@pikku/addon-console 0.12.43 → 0.12.45

package/dist/src/functions/render-email-template.utils.js

@@ -1,3 +1,26 @@
+const HTML_ESCAPES = {
+    '&': '&',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;',
+    "'": '&#39;',
+};
+/**
+ * Matches the raw `{{{ value }}}` form before the escaped `{{ value }}` form, so
+ * the opt-in escape hatch is never mistaken for a normal substitution.
+ */
+const TEMPLATE_TOKEN = /\{\{\{\s*([^{}]+?)\s*\}\}\}|\{\{\s*([^}]+?)\s*\}\}/g;
+const PARTIAL_TOKEN = /\{\{\s*>\s*([a-zA-Z0-9-_/.]+)\s*\}\}/g;
+const MAX_TEMPLATE_DEPTH = 5;
+/**
+ * theme.json and the locale files ship with the templates, so they are treated
+ * as template-author input: expanded before caller data and allowed to contain
+ * their own placeholders. Everything else is caller-supplied.
+ */
+const TRUSTED_ROOTS = ['theme', 't'];
+export function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (char) => HTML_ESCAPES[char] ?? char);
+}
 export function getNestedValue(source, path) {
     const segments = path.split('.');
     let current = source;
@@ -11,30 +34,61 @@ export function getNestedValue(source, path) {
         ? String(current)
         : '';
 }
-export function applyTemplate(source, context) {
-    return source.replace(/\{\{\s*([^}]+?)\s*\}\}/g, (_match, rawKey) => {
-        const key = String(rawKey).trim();
-        if (key === 'content') {
-            return typeof context.content === 'string' ? context.content : '';
-        }
-        if (key.startsWith('>')) {
-            return '';
-        }
-        return getNestedValue(context, key);
+function isTrustedKey(key) {
+    return TRUSTED_ROOTS.includes(String(key.split('.')[0]));
+}
+function readToken(rawTriple, rawDouble) {
+    const raw = typeof rawTriple === 'string';
+    return { raw, key: String(raw ? rawTriple : rawDouble).trim() };
+}
+export function expandPartials(source, partials, depth = 0) {
+    if (depth >= MAX_TEMPLATE_DEPTH)
+        return source;
+    let found = false;
+    const expanded = source.replace(PARTIAL_TOKEN, (_match, partialName) => {
+        found = true;
+        const partial = partials[String(partialName).trim()];
+        return typeof partial === 'string' ? partial : '';
     });
+    return found ? expandPartials(expanded, partials, depth + 1) : expanded;
 }
-export function renderTemplate(source, context) {
+function expandTrusted(source, context, escape) {
     let rendered = source;
-    for (let i = 0; i < 5; i += 1) {
-        const next = applyTemplate(rendered, context);
-        if (next === rendered)
+    for (let i = 0; i < MAX_TEMPLATE_DEPTH; i += 1) {
+        let found = false;
+        const next = rendered.replace(TEMPLATE_TOKEN, (match, rawTriple, rawDouble) => {
+            const { raw, key } = readToken(rawTriple, rawDouble);
+            if (!isTrustedKey(key))
+                return match;
+            found = true;
+            const value = getNestedValue(context, key);
+            return raw || !escape ? value : escapeHtml(value);
+        });
+        if (!found || next === rendered)
             break;
         rendered = next;
     }
     return rendered;
 }
-export function renderPartial(name, partials, context) {
-    const partial = partials[name];
-    return partial ? renderTemplate(partial, context) : '';
+/**
+ * A single substitution pass — the replacement text is never rescanned, so a
+ * caller-supplied value can never be reinterpreted as a template.
+ */
+export function substitute(source, context, escape) {
+    return source.replace(TEMPLATE_TOKEN, (_match, rawTriple, rawDouble) => {
+        const { raw, key } = readToken(rawTriple, rawDouble);
+        if (key === 'content') {
+            return typeof context.content === 'string' ? context.content : '';
+        }
+        if (key.startsWith('>')) {
+            return '';
+        }
+        const value = getNestedValue(context, key);
+        return raw || !escape ? value : escapeHtml(value);
+    });
+}
+export function renderTemplate(source, context, partials, escape) {
+    const composed = expandTrusted(expandPartials(source, partials), context, escape);
+    return substitute(composed, context, escape);
 }
 //# sourceMappingURL=render-email-template.utils.js.map

package/dist/src/functions/render-email-template.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-email-template.utils.js","sourceRoot":"","sources":["../../../src/functions/render-email-template.utils.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,OAAO,GAAY,MAAM,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;QAC/D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACjB,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,OAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QACnE,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,OAAgC;IAEhC,IAAI,QAAQ,GAAG,MAAM,CAAA;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC7C,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAK;QAC5B,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,QAAgC,EAChC,OAAgC;IAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACxD,CAAC"}
+{"version":3,"file":"render-email-template.utils.js","sourceRoot":"","sources":["../../../src/functions/render-email-template.utils.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAA2B;IAC3C,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAA;AAED;;;GAGG;AACH,MAAM,cAAc,GAAG,qDAAqD,CAAA;AAE5E,MAAM,aAAa,GAAG,uCAAuC,CAAA;AAE7D,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAE5B;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AAEpC,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,OAAO,GAAY,MAAM,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;QAC/D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACjB,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,SAAkB,EAAE,SAAkB;IACvD,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAA;IACzC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,QAAgC,EAChC,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,IAAI,kBAAkB;QAAE,OAAO,MAAM,CAAA;IAC9C,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACrE,KAAK,GAAG,IAAI,CAAA;QACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACpD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IACnD,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACzE,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,OAAgC,EAChC,MAAe;IAEf,IAAI,QAAQ,GAAG,MAAM,CAAA;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAC3B,cAAc,EACd,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YACpC,KAAK,GAAG,IAAI,CAAA;YACZ,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YAC1C,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACnD,CAAC,CACF,CAAA;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAK;QACtC,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,OAAgC,EAChC,MAAe;IAEf,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QACnE,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAC1C,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,OAAgC,EAChC,QAAgC,EAChC,MAAe;IAEf,MAAM,QAAQ,GAAG,aAAa,CAC5B,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAChC,OAAO,EACP,MAAM,CACP,CAAA;IACD,OAAO,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAC9C,CAAC"}

package/dist/src/functions/render-email-template.utils.test.js

@@ -1,6 +1,6 @@
 import { describe, test } from 'node:test';
 import assert from 'node:assert/strict';
-import { getNestedValue, applyTemplate, renderTemplate, renderPartial, } from './render-email-template.utils.js';
+import { escapeHtml, expandPartials, getNestedValue, renderTemplate, substitute, } from './render-email-template.utils.js';
 describe('getNestedValue', () => {
     test('returns top-level string value', () => {
         assert.equal(getNestedValue({ name: 'Alice' }, 'name'), 'Alice');
@@ -21,45 +21,78 @@ describe('getNestedValue', () => {
         assert.equal(getNestedValue({ count: 42 }, 'count'), '42');
     });
 });
-describe('applyTemplate', () => {
+describe('escapeHtml', () => {
+    test('escapes the five html-significant characters', () => {
+        assert.equal(escapeHtml(`<a href="x" title='y'>&</a>`), '&lt;a href=&quot;x&quot; title=&#39;y&#39;&gt;&amp;&lt;/a&gt;');
+    });
+});
+describe('substitute', () => {
     test('replaces simple placeholder', () => {
-        assert.equal(applyTemplate('Hello {{ name }}!', { name: 'Bob' }), 'Hello Bob!');
+        assert.equal(substitute('Hello {{ name }}!', { name: 'Bob' }, false), 'Hello Bob!');
+    });
+    test('escapes the value when rendering html', () => {
+        assert.equal(substitute('<p>{{ name }}</p>', { name: '<b>Bob</b>' }, true), '<p>&lt;b&gt;Bob&lt;/b&gt;</p>');
+    });
+    test('leaves the value raw when rendering plain text', () => {
+        assert.equal(substitute('{{ name }}', { name: 'Ada & Bob' }, false), 'Ada & Bob');
     });
-    test('replaces {{content}} with context.content string', () => {
-        assert.equal(applyTemplate('Body: {{ content }}', { content: '<p>Hi</p>' }), 'Body: <p>Hi</p>');
+    test('renders the triple-brace form raw even in html', () => {
+        assert.equal(substitute('<p>{{{ name }}}</p>', { name: '<b>Bob</b>' }, true), '<p><b>Bob</b></p>');
+    });
+    test('replaces {{content}} with context.content string, unescaped', () => {
+        assert.equal(substitute('Body: {{ content }}', { content: '<p>Hi</p>' }, true), 'Body: <p>Hi</p>');
     });
     test('replaces {{content}} with empty string when not a string', () => {
-        assert.equal(applyTemplate('{{ content }}', { content: 123 }), '');
+        assert.equal(substitute('{{ content }}', { content: 123 }, true), '');
     });
     test('strips partial tags (> prefix)', () => {
-        assert.equal(applyTemplate('{{ > header }}', {}), '');
+        assert.equal(substitute('{{ > header }}', {}, true), '');
     });
     test('returns empty string for missing placeholder', () => {
-        assert.equal(applyTemplate('{{ missing }}', {}), '');
+        assert.equal(substitute('{{ missing }}', {}, true), '');
     });
     test('resolves dot-path placeholders', () => {
-        assert.equal(applyTemplate('{{ user.name }}', { user: { name: 'Carol' } }), 'Carol');
+        assert.equal(substitute('{{ user.name }}', { user: { name: 'Carol' } }, true), 'Carol');
+    });
+    test('does not rescan the substituted value', () => {
+        assert.equal(substitute('{{ a }}', { a: '{{ b }}', b: 'leaked' }, false), '{{ b }}');
     });
 });
-describe('renderTemplate', () => {
-    test('resolves single pass', () => {
-        assert.equal(renderTemplate('Hi {{ name }}', { name: 'Dave' }), 'Hi Dave');
+describe('expandPartials', () => {
+    test('inlines a known partial', () => {
+        assert.equal(expandPartials('{{> header }}', { header: '<h1>{{ title }}</h1>' }), '<h1>{{ title }}</h1>');
     });
-    test('resolves transitive placeholders up to 5 passes', () => {
-        const ctx = { greeting: 'Hi {{ name }}', name: 'Eve' };
-        assert.equal(renderTemplate('{{ greeting }}', ctx), 'Hi Eve');
+    test('inlines nested partials', () => {
+        assert.equal(expandPartials('{{> a }}', { a: 'A{{> b }}', b: 'B' }), 'AB');
     });
-    test('stops early when no more changes', () => {
-        assert.equal(renderTemplate('static', {}), 'static');
+    test('drops an unknown partial', () => {
+        assert.equal(expandPartials('x{{> missing }}y', {}), 'xy');
     });
 });
-describe('renderPartial', () => {
-    test('renders a known partial with context', () => {
-        const partials = { header: '<h1>{{ title }}</h1>' };
-        assert.equal(renderPartial('header', partials, { title: 'Welcome' }), '<h1>Welcome</h1>');
+describe('renderTemplate', () => {
+    test('resolves a caller variable in one pass', () => {
+        assert.equal(renderTemplate('Hi {{ name }}', { name: 'Dave' }, {}, false), 'Hi Dave');
+    });
+    test('expands a locale string that itself references a caller variable', () => {
+        const ctx = { t: { greeting: 'Hi {{ name }}' }, name: 'Eve' };
+        assert.equal(renderTemplate('{{ t.greeting }}', ctx, {}, false), 'Hi Eve');
+    });
+    test('never expands a caller value as a template', () => {
+        const ctx = { t: { note: 'secret' }, name: '{{ t.note }}' };
+        assert.equal(renderTemplate('{{ name }}', ctx, {}, false), '{{ t.note }}');
+    });
+    test('escapes a theme value landing in an attribute', () => {
+        const ctx = { theme: { fonts: { body: '"Segoe UI", sans-serif' } } };
+        assert.equal(renderTemplate('<p style="font-family:{{theme.fonts.body}};">', ctx, {}, true), '<p style="font-family:&quot;Segoe UI&quot;, sans-serif;">');
     });
-    test('returns empty string for unknown partial', () => {
-        assert.equal(renderPartial('missing', {}, {}), '');
+    test('renders partials before substitution', () => {
+        assert.equal(renderTemplate('{{> header }}', { title: 'Welcome' }, { header: '<h1>{{ title }}</h1>' }, true), '<h1>Welcome</h1>');
+    });
+    test('a caller value cannot forge a partial include', () => {
+        assert.equal(renderTemplate('{{ name }}', { name: '{{> header }}' }, { header: 'LEAKED' }, false), '{{> header }}');
+    });
+    test('stops early when no more changes', () => {
+        assert.equal(renderTemplate('static', {}, {}, true), 'static');
     });
 });
 //# sourceMappingURL=render-email-template.utils.test.js.map

package/dist/src/functions/render-email-template.utils.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-email-template.utils.test.js","sourceRoot":"","sources":["../../../src/functions/render-email-template.utils.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,kCAAkC,CAAA;AAEzC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACnD,YAAY,CACb,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAC9D,iBAAiB,CAClB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAC7D,OAAO,CACR,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC3D,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAA;QACnD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EACvD,kBAAkB,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"render-email-template.utils.test.js","sourceRoot":"","sources":["../../../src/functions/render-email-template.utils.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,EACd,cAAc,EACd,UAAU,GACX,MAAM,kCAAkC,CAAA;AAEzC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,6BAA6B,CAAC,EACzC,+DAA+D,CAChE,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,EACvD,YAAY,CACb,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,EAC7D,+BAA+B,CAChC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,EACtD,WAAW,CACZ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,EAC/D,mBAAmB,CACpB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,EACjE,iBAAiB,CAClB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAChE,OAAO,CACR,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,EAC3D,SAAS,CACV,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,KAAK,CACV,cAAc,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,EACnE,sBAAsB,CACvB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CACV,cAAc,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAC5D,SAAS,CACV,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC5E,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACtD,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;QAC3D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAAA;QACpE,MAAM,CAAC,KAAK,CACV,cAAc,CACZ,+CAA+C,EAC/C,GAAG,EACH,EAAE,EACF,IAAI,CACL,EACD,2DAA2D,CAC5D,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,KAAK,CACV,cAAc,CACZ,eAAe,EACf,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAClC,IAAI,CACL,EACD,kBAAkB,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,KAAK,CACV,cAAc,CACZ,YAAY,EACZ,EAAE,IAAI,EAAE,eAAe,EAAE,EACzB,EAAE,MAAM,EAAE,QAAQ,EAAE,EACpB,KAAK,CACN,EACD,eAAe,CAChB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/functions/start-virtual-user-run.function.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Turns a persona loose now, rather than waiting for its schedule.
+ *
+ * Dispatches the project's own scaffolded `runVirtualUser` rather than starting
+ * a run itself: the persona lookup, the acted-upon check and the production
+ * guard live there, and a second copy of them in the console would eventually
+ * disagree with the first. The cost is that this needs `scaffold.virtualUser`
+ * on, while reading runs does not — so the absence is reported as the missing
+ * scaffold it is, not as a broken button.
+ *
+ * SECURITY: its own scope, separate from reading. A run acts as a real user
+ * against the real API, and an adversarial one is trying to break things.
+ */
+export declare const startVirtualUserRun: import("#pikku/addon/function").PikkuFunctionConfig<{
+    persona: string;
+    disposition?: string;
+    goals?: string[];
+}, {
+    runId: string;
+}, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
+    persona: string;
+    disposition?: string;
+    goals?: string[];
+}, {
+    runId: string;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
+    persona: string;
+    disposition?: string;
+    goals?: string[];
+}, {
+    runId: string;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=start-virtual-user-run.function.d.ts.map

package/dist/src/functions/start-virtual-user-run.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-virtual-user-run.function.d.ts","sourceRoot":"","sources":["../../../src/functions/start-virtual-user-run.function.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB;aACnB,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;WAChD,MAAM;;aADJ,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;WAChD,MAAM;;aADJ,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;WAChD,MAAM;oGAmBf,CAAA"}

package/dist/src/functions/start-virtual-user-run.function.js

@@ -0,0 +1,31 @@
+import { pikkuFunc } from '#pikku/addon/function';
+/**
+ * Turns a persona loose now, rather than waiting for its schedule.
+ *
+ * Dispatches the project's own scaffolded `runVirtualUser` rather than starting
+ * a run itself: the persona lookup, the acted-upon check and the production
+ * guard live there, and a second copy of them in the console would eventually
+ * disagree with the first. The cost is that this needs `scaffold.virtualUser`
+ * on, while reading runs does not — so the absence is reported as the missing
+ * scaffold it is, not as a broken button.
+ *
+ * SECURITY: its own scope, separate from reading. A run acts as a real user
+ * against the real API, and an adversarial one is trying to break things.
+ */
+export const startVirtualUserRun = pikkuFunc({
+    title: 'Start a Virtual User Run',
+    description: 'Runs a declared persona against this application now. Returns a run id; the result arrives in the run list.',
+    expose: true,
+    scopes: ['pikku:console:virtualUsers:run'],
+    func: async ({ metaService }, input, { rpc }) => {
+        const rpcs = await metaService?.getRpcMeta();
+        if (!rpcs?.runVirtualUser) {
+            throw new Error('This application has no runVirtualUser function — turn on `scaffold.virtualUser` in pikku.config.json and run `pikku all` to generate it.');
+        }
+        // `exposed` rather than `invoke`: the name belongs to the host application,
+        // not to this addon, so there is no typed map for it here — and going in
+        // through the exposed door is what the console is doing anyway.
+        return (await rpc.exposed('runVirtualUser', input));
+    },
+});
+//# sourceMappingURL=start-virtual-user-run.function.js.map

package/dist/src/functions/start-virtual-user-run.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-virtual-user-run.function.js","sourceRoot":"","sources":["../../../src/functions/start-virtual-user-run.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAG1C;IACA,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,6GAA6G;IAC/G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,gCAAgC,CAAC;IAC1C,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,UAAU,EAAE,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAA;QACH,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,CAAC,MAAM,GAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAsB,CAAA;IAC3E,CAAC;CACF,CAAC,CAAA"}

package/dist/src/scopes.js

@@ -96,6 +96,17 @@ defineScope({
                             },
                         },
                     },
+                    virtualUsers: {
+                        description: 'Virtual user runs and their transcripts',
+                        scopes: {
+                            read: {
+                                description: 'Read what the virtual users found and every turn they took',
+                            },
+                            run: {
+                                description: 'Turn a persona loose on this application',
+                            },
+                        },
+                    },
                     db: {
                         description: 'The database schema',
                         scopes: {

package/dist/src/scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD;;;;;;;;;;GAUG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,WAAW,EAAE,2BAA2B;wBACxC,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,iDAAiD;6BAC/D;4BACD,KAAK,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;yBAC1D;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;yBAC5D;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,oEAAoE;6BACvE;4BACD,OAAO,EAAE;gCACP,WAAW,EACT,6EAA6E;6BAChF;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,WAAW,EAAE,+CAA+C;wBAC5D,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,kDAAkD;6BAChE;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,qCAAqC;wBAClD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,wEAAwE;6BAC3E;yBACF;qBACF;oBACD,QAAQ,EAAE;wBACR,WAAW,EAAE,oBAAoB;wBACjC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;4BACrD,GAAG,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC/C;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,eAAe;wBAC5B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;4BAC3D,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAChD;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,sCAAsC;wBACnD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,uEAAuE;6BAC1E;4BACD,MAAM,EAAE;gCACN,WAAW,EAAE,0CAA0C;6BACxD;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;4BAC7D,MAAM,EAAE;gCACN,WAAW,EAAE,+CAA+C;6BAC7D;yBACF;qBACF;oBACD,EAAE,EAAE;wBACF,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;yBACjE;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;yBAClD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,iBAAiB;wBAC9B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;4BAClD,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAC/C;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,KAAK,EAAE;gCACL,WAAW,EACT,oEAAoE;6BACvE;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD;;;;;;;;;;GAUG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,WAAW,EAAE,2BAA2B;wBACxC,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,iDAAiD;6BAC/D;4BACD,KAAK,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;yBAC1D;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;yBAC5D;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,oEAAoE;6BACvE;4BACD,OAAO,EAAE;gCACP,WAAW,EACT,6EAA6E;6BAChF;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,WAAW,EAAE,+CAA+C;wBAC5D,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,kDAAkD;6BAChE;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,qCAAqC;wBAClD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,wEAAwE;6BAC3E;yBACF;qBACF;oBACD,QAAQ,EAAE;wBACR,WAAW,EAAE,oBAAoB;wBACjC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;4BACrD,GAAG,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC/C;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,eAAe;wBAC5B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;4BAC3D,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAChD;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,sCAAsC;wBACnD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,uEAAuE;6BAC1E;4BACD,MAAM,EAAE;gCACN,WAAW,EAAE,0CAA0C;6BACxD;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;4BAC7D,MAAM,EAAE;gCACN,WAAW,EAAE,+CAA+C;6BAC7D;yBACF;qBACF;oBACD,YAAY,EAAE;wBACZ,WAAW,EAAE,yCAAyC;wBACtD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,4DAA4D;6BAC/D;4BACD,GAAG,EAAE;gCACH,WAAW,EAAE,0CAA0C;6BACxD;yBACF;qBACF;oBACD,EAAE,EAAE;wBACF,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;yBACjE;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;yBAClD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,iBAAiB;wBAC9B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;4BAClD,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAC/C;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,KAAK,EAAE;gCACL,WAAW,EACT,oEAAoE;6BACvE;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/addon-console",
-  "version": "0.12.43",
+  "version": "0.12.45",
   "description": "Console addon for Pikku — functions powering the Pikku Console UI",
   "type": "module",
   "imports": {
@@ -37,7 +37,7 @@
   },
   "peerDependencies": {
     "@pikku/better-auth": "^0.12.26",
-    "@pikku/core": "^0.12.85"
+    "@pikku/core": "^0.12.90"
   },
   "peerDependenciesMeta": {
     "@pikku/better-auth": {
@@ -46,8 +46,8 @@
   },
   "devDependencies": {
     "@pikku/better-auth": "^0.12.26",
-    "@pikku/cli": "^0.12.106",
-    "@pikku/core": "^0.12.85",
+    "@pikku/cli": "^0.12.112",
+    "@pikku/core": "^0.12.90",
     "oauth2-mock-server": "^9.1.0",
     "typescript": "^6.0.3"
   },