@pithy-sh/core 0.13.0 → 0.15.0

package/src/cli/commandCatalog.generated.ts

@@ -30,6 +30,11 @@ export const COMMANDS = {
         "required": false,
         "repeatable": true
       },
+      "--floor": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
       "--eject": {
         "type": "boolean",
         "required": false,
@@ -87,6 +92,71 @@ export const COMMANDS = {
       }
     ]
   },
+  "audit lock": {
+    "positionals": [],
+    "flags": {
+      "--env": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
+  "audit verify": {
+    "positionals": [
+      {
+        "name": "file",
+        "required": true,
+        "variadic": false
+      }
+    ],
+    "flags": {
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
+  "backup": {
+    "positionals": [],
+    "flags": {
+      "--env": {
+        "type": "string",
+        "required": false,
+        "repeatable": false,
+        "default": "dev"
+      },
+      "--worker": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--binding": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--output": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
   "cloudflare connect": {
     "positionals": [],
     "flags": {
@@ -296,9 +366,54 @@ export const COMMANDS = {
         "type": "string",
         "required": false,
         "repeatable": false
+      },
+      "--oidc-issuer": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--oidc-claim": {
+        "type": "string",
+        "required": false,
+        "repeatable": true
+      },
+      "--oidc-audience": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
       }
     },
     "groups": [
+      {
+        "kind": "requires",
+        "flag": "--oidc-claim",
+        "needs": [
+          "--oidc-issuer"
+        ],
+        "any": false
+      },
+      {
+        "kind": "requires",
+        "flag": "--oidc-audience",
+        "needs": [
+          "--oidc-issuer"
+        ],
+        "any": false
+      },
+      {
+        "kind": "atMostOne",
+        "flags": [
+          "--oidc-issuer",
+          "--public-key"
+        ]
+      },
+      {
+        "kind": "atMostOne",
+        "flags": [
+          "--oidc-issuer",
+          "--update"
+        ]
+      },
       {
         "kind": "requires",
         "flag": "--public-key",
@@ -327,9 +442,10 @@ export const COMMANDS = {
         "kind": "requires",
         "flag": "--kind",
         "needs": [
-          "--public-key"
+          "--public-key",
+          "--oidc-issuer"
         ],
-        "any": false
+        "any": true
       },
       {
         "kind": "requires",
@@ -344,6 +460,47 @@ export const COMMANDS = {
       }
     ]
   },
+  "dashboard connections": {
+    "positionals": [],
+    "flags": {
+      "--principal": {
+        "type": "string",
+        "required": true,
+        "repeatable": false
+      },
+      "--env": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--worker": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--revoke": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--reason": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--yes": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
   "dashboard disconnect": {
     "positionals": [],
     "flags": {
@@ -428,6 +585,48 @@ export const COMMANDS = {
     },
     "groups": []
   },
+  "dashboard revoke-trust": {
+    "positionals": [],
+    "flags": {
+      "--env": {
+        "type": "string",
+        "required": false,
+        "repeatable": false,
+        "default": "dev"
+      },
+      "--worker": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--origin": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--open": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--trust-id": {
+        "type": "string",
+        "required": true,
+        "repeatable": false
+      },
+      "--yes": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
   "dashboard rotate": {
     "positionals": [],
     "flags": {
@@ -1053,6 +1252,36 @@ export const COMMANDS = {
         "required": false,
         "repeatable": false
       },
+      "--lint": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--react-native": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--app": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--ios-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--android-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--web-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
       "--dir": {
         "type": "string",
         "required": false,
@@ -1067,6 +1296,172 @@ export const COMMANDS = {
     },
     "groups": []
   },
+  "mcp connect": {
+    "positionals": [],
+    "flags": {
+      "--env": {
+        "type": "string",
+        "required": false,
+        "repeatable": false,
+        "default": "dev"
+      },
+      "--worker": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--worker-url": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--purpose": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--scope": {
+        "type": "string",
+        "required": false,
+        "repeatable": true
+      },
+      "--update": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--oidc-issuer": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--oidc-claim": {
+        "type": "string",
+        "required": false,
+        "repeatable": true
+      },
+      "--oidc-audience": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--oidc-token": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--client": {
+        "type": "string",
+        "required": false,
+        "repeatable": false,
+        "enum": [
+          "claude-code",
+          "cursor",
+          "vscode",
+          "gemini",
+          "claude-desktop",
+          "cline",
+          "zed",
+          "codex",
+          "goose",
+          "continue"
+        ]
+      },
+      "--all": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": [
+      {
+        "kind": "atMostOne",
+        "flags": [
+          "--client",
+          "--all"
+        ]
+      },
+      {
+        "kind": "atMostOne",
+        "flags": [
+          "--oidc-issuer",
+          "--update"
+        ]
+      },
+      {
+        "kind": "requires",
+        "flag": "--oidc-claim",
+        "needs": [
+          "--oidc-issuer"
+        ],
+        "any": false
+      },
+      {
+        "kind": "requires",
+        "flag": "--oidc-audience",
+        "needs": [
+          "--oidc-issuer"
+        ],
+        "any": false
+      },
+      {
+        "kind": "requires",
+        "flag": "--oidc-token",
+        "needs": [
+          "--oidc-issuer"
+        ],
+        "any": false
+      }
+    ]
+  },
+  "mcp disconnect": {
+    "positionals": [],
+    "flags": {
+      "--connection": {
+        "type": "string",
+        "required": true,
+        "repeatable": false
+      },
+      "--worker": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
+  "mcp serve": {
+    "positionals": [],
+    "flags": {
+      "--connection": {
+        "type": "string",
+        "required": true,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
+  "mcp status": {
+    "positionals": [],
+    "flags": {
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
   "media deprovision": {
     "positionals": [],
     "flags": {
@@ -1367,6 +1762,49 @@ export const COMMANDS = {
     },
     "groups": []
   },
+  "restore": {
+    "positionals": [
+      {
+        "name": "dir",
+        "required": true,
+        "variadic": false
+      }
+    ],
+    "flags": {
+      "--env": {
+        "type": "string",
+        "required": false,
+        "repeatable": false,
+        "default": "dev"
+      },
+      "--worker": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--binding": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--database": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--group": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--json": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      }
+    },
+    "groups": []
+  },
   "schema": {
     "positionals": [
       {
@@ -2374,6 +2812,26 @@ export const COMMANDS = {
         "required": false,
         "repeatable": false
       },
+      "--app": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--ios-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--android-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--web-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
       "--auth": {
         "type": "boolean",
         "required": false,
@@ -2389,6 +2847,11 @@ export const COMMANDS = {
         "required": false,
         "repeatable": false
       },
+      "--consent": {
+        "type": "boolean",
+        "required": false,
+        "repeatable": false
+      },
       "--dry-run": {
         "type": "boolean",
         "required": false,
@@ -2421,6 +2884,26 @@ export const COMMANDS = {
         "required": false,
         "repeatable": false
       },
+      "--app": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--ios-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--android-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
+      "--web-rail": {
+        "type": "string",
+        "required": false,
+        "repeatable": false
+      },
       "--check": {
         "type": "boolean",
         "required": false,
@@ -2768,11 +3251,13 @@ export const GLOBAL_FLAGS = [
 
 /** The groups, which only list their subcommands: a sentence may name one, and nobody runs one. */
 export const GROUPS = [
+  "audit",
   "cloudflare",
   "dashboard",
   "docs",
   "email",
   "feature",
+  "mcp",
   "media",
   "payments",
   "privacy",

package/src/cli/commandFacts.ts

@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: MIT
 
 /**
- * **What the catalog cannot say about a `pithy` command, written down once (#711).**
+ * **What the catalog cannot say about a `pithy` command, written down once.**
  *
  * `commandCatalog.generated.ts` is the parser's own account of every command: its arguments, its flags, which
  * are required, which have defaults, which go together. Four facts are not in any parser, and each was the
@@ -30,6 +30,7 @@ export const WORKER_SCOPED = [
   "add",
   "dashboard connect",
   "email provision",
+  "mcp connect",
   "media provision",
   "payments provision",
   "storage provision",
@@ -53,15 +54,20 @@ export type WorkerScopedPath = (typeof WORKER_SCOPED)[number];
  * first that answers, and the flag narrows.
  */
 export const WORKER_NARROWS = [
+  "backup",
   "contract",
+  "dashboard connections",
   "dashboard disconnect",
   "dashboard revoke-key",
+  "dashboard revoke-trust",
   "dashboard rotate",
   "dashboard status",
   "doctor",
   "env",
   "init",
+  "mcp disconnect",
   "migrate",
+  "restore",
   "secrets tables",
   "seed",
   "support deprovision",
@@ -100,8 +106,10 @@ export const MEANING_ONLY_WITH = { remove: "--drop", upgrade: "--migrate" } as c
 export const DESTRUCTIVE_COMMANDS = {
   "dashboard disconnect": "the environment's dashboard connection and the key it signs with",
   "dashboard revoke-key": "a signing key the dashboard holds",
+  "dashboard revoke-trust": "an OIDC trust a workload calls under",
   "email deprovision": "the email Workers, and with --suppression the suppression database",
   "feature destroy": "the feature's worktree, its branch and every resource it provisioned",
+  "mcp disconnect": "an agent's key or trust, its key file and its client entries",
   "media deprovision": "the media Worker, and with --storage its bucket",
   remove: "a capability's wiring",
   "secrets deprovision": "the secrets manager, and with --keys the store's keys",
@@ -127,6 +135,7 @@ export const DESTRUCTIVE_FLAGS = {
   "--destroy-retained": "a resource kept for recovery",
   "--drop": "a capability's tables",
   "--redo": "the data a seed wrote",
+  "--revoke": "every key and trust a principal's connections hold",
   "--rollback": "the schema a migration group applied",
 } as const;
 
@@ -197,7 +206,7 @@ export const PRODUCTION_CONFIRMS = {
 export type ProductionPath = keyof typeof PRODUCTION_CONFIRMS;
 
 /**
- * **A command that acts on every environment when its `--env` is left off (#711)**, production among them. `pithy
+ * **A command that acts on every environment when its `--env` is left off**, production among them. `pithy
  * testers provision` with no `--env` provisions every declared environment, so the bare line touches production as
  * surely as `--env prod` does, and is a person's decision for the same reason. Each declares `--env` with no
  * default; `command.test.ts` holds that against the catalog.
@@ -205,7 +214,7 @@ export type ProductionPath = keyof typeof PRODUCTION_CONFIRMS;
 export const EVERY_ENVIRONMENT_WITHOUT_ENV = ["testers provision"] as const satisfies readonly ProductionPath[];
 
 /**
- * **A command that acts on every environment on every run (#711)**, production among them, with no `--env` to narrow
+ * **A command that acts on every environment on every run**, production among them, with no `--env` to narrow
  * it. `pithy secrets provision` deploys each declared environment's manager and mints its store entries, so every line
  * naming it touches production and is a person's decision — never the fix for one binding, one database or one
  * setting. None declares `--env`; `command.test.ts` holds that against the catalog.

package/src/cloudflare-test.d.ts

@@ -7,7 +7,8 @@
 // matching the Miniflare config in `vitest.workers.config.ts`: D1 `DB` and
 // `ANALYTICS` (a second database, to exercise the multi-database registry), KV
 // `SESSIONS`, and KV `CONTROL_PLANE` (the control-plane seam's replay set, which
-// gets its own namespace rather than sharing sessions).
+// gets its own namespace rather than sharing sessions), and the `PRESENCE_ROOMS`
+// Durable Object every presence room lives in.
 // `cloudflare:test` types its `env` as `Cloudflare.Env`, so the test bindings are
 // declared by augmenting that interface.
 declare namespace Cloudflare {
@@ -16,5 +17,6 @@ declare namespace Cloudflare {
     ANALYTICS: D1Database;
     SESSIONS: KVNamespace;
     CONTROL_PLANE: KVNamespace;
+    PRESENCE_ROOMS: DurableObjectNamespace<import("./presence/durableObject").PresenceRoom>;
   }
 }