@secondlayer/shared 13.10.0 → 13.11.0

package/dist/src/archive/range-digest.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/archive/semantic-digest-builder.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/coverage/index.d.ts

@@ -1347,13 +1347,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/index.d.ts

@@ -1044,13 +1044,17 @@ interface WebhookIncidentAlertsTable {
 }
 type WebhookIncidentAlert = Selectable<WebhookIncidentAlertsTable>;
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;
@@ -2388,4 +2392,4 @@ declare function closeDb(): Promise<void>;
 * actual work is done.
 */
 declare function closeDbOrTimeout(timeoutMs?: number, closeFn?: () => Promise<void>): Promise<void>;
-export { Account, AccountBalanceAlerts, AccountBalanceAlertsTable, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiFailedRequest, ApiFailedRequestsTable, ApiKey, ApiKeysTable, ApiRequestLogRow, ApiRequestLogTable, ArchiveFetch, ArchiveFetchesTable, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, ChainReadCacheTable, ChainReorgsTable, CliDeviceLogin, CliDeviceLoginStatus, CliDeviceLoginsTable, ContactRequest, ContactRequestsTable, Contract, ContractsTable, CoverageSegmentsTable, Database, DbPlane, DbReadRow, DbSplitStatus, DeadLetterEventsTable, DecodedEventsTable, DecoderCheckpointsTable, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, FeedbackTicket, FeedbackTicketsTable, IndexColumn, IndexColumnType, IndexPrimaryKey, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountBalanceAlerts, InsertAccountCredits, InsertAccountSpendCap, InsertApiFailedRequest, InsertApiKey, InsertApiRequestLogRow, InsertArchiveFetch, InsertBlock, InsertContactRequest, InsertContract, InsertEvent, InsertFeedbackTicket, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertStateWrite, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, InsightMutesTable, InsightsTable, InstancesTable, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, MigrationRole, NativeClock, NumericAsText, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5CycleSignersTable, Pox5CyclesTable, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RepairMode, RetryState, RunStatus, SOURCE_READ_COLUMNS, SOURCE_READ_PKS, SOURCE_READ_TYPES, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SentinelAccount, SentinelAccountsTable, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StateWrite, StateWritesArchiveTable, StateWritesTable, Subgraph, SubgraphErrorGroupsTable, SubgraphGap, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, TABLE_TO_DB, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountBalanceAlerts, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UsageLedgerRow, UsageLedgerTable, VmEvent, VmEventsArchiveTable, VmEventsTable, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookFormat, WebhookIncidentAlert, WebhookIncidentAlertsTable, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookStatus, WebhooksTable, applicationDatabaseUrl, assertDbSplit, closeDb, closeDbOrTimeout, describeDbUrl, getDb, getDbSplitStatus, getMigrationRole, getRawClient, getSourceDb, getTargetDb, jsonb, onChainPlane, onControlPlane, parseJsonb, resolveSourceUrl, resolveTargetUrl, setMigrationRole, sql };
+export { Account, AccountBalanceAlerts, AccountBalanceAlertsTable, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiFailedRequest, ApiFailedRequestsTable, ApiKey, ApiKeysTable, ApiRequestLogRow, ApiRequestLogTable, ArchiveFetch, ArchiveFetchesTable, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, ChainReadCacheTable, ChainReorgsTable, CliDeviceLogin, CliDeviceLoginStatus, CliDeviceLoginsTable, CliDeviceProduct, ContactRequest, ContactRequestsTable, Contract, ContractsTable, CoverageSegmentsTable, Database, DbPlane, DbReadRow, DbSplitStatus, DeadLetterEventsTable, DecodedEventsTable, DecoderCheckpointsTable, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, FeedbackTicket, FeedbackTicketsTable, IndexColumn, IndexColumnType, IndexPrimaryKey, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountBalanceAlerts, InsertAccountCredits, InsertAccountSpendCap, InsertApiFailedRequest, InsertApiKey, InsertApiRequestLogRow, InsertArchiveFetch, InsertBlock, InsertContactRequest, InsertContract, InsertEvent, InsertFeedbackTicket, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertStateWrite, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, InsightMutesTable, InsightsTable, InstancesTable, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, MigrationRole, NativeClock, NumericAsText, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5CycleSignersTable, Pox5CyclesTable, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RepairMode, RetryState, RunStatus, SOURCE_READ_COLUMNS, SOURCE_READ_PKS, SOURCE_READ_TYPES, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SentinelAccount, SentinelAccountsTable, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StateWrite, StateWritesArchiveTable, StateWritesTable, Subgraph, SubgraphErrorGroupsTable, SubgraphGap, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, TABLE_TO_DB, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountBalanceAlerts, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UsageLedgerRow, UsageLedgerTable, VmEvent, VmEventsArchiveTable, VmEventsTable, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookFormat, WebhookIncidentAlert, WebhookIncidentAlertsTable, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookStatus, WebhooksTable, applicationDatabaseUrl, assertDbSplit, closeDb, closeDbOrTimeout, describeDbUrl, getDb, getDbSplitStatus, getMigrationRole, getRawClient, getSourceDb, getTargetDb, jsonb, onChainPlane, onControlPlane, parseJsonb, resolveSourceUrl, resolveTargetUrl, setMigrationRole, sql };

package/dist/src/db/queries/chain-reorgs.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/contracts.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/instance.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/integrity.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/subgraph-gaps.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/subgraph-operations.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/subgraphs.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/sync-scope.d.ts

@@ -1040,13 +1040,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/queries/webhooks.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/db/schema.d.ts

@@ -1042,13 +1042,17 @@ interface WebhookIncidentAlertsTable {
 }
 type WebhookIncidentAlert = Selectable<WebhookIncidentAlertsTable>;
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;
@@ -1322,4 +1326,4 @@ type WaitlistSignup = Selectable<WaitlistSignupsTable>;
 type InsertWaitlistSignup = Insertable<WaitlistSignupsTable>;
 type ContactRequest = Selectable<ContactRequestsTable>;
 type InsertContactRequest = Insertable<ContactRequestsTable>;
-export { Account, AccountBalanceAlerts, AccountBalanceAlertsTable, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiFailedRequest, ApiFailedRequestsTable, ApiKey, ApiKeysTable, ApiRequestLogRow, ApiRequestLogTable, ArchiveFetch, ArchiveFetchesTable, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, ChainReadCacheTable, ChainReorgsTable, CliDeviceLogin, CliDeviceLoginStatus, CliDeviceLoginsTable, ContactRequest, ContactRequestsTable, Contract, ContractsTable, CoverageSegmentsTable, Database, DeadLetterEventsTable, DecodedEventsTable, DecoderCheckpointsTable, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, FeedbackTicket, FeedbackTicketsTable, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountBalanceAlerts, InsertAccountCredits, InsertAccountSpendCap, InsertApiFailedRequest, InsertApiKey, InsertApiRequestLogRow, InsertArchiveFetch, InsertBlock, InsertContactRequest, InsertContract, InsertEvent, InsertFeedbackTicket, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertStateWrite, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, InsightMutesTable, InsightsTable, InstancesTable, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, NativeClock, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5CycleSignersTable, Pox5CyclesTable, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RepairMode, RetryState, RunStatus, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SentinelAccount, SentinelAccountsTable, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StateWrite, StateWritesArchiveTable, StateWritesTable, Subgraph, SubgraphErrorGroupsTable, SubgraphGap, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountBalanceAlerts, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UsageLedgerRow, UsageLedgerTable, VmEvent, VmEventsArchiveTable, VmEventsTable, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookFormat, WebhookIncidentAlert, WebhookIncidentAlertsTable, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookStatus, WebhooksTable };
+export { Account, AccountBalanceAlerts, AccountBalanceAlertsTable, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiFailedRequest, ApiFailedRequestsTable, ApiKey, ApiKeysTable, ApiRequestLogRow, ApiRequestLogTable, ArchiveFetch, ArchiveFetchesTable, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, ChainReadCacheTable, ChainReorgsTable, CliDeviceLogin, CliDeviceLoginStatus, CliDeviceLoginsTable, CliDeviceProduct, ContactRequest, ContactRequestsTable, Contract, ContractsTable, CoverageSegmentsTable, Database, DeadLetterEventsTable, DecodedEventsTable, DecoderCheckpointsTable, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, FeedbackTicket, FeedbackTicketsTable, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountBalanceAlerts, InsertAccountCredits, InsertAccountSpendCap, InsertApiFailedRequest, InsertApiKey, InsertApiRequestLogRow, InsertArchiveFetch, InsertBlock, InsertContactRequest, InsertContract, InsertEvent, InsertFeedbackTicket, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertStateWrite, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, InsightMutesTable, InsightsTable, InstancesTable, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, NativeClock, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5CycleSignersTable, Pox5CyclesTable, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RepairMode, RetryState, RunStatus, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SentinelAccount, SentinelAccountsTable, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StateWrite, StateWritesArchiveTable, StateWritesTable, Subgraph, SubgraphErrorGroupsTable, SubgraphGap, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountBalanceAlerts, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UsageLedgerRow, UsageLedgerTable, VmEvent, VmEventsArchiveTable, VmEventsTable, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookFormat, WebhookIncidentAlert, WebhookIncidentAlertsTable, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookStatus, WebhooksTable };

package/dist/src/index.d.ts

@@ -1261,13 +1261,17 @@ interface WebhookIncidentAlertsTable {
 }
 type WebhookIncidentAlert = Selectable<WebhookIncidentAlertsTable>;
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;
@@ -3678,4 +3682,4 @@ declare function publicKeyPemFromPrivate(privateKeyPem: string): string;
 declare function ed25519KeyId(publicKeyPem: string): string;
 declare function signEd25519(payload: string, privateKey: KeyObject): string;
 declare function verifyEd25519(payload: string, signatureBase64: string, publicKey: KeyObject): boolean;
-export { Account, AccountBalanceAlerts, AccountBalanceAlertsTable, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiFailedRequest, ApiFailedRequestsTable, ApiKey, ApiKeyRevokedError, ApiKeysTable, ApiRequestLogRow, ApiRequestLogTable, ArchiveFetch, ArchiveFetchesTable, AuthenticationError, AuthorizationError, BILLING_PAUSED_PREFIX, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, CHAIN_TRIGGER_FIELDS, CHAIN_TRIGGER_TYPES, CODE_TO_STATUS, ChainApplyDeliveryOf, ChainApplyEnvelope, ChainApplyEnvelopeOf, ChainEventEnvelope, ChainFtBurnData, ChainFtMintData, ChainFtTransferData, ChainNftBurnData, ChainNftMintData, ChainNftTransferData, ChainPrintEventData, ChainReadCacheTable, ChainReorgOrphanedEntry, ChainReorgRollbackDelivery, ChainReorgRollbackEnvelope, ChainReorgsTable, ChainStxBurnData, ChainStxLockData, ChainStxMintData, ChainStxTransferData, ChainTestDelivery, ChainTxLevelEvent, ChainWebhookDelivery, ChainWebhookEnvelope, CliDeviceLogin, CliDeviceLoginStatus, CliDeviceLoginsTable, ContactRequest, ContactRequestsTable, Contract, ContractsTable, CoverageSegmentsTable, CreateWebhookRequest, CreateWebhookRequestSchema, CreateWebhookResponse, DB_TO_STREAMS_EVENT_TYPE, DECODED_EVENT_TYPES2 as DECODED_EVENT_TYPES, DEFAULT_BTC_CONFIRMATIONS, Database, DatabaseError, DbPlane, DbReadRow, DbSplitStatus, DeadLetterEventsTable, DeadRow, DecodedEventType2 as DecodedEventType, DecodedEventsTable, DecoderCheckpointsTable, DeliveryRow, DeploySubgraphRequest, DeploySubgraphRequestSchema, DeploySubgraphResponse, EMPTY_RANGE_EVENT_INDEX_SENTINEL, Env, ErrorCode, ErrorCodes, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, FeedbackTicket, FeedbackTicketsTable, ForbiddenError, HealthHour, HealthSnapshotPoint, INSIGHT_SEVERITIES, IndexColumn, IndexColumnType, IndexPrimaryKey, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountBalanceAlerts, InsertAccountCredits, InsertAccountSpendCap, InsertApiFailedRequest, InsertApiKey, InsertApiRequestLogRow, InsertArchiveFetch, InsertBlock, InsertContactRequest, InsertContract, InsertEvent, InsertFeedbackTicket, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertStateWrite, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, Insight, InsightEvidence, InsightEvidenceSchema, InsightListResponse, InsightListResponseSchema, InsightMutesTable, InsightResourceKind, InsightResourceKindSchema, InsightSchema, InsightSeverity, InsightSeveritySchema, InsightsTable, InstancesTable, KeyRotatedError, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, MigrationRole, NativeClock, NotFoundError, NumericAsText, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, ParsedCreateWebhookRequest, ParsedReplayWebhookRequest, ParsedUpdateWebhookRequest, PaymentRequiredError, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5CycleSignersTable, Pox5CyclesTable, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RUNE_EVENT_TYPES, RateLimitError, ReindexResponse, RepairMode, ReplayResult, ReplayWebhookRequest, ReplayWebhookRequestSchema, RetryState, RotateSecretResponse, RunStatus, RuneApplyDeliveryOf, RuneApplyEnvelope, RuneEventType, SEVERITY_ORDER, SOURCE_READ_COLUMNS, SOURCE_READ_PKS, SOURCE_READ_TYPES, STREAMS_DB_EVENT_TYPES, STREAMS_EVENT_TYPES, STREAMS_TO_DB_EVENT_TYPES, SbtcDepositEvent, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SbtcWithdrawalEvent, SbtcWithdrawalSweptConfirmedEvent, SecondLayerError, SentinelAccount, SentinelAccountsTable, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StateWrite, StateWritesArchiveTable, StateWritesTable, StreamsCursor, StreamsDbEventType, StreamsEventType, Subgraph, SubgraphAgentSchema, SubgraphAggregateParams, SubgraphAggregateResponse, SubgraphDetail, SubgraphErrorGroupsTable, SubgraphGap, SubgraphGapEntry, SubgraphGapRange, SubgraphGapsResponse, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphQueryParams, SubgraphSpecFormat, SubgraphSpecOptions, SubgraphSummary, SubgraphSyncInfo, SubgraphVerification, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, TABLE_TO_DB, TenantSuspendedError, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountBalanceAlerts, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UpdateWebhookRequest, UpdateWebhookRequestSchema, UsageLedgerRow, UsageLedgerTable, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE2 as VM_NODE_TO_STORED_TYPE, VM_STORED_TO_NODE_TYPE, ValidationError, VersionConflictError, VmEvent, VmEventType, VmEventsArchiveTable, VmEventsTable, VmNodeEventType, WEBHOOK_FORMATS, WEBHOOK_STATUSES, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookDetail, WebhookFormat, WebhookFormatSchema, WebhookIncidentAlert, WebhookIncidentAlertsTable, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookStatus, WebhookStatusSchema, WebhookSummary, WebhooksTable, applicationDatabaseUrl, assertDbSplit, billingPausedCode, blockEndCursor, bucketHourly, closeDb, closeDbOrTimeout, committedHeight, compareStreamsCursor, exports_hmac as crypto, decodeStreamsCursor, describeDbUrl, exports_ed25519 as ed25519, encodeStreamsCursor, finalizedBurnHeight, formatWebhookSchemaErrors, generateSubgraphAgentSchema, generateSubgraphMarkdown, generateSubgraphOpenApi, generateSubgraphSpec, getDb, getDbSplitStatus, getEnv, getErrorMessage, getMigrationRole, getRawClient, getSourceDb, getTargetDb, isBnsDecoderEnabled, isEmptyRangeCursor, isPox4DecoderEnabled, isPox5DecoderEnabled, isSbtcDecoderEnabled, jsonb, logger, onChainPlane, onControlPlane, parseJsonb, resolveSourceUrl, resolveTargetUrl, setMigrationRole, sql };
+export { Account, AccountBalanceAlerts, AccountBalanceAlertsTable, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiFailedRequest, ApiFailedRequestsTable, ApiKey, ApiKeyRevokedError, ApiKeysTable, ApiRequestLogRow, ApiRequestLogTable, ArchiveFetch, ArchiveFetchesTable, AuthenticationError, AuthorizationError, BILLING_PAUSED_PREFIX, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, CHAIN_TRIGGER_FIELDS, CHAIN_TRIGGER_TYPES, CODE_TO_STATUS, ChainApplyDeliveryOf, ChainApplyEnvelope, ChainApplyEnvelopeOf, ChainEventEnvelope, ChainFtBurnData, ChainFtMintData, ChainFtTransferData, ChainNftBurnData, ChainNftMintData, ChainNftTransferData, ChainPrintEventData, ChainReadCacheTable, ChainReorgOrphanedEntry, ChainReorgRollbackDelivery, ChainReorgRollbackEnvelope, ChainReorgsTable, ChainStxBurnData, ChainStxLockData, ChainStxMintData, ChainStxTransferData, ChainTestDelivery, ChainTxLevelEvent, ChainWebhookDelivery, ChainWebhookEnvelope, CliDeviceLogin, CliDeviceLoginStatus, CliDeviceLoginsTable, CliDeviceProduct, ContactRequest, ContactRequestsTable, Contract, ContractsTable, CoverageSegmentsTable, CreateWebhookRequest, CreateWebhookRequestSchema, CreateWebhookResponse, DB_TO_STREAMS_EVENT_TYPE, DECODED_EVENT_TYPES2 as DECODED_EVENT_TYPES, DEFAULT_BTC_CONFIRMATIONS, Database, DatabaseError, DbPlane, DbReadRow, DbSplitStatus, DeadLetterEventsTable, DeadRow, DecodedEventType2 as DecodedEventType, DecodedEventsTable, DecoderCheckpointsTable, DeliveryRow, DeploySubgraphRequest, DeploySubgraphRequestSchema, DeploySubgraphResponse, EMPTY_RANGE_EVENT_INDEX_SENTINEL, Env, ErrorCode, ErrorCodes, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, FeedbackTicket, FeedbackTicketsTable, ForbiddenError, HealthHour, HealthSnapshotPoint, INSIGHT_SEVERITIES, IndexColumn, IndexColumnType, IndexPrimaryKey, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountBalanceAlerts, InsertAccountCredits, InsertAccountSpendCap, InsertApiFailedRequest, InsertApiKey, InsertApiRequestLogRow, InsertArchiveFetch, InsertBlock, InsertContactRequest, InsertContract, InsertEvent, InsertFeedbackTicket, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertStateWrite, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, Insight, InsightEvidence, InsightEvidenceSchema, InsightListResponse, InsightListResponseSchema, InsightMutesTable, InsightResourceKind, InsightResourceKindSchema, InsightSchema, InsightSeverity, InsightSeveritySchema, InsightsTable, InstancesTable, KeyRotatedError, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, MigrationRole, NativeClock, NotFoundError, NumericAsText, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, ParsedCreateWebhookRequest, ParsedReplayWebhookRequest, ParsedUpdateWebhookRequest, PaymentRequiredError, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5CycleSignersTable, Pox5CyclesTable, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RUNE_EVENT_TYPES, RateLimitError, ReindexResponse, RepairMode, ReplayResult, ReplayWebhookRequest, ReplayWebhookRequestSchema, RetryState, RotateSecretResponse, RunStatus, RuneApplyDeliveryOf, RuneApplyEnvelope, RuneEventType, SEVERITY_ORDER, SOURCE_READ_COLUMNS, SOURCE_READ_PKS, SOURCE_READ_TYPES, STREAMS_DB_EVENT_TYPES, STREAMS_EVENT_TYPES, STREAMS_TO_DB_EVENT_TYPES, SbtcDepositEvent, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SbtcWithdrawalEvent, SbtcWithdrawalSweptConfirmedEvent, SecondLayerError, SentinelAccount, SentinelAccountsTable, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StateWrite, StateWritesArchiveTable, StateWritesTable, StreamsCursor, StreamsDbEventType, StreamsEventType, Subgraph, SubgraphAgentSchema, SubgraphAggregateParams, SubgraphAggregateResponse, SubgraphDetail, SubgraphErrorGroupsTable, SubgraphGap, SubgraphGapEntry, SubgraphGapRange, SubgraphGapsResponse, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphQueryParams, SubgraphSpecFormat, SubgraphSpecOptions, SubgraphSummary, SubgraphSyncInfo, SubgraphVerification, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, TABLE_TO_DB, TenantSuspendedError, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountBalanceAlerts, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UpdateWebhookRequest, UpdateWebhookRequestSchema, UsageLedgerRow, UsageLedgerTable, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE2 as VM_NODE_TO_STORED_TYPE, VM_STORED_TO_NODE_TYPE, ValidationError, VersionConflictError, VmEvent, VmEventType, VmEventsArchiveTable, VmEventsTable, VmNodeEventType, WEBHOOK_FORMATS, WEBHOOK_STATUSES, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookDetail, WebhookFormat, WebhookFormatSchema, WebhookIncidentAlert, WebhookIncidentAlertsTable, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookStatus, WebhookStatusSchema, WebhookSummary, WebhooksTable, applicationDatabaseUrl, assertDbSplit, billingPausedCode, blockEndCursor, bucketHourly, closeDb, closeDbOrTimeout, committedHeight, compareStreamsCursor, exports_hmac as crypto, decodeStreamsCursor, describeDbUrl, exports_ed25519 as ed25519, encodeStreamsCursor, finalizedBurnHeight, formatWebhookSchemaErrors, generateSubgraphAgentSchema, generateSubgraphMarkdown, generateSubgraphOpenApi, generateSubgraphSpec, getDb, getDbSplitStatus, getEnv, getErrorMessage, getMigrationRole, getRawClient, getSourceDb, getTargetDb, isBnsDecoderEnabled, isEmptyRangeCursor, isPox4DecoderEnabled, isPox5DecoderEnabled, isSbtcDecoderEnabled, jsonb, logger, onChainPlane, onControlPlane, parseJsonb, resolveSourceUrl, resolveTargetUrl, setMigrationRole, sql };

package/dist/src/insights/index.d.ts

@@ -1225,13 +1225,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/dist/src/node/local-client.d.ts

@@ -1030,13 +1030,17 @@ interface WebhookIncidentAlertsTable {
 	resolved_at: Date | null;
 }
 type CliDeviceLoginStatus = "pending" | "approved" | "denied" | "consumed";
-/** One browser sign-in attempt from `sl login`. Only the hash of the CLI's
-*  device code is stored; the key is minted when the CLI polls after approval. */
+/** The product that started a CLI sign-in; null is `sl login`. */
+type CliDeviceProduct = "sentinel";
+/** One browser sign-in attempt from `sl login` (or `sentinel login`). Only the
+*  hash of the CLI's device code is stored; the session is opened when the CLI
+*  polls after approval. */
 interface CliDeviceLoginsTable {
 	id: Generated<string>;
 	device_code_hash: string;
 	user_code: string;
 	client_name: string;
+	product: CliDeviceProduct | null;
 	status: Generated<CliDeviceLoginStatus>;
 	account_id: string | null;
 	key_name: string | null;

package/migrations/0176_cli_device_logins_product.ts

@@ -0,0 +1,25 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Which product started a CLI sign-in: null for `sl login`, `sentinel` for
+ * `sentinel login`. The approval page names the product, and approving a
+ * Sentinel sign-in links the account to Sentinel. A CHECK keeps it to known
+ * products, never requester-chosen text.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`
+			ALTER TABLE cli_device_logins ADD COLUMN IF NOT EXISTS product text
+				CHECK (product IN ('sentinel'))
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE cli_device_logins DROP COLUMN IF EXISTS product`.execute(
+			db,
+		);
+	});
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "13.10.0",
+	"version": "13.11.0",
 	"description": "Internal building blocks shared across Secondlayer packages.",
 	"license": "MIT",
 	"repository": {