@pithy-sh/core 0.9.0 → 0.11.0

package/dist/cli/commandFacts.d.ts

@@ -0,0 +1,164 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+/**
+ * **What the catalog cannot say about a `pithy` command, written down once (#711).**
+ *
+ * `commandCatalog.generated.ts` is the parser's own account of every command: its arguments, its flags, which
+ * are required, which have defaults, which go together. Four facts are not in any parser, and each was the
+ * fault behind a line that did not run as written:
+ *
+ * - **Which commands act on one Worker**, and are refused `input/required` without `--worker` where a project
+ *   has several. `packages/cli/src/ci/runnableCommands.test.ts` proves every entry by running it in a
+ *   two-Worker project, and fails on a command that takes `--worker` and is not classified here.
+ * - **Which flag's default changes what the command acts on.** `pithy vector provision` with no `--env`
+ *   provisions `dev`, so a line about staging that leaves it off sends the reader to the wrong environment.
+ * - **Which commands destroy something**, and are never a remedy for a smaller fault. `pithy feature destroy`
+ *   was offered as the fix for one mis-shaped vector index.
+ * - **Which flag needs another beside it** that the parser does not enforce: `pithy provision --env` is refused
+ *   without `--yes`, at run time.
+ *
+ * `command.ts` builds every command a line names from these and the catalog, and refuses one that breaks them.
+ * Nothing here imports anything, so a Worker that names a command pays for two tables and nothing more.
+ */
+/**
+ * The commands that act on exactly one Worker, and refuse `input/required` without `--worker` when a project
+ * has several and the run cannot ask. Every line that names one names the Worker, by its `apps/` directory.
+ */
+export declare const WORKER_SCOPED: readonly ["add", "dashboard connect", "email provision", "media provision", "payments provision", "storage provision", "support provision", "testers provision", "turnstile deprovision", "turnstile provision", "ui add", "ui sync", "vector provision", "vector reprocess", "vector reset", "worker sync"];
+/** A command that acts on one Worker. */
+export type WorkerScopedPath = (typeof WORKER_SCOPED)[number];
+/**
+ * The commands that take `--worker` and do not need it: each fans out over every Worker, or falls back to the
+ * first that answers, and the flag narrows.
+ */
+export declare const WORKER_NARROWS: readonly ["contract", "dashboard disconnect", "dashboard revoke-key", "dashboard rotate", "dashboard status", "doctor", "env", "init", "migrate", "secrets tables", "seed", "support deprovision", "upgrade"];
+/**
+ * A command only a person runs, at a terminal, where the Worker is asked for. `pithy remove` refuses every run
+ * that cannot ask (`core/person_required`).
+ */
+export declare const PERSON_ONLY: readonly ["remove"];
+/** A flag that turns a Worker-scoped command into one that acts on no Worker: `pithy add --list` reads the catalog. */
+export declare const NO_WORKER_MODES: Readonly<Record<string, readonly string[]>>;
+/**
+ * **A flag whose default decides what the command acts on.** Left off a line, the command still runs — on the
+ * default, which is rarely the environment the line was about. Every `--env` with a default is one: `dev` for
+ * `vector provision`, `migrate` and `testers list`, `staging` for `payments reconcile`. A line names it, always.
+ */
+export declare const MEANING_FLAGS: readonly ["--env"];
+/**
+ * The commands whose `--env` decides nothing until another flag asks it to: `pithy remove` touches no database
+ * without `--drop`, and `pithy upgrade` migrates none without `--migrate`. Without that flag a line need not
+ * name the environment; with it, it must.
+ */
+export declare const MEANING_ONLY_WITH: {
+    readonly remove: "--drop";
+    readonly upgrade: "--migrate";
+};
+/**
+ * **The commands that destroy something, by what they destroy.** None is ever built as a remedy: a line that
+ * names one says it is a person's decision and what it deletes (`command.ts`'s `personDecision`), and carries
+ * no `fix`. `packages/core/src/cli/command.test.ts` holds every command the catalog has to this list or to
+ * {@link NOT_DESTRUCTIVE}, so a new one cannot arrive unexamined.
+ */
+export declare const DESTRUCTIVE_COMMANDS: {
+    readonly "dashboard disconnect": "the environment's dashboard connection and the key it signs with";
+    readonly "dashboard revoke-key": "a signing key the dashboard holds";
+    readonly "email deprovision": "the email Workers, and with --suppression the suppression database";
+    readonly "feature destroy": "the feature's worktree, its branch and every resource it provisioned";
+    readonly "media deprovision": "the media Worker, and with --storage its bucket";
+    readonly remove: "a capability's wiring";
+    readonly "secrets deprovision": "the secrets manager, and with --keys the store's keys";
+    readonly "secrets rm": "a stored secret";
+    readonly "storage deprovision": "the storage Worker, and with --storage its bucket";
+    readonly "support deprovision": "the support Workers, and with --storage its attachments";
+    readonly "testers deprovision": "the testers Worker";
+    readonly "token revoke": "an API token";
+    readonly "turnstile deprovision": "the Turnstile widget, whose sitekey every client embeds";
+    readonly "vector reset": "every vector in the index";
+    readonly "worker remove": "a Worker's directory";
+};
+/** A command that destroys something. */
+export type DestructivePath = keyof typeof DESTRUCTIVE_COMMANDS;
+/**
+ * **The flags that make a command destroy something**, on any command that declares them. Each is refused by
+ * the builder; a line that needs one is a person's decision.
+ */
+export declare const DESTRUCTIVE_FLAGS: {
+    readonly "--destroy-retained": "a resource kept for recovery";
+    readonly "--drop": "a capability's tables";
+    readonly "--redo": "the data a seed wrote";
+    readonly "--rollback": "the schema a migration group applied";
+};
+/** A flag that makes a command destroy something. */
+export type DestructiveFlag = keyof typeof DESTRUCTIVE_FLAGS;
+/**
+ * The commands whose name reads as destructive and which are not, and why. A command named here is built like
+ * any other.
+ */
+export declare const NOT_DESTRUCTIVE: Readonly<Record<string, string>>;
+/**
+ * **A flag whose value is a person's confirmation**, never written into a line an agent reads: a phrase spelled
+ * in a remedy is a confirmation nobody gave. A person's decision names the flag and leaves the phrase to them.
+ */
+export declare const CONFIRM_FLAGS: readonly ["--confirm", "--confirm-production", "--confirm-reset", "--confirm-rollback"];
+/**
+ * When a command asks for a confirmation: always, when a flag is passed (`when`), or in every environment but the
+ * ones it trusts (`unlessEnv`) — `vector reset` asks nothing of `dev`, whose index is a laptop's.
+ */
+export declare const CONFIRMATIONS: readonly {
+    path: string;
+    when?: string;
+    unlessEnv?: readonly string[];
+    flag: string;
+}[];
+/**
+ * **A flag whose value is a credential**, never written into a line: an error's action reaches logs, a terminal
+ * scrollback and a `--json` consumer, none of which should hold a key. A run named again carries the flag's name
+ * and leaves its value to whoever passed it.
+ */
+export declare const CREDENTIAL_FLAGS: readonly ["--api-token", "--r2-access-key-id", "--r2-api-token", "--r2-secret-access-key"];
+/**
+ * The environments every project treats as production. A project can name more in `seed.productionEnvironments`;
+ * a builder that has them passes them.
+ */
+export declare const PRODUCTION_ENVIRONMENTS: readonly ["prod", "production"];
+/**
+ * **What a production run of a command needs from a person**, by command: the confirmation it asks for, or `null`
+ * for one that asks none. A production provision or seed is never a remedy — a line names it as a person's
+ * decision either way, and names a confirmation only when the command declares it: `testers provision` and
+ * `vector provision` take no `--confirm`, and a line that told a person to pass one would be refused.
+ */
+export declare const PRODUCTION_CONFIRMS: {
+    readonly provision: "--confirm";
+    readonly seed: "--confirm-production";
+    readonly "secrets provision": null;
+    readonly "testers provision": null;
+    readonly "vector provision": null;
+};
+/** A command whose production run is a person's decision. */
+export type ProductionPath = keyof typeof PRODUCTION_CONFIRMS;
+/**
+ * **A command that acts on every environment when its `--env` is left off (#711)**, production among them. `pithy
+ * testers provision` with no `--env` provisions every declared environment, so the bare line touches production as
+ * surely as `--env prod` does, and is a person's decision for the same reason. Each declares `--env` with no
+ * default; `command.test.ts` holds that against the catalog.
+ */
+export declare const EVERY_ENVIRONMENT_WITHOUT_ENV: readonly ["testers provision"];
+/**
+ * **A command that acts on every environment on every run (#711)**, production among them, with no `--env` to narrow
+ * it. `pithy secrets provision` deploys each declared environment's manager and mints its store entries, so every line
+ * naming it touches production and is a person's decision — never the fix for one binding, one database or one
+ * setting. None declares `--env`; `command.test.ts` holds that against the catalog.
+ */
+export declare const EVERY_ENVIRONMENT_ALWAYS: readonly ["secrets provision"];
+/**
+ * A flag a command refuses to run without, beside another, that the parser does not enforce. `pithy provision
+ * --env <env>` with no `--yes` is refused before it does anything; a dry run needs neither.
+ */
+export declare const REQUIRED_BESIDE: readonly {
+    path: string;
+    with: string;
+    needs: string;
+    unless: string;
+}[];
+//# sourceMappingURL=commandFacts.d.ts.map

package/dist/cli/commandFacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandFacts.d.ts","sourceRoot":"","sources":["../../src/cli/commandFacts.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;GAGG;AACH,eAAO,MAAM,aAAa,YACxB,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,CACL,CAAC;AAEX,yCAAyC;AACzC,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc,YACzB,UAAU,EACV,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,KAAK,EACL,MAAM,EACN,SAAS,EACT,gBAAgB,EAChB,MAAM,EACN,qBAAqB,EACrB,SAAS,CACD,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,WAAW,YAAI,QAAQ,CAAU,CAAC;AAE/C,uHAAuH;AACvH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAuB,CAAC;AAEhG;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAI,OAAO,CAAU,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;aAAK,MAAM,EAAE,QAAQ;aAAE,OAAO,EAAE,WAAW;CAAW,CAAC;AAErF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;aAC/B,sBAAsB,EAAE,kEAAkE;aAC1F,sBAAsB,EAAE,mCAAmC;aAC3D,mBAAmB,EAAE,oEAAoE;aACzF,iBAAiB,EAAE,sEAAsE;aACzF,mBAAmB,EAAE,iDAAiD;aACtE,MAAM,EAAE,uBAAuB;aAC/B,qBAAqB,EAAE,uDAAuD;aAC9E,YAAY,EAAE,iBAAiB;aAC/B,qBAAqB,EAAE,mDAAmD;aAC1E,qBAAqB,EAAE,yDAAyD;aAChF,qBAAqB,EAAE,oBAAoB;aAC3C,cAAc,EAAE,cAAc;aAC9B,uBAAuB,EAAE,yDAAyD;aAClF,cAAc,EAAE,2BAA2B;aAC3C,eAAe,EAAE,sBAAsB;CAC/B,CAAC;AAEX,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,oBAAoB,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;aAC5B,oBAAoB,EAAE,8BAA8B;aACpD,QAAQ,EAAE,uBAAuB;aACjC,QAAQ,EAAE,uBAAuB;aACjC,YAAY,EAAE,sCAAsC;CAC5C,CAAC;AAEX,qDAAqD;AACrD,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM5D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,YAAI,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,CAAU,CAAC;AAErH;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAIhH,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAC3B,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,CAChB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,YAAI,MAAM,EAAE,YAAY,CAAU,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;wBACnB,WAAW;mBAChB,sBAAsB;;;;CAI8B,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gCAAqE,CAAC;AAEhH;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,gCAAqE,CAAC;AAE3G;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAEnG,CAAC"}

package/dist/cli/commandFacts.js

@@ -0,0 +1,216 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+//#region src/cli/commandFacts.ts
+/**
+* **What the catalog cannot say about a `pithy` command, written down once (#711).**
+*
+* `commandCatalog.generated.ts` is the parser's own account of every command: its arguments, its flags, which
+* are required, which have defaults, which go together. Four facts are not in any parser, and each was the
+* fault behind a line that did not run as written:
+*
+* - **Which commands act on one Worker**, and are refused `input/required` without `--worker` where a project
+*   has several. `packages/cli/src/ci/runnableCommands.test.ts` proves every entry by running it in a
+*   two-Worker project, and fails on a command that takes `--worker` and is not classified here.
+* - **Which flag's default changes what the command acts on.** `pithy vector provision` with no `--env`
+*   provisions `dev`, so a line about staging that leaves it off sends the reader to the wrong environment.
+* - **Which commands destroy something**, and are never a remedy for a smaller fault. `pithy feature destroy`
+*   was offered as the fix for one mis-shaped vector index.
+* - **Which flag needs another beside it** that the parser does not enforce: `pithy provision --env` is refused
+*   without `--yes`, at run time.
+*
+* `command.ts` builds every command a line names from these and the catalog, and refuses one that breaks them.
+* Nothing here imports anything, so a Worker that names a command pays for two tables and nothing more.
+*/
+/**
+* The commands that act on exactly one Worker, and refuse `input/required` without `--worker` when a project
+* has several and the run cannot ask. Every line that names one names the Worker, by its `apps/` directory.
+*/
+const WORKER_SCOPED = [
+	"add",
+	"dashboard connect",
+	"email provision",
+	"media provision",
+	"payments provision",
+	"storage provision",
+	"support provision",
+	"testers provision",
+	"turnstile deprovision",
+	"turnstile provision",
+	"ui add",
+	"ui sync",
+	"vector provision",
+	"vector reprocess",
+	"vector reset",
+	"worker sync"
+];
+/**
+* The commands that take `--worker` and do not need it: each fans out over every Worker, or falls back to the
+* first that answers, and the flag narrows.
+*/
+const WORKER_NARROWS = [
+	"contract",
+	"dashboard disconnect",
+	"dashboard revoke-key",
+	"dashboard rotate",
+	"dashboard status",
+	"doctor",
+	"env",
+	"init",
+	"migrate",
+	"secrets tables",
+	"seed",
+	"support deprovision",
+	"upgrade"
+];
+/**
+* A command only a person runs, at a terminal, where the Worker is asked for. `pithy remove` refuses every run
+* that cannot ask (`core/person_required`).
+*/
+const PERSON_ONLY = ["remove"];
+/** A flag that turns a Worker-scoped command into one that acts on no Worker: `pithy add --list` reads the catalog. */
+const NO_WORKER_MODES = { add: ["--list"] };
+/**
+* **A flag whose default decides what the command acts on.** Left off a line, the command still runs — on the
+* default, which is rarely the environment the line was about. Every `--env` with a default is one: `dev` for
+* `vector provision`, `migrate` and `testers list`, `staging` for `payments reconcile`. A line names it, always.
+*/
+const MEANING_FLAGS = ["--env"];
+/**
+* The commands whose `--env` decides nothing until another flag asks it to: `pithy remove` touches no database
+* without `--drop`, and `pithy upgrade` migrates none without `--migrate`. Without that flag a line need not
+* name the environment; with it, it must.
+*/
+const MEANING_ONLY_WITH = {
+	remove: "--drop",
+	upgrade: "--migrate"
+};
+/**
+* **The commands that destroy something, by what they destroy.** None is ever built as a remedy: a line that
+* names one says it is a person's decision and what it deletes (`command.ts`'s `personDecision`), and carries
+* no `fix`. `packages/core/src/cli/command.test.ts` holds every command the catalog has to this list or to
+* {@link NOT_DESTRUCTIVE}, so a new one cannot arrive unexamined.
+*/
+const DESTRUCTIVE_COMMANDS = {
+	"dashboard disconnect": "the environment's dashboard connection and the key it signs with",
+	"dashboard revoke-key": "a signing key the dashboard holds",
+	"email deprovision": "the email Workers, and with --suppression the suppression database",
+	"feature destroy": "the feature's worktree, its branch and every resource it provisioned",
+	"media deprovision": "the media Worker, and with --storage its bucket",
+	remove: "a capability's wiring",
+	"secrets deprovision": "the secrets manager, and with --keys the store's keys",
+	"secrets rm": "a stored secret",
+	"storage deprovision": "the storage Worker, and with --storage its bucket",
+	"support deprovision": "the support Workers, and with --storage its attachments",
+	"testers deprovision": "the testers Worker",
+	"token revoke": "an API token",
+	"turnstile deprovision": "the Turnstile widget, whose sitekey every client embeds",
+	"vector reset": "every vector in the index",
+	"worker remove": "a Worker's directory"
+};
+/**
+* **The flags that make a command destroy something**, on any command that declares them. Each is refused by
+* the builder; a line that needs one is a person's decision.
+*/
+const DESTRUCTIVE_FLAGS = {
+	"--destroy-retained": "a resource kept for recovery",
+	"--drop": "a capability's tables",
+	"--redo": "the data a seed wrote",
+	"--rollback": "the schema a migration group applied"
+};
+/**
+* The commands whose name reads as destructive and which are not, and why. A command named here is built like
+* any other.
+*/
+const NOT_DESTRUCTIVE = {
+	"cloudflare disconnect": "revokes a sign-in and deletes no data, which `cloudflare connect` gives back",
+	"docs disconnect": "removes the docs server from an editor's config, which `docs connect` restores",
+	"feature prune": "forgets worktrees that are already gone",
+	"testers close": "stops a cohort accruing, and keeps its history",
+	"testers remove": "takes one tester off a roster, which `testers invite` reverses"
+};
+/**
+* **A flag whose value is a person's confirmation**, never written into a line an agent reads: a phrase spelled
+* in a remedy is a confirmation nobody gave. A person's decision names the flag and leaves the phrase to them.
+*/
+const CONFIRM_FLAGS = [
+	"--confirm",
+	"--confirm-production",
+	"--confirm-reset",
+	"--confirm-rollback"
+];
+/**
+* When a command asks for a confirmation: always, when a flag is passed (`when`), or in every environment but the
+* ones it trusts (`unlessEnv`) — `vector reset` asks nothing of `dev`, whose index is a laptop's.
+*/
+const CONFIRMATIONS = [
+	{
+		path: "vector reset",
+		unlessEnv: ["dev"],
+		flag: "--confirm-reset"
+	},
+	{
+		path: "migrate",
+		when: "--rollback",
+		flag: "--confirm-rollback"
+	},
+	{
+		path: "seed",
+		when: "--redo",
+		flag: "--confirm-reset"
+	}
+];
+/**
+* **A flag whose value is a credential**, never written into a line: an error's action reaches logs, a terminal
+* scrollback and a `--json` consumer, none of which should hold a key. A run named again carries the flag's name
+* and leaves its value to whoever passed it.
+*/
+const CREDENTIAL_FLAGS = [
+	"--api-token",
+	"--r2-access-key-id",
+	"--r2-api-token",
+	"--r2-secret-access-key"
+];
+/**
+* The environments every project treats as production. A project can name more in `seed.productionEnvironments`;
+* a builder that has them passes them.
+*/
+const PRODUCTION_ENVIRONMENTS = ["prod", "production"];
+/**
+* **What a production run of a command needs from a person**, by command: the confirmation it asks for, or `null`
+* for one that asks none. A production provision or seed is never a remedy — a line names it as a person's
+* decision either way, and names a confirmation only when the command declares it: `testers provision` and
+* `vector provision` take no `--confirm`, and a line that told a person to pass one would be refused.
+*/
+const PRODUCTION_CONFIRMS = {
+	provision: "--confirm",
+	seed: "--confirm-production",
+	"secrets provision": null,
+	"testers provision": null,
+	"vector provision": null
+};
+/**
+* **A command that acts on every environment when its `--env` is left off (#711)**, production among them. `pithy
+* testers provision` with no `--env` provisions every declared environment, so the bare line touches production as
+* surely as `--env prod` does, and is a person's decision for the same reason. Each declares `--env` with no
+* default; `command.test.ts` holds that against the catalog.
+*/
+const EVERY_ENVIRONMENT_WITHOUT_ENV = ["testers provision"];
+/**
+* **A command that acts on every environment on every run (#711)**, production among them, with no `--env` to narrow
+* it. `pithy secrets provision` deploys each declared environment's manager and mints its store entries, so every line
+* naming it touches production and is a person's decision — never the fix for one binding, one database or one
+* setting. None declares `--env`; `command.test.ts` holds that against the catalog.
+*/
+const EVERY_ENVIRONMENT_ALWAYS = ["secrets provision"];
+/**
+* A flag a command refuses to run without, beside another, that the parser does not enforce. `pithy provision
+* --env <env>` with no `--yes` is refused before it does anything; a dry run needs neither.
+*/
+const REQUIRED_BESIDE = [{
+	path: "provision",
+	with: "--env",
+	needs: "--yes",
+	unless: "--dry-run"
+}];
+//#endregion
+export { CONFIRMATIONS, CONFIRM_FLAGS, CREDENTIAL_FLAGS, DESTRUCTIVE_COMMANDS, DESTRUCTIVE_FLAGS, EVERY_ENVIRONMENT_ALWAYS, EVERY_ENVIRONMENT_WITHOUT_ENV, MEANING_FLAGS, MEANING_ONLY_WITH, NOT_DESTRUCTIVE, NO_WORKER_MODES, PERSON_ONLY, PRODUCTION_CONFIRMS, PRODUCTION_ENVIRONMENTS, REQUIRED_BESIDE, WORKER_NARROWS, WORKER_SCOPED };

package/dist/controlPlane/capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/controlPlane/capability.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAuC,MAAM,0BAA0B,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,kBAAkB,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAWnF,OAAO,EACL,wBAAwB,EAIzB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE1D,uEAAuE;AACvE,MAAM,WAAW,sBAAuB,SAAQ,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,cAAc,CAAC;IAC7G,gCAAgC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC;AAED,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,IAAI,sBAAsB,CAErG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,sBAAsB,CAmKtF;AAED,4GAA4G;AAC5G,OAAO,EAAE,wBAAwB,EAAE,CAAC"}
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/controlPlane/capability.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAuC,MAAM,0BAA0B,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,kBAAkB,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAkBnF,OAAO,EACL,wBAAwB,EAIzB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE1D,uEAAuE;AACvE,MAAM,WAAW,sBAAuB,SAAQ,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,cAAc,CAAC;IAC7G,gCAAgC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC;AAED,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,IAAI,sBAAsB,CAErG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,sBAAsB,CAoLtF;AAED,4GAA4G;AAC5G,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/controlPlane/capability.js

@@ -6,11 +6,13 @@ import "../worker/identity.js";
 import { ControlPlaneConfig } from "./config/config.js";
 import { ControlPlaneConnection } from "./data/connection.js";
 import { CONTROL_PLANE_CONNECTIONS_TABLE, controlPlaneTables } from "./data/tables.js";
-import { capabilityHealthSources } from "./discovery/health.js";
+import { capabilityHealthSources, defineCapabilityHealth } from "./discovery/health.js";
 import { createControlPlaneVerifier } from "./http/guard.js";
+import { MIGRATION_HEALTH_KEYS, composeMigrationDatabases, readMigrationHealth } from "./migrationState/migrationState.js";
 import { controlPlaneRouteDescriptors, registerControlPlaneRoutes } from "./http/routes.js";
 import { controlplane_0001_init } from "./migrations/0001_init.js";
 import { controlplane_0002_management_origin } from "./migrations/0002_management_origin.js";
+import { controlplane_0003_connection_principal } from "./migrations/0003_connection_principal.js";
 import { d1ReplayGuard } from "./replay/d1Guard.js";
 import { CONTROL_PLANE_KV_BINDING, controlPlaneKvNamespaces, kvReplayGuard } from "./replay/kvGuard.js";
 //#region src/controlPlane/capability.ts
@@ -52,7 +54,8 @@ function controlplane(options = {}) {
 	const config = ControlPlaneConfig.parse(options);
 	const migrations = {
 		"0001_init": controlplane_0001_init,
-		"0002_management_origin": controlplane_0002_management_origin
+		"0002_management_origin": controlplane_0002_management_origin,
+		"0003_connection_principal": controlplane_0003_connection_principal
 	};
 	const requiredBindings = [{
 		type: "d1",
@@ -83,6 +86,7 @@ function controlplane(options = {}) {
 	});
 	let composed = [];
 	let health = /* @__PURE__ */ new Map();
+	let migrationDatabases = [];
 	return {
 		...defineCapability({
 			name: "controlplane",
@@ -98,6 +102,10 @@ function controlplane(options = {}) {
 			} },
 			kvNamespaces: usesKvReplay ? controlPlaneKvNamespaces(config.jtiTtlSeconds) : {},
 			adminRoutes: controlPlaneRouteDescriptors(config.basePath),
+			health: defineCapabilityHealth({
+				keys: MIGRATION_HEALTH_KEYS,
+				read: (c) => readMigrationHealth(c.env, migrationDatabases)
+			}),
 			compose: ({ capabilities }) => {
 				composed = capabilities.map((cap) => ({
 					name: cap.name,
@@ -109,6 +117,7 @@ function controlplane(options = {}) {
 					config: { ...cap.manifestConfig?.values ?? {} }
 				}));
 				health = capabilityHealthSources(capabilities);
+				migrationDatabases = composeMigrationDatabases(capabilities);
 			},
 			middleware: [(app) => {
 				app.use("*", async (c, next) => {
@@ -135,6 +144,7 @@ function controlplane(options = {}) {
 					database,
 					composedCapabilities: () => composed,
 					composedHealth: () => health,
+					composedMigrations: () => migrationDatabases,
 					now
 				});
 			}

package/dist/controlPlane/context.d.ts

@@ -24,6 +24,11 @@ export declare const ControlPlaneContext: z.ZodObject<{
     grantedScopes: z.ZodArray<z.ZodString>;
     keyId: z.ZodString;
     tokenId: z.ZodString;
+    actorKind: z.ZodNullable<z.ZodEnum<{
+        agent: "agent";
+        dashboard: "dashboard";
+        script: "script";
+    }>>;
 }, z.core.$strip>;
 export type ControlPlaneContext = z.output<typeof ControlPlaneContext>;
 //# sourceMappingURL=context.d.ts.map

package/dist/controlPlane/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/controlPlane/context.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;iBAyC7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/controlPlane/context.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;iBA4C7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/controlPlane/context.js

@@ -1,6 +1,7 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import { ControlPlaneScope } from "./scope/scope.js";
+import { ControlPlaneActorKind } from "./data/connection.js";
 import { z } from "zod";
 //#region src/controlPlane/context.ts
 /**
@@ -25,7 +26,8 @@ const ControlPlaneContext = z.object({
 	scope: ControlPlaneScope.describe("The single scope this token was minted for. One call, one operation — a token carrying the whole grant would make every call as dangerous as the most dangerous one."),
 	grantedScopes: z.array(ControlPlaneScope).describe("Every scope the adopter granted this connection, read from their own row. The authority: a scope absent here is denied however the token is written."),
 	keyId: z.string().describe("Which registered key verified this call. Recorded so a rotation can be traced through the trail, and so a key still in use is visible before it is expired."),
-	tokenId: z.string().describe("The token's `jti`, already claimed in the replay set. Recorded to tie one audit event to one call.")
+	tokenId: z.string().describe("The token's `jti`, already claimed in the replay set. Recorded to tie one audit event to one call."),
+	actorKind: ControlPlaneActorKind.nullable().describe("What kind of client the connection is for — `agent`, `dashboard` or `script` — read from the adopter's own row, never from the token. The gate stamps it onto every control-plane audit row this call writes. Null for a connection registered before the kind was recorded (#721).")
 }).describe("The verified control-plane caller for one request. Never an AuthContext: a management client is not a user of the adopter's app.");
 //#endregion
 export { ControlPlaneContext };

package/dist/controlPlane/data/connection.d.ts

@@ -37,6 +37,46 @@ export declare const RegisteredKey: z.ZodObject<{
     revokedAt: z.ZodNullable<z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodDate]>, z.ZodDate>>;
 }, z.core.$strip>;
 export type RegisteredKey = z.output<typeof RegisteredKey>;
+/**
+ * What kind of client a connection is for (#721): `agent`, `dashboard` or `script`.
+ *
+ * The audit trail's `actorType: "control-plane"` names all three identically, and the questions asked
+ * after an incident are exactly the ones that tell them apart — was it a person at the dashboard, a
+ * script somebody wrote, or an agent running unattended. So the kind is recorded on the connection when
+ * it is registered and stamped from there onto every row its calls write.
+ *
+ * It follows the path, never a guess: the device-code flow is a dashboard, always, and a key the
+ * operator registered themselves is whichever of the other two they say, out loud, with `--kind`.
+ */
+export declare const ControlPlaneActorKind: z.ZodEnum<{
+    agent: "agent";
+    dashboard: "dashboard";
+    script: "script";
+}>;
+export type ControlPlaneActorKind = z.output<typeof ControlPlaneActorKind>;
+/**
+ * Who sanctioned a connection: the email address of the signed-in Cloudflare session that registered it.
+ *
+ * **A plain string, deliberately not a reference.** An adopter's `pithy_auth_users` are their customers,
+ * and the operator who registers a connection is their staff, so a join into the organization model would
+ * be empty for most of them. A string is readable by anybody, and matchable against a directory where the
+ * operator is in one.
+ *
+ * **Derived, never asserted.** No flag supplies it; the CLI reads it from `GET /user` under the session.
+ */
+export declare const ConnectionPrincipal: z.ZodEmail;
+export type ConnectionPrincipal = z.output<typeof ConnectionPrincipal>;
+/** The longest purpose a connection may carry. One line on a review screen, with room to say what it does. */
+export declare const MAX_CONNECTION_PURPOSE = 200;
+/**
+ * What a connection is for, in the words of whoever registered it (#721).
+ *
+ * **Required at registration, and refused when absent**, because a review listing credentials by key id
+ * cannot support the decision it exists for. **Untrusted input**: a customer writes it and something else
+ * renders it, so it is validated on the way in, and again on every read of the row.
+ */
+export declare const ConnectionPurpose: z.ZodString;
+export type ConnectionPurpose = z.output<typeof ConnectionPurpose>;
 /**
  * One management-client connection — the row in `pithy_controlplane_connections`.
  *
@@ -52,6 +92,13 @@ export declare const ControlPlaneConnection: z.ZodObject<{
     workerUrl: z.ZodURL;
     basePath: z.ZodDefault<z.ZodString>;
     managementOrigin: z.ZodDefault<z.ZodNullable<z.ZodURL>>;
+    authorizedBy: z.ZodDefault<z.ZodNullable<z.ZodEmail>>;
+    actorKind: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+        agent: "agent";
+        dashboard: "dashboard";
+        script: "script";
+    }>>>;
+    purpose: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     scopes: z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>, z.ZodArray<z.ZodString>>;
     keys: z.ZodCodec<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodObject<{
         keyId: z.ZodString;

package/dist/controlPlane/data/connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/data/connection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB;;;;iBAgBoF,CAAC;AAClH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;iBAoBoF,CAAC;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC7E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/data/connection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB;;;;iBAgBoF,CAAC;AAClH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;iBAoBoF,CAAC;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;;;;EAI/B,CAAC;AACJ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE3E;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,YAK7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,8GAA8G;AAC9G,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAiB1C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAW3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkEhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC7E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/controlPlane/data/connection.js

@@ -35,6 +35,57 @@ const RegisteredKey = z.object({
 	revokedAt: JsonDate.nullable().describe("When this key was revoked outright, or null. Revocation ignores `validUntil` and takes effect immediately — it is the adopter's unilateral control, and it must not wait for a window to close.")
 }).describe("One registered public key with its validity window. Two live at once during a rotation overlap.");
 /**
+* What kind of client a connection is for (#721): `agent`, `dashboard` or `script`.
+*
+* The audit trail's `actorType: "control-plane"` names all three identically, and the questions asked
+* after an incident are exactly the ones that tell them apart — was it a person at the dashboard, a
+* script somebody wrote, or an agent running unattended. So the kind is recorded on the connection when
+* it is registered and stamped from there onto every row its calls write.
+*
+* It follows the path, never a guess: the device-code flow is a dashboard, always, and a key the
+* operator registered themselves is whichever of the other two they say, out loud, with `--kind`.
+*/
+const ControlPlaneActorKind = z.enum([
+	"agent",
+	"dashboard",
+	"script"
+]).describe("What kind of client a connection is for: `agent` (an automated client acting on its own judgment, often unattended), `dashboard` (a management dashboard a person drives, registered through the device-code flow), or `script` (an operator's own automation, doing one fixed thing).");
+/**
+* Who sanctioned a connection: the email address of the signed-in Cloudflare session that registered it.
+*
+* **A plain string, deliberately not a reference.** An adopter's `pithy_auth_users` are their customers,
+* and the operator who registers a connection is their staff, so a join into the organization model would
+* be empty for most of them. A string is readable by anybody, and matchable against a directory where the
+* operator is in one.
+*
+* **Derived, never asserted.** No flag supplies it; the CLI reads it from `GET /user` under the session.
+*/
+const ConnectionPrincipal = z.email().max(254).describe("The email address of the person who sanctioned this connection, read from their signed-in Cloudflare session at registration. Never typed, so never asserted.");
+/** The longest purpose a connection may carry. One line on a review screen, with room to say what it does. */
+const MAX_CONNECTION_PURPOSE = 200;
+/**
+* Characters a purpose may not carry: every C0 and C1 control (so no terminal escape, no newline and no
+* carriage return), the Unicode line and paragraph separators, every `Bidi_Control` character — the
+* embeddings, overrides and isolates, and the LRM, RLM and ALM marks — that lets text render in a
+* different order from the one it is stored in, and the invisible zero-width space, word joiner and
+* byte-order mark that split a word without showing it. The zero-width joiner and non-joiner stay: Persian
+* and the Indic scripts cannot be written without them.
+*
+* Each of those is a way for a sentence to look like something else once it reaches a renderer: a line
+* in `pithy dashboard status` forged beneath the real one, a screen cleared, a scope name read backwards.
+* Escaping them at every renderer is a promise each renderer has to keep. Refusing them at the boundary
+* is one promise, kept here.
+*/
+const UNRENDERABLE = /[\p{Cc}\p{Bidi_Control}\u2028\u2029\u200B\u2060\uFEFF]/u;
+/**
+* What a connection is for, in the words of whoever registered it (#721).
+*
+* **Required at registration, and refused when absent**, because a review listing credentials by key id
+* cannot support the decision it exists for. **Untrusted input**: a customer writes it and something else
+* renders it, so it is validated on the way in, and again on every read of the row.
+*/
+const ConnectionPurpose = z.string().trim().min(1, "Say what this client is for.").max(200, `A purpose is 200 characters at most.`).refine((purpose) => !UNRENDERABLE.test(purpose), "A purpose is one line of plain text: no control, bidi or invisible characters.").describe(`What this connection's client is for, in the registering operator's words — one line of plain text, 200 characters at most, with no control, bidi or invisible characters. Written by a customer and rendered elsewhere, so validated at the boundary.`);
+/**
 * One management-client connection — the row in `pithy_controlplane_connections`.
 *
 * Keys are a versioned JSON column rather than a child table for two reasons. **Rotation becomes one
@@ -49,10 +100,13 @@ const ControlPlaneConnection = z.object({
 	workerUrl: z.url().describe("This environment's deployed Worker URL, captured at connect. The address the management client calls; re-pointed by `pithy dashboard connect --update` when a custom domain or a rename moves it."),
 	basePath: z.string().min(1).default("/control-plane").describe("Where this Worker mounts the control-plane seam, captured at connect from its resolved config. Stored beside `workerUrl` because the two together fully determine the manifest address — and this is the one part of it a client cannot discover, since it *is* the manifest's own address. Defaulted rather than required so a connection registered before the column existed still parses, reading as the default it was necessarily using."),
 	managementOrigin: z.url().nullable().default(null).describe("Where the management client that registered this connection answers — the origin the CLI calls for a verify, a rotation or a disconnect. Stored because it is not derivable: `issuer` is what that client *signs as*, and nothing says a dashboard's API answers at its own `iss`. Null for a connection registered before this column, which reads as the issuer rather than as the hosted dashboard — an older row is still a row about somebody's own deployment. Nothing on the Worker's side reads it; verification cares about `issuer` alone."),
+	authorizedBy: ConnectionPrincipal.nullable().default(null).describe("Who sanctioned this connection: the email of the signed-in Cloudflare session that registered it, never a flag. Null for a connection registered before principals were recorded (#721), which keeps working and reads as exactly that; registering again is the only way to set it."),
+	actorKind: ControlPlaneActorKind.nullable().default(null).describe("What kind of client this connection is for — `agent`, `dashboard` or `script` — stamped onto every audit row its calls write so the trail can tell them apart. Null for a connection registered before it was recorded."),
+	purpose: ConnectionPurpose.nullable().default(null).describe("What this connection's client is for, in the registering operator's words. Required at registration and editable with `pithy dashboard connect --update --purpose`; null only for a connection registered before it was recorded."),
 	scopes: sqliteJson(z.array(ControlPlaneScope)).describe("The operations this connection was granted, stored and enforced on the adopter's side. Enforced only by the caller, a scope would not be a limit at all."),
 	keys: sqliteJson(z.array(RegisteredKey)).describe("Every key this connection may sign with, current and superseded. One JSON column rather than a child table, so a rotation is one atomic UPDATE and verification is one read."),
 	createdAt: SQLiteDate.describe("When the connection was registered. Ms-epoch in SQLite, a Date in TypeScript."),
 	updatedAt: SQLiteDate.describe("When the row last changed — a key registered or expired, or the Worker URL re-pointed.")
 }).describe("One management-client connection: its identity, the environment and URL it is bound to, the operations it was granted, and its versioned public keys.");
 //#endregion
-export { ControlPlaneConnection, Ed25519PublicJwk, RegisteredKey };
+export { ConnectionPrincipal, ConnectionPurpose, ControlPlaneActorKind, ControlPlaneConnection, Ed25519PublicJwk, MAX_CONNECTION_PURPOSE, RegisteredKey };

package/dist/controlPlane/error/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/error/errors.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;;;;GAYG;AAEH,UAAU,qBAAqB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,UAAU;IAC3D,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF;AAED;;;GAGG;AACH,qBAAa,kCAAmC,SAAQ,UAAU;IAChE,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF;AAED,sEAAsE;AACtE,qBAAa,kCAAmC,SAAQ,UAAU;IAChE,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF;AAED,0DAA0D;AAC1D,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/controlPlane/error/errors.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;;;;GAYG;AAEH,UAAU,qBAAqB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,UAAU;IAC3D,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAc1E;CACF;AAED;;;GAGG;AACH,qBAAa,kCAAmC,SAAQ,UAAU;IAChE,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAc1E;CACF;AAED,sEAAsE;AACtE,qBAAa,kCAAmC,SAAQ,UAAU;IAChE,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAc1E;CACF;AAED,0DAA0D;AAC1D,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,YAAY,IAAI,GAAE,qBAA0B,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY1E;CACF"}