[purpshell]

Summary

This PR adds CLI commands for API polymorfa/polymorfa#428 and #434 and pins @polymorfa/sdk to exactly 0.1.0-dev.20261004024706, which is published from SDK polymorfa/sdks#332 (merge d96df7d).

• flow endpoint get FLOW --session N

• flow endpoint set FLOW --session N --mode forward|function|direct:

  • forward: --url, optional --rotate-signing-secret.
  • function: --function, optional --deployment.
  • direct: --url.
  • All modes: optional --disabled and --expected-revision.

  Mismatched flags are refused before any request is sent. The signing secret is printed once, with a warning. The command makes one attempt.

• flow endpoint delete FLOW --session N --yes

• flow endpoint receipts FLOW [--session N] [--limit 1-100]. Receipts are metadata only.

• flow key custody --session N

• flow key rotate --session N --yes. One attempt; an unknown outcome is not retried.

The existing flow key get/register commands (customer key through Graph) are unchanged. The README documents the new commands and custody rules.

Verification

npm run verify passes: format, lint, typecheck, 108 files and 1027 tests, build, pack, and audit (0 vulnerabilities). The new test/commands/flow-endpoints.test.ts covers paths and query binding, exact bodies per mode, flag refusal before dispatch, confirmation requirements, and the single-attempt rotate.

Five-part

• API and SDK: merged.
• CLI: updated.
• Docs: README updated. Public docs stay withheld while the feature is beta.
• Feature release: unchanged gates (Cloud onboarding beta; platform.functions for function mode).

---

^{Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.}

[coderabbitai]

Warning

Review limit reached

The included review limit has been reached and this organization has disabled usage-based review continuation. Wait for reviews to reset or ask a billing admin to change After included review limits.

• Ask an admin to enable usage-based reviews

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Next included review available in 10 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 8 included reviews currently available. Your 8 included PR review attempts over the past 7 days set your current allowance at 8 reviews per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Team
• Run ID: 1a4484ba-8add-4553-bbf1-ce4545c2844c

📥 Commits

Reviewing files that changed from the base of the PR and between 519868b and 4d8faa3.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (9)

• README.md
• package.json
• src/commands/flow/endpoint/delete.ts
• src/commands/flow/endpoint/get.ts
• src/commands/flow/endpoint/receipts.ts
• src/commands/flow/endpoint/set.ts
• src/commands/flow/key/custody.ts
• src/commands/flow/key/rotate.ts
• test/commands/flow-endpoints.test.ts

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}