@pikku/addon-console 0.12.43 → 0.12.45

package/dist/.pikku/addon/setup/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/addon/setup/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/addon/setup/pikku-addon-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Addon package types for pikkuAddonConfig and pikkuAddonServices

package/dist/.pikku/addon/setup/pikku-addon-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Addon package types for pikkuAddonConfig and pikkuAddonServices

package/dist/.pikku/addon/setup/pikku-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/addon/setup/pikku-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/addon/trigger/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/addon/trigger/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/addon/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/addon/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/addon/variables/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/addon/variables/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/addon/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 export { defineVariable } from '@pikku/core/variable';
 //# sourceMappingURL=pikku-variable-types.gen.d.ts.map

package/dist/.pikku/addon/variables/pikku-variable-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 export { defineVariable } from '@pikku/core/variable';
 //# sourceMappingURL=pikku-variable-types.gen.js.map

package/dist/.pikku/addon/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/addon/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 import { TypedVariablesService as CoreTypedVariablesService, } from '@pikku/core/services';
 /**

package/dist/.pikku/addon/workflow/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/addon/workflow/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/addon/workflow/pikku-scenario-step-map.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Scenario step map: the names `scenario.given/when/then` accepts, with

package/dist/.pikku/addon/workflow/pikku-workflow-map.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 /**
  * Workflow type map with input/output types for each workflow

package/dist/.pikku/addon/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult } from '@pikku/core/workflow';

package/dist/.pikku/addon/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { pikkuWorkflowGraph as corePikkuWorkflowGraph } from '@pikku/core/workflow';

package/dist/.pikku/addon/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 import { pikkuState } from '@pikku/core/state';
 const workflowsMeta = {};

package/dist/.pikku/addon/workflow/pikku-workflow-wirings.gen.d.ts

@@ -1,5 +1,5 @@
 export {};
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 //# sourceMappingURL=pikku-workflow-wirings.gen.d.ts.map

package/dist/.pikku/addon/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 export {};
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.112
  */
 //# sourceMappingURL=pikku-workflow-wirings.gen.js.map

package/dist/src/functions/delete-agent-thread.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-agent-thread.function.d.ts","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB;cAChB,MAAM;;aACP,OAAO;;cADN,MAAM;;aACP,OAAO;;cADN,MAAM;;aACP,OAAO;oGAWlB,CAAA"}
+{"version":3,"file":"delete-agent-thread.function.d.ts","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,iBAAiB;cAChB,MAAM;;aACP,OAAO;;cADN,MAAM;;aACP,OAAO;;cADN,MAAM;;aACP,OAAO;oGAYlB,CAAA"}

package/dist/src/functions/delete-agent-thread.function.js

@@ -1,9 +1,11 @@
 import { pikkuFunc } from '#pikku/addon/function';
+import { isThreadOwner } from './is-thread-owner.permission.js';
 export const deleteAgentThread = pikkuFunc({
     title: 'Delete Agent Thread',
-    description: 'Deletes an AI agent thread and all its associated messages and runs via cascade.',
+    description: 'Deletes an AI agent thread and all its associated messages and runs via cascade. A caller without the admin scope may only delete a thread its own session owns.',
     expose: true,
     scopes: ['pikku:console:agents:manage'],
+    permissions: { owner: isThreadOwner },
     func: async ({ agentRunService }, input) => {
         const deleted = await agentRunService.deleteThread(input.threadId);
         return { deleted };

package/dist/src/functions/delete-agent-thread.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete-agent-thread.function.js","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,kFAAkF;IACpF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAClE,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"delete-agent-thread.function.js","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,kKAAkK;IACpK,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAClE,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/delete-agent-thread.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-agent-thread.function.test.d.ts.map

package/dist/src/functions/delete-agent-thread.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-agent-thread.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/delete-agent-thread.function.test.js

@@ -0,0 +1,8 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { deleteAgentThread } from './delete-agent-thread.function.js';
+import { isThreadOwner } from './is-thread-owner.permission.js';
+test('deleting a thread is gated on thread ownership', () => {
+    assert.deepEqual(deleteAgentThread.permissions, { owner: isThreadOwner });
+});
+//# sourceMappingURL=delete-agent-thread.function.test.js.map

package/dist/src/functions/delete-agent-thread.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-agent-thread.function.test.js","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-messages.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;2GAShE,CAAA"}
+{"version":3,"file":"get-agent-thread-messages.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;2GAUhE,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.js

@@ -1,9 +1,11 @@
 import { pikkuFunc } from '#pikku/addon/function';
+import { isThreadOwner } from './is-thread-owner.permission.js';
 export const getAgentThreadMessages = pikkuFunc({
     title: 'Get Agent Thread Messages',
-    description: 'Returns all messages for a given AI agent thread, ordered by creation time.',
+    description: 'Returns all messages for a given AI agent thread, ordered by creation time. A caller without the admin scope may only read a thread its own session owns.',
     expose: true,
     scopes: ['pikku:console:agents:read'],
+    permissions: { owner: isThreadOwner },
     func: async ({ agentRunService }, input) => {
         return await agentRunService.getThreadMessages(input.threadId);
     },

package/dist/src/functions/get-agent-thread-messages.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-messages.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAA8B;IAC3E,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,6EAA6E;IAC/E,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-agent-thread-messages.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAA8B;IAC3E,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,2JAA2J;IAC7J,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-agent-thread-messages.function.test.d.ts.map

package/dist/src/functions/get-agent-thread-messages.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-messages.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/get-agent-thread-messages.function.test.js

@@ -0,0 +1,8 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { getAgentThreadMessages } from './get-agent-thread-messages.function.js';
+import { isThreadOwner } from './is-thread-owner.permission.js';
+test('thread messages are gated on thread ownership', () => {
+    assert.deepEqual(getAgentThreadMessages.permissions, { owner: isThreadOwner });
+});
+//# sourceMappingURL=get-agent-thread-messages.function.test.js.map

package/dist/src/functions/get-agent-thread-messages.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-messages.function.test.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;AAChF,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-virtual-user-run-steps.function.d.ts

@@ -0,0 +1,14 @@
+export declare const getVirtualUserRunSteps: import("#pikku/addon/function").PikkuFunctionConfig<{
+    runId: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
+    runId: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
+    runId: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=get-virtual-user-run-steps.function.d.ts.map

package/dist/src/functions/get-virtual-user-run-steps.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-run-steps.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-run-steps.function.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,sBAAsB;WACxB,MAAM;YAAU,MAAM;aAAW,MAAM;;WAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;;WAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;2GAoBhD,CAAA"}

package/dist/src/functions/get-virtual-user-run-steps.function.js

@@ -0,0 +1,31 @@
+import { pikkuFunc } from '#pikku/addon/function';
+/**
+ * One run's turns, in the order they happened.
+ *
+ * Its own call rather than a field on the run: a run at a 500-step budget
+ * carries more transcript than every other column together, so the list would
+ * pay for it on every row.
+ *
+ * SECURITY: the transcript is strictly more sensitive than the summary it
+ * belongs to — it carries the live ids and payloads the run actually sent.
+ */
+const MAX_STEPS = 500;
+export const getVirtualUserRunSteps = pikkuFunc({
+    title: 'Get Virtual User Run Steps',
+    description: 'Returns every turn one virtual user run took: what it called, what came back, and what that cost.',
+    expose: true,
+    scopes: ['pikku:console:virtualUsers:read'],
+    func: async ({ virtualUserRunStore }, input) => {
+        if (!virtualUserRunStore) {
+            return [];
+        }
+        return await virtualUserRunStore.steps(input.runId, {
+            // A run's whole transcript at the largest budget pikku allows, and no
+            // more: the input is a plain type, so the ceiling cannot come from a
+            // schema the way the scaffolded read's does.
+            limit: Math.min(input?.limit ?? MAX_STEPS, MAX_STEPS),
+            offset: input?.offset,
+        });
+    },
+});
+//# sourceMappingURL=get-virtual-user-run-steps.function.js.map

package/dist/src/functions/get-virtual-user-run-steps.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-run-steps.function.js","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-run-steps.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD;;;;;;;;;GASG;AACH,MAAM,SAAS,GAAG,GAAG,CAAA;AAErB,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAG7C;IACA,KAAK,EAAE,4BAA4B;IACnC,WAAW,EACT,mGAAmG;IACrG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,iCAAiC,CAAC;IAC3C,IAAI,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAClD,sEAAsE;YACtE,qEAAqE;YACrE,6CAA6C;YAC7C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,CAAC;YACrD,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-virtual-user-runs.function.d.ts

@@ -0,0 +1,14 @@
+export declare const getVirtualUserRuns: import("#pikku/addon/function").PikkuFunctionConfig<{
+    persona?: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
+    persona?: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
+    persona?: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=get-virtual-user-runs.function.d.ts.map

package/dist/src/functions/get-virtual-user-runs.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-runs.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-runs.function.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,kBAAkB;cACjB,MAAM;YAAU,MAAM;aAAW,MAAM;;cAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;;cAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;2GA0BnD,CAAA"}

package/dist/src/functions/get-virtual-user-runs.function.js

@@ -0,0 +1,39 @@
+import { pikkuFunc } from '#pikku/addon/function';
+/**
+ * What the virtual users have been doing, newest first.
+ *
+ * Read off the host's own `virtualUserRunStore` rather than through the
+ * scaffolded RPCs, so the console shows a project's runs whether or not that
+ * project turned `scaffold.virtualUser` on — wiring the store is the only thing
+ * a run needs, and it is what a run already needs.
+ *
+ * SECURITY: an `adversarial` run's findings are working exploits carrying live
+ * ids. This is a privileged read, which is why it has a scope of its own rather
+ * than riding on the wirings one.
+ */
+const MAX_RUNS = 100;
+export const getVirtualUserRuns = pikkuFunc({
+    title: 'Get Virtual User Runs',
+    description: 'Returns recorded virtual user runs, newest first. Accepts optional persona, limit and offset.',
+    expose: true,
+    scopes: ['pikku:console:virtualUsers:read'],
+    func: async ({ virtualUserRunStore }, input) => {
+        if (!virtualUserRunStore) {
+            return [];
+        }
+        const runs = await virtualUserRunStore.list({
+            persona: input?.persona,
+            // The scaffolded read bounds this through zod; nothing types a console
+            // function's input at runtime, so the ceiling is applied here instead of
+            // letting a caller ask the store for every run an app has ever recorded.
+            limit: Math.min(input?.limit ?? MAX_RUNS, MAX_RUNS),
+            offset: input?.offset,
+        });
+        return runs.map((run) => ({
+            ...run,
+            createdAt: run.createdAt.toISOString(),
+            finishedAt: run.finishedAt ? run.finishedAt.toISOString() : null,
+        }));
+    },
+});
+//# sourceMappingURL=get-virtual-user-runs.function.js.map

package/dist/src/functions/get-virtual-user-runs.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-runs.function.js","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-runs.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,QAAQ,GAAG,GAAG,CAAA;AAEpB,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,+FAA+F;IACjG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,iCAAiC,CAAC;IAC3C,IAAI,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,QAAQ,EAAE,QAAQ,CAAC;YACnD,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,GAAG,GAAG;YACN,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SACjE,CAAC,CAAC,CAAA;IACL,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/is-thread-owner.permission.d.ts

@@ -0,0 +1,13 @@
+/**
+ * A single-thread read is keyed by a caller-supplied `threadId`, so ownership
+ * cannot come from the request — it is derived from the session and checked
+ * against the stored thread's resourceId. The sibling list endpoints filter
+ * instead; a lookup of one thread has nothing to filter, so it is refused.
+ *
+ * A missing thread is refused rather than 404'd so it is indistinguishable from
+ * one owned by someone else — no existence oracle.
+ */
+export declare const isThreadOwner: import("#pikku/addon/auth").PikkuPermission<{
+    threadId: string;
+}, import("../../.pikku/addon/function/pikku-function-types.gen.js").WiredServices>;
+//# sourceMappingURL=is-thread-owner.permission.d.ts.map

package/dist/src/functions/is-thread-owner.permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.d.ts","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.ts"],"names":[],"mappings":"AAMA;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa;cAA+B,MAAM;mFAS9D,CAAA"}

package/dist/src/functions/is-thread-owner.permission.js

@@ -0,0 +1,23 @@
+import { hasScopes } from '@pikku/core/scope';
+import { canAccessThread } from '@pikku/core/agent';
+import { pikkuPermission } from '#pikku/addon/auth';
+const ADMIN_SCOPE_ROOT = 'admin';
+/**
+ * A single-thread read is keyed by a caller-supplied `threadId`, so ownership
+ * cannot come from the request — it is derived from the session and checked
+ * against the stored thread's resourceId. The sibling list endpoints filter
+ * instead; a lookup of one thread has nothing to filter, so it is refused.
+ *
+ * A missing thread is refused rather than 404'd so it is indistinguishable from
+ * one owned by someone else — no existence oracle.
+ */
+export const isThreadOwner = pikkuPermission(async ({ agentRunService }, { threadId }, { session }) => {
+    if (hasScopes([ADMIN_SCOPE_ROOT], session?.scopes)) {
+        return true;
+    }
+    const thread = await agentRunService.getThread(threadId);
+    if (!thread)
+        return false;
+    return canAccessThread(thread.resourceId, session);
+});
+//# sourceMappingURL=is-thread-owner.permission.js.map

package/dist/src/functions/is-thread-owner.permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.js","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAC1C,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACvD,IAAI,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;AACpD,CAAC,CACF,CAAA"}

package/dist/src/functions/is-thread-owner.permission.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=is-thread-owner.permission.test.d.ts.map

package/dist/src/functions/is-thread-owner.permission.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.test.d.ts","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/is-thread-owner.permission.test.js

@@ -0,0 +1,25 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { isThreadOwner } from './is-thread-owner.permission.js';
+const services = {
+    agentRunService: {
+        getThread: async (threadId) => threadId === 'thread-1' ? { threadId, resourceId: 'alice' } : null,
+    },
+};
+const check = (session, threadId = 'thread-1') => isThreadOwner(services, { threadId }, { session });
+test('the owning session is allowed', async () => {
+    assert.equal(await check({ userId: 'alice', scopes: [] }), true);
+});
+test("someone else's thread is refused", async () => {
+    assert.equal(await check({ userId: 'carol', scopes: [] }), false);
+});
+test('an admin reaches any thread', async () => {
+    assert.equal(await check({ userId: 'root', scopes: ['admin'] }), true);
+});
+test('a missing thread reads the same as one owned by someone else', async () => {
+    assert.equal(await check({ userId: 'alice', scopes: [] }, 'nope'), false);
+});
+test('a session with no principals is refused', async () => {
+    assert.equal(await check({ scopes: [] }), false);
+});
+//# sourceMappingURL=is-thread-owner.permission.test.js.map

package/dist/src/functions/is-thread-owner.permission.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.test.js","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,MAAM,QAAQ,GAAG;IACf,eAAe,EAAE;QACf,SAAS,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CACpC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;KACrE;CACO,CAAA;AAEV,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,QAAQ,GAAG,UAAU,EAAE,EAAE,CACxD,aAAa,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAW,CAAC,CAAA;AAE7D,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;AAClE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;IAClD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;AACxE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA"}

package/dist/src/functions/render-email-preview.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-email-preview.function.d.ts","sourceRoot":"","sources":["../../../src/functions/render-email-preview.function.ts"],"names":[],"mappings":"AASA,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;AAClE,KAAK,kBAAkB,GACrB,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;AAE3D,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6FAA6F;IAC7F,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,eAAO,MAAM,kBAAkB,8eAsF7B,CAAA"}
+{"version":3,"file":"render-email-preview.function.d.ts","sourceRoot":"","sources":["../../../src/functions/render-email-preview.function.ts"],"names":[],"mappings":"AAQA,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;AAClE,KAAK,kBAAkB,GACrB,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;AAE3D,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6FAA6F;IAC7F,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,eAAO,MAAM,kBAAkB,8eA4F7B,CAAA"}

package/dist/src/functions/render-email-preview.function.js

@@ -1,6 +1,6 @@
 import { pikkuFunc } from '#pikku/addon/function';
 import { NotFoundError } from '#pikku/addon/error';
-import { getNestedValue, renderTemplate, renderPartial, } from './render-email-template.utils.js';
+import { getNestedValue, renderTemplate, } from './render-email-template.utils.js';
 export const renderEmailPreview = pikkuFunc({
     title: 'Render Email Preview',
     description: 'Renders an email template preview from emailTemplatesDir using a locale and variable payload.',
@@ -24,34 +24,23 @@ export const renderEmailPreview = pikkuFunc({
             t: assets.strings,
             appName,
         };
-        const subject = renderTemplate(assets.subject, baseContext).trim();
-        const htmlWithPartials = assets.html.replace(/\{\{\s*>\s*([a-zA-Z0-9-_/.]+)\s*\}\}/g, (_match, partialName) => `@@PARTIAL:${String(partialName).trim()}@@`);
-        let htmlBody = renderTemplate(htmlWithPartials, {
+        const subject = renderTemplate(assets.subject, baseContext, assets.partials, false).trim();
+        const htmlBody = renderTemplate(assets.html, {
             ...baseContext,
             subject,
-        });
-        const partialMatches = [...htmlBody.matchAll(/@@PARTIAL:([^@]+)@@/g)];
-        for (const match of partialMatches) {
-            if (!match[1])
-                continue;
-            const rendered = renderPartial(match[1], assets.partials, {
-                ...baseContext,
-                subject,
-            });
-            htmlBody = htmlBody.replace(match[0], rendered);
-        }
+        }, assets.partials, true);
         const html = assets.layout
             ? renderTemplate(assets.layout, {
                 ...baseContext,
                 subject,
                 content: htmlBody,
-            })
+            }, assets.partials, true)
             : htmlBody;
         const text = assets.text
             ? renderTemplate(assets.text, {
                 ...baseContext,
                 subject,
-            }).trim()
+            }, assets.partials, false).trim()
             : undefined;
         return {
             name: input.templateName,

package/dist/src/functions/render-email-preview.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-email-preview.function.js","sourceRoot":"","sources":["../../../src/functions/render-email-preview.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,GACd,MAAM,kCAAkC,CAAA;AAyBzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,+FAA+F;IACjG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAC7B,CAAA;QAE/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,2BAA2B,KAAK,CAAC,YAAY,EAAE,CAAC,CAAA;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QAE3E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,sBAAsB,CACrD,KAAK,CAAC,YAAY,EAClB,MAAM,CACP,CAAA;QAED,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAA;QAC1D,MAAM,OAAO,GACX,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAEzC,MAAM,WAAW,GAAG;YAClB,GAAG,IAAI;YACP,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,CAAC,EAAE,MAAM,CAAC,OAAO;YACjB,OAAO;SACR,CAAA;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;QAClE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAC1C,uCAAuC,EACvC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,aAAa,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,IAAI,CACrE,CAAA;QAED,IAAI,QAAQ,GAAG,cAAc,CAAC,gBAAgB,EAAE;YAC9C,GAAG,WAAW;YACd,OAAO;SACR,CAAC,CAAA;QAEF,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAA;QACrE,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAQ;YACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACxD,GAAG,WAAW;gBACd,OAAO;aACR,CAAC,CAAA;YACF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM;YACxB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,GAAG,WAAW;gBACd,OAAO;gBACP,OAAO,EAAE,QAAQ;aAClB,CAAC;YACJ,CAAC,CAAC,QAAQ,CAAA;QAEZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;YACtB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC1B,GAAG,WAAW;gBACd,OAAO;aACR,CAAC,CAAC,IAAI,EAAE;YACX,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,IAAI,EAAE;YACrD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"render-email-preview.function.js","sourceRoot":"","sources":["../../../src/functions/render-email-preview.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,kCAAkC,CAAA;AAyBzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,+FAA+F;IACjG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAC7B,CAAA;QAE/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,2BAA2B,KAAK,CAAC,YAAY,EAAE,CAAC,CAAA;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QAE3E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,sBAAsB,CACrD,KAAK,CAAC,YAAY,EAClB,MAAM,CACP,CAAA;QAED,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAA;QAC1D,MAAM,OAAO,GACX,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAEzC,MAAM,WAAW,GAAG;YAClB,GAAG,IAAI;YACP,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,CAAC,EAAE,MAAM,CAAC,OAAO;YACjB,OAAO;SACR,CAAA;QAED,MAAM,OAAO,GAAG,cAAc,CAC5B,MAAM,CAAC,OAAO,EACd,WAAW,EACX,MAAM,CAAC,QAAQ,EACf,KAAK,CACN,CAAC,IAAI,EAAE,CAAA;QAER,MAAM,QAAQ,GAAG,cAAc,CAC7B,MAAM,CAAC,IAAI,EACX;YACE,GAAG,WAAW;YACd,OAAO;SACR,EACD,MAAM,CAAC,QAAQ,EACf,IAAI,CACL,CAAA;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM;YACxB,CAAC,CAAC,cAAc,CACZ,MAAM,CAAC,MAAM,EACb;gBACE,GAAG,WAAW;gBACd,OAAO;gBACP,OAAO,EAAE,QAAQ;aAClB,EACD,MAAM,CAAC,QAAQ,EACf,IAAI,CACL;YACH,CAAC,CAAC,QAAQ,CAAA;QAEZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;YACtB,CAAC,CAAC,cAAc,CACZ,MAAM,CAAC,IAAI,EACX;gBACE,GAAG,WAAW;gBACd,OAAO;aACR,EACD,MAAM,CAAC,QAAQ,EACf,KAAK,CACN,CAAC,IAAI,EAAE;YACV,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,IAAI,EAAE;YACrD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/render-email-template.utils.d.ts

@@ -1,5 +1,10 @@
+export declare function escapeHtml(value: string): string;
 export declare function getNestedValue(source: Record<string, unknown>, path: string): string;
-export declare function applyTemplate(source: string, context: Record<string, unknown>): string;
-export declare function renderTemplate(source: string, context: Record<string, unknown>): string;
-export declare function renderPartial(name: string, partials: Record<string, string>, context: Record<string, unknown>): string;
+export declare function expandPartials(source: string, partials: Record<string, string>, depth?: number): string;
+/**
+ * A single substitution pass — the replacement text is never rescanned, so a
+ * caller-supplied value can never be reinterpreted as a template.
+ */
+export declare function substitute(source: string, context: Record<string, unknown>, escape: boolean): string;
+export declare function renderTemplate(source: string, context: Record<string, unknown>, partials: Record<string, string>, escape: boolean): string;
 //# sourceMappingURL=render-email-template.utils.d.ts.map

package/dist/src/functions/render-email-template.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-email-template.utils.d.ts","sourceRoot":"","sources":["../../../src/functions/render-email-template.utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,MAAM,GACX,MAAM,CAYR;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAWR;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAQR;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAGR"}
+{"version":3,"file":"render-email-template.utils.d.ts","sourceRoot":"","sources":["../../../src/functions/render-email-template.utils.ts"],"names":[],"mappings":"AAyBA,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,MAAM,GACX,MAAM,CAYR;AAWD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,KAAK,SAAI,GACR,MAAM,CASR;AA0BD;;;GAGG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,OAAO,GACd,MAAM,CAYR;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,MAAM,EAAE,OAAO,GACd,MAAM,CAOR"}