kf file-drop
Register and operate file-drop bindings for batch ingestion.
kf file-drop pause-binding
Pause a binding so new transfers are rejected at the ingest surface.
Pause a binding so new transfers are rejected at the ingest surface. PAUSED -> ACTIVE is handled by ResumeFileDropBinding.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--binding-id <value> | yes | Binding id. |
--expected-version <value> | yes | Expected version. |
--reason <value> | no | Reason. |
Example
kf file-drop pause-binding --tenant tnt_demo --actor-type USER --actor-id usr_sam --binding-id <value> --expected-version <value>kf file-drop register-binding
Register an inbound or outbound file-drop binding.
Register an inbound or outbound file-drop binding. INBOUND KF-hosted bindings are R2; OUTBOUND bindings are R3; TENANT_* and partner-owned bindings are R4 because the platform accepts caller-managed credentials or delegated external authority. Approval-gated: the approval is bound to commandType=RegisterFileDropBinding and resourceId=<identifier> within the tenant environment, with a 24h TTL. Starts at PENDING; activates on first successful transfer. Disposition A per the internal implementation notes.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--identifier <value> | yes | Identifier. |
--direction <value> | yes | Direction. |
--location <value> | yes | Location. |
--credentials-secret-ref-stdin | no | Read Credentials secret ref. from stdin. |
--parser-profile-id <value> | no | Parser profile id. |
--target-command-type <value> | no | Target command type. |
--idempotency-scope <value> | yes | Idempotency scope. |
--rate-limit <value> | yes | Rate limit. |
--owner-lane <value> | yes | Owner lane. |
Example
kf file-drop register-binding --tenant tnt_demo --actor-type USER --actor-id usr_sam --identifier <value> --direction <value> --location <value> --idempotency-scope <value> --rate-limit <value> --owner-lane <value>kf file-drop replay-transfer
Re-parse a prior transfer under a fresh correlation id.
Re-parse a prior transfer under a fresh correlation id. Creates a new file_drop_transfers row linked via custom_fields.replayed_from; the original row is preserved. Approval-gated (R3) because a replay can re-emit downstream commands.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--transfer-id <value> | yes | Transfer id. |
Example
kf file-drop replay-transfer --tenant tnt_demo --actor-type USER --actor-id usr_sam --transfer-id <value>kf file-drop resume-binding
Resume a paused binding.
Resume a paused binding. No transfers are replayed on resume; callers drop new files through the standard ingest path.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--binding-id <value> | yes | Binding id. |
--expected-version <value> | yes | Expected version. |
--reason <value> | no | Reason. |
Example
kf file-drop resume-binding --tenant tnt_demo --actor-type USER --actor-id usr_sam --binding-id <value> --expected-version <value>kf file-drop revoke-binding
Terminal revoke of a binding.
Terminal revoke of a binding. Once REVOKED the binding cannot be updated, resumed, or used; a new registration is required. Approval-gated (R4) because the state is irreversible.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--binding-id <value> | yes | Binding id. |
--expected-version <value> | yes | Expected version. |
--reason <value> | yes | Reason. |
Example
kf file-drop revoke-binding --tenant tnt_demo --actor-type USER --actor-id usr_sam --binding-id <value> --expected-version <value> --reason <value>kf file-drop rotate-credential
Point a binding at a new credentials_secret_ref.
Point a binding at a new credentials_secret_ref. The receipt and event deliberately omit the ref value so audit trails never expose secret material. Approval-gated (R3).
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--binding-id <value> | yes | Binding id. |
--expected-version <value> | yes | Expected version. |
--new-credentials-secret-ref-stdin | yes | Read New credentials secret ref. from stdin. |
Example
kf file-drop rotate-credential --tenant tnt_demo --actor-type USER --actor-id usr_sam --binding-id <value> --expected-version <value> --new-credentials-secret-ref-stdinkf file-drop update-binding
Update rate limit, parser profile, or target command type on a binding.
Update rate limit, parser profile, or target command type on a binding. Direction, transport, and identifier are immutable and rejected at validation. Version-CAS on file_drop_bindings.version.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--binding-id <value> | yes | Binding id. |
--expected-version <value> | yes | Expected version. |
--rate-limit <value> | no | Rate limit. |
--parser-profile-id <value> | no | Parser profile id. |
--target-command-type <value> | no | Target command type. |
--direction <value> | no | not accepted for this command |
--transport <value> | no | not accepted for this command |
--identifier <value> | no | not accepted for this command |
Example
kf file-drop update-binding --tenant tnt_demo --actor-type USER --actor-id usr_sam --binding-id <value> --expected-version <value>