@pithy-sh/core 0.1.4 → 0.1.5

package/dist/address/address.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * Email addresses: the one rule for deciding whether two strings are the same person.
  *

package/dist/address/address.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/address/address.ts
 /**
 * Email addresses: the one rule for deciding whether two strings are the same person.

package/dist/audit/auditEvent.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The action taxonomy is **federated, not centralized**: `action` is an open, namespace-validated

package/dist/audit/auditEvent.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
 * The action taxonomy is **federated, not centralized**: `action` is an open, namespace-validated

package/dist/audit/recorder.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { AuditEventInput } from "./auditEvent";
 /**
  * The recorder seam. `emit()` on the request context (`c.var.emit`) takes one {@link AuditEventInput}

package/dist/audit/recorder.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/audit/recorder.ts
 /**
 * The default recorder when no audit capability is composed: accept the event and drop it. Resolves

package/dist/capability/bindings.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 export declare const BindingType: z.ZodUnion<readonly [z.ZodLiteral<"d1">, z.ZodLiteral<"kv">, z.ZodLiteral<"r2">, z.ZodLiteral<"ai">, z.ZodLiteral<"vectorize">, z.ZodLiteral<"queue">, z.ZodLiteral<"ratelimit">, z.ZodLiteral<"email">, z.ZodLiteral<"secret">, z.ZodLiteral<"workflow">, z.ZodLiteral<"service">, z.ZodLiteral<"durable_object">]>;
 export type BindingType = z.infer<typeof BindingType>;

package/dist/capability/bindings.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { NAME_SEGMENT } from "../naming/segment.js";
 import { z } from "zod";
 //#region src/capability/bindings.ts

package/dist/capability/capability.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { ExecutionContext, ForwardableEmailMessage } from "@cloudflare/workers-types";
 import type { Hono } from "hono";
 import type { z } from "zod";

package/dist/capability/capability.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { BindingSpec } from "./bindings.js";
 //#region src/capability/capability.ts
 /**

package/dist/capability/client.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 import type { Capability } from "./capability";
 /**

package/dist/capability/client.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { fromZodError } from "../error/pithyError.js";
 import { refusesVanishingKey } from "./vanishingKey.js";
 import { z } from "zod";

package/dist/capability/compose.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Capability } from "./capability";
 /** A logical group bound to one CF binding, holding named items — D1 tables, or KV stores. */
 export interface BindingGroup<Item> {

package/dist/capability/compose.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError } from "../error/pithyError.js";
 //#region src/capability/compose.ts
 /**

package/dist/capability/composition.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Capability } from "./capability";
 /**
  * Record the composed set. Called once by `createBackend`, after every `compose` hook has run — so a

package/dist/capability/composition.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError } from "../error/pithyError.js";
 //#region src/capability/composition.ts
 /**

package/dist/capability/config.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 import type { Capability } from "./capability";
 /** Compose each capability's config schema into one object keyed by capability name. */

package/dist/capability/config.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 //#region src/capability/config.ts
 /** Compose each capability's config schema into one object keyed by capability name. */

package/dist/capability/devSecret.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * A secret whose value is **arbitrary**, and can therefore be minted for local dev.

package/dist/capability/devSecret.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 //#region src/capability/devSecret.ts
 /**

package/dist/capability/manifest.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * What a manifest states as an option's rendered value: a JSON value other than `null`, nested freely,

package/dist/capability/manifest.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { BindingSpec } from "./bindings.js";
 import { ValidationError } from "../error/pithyError.js";
 import { manifestRecord } from "./vanishingKey.js";

package/dist/capability/secretOrigin.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * How a secret's value comes to exist, and how it is replaced.

package/dist/capability/secretOrigin.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { manifestRecord } from "./vanishingKey.js";
 import { z } from "zod";
 //#region src/capability/secretOrigin.ts

package/dist/capability/settings.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 import type { HostEnvReport } from "../workflow/hostEnv";
 /**

package/dist/capability/settings.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { hostEnvProviderSentence } from "../workflow/hostEnv.js";
 import { z } from "zod";
 //#region src/capability/settings.ts

package/dist/capability/validateBindings.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { type BindingSpec } from "./bindings";
 /** Throw a typed error if any non-optional binding is absent from `env`. */
 export declare function validateBindings(env: Record<string, unknown>, required: BindingSpec[]): void;

package/dist/capability/validateBindings.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { isProvisionedBinding } from "./bindings.js";
 import { InternalError } from "../error/pithyError.js";
 //#region src/capability/validateBindings.ts

package/dist/capability/vanishingKey.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * Whether a value states no key that would vanish during parsing.

package/dist/capability/vanishingKey.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 //#region src/capability/vanishingKey.ts
 /**

package/dist/controlPlane/audit/actions.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { AuditEventInput } from "../../audit/auditEvent";
 import type { AuditEmit } from "../../audit/recorder";
 import type { Logger } from "../../logger/logger";

package/dist/controlPlane/audit/actions.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/controlPlane/audit/actions.ts
 /**
 * The audit action codes the `control-plane` seam emits, as `domain/reason` strings under the

package/dist/controlPlane/capability.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { type Capability } from "../capability/capability";
 import type { DatabaseSpecMap } from "../data/databases";
 import type { KvNamespaceSpecMap } from "../kv/namespaces";

package/dist/controlPlane/capability.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { defineCapability } from "../capability/capability.js";
 import { PACKAGE_VERSION } from "../version.generated.js";
 import "../worker/identity.js";

package/dist/controlPlane/config/config.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 export declare const ControlPlaneConfig: z.ZodObject<{
     basePath: z.ZodDefault<z.ZodString>;

package/dist/controlPlane/config/config.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import "../token/claims.js";
 import { z } from "zod";
 //#region src/controlPlane/config/config.ts

package/dist/controlPlane/context.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The verified control-plane caller, on `c.var.controlPlane`.

package/dist/controlPlane/context.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "./scope/scope.js";
 import { z } from "zod";
 //#region src/controlPlane/context.ts

package/dist/controlPlane/data/connection.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The registration record: who may call this Worker's control-plane routes, from where, with what

package/dist/controlPlane/data/connection.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "../scope/scope.js";
 import { JsonDate, SQLiteDate, sqliteJson } from "../../data/codecs.js";
 import { z } from "zod";

package/dist/controlPlane/data/keyLifecycle.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { RegisteredKey } from "./connection";
 /**
  * The registered-key lifecycle: pure array logic over a connection's `keys` column.

package/dist/controlPlane/data/keyLifecycle.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneKeyConflictError, ControlPlaneKeyNotFoundError } from "../error/errors.js";
 //#region src/controlPlane/data/keyLifecycle.ts
 /**

package/dist/controlPlane/data/replay.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * One spent control-plane token, as a row.

package/dist/controlPlane/data/replay.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { SQLiteDate } from "../../data/codecs.js";
 import { z } from "zod";
 //#region src/controlPlane/data/replay.ts

package/dist/controlPlane/data/tables.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { D1Database } from "@cloudflare/workers-types";
 import type { Kysely } from "kysely";
 import type { z } from "zod";

package/dist/controlPlane/data/tables.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneConnection } from "./connection.js";
 import { createDatabase } from "../../data/db.js";
 import { ControlPlaneReplay } from "./replay.js";

package/dist/controlPlane/discovery/adminRoute.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * What a capability tells a management client about its own admin surface.

package/dist/controlPlane/discovery/adminRoute.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "../scope/scope.js";
 import { CapabilityHealthReport, HealthSummary, HealthSummaryKey, healthReport, healthWire } from "./healthSummary.js";
 import { ManifestConfigKey, ManifestConfigValues } from "./configuration.js";

package/dist/controlPlane/discovery/configuration.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * One configured fact's value. A string, a number, or a boolean — never anything else.

package/dist/controlPlane/discovery/configuration.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError } from "../../error/pithyError.js";
 import { z } from "zod";
 //#region src/controlPlane/discovery/configuration.ts

package/dist/controlPlane/discovery/drift.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Hono } from "hono";
 import type { Capability } from "../../capability/capability";
 import type { AdminRoute } from "./adminRoute";

package/dist/controlPlane/discovery/drift.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { isControlPlaneGuard } from "../http/guard.js";
 //#region src/controlPlane/discovery/drift.ts
 /** `app.routes` entries, reduced to the pairs worth comparing. */

package/dist/controlPlane/discovery/health.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Context } from "hono";
 import type { z } from "zod";
 import type { Capability, PithyHonoEnv } from "../../capability/capability";

package/dist/controlPlane/discovery/health.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError } from "../../error/pithyError.js";
 import { HealthSummaryKey } from "./healthSummary.js";
 //#region src/controlPlane/discovery/health.ts

package/dist/controlPlane/discovery/healthSummary.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /** What kind of scalar a key reports. */
 export declare const HealthValueKind: z.ZodEnum<{

package/dist/controlPlane/discovery/healthSummary.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "../scope/scope.js";
 import { z } from "zod";
 //#region src/controlPlane/discovery/healthSummary.ts

package/dist/controlPlane/error/errors.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { PithyError } from "../../error/pithyError";
 import type { MessageParams } from "../../i18n/catalog";
 /**

package/dist/controlPlane/error/errors.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { PithyError } from "../../error/pithyError.js";
 //#region src/controlPlane/error/errors.ts
 /**

package/dist/controlPlane/http/cors.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Hono, MiddlewareHandler } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { AdminRoute } from "../discovery/adminRoute";

package/dist/controlPlane/http/cors.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import "../../worker/identity.js";
 import { CONTROL_PLANE_HEADER, CONTROL_PLANE_VERSION_CREATED_HEADER, CONTROL_PLANE_VERSION_HEADER } from "../wire.js";
 import "../../naming/environment.js";

package/dist/controlPlane/http/guard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { MiddlewareHandler } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { ControlPlaneContext } from "../context";

package/dist/controlPlane/http/guard.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { PithyError } from "../../error/pithyError.js";
 import { workerVersionMetadata } from "../../worker/identity.js";
 import { ControlPlaneAuditActions, safeEmit } from "../audit/actions.js";

package/dist/controlPlane/http/handlers.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Context } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { ControlPlaneConfig } from "../config/config";

package/dist/controlPlane/http/handlers.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { workerVersion } from "../../worker/identity.js";
 import { ControlPlaneConnection } from "../data/connection.js";
 import { CONTROL_PLANE_CONNECTIONS_TABLE } from "../data/tables.js";

package/dist/controlPlane/http/responses.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * What the seam's own routes return, as Zod objects a management client can validate against.

package/dist/controlPlane/http/responses.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { Ed25519PublicJwk } from "../data/connection.js";
 import { z } from "zod";
 //#region src/controlPlane/http/responses.ts

package/dist/controlPlane/http/routes.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Hono } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { AdminRoute } from "../discovery/adminRoute";

package/dist/controlPlane/http/routes.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ANY_VERIFIED_CALLER, KEYS_ROTATE_SCOPE, MANIFEST_READ_SCOPE } from "../scope/scope.js";
 import { requireControlPlane } from "./guard.js";
 import { validationHook } from "../../http/validation.js";

package/dist/controlPlane/http/schemas.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The request contract for the seam's own routes. Every input surface is validated here and read in a

package/dist/controlPlane/http/schemas.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { Ed25519PublicJwk } from "../data/connection.js";
 import { z } from "zod";
 //#region src/controlPlane/http/schemas.ts

package/dist/controlPlane/http/verify.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { ControlPlaneConfig } from "../config/config";
 import { ControlPlaneContext } from "../context";
 import type { ControlPlaneConnection } from "../data/connection";

package/dist/controlPlane/http/verify.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { scopeCovers } from "../scope/scope.js";
 import { ControlPlaneInsufficientScopeError, ControlPlaneInvalidCredentialError, ControlPlaneNotConnectedError } from "../error/errors.js";
 import { CONTROL_PLANE_HEADER, CONTROL_PLANE_VERSION_HEADER } from "../wire.js";

package/dist/controlPlane/migrations/0001_init.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Migration } from "kysely/migration";
 /**
  * The control-plane seam's tables: which management client may call this Worker, and which of its tokens

package/dist/controlPlane/migrations/0001_init.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/controlPlane/migrations/0001_init.ts
 /**
 * The control-plane seam's tables: which management client may call this Worker, and which of its tokens

package/dist/controlPlane/replay/d1Guard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { type ControlPlaneDatabase } from "../data/tables";
 import type { ReplayGuard } from "./guard";
 /**

package/dist/controlPlane/replay/d1Guard.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneReplay } from "../data/replay.js";
 import { CONTROL_PLANE_REPLAYS_TABLE } from "../data/tables.js";
 //#region src/controlPlane/replay/d1Guard.ts

package/dist/controlPlane/replay/guard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * The replay guard: a control-plane token is spendable exactly once.
  *

package/dist/controlPlane/replay/guard.js

@@ -0,0 +1,2 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT

package/dist/controlPlane/replay/kvGuard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 import type { TypedKv } from "../../kv/kv";
 import type { ReplayGuard } from "./guard";

package/dist/controlPlane/replay/kvGuard.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import "../token/claims.js";
 import { z } from "zod";
 //#region src/controlPlane/replay/kvGuard.ts

package/dist/controlPlane/scope/scope.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * One granted operation. Validated on the way into the connection row and on the way out of a token,

package/dist/controlPlane/scope/scope.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
 * One granted operation. Validated on the way into the connection row and on the way out of a token,

package/dist/controlPlane/token/base64url.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /** Encode raw bytes as unpadded base64url. */
 export declare function base64UrlEncode(bytes: Uint8Array): string;
 /**

package/dist/controlPlane/token/base64url.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneInvalidCredentialError } from "../error/errors.js";
 //#region src/controlPlane/token/base64url.ts
 /**

package/dist/controlPlane/token/claims.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The token a management client presents: what it claims, and what shape the envelope around it must