@pikku/addon-console 0.12.40 → 0.12.42

package/dist/src/functions/run-security-audit.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-security-audit.function.js","sourceRoot":"","sources":["../../../src/functions/run-security-audit.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAErE,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,4HAA4H;IAC9H,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;QAClD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"run-security-audit.function.js","sourceRoot":"","sources":["../../../src/functions/run-security-audit.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAErE,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAmC;IAC1E,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,4HAA4H;IAC9H,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;QAClD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-add-scope-to-user.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeAddScopeToUser = pikkuFunc({
     title: 'Grant Scope',
-    description: 'Grants a scope directly to a user, outside of any role. Takes effect on their next request — no re-login.',
+    description: 'Grants a scope directly to a user, outside of any role. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this grant never applies.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { userId, scope }, { session }) => {
         await scopeService.addScopeToUser(userId, scope, session?.userId);
         return { success: true };

package/dist/src/functions/scope-add-scope-to-user.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-add-scope-to-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-scope-to-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAG1C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/D,MAAM,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-add-scope-to-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-scope-to-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAG1C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,iNAAiN;IACnN,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/D,MAAM,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-add-user-to-role.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeAddUserToRole = pikkuFunc({
     title: 'Grant Role',
-    description: 'Grants a role to a user. Takes effect on their next request — no re-login.',
+    description: 'Grants a role to a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this grant never applies.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { userId, role }, { session }) => {
         await scopeService.addUserToRole(userId, role, session?.userId);
         return { success: true };

package/dist/src/functions/scope-add-user-to-role.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-add-user-to-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-user-to-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,4EAA4E;IAC9E,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9D,MAAM,YAAY,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-add-user-to-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-add-user-to-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,kLAAkL;IACpL,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9D,MAAM,YAAY,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-create-role.function.js

@@ -3,7 +3,7 @@ export const scopeCreateRole = pikkuFunc({
     title: 'Create Role',
     description: 'Creates a role granting the given scopes.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { name, description, scopes }) => {
         // An undeclared scope is rejected by the pikku_scopes foreign key, so the
         // database is the one enforcing the vocabulary — not this function.

package/dist/src/functions/scope-create-role.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-create-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-create-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9D,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-create-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-create-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9D,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-delete-role.function.js

@@ -3,7 +3,7 @@ export const scopeDeleteRole = pikkuFunc({
     title: 'Delete Role',
     description: 'Deletes a role, revoking it from every user who holds it.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { name }) => {
         await scopeService.deleteRole(name);
         return { success: true };

package/dist/src/functions/scope-delete-role.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-delete-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-delete-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACzC,MAAM,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-delete-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-delete-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAGtC;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACzC,MAAM,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-declared.function.js

@@ -3,7 +3,7 @@ export const scopeListDeclared = pikkuFunc({
     title: 'List Declared Scopes',
     description: 'Lists the scope vocabulary a role can be composed from, flagging any that are no longer declared in code.',
     expose: true,
-    scopes: ['pikku:scopes:read'],
+    scopes: ['pikku:console:scopes:read'],
     func: async ({ scopeService }) => {
         if (!scopeService) {
             return { scopes: [] };

package/dist/src/functions/scope-list-declared.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-list-declared.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-declared.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAalC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;QAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACpE,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-list-declared.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-declared.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAalC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,2GAA2G;IAC7G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;QAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACpE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-roles.function.d.ts

@@ -1,4 +1,4 @@
-import type { Role } from '@pikku/core/services';
+import type { Role } from '@pikku/core/ecosystem/services';
 export declare const scopeListRoles: import("#pikku").PikkuFunctionConfig<null, {
     roles: Role[];
 }, "rpc" | "session", import("#pikku").PikkuFunction<null, {

package/dist/src/functions/scope-list-roles.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-list-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAEhD,eAAO,MAAM,cAAc;WAA4B,IAAI,EAAE;;WAAN,IAAI,EAAE;;WAAN,IAAI,EAAE;qFAW3D,CAAA"}
+{"version":3,"file":"scope-list-roles.function.d.ts","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAA;AAE1D,eAAO,MAAM,cAAc;WAA4B,IAAI,EAAE;;WAAN,IAAI,EAAE;;WAAN,IAAI,EAAE;qFAW3D,CAAA"}

package/dist/src/functions/scope-list-roles.function.js

@@ -3,7 +3,7 @@ export const scopeListRoles = pikkuFunc({
     title: 'List Roles',
     description: 'Lists every role and the scopes it grants.',
     expose: true,
-    scopes: ['pikku:scopes:read'],
+    scopes: ['pikku:console:scopes:read'],
     func: async ({ scopeService }) => {
         if (!scopeService) {
             return { roles: [] };

package/dist/src/functions/scope-list-roles.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-list-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAA0B;IAC/D,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,4CAA4C;IACzD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACtB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,CAAA;IAClD,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-list-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAA0B;IAC/D,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,4CAA4C;IACzD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACtB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,CAAA;IAClD,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-list-user-roles.function.js

@@ -3,7 +3,7 @@ export const scopeListUserRoles = pikkuFunc({
     title: 'List User Roles',
     description: 'Lists the roles a user holds, the scopes granted to them directly, and the full set those resolve to.',
     expose: true,
-    scopes: ['pikku:scopes:read'],
+    scopes: ['pikku:console:scopes:read'],
     func: async ({ scopeService }, { userId }) => {
         if (!scopeService) {
             return { roles: [], scopes: [], directScopes: [] };

package/dist/src/functions/scope-list-user-roles.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-list-user-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;SAClC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-list-user-roles.function.js","sourceRoot":"","sources":["../../../src/functions/scope-list-user-roles.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YAClC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;SAClC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-scope-from-user.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeRemoveScopeFromUser = pikkuFunc({
     title: 'Revoke Scope',
-    description: 'Revokes a directly-granted scope from a user. Takes effect on their next request — no re-login.',
+    description: 'Revokes a directly-granted scope from a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this revoke never applies.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { userId, scope }) => {
         await scopeService.removeScopeFromUser(userId, scope);
         return { success: true };

package/dist/src/functions/scope-remove-scope-from-user.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-remove-scope-from-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,iGAAiG;IACnG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,MAAM,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-remove-scope-from-user.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-scope-from-user.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAG/C;IACA,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,wMAAwM;IAC1M,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,MAAM,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-remove-user-from-role.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeRemoveUserFromRole = pikkuFunc({
     title: 'Revoke Role',
-    description: 'Revokes a role from a user. Takes effect on their next request — no re-login.',
+    description: 'Revokes a role from a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this revoke never applies.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { userId, role }) => {
         await scopeService.removeUserFromRole(userId, role);
         return { success: true };

package/dist/src/functions/scope-remove-user-from-role.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-remove-user-from-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAG9C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,+EAA+E;IACjF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-remove-user-from-role.function.js","sourceRoot":"","sources":["../../../src/functions/scope-remove-user-from-role.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAG9C;IACA,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,sLAAsL;IACxL,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/scope-set-role-scopes.function.js

@@ -1,9 +1,9 @@
 import { pikkuFunc } from '#pikku';
 export const scopeSetRoleScopes = pikkuFunc({
     title: 'Set Role Scopes',
-    description: 'Replaces the scopes a role grants. Users holding it see the change on their next request.',
+    description: 'Replaces the scopes a role grants. Users holding it see the change on their next request — unless mapSession sets scopes itself, which is authoritative, and then the change never reaches them.',
     expose: true,
-    scopes: ['pikku:scopes:manage'],
+    scopes: ['pikku:console:scopes:manage'],
     func: async ({ scopeService }, { name, scopes }) => {
         await scopeService.setRoleScopes(name, scopes);
         return { success: true };

package/dist/src/functions/scope-set-role-scopes.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-set-role-scopes.function.js","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,2FAA2F;IAC7F,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"scope-set-role-scopes.function.js","sourceRoot":"","sources":["../../../src/functions/scope-set-role-scopes.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,kMAAkM;IACpM,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-agent-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;qFAelB,CAAA"}
+{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;qFAgBlB,CAAA"}

package/dist/src/functions/update-agent-config.function.js

@@ -4,6 +4,7 @@ export const updateAgentConfig = pikkuFunc({
     title: 'Update Agent Config',
     description: 'Updates the config properties of a pikku AI agent definition in source code and triggers a rebuild.',
     expose: true,
+    scopes: ['pikku:console:agents:manage'],
     func: async ({ codeEditService }, { sourceFile, exportedName, changes }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-agent-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-dependency.function.d.ts

@@ -1,4 +1,4 @@
-import type { SecurityAuditReport } from '@pikku/core';
+import type { SecurityAuditReport } from '@pikku/core/ecosystem/types';
 export declare const updateDependency: import("#pikku").PikkuFunctionConfig<{
     package: string;
     version: string;

package/dist/src/functions/update-dependency.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AA0CtD,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;iHAmClC,CAAA"}
+{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAgDtE,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;iHAoClC,CAAA"}

package/dist/src/functions/update-dependency.function.js

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { pikkuFunc } from '#pikku';
-import { readAuditReport, runPikkuAudit, spawnProcess } from '../lib/audit-exec.js';
+import { readAuditReport, runPikkuAudit, spawnProcess, } from '../lib/audit-exec.js';
 const DEP_SECTIONS = [
     'dependencies',
     'devDependencies',
@@ -36,6 +36,7 @@ export const updateDependency = pikkuFunc({
     title: 'Update Dependency',
     description: 'Bumps a dependency to the given version in package.json, runs `bun install`, re-runs `pikku audit`, and returns the refreshed report. The mechanical (free) remediation — it does NOT run the app or verify anything still works.',
     expose: true,
+    scopes: ['pikku:console:code:write'],
     func: async ({ metaService }, { package: pkg, version }) => {
         if (!SEMVER_RE.test(version)) {
             throw new Error(`Invalid version "${version}" — expected a concrete semver like 1.2.3.`);

package/dist/src/functions/update-dependency.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnF,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EACL,eAAe,EACf,aAAa,EACb,YAAY,GACb,MAAM,sBAAsB,CAAA;AAE7B,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IACE,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-email-template.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;qFA4BlB,CAAA"}
+{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;qFA6BlB,CAAA"}

package/dist/src/functions/update-email-template.function.js

@@ -5,6 +5,7 @@ export const updateEmailTemplate = pikkuFunc({
     title: 'Update Email Template',
     description: 'Overwrites an email template HTML source file (templates/<name>.html) so small edits can be made from the console.',
     expose: true,
+    scopes: ['pikku:console:emails:write'],
     func: async ({ metaService, codeEditService }, { templateName, source }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-email-template.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-body.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;qFAelB,CAAA"}
+{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;qFAgBlB,CAAA"}

package/dist/src/functions/update-function-body.function.js

@@ -4,6 +4,7 @@ export const updateFunctionBody = pikkuFunc({
     title: 'Update Function Body',
     description: 'Replaces the function body of a pikku function definition in source code and triggers a rebuild.',
     expose: true,
+    scopes: ['pikku:console:code:write'],
     func: async ({ codeEditService }, { sourceFile, exportedName, body }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-function-body.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;qFAmBlB,CAAA"}
+{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;qFAoBlB,CAAA"}

package/dist/src/functions/update-function-config.function.js

@@ -4,6 +4,7 @@ export const updateFunctionConfig = pikkuFunc({
     title: 'Update Function Config',
     description: 'Updates the config properties of a pikku function definition in source code and triggers a rebuild.',
     expose: true,
+    scopes: ['pikku:console:code:write'],
     func: async ({ codeEditService }, { sourceFile, exportedName, changes }) => {
         if (!codeEditService) {
             throw new LocalEnvironmentOnlyError('Only available in local development mode');

package/dist/src/functions/update-function-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/lib/addon-readiness.d.ts

@@ -0,0 +1,26 @@
+import { type InstanceOverrides } from './derive-instance-overrides.js';
+export interface AddonReadiness {
+    ready: boolean;
+    missingSecrets: string[];
+    missingVariables: string[];
+}
+export interface ReadinessProbes {
+    secrets: {
+        hasSecret(key: string): Promise<boolean>;
+    };
+    variables: {
+        has(name: string): Promise<boolean> | boolean;
+    };
+}
+/**
+ * Which of an addon's declared secrets and variables the host cannot resolve
+ * yet, under the instance's override names. A variable whose schema carries a
+ * default is never missing — the addon boots without it.
+ */
+export declare const checkAddonReadiness: ({ secrets, variables }: ReadinessProbes, rootDir: string, packageName: string, overrides?: InstanceOverrides) => Promise<AddonReadiness>;
+/**
+ * The override names actually in an instance's `<namespace>.addon.ts`, which
+ * the user owns and may have edited away from what the install wrote.
+ */
+export declare const readWiringOverrides: (wiringFile: string) => Promise<InstanceOverrides>;
+//# sourceMappingURL=addon-readiness.d.ts.map

package/dist/src/lib/addon-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-readiness.d.ts","sourceRoot":"","sources":["../../../src/lib/addon-readiness.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gCAAgC,CAAA;AAEvC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE;QAAE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;IACrD,SAAS,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;KAAE,CAAA;CAC7D;AA+BD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,wBAAwB,eAAe,EACvC,SAAS,MAAM,EACf,aAAa,MAAM,EACnB,YAAW,iBAAsB,KAChC,OAAO,CAAC,cAAc,CA+BxB,CAAA;AAiBD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,KACjB,OAAO,CAAC,iBAAiB,CAO3B,CAAA"}

package/dist/src/lib/addon-readiness.js

@@ -0,0 +1,82 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { addonPikkuDir, } from './derive-instance-overrides.js';
+const readMeta = async (pikkuDir, rel) => {
+    try {
+        return JSON.parse(await readFile(join(pikkuDir, rel), 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+};
+const hasSchemaDefault = async (pikkuDir, schema) => {
+    if (!schema)
+        return false;
+    try {
+        const raw = await readFile(join(pikkuDir, 'schemas', 'schemas', `${schema}.schema.json`), 'utf-8');
+        return 'default' in JSON.parse(raw);
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * Which of an addon's declared secrets and variables the host cannot resolve
+ * yet, under the instance's override names. A variable whose schema carries a
+ * default is never missing — the addon boots without it.
+ */
+export const checkAddonReadiness = async ({ secrets, variables }, rootDir, packageName, overrides = {}) => {
+    const pikkuDir = addonPikkuDir(rootDir, packageName);
+    if (!pikkuDir) {
+        return { ready: true, missingSecrets: [], missingVariables: [] };
+    }
+    const [secretMeta, variableMeta] = await Promise.all([
+        readMeta(pikkuDir, 'secrets/pikku-secrets-meta.gen.json'),
+        readMeta(pikkuDir, 'variables/pikku-variables-meta.gen.json'),
+    ]);
+    const missingSecrets = [];
+    for (const [key, def] of Object.entries(secretMeta)) {
+        const id = def.secretId ?? key;
+        const name = overrides.secretOverrides?.[id] ?? id;
+        if (!(await secrets.hasSecret(name)))
+            missingSecrets.push(name);
+    }
+    const missingVariables = [];
+    for (const [key, def] of Object.entries(variableMeta)) {
+        const id = def.variableId ?? key;
+        const name = overrides.variableOverrides?.[id] ?? id;
+        if (await hasSchemaDefault(pikkuDir, def.schema))
+            continue;
+        if (!(await variables.has(name)))
+            missingVariables.push(name);
+    }
+    return {
+        ready: missingSecrets.length === 0 && missingVariables.length === 0,
+        missingSecrets,
+        missingVariables,
+    };
+};
+const overrideMap = (content, field) => {
+    const block = new RegExp(`${field}:\\s*\\{([^}]*)\\}`).exec(content);
+    if (!block?.[1])
+        return undefined;
+    const map = {};
+    for (const [, from, to] of block[1].matchAll(/['"]([^'"]+)['"]\s*:\s*['"]([^'"]+)['"]/g)) {
+        if (from && to)
+            map[from] = to;
+    }
+    return Object.keys(map).length > 0 ? map : undefined;
+};
+/**
+ * The override names actually in an instance's `<namespace>.addon.ts`, which
+ * the user owns and may have edited away from what the install wrote.
+ */
+export const readWiringOverrides = async (wiringFile) => {
+    const content = await readFile(wiringFile, 'utf-8').catch(() => '');
+    return {
+        secretOverrides: overrideMap(content, 'secretOverrides'),
+        variableOverrides: overrideMap(content, 'variableOverrides'),
+        credentialOverrides: overrideMap(content, 'credentialOverrides'),
+    };
+};
+//# sourceMappingURL=addon-readiness.js.map

package/dist/src/lib/addon-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-readiness.js","sourceRoot":"","sources":["../../../src/lib/addon-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,aAAa,GAEd,MAAM,gCAAgC,CAAA;AAevC,MAAM,QAAQ,GAAG,KAAK,EACpB,QAAgB,EAChB,GAAW,EACe,EAAE;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,KAAK,EAC5B,QAAgB,EAChB,MAA0B,EACR,EAAE;IACpB,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,EAC7D,OAAO,CACR,CAAA;QACD,OAAO,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,EAAE,OAAO,EAAE,SAAS,EAAmB,EACvC,OAAe,EACf,WAAmB,EACnB,YAA+B,EAAE,EACR,EAAE;IAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,QAAQ,CAAC,QAAQ,EAAE,qCAAqC,CAAC;QACzD,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;KAC9D,CAAC,CAAA;IAEF,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAA;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,gBAAgB,GAAa,EAAE,CAAA;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAA;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;QACpD,IAAI,MAAM,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC1D,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QACnE,cAAc;QACd,gBAAgB;KACjB,CAAA;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAClB,OAAe,EACf,KAA8B,EACM,EAAE;IACtC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACpE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACjC,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAC1C,0CAA0C,CAC3C,EAAE,CAAC;QACF,IAAI,IAAI,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,UAAkB,EACU,EAAE;IAC9B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACnE,OAAO;QACL,eAAe,EAAE,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACxD,iBAAiB,EAAE,WAAW,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAC5D,mBAAmB,EAAE,WAAW,CAAC,OAAO,EAAE,qBAAqB,CAAC;KACjE,CAAA;AACH,CAAC,CAAA"}

package/dist/src/lib/addon-readiness.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=addon-readiness.test.d.ts.map

package/dist/src/lib/addon-readiness.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-readiness.test.d.ts","sourceRoot":"","sources":["../../../src/lib/addon-readiness.test.ts"],"names":[],"mappings":""}

package/dist/src/lib/addon-readiness.test.js

@@ -0,0 +1,118 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { mkdtemp, mkdir, writeFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { checkAddonReadiness, readWiringOverrides } from './addon-readiness.js';
+const PACKAGE = '@acme/addon-widget';
+const writeAddon = async (root, { secrets, variables, schemas, under = '.pikku', }) => {
+    const pikkuDir = join(root, 'node_modules', PACKAGE, under);
+    if (secrets) {
+        await mkdir(join(pikkuDir, 'secrets'), { recursive: true });
+        await writeFile(join(pikkuDir, 'secrets', 'pikku-secrets-meta.gen.json'), JSON.stringify(secrets));
+    }
+    if (variables) {
+        await mkdir(join(pikkuDir, 'variables'), { recursive: true });
+        await writeFile(join(pikkuDir, 'variables', 'pikku-variables-meta.gen.json'), JSON.stringify(variables));
+    }
+    await mkdir(join(pikkuDir, 'schemas', 'schemas'), { recursive: true });
+    for (const [name, schema] of Object.entries(schemas ?? {})) {
+        await writeFile(join(pikkuDir, 'schemas', 'schemas', `${name}.schema.json`), JSON.stringify(schema));
+    }
+};
+const probes = (present) => ({
+    secrets: { hasSecret: async (key) => present.includes(key) },
+    variables: { has: (name) => present.includes(name) },
+});
+const withRoot = async (fn) => {
+    const root = await mkdtemp(join(tmpdir(), 'addon-readiness-'));
+    try {
+        await fn(root);
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+};
+test('reports the secrets and variables the host cannot resolve', async () => {
+    await withRoot(async (root) => {
+        await writeAddon(root, {
+            secrets: { api_key: { secretId: 'WIDGET_API_KEY' } },
+            variables: { base_url: { variableId: 'WIDGET_BASE_URL' } },
+        });
+        const readiness = await checkAddonReadiness(probes([]), root, PACKAGE);
+        assert.deepEqual(readiness, {
+            ready: false,
+            missingSecrets: ['WIDGET_API_KEY'],
+            missingVariables: ['WIDGET_BASE_URL'],
+        });
+        const configured = await checkAddonReadiness(probes(['WIDGET_API_KEY', 'WIDGET_BASE_URL']), root, PACKAGE);
+        assert.equal(configured.ready, true);
+    });
+});
+test('a variable whose schema has a default is not missing', async () => {
+    await withRoot(async (root) => {
+        await writeAddon(root, {
+            variables: {
+                base_url: {
+                    variableId: 'WIDGET_BASE_URL',
+                    schema: 'VariableSchema_base_url',
+                },
+            },
+            schemas: {
+                VariableSchema_base_url: {
+                    type: 'string',
+                    default: 'http://localhost',
+                },
+            },
+        });
+        const readiness = await checkAddonReadiness(probes([]), root, PACKAGE);
+        assert.deepEqual(readiness.missingVariables, []);
+        assert.equal(readiness.ready, true);
+    });
+});
+test('checks the override name, not the logical one', async () => {
+    await withRoot(async (root) => {
+        await writeAddon(root, {
+            secrets: { api_key: { secretId: 'WIDGET_API_KEY' } },
+        });
+        const readiness = await checkAddonReadiness(probes(['WIDGET_API_KEY']), root, PACKAGE, { secretOverrides: { WIDGET_API_KEY: 'WIDGET_PROMO_API_KEY' } });
+        assert.deepEqual(readiness.missingSecrets, ['WIDGET_PROMO_API_KEY']);
+    });
+});
+test('finds meta a package ships only under dist', async () => {
+    await withRoot(async (root) => {
+        await writeAddon(root, {
+            secrets: { api_key: { secretId: 'WIDGET_API_KEY' } },
+            under: join('dist', '.pikku'),
+        });
+        const readiness = await checkAddonReadiness(probes([]), root, PACKAGE);
+        assert.deepEqual(readiness.missingSecrets, ['WIDGET_API_KEY']);
+    });
+});
+test('a package with no declarations is ready', async () => {
+    await withRoot(async (root) => {
+        await writeAddon(root, {});
+        const readiness = await checkAddonReadiness(probes([]), root, PACKAGE);
+        assert.equal(readiness.ready, true);
+    });
+});
+test('reads the override names out of the instance wiring file', async () => {
+    await withRoot(async (root) => {
+        const wiringFile = join(root, 'widget-promo.addon.ts');
+        await writeFile(wiringFile, `import { wireAddon } from '#pikku/pikku-types.gen.js'
+
+wireAddon({
+  name: 'widget-promo',
+  package: '${PACKAGE}',
+  secretOverrides: { 'WIDGET_API_KEY': 'WIDGET_PROMO_API_KEY' },
+  variableOverrides: { 'WIDGET_BASE_URL': 'WIDGET_PROMO_BASE_URL' },
+})
+`);
+        assert.deepEqual(await readWiringOverrides(wiringFile), {
+            secretOverrides: { WIDGET_API_KEY: 'WIDGET_PROMO_API_KEY' },
+            variableOverrides: { WIDGET_BASE_URL: 'WIDGET_PROMO_BASE_URL' },
+            credentialOverrides: undefined,
+        });
+    });
+});
+//# sourceMappingURL=addon-readiness.test.js.map

package/dist/src/lib/addon-readiness.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-readiness.test.js","sourceRoot":"","sources":["../../../src/lib/addon-readiness.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE/E,MAAM,OAAO,GAAG,oBAAoB,CAAA;AAEpC,MAAM,UAAU,GAAG,KAAK,EACtB,IAAY,EACZ,EACE,OAAO,EACP,SAAS,EACT,OAAO,EACP,KAAK,GAAG,QAAQ,GAMjB,EACD,EAAE;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;IAC3D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,SAAS,CACb,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,6BAA6B,CAAC,EACxD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAA;IACH,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,MAAM,SAAS,CACb,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,+BAA+B,CAAC,EAC5D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAC1B,CAAA;IACH,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,CACb,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,cAAc,CAAC,EAC3D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CACvB,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,OAAiB,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;IACpE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;CAC7D,CAAC,CAAA;AAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,EAAmC,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;AACH,CAAC,CAAA;AAED,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,CAAC,IAAI,EAAE;YACrB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE;YACpD,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE;SAC3D,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE;YAC1B,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,CAAC,gBAAgB,CAAC;YAClC,gBAAgB,EAAE,CAAC,iBAAiB,CAAC;SACtC,CAAC,CAAA;QAEF,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAC1C,MAAM,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,EAC7C,IAAI,EACJ,OAAO,CACR,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,CAAC,IAAI,EAAE;YACrB,SAAS,EAAE;gBACT,QAAQ,EAAE;oBACR,UAAU,EAAE,iBAAiB;oBAC7B,MAAM,EAAE,yBAAyB;iBAClC;aACF;YACD,OAAO,EAAE;gBACP,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,kBAAkB;iBAC5B;aACF;SACF,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,CAAC,IAAI,EAAE;YACrB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE;SACrD,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CACzC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAC1B,IAAI,EACJ,OAAO,EACP,EAAE,eAAe,EAAE,EAAE,cAAc,EAAE,sBAAsB,EAAE,EAAE,CAChE,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;IAC5D,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,CAAC,IAAI,EAAE;YACrB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;SAC9B,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;IACzD,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC1B,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAA;QACtD,MAAM,SAAS,CACb,UAAU,EACV;;;;cAIQ,OAAO;;;;CAIpB,CACI,CAAA;QAED,MAAM,CAAC,SAAS,CAAC,MAAM,mBAAmB,CAAC,UAAU,CAAC,EAAE;YACtD,eAAe,EAAE,EAAE,cAAc,EAAE,sBAAsB,EAAE;YAC3D,iBAAiB,EAAE,EAAE,eAAe,EAAE,uBAAuB,EAAE;YAC/D,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}