@pithy-sh/core 0.13.0 → 0.15.0

package/dist/controlPlane/http/responses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/http/responses.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;;;;;;;;;;GAkBG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,aAAa;;;;;;;;;;iBAcmF,CAAC;AAC9G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAQwB,CAAC;AAC9D,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEjF,+FAA+F;AAC/F,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;iBAuBwE,CAAC;AAC9G,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEjF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;iBAQyB,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,gGAAgG;AAChG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;iBAM6B,CAAC;AAC5D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;iBAU+C,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,iFAAiF;AACjF,eAAO,MAAM,0BAA0B;;;;;;;;;4BAyBkE,CAAC;AAC1G,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAErF,kFAAkF;AAClF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAW8C,CAAC;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BA+BwE,CAAC;AAC3G,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAO+D,CAAC;AAC3G,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE7F;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;;;;iBAmCiB,CAAC;AAC/C,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;iBA0BmC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAerC,CAAC;AACJ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/http/responses.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB;;;;;;;;;;;;;;;;;;GAkBG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,aAAa;;;;;;;;;;iBAcmF,CAAC;AAC9G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,SAAS;;;;;;;;;iBAmB8C,CAAC;AACrE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAQwB,CAAC;AAC9D,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEjF,+FAA+F;AAC/F,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BiE,CAAC;AACvG,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEjF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;iBAQyB,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,gGAAgG;AAChG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;iBAM6B,CAAC;AAC5D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;iBAU+C,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,iFAAiF;AACjF,eAAO,MAAM,0BAA0B;;;;;;;;;4BAyBkE,CAAC;AAC1G,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAErF,kFAAkF;AAClF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAW8C,CAAC;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BA+BwE,CAAC;AAC3G,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAO+D,CAAC;AAC3G,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE7F;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;;;;iBAmCiB,CAAC;AAC/C,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;iBA0BmC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAerC,CAAC;AACJ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEvF;;;;GAIG;AACH,eAAO,MAAM,aAAa,mGAEoF,CAAC;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,mFAAmF;AACnF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;iBAYwC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AAEzD,8FAA8F;AAC9F,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoB2F,CAAC;AACtH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqBtC,CAAC;AACJ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEzF,4BAA4B;AAC5B,eAAO,MAAM,YAAY;;;;;EAItB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AAEzD,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;iBAkBzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D,wFAAwF;AACxF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;iBAyB2F,CAAC;AACxH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D,kFAAkF;AAClF,eAAO,MAAM,kBAAkB;;;;;;iBAKoD,CAAC;AACpF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAErE,uCAAuC;AACvC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuD5B,CAAC;AACJ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAErE,+GAA+G;AAC/G,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKiE,CAAC;AACjH,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAErG,yEAAyE;AACzE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;iBAYyD,CAAC;AACzF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAErE,uEAAuE;AACvE,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B3C,CAAC;AACJ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAEnG,qDAAqD;AACrD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;iBAoB4D,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,kCAAkC;AAClC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;iBAKG,CAAC;AAC1C,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEnF,8GAA8G;AAC9G,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;iBAEc,CAAC;AACpD,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEjF,oDAAoD;AACpD,eAAO,MAAM,iBAAiB;;;;;;;EAI3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,wCAAwC;AACxC,eAAO,MAAM,aAAa;;;;;;;;;;;iBAUwE,CAAC;AACnG,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,iDAAiD;AACjD,eAAO,MAAM,yBAAyB;;;;EAInC,CAAC;AAEJ,sCAAsC;AACtC,eAAO,MAAM,uBAAuB;;;;;;;;;iBAOuE,CAAC;AAC5G,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,yEAAyE;AACzE,eAAO,MAAM,qBAAqB;;;;;;;iBA2ByD,CAAC;AAC5F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,kDAAkD;AAClD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;iBAwB+D,CAAC;AACpG,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,kCAAkC;AAClC,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBwC,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;iBAU8D,CAAC;AAC7F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqBxC,CAAC;AACJ,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE5F,+GAA+G;AAC/G,eAAO,MAAM,mBAAmB;;;;;iBAS+C,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,+FAA+F;AAC/F,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB0F,CAAC;AACtH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D,wCAAwC;AACxC,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWoE,CAAC;AACjH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE/F,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAUyC,CAAC;AAC/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/controlPlane/http/responses.js

@@ -1,8 +1,10 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
+import { BASIS_SOURCES, LegalBasis, PROCESSING_GAP_KINDS, RECIPIENT_SOURCES } from "../../processing/vocabulary.js";
 import { PRIVACY_SOURCES } from "../../privacy/report.js";
-import { ConnectionPrincipal, ConnectionPurpose, ControlPlaneActorKind, Ed25519PublicJwk } from "../data/connection.js";
+import { ConnectionCredentialKind, ConnectionPrincipal, ConnectionPurpose, ControlPlaneActorKind, Ed25519PublicJwk } from "../data/connection.js";
 import { PrivacyPosture } from "../../privacy/posture.js";
+import { EvidenceControlId, EvidenceSource, EvidenceState } from "../evidence/mapping.js";
 import { z } from "zod";
 //#region src/controlPlane/http/responses.ts
 /**
@@ -33,6 +35,23 @@ const PublicKeyView = z.object({
 	revokedAt: z.iso.datetime().nullable().describe("When it was revoked outright, ISO-8601, or null. Revocation ignores the window and is immediate.")
 }).describe("One registered public key and its validity window. Two live at once during a rotation overlap.");
 /**
+* One OIDC trust as `GET {basePath}/keys` lists it: who it admits, beside who sanctioned it.
+*
+* **The subject constraint is on the face of the listing**, because it *is* the population: a trust pinned to a
+* workflow is usable by anyone who can run that workflow, and the claims are the only place that is written down.
+* Nothing here is secret — an issuer, an audience and claim values are all public facts about a workload.
+*/
+const TrustView = z.object({
+	trustId: z.string().describe("The trust's id, as a call names it on `pithy-control-plane-trust`."),
+	issuer: z.string().describe("The `iss` the trust accepts."),
+	audience: z.string().describe("The `aud` a token must name."),
+	claims: z.record(z.string().describe("A claim name."), z.string().describe("The value that claim must have.")).describe("The subject constraint: every named claim must equal its value. This is who may use the trust."),
+	authorizedBy: z.string().describe("Who sanctioned the trust — never who may use it."),
+	validFrom: z.iso.datetime().describe("When the trust was registered, ISO-8601."),
+	revokedAt: z.iso.datetime().nullable().describe("When it was revoked, ISO-8601, or null. A token already minted stays usable until it expires."),
+	firstCallAt: z.iso.datetime().nullable().describe("When a call first verified under it, ISO-8601, or null while it is awaiting a first call.")
+}).describe("One OIDC trust: who it admits, and who sanctioned it.");
+/**
 * `GET /control-plane/ping`.
 *
 * It echoes the `keyId` that verified the call, so a client rotating a key can confirm *which* key
@@ -52,8 +71,9 @@ const ControlPlaneKeysResponse = z.object({
 	keys: z.array(PublicKeyView).describe("Every registered key, expired and revoked ones included."),
 	authorizedBy: ConnectionPrincipal.nullable().optional().describe("Who sanctioned this connection — the signed-in session's email at registration. Null for a connection registered before principals were recorded; absent from a Worker older than the field."),
 	actorKind: ControlPlaneActorKind.nullable().optional().describe("What kind of client this connection is for: `agent`, `dashboard` or `script`. Null for a connection registered before it was recorded; absent from an older Worker."),
-	purpose: ConnectionPurpose.nullable().optional().describe("What the client is for, in the registering operator's words. Untrusted text: render it escaped. Null for a connection registered before it was recorded; absent from an older Worker.")
-}).describe("Every key registered against this connection, with its window, and who authorized it for what.");
+	purpose: ConnectionPurpose.nullable().optional().describe("What the client is for, in the registering operator's words. Untrusted text: render it escaped. Null for a connection registered before it was recorded; absent from an older Worker."),
+	trusts: z.array(TrustView).optional().describe("Every OIDC trust on this connection, revoked ones included. Absent from a Worker older than trusts.")
+}).describe("Every key and trust registered against this connection, and who authorized it for what.");
 /** `POST /control-plane/keys` — the appended key, and the set as it now stands. */
 const RegisterKeyResponse = z.object({
 	keyId: z.string().describe("The key just registered."),
@@ -121,9 +141,9 @@ const ControlPlaneMigrationsResponse = z.object({
 	databases: z.array(MigrationDatabaseView).describe("One entry per database this Worker binds, sorted by database name. One unreadable costs only itself.")
 }).describe("What is applied, pending and undeclared in each bound database, and which run put it there.");
 /**
-* One marked field, as `GET {basePath}/privacy` reports it (#132).
+* One marked field, as `GET {basePath}/privacy` reports it.
 *
-* **The per-field record.** Since #390 it says whether the field rests encrypted beside `class`, so "which of
+* **The per-field record.** It says whether the field rests encrypted beside `class`, so "which of
 * your PHI fields are encrypted" is a derivation over this list rather than a second inventory to keep.
 */
 const PrivacyFieldView = z.object({
@@ -147,7 +167,7 @@ const PrivacySchemaView = z.object({
 	}).describe("One encrypted field.")).optional().describe("Every field marked encrypted at rest, classed or not (#390). Absent on a Worker whose core predates encrypted fields.")
 }).describe("One storage schema and the marked fields it holds.");
 /**
-* `GET /control-plane/privacy` — the full inventory, behind `privacy:read` (#132).
+* `GET /control-plane/privacy` — the full inventory, behind `privacy:read`.
 *
 * Derived at runtime from the schemas this Worker composed, walked once per isolate. The manifest's `privacy`
 * block is the headline; this is the detail, and it names fields, which is why it has a scope of its own.
@@ -158,5 +178,261 @@ const ControlPlanePrivacyResponse = z.object({
 	schemasWalked: z.number().int().nonnegative().describe("How many storage schemas were walked, marked or not, across the sources `posture.sources` names."),
 	schemas: z.array(PrivacySchemaView).describe("Every schema holding a marked field, in composition order. A schema with none is not listed.")
 }).describe("Every schema this Worker stores that holds a marked field, each field's path and class, and where it lives.");
+/**
+* One value a fact carries: a scalar, a list of names, or null where the record holds nothing.
+*
+* Scalars and string lists only, so a fact can never carry a row, a secret, or a key: it names and counts.
+*/
+const EvidenceValue = z.union([
+	z.string(),
+	z.number(),
+	z.boolean(),
+	z.null(),
+	z.array(z.string().describe("One name."))
+]).describe("A fact's value: a word, a number, a flag, a list of names, or null where the record holds none.");
+/** One fact the Worker read for a control, and the declaration it read it from. */
+const EvidenceFact = z.object({
+	fact: z.string().describe("What the fact is, as one camelCase name: `auditRecorder`, `liveKeys`, `pending`."),
+	subject: z.string().optional().describe("What the fact is about where a control reads several of one thing: a connection id, a database name, a capability, a class, a strategy. Absent where the fact is about the Worker as a whole."),
+	value: EvidenceValue.describe("What the Worker read."),
+	source: EvidenceSource.describe("The declaration or record it was read from.")
+}).describe("One fact behind a control, and where it came from.");
+/** One control in the pack: its references, the facts read, and what the Worker could say. */
+const EvidenceEntry = z.object({
+	control: EvidenceControlId,
+	title: z.string().describe("The control in one line, as the mapping table names it."),
+	soc2: z.array(z.string().describe("One criterion, such as `CC6.1`.")).describe("The AICPA Trust Services Criteria this control answers."),
+	iso27001: z.array(z.string().describe("One Annex A control, such as `A.8.15`.")).describe("The ISO/IEC 27001:2022 Annex A controls this control answers."),
+	state: EvidenceState,
+	reasons: z.array(z.string().describe("One sentence.")).describe("For `gap`, what is missing. For `not-derivable`, why the Worker cannot say. Empty when `evidenced`. Where both kinds apply, the gaps come first."),
+	facts: z.array(EvidenceFact).describe("Every fact read for this control, each naming its source. Read from declarations, never typed in.")
+}).describe("One control: what it answers, what the Worker read, and what it could say. Evidence, never a judgment.");
+/**
+* `GET /control-plane/evidence` — the evidence pack, behind `evidence:read`.
+*
+* Computed in the Worker because the Worker is the deployed build: every fact is read from what this build
+* composes and records. It proves controls present and performs nothing.
+*/
+const ControlPlaneEvidenceResponse = z.object({
+	environment: z.string().describe("The environment this Worker answers for."),
+	generatedAt: z.iso.datetime().describe("When this Worker read the facts, ISO-8601."),
+	version: z.string().nullable().describe("The Cloudflare version id of the build that answered, or null where the binding is absent."),
+	mappingVersion: z.number().int().positive().describe("The version of the kit's mapping table these entries follow. A control, a reference or a rule moving is a new version."),
+	controls: z.array(EvidenceEntry).describe("One entry per control in the mapping table, in its order. Evidence for an auditor to weigh.")
+}).describe("SOC 2 and ISO 27001 evidence this Worker derives from its own declarations. Each control names its facts, their sources and what could be said. An auditor decides the rest.");
+/** Where a purge stands. */
+const ErasureState = z.enum([
+	"scheduled",
+	"in_progress",
+	"complete",
+	"failed"
+]).describe("Where the purge stands: `scheduled`, deleted with its window still open and nothing erased yet; `in_progress`, due and not yet finished; `complete`, every step ran and the `purged` record is written; `failed`, the purge gave up at the step it names, until the next daily pass starts it again.");
+/** One recorded audit event, cited by id and chain position. Never its personal values. */
+const ErasureCitation = z.object({
+	eventId: z.string().describe("The audit event's stable public id."),
+	action: z.string().describe("Its `domain/reason` action."),
+	occurredAt: z.iso.datetime().describe("When it was recorded, ISO-8601."),
+	tenant: z.string().nullable().describe("The tenant whose chain holds it, or null for the untenanted chain. `pithy audit verify` walks it."),
+	seq: z.number().int().nullable().describe("Its 1-based position in that chain, or null for an event recorded before the chain began."),
+	hash: z.string().nullable().describe("Its chain hash, or null for an event recorded before the chain began.")
+}).describe("One audit event the attestation rests on, by id and chain position. The chain (#822) is what makes it tamper-evident; nothing here is signed.");
+/** One purge step: whose rows, what happened to them, and the event that records it. */
+const ErasureStepView = z.object({
+	capability: z.string().describe("The capability whose rows this step answered for."),
+	disposition: z.enum(["erased", "retained"]).describe("`erased`, the rows were deleted or anonymized; `retained`, the capability kept them under the reason it stated (#814). A retained step never reads as erased."),
+	reason: z.string().nullable().describe("For a retained step, the basis the capability stated, written for the person. Null for an erased step."),
+	summary: z.string().nullable().describe("For an erased step, what the capability says it erases. Null for a retained step, and when none was given."),
+	completedAt: z.iso.datetime().describe("When the step finished, ISO-8601."),
+	audit: ErasureCitation.nullable().describe("The audit event that records this step, or null when the trail holds none: no audit composed, or a step run before #823.")
+}).describe("One step of a purge: one capability's rows, erased or kept with a reason, and the event that records it.");
+/** The subject an attestation is about: its kind and its id, and nothing else. */
+const ErasureSubjectView = z.object({
+	type: z.enum(["user", "organization"]).describe("The kind of subject."),
+	id: z.string().describe("Its id, the one value the trail keeps about it.")
+}).describe("Who was erased: the kind of subject and its id. No address, no name.");
+/** One subject's erasure, attested. */
+const ErasureAttestation = z.object({
+	subject: ErasureSubjectView,
+	deletion: z.object({
+		at: z.iso.datetime().describe("When the subject was deleted, ISO-8601."),
+		actorType: z.string().describe("Who deleted it: `control-plane` (a management client), `user` (the account's own holder) or `system`."),
+		reason: z.string().nullable().describe("Why, in the words of whoever deleted it. Null when nobody had to say."),
+		mode: z.enum(["soft", "hard"]).nullable().describe("`soft`, with a window to restore it; `hard`, with none — a soft deletion brought forward reads as `hard`. Null for a deletion recorded before #823."),
+		purgeAfter: z.iso.datetime().nullable().describe("When the purge came due, ISO-8601. Null for a deletion recorded before #823."),
+		audit: ErasureCitation.nullable().describe("The audit event that records the deletion, or null when the trail holds none.")
+	}).describe("The deletion the purge erases under."),
+	state: ErasureState,
+	overdue: z.boolean().describe("True when the purge came due more than two days ago and has not completed: a daily pass was missed."),
+	stoppedAt: z.string().nullable().describe("For a failed purge, the step it gave up at. For an overdue one, the last step it finished, or `due` when none has run. Null otherwise."),
+	steps: z.array(ErasureStepView).describe("Every step that has run, in the order it first ran. A step run again on a later pass is shown once, as it last finished."),
+	completedAt: z.iso.datetime().nullable().describe("When the purge finished, ISO-8601. Null until it has."),
+	completion: ErasureCitation.nullable().describe("The audit event that records the purge finishing, or null until it has, or when the trail holds none."),
+	failure: ErasureCitation.nullable().describe("The audit event that records the purge giving up, or null."),
+	trail: z.enum(["recorded", "absent"]).describe("`recorded` when an audit capability is composed and its events are cited; `absent` when none is, so nothing here is cited and the lifecycle rows are the only record.")
+}).describe("Proof that one subject's erasure happened: the deletion, every step with its disposition, the state, and the audit events that record each one.");
+/** `GET /control-plane/erasure/:subjectType/:subjectId` — one subject's attestation, behind `erasure:read`. */
+const ControlPlaneErasureSubjectResponse = z.object({
+	generatedAt: z.iso.datetime().describe("When this Worker read the records, ISO-8601."),
+	attestation: ErasureAttestation
+}).describe("One subject's erasure attestation, read from the purge's own record and cited in the audit chain.");
+/** One purge in a period: who, where it stands, and where it stopped. */
+const ErasurePeriodEntry = z.object({
+	subject: ErasureSubjectView,
+	state: ErasureState,
+	overdue: z.boolean().describe("True when it came due more than two days ago and has not completed."),
+	purgeAfter: z.iso.datetime().nullable().describe("When it came due, or null for a deletion recorded before #823."),
+	completedAt: z.iso.datetime().nullable().describe("When it finished, or null until it has."),
+	stoppedAt: z.string().nullable().describe("For a failed or overdue purge, the step it stopped at — `due` when none has run. Null otherwise.")
+}).describe("One purge in the period, summarized. Its full record is the subject read.");
+/** `GET /control-plane/erasure` — every purge in a period, counted. */
+const ControlPlaneErasurePeriodResponse = z.object({
+	generatedAt: z.iso.datetime().describe("When this Worker read the records, ISO-8601."),
+	since: z.iso.datetime().describe("The window's inclusive start, ISO-8601."),
+	until: z.iso.datetime().describe("The window's inclusive end, ISO-8601."),
+	subjects: z.array(z.enum(["user", "organization"]).describe("One kind of subject.")).describe("The kinds of subject this Worker records purges for. A kind not listed was not read, because nothing composed records it."),
+	counts: z.object({
+		scheduled: z.number().int().describe("Deleted, with the window still open."),
+		inProgress: z.number().int().describe("Due, and not yet finished."),
+		complete: z.number().int().describe("Finished."),
+		failed: z.number().int().describe("Gave up, until the next pass."),
+		overdue: z.number().int().describe("Not finished more than two days after coming due. Counted within the states above.")
+	}).describe("How many purges in the window stand where."),
+	attention: z.array(ErasurePeriodEntry).describe("Every failed or overdue purge in the window, each with the step it stopped at."),
+	purges: z.array(ErasurePeriodEntry).describe("Every purge in the window, oldest due first.")
+}).describe("Every purge in a period: counts of complete, in-progress and failed, and each failed or overdue one named with the step it stopped at.");
+/** One legal hold, as the holds routes answer it. */
+const LegalHoldView = z.object({
+	id: z.string().describe("The hold's id. Name it to release the hold."),
+	subjectType: z.enum([
+		"user",
+		"organization",
+		"audit"
+	]).describe("What the hold preserves: a user, an organization, or a tenant's audit trail."),
+	subjectId: z.string().nullable().describe("The held user's or organization's id, or the tenant whose trail is held. Null for the untenanted trail."),
+	reason: z.string().describe("Why it was placed."),
+	placedBy: z.string().describe("The management client's user id that placed it."),
+	placedAt: z.iso.datetime().describe("When it was placed, ISO-8601."),
+	state: z.enum(["active", "released"]).describe("`active` while it stands; `released` once lifted."),
+	releasedAt: z.iso.datetime().nullable().describe("When it was released, ISO-8601, or null while it stands."),
+	releasedBy: z.string().nullable().describe("Who released it, or null while it stands."),
+	releaseReason: z.string().nullable().describe("Why it was released, or null while it stands.")
+}).describe("A legal hold on one user, one organization or one tenant's audit trail.");
+/** `GET /control-plane/holds`. */
+const ControlPlaneHoldsResponse = z.object({
+	active: z.number().int().nonnegative().describe("How many holds stand, whatever the listing was narrowed to."),
+	holds: z.array(LegalHoldView).describe("The holds, standing first, newest first within each.")
+}).describe("This Worker's legal holds.");
+/** `POST /control-plane/holds` and `POST /control-plane/holds/:holdId/release`: the hold as it now stands. */
+const ControlPlaneHoldResponse = z.object({ hold: LegalHoldView }).describe("One legal hold, as the call left it.");
+/** What kind of gap the processing record names. */
+const ProcessingGapKind = z.enum(PROCESSING_GAP_KINDS).describe("What is missing: `no-legal-basis` (an activity states none), `no-consent-purpose` (a consent basis names no purpose the catalog holds), `class-not-stored` (an activity claims a class nothing stores), `class-unclaimed` (a capability stores a class no activity claims), `phi-not-covered` (a stored `phi` field no consent purpose covers), or `no-standing-grant` (a purpose covering a class holds no standing grant).");
+/** One gap in the processing record. */
+const ProcessingGap = z.object({
+	kind: ProcessingGapKind,
+	subject: z.string().describe("What the gap is about: an activity id, a capability name, a consent purpose id, or a stored field as `<capability>/<table>.<path>`. A stored field is named only to a connection that also holds `privacy:read`; without it, the gap names the capability."),
+	detail: z.string().describe("What is missing, in one sentence.")
+}).describe("Something the record needs and the Worker does not declare. Named, never filled in.");
+/** Where a recipient in the record came from. */
+const ProcessingRecipientSource = z.enum(RECIPIENT_SOURCES).describe("Where the recipient came from: `platform`, Cloudflare, which runs every Worker; `binding`, a binding this Worker has, such as Workers AI; `declared`, an activity's own declaration, built from the resolved config.");
+/** One recipient of personal data. */
+const ProcessingRecipientView = z.object({
+	name: z.string().describe("Who receives the data."),
+	receives: z.string().describe("What they receive."),
+	classes: z.array(z.string()).describe("The data classes in what they receive."),
+	source: ProcessingRecipientSource
+}).describe("One recipient: who, what it receives, the classes in it, and where the record learned of it.");
+/** A consent-based activity's purpose, with where its subjects stand. */
+const ProcessingConsentView = z.object({
+	purpose: z.string().describe("The consent purpose id the activity rests on."),
+	noticeVersion: z.number().int().nullable().describe("The purpose's current notice version. Null when no composed catalog declares the purpose."),
+	explicit: z.boolean().nullable().describe("Whether the purpose needs explicit consent. Null when undeclared."),
+	grants: z.number().int().nullable().describe("Subjects whose latest choice is a grant. Null when the consent record could not be read."),
+	withdrawals: z.number().int().nullable().describe("Subjects whose latest choice is a withdrawal. Null when the consent record could not be read."),
+	standing: z.number().int().nullable().describe("Subjects whose grant stands now: current notice, at the minimum method, unexpired. Null when the consent record could not be read.")
+}).describe("The consent purpose a consent-based activity rests on, and its grant counts.");
+/** How long the data an activity uses is kept. */
+const ProcessingRetentionView = z.object({
+	classAges: z.array(z.object({
+		class: z.string().describe("The privacy class."),
+		days: z.number().int().describe("The longest an account holding it may sit inactive, in days.")
+	}).describe("One class age.")).describe("The retention block's class ages for the classes this activity uses, strictest first."),
+	purgeWindows: z.array(z.object({
+		subject: z.enum(["user", "organization"]).describe("Whose deletion the window governs."),
+		days: z.number().int().describe("How many days a deletion stays restorable before its purge."),
+		source: z.enum([
+			"policy",
+			"capability",
+			"floor"
+		]).describe("Where the value came from.")
+	}).describe("One soft-delete window.")).describe("Every soft-delete window the Worker runs, as it takes effect.")
+}).describe("The effective retention behind an activity: its classes' ages and the purge windows.");
+/** One activity in the record. */
+const ProcessingEntry = z.object({
+	id: z.string().describe("The activity id, `<domain>.<name>`."),
+	purpose: z.string().describe("Why the data is processed."),
+	declaredBy: z.string().describe("The capability that declared it, or `config` for the adopter's own."),
+	classes: z.array(z.string()).describe("The data classes it uses."),
+	legalBasis: LegalBasis.nullable().describe("Its legal basis, or null: a gap the record names."),
+	basisSource: z.enum(BASIS_SOURCES).nullable().describe("Where the basis came from: the declaring `capability`, or the `config` block. Null with no basis."),
+	consent: ProcessingConsentView.nullable().describe("For a consent basis, its purpose and grant counts. Else null."),
+	recipients: z.array(ProcessingRecipientView).describe("Who receives its data: Cloudflare always, then any binding or declared recipient."),
+	retention: ProcessingRetentionView.nullable().describe("How long its data is kept, from the Worker's resolved retention. Null when the Worker recorded none."),
+	measures: z.array(EvidenceControlId).describe("The evidence pack's controls that protect this activity's data, by id. `measures` states each."),
+	gaps: z.array(ProcessingGap).describe("What this activity is missing. Empty when nothing is.")
+}).describe("One processing activity, as GDPR Article 30 lists it.");
+/** One security measure, as the evidence pack names it. */
+const ProcessingMeasure = z.object({
+	control: EvidenceControlId,
+	title: z.string().describe("What the control is."),
+	soc2: z.array(z.string()).describe("Its SOC 2 Trust Services Criteria references."),
+	iso27001: z.array(z.string()).describe("Its ISO/IEC 27001:2022 Annex A references."),
+	state: EvidenceState.nullable().describe("What the evidence pack says of it now. Null when the connection does not hold `evidence:read`.")
+}).describe("A technical or organizational security measure, cited from the evidence pack.");
+/**
+* `GET /control-plane/processing` — the record of processing activities, behind `processing:read`. It describes
+* the processing and changes none of it.
+*/
+const ControlPlaneProcessingResponse = z.object({
+	environment: z.string().describe("The environment this Worker serves."),
+	generatedAt: z.iso.datetime().describe("When the record was derived, ISO-8601."),
+	version: z.string().nullable().describe("The Cloudflare version id of the build answering, or null."),
+	activities: z.array(ProcessingEntry).describe("Every activity: each capability's, in composition order, then the adopter's."),
+	recipients: z.array(ProcessingRecipientView).describe("Every recipient across the record, once each: Cloudflare first, then by binding, then declared."),
+	measures: z.array(ProcessingMeasure).describe("Every security measure the activities cite."),
+	gaps: z.array(ProcessingGap).describe("Gaps about no single activity: unclaimed classes, uncovered `phi`, purposes with no standing grant."),
+	notDerivable: z.array(z.string()).describe("What the record could not read, and why. Empty when it read everything it needs.")
+}).describe("The GDPR Article 30 record this Worker derives: each activity's purpose, data classes, legal basis, recipients, retention and measures, and every gap named.");
+/** One trust's subject constraint, as a connection listing shows it: the population that may use the trust. */
+const ConnectionTrustView = z.object({
+	trustId: z.string().describe("The trust's id."),
+	issuer: z.string().describe("The `iss` the trust accepts."),
+	claims: z.record(z.string().describe("A claim name."), z.string().describe("The value that claim must have.")).describe("The subject constraint: every named claim must equal its value. This is who may use the trust."),
+	revokedAt: z.iso.datetime().nullable().describe("When the trust was revoked, ISO-8601, or null while it stands.")
+}).describe("One OIDC trust's subject constraint, on the face of the listing.");
+/** One connection, as `GET {basePath}/connections` lists it. No key material and no secret. */
+const ConnectionView = z.object({
+	id: z.string().describe("The connection's id. Name it to revoke the connection."),
+	environment: z.string().describe("The environment the connection is bound to."),
+	actorKind: ControlPlaneActorKind.nullable().describe("What kind of client the connection is for: `agent`, `dashboard` or `script`. Null for one registered before it was recorded."),
+	purpose: ConnectionPurpose.nullable().describe("What the client is for, in the registering operator's words. Untrusted text: render it escaped. Null for one registered before it was recorded."),
+	authorizedBy: ConnectionPrincipal.nullable().describe("The email of the person who sanctioned the connection. Null for one registered before principals were recorded."),
+	credentialKind: ConnectionCredentialKind,
+	scopes: z.array(z.string()).describe("The scopes the connection was granted."),
+	trusts: z.array(ConnectionTrustView).describe("Every OIDC trust on the connection, revoked ones included."),
+	live: z.boolean().describe("Whether any key or trust on the connection can verify a call now."),
+	registeredAt: z.iso.datetime().describe("When the connection was registered, ISO-8601."),
+	revokedAt: z.iso.datetime().nullable().describe("When the connection was revoked, ISO-8601: the latest revocation once every credential was revoked. Null while anything is live, and for one whose keys merely expired.")
+}).describe("One connection: who authorized it, for what, with which credentials and grant, and whether it is live.");
+/** `GET /control-plane/connections`. */
+const ControlPlaneConnectionsResponse = z.object({
+	connections: z.array(ConnectionView).describe("Every connection with a recorded principal, matching the filter when one was given, oldest first."),
+	unattributed: z.array(ConnectionView).describe("Every connection registered before principals were recorded, oldest first. Listed apart for a person to read; never matched by a principal.")
+}).describe("Every connection bound to this Worker's environment, attributed ones and unattributed ones apart.");
+/** `POST /control-plane/connections/:connectionId/revoke`. */
+const RevokeConnectionResponse = z.object({
+	connection: ConnectionView.describe("The connection as it now stands."),
+	revokedKeyIds: z.array(z.string()).describe("The keys this call revoked. Empty when every key was already revoked."),
+	revokedTrustIds: z.array(z.string()).describe("The trusts this call revoked. Empty when every trust was already revoked.")
+}).describe("A revoked connection, and the credentials the revocation ended.");
 //#endregion
-export { ControlPlaneKeysResponse, ControlPlaneMigrationsResponse, ControlPlanePingResponse, ControlPlanePrivacyResponse, ExpireKeyResponse, MigrationDatabaseView, MigrationGroupPositionView, MigrationGroupView, MigrationView, PrivacyFieldView, PrivacySchemaView, PublicKeyView, RegisterKeyResponse };
+export { ConnectionTrustView, ConnectionView, ControlPlaneConnectionsResponse, ControlPlaneErasurePeriodResponse, ControlPlaneErasureSubjectResponse, ControlPlaneEvidenceResponse, ControlPlaneHoldResponse, ControlPlaneHoldsResponse, ControlPlaneKeysResponse, ControlPlaneMigrationsResponse, ControlPlanePingResponse, ControlPlanePrivacyResponse, ControlPlaneProcessingResponse, ErasureAttestation, ErasureCitation, ErasurePeriodEntry, ErasureState, ErasureStepView, ErasureSubjectView, EvidenceEntry, EvidenceFact, EvidenceValue, ExpireKeyResponse, LegalHoldView, MigrationDatabaseView, MigrationGroupPositionView, MigrationGroupView, MigrationView, PrivacyFieldView, PrivacySchemaView, ProcessingConsentView, ProcessingEntry, ProcessingGap, ProcessingGapKind, ProcessingMeasure, ProcessingRecipientSource, ProcessingRecipientView, ProcessingRetentionView, PublicKeyView, RegisterKeyResponse, RevokeConnectionResponse, TrustView };

package/dist/controlPlane/http/routes.d.ts

@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: MIT
 import type { Hono } from "hono";
 import type { PithyHonoEnv } from "../../capability/capability";
-import { type AdminRoute } from "../discovery/adminRoute";
+import { type AdminRouteDeclaration } from "../discovery/adminRoute";
 import { type ControlPlaneHandlerDeps } from "./handlers";
 /**
  * The seam's own routes, distinct from the admin routes capabilities contribute.
@@ -12,8 +12,18 @@ import { type ControlPlaneHandlerDeps } from "./handlers";
  *   GET  /control-plane/keys                  → the registration state       (keys:rotate)
  *   POST /control-plane/keys                  → register a key               (keys:rotate)
  *   POST /control-plane/keys/:keyId/expire    → retire a superseded key      (keys:rotate)
+ *   GET  /control-plane/connections           → every connection, by principal (connections:read)
+ *   POST /control-plane/connections/:id/revoke → revoke another connection    (connections:revoke)
  *   GET  /control-plane/migrations            → where each database stands   (migrations:read)
  *   GET  /control-plane/privacy               → what each schema holds        (privacy:read)
+ *   GET  /control-plane/evidence              → SOC 2 and ISO 27001 evidence  (evidence:read)
+ *   GET  /control-plane/processing            → the Article 30 record         (processing:read)
+ *   GET  /control-plane/erasure               → every purge in a period       (erasure:read)
+ *   GET  /control-plane/erasure/:type/:id     → one subject's purge, attested (erasure:read)
+ *   GET  /control-plane/holds                 → every legal hold              (retention:read)
+ *   POST /control-plane/holds                 → place a legal hold            (retention:hold)
+ *   POST /control-plane/holds/:id/release     → release one, with a reason    (retention:hold)
+ *   POST /control-plane/presence/tickets      → a ticket into a presence room (the room kind's scope)
  *
  * Every one is `control-plane` and default-denied — with no connection registered they all answer 403,
  * and that is the shipped state of a Worker nobody has connected.
@@ -39,6 +49,6 @@ import { type ControlPlaneHandlerDeps } from "./handlers";
  * `ping` carries a null scope. It requires a verified caller and no authorization, and saying so is
  * how a client knows it can always prove a key — including on a connection granted nothing at all.
  */
-export declare function controlPlaneRouteDescriptors(basePath: string): AdminRoute[];
+export declare function controlPlaneRouteDescriptors(basePath: string): AdminRouteDeclaration[];
 export declare function registerControlPlaneRoutes(app: Hono<PithyHonoEnv>, basePath: string, deps: ControlPlaneHandlerDeps): void;
 //# sourceMappingURL=routes.d.ts.map

package/dist/controlPlane/http/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/http/routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,OAAO,EAAE,KAAK,UAAU,EAAwB,MAAM,yBAAyB,CAAC;AAShF,OAAO,EACL,KAAK,uBAAuB,EAQ7B,MAAM,YAAY,CAAC;AAWpB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CA+C3E;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,EACvB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,uBAAuB,GAC5B,IAAI,CA2FN"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/http/routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAKhE,OAAO,EAAE,KAAK,qBAAqB,EAAwB,MAAM,yBAAyB,CAAC;AAiB3F,OAAO,EACL,KAAK,uBAAuB,EAW7B,MAAM,YAAY,CAAC;AAmCpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CAsJtF;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,EACvB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,uBAAuB,GAC5B,IAAI,CAgPN"}