@pikku/addon-console 0.12.49 → 0.12.50

package/dist/.pikku/addon/scenarios/schemas/register.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export declare const empty: null;
 //# sourceMappingURL=register.gen.d.ts.map

package/dist/.pikku/addon/scenarios/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export const empty = null;
 //# sourceMappingURL=register.gen.js.map

package/dist/.pikku/addon/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { addSchema } from '@pikku/core/schema';
 import * as AddonMetaPage from './schemas/AddonMetaPage.schema.json' with { type: 'json' };

package/dist/.pikku/addon/schemas/schemas/KnowledgeBundle.schema.json

@@ -1 +1 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "notes": { "type": "array", "items": { "$ref": "#/definitions/KnowledgeGraphNote" } }, "sections": { "type": "array", "items": { "$ref": "#/definitions/KnowledgeSection" } }, "tagCounts": { "type": "object", "additionalProperties": { "type": "number" }, "description": "Tag → how many notes carry it, for a browsable facet." }, "stats": { "type": "object", "properties": { "notes": { "type": "number" }, "sections": { "type": "number" }, "links": { "type": "number" }, "dangling": { "type": "number" } }, "required": ["notes", "sections", "links", "dangling"], "additionalProperties": false }, "findings": { "type": "array", "items": { "$ref": "#/definitions/KnowledgeFinding" }, "description": "What `pikku knowledge validate` would report, so the console shows the same verdict." }, "ok": { "type": "boolean" }, "plans": { "type": "object", "additionalProperties": { "$ref": "#/definitions/KnowledgeMilestonePlan" }, "description": "Keyed by the milestone note's path, so a note document can find its own plan." } }, "required": ["findings", "notes", "ok", "plans", "sections", "stats", "tagCounts"], "additionalProperties": false, "definitions": { "KnowledgeGraphNote": { "type": "object", "properties": { "path": { "type": "string" }, "section": { "type": "string", "description": "`''` for a note at the root of knowledge/." }, "type": { "type": "string" }, "title": { "type": "string" }, "description": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "resource": { "type": "array", "items": { "type": "string" }, "description": "The `<kind>:<id>` URIs from `resource:`, already split." }, "status": { "type": "string" }, "statusAt": { "type": "string", "description": "When `status` last changed, for a reader asking how long it has been there." }, "entities": { "type": "array", "items": { "type": "string" } }, "reserved": { "type": "string", "enum": ["index", "log"] }, "body": { "type": "string" }, "outbound": { "type": "array", "items": { "type": "string" }, "description": "Notes this one links to, as bundle-relative paths." }, "inbound": { "type": "array", "items": { "type": "string" }, "description": "Notes that link to this one." }, "dangling": { "type": "array", "items": { "type": "string" }, "description": "Link targets that resolve to no note. Legal in OKF — a note not written yet." } }, "required": ["path", "section", "title", "tags", "resource", "entities", "body", "outbound", "inbound", "dangling"], "additionalProperties": false, "description": "Declared rather than inferred, for the reason given on `KnowledgeFinding`: this shape is the body of the `getKnowledge` RPC's output, and a `z.infer<>` is not something a JSON-schema generator can walk.\n\nNote this is necessary but not sufficient for that RPC to ship an output schema — `KnowledgeBundle` reaches this type across a package boundary, and the inspector registers no type whose base is declared in another package." }, "KnowledgeSection": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "count": { "type": "number" } }, "required": ["name", "count"], "additionalProperties": false }, "KnowledgeFinding": { "type": "object", "properties": { "id": { "type": "string" }, "severity": { "type": "string", "enum": ["error", "warn", "info"] }, "message": { "type": "string" }, "path": { "type": "string" }, "fixHint": { "type": "string" } }, "required": ["id", "severity", "message", "path", "fixHint"], "additionalProperties": false, "description": "Declared, not inferred from the schema below.\n\nA finding crosses an RPC boundary as part of the `getKnowledge` payload, and a `z.infer<>` is not a type a JSON-schema generator can walk: zod's inference bottoms out in `this` types, so ts-json-schema-generator fails outright on it. An interface generates. The `satisfies` is what keeps the two from drifting — a field added to one and not the other is a compile error." }, "KnowledgeMilestonePlan": { "type": "object", "properties": { "plan": { "anyOf": [{ "$ref": "#/definitions/WirePlan" }, { "type": "null" }] }, "unavailable": { "type": ["string", "null"], "description": "Why there is no plan, for the reader to be told instead of being shown an empty one. `readPlan` already separates \"nobody wrote one\" from \"one is there and will not parse\", and those want different words in front of a person." }, "checklist": { "type": "array", "items": { "$ref": "#/definitions/PlanChecklistItem" } }, "complete": { "type": "boolean" } }, "required": ["plan", "unavailable", "checklist", "complete"], "additionalProperties": false, "description": "One milestone's technical plan, reconciled against the generated meta.\n\nThe milestone note is the ask — a title and a Gherkin block. The plan beside it is the answer: the tables, functions, roles, screens and scenarios that were promised. The checklist rides along rather than being a second call, because every row is a set-membership test against the same meta read, and a checklist fetched separately could disagree with the plan it is drawn beside." }, "WirePlan": { "type": "object", "properties": { "version": { "type": "number" }, "milestone": { "type": "string" }, "description": { "type": "string" }, "covers": { "type": "array", "items": { "$ref": "#/definitions/PlanCovers" } }, "model": { "$ref": "#/definitions/PlanSlot<PlanModelItem>" }, "functions": { "$ref": "#/definitions/PlanSlot<PlanFunctionItem>" }, "roles": { "$ref": "#/definitions/PlanSlot<PlanRoleItem>" }, "scopes": { "$ref": "#/definitions/PlanSlot<PlanNamedItem>" }, "ui": { "$ref": "#/definitions/PlanSlot<PlanUiItem>" }, "scenarios": { "type": "object", "properties": { "backend": { "$ref": "#/definitions/PlanSlot<PlanScenarioItem>" }, "browser": { "$ref": "#/definitions/PlanSlot<PlanScenarioItem>" }, "permission": { "$ref": "#/definitions/PlanSlot<PlanScenarioItem>" } }, "required": ["backend", "browser", "permission"], "additionalProperties": false } }, "required": ["version", "milestone", "description", "covers", "model", "functions", "roles", "scopes", "ui", "scenarios"], "additionalProperties": false }, "PlanCovers": { "type": "object", "properties": { "note": { "type": "string" }, "hash": { "type": "string" }, "complete": { "type": "boolean" } }, "required": ["note", "hash", "complete"], "additionalProperties": false }, "PlanSlot<PlanModelItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanModelItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanModelItem": { "type": "object", "properties": { "table": { "type": "string" }, "description": { "type": "string" }, "fields": { "type": "array", "items": { "$ref": "#/definitions/PlanModelField" } }, "relationships": { "type": "array", "items": { "$ref": "#/definitions/PlanModelRelationship" } } }, "required": ["table", "description", "fields", "relationships"], "additionalProperties": false }, "PlanModelField": { "type": "object", "properties": { "name": { "type": "string" }, "type": { "type": "string" }, "classification": { "type": "string", "enum": ["public", "internal", "personal", "sensitive"] } }, "required": ["name", "type", "classification"], "additionalProperties": false }, "PlanModelRelationship": { "type": "object", "properties": { "column": { "type": "string" }, "references": { "type": "string" }, "onDelete": { "type": "string", "enum": ["cascade", "restrict", "orphan"] }, "provedBy": { "type": "string" } }, "required": ["column", "references", "onDelete"], "additionalProperties": false }, "PlanSlot<PlanFunctionItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanFunctionItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanFunctionItem": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "pass": { "type": "number" }, "wire": { "anyOf": [{ "type": "object", "properties": { "transport": { "type": "string" }, "route": { "type": "string" } }, "required": ["transport"], "additionalProperties": false }, { "type": "null" }] }, "scopes": { "type": "array", "items": { "type": "string" } }, "permission": { "type": ["string", "null"] } }, "required": ["name", "description", "pass", "scopes", "permission"], "additionalProperties": false }, "PlanSlot<PlanRoleItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanRoleItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanRoleItem": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "app": { "type": "string" } }, "additionalProperties": false, "required": ["description", "name"] }, "PlanSlot<PlanNamedItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanNamedItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanNamedItem": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" } }, "required": ["name", "description"], "additionalProperties": false }, "PlanSlot<PlanUiItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanUiItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanUiItem": { "type": "object", "properties": { "route": { "type": "string" }, "description": { "type": "string" }, "pass": { "type": "number" }, "app": { "type": "string" }, "scenarios": { "type": "array", "items": { "type": "string" } } }, "required": ["route", "description", "pass", "scenarios"], "additionalProperties": false }, "PlanSlot<PlanScenarioItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanScenarioItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanScenarioItem": { "type": "object", "properties": { "feature": { "type": "string" }, "scenario": { "type": "string" }, "fn": { "type": "string" }, "name": { "type": "string" } }, "required": ["feature", "scenario"], "additionalProperties": false }, "PlanChecklistItem": { "type": "object", "properties": { "id": { "type": "string", "description": "Stable across turns so the console can keep row identity as items land." }, "label": { "type": "string", "description": "What the plan called it — the description a reader recognises, not the symbol." }, "kind": { "type": "string", "enum": ["function", "wire", "scope", "scenario"] }, "done": { "type": "boolean" }, "deferred": { "type": "boolean", "description": "Promised by a later pass, so `fabric build-complete` never asks for it.\n\nSet by `planShortfall`, which is the only caller that can see every pass at once — `planProgress` works one pass at a time and leaves it false." } }, "required": ["id", "label", "kind", "done", "deferred"], "additionalProperties": false, "description": "One row of the build checklist the console renders.\n\n`done` is a set-membership test against codegen's meta, never a status anything types. That is the whole reason this replaced the agent's own todo list: a task the agent marks `completed` says only that it claimed to finish, and run 10 is the case against it — refused with four of six tasks unfinished, all four flipped to `completed` nine seconds later with nothing built." } } }
+{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "notes": { "type": "array", "items": { "$ref": "#/definitions/KnowledgeGraphNote" } }, "sections": { "type": "array", "items": { "$ref": "#/definitions/KnowledgeSection" } }, "tagCounts": { "type": "object", "additionalProperties": { "type": "number" }, "description": "Tag → how many notes carry it, for a browsable facet." }, "stats": { "type": "object", "properties": { "notes": { "type": "number" }, "sections": { "type": "number" }, "links": { "type": "number" }, "dangling": { "type": "number" } }, "required": ["notes", "sections", "links", "dangling"], "additionalProperties": false }, "findings": { "type": "array", "items": { "$ref": "#/definitions/KnowledgeFinding" }, "description": "What `pikku knowledge validate` would report, so the console shows the same verdict." }, "ok": { "type": "boolean" }, "plans": { "type": "object", "additionalProperties": { "$ref": "#/definitions/KnowledgeMilestonePlan" }, "description": "Keyed by the milestone note's path, so a note document can find its own plan." } }, "required": ["findings", "notes", "ok", "plans", "sections", "stats", "tagCounts"], "additionalProperties": false, "definitions": { "KnowledgeGraphNote": { "type": "object", "properties": { "path": { "type": "string" }, "section": { "type": "string", "description": "`''` for a note at the root of knowledge/." }, "type": { "type": "string" }, "title": { "type": "string" }, "description": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "resource": { "type": "array", "items": { "type": "string" }, "description": "The `<kind>:<id>` URIs from `resource:`, already split." }, "status": { "type": "string" }, "statusAt": { "type": "string", "description": "When `status` last changed, for a reader asking how long it has been there." }, "entities": { "type": "array", "items": { "type": "string" } }, "reserved": { "type": "string", "enum": ["index", "log"] }, "body": { "type": "string" }, "outbound": { "type": "array", "items": { "type": "string" }, "description": "Notes this one links to, as bundle-relative paths." }, "inbound": { "type": "array", "items": { "type": "string" }, "description": "Notes that link to this one." }, "dangling": { "type": "array", "items": { "type": "string" }, "description": "Link targets that resolve to no note. Legal in OKF — a note not written yet." } }, "required": ["path", "section", "title", "tags", "resource", "entities", "body", "outbound", "inbound", "dangling"], "additionalProperties": false, "description": "Declared rather than inferred, for the reason given on `KnowledgeFinding`: this shape is the body of the `getKnowledge` RPC's output, and a `z.infer<>` is not something a JSON-schema generator can walk.\n\nNote this is necessary but not sufficient for that RPC to ship an output schema — `KnowledgeBundle` reaches this type across a package boundary, and the inspector registers no type whose base is declared in another package." }, "KnowledgeSection": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "count": { "type": "number" } }, "required": ["name", "count"], "additionalProperties": false }, "KnowledgeFinding": { "type": "object", "properties": { "id": { "type": "string" }, "severity": { "type": "string", "enum": ["error", "warn", "info"] }, "message": { "type": "string" }, "path": { "type": "string" }, "fixHint": { "type": "string" } }, "required": ["id", "severity", "message", "path", "fixHint"], "additionalProperties": false, "description": "Declared, not inferred from the schema below.\n\nA finding crosses an RPC boundary as part of the `getKnowledge` payload, and a `z.infer<>` is not a type a JSON-schema generator can walk: zod's inference bottoms out in `this` types, so ts-json-schema-generator fails outright on it. An interface generates. The `satisfies` is what keeps the two from drifting — a field added to one and not the other is a compile error." }, "KnowledgeMilestonePlan": { "type": "object", "properties": { "plan": { "anyOf": [{ "$ref": "#/definitions/WirePlan" }, { "type": "null" }] }, "unavailable": { "type": ["string", "null"], "description": "Why there is no plan, for the reader to be told instead of being shown an empty one. `readPlan` already separates \"nobody wrote one\" from \"one is there and will not parse\", and those want different words in front of a person." }, "checklist": { "type": "array", "items": { "$ref": "#/definitions/PlanChecklistItem" } }, "complete": { "type": "boolean" } }, "required": ["plan", "unavailable", "checklist", "complete"], "additionalProperties": false, "description": "One milestone's technical plan, reconciled against the generated meta.\n\nThe milestone note is the ask — a title and a Gherkin block. The plan beside it is the answer: the tables, functions, roles, screens and scenarios that were promised. The checklist rides along rather than being a second call, because every row is a set-membership test against the same meta read, and a checklist fetched separately could disagree with the plan it is drawn beside." }, "WirePlan": { "type": "object", "properties": { "version": { "type": "number" }, "milestone": { "type": "string" }, "description": { "type": "string" }, "covers": { "type": "array", "items": { "$ref": "#/definitions/PlanCovers" } }, "model": { "$ref": "#/definitions/PlanSlot<PlanModelItem>" }, "functions": { "$ref": "#/definitions/PlanSlot<PlanFunctionItem>" }, "roles": { "$ref": "#/definitions/PlanSlot<PlanRoleItem>" }, "scopes": { "$ref": "#/definitions/PlanSlot<PlanNamedItem>" }, "ui": { "$ref": "#/definitions/PlanSlot<PlanUiItem>" }, "scenarios": { "type": "object", "properties": { "backend": { "$ref": "#/definitions/PlanSlot<PlanScenarioItem>" }, "browser": { "$ref": "#/definitions/PlanSlot<PlanScenarioItem>" }, "permission": { "$ref": "#/definitions/PlanSlot<PlanScenarioItem>" } }, "required": ["backend", "browser", "permission"], "additionalProperties": false } }, "required": ["version", "milestone", "description", "covers", "model", "functions", "roles", "scopes", "ui", "scenarios"], "additionalProperties": false }, "PlanCovers": { "type": "object", "properties": { "note": { "type": "string" }, "hash": { "type": "string" }, "complete": { "type": "boolean" } }, "required": ["note", "hash", "complete"], "additionalProperties": false }, "PlanSlot<PlanModelItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanModelItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanModelItem": { "type": "object", "properties": { "table": { "type": "string" }, "description": { "type": "string" }, "fields": { "type": "array", "items": { "$ref": "#/definitions/PlanModelField" } }, "relationships": { "type": "array", "items": { "$ref": "#/definitions/PlanModelRelationship" } } }, "required": ["table", "description", "fields", "relationships"], "additionalProperties": false }, "PlanModelField": { "type": "object", "properties": { "name": { "type": "string" }, "type": { "type": "string" }, "classification": { "type": "string", "enum": ["public", "internal", "personal", "sensitive"] } }, "required": ["name", "type", "classification"], "additionalProperties": false }, "PlanModelRelationship": { "type": "object", "properties": { "column": { "type": "string" }, "references": { "type": "string" }, "onDelete": { "type": "string", "enum": ["cascade", "restrict", "orphan"] }, "provedBy": { "type": "string" } }, "required": ["column", "references", "onDelete"], "additionalProperties": false }, "PlanSlot<PlanFunctionItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanFunctionItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanFunctionItem": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "pass": { "type": "number" }, "wire": { "anyOf": [{ "type": "object", "properties": { "transport": { "type": "string" }, "route": { "type": "string" } }, "required": ["transport"], "additionalProperties": false }, { "type": "null" }] }, "scopes": { "type": "array", "items": { "type": "string" } }, "permission": { "type": ["string", "null"] } }, "required": ["name", "description", "pass", "scopes", "permission"], "additionalProperties": false }, "PlanSlot<PlanRoleItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanRoleItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanRoleItem": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" }, "app": { "type": "string" } }, "additionalProperties": false, "required": ["description", "name"] }, "PlanSlot<PlanNamedItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanNamedItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanNamedItem": { "type": "object", "properties": { "name": { "type": "string" }, "description": { "type": "string" } }, "required": ["name", "description"], "additionalProperties": false }, "PlanSlot<PlanUiItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanUiItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanUiItem": { "type": "object", "properties": { "route": { "type": "string" }, "description": { "type": "string" }, "pass": { "type": "number" }, "app": { "type": "string" }, "scenarios": { "type": "array", "items": { "type": "string" } } }, "required": ["route", "description", "pass", "scenarios"], "additionalProperties": false }, "PlanSlot<PlanScenarioItem>": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "built" }, "description": { "type": "string" }, "items": { "type": "array", "items": { "$ref": "#/definitions/PlanScenarioItem" } } }, "required": ["kind", "description", "items"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "n/a" }, "description": { "type": "string" } }, "required": ["kind", "description"], "additionalProperties": false }], "description": "The plan as it goes over the wire.\n\nStructurally the same as `Plan` in" }, "PlanScenarioItem": { "type": "object", "properties": { "feature": { "type": "string" }, "scenario": { "type": "string" }, "fn": { "type": "string" }, "name": { "type": "string" } }, "required": ["feature", "scenario"], "additionalProperties": false }, "PlanChecklistItem": { "type": "object", "properties": { "id": { "type": "string", "description": "Stable across turns so the console can keep row identity as items land." }, "label": { "type": "string", "description": "What the plan called it — the description a reader recognises, not the symbol." }, "kind": { "type": "string", "enum": ["function", "wire", "scope", "scenario"] }, "done": { "type": "boolean" }, "deferred": { "type": "boolean", "description": "Promised by a later pass, so the closing gate never asks for it.\n\nSet by `planShortfall`, which is the only caller that can see every pass at once — `planProgress` works one pass at a time and leaves it false." } }, "required": ["id", "label", "kind", "done", "deferred"], "additionalProperties": false, "description": "One row of the build checklist the console renders.\n\n`done` is a set-membership test against codegen's meta, never a status anything types. That is the whole reason this replaced the agent's own todo list: a task the agent marks `completed` says only that it claimed to finish, and run 10 is the case against it — refused with four of six tasks unfinished, all four flipped to `completed` nine seconds later with nothing built." } } }

package/dist/.pikku/addon/scopes/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/scopes` resolves here.

package/dist/.pikku/addon/scopes/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/scopes` resolves here.

package/dist/.pikku/addon/scopes/pikku-personas.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/addon/scopes/pikku-roles.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/addon/scopes/pikku-scope-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/addon/scopes/pikku-scope-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/addon/scopes/pikku-scopes.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/addon/secrets/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/addon/secrets/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/addon/secrets/pikku-secret-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export { defineSecret } from '@pikku/core/secret';
 //# sourceMappingURL=pikku-secret-types.gen.d.ts.map

package/dist/.pikku/addon/secrets/pikku-secret-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export { defineSecret } from '@pikku/core/secret';
 //# sourceMappingURL=pikku-secret-types.gen.js.map

package/dist/.pikku/addon/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/addon/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 /**

package/dist/.pikku/addon/services/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/addon/services/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/addon/setup/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/addon/setup/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/addon/setup/pikku-addon-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Addon package types for pikkuAddonConfig and pikkuAddonServices

package/dist/.pikku/addon/setup/pikku-addon-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Addon package types for pikkuAddonConfig and pikkuAddonServices

package/dist/.pikku/addon/setup/pikku-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/addon/setup/pikku-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/addon/trigger/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/addon/trigger/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/addon/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/addon/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/addon/variables/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/addon/variables/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/addon/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export { defineVariable } from '@pikku/core/variable';
 //# sourceMappingURL=pikku-variable-types.gen.d.ts.map

package/dist/.pikku/addon/variables/pikku-variable-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 export { defineVariable } from '@pikku/core/variable';
 //# sourceMappingURL=pikku-variable-types.gen.js.map

package/dist/.pikku/addon/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/addon/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { TypedVariablesService as CoreTypedVariablesService, } from '@pikku/core/services';
 /**

package/dist/.pikku/addon/workflow/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/addon/workflow/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/addon/workflow/pikku-scenario-step-map.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Scenario step map: the names `scenario.given/when/then` accepts, with

package/dist/.pikku/addon/workflow/pikku-workflow-map.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 /**
  * Workflow type map with input/output types for each workflow

package/dist/.pikku/addon/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult } from '@pikku/core/workflow';

package/dist/.pikku/addon/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { pikkuWorkflowGraph as corePikkuWorkflowGraph } from '@pikku/core/workflow';

package/dist/.pikku/addon/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 import { pikkuState } from '@pikku/core/state';
 const workflowsMeta = {};

package/dist/.pikku/addon/workflow/pikku-workflow-wirings.gen.d.ts

@@ -1,5 +1,5 @@
 export {};
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 //# sourceMappingURL=pikku-workflow-wirings.gen.d.ts.map

package/dist/.pikku/addon/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 export {};
 /**
- * This file was generated by @pikku/cli@0.12.133
+ * This file was generated by @pikku/cli@0.12.136
  */
 //# sourceMappingURL=pikku-workflow-wirings.gen.js.map

package/dist/src/functions/secret-get.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-get.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;oGAQjC,CAAA"}
+{"version":3,"file":"secret-get.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;;cADrB,MAAM;;YACR,OAAO;WAAS,OAAO;oGASjC,CAAA"}

package/dist/src/functions/secret-get.function.js

@@ -3,6 +3,7 @@ export const secretGet = pikkuFunc({
     title: 'Get Secret',
     description: 'Gets the current value of a secret.',
     expose: true,
+    scopes: ['pikku:console:secrets:read'],
     func: async ({ secretAdminService }, { secretId }) => {
         return secretAdminService.read(secretId);
     },

package/dist/src/functions/secret-get.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-get.function.js","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"secret-get.function.js","sourceRoot":"","sources":["../../../src/functions/secret-get.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-has.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-has.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cAAyB,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;oGAQxE,CAAA"}
+{"version":3,"file":"secret-has.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cAAyB,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;;cAA3B,MAAM;;YAAc,OAAO;oGASxE,CAAA"}

package/dist/src/functions/secret-has.function.js

@@ -3,6 +3,7 @@ export const secretHas = pikkuFunc({
     title: 'Has Secret',
     description: 'Checks whether a secret exists without reading its value.',
     expose: true,
+    scopes: ['pikku:console:secrets:read'],
     func: async ({ secretAdminService }, { secretId }) => {
         const exists = await secretAdminService.has(secretId);
         return { exists };

package/dist/src/functions/secret-has.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-has.function.js","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAA4C;IAC5E,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"secret-has.function.js","sourceRoot":"","sources":["../../../src/functions/secret-has.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAA4C;IAC5E,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/secret-scopes.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret-scopes.function.test.d.ts.map

package/dist/src/functions/secret-scopes.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scopes.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-scopes.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/secret-scopes.function.test.js

@@ -0,0 +1,60 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { MissingScopeError } from '#pikku/addon/error';
+import { verifyScopes } from '@pikku/core/scope';
+import { secretGet } from './secret-get.function.js';
+import { secretHas } from './secret-has.function.js';
+import { secretSet } from './secret-set.function.js';
+const readers = [
+    ['secretGet', secretGet],
+    ['secretHas', secretHas],
+];
+for (const [name, reader] of readers) {
+    test(`${name} refuses a caller with no session`, () => {
+        assert.throws(() => verifyScopes(reader.scopes, undefined), MissingScopeError);
+    });
+    test(`${name} refuses a console user without the secrets scope`, () => {
+        assert.throws(() => verifyScopes(reader.scopes, {
+            userId: 'alice',
+            scopes: ['pikku:console:wirings:read'],
+        }), MissingScopeError);
+    });
+    test(`${name} admits a holder of the secrets read scope`, () => {
+        assert.doesNotThrow(() => verifyScopes(reader.scopes, {
+            userId: 'root',
+            scopes: ['pikku:console:secrets:read'],
+        }));
+    });
+    test(`${name} admits a holder of the console root`, () => {
+        assert.doesNotThrow(() => verifyScopes(reader.scopes, { userId: 'root', scopes: ['pikku:console'] }));
+    });
+}
+test('secretSet refuses a caller with no session', () => {
+    assert.throws(() => verifyScopes(secretSet.scopes, undefined), MissingScopeError);
+});
+test('secretSet refuses a console user without the secrets scope', () => {
+    assert.throws(() => verifyScopes(secretSet.scopes, {
+        userId: 'alice',
+        scopes: ['pikku:console:wirings:read'],
+    }), MissingScopeError);
+});
+// Reading a secret and overwriting one are separate grants.
+test('secretSet refuses a holder of only the secrets read scope', () => {
+    assert.throws(() => verifyScopes(secretSet.scopes, {
+        userId: 'alice',
+        scopes: ['pikku:console:secrets:read'],
+    }), MissingScopeError);
+});
+test('secretSet admits a holder of the secrets write scope', () => {
+    assert.doesNotThrow(() => verifyScopes(secretSet.scopes, {
+        userId: 'root',
+        scopes: ['pikku:console:secrets:write'],
+    }));
+});
+test('secretSet admits a holder of the console root', () => {
+    assert.doesNotThrow(() => verifyScopes(secretSet.scopes, {
+        userId: 'root',
+        scopes: ['pikku:console'],
+    }));
+});
+//# sourceMappingURL=secret-scopes.function.test.js.map

package/dist/src/functions/secret-scopes.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scopes.function.test.js","sourceRoot":"","sources":["../../../src/functions/secret-scopes.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,MAAM,OAAO,GAAG;IACd,CAAC,WAAW,EAAE,SAAS,CAAC;IACxB,CAAC,WAAW,EAAE,SAAS,CAAC;CAChB,CAAA;AAEV,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,mCAAmC,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAC5C,iBAAiB,CAClB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,IAAI,mDAAmD,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC,EACJ,iBAAiB,CAClB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,IAAI,4CAA4C,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,IAAI,sCAAsC,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAC3E,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAC/C,iBAAiB,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,4BAA4B,CAAC;KACvC,CAAC,EACJ,iBAAiB,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,4DAA4D;AAC5D,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,4BAA4B,CAAC;KACvC,CAAC,EACJ,iBAAiB,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,CAAC,6BAA6B,CAAC;KACxC,CAAC,CACH,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,CAAC,eAAe,CAAC;KAC1B,CAAC,CACH,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/src/functions/secret-set.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-set.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;oGASlB,CAAA"}
+{"version":3,"file":"secret-set.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;oGAUlB,CAAA"}

package/dist/src/functions/secret-set.function.js

@@ -3,6 +3,7 @@ export const secretSet = pikkuFunc({
     title: 'Set Secret',
     description: 'Sets the value of a secret.',
     expose: true,
+    scopes: ['pikku:console:secrets:write'],
     func: async ({ secretAdminService }, { secretId, value }) => {
         await secretAdminService.write(secretId, value);
         return { success: true };

package/dist/src/functions/secret-set.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-set.function.js","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"secret-set.function.js","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}