", import("#pikku").PikkuFunction<GetAuditsInput, GetAuditsOutput, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<GetAuditsInput, GetAuditsOutput, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getAudits: import("#pikku").PikkuFunctionConfig<GetAuditsInput, GetAuditsOutput, "rpc" | "session", import("#pikku").PikkuFunction<GetAuditsInput, GetAuditsOutput, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<GetAuditsInput, GetAuditsOutput, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-audits.function.d.ts.map

package/dist/src/functions/get-audits.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-audits.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-audits.function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAA;AAEtC,MAAM,MAAM,cAAc,GAAG;IAC3B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,wDAAwD;IACxD,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB;;;;OAIG;IACH,KAAK,EAAE,kBAAkB,CAAA;IACzB,qDAAqD;IACrD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,SAAS,oWAyBpB,CAAA"}
+{"version":3,"file":"get-audits.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-audits.function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAA;AAEtC,MAAM,MAAM,cAAc,GAAG;IAC3B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,wDAAwD;IACxD,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB;;;;OAIG;IACH,KAAK,EAAE,kBAAkB,CAAA;IACzB,qDAAqD;IACrD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,SAAS,6WAyBpB,CAAA"}

package/dist/src/functions/get-audits.function.js

@@ -4,7 +4,7 @@ export const getAudits = pikkuFunc({
     title: 'Get Audits',
     description: 'Returns a page of the audit trail, newest first, optionally filtered by user, event type, and time range. Reports readable: false when the configured audit sink is write-only.',
     expose: true,
-    scopes: ['pikku:audit:read'],
+    scopes: ['pikku:console:audit:read'],
     func: async ({ audit, auth, logger }, input) => {
         if (!audit?.query) {
             return { events: [], users: {}, nextCursor: null, readable: false };

package/dist/src/functions/get-audits.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-audits.function.js","sourceRoot":"","sources":["../../../src/functions/get-audits.function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAA;AAkCtC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAkC;IAClE,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,iLAAiL;IACnL,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,kBAAkB,CAAC;IAC5B,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QACrE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,IAAI,EAAE,KAAK,EAAE,IAAI;YACjB,EAAE,EAAE,KAAK,EAAE,EAAE;YACb,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,EACjD,MAAM,CACP,CAAA;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-audits.function.js","sourceRoot":"","sources":["../../../src/functions/get-audits.function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAA;AAkCtC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAkC;IAClE,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,iLAAiL;IACnL,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QACrE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,IAAI,EAAE,KAAK,EAAE,IAAI;YACjB,EAAE,EAAE,KAAK,EAAE,EAAE;YACb,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,EACjD,MAAM,CACP,CAAA;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-auth-providers.function.d.ts

@@ -12,5 +12,5 @@ export interface AuthProvidersMeta {
     plugins: AuthPluginEntry[];
     hasCredentials: boolean;
 }
-export declare const getAuthProviders: import("#pikku").PikkuFunctionConfig<null, AuthProvidersMeta, "rpc" | "session", import("#pikku").PikkuFunction<null, AuthProvidersMeta, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, AuthProvidersMeta, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getAuthProviders: import("#pikku").PikkuFunctionConfig<null, AuthProvidersMeta, "rpc" | "session", import("#pikku").PikkuFunction<null, AuthProvidersMeta, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, AuthProvidersMeta, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-auth-providers.function.d.ts.map

package/dist/src/functions/get-auth-providers.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-auth-providers.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-auth-providers.function.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,iBAAiB,EAAE,CAAA;IAC9B,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;CACxB;AAyBD,eAAO,MAAM,gBAAgB,4UAM3B,CAAA"}
+{"version":3,"file":"get-auth-providers.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-auth-providers.function.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,iBAAiB,EAAE,CAAA;IAC9B,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;CACxB;AAyBD,eAAO,MAAM,gBAAgB,qVAO3B,CAAA"}

package/dist/src/functions/get-auth-providers.function.js

@@ -24,6 +24,7 @@ export const getAuthProviders = pikkuFunc({
     title: 'Get Auth Providers',
     description: 'Returns the social providers and plugins configured via pikkuBetterAuth(), read from the generated auth-meta.gen.json.',
     expose: true,
+    scopes: ['pikku:console:wirings:read'],
     func: async ({ metaService }) => readAuthMeta(metaService),
 });
 //# sourceMappingURL=get-auth-providers.function.js.map

package/dist/src/functions/get-auth-providers.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-auth-providers.function.js","sourceRoot":"","sources":["../../../src/functions/get-auth-providers.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAoBlC,MAAM,UAAU,GAAsB;IACpC,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,cAAc,EAAE,KAAK;CACtB,CAAA;AAED,KAAK,UAAU,YAAY,CACzB,WAAwB;IAExB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAA;QAC3E,IAAI,CAAC,OAAO;YAAE,OAAO,UAAU,CAAA;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;SAC/C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAA;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAA0B;IACjE,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,wHAAwH;IAC1H,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC;CAC3D,CAAC,CAAA"}
+{"version":3,"file":"get-auth-providers.function.js","sourceRoot":"","sources":["../../../src/functions/get-auth-providers.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAoBlC,MAAM,UAAU,GAAsB;IACpC,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,cAAc,EAAE,KAAK;CACtB,CAAA;AAED,KAAK,UAAU,YAAY,CACzB,WAAwB;IAExB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAA;QAC3E,IAAI,CAAC,OAAO;YAAE,OAAO,UAAU,CAAA;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;SAC/C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAA;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAA0B;IACjE,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,wHAAwH;IAC1H,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC;CAC3D,CAAC,CAAA"}

package/dist/src/functions/get-channel-snippets.function.d.ts

@@ -5,5 +5,5 @@ export declare const getChannelSnippets: import("#pikku").PikkuFunctionConfig<{
     channelName: string;
 }, ChannelSnippets, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
     channelName: string;
-}, ChannelSnippets, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, ChannelSnippets, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-channel-snippets.function.d.ts.map

package/dist/src/functions/get-channel-snippets.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-channel-snippets.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-channel-snippets.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAEpE,eAAO,MAAM,kBAAkB;iBACd,MAAM;;iBAAN,MAAM;;iBAAN,MAAM;6FAarB,CAAA"}
+{"version":3,"file":"get-channel-snippets.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-channel-snippets.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAEpE,eAAO,MAAM,kBAAkB;iBACd,MAAM;;iBAAN,MAAM;;iBAAN,MAAM;sGAcrB,CAAA"}

package/dist/src/functions/get-channel-snippets.function.js

@@ -3,6 +3,7 @@ export const getChannelSnippets = pikkuFunc({
     title: 'Get Channel Snippets',
     description: 'Given a channelName, reads channel metadata from metaService, finds the matching channel, and generates code snippets (overview, handlers, actions) for that channel. Returns empty snippets if the channel is not found.',
     expose: true,
+    scopes: ['pikku:console:wirings:read'],
     func: async ({ metaService, wiringService }, { channelName }) => {
         const channels = await metaService.getChannelsMeta();
         const channel = channels[channelName];

package/dist/src/functions/get-channel-snippets.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-channel-snippets.function.js","sourceRoot":"","sources":["../../../src/functions/get-channel-snippets.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAIlC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,2NAA2N;IAC7N,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC9D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAA;QACpD,MAAM,OAAO,GAA4B,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAChE,OAAO,aAAa,CAAC,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IACpE,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-channel-snippets.function.js","sourceRoot":"","sources":["../../../src/functions/get-channel-snippets.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAIlC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,2NAA2N;IAC7N,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC9D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAA;QACpD,MAAM,OAAO,GAA4B,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAChE,OAAO,aAAa,CAAC,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IACpE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-db-schema.function.d.ts

@@ -1,3 +1,3 @@
 import type { DbSchema } from '../services/db-schema.service.js';
-export declare const getDbSchema: import("#pikku").PikkuFunctionConfig<null, DbSchema | null, "rpc" | "session", import("#pikku").PikkuFunction<null, DbSchema | null, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, DbSchema | null, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getDbSchema: import("#pikku").PikkuFunctionConfig<null, DbSchema | null, "rpc" | "session", import("#pikku").PikkuFunction<null, DbSchema | null, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, DbSchema | null, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-db-schema.function.d.ts.map

package/dist/src/functions/get-db-schema.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-db-schema.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-db-schema.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAA;AAEhE,eAAO,MAAM,WAAW,sUAWtB,CAAA"}
+{"version":3,"file":"get-db-schema.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-db-schema.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAA;AAEhE,eAAO,MAAM,WAAW,+UActB,CAAA"}

package/dist/src/functions/get-db-schema.function.js

@@ -4,6 +4,7 @@ export const getDbSchema = pikkuFunc({
     title: 'Get Database Schema',
     description: 'Introspects the local development SQLite database and returns table/column metadata enriched with data-classification annotations from db/annotations.gen.json.',
     expose: true,
+    scopes: ['pikku:console:db:read'],
     func: async ({ dbSchemaService }) => {
         if (!dbSchemaService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/get-db-schema.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-db-schema.function.js","sourceRoot":"","sources":["../../../src/functions/get-db-schema.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAwB;IAC1D,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,iKAAiK;IACnK,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,CAAC,CAAA;QACjF,CAAC;QACD,OAAO,eAAe,CAAC,SAAS,EAAE,CAAA;IACpC,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-db-schema.function.js","sourceRoot":"","sources":["../../../src/functions/get-db-schema.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAwB;IAC1D,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,iKAAiK;IACnK,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,uBAAuB,CAAC;IACjC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,OAAO,eAAe,CAAC,SAAS,EAAE,CAAA;IACpC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-functions-meta.function.d.ts

@@ -8,5 +8,5 @@ export type FunctionMetaWithVersions = FunctionMeta & {
     version?: number;
     versions?: FunctionVersionEntry[];
 };
-export declare const getFunctionsMeta: import("#pikku").PikkuFunctionConfig<null, FunctionMetaWithVersions[], "rpc" | "session", import("#pikku").PikkuFunction<null, FunctionMetaWithVersions[], "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, FunctionMetaWithVersions[], "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+export declare const getFunctionsMeta: import("#pikku").PikkuFunctionConfig<null, FunctionMetaWithVersions[], "rpc" | "session", import("#pikku").PikkuFunction<null, FunctionMetaWithVersions[], "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<null, FunctionMetaWithVersions[], "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=get-functions-meta.function.d.ts.map

package/dist/src/functions/get-functions-meta.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-functions-meta.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-functions-meta.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,oBAAoB,EAAE,CAAA;CAClC,CAAA;AAED,eAAO,MAAM,gBAAgB,uWAqD3B,CAAA"}
+{"version":3,"file":"get-functions-meta.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-functions-meta.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,oBAAoB,EAAE,CAAA;CAClC,CAAA;AAED,eAAO,MAAM,gBAAgB,gXAmD3B,CAAA"}

package/dist/src/functions/get-functions-meta.function.js

@@ -3,6 +3,7 @@ export const getFunctionsMeta = pikkuFunc({
     title: 'Get Functions Metadata',
     description: 'Reads function metadata from metaService and returns it as a flat array of FunctionMeta objects, enriched with version history from the versions manifest if available.',
     expose: true,
+    scopes: ['pikku:console:wirings:read'],
     func: async ({ metaService }) => {
         const { readFile } = await import('node:fs/promises');
         const { join } = await import('node:path');