@pithy-sh/core 0.10.0 → 0.12.0

package/dist/cli/commandCatalog.generated.js

@@ -148,6 +148,34 @@ const COMMANDS = {
 		},
 		"groups": []
 	},
+	"completion": {
+		"positionals": [{
+			"name": "shell",
+			"required": false,
+			"variadic": false
+		}],
+		"flags": {
+			"--remove": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			},
+			"--status": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": [{
+			"kind": "atMostOne",
+			"flags": ["--remove", "--status"]
+		}]
+	},
 	"contract": {
 		"positionals": [],
 		"flags": {
@@ -238,6 +266,16 @@ const COMMANDS = {
 				"type": "string",
 				"required": false,
 				"repeatable": false
+			},
+			"--purpose": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--kind": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
 			}
 		},
 		"groups": [
@@ -259,13 +297,20 @@ const COMMANDS = {
 				"needs": ["--public-key"],
 				"any": false
 			},
+			{
+				"kind": "requires",
+				"flag": "--kind",
+				"needs": ["--public-key"],
+				"any": false
+			},
 			{
 				"kind": "requires",
 				"flag": "--update",
 				"needs": [
 					"--worker-url",
 					"--scope",
-					"--public-key"
+					"--public-key",
+					"--purpose"
 				],
 				"any": true
 			}
@@ -787,6 +832,10 @@ const COMMANDS = {
 					"invite",
 					"testerNudge",
 					"passwordChanged",
+					"accountSuspended",
+					"accountReinstated",
+					"deletionScheduled",
+					"deletionComplete",
 					"operationalNotice",
 					"newsletter",
 					"leadCapture",
@@ -980,11 +1029,6 @@ const COMMANDS = {
 				"required": false,
 				"repeatable": false
 			},
-			"--api-token": {
-				"type": "string",
-				"required": false,
-				"repeatable": false
-			},
 			"--r2-access-key-id": {
 				"type": "string",
 				"required": false,
@@ -995,11 +1039,6 @@ const COMMANDS = {
 				"required": false,
 				"repeatable": false
 			},
-			"--r2-api-token": {
-				"type": "string",
-				"required": false,
-				"repeatable": false
-			},
 			"--json": {
 				"type": "boolean",
 				"required": false,
@@ -1120,6 +1159,31 @@ const COMMANDS = {
 		},
 		"groups": []
 	},
+	"privacy enable": {
+		"positionals": [],
+		"flags": {
+			"--class": {
+				"type": "string",
+				"required": false,
+				"repeatable": true
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": []
+	},
+	"privacy scan": {
+		"positionals": [],
+		"flags": { "--json": {
+			"type": "boolean",
+			"required": false,
+			"repeatable": false
+		} },
+		"groups": []
+	},
 	"provision": {
 		"positionals": [],
 		"flags": {
@@ -1303,6 +1367,31 @@ const COMMANDS = {
 		} },
 		"groups": []
 	},
+	"secrets retire-version": {
+		"positionals": [{
+			"name": "version",
+			"required": true,
+			"variadic": false
+		}],
+		"flags": {
+			"--env": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--past-guard": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": []
+	},
 	"secrets rm": {
 		"positionals": [{
 			"name": "name",
@@ -1354,6 +1443,28 @@ const COMMANDS = {
 		},
 		"groups": []
 	},
+	"secrets tables": {
+		"positionals": [],
+		"flags": {
+			"--env": {
+				"type": "string",
+				"required": false,
+				"repeatable": false,
+				"default": "dev"
+			},
+			"--worker": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": []
+	},
 	"secrets update": {
 		"positionals": [{
 			"name": "name",
@@ -1452,6 +1563,27 @@ const COMMANDS = {
 		},
 		"groups": []
 	},
+	"setup": {
+		"positionals": [],
+		"flags": {
+			"--skip-install": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			},
+			"--dry-run": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": []
+	},
 	"storage deprovision": {
 		"positionals": [],
 		"flags": {
@@ -1491,11 +1623,6 @@ const COMMANDS = {
 				"required": false,
 				"repeatable": false
 			},
-			"--api-token": {
-				"type": "string",
-				"required": false,
-				"repeatable": false
-			},
 			"--r2-access-key-id": {
 				"type": "string",
 				"required": false,
@@ -1872,6 +1999,32 @@ const COMMANDS = {
 		},
 		"groups": []
 	},
+	"token forget": {
+		"positionals": [{
+			"name": "profile",
+			"required": true,
+			"variadic": false
+		}],
+		"flags": {
+			"--env": {
+				"type": "string",
+				"required": false,
+				"repeatable": false,
+				"default": "dev"
+			},
+			"--force": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": []
+	},
 	"token list": {
 		"positionals": [],
 		"flags": {
@@ -1930,7 +2083,12 @@ const COMMANDS = {
 					"vectorize:write",
 					"ai:read",
 					"zone:read",
-					"routes:write"
+					"routes:write",
+					"analytics:read",
+					"images:write",
+					"stream:write",
+					"queues:write",
+					"artifacts:write"
 				]
 			},
 			"--json": {
@@ -2003,7 +2161,12 @@ const COMMANDS = {
 					"vectorize:write",
 					"ai:read",
 					"zone:read",
-					"routes:write"
+					"routes:write",
+					"analytics:read",
+					"images:write",
+					"stream:write",
+					"queues:write",
+					"artifacts:write"
 				]
 			},
 			"--keep-previous": {
@@ -2282,6 +2445,32 @@ const COMMANDS = {
 		},
 		"groups": []
 	},
+	"worker bind": {
+		"positionals": [],
+		"flags": {
+			"--from": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--to": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--binding": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": []
+	},
 	"worker list": {
 		"positionals": [],
 		"flags": { "--json": {
@@ -2306,15 +2495,25 @@ const COMMANDS = {
 	},
 	"worker rename": {
 		"positionals": [{
-			"name": "from",
-			"required": true,
+			"name": "old",
+			"required": false,
 			"variadic": false
 		}, {
-			"name": "to",
-			"required": true,
+			"name": "new",
+			"required": false,
 			"variadic": false
 		}],
 		"flags": {
+			"--from": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--to": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
 			"--force": {
 				"type": "boolean",
 				"required": false,
@@ -2353,6 +2552,35 @@ const COMMANDS = {
 			}
 		},
 		"groups": []
+	},
+	"worker unbind": {
+		"positionals": [],
+		"flags": {
+			"--from": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--to": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--binding": {
+				"type": "string",
+				"required": false,
+				"repeatable": false
+			},
+			"--json": {
+				"type": "boolean",
+				"required": false,
+				"repeatable": false
+			}
+		},
+		"groups": [{
+			"kind": "exactlyOne",
+			"flags": ["--to", "--binding"]
+		}]
 	}
 };
 /** The flags every command takes, answered before any command runs. */
@@ -2376,6 +2604,7 @@ const GROUPS = [
 	"feature",
 	"media",
 	"payments",
+	"privacy",
 	"secrets",
 	"storage",
 	"support",

package/dist/cli/commandFacts.d.ts

@@ -31,7 +31,7 @@ export type WorkerScopedPath = (typeof WORKER_SCOPED)[number];
  * The commands that take `--worker` and do not need it: each fans out over every Worker, or falls back to the
  * first that answers, and the flag narrows.
  */
-export declare const WORKER_NARROWS: readonly ["contract", "dashboard disconnect", "dashboard revoke-key", "dashboard rotate", "dashboard status", "doctor", "env", "init", "migrate", "seed", "support deprovision", "upgrade"];
+export declare const WORKER_NARROWS: readonly ["contract", "dashboard disconnect", "dashboard revoke-key", "dashboard rotate", "dashboard status", "doctor", "env", "init", "migrate", "secrets tables", "seed", "support deprovision", "upgrade"];
 /**
  * A command only a person runs, at a terminal, where the Worker is asked for. `pithy remove` refuses every run
  * that cannot ask (`core/person_required`).
@@ -68,6 +68,7 @@ export declare const DESTRUCTIVE_COMMANDS: {
     readonly "media deprovision": "the media Worker, and with --storage its bucket";
     readonly remove: "a capability's wiring";
     readonly "secrets deprovision": "the secrets manager, and with --keys the store's keys";
+    readonly "secrets retire-version": "a field-key version, and every ciphertext still sealed under it";
     readonly "secrets rm": "a stored secret";
     readonly "storage deprovision": "the storage Worker, and with --storage its bucket";
     readonly "support deprovision": "the support Workers, and with --storage its attachments";

package/dist/cli/commandFacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commandFacts.d.ts","sourceRoot":"","sources":["../../src/cli/commandFacts.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;GAGG;AACH,eAAO,MAAM,aAAa,YACxB,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,CACL,CAAC;AAEX,yCAAyC;AACzC,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc,YACzB,UAAU,EACV,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,KAAK,EACL,MAAM,EACN,SAAS,EACT,MAAM,EACN,qBAAqB,EACrB,SAAS,CACD,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,WAAW,YAAI,QAAQ,CAAU,CAAC;AAE/C,uHAAuH;AACvH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAuB,CAAC;AAEhG;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAI,OAAO,CAAU,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;aAAK,MAAM,EAAE,QAAQ;aAAE,OAAO,EAAE,WAAW;CAAW,CAAC;AAErF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;aAC/B,sBAAsB,EAAE,kEAAkE;aAC1F,sBAAsB,EAAE,mCAAmC;aAC3D,mBAAmB,EAAE,oEAAoE;aACzF,iBAAiB,EAAE,sEAAsE;aACzF,mBAAmB,EAAE,iDAAiD;aACtE,MAAM,EAAE,uBAAuB;aAC/B,qBAAqB,EAAE,uDAAuD;aAC9E,YAAY,EAAE,iBAAiB;aAC/B,qBAAqB,EAAE,mDAAmD;aAC1E,qBAAqB,EAAE,yDAAyD;aAChF,qBAAqB,EAAE,oBAAoB;aAC3C,cAAc,EAAE,cAAc;aAC9B,uBAAuB,EAAE,yDAAyD;aAClF,cAAc,EAAE,2BAA2B;aAC3C,eAAe,EAAE,sBAAsB;CAC/B,CAAC;AAEX,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,oBAAoB,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;aAC5B,oBAAoB,EAAE,8BAA8B;aACpD,QAAQ,EAAE,uBAAuB;aACjC,QAAQ,EAAE,uBAAuB;aACjC,YAAY,EAAE,sCAAsC;CAC5C,CAAC;AAEX,qDAAqD;AACrD,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM5D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,YAAI,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,CAAU,CAAC;AAErH;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAIhH,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAC3B,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,CAChB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,YAAI,MAAM,EAAE,YAAY,CAAU,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;wBACnB,WAAW;mBAChB,sBAAsB;;;;CAI8B,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gCAAqE,CAAC;AAEhH;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,gCAAqE,CAAC;AAE3G;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAEnG,CAAC"}
+{"version":3,"file":"commandFacts.d.ts","sourceRoot":"","sources":["../../src/cli/commandFacts.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;GAGG;AACH,eAAO,MAAM,aAAa,YACxB,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,CACL,CAAC;AAEX,yCAAyC;AACzC,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc,YACzB,UAAU,EACV,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,KAAK,EACL,MAAM,EACN,SAAS,EACT,gBAAgB,EAChB,MAAM,EACN,qBAAqB,EACrB,SAAS,CACD,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,WAAW,YAAI,QAAQ,CAAU,CAAC;AAE/C,uHAAuH;AACvH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAuB,CAAC;AAEhG;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAI,OAAO,CAAU,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;aAAK,MAAM,EAAE,QAAQ;aAAE,OAAO,EAAE,WAAW;CAAW,CAAC;AAErF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;aAC/B,sBAAsB,EAAE,kEAAkE;aAC1F,sBAAsB,EAAE,mCAAmC;aAC3D,mBAAmB,EAAE,oEAAoE;aACzF,iBAAiB,EAAE,sEAAsE;aACzF,mBAAmB,EAAE,iDAAiD;aACtE,MAAM,EAAE,uBAAuB;aAC/B,qBAAqB,EAAE,uDAAuD;aAC9E,wBAAwB,EAAE,iEAAiE;aAC3F,YAAY,EAAE,iBAAiB;aAC/B,qBAAqB,EAAE,mDAAmD;aAC1E,qBAAqB,EAAE,yDAAyD;aAChF,qBAAqB,EAAE,oBAAoB;aAC3C,cAAc,EAAE,cAAc;aAC9B,uBAAuB,EAAE,yDAAyD;aAClF,cAAc,EAAE,2BAA2B;aAC3C,eAAe,EAAE,sBAAsB;CAC/B,CAAC;AAEX,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,oBAAoB,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;aAC5B,oBAAoB,EAAE,8BAA8B;aACpD,QAAQ,EAAE,uBAAuB;aACjC,QAAQ,EAAE,uBAAuB;aACjC,YAAY,EAAE,sCAAsC;CAC5C,CAAC;AAEX,qDAAqD;AACrD,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM5D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,YAAI,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,CAAU,CAAC;AAErH;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAIhH,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAC3B,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,CAChB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,YAAI,MAAM,EAAE,YAAY,CAAU,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;wBACnB,WAAW;mBAChB,sBAAsB;;;;CAI8B,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gCAAqE,CAAC;AAEhH;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,gCAAqE,CAAC;AAE3G;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAEnG,CAAC"}

package/dist/cli/commandFacts.js

@@ -57,6 +57,7 @@ const WORKER_NARROWS = [
 	"env",
 	"init",
 	"migrate",
+	"secrets tables",
 	"seed",
 	"support deprovision",
 	"upgrade"
@@ -97,6 +98,7 @@ const DESTRUCTIVE_COMMANDS = {
 	"media deprovision": "the media Worker, and with --storage its bucket",
 	remove: "a capability's wiring",
 	"secrets deprovision": "the secrets manager, and with --keys the store's keys",
+	"secrets retire-version": "a field-key version, and every ciphertext still sealed under it",
 	"secrets rm": "a stored secret",
 	"storage deprovision": "the storage Worker, and with --storage its bucket",
 	"support deprovision": "the support Workers, and with --storage its attachments",

package/dist/controlPlane/capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/controlPlane/capability.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAuC,MAAM,0BAA0B,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,kBAAkB,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAWnF,OAAO,EACL,wBAAwB,EAIzB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE1D,uEAAuE;AACvE,MAAM,WAAW,sBAAuB,SAAQ,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,cAAc,CAAC;IAC7G,gCAAgC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC;AAED,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,IAAI,sBAAsB,CAErG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,sBAAsB,CAmKtF;AAED,4GAA4G;AAC5G,OAAO,EAAE,wBAAwB,EAAE,CAAC"}
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/controlPlane/capability.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAuC,MAAM,0BAA0B,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,kBAAkB,CAAC;AAKvE,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAkBnF,OAAO,EACL,wBAAwB,EAIzB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE1D,uEAAuE;AACvE,MAAM,WAAW,sBAAuB,SAAQ,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,cAAc,CAAC;IAC7G,gCAAgC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC;AAED,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,IAAI,sBAAsB,CAErG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,sBAAsB,CA6LtF;AAED,4GAA4G;AAC5G,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/controlPlane/capability.js

@@ -1,16 +1,20 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import { defineCapability } from "../capability/capability.js";
+import { readRetirement } from "../privacy/fieldRotation.js";
+import { lazyPrivacyInventory } from "../privacy/inventory.js";
 import { PACKAGE_NAME, PACKAGE_VERSION } from "../version.generated.js";
 import "../worker/identity.js";
 import { ControlPlaneConfig } from "./config/config.js";
 import { ControlPlaneConnection } from "./data/connection.js";
 import { CONTROL_PLANE_CONNECTIONS_TABLE, controlPlaneTables } from "./data/tables.js";
-import { capabilityHealthSources } from "./discovery/health.js";
+import { capabilityHealthSources, defineCapabilityHealth } from "./discovery/health.js";
 import { createControlPlaneVerifier } from "./http/guard.js";
+import { MIGRATION_HEALTH_KEYS, composeMigrationDatabases, readMigrationHealth } from "./migrationState/migrationState.js";
 import { controlPlaneRouteDescriptors, registerControlPlaneRoutes } from "./http/routes.js";
 import { controlplane_0001_init } from "./migrations/0001_init.js";
 import { controlplane_0002_management_origin } from "./migrations/0002_management_origin.js";
+import { controlplane_0003_connection_principal } from "./migrations/0003_connection_principal.js";
 import { d1ReplayGuard } from "./replay/d1Guard.js";
 import { CONTROL_PLANE_KV_BINDING, controlPlaneKvNamespaces, kvReplayGuard } from "./replay/kvGuard.js";
 //#region src/controlPlane/capability.ts
@@ -52,7 +56,8 @@ function controlplane(options = {}) {
 	const config = ControlPlaneConfig.parse(options);
 	const migrations = {
 		"0001_init": controlplane_0001_init,
-		"0002_management_origin": controlplane_0002_management_origin
+		"0002_management_origin": controlplane_0002_management_origin,
+		"0003_connection_principal": controlplane_0003_connection_principal
 	};
 	const requiredBindings = [{
 		type: "d1",
@@ -83,6 +88,9 @@ function controlplane(options = {}) {
 	});
 	let composed = [];
 	let health = /* @__PURE__ */ new Map();
+	let migrationDatabases = [];
+	let composedCapabilities = [];
+	const privacy = lazyPrivacyInventory(() => composedCapabilities);
 	return {
 		...defineCapability({
 			name: "controlplane",
@@ -98,6 +106,10 @@ function controlplane(options = {}) {
 			} },
 			kvNamespaces: usesKvReplay ? controlPlaneKvNamespaces(config.jtiTtlSeconds) : {},
 			adminRoutes: controlPlaneRouteDescriptors(config.basePath),
+			health: defineCapabilityHealth({
+				keys: MIGRATION_HEALTH_KEYS,
+				read: (c) => readMigrationHealth(c.env, migrationDatabases)
+			}),
 			compose: ({ capabilities }) => {
 				composed = capabilities.map((cap) => ({
 					name: cap.name,
@@ -109,6 +121,8 @@ function controlplane(options = {}) {
 					config: { ...cap.manifestConfig?.values ?? {} }
 				}));
 				health = capabilityHealthSources(capabilities);
+				migrationDatabases = composeMigrationDatabases(capabilities);
+				composedCapabilities = [...capabilities];
 			},
 			middleware: [(app) => {
 				app.use("*", async (c, next) => {
@@ -135,6 +149,9 @@ function controlplane(options = {}) {
 					database,
 					composedCapabilities: () => composed,
 					composedHealth: () => health,
+					composedMigrations: () => migrationDatabases,
+					privacyInventory: privacy,
+					retirement: (env) => readRetirement(env, composedCapabilities),
 					now
 				});
 			}

package/dist/controlPlane/context.d.ts

@@ -24,6 +24,11 @@ export declare const ControlPlaneContext: z.ZodObject<{
     grantedScopes: z.ZodArray<z.ZodString>;
     keyId: z.ZodString;
     tokenId: z.ZodString;
+    actorKind: z.ZodNullable<z.ZodEnum<{
+        agent: "agent";
+        dashboard: "dashboard";
+        script: "script";
+    }>>;
 }, z.core.$strip>;
 export type ControlPlaneContext = z.output<typeof ControlPlaneContext>;
 //# sourceMappingURL=context.d.ts.map

package/dist/controlPlane/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/controlPlane/context.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;iBAyC7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/controlPlane/context.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;iBA4C7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/controlPlane/context.js

@@ -1,6 +1,7 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "./scope/scope.js";
+import { ControlPlaneActorKind } from "./data/connection.js";
 import { z } from "zod";
 //#region src/controlPlane/context.ts
 /**
@@ -25,7 +26,8 @@ const ControlPlaneContext = z.object({
 	scope: ControlPlaneScope.describe("The single scope this token was minted for. One call, one operation — a token carrying the whole grant would make every call as dangerous as the most dangerous one."),
 	grantedScopes: z.array(ControlPlaneScope).describe("Every scope the adopter granted this connection, read from their own row. The authority: a scope absent here is denied however the token is written."),
 	keyId: z.string().describe("Which registered key verified this call. Recorded so a rotation can be traced through the trail, and so a key still in use is visible before it is expired."),
-	tokenId: z.string().describe("The token's `jti`, already claimed in the replay set. Recorded to tie one audit event to one call.")
+	tokenId: z.string().describe("The token's `jti`, already claimed in the replay set. Recorded to tie one audit event to one call."),
+	actorKind: ControlPlaneActorKind.nullable().describe("What kind of client the connection is for — `agent`, `dashboard` or `script` — read from the adopter's own row, never from the token. The gate stamps it onto every control-plane audit row this call writes. Null for a connection registered before the kind was recorded (#721).")
 }).describe("The verified control-plane caller for one request. Never an AuthContext: a management client is not a user of the adopter's app.");
 //#endregion
 export { ControlPlaneContext };

package/dist/controlPlane/data/connection.d.ts

@@ -37,6 +37,46 @@ export declare const RegisteredKey: z.ZodObject<{
     revokedAt: z.ZodNullable<z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodDate]>, z.ZodDate>>;
 }, z.core.$strip>;
 export type RegisteredKey = z.output<typeof RegisteredKey>;
+/**
+ * What kind of client a connection is for (#721): `agent`, `dashboard` or `script`.
+ *
+ * The audit trail's `actorType: "control-plane"` names all three identically, and the questions asked
+ * after an incident are exactly the ones that tell them apart — was it a person at the dashboard, a
+ * script somebody wrote, or an agent running unattended. So the kind is recorded on the connection when
+ * it is registered and stamped from there onto every row its calls write.
+ *
+ * It follows the path, never a guess: the device-code flow is a dashboard, always, and a key the
+ * operator registered themselves is whichever of the other two they say, out loud, with `--kind`.
+ */
+export declare const ControlPlaneActorKind: z.ZodEnum<{
+    agent: "agent";
+    dashboard: "dashboard";
+    script: "script";
+}>;
+export type ControlPlaneActorKind = z.output<typeof ControlPlaneActorKind>;
+/**
+ * Who sanctioned a connection: the email address of the signed-in Cloudflare session that registered it.
+ *
+ * **A plain string, deliberately not a reference.** An adopter's `pithy_auth_users` are their customers,
+ * and the operator who registers a connection is their staff, so a join into the organization model would
+ * be empty for most of them. A string is readable by anybody, and matchable against a directory where the
+ * operator is in one.
+ *
+ * **Derived, never asserted.** No flag supplies it; the CLI reads it from `GET /user` under the session.
+ */
+export declare const ConnectionPrincipal: z.ZodEmail;
+export type ConnectionPrincipal = z.output<typeof ConnectionPrincipal>;
+/** The longest purpose a connection may carry. One line on a review screen, with room to say what it does. */
+export declare const MAX_CONNECTION_PURPOSE = 200;
+/**
+ * What a connection is for, in the words of whoever registered it (#721).
+ *
+ * **Required at registration, and refused when absent**, because a review listing credentials by key id
+ * cannot support the decision it exists for. **Untrusted input**: a customer writes it and something else
+ * renders it, so it is validated on the way in, and again on every read of the row.
+ */
+export declare const ConnectionPurpose: z.ZodString;
+export type ConnectionPurpose = z.output<typeof ConnectionPurpose>;
 /**
  * One management-client connection — the row in `pithy_controlplane_connections`.
  *
@@ -52,18 +92,15 @@ export declare const ControlPlaneConnection: z.ZodObject<{
     workerUrl: z.ZodURL;
     basePath: z.ZodDefault<z.ZodString>;
     managementOrigin: z.ZodDefault<z.ZodNullable<z.ZodURL>>;
-    scopes: z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>, z.ZodArray<z.ZodString>>;
-    keys: z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodObject<{
-        keyId: z.ZodString;
-        publicKey: z.ZodObject<{
-            kty: z.ZodLiteral<"OKP">;
-            crv: z.ZodLiteral<"Ed25519">;
-            x: z.ZodString;
-        }, z.core.$strip>;
-        validFrom: z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodDate]>, z.ZodDate>;
-        validUntil: z.ZodNullable<z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodDate]>, z.ZodDate>>;
-        revokedAt: z.ZodNullable<z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodDate]>, z.ZodDate>>;
-    }, z.core.$strip>>]>, z.ZodArray<z.ZodObject<{
+    authorizedBy: z.ZodDefault<z.ZodNullable<z.ZodEmail>>;
+    actorKind: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+        agent: "agent";
+        dashboard: "dashboard";
+        script: "script";
+    }>>>;
+    purpose: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    scopes: import("../../data/codecs").SqliteJson<z.ZodArray<z.ZodString>>;
+    keys: import("../../data/codecs").SqliteJson<z.ZodArray<z.ZodObject<{
         keyId: z.ZodString;
         publicKey: z.ZodObject<{
             kty: z.ZodLiteral<"OKP">;

package/dist/controlPlane/data/connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/data/connection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB;;;;iBAgBoF,CAAC;AAClH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;iBAoBoF,CAAC;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC7E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/data/connection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB;;;;iBAgBoF,CAAC;AAClH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;iBAoBoF,CAAC;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;;;;EAI/B,CAAC;AACJ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE3E;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,YAK7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,8GAA8G;AAC9G,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAiB1C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAW3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkEhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC7E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}