@pithy-sh/core 0.1.4 → 0.2.0

package/dist/controlPlane/discovery/drift.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Hono } from "hono";
 import type { Capability } from "../../capability/capability";
 import type { AdminRoute } from "./adminRoute";

package/dist/controlPlane/discovery/drift.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { isControlPlaneGuard } from "../http/guard.js";
 //#region src/controlPlane/discovery/drift.ts
 /** `app.routes` entries, reduced to the pairs worth comparing. */

package/dist/controlPlane/discovery/health.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Context } from "hono";
 import type { z } from "zod";
 import type { Capability, PithyHonoEnv } from "../../capability/capability";

package/dist/controlPlane/discovery/health.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError } from "../../error/pithyError.js";
 import { HealthSummaryKey } from "./healthSummary.js";
 //#region src/controlPlane/discovery/health.ts

package/dist/controlPlane/discovery/healthSummary.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /** What kind of scalar a key reports. */
 export declare const HealthValueKind: z.ZodEnum<{

package/dist/controlPlane/discovery/healthSummary.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "../scope/scope.js";
 import { z } from "zod";
 //#region src/controlPlane/discovery/healthSummary.ts

package/dist/controlPlane/error/errors.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { PithyError } from "../../error/pithyError";
 import type { MessageParams } from "../../i18n/catalog";
 /**

package/dist/controlPlane/error/errors.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { PithyError } from "../../error/pithyError.js";
 //#region src/controlPlane/error/errors.ts
 /**

package/dist/controlPlane/http/cors.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Hono, MiddlewareHandler } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { AdminRoute } from "../discovery/adminRoute";

package/dist/controlPlane/http/cors.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import "../../worker/identity.js";
 import { CONTROL_PLANE_HEADER, CONTROL_PLANE_VERSION_CREATED_HEADER, CONTROL_PLANE_VERSION_HEADER } from "../wire.js";
 import "../../naming/environment.js";

package/dist/controlPlane/http/guard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { MiddlewareHandler } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { ControlPlaneContext } from "../context";

package/dist/controlPlane/http/guard.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { PithyError } from "../../error/pithyError.js";
 import { workerVersionMetadata } from "../../worker/identity.js";
 import { ControlPlaneAuditActions, safeEmit } from "../audit/actions.js";

package/dist/controlPlane/http/handlers.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Context } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { ControlPlaneConfig } from "../config/config";

package/dist/controlPlane/http/handlers.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { workerVersion } from "../../worker/identity.js";
 import { ControlPlaneConnection } from "../data/connection.js";
 import { CONTROL_PLANE_CONNECTIONS_TABLE } from "../data/tables.js";

package/dist/controlPlane/http/responses.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * What the seam's own routes return, as Zod objects a management client can validate against.

package/dist/controlPlane/http/responses.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { Ed25519PublicJwk } from "../data/connection.js";
 import { z } from "zod";
 //#region src/controlPlane/http/responses.ts

package/dist/controlPlane/http/routes.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Hono } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
 import type { AdminRoute } from "../discovery/adminRoute";

package/dist/controlPlane/http/routes.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ANY_VERIFIED_CALLER, KEYS_ROTATE_SCOPE, MANIFEST_READ_SCOPE } from "../scope/scope.js";
 import { requireControlPlane } from "./guard.js";
 import { validationHook } from "../../http/validation.js";

package/dist/controlPlane/http/schemas.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The request contract for the seam's own routes. Every input surface is validated here and read in a

package/dist/controlPlane/http/schemas.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { Ed25519PublicJwk } from "../data/connection.js";
 import { z } from "zod";
 //#region src/controlPlane/http/schemas.ts

package/dist/controlPlane/http/verify.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { ControlPlaneConfig } from "../config/config";
 import { ControlPlaneContext } from "../context";
 import type { ControlPlaneConnection } from "../data/connection";

package/dist/controlPlane/http/verify.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { scopeCovers } from "../scope/scope.js";
 import { ControlPlaneInsufficientScopeError, ControlPlaneInvalidCredentialError, ControlPlaneNotConnectedError } from "../error/errors.js";
 import { CONTROL_PLANE_HEADER, CONTROL_PLANE_VERSION_HEADER } from "../wire.js";

package/dist/controlPlane/migrations/0001_init.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Migration } from "kysely/migration";
 /**
  * The control-plane seam's tables: which management client may call this Worker, and which of its tokens

package/dist/controlPlane/migrations/0001_init.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/controlPlane/migrations/0001_init.ts
 /**
 * The control-plane seam's tables: which management client may call this Worker, and which of its tokens

package/dist/controlPlane/replay/d1Guard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { type ControlPlaneDatabase } from "../data/tables";
 import type { ReplayGuard } from "./guard";
 /**

package/dist/controlPlane/replay/d1Guard.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneReplay } from "../data/replay.js";
 import { CONTROL_PLANE_REPLAYS_TABLE } from "../data/tables.js";
 //#region src/controlPlane/replay/d1Guard.ts

package/dist/controlPlane/replay/guard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * The replay guard: a control-plane token is spendable exactly once.
  *

package/dist/controlPlane/replay/guard.js

@@ -0,0 +1,2 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT

package/dist/controlPlane/replay/kvGuard.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 import type { TypedKv } from "../../kv/kv";
 import type { ReplayGuard } from "./guard";

package/dist/controlPlane/replay/kvGuard.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import "../token/claims.js";
 import { z } from "zod";
 //#region src/controlPlane/replay/kvGuard.ts

package/dist/controlPlane/scope/scope.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * One granted operation. Validated on the way into the connection row and on the way out of a token,

package/dist/controlPlane/scope/scope.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
 * One granted operation. Validated on the way into the connection row and on the way out of a token,

package/dist/controlPlane/token/base64url.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /** Encode raw bytes as unpadded base64url. */
 export declare function base64UrlEncode(bytes: Uint8Array): string;
 /**

package/dist/controlPlane/token/base64url.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneInvalidCredentialError } from "../error/errors.js";
 //#region src/controlPlane/token/base64url.ts
 /**

package/dist/controlPlane/token/claims.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * The token a management client presents: what it claims, and what shape the envelope around it must

package/dist/controlPlane/token/claims.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "../scope/scope.js";
 import { z } from "zod";
 //#region src/controlPlane/token/claims.ts

package/dist/controlPlane/token/digest.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * The two primitives the body-binding check needs: hash a request body, then compare that hash to the
  * one the token committed to.

package/dist/controlPlane/token/digest.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { base64UrlEncode } from "./base64url.js";
 //#region src/controlPlane/token/digest.ts
 /**

package/dist/controlPlane/token/jws.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Ed25519PublicJwk } from "../data/connection";
 import { ControlPlaneClaims, ControlPlaneJwsHeader } from "./claims";
 /**

package/dist/controlPlane/token/jws.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneClaims, ControlPlaneJwsHeader } from "./claims.js";
 import { ControlPlaneInvalidCredentialError } from "../error/errors.js";
 import { base64UrlDecode } from "./base64url.js";

package/dist/controlPlane/token/mint.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Ed25519PublicJwk } from "../data/connection";
 /**
  * Mint a control-plane token — the management client's half of the seam.

package/dist/controlPlane/token/mint.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ControlPlaneClaims } from "./claims.js";
 import { base64UrlEncode } from "./base64url.js";
 import { sha256Base64Url } from "./digest.js";

package/dist/controlPlane/wire.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * The control-plane wire contract: the names both ends of the seam must spell identically, and the one
  * rule for reading what they carry.

package/dist/controlPlane/wire.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/controlPlane/wire.ts
 /**
 * The control-plane wire contract: the names both ends of the seam must spell identically, and the one

package/dist/createBackend.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { Hono } from "hono";
 import type { Capability, MergedDatabases, MergedKvNamespaces, MergedWorkflowParams, PithyVars } from "./capability/capability";
 import { type DbRegistry } from "./data/databases";

package/dist/createBackend.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { noopEmit } from "./audit/recorder.js";
 import { BindingSpec } from "./capability/bindings.js";
 import { ValidationError } from "./error/pithyError.js";

package/dist/createEntrypoint.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { ExecutionContext, ForwardableEmailMessage } from "@cloudflare/workers-types";
 import type { Capability } from "./capability/capability";
 import { type CreateBackendOptions } from "./createBackend";

package/dist/createEntrypoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createEntrypoint.d.ts","sourceRoot":"","sources":["../src/createEntrypoint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,KAAK,EAAE,UAAU,EAA0B,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,KAAK,oBAAoB,EAAiB,MAAM,iBAAiB,CAAC;AAI3E;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/G;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzG;AAkBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,EACxC,KAAK,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EACrF,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,eAAe,CA+C3D"}
+{"version":3,"file":"createEntrypoint.d.ts","sourceRoot":"","sources":["../src/createEntrypoint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,KAAK,EAAE,UAAU,EAA0B,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,KAAK,oBAAoB,EAAiB,MAAM,iBAAiB,CAAC;AAI3E;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/G;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzG;AAkBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,EACxC,KAAK,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EACrF,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,eAAe,CAoD3D"}

package/dist/createEntrypoint.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { triggerWorkflow } from "./workflow/dispatch.js";
 import { composeWorkflows, scheduledWorkflows } from "./workflow/register.js";
 import { createBackend } from "./createBackend.js";
@@ -26,6 +28,7 @@ function createEntrypoint(options) {
 	const app = createBackend(options);
 	const all = options.app ? [...options.capabilities, options.app] : [...options.capabilities];
 	const handlers = all.flatMap((cap) => cap.email ? [cap.email] : []);
+	for (const cap of all) cap.boot?.({ capabilities: all });
 	const registry = composeWorkflows(all);
 	const scheduled = scheduledWorkflows(registry);
 	const entrypoint = { fetch: (request, env, ctx) => app.fetch(request, env, ctx) };

package/dist/data/boundParameters.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { D1Database } from "@cloudflare/workers-types";
 /**
  * D1's bound-parameter ceiling, and the chunking every `in (...)` list needs to stay under it.

package/dist/data/boundParameters.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError } from "../error/pithyError.js";
 //#region src/data/boundParameters.ts
 /**

package/dist/data/codecs.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /** SQLiteBoolean: boolean ↔ 0|1. Decode is lenient (number/boolean/string). */
 export declare const SQLiteBoolean: z.ZodCodec<z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<1>, z.ZodBoolean, z.ZodString]>, z.ZodBoolean>;

package/dist/data/codecs.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 //#region src/data/codecs.ts
 const TRUTHY = [

package/dist/data/cursor.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 /**
  * Keyset pagination, once, for every capability that lists an unbounded table.

package/dist/data/cursor.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 //#region src/data/cursor.ts
 /**

package/dist/data/databases.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { Kysely } from "kysely";
 import type { Migration } from "kysely/migration";
 import type { z } from "zod";

package/dist/data/databases.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { createDatabase } from "./db.js";
 import { bindingGroupsFrom, composeBindingGroups } from "../capability/compose.js";
 //#region src/data/databases.ts

package/dist/data/db.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { D1Database } from "@cloudflare/workers-types";
 import { type Generated, Kysely } from "kysely";
 import type { z } from "zod";

package/dist/data/db.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { guardBoundParameters } from "./boundParameters.js";
 import { CamelCasePlugin, Kysely } from "kysely";
 import { D1Dialect } from "kysely-d1";

package/dist/data/withD1Retry.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * Retry a D1 write through transient faults. Ported from the CMS `withD1Retry`, adapted to
  * Pithy: no injected logger (core has none), an optional `onRetry` notifier instead, and a

package/dist/data/withD1Retry.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/data/withD1Retry.ts
 /**
 * Retry a D1 write through transient faults. Ported from the CMS `withD1Retry`, adapted to

package/dist/entitlement/entitlement.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 export declare const EntitlementKey: z.ZodString;
 export type EntitlementKey = z.output<typeof EntitlementKey>;

package/dist/entitlement/entitlement.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { z } from "zod";
 const EntitlementKey = z.string().min(1).max(64).regex(/^[a-z][a-z0-9_]*$/, "An entitlement key is lowercase letters, digits, and underscores, starting with a letter.").describe("A logical entitlement key (`pro`, `ads_removed`) — what gating code names. Never a store SKU: many products across many rails grant one key.");
 /**

package/dist/entitlement/gateScan.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * The source with its comments blanked, so a `// TODO: requireEntitlement("pro")` is not read as a gate.
  *

package/dist/entitlement/gateScan.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/entitlement/gateScan.ts
 /**
 * Finding an entitlement gate in source text — the pure half of the composition check.

package/dist/entitlement/require.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import type { MiddlewareHandler } from "hono";
 import type { PithyHonoEnv } from "../capability/capability";
 /**

package/dist/entitlement/require.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { InternalError, PithyError, UnauthorizedError, messageOf } from "../error/pithyError.js";
 import { ENTITLEMENT_DENIED_ACTION, EntitlementKey, grantedEntitlementKeys } from "./entitlement.js";
 //#region src/entitlement/require.ts

package/dist/env/ambient.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * What the *ambient* environment says about the composition being assembled — the two questions a
  * capability may ask before it registers anything, and the one reader for both.

package/dist/env/ambient.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import "../worker/identity.js";
 //#region src/env/ambient.ts
 /**

package/dist/env/ci.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { type AmbientEnv } from "./ambient";
 /**
  * Is this continuous integration? One read, one rule, one place — the convention starts here.

package/dist/env/ci.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 import { ambientEnv, ambientFlag } from "./ambient.js";
 //#region src/env/ci.ts
 /**

package/dist/env/stem.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * How a member of the dev set publishes its address, and how a sibling looks it up.
  *

package/dist/env/stem.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 //#region src/env/stem.ts
 /**
 * How a member of the dev set publishes its address, and how a sibling looks it up.

package/dist/error/cause.d.ts

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
 /**
  * Reading a thrown value that no type describes — the one place the kit records **what a runtime does to
  * an error on its way out** (#223), and **the one place that decides whether what it says may be shown**
@@ -130,6 +132,39 @@ export interface FailurePosition {
  * coincidence of the path's own characters — and a fabricated position reads as authoritative.
  */
 export declare function failurePosition(cause: unknown): FailurePosition | undefined;
+/** What kind of thing failed to resolve. Three causes that wore one sentence until #489. */
+export type UnresolvedKind = 
+/** A bare specifier for a package that is not installed. Installing dependencies is the remedy. */
+"package"
+/** An installed package asked for a subpath it does not provide. Installing again changes nothing. */
+ | "package-subpath"
+/** A relative import of a file in the project's own tree. Installing again changes nothing. */
+ | "local-file";
+/**
+ * Which of the three unresolved-import causes this was, or `undefined` when it cannot be told.
+ *
+ * **The discriminator was already in the message and was being thrown away.** `unresolvedSpecifier`
+ * matches `Cannot find (?:package|module)` — and `package` versus `module` is exactly the fact that
+ * separates a missing dependency from the other two. It sat in a non-capturing group, so every cause
+ * arrived wearing one sentence, and for two of the three that sentence advised an install which is
+ * *guaranteed* to change nothing. That is #489's class exactly: guidance a caller cannot follow, worst
+ * for the caller it is written for, which has no human to shrug and try something else.
+ *
+ * Measured across Node 24.13.0 and Bun 1.3.14, because the two runtimes hand back different halves and
+ * each hands back exactly one usable one:
+ *
+ * | cause | Node says | Bun's `specifier` |
+ * |---|---|---|
+ * | package absent | `Cannot find package 'pkg'`, no `url` | `pkg` |
+ * | subpath missing | `Cannot find module '/abs/node_modules/pkg/src/nope.js'`, `url` under node_modules | `pkg/src/nope` |
+ * | adopter's file | `Cannot find module '/abs/apps/board/src/x'`, `url` outside node_modules | `./src/x` |
+ *
+ * Bun gives the **specifier as written**, so a leading `.` settles it. Node gives the **already-resolved
+ * path**, where being under `node_modules` settles it. Neither read works on both runtimes; the pair
+ * does, and it is the same predicate — *is this inside node_modules* — applied to whichever fact the
+ * runtime supplied.
+ */
+export declare function unresolvedKind(cause: unknown): UnresolvedKind | undefined;
 /**
  * The specifier that did not resolve.
  *
@@ -140,4 +175,37 @@ export declare function failurePosition(cause: unknown): FailurePosition | undef
  * Whether a surface names it, and what it advises when it does, is that surface's policy and stays there.
  */
 export declare function unresolvedSpecifier(cause: unknown): string | undefined;
+/**
+ * The package whose own source contained the import that did not resolve — **never a path**.
+ *
+ * {@link unresolvedSpecifier} answers *what* did not resolve. This answers *where the import lives*, and
+ * the two are different facts whenever the failing import is not the adopter's own. #480 is that case
+ * verbatim: `pithy add email` on a fresh project refused with
+ *
+ * > Nothing resolves "@pithy-sh/core/src/capability/capability".
+ *
+ * while `@pithy-sh/core` resolved from the Worker at every step of the run, before and after. The
+ * specifier was honest — the runtime really could not resolve it — but the import belonged to
+ * `@pithy-sh/email`, which had just been installed and was the package genuinely not linked. So the
+ * refusal named the one dependency that was definitely fine, and an adopter following it ran `bun
+ * install` against a tree that already had core in it. The importer is the half that would have pointed
+ * at `email`, and both runtimes hand it over: **Bun's `ResolveMessage` carries `referrer` as a field**
+ * (measured on 1.3.14) and Node states it in prose as `imported from <path>`.
+ *
+ * **A package name, or nothing.** The referrer is an absolute path — our frame, and the reason
+ * {@link unresolvedSpecifier} drops the prose around the specifier — so what travels is the one part of
+ * it that is not a path: the package directory it sits under. A referrer outside `node_modules` is the
+ * adopter's own file, and there is nothing to say about it that the refusal does not already say by
+ * naming the config, so it answers `undefined` rather than a path. The path itself is never returned
+ * from this module, which is what makes leaking it impossible rather than merely discouraged.
+ *
+ * The **last** `node_modules` in the path, because every store layout nests: pnpm's
+ * `node_modules/.pnpm/<id>/node_modules/<pkg>` and Bun's isolated linker's
+ * `node_modules/.bun/<pkg>@<version>/node_modules/<pkg>` (both measured) put the real owner last, and so
+ * does an ordinary nested install. The name is then checked against what npm allows, so a store's own
+ * bookkeeping directory (`.bun`, `.pnpm`, `hono@4.6.3`) can only ever answer nothing.
+ *
+ * Whether a surface names it, and what it advises when it does, is that surface's policy and stays there.
+ */
+export declare function importingPackage(cause: unknown): string | undefined;
 //# sourceMappingURL=cause.d.ts.map