@pikku/addon-console 0.12.38 → 0.12.41

package/dist/src/functions/scope-list-user-roles.function.d.ts

@@ -16,5 +16,5 @@ export declare const scopeListUserRoles: import("#pikku").PikkuFunctionConfig<{
     roles: string[];
     scopes: string[];
     directScopes: string[];
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=scope-list-user-roles.function.d.ts.map

package/dist/src/functions/scope-list-user-roles.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-list-user-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;YACnB,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;4EAwB3D,CAAA"}
+{"version":3,"file":"scope-list-user-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;YACnB,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;;YADjD,MAAM;;WACP,MAAM,EAAE;YAAU,MAAM,EAAE;kBAAgB,MAAM,EAAE;qFAwB3D,CAAA"}

package/dist/src/functions/scope-list-user-roles.function.js

@@ -3,7 +3,7 @@ export const scopeListUserRoles = pikkuFunc({
     title: 'List User Roles',
     description: 'Lists the roles a user holds, the scopes granted to them directly, and the full set those resolve to.',
     expose: true,
-    scopes: ['pikku:scopes:read'],
+    scopes: ['pikku:console:scopes:read'],
     func: async ({ scopeService }, { userId }) => {
         if (!scopeService) {
             return { roles: [], scopes: [], directScopes: [] };

package/dist/src/functions/scope-list-user-roles.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-list-user-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;SAClC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-list-user-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;SAClC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.d.ts

@@ -13,5 +13,5 @@ export declare const scopeRemoveScopeFromUser: import("#pikku").PikkuFunctionCon
     scope: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=scope-remove-scope-from-user.function.d.ts.map

package/dist/src/functions/scope-remove-scope-from-user.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-remove-scope-from-user.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,wBAAwB;YACzB,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;4EAWlB,CAAA"}
+{"version":3,"file":"scope-remove-scope-from-user.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,wBAAwB;YACzB,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;;YADR,MAAM;WAAS,MAAM;;aACpB,OAAO;qFAWlB,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeRemoveScopeFromUser = pikkuFunc({
     title: 'Revoke Scope',
-    description: 'Revokes a directly-granted scope from a user. Takes effect on their next request — no re-login.',
+    description: 'Revokes a directly-granted scope from a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this revoke never applies.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { userId, scope }) => {
         await scopeService.removeScopeFromUser(userId, scope);
         return { success: true };

package/dist/src/functions/scope-remove-scope-from-user.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-remove-scope-from-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,iGAAiG;IACnG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,MAAM,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-remove-scope-from-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,wMAAwM;IAC1M,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,MAAM,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.d.ts

@@ -13,5 +13,5 @@ export declare const scopeRemoveUserFromRole: import("#pikku").PikkuFunctionConf
     role: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=scope-remove-user-from-role.function.d.ts.map

package/dist/src/functions/scope-remove-user-from-role.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-remove-user-from-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB;YACxB,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;4EAWlB,CAAA"}
+{"version":3,"file":"scope-remove-user-from-role.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB;YACxB,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;;YADR,MAAM;UAAQ,MAAM;;aACnB,OAAO;qFAWlB,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeRemoveUserFromRole = pikkuFunc({
     title: 'Revoke Role',
-    description: 'Revokes a role from a user. Takes effect on their next request — no re-login.',
+    description: 'Revokes a role from a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this revoke never applies.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { userId, role }) => {
         await scopeService.removeUserFromRole(userId, role);
         return { success: true };

package/dist/src/functions/scope-remove-user-from-role.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-remove-user-from-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAG9C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,+EAA+E;IACjF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-remove-user-from-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAG9C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,sLAAsL;IACxL,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.d.ts

@@ -13,5 +13,5 @@ export declare const scopeSetRoleScopes: import("#pikku").PikkuFunctionConfig<{
     scopes: string[];
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=scope-set-role-scopes.function.d.ts.map

package/dist/src/functions/scope-set-role-scopes.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-set-role-scopes.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;UACrB,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;4EAWlB,CAAA"}
+{"version":3,"file":"scope-set-role-scopes.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;UACrB,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;;UADV,MAAM;YAAU,MAAM,EAAE;;aACrB,OAAO;qFAWlB,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeSetRoleScopes = pikkuFunc({
     title: 'Set Role Scopes',
-    description: 'Replaces the scopes a role grants. Users holding it see the change on their next request.',
+    description: 'Replaces the scopes a role grants. Users holding it see the change on their next request — unless mapSession sets scopes itself, which is authoritative, and then the change never reaches them.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { name, scopes }) => {
         await scopeService.setRoleScopes(name, scopes);
         return { success: true };

package/dist/src/functions/scope-set-role-scopes.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-set-role-scopes.function.js","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,2FAA2F;IAC7F,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-set-role-scopes.function.js","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,kMAAkM;IACpM,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-get.function.d.ts

@@ -0,0 +1,17 @@
+export declare const secretGet: import("#pikku").PikkuFunctionConfig<{
+    secretId: string;
+}, {
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    secretId: string;
+}, {
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    secretId: string;
+}, {
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=secret-get.function.d.ts.map

package/dist/src/functions/secret-get.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-get.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;qFAQjC,CAAA"}

package/dist/src/functions/secret-get.function.js

@@ -0,0 +1,10 @@
+import { pikkuFunc } from '#pikku';
+export const secretGet = pikkuFunc({
+    title: 'Get Secret',
+    description: 'Gets the current value of a secret.',
+    expose: true,
+    func: async ({ secretAdminService }, { secretId }) => {
+        return secretAdminService.read(secretId);
+    },
+});
+//# sourceMappingURL=secret-get.function.js.map

package/dist/src/functions/secret-get.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-get.function.js","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-has.function.d.ts

@@ -0,0 +1,14 @@
+export declare const secretHas: import("#pikku").PikkuFunctionConfig<{
+    secretId: string;
+}, {
+    exists: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    secretId: string;
+}, {
+    exists: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    secretId: string;
+}, {
+    exists: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=secret-has.function.d.ts.map

package/dist/src/functions/secret-has.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-has.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cAAyB,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;qFAQxE,CAAA"}

package/dist/src/functions/secret-has.function.js

@@ -0,0 +1,11 @@
+import { pikkuFunc } from '#pikku';
+export const secretHas = pikkuFunc({
+    title: 'Has Secret',
+    description: 'Checks whether a secret exists without reading its value.',
+    expose: true,
+    func: async ({ secretAdminService }, { secretId }) => {
+        const exists = await secretAdminService.has(secretId);
+        return { exists };
+    },
+});
+//# sourceMappingURL=secret-has.function.js.map

package/dist/src/functions/secret-has.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-has.function.js","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAA4C;IAC5E,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-set.function.d.ts

@@ -0,0 +1,17 @@
+export declare const secretSet: import("#pikku").PikkuFunctionConfig<{
+    secretId: string;
+    value: unknown;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").PikkuFunction<{
+    secretId: string;
+    value: unknown;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+    secretId: string;
+    value: unknown;
+}, {
+    success: boolean;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=secret-set.function.d.ts.map

package/dist/src/functions/secret-set.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-set.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;qFASlB,CAAA"}

package/dist/src/functions/secret-set.function.js

@@ -0,0 +1,11 @@
+import { pikkuFunc } from '#pikku';
+export const secretSet = pikkuFunc({
+    title: 'Set Secret',
+    description: 'Sets the value of a secret.',
+    expose: true,
+    func: async ({ secretAdminService }, { secretId, value }) => {
+        await secretAdminService.write(secretId, value);
+        return { success: true };
+    },
+});
+//# sourceMappingURL=secret-set.function.js.map

package/dist/src/functions/secret-set.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-set.function.js","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/stream-workflow-run.function.d.ts

@@ -2,7 +2,7 @@ export declare const streamWorkflowRun: import("#pikku").PikkuFunctionConfig<{
     runId: string;
 }, any, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
     runId: string;
-}, any, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunction<{
+}, any, "rpc" | "session", import("#pikku").WiredServices, unknown> | import("#pikku").PikkuFunction<{
     runId: string;
 }, any, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
 //# sourceMappingURL=stream-workflow-run.function.d.ts.map

package/dist/src/functions/update-agent-config.function.d.ts

@@ -17,5 +17,5 @@ export declare const updateAgentConfig: import("#pikku").PikkuFunctionConfig<{
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-agent-config.function.d.ts.map

package/dist/src/functions/update-agent-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;4EAelB,CAAA"}
+{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;qFAgBlB,CAAA"}

package/dist/src/functions/update-agent-config.function.js

@@ -4,6 +4,7 @@ export const updateAgentConfig = pikkuFunc({
     title: 'Update Agent Config',
     description: 'Updates the config properties of a pikku AI agent definition in source code and triggers a rebuild.',
     expose: true,
+    scopes: ['pikku:console:agents:manage'],
     func: async ({ codeEditService }, { sourceFile, exportedName, changes }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-agent-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-dependency.function.d.ts

@@ -8,5 +8,5 @@ export declare const updateDependency: import("#pikku").PikkuFunctionConfig<{
 }, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
     package: string;
     version: string;
-}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-dependency.function.d.ts.map

package/dist/src/functions/update-dependency.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AA0CtD,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;wGAmClC,CAAA"}
+{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAgDtD,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;iHAoClC,CAAA"}

package/dist/src/functions/update-dependency.function.js

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { pikkuFunc } from '#pikku';
-import { readAuditReport, runPikkuAudit, spawnProcess } from '../lib/audit-exec.js';
+import { readAuditReport, runPikkuAudit, spawnProcess, } from '../lib/audit-exec.js';
 const DEP_SECTIONS = [
     'dependencies',
     'devDependencies',
@@ -36,6 +36,7 @@ export const updateDependency = pikkuFunc({
     title: 'Update Dependency',
     description: 'Bumps a dependency to the given version in package.json, runs `bun install`, re-runs `pikku audit`, and returns the refreshed report. The mechanical (free) remediation — it does NOT run the app or verify anything still works.',
     expose: true,
+    scopes: ['pikku:console:code:write'],
     func: async ({ metaService }, { package: pkg, version }) => {
         if (!SEMVER_RE.test(version)) {
             throw new Error(`Invalid version "${version}" — expected a concrete semver like 1.2.3.`);

package/dist/src/functions/update-dependency.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnF,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EACL,eAAe,EACf,aAAa,EACb,YAAY,GACb,MAAM,sBAAsB,CAAA;AAE7B,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IACE,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-email-template.function.d.ts

@@ -13,5 +13,5 @@ export declare const updateEmailTemplate: import("#pikku").PikkuFunctionConfig<{
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-email-template.function.d.ts.map

package/dist/src/functions/update-email-template.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;4EA4BlB,CAAA"}
+{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;qFA6BlB,CAAA"}

package/dist/src/functions/update-email-template.function.js

@@ -5,6 +5,7 @@ export const updateEmailTemplate = pikkuFunc({
     title: 'Update Email Template',
     description: 'Overwrites an email template HTML source file (templates/<name>.html) so small edits can be made from the console.',
     expose: true,
+    scopes: ['pikku:console:emails:write'],
     func: async ({ metaService, codeEditService }, { templateName, source }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-email-template.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-body.function.d.ts

@@ -16,5 +16,5 @@ export declare const updateFunctionBody: import("#pikku").PikkuFunctionConfig<{
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-function-body.function.d.ts.map

package/dist/src/functions/update-function-body.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;4EAelB,CAAA"}
+{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;qFAgBlB,CAAA"}

package/dist/src/functions/update-function-body.function.js

@@ -4,6 +4,7 @@ export const updateFunctionBody = pikkuFunc({
     title: 'Update Function Body',
     description: 'Replaces the function body of a pikku function definition in source code and triggers a rebuild.',
     expose: true,
+    scopes: ['pikku:console:code:write'],
     func: async ({ codeEditService }, { sourceFile, exportedName, body }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-function-body.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-config.function.d.ts

@@ -17,5 +17,5 @@ export declare const updateFunctionConfig: import("#pikku").PikkuFunctionConfig<
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-function-config.function.d.ts.map

package/dist/src/functions/update-function-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;4EAmBlB,CAAA"}
+{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;qFAoBlB,CAAA"}

package/dist/src/functions/update-function-config.function.js

@@ -4,6 +4,7 @@ export const updateFunctionConfig = pikkuFunc({
     title: 'Update Function Config',
     description: 'Updates the config properties of a pikku function definition in source code and triggers a rebuild.',
     expose: true,
+    scopes: ['pikku:console:code:write'],
     func: async ({ codeEditService }, { sourceFile, exportedName, changes }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-function-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/lib/resolve-audit-users.d.ts

@@ -23,7 +23,7 @@ export type AuditUserDirectory = Record<string, AuditUserProfile>;
  * sink, different systems entirely), so there is no query that spans both.
  *
  * Read through better-auth's own adapter as the server, not as the caller.
- * `pikku:audit:read` already grants "every recorded action, and which user took
+ * `pikku:console:audit:read` already grants "every recorded action, and which user took
  * it", so a reader who may see the id may see the name — an opaque id would be
  * the same disclosure, just unreadable. Reading the adapter directly also
  * reaches actor rows, which the admin user list deliberately hides: nobody

package/dist/src/lib/resolve-audit-users.js

@@ -8,7 +8,7 @@
  * sink, different systems entirely), so there is no query that spans both.
  *
  * Read through better-auth's own adapter as the server, not as the caller.
- * `pikku:audit:read` already grants "every recorded action, and which user took
+ * `pikku:console:audit:read` already grants "every recorded action, and which user took
  * it", so a reader who may see the id may see the name — an opaque id would be
  * the same disclosure, just unreadable. Reading the adapter directly also
  * reaches actor rows, which the admin user list deliberately hides: nobody

package/dist/src/scopes.js

@@ -44,22 +44,122 @@ defineScope({
         displayName: 'Pikku Console',
         description: "The console's own administrative capabilities",
         scopes: {
-            scopes: {
-                description: 'Authorization management',
+            console: {
+                displayName: 'Console',
+                description: 'Everything reachable through the console, by area',
                 scopes: {
-                    read: {
-                        description: 'View declared scopes, roles, and who holds them',
+                    secrets: {
+                        description: "The application's secrets",
+                        scopes: {
+                            read: {
+                                description: 'Read secret values and check whether one is set',
+                            },
+                            write: { description: 'Set and overwrite secret values' },
+                        },
                     },
-                    manage: {
-                        description: 'Create and delete roles, change their scopes, and grant roles to users',
+                    variables: {
+                        description: "The application's variables",
+                        scopes: {
+                            read: { description: 'Read variable values' },
+                            write: { description: 'Set and overwrite variable values' },
+                        },
                     },
-                },
-            },
-            audit: {
-                description: 'The audit trail',
-                scopes: {
-                    read: {
-                        description: 'Read the audit trail — every recorded action, and which user took it',
+                    addons: {
+                        description: 'Installed and available addons',
+                        scopes: {
+                            read: {
+                                description: 'Browse the addon catalogue and what this application has installed',
+                            },
+                            install: {
+                                description: 'Install an addon and write its wiring file — it runs code from the registry',
+                            },
+                        },
+                    },
+                    credentials: {
+                        description: 'Per-user and shared credentials',
+                        scopes: {
+                            read: {
+                                description: 'Read credential values and who holds them',
+                            },
+                            manage: { description: 'Set and delete credentials' },
+                        },
+                    },
+                    scopes: {
+                        description: 'Authorization management',
+                        scopes: {
+                            read: {
+                                description: 'View declared scopes, roles, and who holds them',
+                            },
+                            manage: {
+                                description: 'Create and delete roles, change their scopes, and grant roles to users',
+                            },
+                        },
+                    },
+                    audit: {
+                        description: 'The audit trail',
+                        scopes: {
+                            read: {
+                                description: 'Read the audit trail — every recorded action, and which user took it',
+                            },
+                        },
+                    },
+                    wirings: {
+                        description: 'Wiring metadata and function source',
+                        scopes: {
+                            read: {
+                                description: 'Read routes, channels, schemas, webhook deliveries and function source',
+                            },
+                        },
+                    },
+                    security: {
+                        description: 'The security audit',
+                        scopes: {
+                            read: { description: 'Read the last security audit' },
+                            run: { description: 'Run the security audit' },
+                        },
+                    },
+                    workflows: {
+                        description: 'Workflow runs',
+                        scopes: {
+                            read: { description: 'Read workflow runs and their steps' },
+                            manage: { description: 'Delete workflow runs' },
+                        },
+                    },
+                    agents: {
+                        description: 'AI agents and their threads',
+                        scopes: {
+                            read: { description: 'Read agent threads, runs, and source' },
+                            manage: {
+                                description: 'Delete threads and change agent configuration',
+                            },
+                        },
+                    },
+                    db: {
+                        description: 'The database schema',
+                        scopes: {
+                            read: { description: 'Read the schema the application runs on' },
+                        },
+                    },
+                    knowledge: {
+                        description: 'The knowledge notes',
+                        scopes: {
+                            read: { description: 'Read the knowledge notes' },
+                        },
+                    },
+                    emails: {
+                        description: 'Email templates',
+                        scopes: {
+                            read: { description: 'Render a template preview' },
+                            write: { description: 'Edit email templates' },
+                        },
+                    },
+                    code: {
+                        description: 'Editing the application source',
+                        scopes: {
+                            write: {
+                                description: 'Rewrite function bodies and configuration, and change dependencies',
+                            },
+                        },
                     },
                 },
             },

package/dist/src/scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,qDAAqD;QAClE,MAAM,EAAE;YACN,WAAW,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACnD,WAAW,EAAE;gBACX,WAAW,EAAE,8BAA8B;gBAC3C,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBACjE;aACF;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,oBAAoB;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBAC9C,MAAM,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACnD,GAAG,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBAC3C,MAAM,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBAC1D,QAAQ,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACrD,QAAQ,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;iBACnD;aACF;SACF;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,WAAW,EAAE,0BAA0B;gBACvC,MAAM,EAAE;oBACN,IAAI,EAAE;wBACJ,WAAW,EAAE,iDAAiD;qBAC/D;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,wEAAwE;qBAC3E;iBACF;aACF;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,iBAAiB;gBAC9B,MAAM,EAAE;oBACN,IAAI,EAAE;wBACJ,WAAW,EACT,sEAAsE;qBACzE;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,qDAAqD;QAClE,MAAM,EAAE;YACN,WAAW,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACnD,WAAW,EAAE;gBACX,WAAW,EAAE,8BAA8B;gBAC3C,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBACjE;aACF;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,oBAAoB;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBAC9C,MAAM,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACnD,GAAG,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBAC3C,MAAM,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBAC1D,QAAQ,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACrD,QAAQ,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;iBACnD;aACF;SACF;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,WAAW,EAAE,2BAA2B;wBACxC,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,iDAAiD;6BAC/D;4BACD,KAAK,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;yBAC1D;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;yBAC5D;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,oEAAoE;6BACvE;4BACD,OAAO,EAAE;gCACP,WAAW,EACT,6EAA6E;6BAChF;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,WAAW,EAAE,iCAAiC;wBAC9C,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,2CAA2C;6BACzD;4BACD,MAAM,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE;yBACtD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,0BAA0B;wBACvC,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,iDAAiD;6BAC/D;4BACD,MAAM,EAAE;gCACN,WAAW,EACT,wEAAwE;6BAC3E;yBACF;qBACF;oBACD,KAAK,EAAE;wBACL,WAAW,EAAE,iBAAiB;wBAC9B,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,sEAAsE;6BACzE;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,qCAAqC;wBAClD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,wEAAwE;6BAC3E;yBACF;qBACF;oBACD,QAAQ,EAAE;wBACR,WAAW,EAAE,oBAAoB;wBACjC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;4BACrD,GAAG,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC/C;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,eAAe;wBAC5B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;4BAC3D,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAChD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;4BAC7D,MAAM,EAAE;gCACN,WAAW,EAAE,+CAA+C;6BAC7D;yBACF;qBACF;oBACD,EAAE,EAAE;wBACF,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;yBACjE;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;yBAClD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,iBAAiB;wBAC9B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;4BAClD,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAC/C;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,KAAK,EAAE;gCACL,WAAW,EACT,oEAAoE;6BACvE;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}