@pithy-sh/core 0.9.0 → 0.11.0

package/dist/naming/feature.js

@@ -9,9 +9,24 @@ import { assertValidProjectName, kebab } from "./resource.js";
 const FEATURE_RESOURCE_KINDS = [
 	"d1",
 	"kv",
-	"r2"
+	"r2",
+	"queue"
 ];
 /**
+* **The segment each kind ends a feature resource's name with — never more than `MAX_FEATURE_KIND` (#662).**
+*
+* `d1`, `kv` and `r2` spell themselves. A queue is `q`, and that is load-bearing: `MAX_FEATURE_KIND` is a term in
+* `FEATURE_DERIVED_PROJECT_NAME`, so spelling it `queue` would take the project budget from 26 to 23 — and a
+* project name is stable forever once anything is provisioned, so a smaller budget orphans every resource of a
+* project already named against the old one. `feature.test.ts` fails on a segment longer than the budget.
+*/
+const FEATURE_KIND_SEGMENT = {
+	d1: "d1",
+	kv: "kv",
+	r2: "r2",
+	queue: "q"
+};
+/**
 * Refuse an issue number the budgets were not derived against.
 *
 * `MAX_ISSUE_DIGITS` is a term in {@link FEATURE_DERIVED_PROJECT_NAME}, so an eight-digit issue would
@@ -193,14 +208,15 @@ function assertFeatureSlugFits(identity, shapes) {
 	});
 }
 /**
-* The full Cloudflare resource name for a feature's binding — `<project>-f<issue>-<slug>--<binding>-<kind>`.
+* The full Cloudflare resource name for a feature's binding — `<project>-f<issue>-<slug>--<binding>-<kind>`, the
+* kind spelled by {@link FEATURE_KIND_SEGMENT}.
 *
-* Held to **R2's 63**, the strictest of the three kinds a feature provisions, so one shape is legal for
-* all of them: lowercase, hyphenated, alphanumeric at both ends. A D1 or KV name could be longer, but a
+* Held to **R2's 63**, the strictest of the kinds a feature provisions and a queue's number too, so one shape is
+* legal for all of them: lowercase, hyphenated, alphanumeric at both ends. A D1 or KV name could be longer, but a
 * feature that provisions a bucket and a database wants them recognizably the same name.
 */
 function featureResourceName(identity, binding, kind) {
-	return composeFeatureName(identity, kebab(identity.slug), kebab(binding), `-${kind}`, NAMESPACE_LIMITS.r2.maxLength, NAMESPACE_LIMITS.r2.label);
+	return composeFeatureName(identity, kebab(identity.slug), kebab(binding), `-${FEATURE_KIND_SEGMENT[kind]}`, NAMESPACE_LIMITS.r2.maxLength, NAMESPACE_LIMITS.r2.label);
 }
 /**
 * The CF Secrets Store entry name holding one of a feature's **environment-scoped** secrets —
@@ -241,6 +257,20 @@ function featureSecretEntryName(identity, secret) {
 function featureWorkerName(identity, app) {
 	return composeFeatureName(identity, kebab(identity.slug), kebab(app), "", NAMESPACE_LIMITS.worker.maxLength, NAMESPACE_LIMITS.worker.label);
 }
+/** The `<thing>` a feature's Artifacts namespace ends with, after {@link FEATURE_TAIL_SEPARATOR} (#673). */
+const FEATURE_ARTIFACTS_THING = "artifacts";
+/**
+* A feature's **Artifacts namespace** — `<project>-f<issue>-<slug>--artifacts` (#673).
+*
+* A declared environment's namespace is `<project>-<env>` and has no `<thing>`. A feature's needs one, because the
+* separator and what follows it are what make a name a feature name: {@link isFeatureOwnedName} reads this one back
+* as this feature's, so `pithy feature destroy` reaps the repos of exactly this branch and of no sibling. Held to the
+* namespace's 63, the same number the rest of a feature's names are derived against, and `artifacts` is shorter than
+* the shortest binding tail, so it moves no slug budget.
+*/
+function featureArtifactsNamespace(identity) {
+	return composeFeatureName(identity, kebab(identity.slug), FEATURE_ARTIFACTS_THING, "", NAMESPACE_LIMITS.artifactsNamespace.maxLength, NAMESPACE_LIMITS.artifactsNamespace.label);
+}
 /**
 * The deployed name of one of a feature's **Workflows** — `<project>-f<issue>-<slug>--<capability>-<job>` (#643).
 *
@@ -266,4 +296,4 @@ function featureVectorizeIndexName(identity, thing) {
 	return composeFeatureName(identity, kebab(identity.slug), kebab(thing), "", NAMESPACE_LIMITS.vectorizeIndex.maxLength, NAMESPACE_LIMITS.vectorizeIndex.label);
 }
 //#endregion
-export { FEATURE_RESOURCE_KINDS, assertFeatureProject, assertFeatureSlugFits, canonicalIssue, featureMarkerInProjectName, featureResourceName, featureSecretEntryName, featureSlugRoom, featureVectorizeIndexName, featureWorkerName, featureWorkflowName, isFeatureOwnedName, maxFeatureSlug, parseFeatureName, tightestFeatureShape };
+export { FEATURE_ARTIFACTS_THING, FEATURE_KIND_SEGMENT, FEATURE_RESOURCE_KINDS, assertFeatureProject, assertFeatureSlugFits, canonicalIssue, featureArtifactsNamespace, featureMarkerInProjectName, featureResourceName, featureSecretEntryName, featureSlugRoom, featureVectorizeIndexName, featureWorkerName, featureWorkflowName, isFeatureOwnedName, maxFeatureSlug, parseFeatureName, tightestFeatureShape };

package/dist/naming/limits.d.ts

@@ -123,6 +123,47 @@ export declare const NAMESPACE_LIMITS: {
         readonly policy: "truncate";
         readonly source: "cloudflare";
     };
+    /**
+     * A Queue name: **1 to 63 characters**, lowercase letters, digits and dashes, starting and ending with a letter
+     * or number ([Queues · Get started](https://developers.cloudflare.com/queues/get-started/), verified
+     * 2026-10-18). Truncated rather than refused: Pithy recomputes a queue's name from its binding on every run,
+     * as it does a bucket's, so a deterministic hash is safe (#662). The same 63 as R2, so a feature's queue fits
+     * the shape {@link FEATURE_DERIVED_PROJECT_NAME} is derived against and moves no budget.
+     */
+    readonly queue: {
+        readonly label: "a Queue name";
+        readonly maxLength: 63;
+        readonly minLength: 1;
+        readonly policy: "truncate";
+        readonly source: "cloudflare";
+    };
+    /**
+     * An Artifacts namespace: **2 to 63 characters**, starting with a letter or digit, the rest letters, digits, `.`,
+     * `_` and `-` ([Artifacts · Limits](https://developers.cloudflare.com/artifacts/platform/limits/), verified
+     * 2026-10-18). Truncated rather than refused: the kit derives it from the project and the environment on every
+     * run, like an R2 bucket name, and the longest project and environment compose 34 characters, so it never is (#673).
+     */
+    readonly artifactsNamespace: {
+        readonly label: "an Artifacts namespace name";
+        readonly maxLength: 63;
+        readonly minLength: 2;
+        readonly policy: "truncate";
+        readonly source: "cloudflare";
+    };
+    /**
+     * An Artifacts repo name. **The charset is Cloudflare's** — a letter or digit, then letters, digits, `.`, `_` and
+     * `-` ([Artifacts · Limits](https://developers.cloudflare.com/artifacts/platform/limits/), verified 2026-10-18) —
+     * and **the length is ours**: that page states one for a namespace and none for a repo, so 2 to 63 mirrors the
+     * namespace rather than inventing a second number. Refused, never truncated: a repo name is either a UUID or a
+     * name somebody chose, and a name somebody chose is never silently shortened (#673).
+     */
+    readonly artifactsRepo: {
+        readonly label: "an Artifacts repo name";
+        readonly maxLength: 63;
+        readonly minLength: 2;
+        readonly policy: "refuse";
+        readonly source: "pithy";
+    };
     /**
      * A D1 database name: `^[a-zA-Z0-9][a-zA-Z0-9_-]*$` in the OpenAPI schema, and **no documented
      * length cap** — the limits page has no row for it. So the ceiling here is {@link MAX_PITHY_NAME}.
@@ -211,7 +252,10 @@ export declare const FEATURE_TAIL_SEPARATOR = "--";
  * and teardown recomputes the name rather than matching a prefix.
  */
 export declare const MIN_VERBATIM_BINDING = 12;
-/** The longest feature resource kind — `d1`, `kv`, `r2` are all two characters. `feature.test.ts` pins it. */
+/**
+ * The longest feature resource kind segment — `d1`, `kv`, `r2`, and a queue's `q` (#662). `feature.test.ts` pins
+ * every kind's `FEATURE_KIND_SEGMENT` to it, so a longer segment fails rather than shrinking every project's budget.
+ */
 export declare const MAX_FEATURE_KIND = 2;
 /**
  * What the longest Workflow name leaves a project.
@@ -229,7 +273,7 @@ export declare const MAX_FEATURE_KIND = 2;
 export declare const WORKFLOW_DERIVED_PROJECT_NAME: number;
 /**
  * What the longest feature resource name leaves a project — `<project>-f<issue>-<slug>--<binding>-<kind>`,
- * against R2's 63 (the strictest of the three kinds a feature provisions, and the same number a
+ * against R2's 63 (the strictest of the kinds a feature provisions, a queue's number too, and the same number a
  * feature Worker script gets).
  *
  * ```
@@ -238,7 +282,7 @@ export declare const WORKFLOW_DERIVED_PROJECT_NAME: number;
  *   -  6   the issue number, six digits — `f999999` (MAX_ISSUE_DIGITS)
  *   - 12   `-` + a legible slug (MIN_LEGIBLE_SLUG)
  *   - 14   `--` + a binding kept whole (FEATURE_TAIL_SEPARATOR, MIN_VERBATIM_BINDING)
- *   -  3   `-` + the kind, `d1` | `kv` | `r2`
+ *   -  3   `-` + the kind, `d1` | `kv` | `r2` | `q`
  *   ----
  *     26
  * ```

package/dist/naming/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/naming/limits.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;GAcG;AAEH,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kGAAkG;IAClG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC;;;GAGG;AACH,eAAO,MAAM,gBAAgB;IAC3B;;;OAGG;;iBACS,KAAK,EAAE,iBAAiB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,QAAQ;iBAAE,MAAM,EAAE,YAAY;;IACzG;;;;;;OAMG;;iBACO,KAAK,EAAE,sBAAsB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,QAAQ;iBAAE,MAAM,EAAE,YAAY;;IAC5G;;;OAGG;;iBACG,KAAK,EAAE,mBAAmB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,YAAY;;IACvG;;;;OAIG;;iBAED,KAAK,EAAE,wBAAwB;iBAC/B,SAAS,EAAE,EAAE;iBACb,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,QAAQ;iBAChB,MAAM,EAAE,YAAY;;IAEtB;;;;;OAKG;;iBACG,KAAK,EAAE,sBAAsB;iBAAE,SAAS,EAAE,GAAG;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,YAAY;;IAC3G;;;OAGG;;iBACG,KAAK,EAAE,oBAAoB;iBAAE,SAAS;iBAAkB,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,OAAO;;IAC/G;;;OAGG;;iBAED,KAAK,EAAE,4BAA4B;iBACnC,SAAS;iBACT,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,UAAU;iBAClB,MAAM,EAAE,OAAO;;IAEjB;;;OAGG;;iBAED,KAAK,EAAE,6BAA6B;iBACpC,SAAS;iBACT,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,UAAU;iBAClB,MAAM,EAAE,OAAO;;CAEgC,CAAC;AAEpD,0DAA0D;AAC1D,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,QAAkC,CAAC;AAElE;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,8GAA8G;AAC9G,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,QAC+C,CAAC;AAE1F;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B,QAMjB,CAAC"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/naming/limits.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;GAcG;AAEH,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kGAAkG;IAClG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC;;;GAGG;AACH,eAAO,MAAM,gBAAgB;IAC3B;;;OAGG;;iBACS,KAAK,EAAE,iBAAiB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,QAAQ;iBAAE,MAAM,EAAE,YAAY;;IACzG;;;;;;OAMG;;iBACO,KAAK,EAAE,sBAAsB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,QAAQ;iBAAE,MAAM,EAAE,YAAY;;IAC5G;;;OAGG;;iBACG,KAAK,EAAE,mBAAmB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,YAAY;;IACvG;;;;OAIG;;iBAED,KAAK,EAAE,wBAAwB;iBAC/B,SAAS,EAAE,EAAE;iBACb,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,QAAQ;iBAChB,MAAM,EAAE,YAAY;;IAEtB;;;;;OAKG;;iBACG,KAAK,EAAE,sBAAsB;iBAAE,SAAS,EAAE,GAAG;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,YAAY;;IAC3G;;;;;;OAMG;;iBACM,KAAK,EAAE,cAAc;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,YAAY;;IACrG;;;;;OAKG;;iBAED,KAAK,EAAE,6BAA6B;iBACpC,SAAS,EAAE,EAAE;iBACb,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,UAAU;iBAClB,MAAM,EAAE,YAAY;;IAEtB;;;;;;OAMG;;iBACc,KAAK,EAAE,wBAAwB;iBAAE,SAAS,EAAE,EAAE;iBAAE,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,QAAQ;iBAAE,MAAM,EAAE,OAAO;;IAChH;;;OAGG;;iBACG,KAAK,EAAE,oBAAoB;iBAAE,SAAS;iBAAkB,SAAS,EAAE,CAAC;iBAAE,MAAM,EAAE,UAAU;iBAAE,MAAM,EAAE,OAAO;;IAC/G;;;OAGG;;iBAED,KAAK,EAAE,4BAA4B;iBACnC,SAAS;iBACT,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,UAAU;iBAClB,MAAM,EAAE,OAAO;;IAEjB;;;OAGG;;iBAED,KAAK,EAAE,6BAA6B;iBACpC,SAAS;iBACT,SAAS,EAAE,CAAC;iBACZ,MAAM,EAAE,UAAU;iBAClB,MAAM,EAAE,OAAO;;CAEgC,CAAC;AAEpD,0DAA0D;AAC1D,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,QAAkC,CAAC;AAElE;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,QAC+C,CAAC;AAE1F;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B,QAMjB,CAAC"}

package/dist/naming/limits.js

@@ -80,6 +80,47 @@ const NAMESPACE_LIMITS = {
 		source: "cloudflare"
 	},
 	/**
+	* A Queue name: **1 to 63 characters**, lowercase letters, digits and dashes, starting and ending with a letter
+	* or number ([Queues · Get started](https://developers.cloudflare.com/queues/get-started/), verified
+	* 2026-10-18). Truncated rather than refused: Pithy recomputes a queue's name from its binding on every run,
+	* as it does a bucket's, so a deterministic hash is safe (#662). The same 63 as R2, so a feature's queue fits
+	* the shape {@link FEATURE_DERIVED_PROJECT_NAME} is derived against and moves no budget.
+	*/
+	queue: {
+		label: "a Queue name",
+		maxLength: 63,
+		minLength: 1,
+		policy: "truncate",
+		source: "cloudflare"
+	},
+	/**
+	* An Artifacts namespace: **2 to 63 characters**, starting with a letter or digit, the rest letters, digits, `.`,
+	* `_` and `-` ([Artifacts · Limits](https://developers.cloudflare.com/artifacts/platform/limits/), verified
+	* 2026-10-18). Truncated rather than refused: the kit derives it from the project and the environment on every
+	* run, like an R2 bucket name, and the longest project and environment compose 34 characters, so it never is (#673).
+	*/
+	artifactsNamespace: {
+		label: "an Artifacts namespace name",
+		maxLength: 63,
+		minLength: 2,
+		policy: "truncate",
+		source: "cloudflare"
+	},
+	/**
+	* An Artifacts repo name. **The charset is Cloudflare's** — a letter or digit, then letters, digits, `.`, `_` and
+	* `-` ([Artifacts · Limits](https://developers.cloudflare.com/artifacts/platform/limits/), verified 2026-10-18) —
+	* and **the length is ours**: that page states one for a namespace and none for a repo, so 2 to 63 mirrors the
+	* namespace rather than inventing a second number. Refused, never truncated: a repo name is either a UUID or a
+	* name somebody chose, and a name somebody chose is never silently shortened (#673).
+	*/
+	artifactsRepo: {
+		label: "an Artifacts repo name",
+		maxLength: 63,
+		minLength: 2,
+		policy: "refuse",
+		source: "pithy"
+	},
+	/**
 	* A D1 database name: `^[a-zA-Z0-9][a-zA-Z0-9_-]*$` in the OpenAPI schema, and **no documented
 	* length cap** — the limits page has no row for it. So the ceiling here is {@link MAX_PITHY_NAME}.
 	*/
@@ -165,7 +206,10 @@ const FEATURE_TAIL_SEPARATOR = "--";
 * and teardown recomputes the name rather than matching a prefix.
 */
 const MIN_VERBATIM_BINDING = 12;
-/** The longest feature resource kind — `d1`, `kv`, `r2` are all two characters. `feature.test.ts` pins it. */
+/**
+* The longest feature resource kind segment — `d1`, `kv`, `r2`, and a queue's `q` (#662). `feature.test.ts` pins
+* every kind's `FEATURE_KIND_SEGMENT` to it, so a longer segment fails rather than shrinking every project's budget.
+*/
 const MAX_FEATURE_KIND = 2;
 /**
 * What the longest Workflow name leaves a project.
@@ -183,7 +227,7 @@ const MAX_FEATURE_KIND = 2;
 const WORKFLOW_DERIVED_PROJECT_NAME = NAMESPACE_LIMITS.workflow.maxLength - 1 - MAX_ENVIRONMENT_NAME - 1 - 22;
 /**
 * What the longest feature resource name leaves a project — `<project>-f<issue>-<slug>--<binding>-<kind>`,
-* against R2's 63 (the strictest of the three kinds a feature provisions, and the same number a
+* against R2's 63 (the strictest of the kinds a feature provisions, a queue's number too, and the same number a
 * feature Worker script gets).
 *
 * ```
@@ -192,7 +236,7 @@ const WORKFLOW_DERIVED_PROJECT_NAME = NAMESPACE_LIMITS.workflow.maxLength - 1 -
 *   -  6   the issue number, six digits — `f999999` (MAX_ISSUE_DIGITS)
 *   - 12   `-` + a legible slug (MIN_LEGIBLE_SLUG)
 *   - 14   `--` + a binding kept whole (FEATURE_TAIL_SEPARATOR, MIN_VERBATIM_BINDING)
-*   -  3   `-` + the kind, `d1` | `kv` | `r2`
+*   -  3   `-` + the kind, `d1` | `kv` | `r2` | `q`
 *   ----
 *     26
 * ```

package/dist/naming/packageName.d.ts

@@ -0,0 +1,17 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+/**
+ * The package a bare specifier names: `@pithy-sh/payments` from `@pithy-sh/payments/src/capability`, and
+ * `stripe` from `stripe/lib/x` — **scope-aware, and the only copy in the kit (#709)**.
+ *
+ * There were five. Three took the first segment or two depending on a leading `@`; two took the first two
+ * segments whatever they were, which is right for every `@pithy-sh/*` name they were written against and
+ * wrong for the first unscoped dependency anyone passed them. A rule that small drifts precisely because
+ * nobody thinks it needs a home, so it has one. That it is the only copy is a gate, not a claim: `packages/cli/src/ci/packageOfCopies.test.ts` fails on any source that writes the rule out by hand, because the first migration left three behind and said it had not.
+ *
+ * Total, and deliberately unopinionated about what it is handed: a caller with a relative path, a `#`
+ * import or a URL gets the first segment back. Deciding whether a specifier is a package at all is the
+ * unresolved-import classifier's job (`error/unresolved.ts`), not this function's.
+ */
+export declare function packageOf(specifier: string): string;
+//# sourceMappingURL=packageName.d.ts.map

package/dist/naming/packageName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageName.d.ts","sourceRoot":"","sources":["../../src/naming/packageName.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGnD"}

package/dist/naming/packageName.js

@@ -0,0 +1,22 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+//#region src/naming/packageName.ts
+/**
+* The package a bare specifier names: `@pithy-sh/payments` from `@pithy-sh/payments/src/capability`, and
+* `stripe` from `stripe/lib/x` — **scope-aware, and the only copy in the kit (#709)**.
+*
+* There were five. Three took the first segment or two depending on a leading `@`; two took the first two
+* segments whatever they were, which is right for every `@pithy-sh/*` name they were written against and
+* wrong for the first unscoped dependency anyone passed them. A rule that small drifts precisely because
+* nobody thinks it needs a home, so it has one. That it is the only copy is a gate, not a claim: `packages/cli/src/ci/packageOfCopies.test.ts` fails on any source that writes the rule out by hand, because the first migration left three behind and said it had not.
+*
+* Total, and deliberately unopinionated about what it is handed: a caller with a relative path, a `#`
+* import or a URL gets the first segment back. Deciding whether a specifier is a package at all is the
+* unresolved-import classifier's job (`error/unresolved.ts`), not this function's.
+*/
+function packageOf(specifier) {
+	const parts = specifier.split("/");
+	return specifier.startsWith("@") ? parts.slice(0, 2).join("/") : parts[0] ?? specifier;
+}
+//#endregion
+export { packageOf };

package/dist/naming/provisionScope.d.ts

@@ -171,6 +171,12 @@ export interface ProvisionScope {
      * `<project>-feature-email-send` would be one Workflow every open branch deployed over every other's.
      */
     readonly workflowHost: Omit<WorkflowHostNameParts, "capability">;
+    /**
+     * The Artifacts namespace an `artifacts` binding names in this scope (#673): `<project>-<env>` in a declared
+     * environment, `<project>-f<issue>-<slug>--artifacts` in a feature. On the scope for the reason every other name
+     * is: the stanza a run writes and the namespace it writes into it are one decision.
+     */
+    readonly artifactsNamespace: string;
 }
 /**
  * The same branch, one line down, for a provisioned resource: a `global` binding resolves to the

package/dist/naming/provisionScope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provisionScope.d.ts","sourceRoot":"","sources":["../../src/naming/provisionScope.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAIzB,MAAM,WAAW,CAAC;AAInB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,2GAA2G;IAC3G,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oGAAoG;IACpG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC;IACpF;;;;;;;;;OASG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChE;;;;;;;OAOG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,MAAM,CAAC;IAClE;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;CAClE;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAAC;AACV,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAChC,MAAM,CAAC;AAsBV;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,cAAc,CA8BrF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,eAAe,GAAG,cAAc,CAiBtE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAY1G"}
+{"version":3,"file":"provisionScope.d.ts","sourceRoot":"","sources":["../../src/naming/provisionScope.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAKzB,MAAM,WAAW,CAAC;AAInB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,2GAA2G;IAC3G,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oGAAoG;IACpG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC;IACpF;;;;;;;;;OASG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChE;;;;;;;OAOG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,MAAM,CAAC;IAClE;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;IACjE;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAAC;AACV,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAChC,MAAM,CAAC;AAsBV;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,cAAc,CA+BrF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,eAAe,GAAG,cAAc,CAsBtE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAY1G"}

package/dist/naming/provisionScope.js

@@ -1,16 +1,18 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import { InternalError, ValidationError } from "../error/pithyError.js";
+import { commandName } from "../cli/command.js";
 import { FEATURE_ENVIRONMENT, assertValidEnvironment, isFeatureMarker } from "./environment.js";
 import { kebab } from "./resource.js";
-import { featureResourceName, featureSecretEntryName, featureWorkerName } from "./feature.js";
+import { featureArtifactsNamespace, featureResourceName, featureSecretEntryName, featureWorkerName } from "./feature.js";
 import { resourceNames } from "./resourceNames.js";
 //#region src/naming/provisionScope.ts
 /** The wrangler binding array a resource kind's name is composed for. */
 const KIND_NAMER = {
 	d1: "d1",
 	kv: "kv",
-	r2: "r2"
+	r2: "r2",
+	queue: "queue"
 };
 /**
 * The one branch every scope shares: a `global` secret resolves to the project's single
@@ -93,7 +95,7 @@ function environmentScope(project, environment) {
 			if (isFeatureName(project, name)) throw new ValidationError({
 				message: `The ${environment} Worker "${name}" is named the way a feature's Worker is.`,
 				action: `Rename it in env.${environment}.name, or the Worker's top-level name, so it does not follow ${kebab(project)}- with f and a number.`,
-				detail: `${declared === void 0 ? "Composed by wrangler from the deploy name" : `Declared in env.${environment}.name`}. A feature's Worker is <project>-f<issue>-<slug>-<app>, and \`pithy feature destroy\` deletes it by that exact name.`
+				detail: `${declared === void 0 ? "Composed by wrangler from the deploy name" : `Declared in env.${environment}.name`}. A feature's Worker is <project>-f<issue>-<slug>-<app>, and \`${commandName("feature destroy")}\` deletes it by that exact name.`
 			});
 			return name;
 		},
@@ -101,7 +103,8 @@ function environmentScope(project, environment) {
 		workflowHost: {
 			project,
 			env: environment
-		}
+		},
+		artifactsNamespace: names.artifactsNamespace()
 	};
 }
 /**
@@ -144,6 +147,9 @@ function featureScope(identity) {
 			project: identity.project,
 			env: FEATURE_ENVIRONMENT,
 			feature: identity
+		},
+		get artifactsNamespace() {
+			return featureArtifactsNamespace(identity);
 		}
 	};
 }

package/dist/naming/resourceNames.d.ts

@@ -49,6 +49,8 @@ export interface ScopedNames {
     kv(binding: string): string;
     /** An R2 bucket. Cloudflare's 63 — the one namespace where that number was always right. */
     r2(binding: string): string;
+    /** A Queue. Cloudflare's 63, truncated with a stable hash like a bucket (#662). */
+    queue(binding: string): string;
     /** A Vectorize index. 64 bytes, refused rather than truncated: a renamed index has no vectors. */
     vectorizeIndex(index: string): string;
     /** A Secrets Store entry. No Cloudflare cap; Pithy's ceiling. */
@@ -56,22 +58,39 @@ export interface ScopedNames {
     /** A Cloudflare API token label. No Cloudflare cap; Pithy's ceiling. */
     apiToken(profile: string): string;
 }
+/**
+ * The names in one declared environment: everything a scope has, and the one name that exists per environment
+ * and never at `global`.
+ */
+export interface EnvironmentNames extends ScopedNames {
+    /**
+     * The Artifacts namespace — `<project>-<env>`, with no `<thing>` (#673). One per environment, so a feature's
+     * repos never sit beside production's and the per-namespace rate limit splits per environment. There is no
+     * global one, because a namespace shared across environments is exactly that mix.
+     */
+    artifactsNamespace(): string;
+}
 /** The names a feature environment provisions under, with the project already bound. */
 export interface FeatureNames {
-    /** A feature's D1, KV, or R2 resource — `<project>-f<issue>-<slug>-<binding>-<kind>`. */
+    /** A feature's D1, KV, R2 or Queue resource — `<project>-f<issue>-<slug>--<binding>-<kind>`. */
     resource(binding: string, kind: FeatureResourceKind): string;
     /**
      * A feature's Worker script — `<project>-f<issue>-<slug>-<app>`, from the `apps/<app>` directory and
      * never the deploy name, which already leads with the project (#587).
      */
     worker(app: string): string;
+    /**
+     * A feature's Artifacts namespace — `<project>-f<issue>-<slug>--artifacts` (#673). The tail is what makes it a
+     * feature name `isFeatureOwnedName` reads back, so teardown reaps this feature's repos and no sibling's.
+     */
+    artifactsNamespace(): string;
 }
 /** Everything a project can be asked to name. Created once, from the project, by {@link resourceNames}. */
 export interface ProjectNames {
     /** The kebabbed project name every name below leads with. */
     readonly project: string;
     /** The names in one environment. Throws if the environment is not one this scheme accepts. */
-    env(environment: string): ScopedNames;
+    env(environment: string): EnvironmentNames;
     /** The names shared by every environment — the `global` scope, without typing the word. */
     readonly global: ScopedNames;
     /** The names a feature environment provisions under. */

package/dist/naming/resourceNames.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resourceNames.d.ts","sourceRoot":"","sources":["../../src/naming/resourceNames.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,mBAAmB,EAA0C,MAAM,WAAW,CAAC;AAInH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,uFAAuF;IACvF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kFAAkF;IAClF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kGAAkG;IAClG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,iEAAiE;IACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAAC;IAC7D;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7B;AAED,2GAA2G;AAC3G,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC;IACtC,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,wDAAwD;IACxD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC;CACnE;AA8DD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAmB3D"}
+{"version":3,"file":"resourceNames.d.ts","sourceRoot":"","sources":["../../src/naming/resourceNames.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAIzB,MAAM,WAAW,CAAC;AAInB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,uFAAuF;IACvF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kFAAkF;IAClF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,mFAAmF;IACnF,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,kGAAkG;IAClG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,iEAAiE;IACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,CAAC;CAC9B;AAED,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAAC;IAC7D;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B;;;OAGG;IACH,kBAAkB,IAAI,MAAM,CAAC;CAC9B;AAED,2GAA2G;AAC3G,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,wDAAwD;IACxD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC;CACnE;AA+ED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAuB3D"}

package/dist/naming/resourceNames.js

@@ -4,7 +4,7 @@ import { InternalError, ValidationError } from "../error/pithyError.js";
 import { GLOBAL_SCOPE, assertValidEnvironment } from "./environment.js";
 import { NAMESPACE_LIMITS } from "./limits.js";
 import { assertValidProjectName, kebab, resourceName } from "./resource.js";
-import { featureResourceName, featureWorkerName } from "./feature.js";
+import { featureArtifactsNamespace, featureResourceName, featureWorkerName } from "./feature.js";
 import { workflowHostName, workflowScriptName } from "../workflow/naming.js";
 //#region src/naming/resourceNames.ts
 /**
@@ -49,6 +49,19 @@ function scopedName(project, scope, thing, limit) {
 	});
 	return name;
 }
+/**
+* `<project>-<env>`, under the Artifacts namespace rule. The project and environment are both validated by now, and
+* the longest of each compose 34 characters, so the cap is a check rather than a truncation that ever happens.
+*/
+function artifactsNamespaceName(project, environment) {
+	const limit = NAMESPACE_LIMITS.artifactsNamespace;
+	const name = `${project}-${environment}`;
+	if (name.length > limit.maxLength || name.length < limit.minLength) throw new InternalError({
+		message: `"${name}" does not fit ${limit.label}, which takes ${limit.minLength} to ${limit.maxLength} characters.`,
+		action: "Shorten the project or environment name."
+	});
+	return name;
+}
 /** The getters for one scope. `global` and every environment share this, so nothing special-cases either. */
 function scopedNames(project, scope) {
 	return {
@@ -66,6 +79,7 @@ function scopedNames(project, scope) {
 		d1: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.d1),
 		kv: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.kv),
 		r2: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.r2),
+		queue: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.queue),
 		vectorizeIndex: (index) => scopedName(project, scope, index, NAMESPACE_LIMITS.vectorizeIndex),
 		secretEntry: (secret) => scopedName(project, scope, secret, NAMESPACE_LIMITS.secretEntry),
 		apiToken: (profile) => scopedName(project, scope, profile, NAMESPACE_LIMITS.apiToken)
@@ -85,7 +99,10 @@ function resourceNames(project) {
 		project: normalized,
 		env(environment) {
 			assertValidEnvironment(environment);
-			return scopedNames(normalized, environment);
+			return {
+				...scopedNames(normalized, environment),
+				artifactsNamespace: () => artifactsNamespaceName(normalized, environment)
+			};
 		},
 		global: scopedNames(normalized, GLOBAL_SCOPE),
 		feature(identity) {
@@ -95,7 +112,8 @@ function resourceNames(project) {
 			};
 			return {
 				resource: (binding, kind) => featureResourceName(full, binding, kind),
-				worker: (app) => featureWorkerName(full, app)
+				worker: (app) => featureWorkerName(full, app),
+				artifactsNamespace: () => featureArtifactsNamespace(full)
 			};
 		}
 	};

package/dist/openapi/document.d.ts

@@ -0,0 +1,106 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+import type { Hono } from "hono";
+import { z } from "zod";
+/**
+ * **The OpenAPI contract, read off a composed app.**
+ *
+ * Nothing here is written by hand. A route's request schemas come from its `validate` middleware, its
+ * summary, verification and responses from its `describeRoute`, and both are found by walking
+ * `app.routes` — the same table Hono dispatches from. So the document describes exactly what the Worker
+ * serves, the adopter's own routes included, and a schema edit reaches it with no second step.
+ *
+ * Zod is already the source of truth for every request and response, and every field carries a
+ * `.describe()` (CLAUDE.md §Zod). `z.toJSONSchema` keeps those descriptions, which is what lets a client
+ * generated in Swift or Kotlin carry the same documentation as the TypeScript one.
+ *
+ * OpenAPI 3.1, whose schema dialect is JSON Schema 2020-12 — the dialect `z.toJSONSchema` writes — so
+ * every schema crosses unchanged.
+ */
+/** The OpenAPI version this module writes. */
+export declare const OPENAPI_VERSION = "3.1.0";
+/** One entry of a Hono app's route table: a method, a path and one handler. */
+export type RouterRoute = Hono["routes"][number];
+/** One capability's routes, as registered by its `routes` hook. Becomes one tag. */
+export interface RouteGroup {
+    /** The tag, normally the capability's name. */
+    readonly tag: string;
+    /** What the capability does, for the tag's description. */
+    readonly description?: string;
+    /** The routes it registered, in registration order. */
+    readonly routes: readonly RouterRoute[];
+}
+/** The document's `info` block. */
+export interface ContractInfo {
+    readonly title: string;
+    readonly version: string;
+    readonly description?: string;
+}
+/** A JSON Schema object, as `z.toJSONSchema` writes one. */
+export type JsonSchema = Record<string, unknown>;
+/** The subset of an OpenAPI 3.1 document this module writes. */
+export interface OpenApiDocument {
+    openapi: string;
+    info: ContractInfo;
+    tags: {
+        name: string;
+        description?: string;
+    }[];
+    paths: Record<string, Record<string, unknown>>;
+    components: {
+        schemas: Record<string, JsonSchema>;
+        responses: Record<string, unknown>;
+        securitySchemes: Record<string, unknown>;
+    };
+}
+/** A route that registered no `describeRoute`, so the contract can say nothing true about it. */
+export interface UndescribedRoute {
+    readonly method: string;
+    readonly path: string;
+}
+/** Hono's `/a/:id{[0-9]+}/*` as OpenAPI's `/a/{id}/{path}`. */
+export declare function openApiPath(path: string): string;
+/**
+ * `get` + `/leaderboard/{board}/top` → `getLeaderboardByBoardTop`. A parameter reads as `By<Name>`, so
+ * `/items/{id}` and `/items/id` do not meet. Stable, but not unique on its own — `/a-b` and `/a/b` still
+ * share one — so {@link openApiDocument} numbers a repeat rather than writing an invalid document.
+ */
+export declare function operationId(method: string, path: string): string;
+/** A Zod schema as JSON Schema, without the `$schema` key OpenAPI does not want inside a document. */
+export declare function jsonSchema(schema: z.ZodType, io: "input" | "output"): JsonSchema;
+/** Every route in these groups that registered no `describeRoute`. Empty is the contract being met. */
+export declare function undescribedRoutes(groups: readonly RouteGroup[]): UndescribedRoute[];
+/** How {@link openApiDocument} treats a route with no `describeRoute`. */
+export interface DocumentOptions {
+    /**
+     * `omit` (the default) leaves it out, which is right for the kit: {@link undescribedRoutes} keeps that
+     * set empty, so anything missing is a bug the gate names. `include` writes what the validators alone
+     * can say — the path, its parameters and body — marked `x-pithy-undescribed`, which is right for an
+     * adopter's own routes: a client generated from the contract still reaches them, and the mark says
+     * which ones to describe.
+     */
+    readonly undescribed?: "omit" | "include";
+}
+/**
+ * The OpenAPI document for these route groups. Undescribed routes are left out rather than guessed at,
+ * unless {@link DocumentOptions.undescribed} says otherwise; {@link undescribedRoutes} is the check that
+ * keeps that set empty.
+ */
+export declare function openApiDocument(info: ContractInfo, groups: readonly RouteGroup[], options?: DocumentOptions): OpenApiDocument;
+/** One schema property somewhere in the document that carries no `description`. */
+export interface UndescribedField {
+    /** A JSON pointer to the property, e.g. `/paths/~1leaderboard/get/responses/200/…/properties/rank`. */
+    readonly pointer: string;
+}
+/**
+ * Every object property and every parameter in the document without a description. The kit holds every
+ * Zod field to `.describe()`, and this is how that rule is checked on the wire shape a client actually
+ * generates from, rather than on the source it came from.
+ */
+export declare function undescribedFields(document: OpenApiDocument): UndescribedField[];
+/**
+ * The same sweep over any part of a contract document, from a JSON pointer: every object property and every
+ * OpenAPI parameter below `node` without a description. The AsyncAPI document runs it over its messages.
+ */
+export declare function undescribedFieldsIn(node: unknown, at: string): UndescribedField[];
+//# sourceMappingURL=document.d.ts.map

package/dist/openapi/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/openapi/document.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;;;;;;;;;;;;GAcG;AAEH,8CAA8C;AAC9C,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;CACzC;AAED,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC1C,CAAC;CACH;AAED,iGAAiG;AACjG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAkCD,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAUhE;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,CAGhF;AA6BD,uGAAuG;AACvG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,gBAAgB,EAAE,CAOnF;AAkHD,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AASD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,OAAO,GAAE,eAAoB,GAC5B,eAAe,CA+CjB;AAED,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,eAAe,GAAG,gBAAgB,EAAE,CAE/E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,gBAAgB,EAAE,CA4BjF"}