@pikku/addon-console 0.12.44 → 0.12.45

package/dist/src/functions/delete-agent-thread.function.js

@@ -1,9 +1,11 @@
 import { pikkuFunc } from '#pikku/addon/function';
+import { isThreadOwner } from './is-thread-owner.permission.js';
 export const deleteAgentThread = pikkuFunc({
     title: 'Delete Agent Thread',
-    description: 'Deletes an AI agent thread and all its associated messages and runs via cascade.',
+    description: 'Deletes an AI agent thread and all its associated messages and runs via cascade. A caller without the admin scope may only delete a thread its own session owns.',
     expose: true,
     scopes: ['pikku:console:agents:manage'],
+    permissions: { owner: isThreadOwner },
     func: async ({ agentRunService }, input) => {
         const deleted = await agentRunService.deleteThread(input.threadId);
         return { deleted };

package/dist/src/functions/delete-agent-thread.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete-agent-thread.function.js","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,kFAAkF;IACpF,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAClE,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"delete-agent-thread.function.js","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAGxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,kKAAkK;IACpK,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAClE,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/delete-agent-thread.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-agent-thread.function.test.d.ts.map

package/dist/src/functions/delete-agent-thread.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-agent-thread.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/delete-agent-thread.function.test.js

@@ -0,0 +1,8 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { deleteAgentThread } from './delete-agent-thread.function.js';
+import { isThreadOwner } from './is-thread-owner.permission.js';
+test('deleting a thread is gated on thread ownership', () => {
+    assert.deepEqual(deleteAgentThread.permissions, { owner: isThreadOwner });
+});
+//# sourceMappingURL=delete-agent-thread.function.test.js.map

package/dist/src/functions/delete-agent-thread.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-agent-thread.function.test.js","sourceRoot":"","sources":["../../../src/functions/delete-agent-thread.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-messages.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;2GAShE,CAAA"}
+{"version":3,"file":"get-agent-thread-messages.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB;cAAyB,MAAM;;cAAN,MAAM;;cAAN,MAAM;2GAUhE,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.js

@@ -1,9 +1,11 @@
 import { pikkuFunc } from '#pikku/addon/function';
+import { isThreadOwner } from './is-thread-owner.permission.js';
 export const getAgentThreadMessages = pikkuFunc({
     title: 'Get Agent Thread Messages',
-    description: 'Returns all messages for a given AI agent thread, ordered by creation time.',
+    description: 'Returns all messages for a given AI agent thread, ordered by creation time. A caller without the admin scope may only read a thread its own session owns.',
     expose: true,
     scopes: ['pikku:console:agents:read'],
+    permissions: { owner: isThreadOwner },
     func: async ({ agentRunService }, input) => {
         return await agentRunService.getThreadMessages(input.threadId);
     },

package/dist/src/functions/get-agent-thread-messages.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-agent-thread-messages.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAA8B;IAC3E,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,6EAA6E;IAC/E,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"get-agent-thread-messages.function.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAA8B;IAC3E,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,2JAA2J;IAC7J,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,2BAA2B,CAAC;IACrC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;IACrC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE;QACzC,OAAO,MAAM,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-agent-thread-messages.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-agent-thread-messages.function.test.d.ts.map

package/dist/src/functions/get-agent-thread-messages.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-messages.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/get-agent-thread-messages.function.test.js

@@ -0,0 +1,8 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { getAgentThreadMessages } from './get-agent-thread-messages.function.js';
+import { isThreadOwner } from './is-thread-owner.permission.js';
+test('thread messages are gated on thread ownership', () => {
+    assert.deepEqual(getAgentThreadMessages.permissions, { owner: isThreadOwner });
+});
+//# sourceMappingURL=get-agent-thread-messages.function.test.js.map

package/dist/src/functions/get-agent-thread-messages.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-messages.function.test.js","sourceRoot":"","sources":["../../../src/functions/get-agent-thread-messages.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;AAChF,CAAC,CAAC,CAAA"}

package/dist/src/functions/get-virtual-user-run-steps.function.d.ts

@@ -0,0 +1,14 @@
+export declare const getVirtualUserRunSteps: import("#pikku/addon/function").PikkuFunctionConfig<{
+    runId: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
+    runId: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
+    runId: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=get-virtual-user-run-steps.function.d.ts.map

package/dist/src/functions/get-virtual-user-run-steps.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-run-steps.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-run-steps.function.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,sBAAsB;WACxB,MAAM;YAAU,MAAM;aAAW,MAAM;;WAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;;WAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;2GAoBhD,CAAA"}

package/dist/src/functions/get-virtual-user-run-steps.function.js

@@ -0,0 +1,31 @@
+import { pikkuFunc } from '#pikku/addon/function';
+/**
+ * One run's turns, in the order they happened.
+ *
+ * Its own call rather than a field on the run: a run at a 500-step budget
+ * carries more transcript than every other column together, so the list would
+ * pay for it on every row.
+ *
+ * SECURITY: the transcript is strictly more sensitive than the summary it
+ * belongs to — it carries the live ids and payloads the run actually sent.
+ */
+const MAX_STEPS = 500;
+export const getVirtualUserRunSteps = pikkuFunc({
+    title: 'Get Virtual User Run Steps',
+    description: 'Returns every turn one virtual user run took: what it called, what came back, and what that cost.',
+    expose: true,
+    scopes: ['pikku:console:virtualUsers:read'],
+    func: async ({ virtualUserRunStore }, input) => {
+        if (!virtualUserRunStore) {
+            return [];
+        }
+        return await virtualUserRunStore.steps(input.runId, {
+            // A run's whole transcript at the largest budget pikku allows, and no
+            // more: the input is a plain type, so the ceiling cannot come from a
+            // schema the way the scaffolded read's does.
+            limit: Math.min(input?.limit ?? MAX_STEPS, MAX_STEPS),
+            offset: input?.offset,
+        });
+    },
+});
+//# sourceMappingURL=get-virtual-user-run-steps.function.js.map

package/dist/src/functions/get-virtual-user-run-steps.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-run-steps.function.js","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-run-steps.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD;;;;;;;;;GASG;AACH,MAAM,SAAS,GAAG,GAAG,CAAA;AAErB,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAG7C;IACA,KAAK,EAAE,4BAA4B;IACnC,WAAW,EACT,mGAAmG;IACrG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,iCAAiC,CAAC;IAC3C,IAAI,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAClD,sEAAsE;YACtE,qEAAqE;YACrE,6CAA6C;YAC7C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,CAAC;YACrD,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/get-virtual-user-runs.function.d.ts

@@ -0,0 +1,14 @@
+export declare const getVirtualUserRuns: import("#pikku/addon/function").PikkuFunctionConfig<{
+    persona?: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
+    persona?: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
+    persona?: string;
+    limit?: number;
+    offset?: number;
+}, any[], "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=get-virtual-user-runs.function.d.ts.map

package/dist/src/functions/get-virtual-user-runs.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-runs.function.d.ts","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-runs.function.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,kBAAkB;cACjB,MAAM;YAAU,MAAM;aAAW,MAAM;;cAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;;cAAvC,MAAM;YAAU,MAAM;aAAW,MAAM;2GA0BnD,CAAA"}

package/dist/src/functions/get-virtual-user-runs.function.js

@@ -0,0 +1,39 @@
+import { pikkuFunc } from '#pikku/addon/function';
+/**
+ * What the virtual users have been doing, newest first.
+ *
+ * Read off the host's own `virtualUserRunStore` rather than through the
+ * scaffolded RPCs, so the console shows a project's runs whether or not that
+ * project turned `scaffold.virtualUser` on — wiring the store is the only thing
+ * a run needs, and it is what a run already needs.
+ *
+ * SECURITY: an `adversarial` run's findings are working exploits carrying live
+ * ids. This is a privileged read, which is why it has a scope of its own rather
+ * than riding on the wirings one.
+ */
+const MAX_RUNS = 100;
+export const getVirtualUserRuns = pikkuFunc({
+    title: 'Get Virtual User Runs',
+    description: 'Returns recorded virtual user runs, newest first. Accepts optional persona, limit and offset.',
+    expose: true,
+    scopes: ['pikku:console:virtualUsers:read'],
+    func: async ({ virtualUserRunStore }, input) => {
+        if (!virtualUserRunStore) {
+            return [];
+        }
+        const runs = await virtualUserRunStore.list({
+            persona: input?.persona,
+            // The scaffolded read bounds this through zod; nothing types a console
+            // function's input at runtime, so the ceiling is applied here instead of
+            // letting a caller ask the store for every run an app has ever recorded.
+            limit: Math.min(input?.limit ?? MAX_RUNS, MAX_RUNS),
+            offset: input?.offset,
+        });
+        return runs.map((run) => ({
+            ...run,
+            createdAt: run.createdAt.toISOString(),
+            finishedAt: run.finishedAt ? run.finishedAt.toISOString() : null,
+        }));
+    },
+});
+//# sourceMappingURL=get-virtual-user-runs.function.js.map

package/dist/src/functions/get-virtual-user-runs.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-virtual-user-runs.function.js","sourceRoot":"","sources":["../../../src/functions/get-virtual-user-runs.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,QAAQ,GAAG,GAAG,CAAA;AAEpB,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAGzC;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,+FAA+F;IACjG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,iCAAiC,CAAC;IAC3C,IAAI,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,QAAQ,EAAE,QAAQ,CAAC;YACnD,MAAM,EAAE,KAAK,EAAE,MAAM;SACtB,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,GAAG,GAAG;YACN,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SACjE,CAAC,CAAC,CAAA;IACL,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/is-thread-owner.permission.d.ts

@@ -0,0 +1,13 @@
+/**
+ * A single-thread read is keyed by a caller-supplied `threadId`, so ownership
+ * cannot come from the request — it is derived from the session and checked
+ * against the stored thread's resourceId. The sibling list endpoints filter
+ * instead; a lookup of one thread has nothing to filter, so it is refused.
+ *
+ * A missing thread is refused rather than 404'd so it is indistinguishable from
+ * one owned by someone else — no existence oracle.
+ */
+export declare const isThreadOwner: import("#pikku/addon/auth").PikkuPermission<{
+    threadId: string;
+}, import("../../.pikku/addon/function/pikku-function-types.gen.js").WiredServices>;
+//# sourceMappingURL=is-thread-owner.permission.d.ts.map

package/dist/src/functions/is-thread-owner.permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.d.ts","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.ts"],"names":[],"mappings":"AAMA;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa;cAA+B,MAAM;mFAS9D,CAAA"}

package/dist/src/functions/is-thread-owner.permission.js

@@ -0,0 +1,23 @@
+import { hasScopes } from '@pikku/core/scope';
+import { canAccessThread } from '@pikku/core/agent';
+import { pikkuPermission } from '#pikku/addon/auth';
+const ADMIN_SCOPE_ROOT = 'admin';
+/**
+ * A single-thread read is keyed by a caller-supplied `threadId`, so ownership
+ * cannot come from the request — it is derived from the session and checked
+ * against the stored thread's resourceId. The sibling list endpoints filter
+ * instead; a lookup of one thread has nothing to filter, so it is refused.
+ *
+ * A missing thread is refused rather than 404'd so it is indistinguishable from
+ * one owned by someone else — no existence oracle.
+ */
+export const isThreadOwner = pikkuPermission(async ({ agentRunService }, { threadId }, { session }) => {
+    if (hasScopes([ADMIN_SCOPE_ROOT], session?.scopes)) {
+        return true;
+    }
+    const thread = await agentRunService.getThread(threadId);
+    if (!thread)
+        return false;
+    return canAccessThread(thread.resourceId, session);
+});
+//# sourceMappingURL=is-thread-owner.permission.js.map

package/dist/src/functions/is-thread-owner.permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.js","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAC1C,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACvD,IAAI,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;AACpD,CAAC,CACF,CAAA"}

package/dist/src/functions/is-thread-owner.permission.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=is-thread-owner.permission.test.d.ts.map

package/dist/src/functions/is-thread-owner.permission.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.test.d.ts","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/is-thread-owner.permission.test.js

@@ -0,0 +1,25 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { isThreadOwner } from './is-thread-owner.permission.js';
+const services = {
+    agentRunService: {
+        getThread: async (threadId) => threadId === 'thread-1' ? { threadId, resourceId: 'alice' } : null,
+    },
+};
+const check = (session, threadId = 'thread-1') => isThreadOwner(services, { threadId }, { session });
+test('the owning session is allowed', async () => {
+    assert.equal(await check({ userId: 'alice', scopes: [] }), true);
+});
+test("someone else's thread is refused", async () => {
+    assert.equal(await check({ userId: 'carol', scopes: [] }), false);
+});
+test('an admin reaches any thread', async () => {
+    assert.equal(await check({ userId: 'root', scopes: ['admin'] }), true);
+});
+test('a missing thread reads the same as one owned by someone else', async () => {
+    assert.equal(await check({ userId: 'alice', scopes: [] }, 'nope'), false);
+});
+test('a session with no principals is refused', async () => {
+    assert.equal(await check({ scopes: [] }), false);
+});
+//# sourceMappingURL=is-thread-owner.permission.test.js.map

package/dist/src/functions/is-thread-owner.permission.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-thread-owner.permission.test.js","sourceRoot":"","sources":["../../../src/functions/is-thread-owner.permission.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,MAAM,QAAQ,GAAG;IACf,eAAe,EAAE;QACf,SAAS,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CACpC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;KACrE;CACO,CAAA;AAEV,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,QAAQ,GAAG,UAAU,EAAE,EAAE,CACxD,aAAa,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAW,CAAC,CAAA;AAE7D,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;AAClE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;IAClD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;AACxE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA"}

package/dist/src/functions/start-virtual-user-run.function.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Turns a persona loose now, rather than waiting for its schedule.
+ *
+ * Dispatches the project's own scaffolded `runVirtualUser` rather than starting
+ * a run itself: the persona lookup, the acted-upon check and the production
+ * guard live there, and a second copy of them in the console would eventually
+ * disagree with the first. The cost is that this needs `scaffold.virtualUser`
+ * on, while reading runs does not — so the absence is reported as the missing
+ * scaffold it is, not as a broken button.
+ *
+ * SECURITY: its own scope, separate from reading. A run acts as a real user
+ * against the real API, and an adversarial one is trying to break things.
+ */
+export declare const startVirtualUserRun: import("#pikku/addon/function").PikkuFunctionConfig<{
+    persona: string;
+    disposition?: string;
+    goals?: string[];
+}, {
+    runId: string;
+}, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
+    persona: string;
+    disposition?: string;
+    goals?: string[];
+}, {
+    runId: string;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
+    persona: string;
+    disposition?: string;
+    goals?: string[];
+}, {
+    runId: string;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
+//# sourceMappingURL=start-virtual-user-run.function.d.ts.map

package/dist/src/functions/start-virtual-user-run.function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-virtual-user-run.function.d.ts","sourceRoot":"","sources":["../../../src/functions/start-virtual-user-run.function.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB;aACnB,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;WAChD,MAAM;;aADJ,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;WAChD,MAAM;;aADJ,MAAM;kBAAgB,MAAM;YAAU,MAAM,EAAE;;WAChD,MAAM;oGAmBf,CAAA"}

package/dist/src/functions/start-virtual-user-run.function.js

@@ -0,0 +1,31 @@
+import { pikkuFunc } from '#pikku/addon/function';
+/**
+ * Turns a persona loose now, rather than waiting for its schedule.
+ *
+ * Dispatches the project's own scaffolded `runVirtualUser` rather than starting
+ * a run itself: the persona lookup, the acted-upon check and the production
+ * guard live there, and a second copy of them in the console would eventually
+ * disagree with the first. The cost is that this needs `scaffold.virtualUser`
+ * on, while reading runs does not — so the absence is reported as the missing
+ * scaffold it is, not as a broken button.
+ *
+ * SECURITY: its own scope, separate from reading. A run acts as a real user
+ * against the real API, and an adversarial one is trying to break things.
+ */
+export const startVirtualUserRun = pikkuFunc({
+    title: 'Start a Virtual User Run',
+    description: 'Runs a declared persona against this application now. Returns a run id; the result arrives in the run list.',
+    expose: true,
+    scopes: ['pikku:console:virtualUsers:run'],
+    func: async ({ metaService }, input, { rpc }) => {
+        const rpcs = await metaService?.getRpcMeta();
+        if (!rpcs?.runVirtualUser) {
+            throw new Error('This application has no runVirtualUser function — turn on `scaffold.virtualUser` in pikku.config.json and run `pikku all` to generate it.');
+        }
+        // `exposed` rather than `invoke`: the name belongs to the host application,
+        // not to this addon, so there is no typed map for it here — and going in
+        // through the exposed door is what the console is doing anyway.
+        return (await rpc.exposed('runVirtualUser', input));
+    },
+});
+//# sourceMappingURL=start-virtual-user-run.function.js.map

package/dist/src/functions/start-virtual-user-run.function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-virtual-user-run.function.js","sourceRoot":"","sources":["../../../src/functions/start-virtual-user-run.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAG1C;IACA,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,6GAA6G;IAC/G,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,gCAAgC,CAAC;IAC1C,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,UAAU,EAAE,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAA;QACH,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,CAAC,MAAM,GAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAsB,CAAA;IAC3E,CAAC;CACF,CAAC,CAAA"}

package/dist/src/scopes.js

@@ -96,6 +96,17 @@ defineScope({
                             },
                         },
                     },
+                    virtualUsers: {
+                        description: 'Virtual user runs and their transcripts',
+                        scopes: {
+                            read: {
+                                description: 'Read what the virtual users found and every turn they took',
+                            },
+                            run: {
+                                description: 'Turn a persona loose on this application',
+                            },
+                        },
+                    },
                     db: {
                         description: 'The database schema',
                         scopes: {

package/dist/src/scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD;;;;;;;;;;GAUG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,WAAW,EAAE,2BAA2B;wBACxC,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,iDAAiD;6BAC/D;4BACD,KAAK,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;yBAC1D;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;yBAC5D;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,oEAAoE;6BACvE;4BACD,OAAO,EAAE;gCACP,WAAW,EACT,6EAA6E;6BAChF;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,WAAW,EAAE,+CAA+C;wBAC5D,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,kDAAkD;6BAChE;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,qCAAqC;wBAClD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,wEAAwE;6BAC3E;yBACF;qBACF;oBACD,QAAQ,EAAE;wBACR,WAAW,EAAE,oBAAoB;wBACjC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;4BACrD,GAAG,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC/C;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,eAAe;wBAC5B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;4BAC3D,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAChD;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,sCAAsC;wBACnD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,uEAAuE;6BAC1E;4BACD,MAAM,EAAE;gCACN,WAAW,EAAE,0CAA0C;6BACxD;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;4BAC7D,MAAM,EAAE;gCACN,WAAW,EAAE,+CAA+C;6BAC7D;yBACF;qBACF;oBACD,EAAE,EAAE;wBACF,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;yBACjE;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;yBAClD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,iBAAiB;wBAC9B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;4BAClD,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAC/C;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,KAAK,EAAE;gCACL,WAAW,EACT,oEAAoE;6BACvE;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD;;;;;;;;;;GAUG;AACH,WAAW,CAAC;IACV,KAAK,EAAE;QACL,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,WAAW,EAAE,2BAA2B;wBACxC,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,iDAAiD;6BAC/D;4BACD,KAAK,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;yBAC1D;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;yBAC5D;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,oEAAoE;6BACvE;4BACD,OAAO,EAAE;gCACP,WAAW,EACT,6EAA6E;6BAChF;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,WAAW,EAAE,+CAA+C;wBAC5D,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EAAE,kDAAkD;6BAChE;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,qCAAqC;wBAClD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,wEAAwE;6BAC3E;yBACF;qBACF;oBACD,QAAQ,EAAE;wBACR,WAAW,EAAE,oBAAoB;wBACjC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;4BACrD,GAAG,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC/C;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,eAAe;wBAC5B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;4BAC3D,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAChD;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,sCAAsC;wBACnD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,uEAAuE;6BAC1E;4BACD,MAAM,EAAE;gCACN,WAAW,EAAE,0CAA0C;6BACxD;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;4BAC7D,MAAM,EAAE;gCACN,WAAW,EAAE,+CAA+C;6BAC7D;yBACF;qBACF;oBACD,YAAY,EAAE;wBACZ,WAAW,EAAE,yCAAyC;wBACtD,MAAM,EAAE;4BACN,IAAI,EAAE;gCACJ,WAAW,EACT,4DAA4D;6BAC/D;4BACD,GAAG,EAAE;gCACH,WAAW,EAAE,0CAA0C;6BACxD;yBACF;qBACF;oBACD,EAAE,EAAE;wBACF,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;yBACjE;qBACF;oBACD,SAAS,EAAE;wBACT,WAAW,EAAE,qBAAqB;wBAClC,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;yBAClD;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,iBAAiB;wBAC9B,MAAM,EAAE;4BACN,IAAI,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;4BAClD,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBAC/C;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,gCAAgC;wBAC7C,MAAM,EAAE;4BACN,KAAK,EAAE;gCACL,WAAW,EACT,oEAAoE;6BACvE;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/addon-console",
-  "version": "0.12.44",
+  "version": "0.12.45",
   "description": "Console addon for Pikku — functions powering the Pikku Console UI",
   "type": "module",
   "imports": {
@@ -37,7 +37,7 @@
   },
   "peerDependencies": {
     "@pikku/better-auth": "^0.12.26",
-    "@pikku/core": "^0.12.87"
+    "@pikku/core": "^0.12.90"
   },
   "peerDependenciesMeta": {
     "@pikku/better-auth": {
@@ -46,8 +46,8 @@
   },
   "devDependencies": {
     "@pikku/better-auth": "^0.12.26",
-    "@pikku/cli": "^0.12.108",
-    "@pikku/core": "^0.12.87",
+    "@pikku/cli": "^0.12.112",
+    "@pikku/core": "^0.12.90",
     "oauth2-mock-server": "^9.1.0",
     "typescript": "^6.0.3"
   },