@pikku/addon-console 0.12.41 → 0.12.43

package/dist/.pikku/function/pikku-functions-meta-verbose.gen.json

@@ -1,4 +1,42 @@
 {
+  "addonReadiness": {
+    "pikkuFuncId": "addonReadiness",
+    "functionType": "user",
+    "funcWrapper": "pikkuFunc",
+    "sessionless": false,
+    "name": "addonReadiness",
+    "services": {
+      "optimized": true,
+      "services": [
+        "metaService",
+        "addonReadinessService"
+      ]
+    },
+    "inputSchemaName": "AddonReadinessInput",
+    "outputSchemaName": "AddonReadinessOutput",
+    "inputs": [
+      "AddonReadinessInput"
+    ],
+    "outputs": [
+      "AddonReadinessOutput"
+    ],
+    "expose": true,
+    "auth": true,
+    "scopes": [
+      "pikku:console:addons:read"
+    ],
+    "implementationHash": "c57f9df68bebb3a8",
+    "title": "Addon Readiness",
+    "description": "Reports which of an installed addon instance secrets and variables are still unset. Requires an admin session.",
+    "isDirectFunction": false,
+    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/addon-readiness.function.ts",
+    "exportedName": "addonReadiness",
+    "bodyStart": 24,
+    "bodyEnd": 57,
+    "contractHash": "162d3e14f19e9063",
+    "inputHash": "13f8a989",
+    "outputHash": "16e04aca"
+  },
   "agentCredentialCheck": {
     "pikkuFuncId": "agentCredentialCheck",
     "functionType": "user",
@@ -42,221 +80,6 @@
     "inputHash": "5b191655",
     "outputHash": "eeff398a"
   },
-  "credentialDelete": {
-    "pikkuFuncId": "credentialDelete",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "credentialDelete",
-    "services": {
-      "optimized": true,
-      "services": [
-        "credentialService"
-      ]
-    },
-    "inputSchemaName": "CredentialDeleteInput",
-    "outputSchemaName": "CredentialDeleteOutput",
-    "inputs": [
-      "CredentialDeleteInput"
-    ],
-    "outputs": [
-      "CredentialDeleteOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:credentials:manage"
-    ],
-    "implementationHash": "a8b0a6bef7315d21",
-    "title": "Delete Credential",
-    "description": "Deletes a credential, optionally scoped to a user.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/credential-delete.function.ts",
-    "exportedName": "credentialDelete",
-    "bodyStart": 12,
-    "bodyEnd": 13,
-    "contractHash": "c0c0129a197c5bed",
-    "inputHash": "e5f90226",
-    "outputHash": "d380569d"
-  },
-  "credentialGet": {
-    "pikkuFuncId": "credentialGet",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "credentialGet",
-    "services": {
-      "optimized": true,
-      "services": [
-        "credentialService"
-      ]
-    },
-    "inputSchemaName": "CredentialGetInput",
-    "outputSchemaName": "CredentialGetOutput",
-    "inputs": [
-      "CredentialGetInput"
-    ],
-    "outputs": [
-      "CredentialGetOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:credentials:read"
-    ],
-    "implementationHash": "d10a1a3e78198017",
-    "title": "Get Credential",
-    "description": "Retrieves a credential value, optionally scoped to a user.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/credential-get.function.ts",
-    "exportedName": "credentialGet",
-    "bodyStart": 12,
-    "bodyEnd": 13,
-    "contractHash": "20ae6fc72986b883",
-    "inputHash": "1162de3d",
-    "outputHash": "7f6b0ebf"
-  },
-  "credentialListUsers": {
-    "pikkuFuncId": "credentialListUsers",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "credentialListUsers",
-    "services": {
-      "optimized": true,
-      "services": [
-        "credentialService",
-        "metaService"
-      ]
-    },
-    "inputSchemaName": null,
-    "outputSchemaName": "CredentialListUsersOutput",
-    "inputs": [],
-    "outputs": [
-      "CredentialListUsersOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:credentials:read"
-    ],
-    "implementationHash": "5ae54268a8679eca",
-    "title": "List Credential Users",
-    "description": "Lists all users and their credential status for each declared credential.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/credential-list-users.function.ts",
-    "exportedName": "credentialListUsers",
-    "bodyStart": 18,
-    "bodyEnd": 36,
-    "contractHash": "0b3e0e99cc0fe325",
-    "inputHash": "13b79bd2",
-    "outputHash": "5bf6ba22"
-  },
-  "credentialSet": {
-    "pikkuFuncId": "credentialSet",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "credentialSet",
-    "services": {
-      "optimized": true,
-      "services": [
-        "credentialService"
-      ]
-    },
-    "inputSchemaName": "CredentialSetInput",
-    "outputSchemaName": "CredentialSetOutput",
-    "inputs": [
-      "CredentialSetInput"
-    ],
-    "outputs": [
-      "CredentialSetOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:credentials:manage"
-    ],
-    "implementationHash": "8cb65ff7ad057612",
-    "title": "Set Credential",
-    "description": "Stores a credential value, optionally scoped to a user.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/credential-set.function.ts",
-    "exportedName": "credentialSet",
-    "bodyStart": 12,
-    "bodyEnd": 13,
-    "contractHash": "1cf24418020be4f5",
-    "inputHash": "411710ba",
-    "outputHash": "d17478ee"
-  },
-  "credentialStatus": {
-    "pikkuFuncId": "credentialStatus",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "credentialStatus",
-    "services": {
-      "optimized": true,
-      "services": [
-        "credentialService"
-      ]
-    },
-    "inputSchemaName": "CredentialStatusInput",
-    "outputSchemaName": "CredentialStatusOutput",
-    "inputs": [
-      "CredentialStatusInput"
-    ],
-    "outputs": [
-      "CredentialStatusOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:credentials:read"
-    ],
-    "implementationHash": "dc7a4a408c270885",
-    "title": "Credential Status",
-    "description": "Checks which of the given credential names are configured. Optionally scoped to a user.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/credential-status.function.ts",
-    "exportedName": "credentialStatus",
-    "bodyStart": 13,
-    "bodyEnd": 17,
-    "contractHash": "54c549aa89a51ad1",
-    "inputHash": "e5e1d5fa",
-    "outputHash": "d90abe74"
-  },
-  "credentialUsers": {
-    "pikkuFuncId": "credentialUsers",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "credentialUsers",
-    "services": {
-      "optimized": true,
-      "services": [
-        "credentialService"
-      ]
-    },
-    "inputSchemaName": "CredentialUsersInput",
-    "outputSchemaName": "CredentialUsersOutput",
-    "inputs": [
-      "CredentialUsersInput"
-    ],
-    "outputs": [
-      "CredentialUsersOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:credentials:read"
-    ],
-    "implementationHash": "26ed1bba9a3526f6",
-    "title": "Credential Users",
-    "description": "Lists all user IDs that have a specific credential configured.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/credential-users.function.ts",
-    "exportedName": "credentialUsers",
-    "bodyStart": 12,
-    "bodyEnd": 13,
-    "contractHash": "3978cc43086f3ba9",
-    "inputHash": "3ece4aca",
-    "outputHash": "ad9afc4a"
-  },
   "deleteAgentThread": {
     "pikkuFuncId": "deleteAgentThread",
     "functionType": "user",
@@ -293,6 +116,40 @@
     "inputHash": "a375c07d",
     "outputHash": "a2094cc1"
   },
+  "deleteScenarioRun": {
+    "pikkuFuncId": "deleteScenarioRun",
+    "functionType": "user",
+    "funcWrapper": "pikkuFunc",
+    "sessionless": false,
+    "name": "deleteScenarioRun",
+    "services": {
+      "optimized": true,
+      "services": [
+        "scenarioRunStore"
+      ]
+    },
+    "inputSchemaName": "DeleteScenarioRunInput",
+    "outputSchemaName": null,
+    "inputs": [
+      "DeleteScenarioRunInput"
+    ],
+    "outputs": [],
+    "expose": true,
+    "scopes": [
+      "pikku:console:scenarios:manage"
+    ],
+    "implementationHash": "50d7b1af243e6b59",
+    "title": "Delete Scenario Run",
+    "description": "Forget one scenario run and everything it recorded, including its screenshots and video.",
+    "isDirectFunction": false,
+    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/delete-scenario-run.function.ts",
+    "exportedName": "deleteScenarioRun",
+    "bodyStart": 10,
+    "bodyEnd": 10,
+    "contractHash": "fabb7d1b45ba84ae",
+    "inputHash": "eec2b60d",
+    "outputHash": "b207e5c4"
+  },
   "deleteWorkflowRun": {
     "pikkuFuncId": "deleteWorkflowRun",
     "functionType": "user",
@@ -465,9 +322,9 @@
     "exportedName": "getAddonMeta",
     "bodyStart": 14,
     "bodyEnd": 14,
-    "contractHash": "a221c4d32d232590",
+    "contractHash": "62596057e4e4a9e9",
     "inputHash": "bc3bf42d",
-    "outputHash": "02854c4f"
+    "outputHash": "8dbf290f"
   },
   "getAddonCommunityPackage": {
     "pikkuFuncId": "getAddonCommunityPackage",
@@ -501,9 +358,9 @@
     "exportedName": "getAddonCommunityPackage",
     "bodyStart": 14,
     "bodyEnd": 14,
-    "contractHash": "d508534482688cb1",
+    "contractHash": "6f0cb059eb9a1040",
     "inputHash": "450acb95",
-    "outputHash": "6aba41a1"
+    "outputHash": "ab9f43b9"
   },
   "getAgentRunScores": {
     "pikkuFuncId": "getAgentRunScores",
@@ -514,7 +371,7 @@
     "services": {
       "optimized": true,
       "services": [
-        "aiRunState"
+        "agentRunState"
       ]
     },
     "wires": {
@@ -532,14 +389,14 @@
       "GetAgentRunScoresOutput"
     ],
     "expose": true,
-    "implementationHash": "a2011ab7077a8204",
+    "implementationHash": "8885314c13ee66d5",
     "title": "Get Agent Run Scores",
     "description": "Returns every grade recorded against one AI agent run, newest first. A run accumulates one row per scorer, and a re-grade appends rather than replaces — so a run may carry the same scorer more than once. A caller without the admin scope may only read the grades of runs its own session owns.",
     "isDirectFunction": false,
     "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/get-agent-run-scores.function.ts",
     "exportedName": "getAgentRunScores",
-    "bodyStart": 13,
-    "bodyEnd": 28,
+    "bodyStart": 14,
+    "bodyEnd": 29,
     "contractHash": "e94bb92d695b9002",
     "inputHash": "fc8fc7eb",
     "outputHash": "e9ce1c33"
@@ -694,88 +551,9 @@
     "exportedName": "getAllMeta",
     "bodyStart": 11,
     "bodyEnd": 11,
-    "contractHash": "e83303feede7423a",
+    "contractHash": "bb60d6388b3e61f9",
     "inputHash": "bf06e182",
-    "outputHash": "b30b1312"
-  },
-  "getAuditFilters": {
-    "pikkuFuncId": "getAuditFilters",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "getAuditFilters",
-    "services": {
-      "optimized": true,
-      "services": [
-        "audit",
-        "auth",
-        "logger"
-      ]
-    },
-    "inputSchemaName": null,
-    "outputSchemaName": "GetAuditFiltersOutput",
-    "inputs": [],
-    "outputs": [
-      "GetAuditFiltersOutput",
-      "AuditUserProfile"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:audit:read"
-    ],
-    "implementationHash": "9b3445ba297cbc01",
-    "title": "Get Audit Filters",
-    "description": "Returns the distinct users and event types present in the audit trail, for populating the audit screen filters.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/get-audit-filters.function.ts",
-    "exportedName": "getAuditFilters",
-    "bodyStart": 33,
-    "bodyEnd": 44,
-    "contractHash": "dda1ed08cdb20234",
-    "inputHash": "3ef882a7",
-    "outputHash": "4d033a78"
-  },
-  "getAudits": {
-    "pikkuFuncId": "getAudits",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "getAudits",
-    "services": {
-      "optimized": true,
-      "services": [
-        "audit",
-        "auth",
-        "logger"
-      ]
-    },
-    "inputSchemaName": "GetAuditsInput",
-    "outputSchemaName": "GetAuditsOutput",
-    "inputs": [
-      "GetAuditsInput"
-    ],
-    "outputs": [
-      "GetAuditsOutput",
-      "AuditEvent",
-      "AuditSource",
-      "AuditUserIdentity",
-      "AuditUserDirectory"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:audit:read"
-    ],
-    "implementationHash": "df26d9f8e4504540",
-    "title": "Get Audits",
-    "description": "Returns a page of the audit trail, newest first, optionally filtered by user, event type, and time range. Reports readable: false when the configured audit sink is write-only.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/get-audits.function.ts",
-    "exportedName": "getAudits",
-    "bodyStart": 47,
-    "bodyEnd": 63,
-    "contractHash": "350278d5852ddc25",
-    "inputHash": "10deb076",
-    "outputHash": "d672dee1"
+    "outputHash": "733f9ff5"
   },
   "getAuthProviders": {
     "pikkuFuncId": "getAuthProviders",
@@ -912,9 +690,9 @@
     "exportedName": "getFunctionsMeta",
     "bodyStart": 22,
     "bodyEnd": 64,
-    "contractHash": "d96b40174d792fc2",
+    "contractHash": "2e4ebc320ff6a8f2",
     "inputHash": "f42aa828",
-    "outputHash": "fe1eb5c5"
+    "outputHash": "bc8c5025"
   },
   "getInstalledAddons": {
     "pikkuFuncId": "getInstalledAddons",
@@ -982,9 +760,9 @@
     "exportedName": "getAddonInstalledPackage",
     "bodyStart": 16,
     "bodyEnd": 132,
-    "contractHash": "58c00e363a5d1ac3",
+    "contractHash": "77609189a8ccf2e5",
     "inputHash": "84821b5a",
-    "outputHash": "00bb35ed"
+    "outputHash": "c6fc4211"
   },
   "getKnowledge": {
     "pikkuFuncId": "getKnowledge",
@@ -1161,6 +939,75 @@
     "inputHash": "f38fbddb",
     "outputHash": "b12c2699"
   },
+  "getScenarioArtifact": {
+    "pikkuFuncId": "getScenarioArtifact",
+    "functionType": "user",
+    "funcWrapper": "pikkuFunc",
+    "sessionless": false,
+    "name": "getScenarioArtifact",
+    "services": {
+      "optimized": true,
+      "services": [
+        "scenarioRunStore"
+      ]
+    },
+    "inputSchemaName": "GetScenarioArtifactInput",
+    "outputSchemaName": null,
+    "inputs": [
+      "GetScenarioArtifactInput"
+    ],
+    "outputs": [],
+    "scopes": [
+      "pikku:console:scenarios:read"
+    ],
+    "implementationHash": "c16b7a242740cdd7",
+    "title": "Get Scenario Artifact",
+    "description": "The bytes of one screenshot or recording a scenario run produced, served with its own content type.",
+    "isDirectFunction": false,
+    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/get-scenario-artifact.function.ts",
+    "exportedName": "getScenarioArtifact",
+    "bodyStart": 21,
+    "bodyEnd": 32,
+    "contractHash": "44aa12f48ae9154e",
+    "inputHash": "dd77f6df",
+    "outputHash": "9561db27"
+  },
+  "getScenarioRun": {
+    "pikkuFuncId": "getScenarioRun",
+    "functionType": "user",
+    "funcWrapper": "pikkuFunc",
+    "sessionless": false,
+    "name": "getScenarioRun",
+    "services": {
+      "optimized": true,
+      "services": [
+        "scenarioRunStore"
+      ]
+    },
+    "inputSchemaName": "GetScenarioRunInput",
+    "outputSchemaName": "ScenarioRunRecord",
+    "inputs": [
+      "GetScenarioRunInput"
+    ],
+    "outputs": [
+      "ScenarioRunRecord"
+    ],
+    "expose": true,
+    "scopes": [
+      "pikku:console:scenarios:read"
+    ],
+    "implementationHash": "3f94b35b645492eb",
+    "title": "Get Scenario Run",
+    "description": "One scenario run in full: every scenario it ran, the step ladder as it was worded at the time, why anything failed, and the screenshots and video each scenario produced.",
+    "isDirectFunction": false,
+    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/get-scenario-run.function.ts",
+    "exportedName": "getScenarioRun",
+    "bodyStart": 14,
+    "bodyEnd": 17,
+    "contractHash": "9d03dec2cb914208",
+    "inputHash": "c6ba04b9",
+    "outputHash": "b9c285d8"
+  },
   "getSchema": {
     "pikkuFuncId": "getSchema",
     "functionType": "user",
@@ -1296,6 +1143,50 @@
     "inputHash": "ee2d646b",
     "outputHash": "6baa567b"
   },
+  "getSurface": {
+    "pikkuFuncId": "getSurface",
+    "functionType": "user",
+    "funcWrapper": "pikkuFunc",
+    "sessionless": false,
+    "name": "getSurface",
+    "services": {
+      "optimized": true,
+      "services": [
+        "metaService"
+      ]
+    },
+    "inputSchemaName": null,
+    "outputSchemaName": "SurfaceResult",
+    "inputs": [],
+    "outputs": [
+      "SurfaceResult",
+      "SurfaceDoc",
+      "SurfaceEntryPoint",
+      "SurfaceEntryPointId",
+      "SurfaceLeaf",
+      "SurfaceStep",
+      "SurfaceSymbol",
+      "SurfaceKind",
+      "SurfaceOrigin",
+      "SurfaceUsage",
+      "SurfaceSymbolUsage"
+    ],
+    "expose": true,
+    "scopes": [
+      "pikku:console:wirings:read"
+    ],
+    "implementationHash": "550739d3dcf7e57f",
+    "title": "Get Public Surface",
+    "description": "Returns the public surface as documentation: the doc @pikku/cli ships alongside itself, and the import counts the inspector measured for this project. Either half may be missing — an older CLI has no doc, a project that has never run prebuild has no usage — and each absence is an empty result.",
+    "isDirectFunction": false,
+    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/get-surface.function.ts",
+    "exportedName": "getSurface",
+    "bodyStart": 11,
+    "bodyEnd": 11,
+    "contractHash": "015cff78fe7a5fc4",
+    "inputHash": "aa69519b",
+    "outputHash": "8283c2aa"
+  },
   "getWebhookDelivery": {
     "pikkuFuncId": "getWebhookDelivery",
     "functionType": "user",
@@ -1591,7 +1482,8 @@
     "services": {
       "optimized": true,
       "services": [
-        "metaService"
+        "metaService",
+        "addonReadinessService"
       ]
     },
     "inputSchemaName": "InstallAddonInput",
@@ -1607,17 +1499,17 @@
     "scopes": [
       "pikku:console:addons:install"
     ],
-    "implementationHash": "ec68cd4276b8df7a",
+    "implementationHash": "f1279c349a068582",
     "title": "Install Addon",
     "description": "Installs a community addon package and creates the wiring file. Requires an admin session.",
     "isDirectFunction": false,
     "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/install-addon.function.ts",
     "exportedName": "installAddon",
-    "bodyStart": 33,
-    "bodyEnd": 118,
-    "contractHash": "150c3c7624b8bd6d",
+    "bodyStart": 46,
+    "bodyEnd": 142,
+    "contractHash": "847ae3c5935119c4",
     "inputHash": "b0a5b0d2",
-    "outputHash": "2d935d9a"
+    "outputHash": "2b68ff64"
   },
   "installOpenapiAddon": {
     "pikkuFuncId": "installOpenapiAddon",
@@ -1644,7 +1536,7 @@
     "scopes": [
       "pikku:console:addons:install"
     ],
-    "implementationHash": "a06c894a64ce0b68",
+    "implementationHash": "77b4c44bf71c831d",
     "title": "Install OpenAPI Addon",
     "description": "Generates an addon from an OpenAPI spec, installs it into the workspace, and wires it up.",
     "isDirectFunction": false,
@@ -1656,6 +1548,42 @@
     "inputHash": "e5c19fbd",
     "outputHash": "9de4b0f5"
   },
+  "listScenarioRuns": {
+    "pikkuFuncId": "listScenarioRuns",
+    "functionType": "user",
+    "funcWrapper": "pikkuFunc",
+    "sessionless": false,
+    "name": "listScenarioRuns",
+    "services": {
+      "optimized": true,
+      "services": [
+        "scenarioRunStore"
+      ]
+    },
+    "inputSchemaName": "ListScenarioRunsInput",
+    "outputSchemaName": "ListScenarioRunsOutput",
+    "inputs": [
+      "ListScenarioRunsInput"
+    ],
+    "outputs": [
+      "ListScenarioRunsOutput"
+    ],
+    "expose": true,
+    "scopes": [
+      "pikku:console:scenarios:read"
+    ],
+    "implementationHash": "61f54f273504def2",
+    "title": "List Scenario Runs",
+    "description": "Past `pikku scenario run` invocations, newest first, each summarised with its outcome, counts and how many artifacts it left. Empty when the project has never run a scenario.",
+    "isDirectFunction": false,
+    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/list-scenario-runs.function.ts",
+    "exportedName": "listScenarioRuns",
+    "bodyStart": 14,
+    "bodyEnd": 17,
+    "contractHash": "b74de56a2794bc74",
+    "inputHash": "fc60505b",
+    "outputHash": "dbae523b"
+  },
   "listWebhookDeliveries": {
     "pikkuFuncId": "listWebhookDeliveries",
     "functionType": "user",
@@ -1859,8 +1787,8 @@
     "isDirectFunction": false,
     "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/render-email-preview.function.ts",
     "exportedName": "renderEmailPreview",
-    "bodyStart": 45,
-    "bodyEnd": 120,
+    "bodyStart": 43,
+    "bodyEnd": 117,
     "contractHash": "5c0010a01eac05df",
     "inputHash": "8bb3bf2b",
     "outputHash": "ccb4573c"
@@ -1899,374 +1827,6 @@
     "inputHash": "b49cd137",
     "outputHash": "1cca48c8"
   },
-  "scopeAddScopeToUser": {
-    "pikkuFuncId": "scopeAddScopeToUser",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeAddScopeToUser",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "wires": {
-      "optimized": true,
-      "wires": [
-        "session"
-      ]
-    },
-    "inputSchemaName": "ScopeAddScopeToUserInput",
-    "outputSchemaName": "ScopeAddScopeToUserOutput",
-    "inputs": [
-      "ScopeAddScopeToUserInput"
-    ],
-    "outputs": [
-      "ScopeAddScopeToUserOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "286cf4eceeb2fa5e",
-    "title": "Grant Scope",
-    "description": "Grants a scope directly to a user, outside of any role. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this grant never applies.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-add-scope-to-user.function.ts",
-    "exportedName": "scopeAddScopeToUser",
-    "bodyStart": 13,
-    "bodyEnd": 14,
-    "contractHash": "e2191335667bf9c3",
-    "inputHash": "e0bdcc51",
-    "outputHash": "dbe52008"
-  },
-  "scopeAddUserToRole": {
-    "pikkuFuncId": "scopeAddUserToRole",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeAddUserToRole",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "wires": {
-      "optimized": true,
-      "wires": [
-        "session"
-      ]
-    },
-    "inputSchemaName": "ScopeAddUserToRoleInput",
-    "outputSchemaName": "ScopeAddUserToRoleOutput",
-    "inputs": [
-      "ScopeAddUserToRoleInput"
-    ],
-    "outputs": [
-      "ScopeAddUserToRoleOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "57a3793fa5eed6b3",
-    "title": "Grant Role",
-    "description": "Grants a role to a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this grant never applies.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-add-user-to-role.function.ts",
-    "exportedName": "scopeAddUserToRole",
-    "bodyStart": 13,
-    "bodyEnd": 14,
-    "contractHash": "e1a91b09f95f4543",
-    "inputHash": "64fc33b0",
-    "outputHash": "90198208"
-  },
-  "scopeCreateRole": {
-    "pikkuFuncId": "scopeCreateRole",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeCreateRole",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": "ScopeCreateRoleInput",
-    "outputSchemaName": "ScopeCreateRoleOutput",
-    "inputs": [
-      "ScopeCreateRoleInput"
-    ],
-    "outputs": [
-      "ScopeCreateRoleOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "d40d98e1c6ca94d7",
-    "title": "Create Role",
-    "description": "Creates a role granting the given scopes.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-create-role.function.ts",
-    "exportedName": "scopeCreateRole",
-    "bodyStart": 14,
-    "bodyEnd": 15,
-    "contractHash": "223589f5814400ee",
-    "inputHash": "5bac8a6a",
-    "outputHash": "354cac09"
-  },
-  "scopeDeleteRole": {
-    "pikkuFuncId": "scopeDeleteRole",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeDeleteRole",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": "ScopeDeleteRoleInput",
-    "outputSchemaName": "ScopeDeleteRoleOutput",
-    "inputs": [
-      "ScopeDeleteRoleInput"
-    ],
-    "outputs": [
-      "ScopeDeleteRoleOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "4d410db3bd62260f",
-    "title": "Delete Role",
-    "description": "Deletes a role, revoking it from every user who holds it.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-delete-role.function.ts",
-    "exportedName": "scopeDeleteRole",
-    "bodyStart": 12,
-    "bodyEnd": 13,
-    "contractHash": "d318f71c80dc063b",
-    "inputHash": "2b3000d3",
-    "outputHash": "97f5cc49"
-  },
-  "scopeListDeclared": {
-    "pikkuFuncId": "scopeListDeclared",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeListDeclared",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": null,
-    "outputSchemaName": "ScopeListDeclaredOutput",
-    "inputs": [],
-    "outputs": [
-      "ScopeListDeclaredOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:read"
-    ],
-    "implementationHash": "e4248392c9cd9079",
-    "title": "List Declared Scopes",
-    "description": "Lists the scope vocabulary a role can be composed from, flagging any that are no longer declared in code.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-list-declared.function.ts",
-    "exportedName": "scopeListDeclared",
-    "bodyStart": 24,
-    "bodyEnd": 29,
-    "contractHash": "46fe9e75e9ee89e8",
-    "inputHash": "cdcd8b82",
-    "outputHash": "e340c17d"
-  },
-  "scopeListRoles": {
-    "pikkuFuncId": "scopeListRoles",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeListRoles",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": null,
-    "outputSchemaName": "ScopeListRolesOutput",
-    "inputs": [],
-    "outputs": [
-      "ScopeListRolesOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:read"
-    ],
-    "implementationHash": "b86216d77f9aee60",
-    "title": "List Roles",
-    "description": "Lists every role and the scopes it grants.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-list-roles.function.ts",
-    "exportedName": "scopeListRoles",
-    "bodyStart": 10,
-    "bodyEnd": 13,
-    "contractHash": "b5dbd2d51b18edaf",
-    "inputHash": "f9028549",
-    "outputHash": "3c78768a"
-  },
-  "scopeListUserRoles": {
-    "pikkuFuncId": "scopeListUserRoles",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeListUserRoles",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": "ScopeListUserRolesInput",
-    "outputSchemaName": "ScopeListUserRolesOutput",
-    "inputs": [
-      "ScopeListUserRolesInput"
-    ],
-    "outputs": [
-      "ScopeListUserRolesOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:read"
-    ],
-    "implementationHash": "87ec363bee5d597d",
-    "title": "List User Roles",
-    "description": "Lists the roles a user holds, the scopes granted to them directly, and the full set those resolve to.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-list-user-roles.function.ts",
-    "exportedName": "scopeListUserRoles",
-    "bodyStart": 13,
-    "bodyEnd": 27,
-    "contractHash": "56767e69aab89b76",
-    "inputHash": "de5d4fe8",
-    "outputHash": "df994c3c"
-  },
-  "scopeRemoveScopeFromUser": {
-    "pikkuFuncId": "scopeRemoveScopeFromUser",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeRemoveScopeFromUser",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": "ScopeRemoveScopeFromUserInput",
-    "outputSchemaName": "ScopeRemoveScopeFromUserOutput",
-    "inputs": [
-      "ScopeRemoveScopeFromUserInput"
-    ],
-    "outputs": [
-      "ScopeRemoveScopeFromUserOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "8cd16a78812cdd50",
-    "title": "Revoke Scope",
-    "description": "Revokes a directly-granted scope from a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this revoke never applies.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-remove-scope-from-user.function.ts",
-    "exportedName": "scopeRemoveScopeFromUser",
-    "bodyStart": 13,
-    "bodyEnd": 14,
-    "contractHash": "4a89ae3d7f60f261",
-    "inputHash": "3dd862ea",
-    "outputHash": "75db1af4"
-  },
-  "scopeRemoveUserFromRole": {
-    "pikkuFuncId": "scopeRemoveUserFromRole",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeRemoveUserFromRole",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": "ScopeRemoveUserFromRoleInput",
-    "outputSchemaName": "ScopeRemoveUserFromRoleOutput",
-    "inputs": [
-      "ScopeRemoveUserFromRoleInput"
-    ],
-    "outputs": [
-      "ScopeRemoveUserFromRoleOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "ab21785ce8424632",
-    "title": "Revoke Role",
-    "description": "Revokes a role from a user. Takes effect on their next request, with no re-login — unless mapSession sets scopes itself, which is authoritative, and then this revoke never applies.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-remove-user-from-role.function.ts",
-    "exportedName": "scopeRemoveUserFromRole",
-    "bodyStart": 13,
-    "bodyEnd": 14,
-    "contractHash": "64f00972592ec04a",
-    "inputHash": "ce192b8a",
-    "outputHash": "c17da240"
-  },
-  "scopeSetRoleScopes": {
-    "pikkuFuncId": "scopeSetRoleScopes",
-    "functionType": "user",
-    "funcWrapper": "pikkuFunc",
-    "sessionless": false,
-    "name": "scopeSetRoleScopes",
-    "services": {
-      "optimized": true,
-      "services": [
-        "scopeService"
-      ]
-    },
-    "inputSchemaName": "ScopeSetRoleScopesInput",
-    "outputSchemaName": "ScopeSetRoleScopesOutput",
-    "inputs": [
-      "ScopeSetRoleScopesInput"
-    ],
-    "outputs": [
-      "ScopeSetRoleScopesOutput"
-    ],
-    "expose": true,
-    "scopes": [
-      "pikku:console:scopes:manage"
-    ],
-    "implementationHash": "896dade55f54a40f",
-    "title": "Set Role Scopes",
-    "description": "Replaces the scopes a role grants. Users holding it see the change on their next request — unless mapSession sets scopes itself, which is authoritative, and then the change never reaches them.",
-    "isDirectFunction": false,
-    "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/scope-set-role-scopes.function.ts",
-    "exportedName": "scopeSetRoleScopes",
-    "bodyStart": 13,
-    "bodyEnd": 14,
-    "contractHash": "3c72002e096bedd7",
-    "inputHash": "9db02d43",
-    "outputHash": "c6ce28cf"
-  },
   "secretGet": {
     "pikkuFuncId": "secretGet",
     "functionType": "user",
@@ -2505,8 +2065,8 @@
     "isDirectFunction": false,
     "sourceFile": "/home/runner/work/pikku/pikku/packages/addon/pikku-console/src/functions/update-email-template.function.ts",
     "exportedName": "updateEmailTemplate",
-    "bodyStart": 18,
-    "bodyEnd": 37,
+    "bodyStart": 17,
+    "bodyEnd": 36,
     "contractHash": "46dfb6154b42f5ab",
     "inputHash": "906d8ace",
     "outputHash": "70750a6d"