leapview admin

Administrative utilities

Usage

leapview admin [flags]

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for admin

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

Subcommands

access

Offline access policy administration

Usage

leapview admin access [flags]

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for access

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

access stage-grant

Stage an exact resource grant for normal candidate approval and activation

Usage
leapview admin access stage-grant [flags]
Behavior
Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--action stringSlice [] exact typed action; may be repeated
--apply bool false persist the staged policy; otherwise preview only
--expected-revision int64 0 current target policy revision
-h, --help bool false help for stage-grant
--id string `` stable grant ID
--kind string `` canonical resource kind
--operation-id string `` stable idempotency key
--principal string `` exact recipient principal ID
--project string `` exact claimed Project ID
--resource string `` exact resource ID; validated against the candidate graph at admission
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

credentials

Offline customer credential setup

Usage

leapview admin credentials [flags]

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for credentials

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

credentials admit-first-source

Admit one exact production source binding and credential operator with the app stopped

Usage
leapview admin credentials admit-first-source [flags]
Behavior
Side effect Confirmation
write never

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--apply bool false persist audited admission; otherwise preview only
-h, --help bool false help for admit-first-source
--intent string `` private JSON file with explicit exact source and operator intent
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

credentials rotate

Rewrap one bounded batch with the configured active key while the app is stopped

Usage
leapview admin credentials rotate [flags]
Behavior
Side effect Confirmation
write never

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--batch-size int 100 maximum envelopes per invocation; rerun until complete
-h, --help bool false help for rotate
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

credentials setup

Declare the customer owner and verify the configured keyring with the app stopped

Usage
leapview admin credentials setup [flags]
Behavior
Side effect Confirmation
write never

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
-h, --help bool false help for setup
--owner string `` explicit customer owner ID; immutable once declared
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

delivery

Manage plan-driven delivery state

Usage

leapview admin delivery [flags]

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for delivery

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

delivery pool

Manage the delivery physical-pool admission

Usage
leapview admin delivery pool [flags]

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
-h, --help bool false help for pool
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening
delivery pool bootstrap

Create and admit one operator-controlled delivery physical pool

Usage
leapview admin delivery pool bootstrap [flags]
Behavior
Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--apply bool false persist the pool and admission; without this flag only validate and print digests
--evidence string `` path to machine-readable shared-pool conformance evidence JSON
-h, --help bool false help for bootstrap
--pool string `` path to non-secret physical-pool identity JSON
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening
delivery pool upgrade

Upgrade one admitted delivery physical-pool catalog

Usage
leapview admin delivery pool upgrade [flags]
Behavior
Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--apply bool false commit the catalog upgrade; without this flag run a dry-run through the operation authority
--backup-verified bool false assert that the required backup was verified before migration
--catalog-schema-version string `` target DuckLake catalog schema version
--drain-verified bool false assert that active readers were drained before migration
--evidence string `` path to target shared-pool conformance evidence JSON
-h, --help bool false help for upgrade
--migration-id string `` durable catalog migration UUID
--pool string `` path to target physical-pool identity JSON
--recovery-decision string `` failure recovery decision: rollback or forward_recovery
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

initialize

Initialize one instance administrator and publisher credential

Usage

leapview admin initialize [flags]

Behavior

Side effect Confirmation
write never

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
--acknowledge-credentials bool false remove the recoverable initialization credential bundle after it has been stored safely
--format string json output format (json)
-h, --help bool false help for initialize

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

maintenance

Prune bounded operational history

Usage

leapview admin maintenance [flags]

Behavior

Side effect Confirmation
destructive conditional

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
--apply bool false delete rows instead of dry-run
--archived-agent-days int 180 archived agent conversation retention in days; 0 disables archived conversation pruning
--audit-days int 365 audit event retention in days; 0 disables audit pruning
--auth-state-days int 30 expired or revoked auth state retention in days; 0 disables auth-state pruning
-h, --help bool false help for maintenance
--query-days int 90 query event retention in days; 0 disables query pruning

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

nominate-sso-admin

Nominate an existing OIDC principal as an instance administrator

Usage

leapview admin nominate-sso-admin [flags]

Behavior

Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
--apply bool false assign the administrator role; otherwise preview only
-h, --help bool false help for nominate-sso-admin
--instance string `` exact durable instance ID
--principal string `` verified OIDC principal UUID; email matching is never used

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

recovery

Prepare, validate, and publish immutable recovery frontiers

Usage

leapview admin recovery [flags]

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for recovery

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

recovery prepare

Prepare one immutable recovery frontier

Usage
leapview admin recovery prepare [flags]
Behavior
Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--expires-at string `` retention-root expiry timestamp (RFC3339)
-h, --help bool false help for prepare
--retain-root-id string `` optional retention-root UUID; defaults to the recovery-set ID
--set string `` path to the prepared recovery-set JSON
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

recovery publish

Publish one recovery frontier after exact validation

Usage
leapview admin recovery publish [flags]
Behavior
Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--fence-epoch uint64 0 publication fence epoch (positive unsigned integer)
-h, --help bool false help for publish
--publisher string `` publisher identity
--set-id string `` recovery-set UUID
--validation-attempt-id string `` exact passed validation-attempt UUID
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

recovery validate

Record provider-produced evidence for one recovery attempt

Usage
leapview admin recovery validate [flags]
Behavior
Side effect Confirmation
write required

Machine-readable: JSON · Markdown

Options
Flag Type Default Description
--attempt-id string `` validation-attempt UUID
--evidence string `` path to provider-produced typed validation evidence JSON
-h, --help bool false help for validate
--set-id string `` recovery-set UUID
--validator string `` operator/provider validator identity
Inherited options
Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

transition-access

Apply and publish one host-admitted legacy-to-typed access transition

Usage

leapview admin transition-access [flags]

Behavior

Side effect Confirmation
write never

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for transition-access
--journal string `` private host-maintenance journal
--mode string `` admitted execution mode: live, rehearsal or detached
--publisher-credential-file string `` private publisher workload secret file
--recovery-digest string `` exact host-verified recovery point digest
--request string `` private host NativeRequest JSON
--reviewer-credential-file string `` private reviewer workload secret file

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening

transition-access-inventory

Read the exact legacy policy and serving identities for an admitted transition

Usage

leapview admin transition-access-inventory [flags]

Behavior

Side effect Confirmation
read never

Machine-readable: JSON · Markdown

Options

Flag Type Default Description
-h, --help bool false help for transition-access-inventory
--project string `` exact claimed ProjectID

Inherited options

Flag Type Default Description
--no-input bool false disable terminal prompts and automatic browser opening