@authhero/cloudflare-adapter 2.36.1 → 2.37.1

package/dist/types/wfp-provisioner/tenant-hook.d.ts

@@ -81,5 +81,18 @@ export interface WfpTenantProvisioningHookOptions {
 export interface WfpTenantProvisioningHook {
     onProvision(tenantId: string): Promise<void>;
     onDeprovision(tenantId: string): Promise<void>;
+    /**
+     * Re-run provisioning for an already-existing WFP tenant to pull it onto the
+     * current bundle + migrations — i.e. an upgrade. Re-uploads the worker
+     * script (an upload overwrites), reconciles any migrations not yet applied to
+     * the tenant D1, re-runs `syncDefaults`, then rewrites `worker_version`,
+     * `bundle_configuration`, and `database_version` so the recorded versions
+     * reflect what now runs. Marks `provisioning_state = "pending"` while the
+     * upgrade is in flight and `ready` on success (`failed` on error).
+     *
+     * Throws if the tenant doesn't exist or isn't WFP-provisioned — callers
+     * (e.g. a management-API redeploy endpoint) surface that as a 4xx.
+     */
+    onUpgrade(tenantId: string): Promise<void>;
 }
 export declare function createWfpTenantProvisioningHook(options: WfpTenantProvisioningHookOptions): WfpTenantProvisioningHook;

package/dist/types/wfp-provisioner/types.d.ts

@@ -83,8 +83,26 @@ export interface CloudflareWfpD1ProvisionerOptions {
     /**
      * SQL migrations applied in array order to every new tenant D1. Typically
      * loaded from `@authhero/drizzle`'s shipped migrations via your build tool.
+     *
+     * The name of the LAST entry is reported back as the tenant's
+     * `database_version` (the schema version this bundle targets), so keep the
+     * array ordered and the names stable.
      */
     migrations: ProvisionerMigration[];
+    /**
+     * Identifier of the worker image / variant being deployed (e.g.
+     * `"authhero-drizzle-d1"`). Recorded verbatim on the tenant row as
+     * `bundle_configuration` so the control plane can tell which build a tenant
+     * runs. Optional — omit if you don't track image variants.
+     */
+    bundleConfiguration?: string;
+    /**
+     * Release tag or git SHA of `tenantWorkerScript`, supplied by the operator
+     * at build time. Recorded verbatim on the tenant row as `worker_version` so
+     * the control plane can detect when a tenant lags the current build and
+     * needs an upgrade. Optional but strongly recommended.
+     */
+    workerVersion?: string;
     /**
      * Resolver that returns the secret values to set on the tenant worker.
      * Called once per `onProvision`. The provisioner uploads each entry via
@@ -145,6 +163,25 @@ export interface ProvisionResult {
     d1DatabaseId: string;
     scriptName: string;
     d1Name: string;
+    /**
+     * The worker image / variant that was deployed — echoes back
+     * `options.bundleConfiguration` (undefined if not configured). The hook
+     * persists it to `tenants.bundle_configuration`.
+     */
+    bundleConfiguration?: string;
+    /**
+     * The release tag / git SHA that was deployed — echoes back
+     * `options.workerVersion` (undefined if not configured). The hook persists
+     * it to `tenants.worker_version`.
+     */
+    workerVersion?: string;
+    /**
+     * Name of the latest migration applied to the tenant D1 (the last entry in
+     * `options.migrations`), i.e. the schema version the deployed bundle
+     * targets. `undefined` when no migrations are configured. The hook persists
+     * it to `tenants.database_version`.
+     */
+    databaseVersion?: string;
 }
 /**
  * What `createCloudflareWfpD1Provisioner` returns — the two lifecycle

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "2.36.1",
+  "version": "2.37.1",
   "files": [
     "dist"
   ],
@@ -42,8 +42,8 @@
     "typescript": "^5.9.3",
     "vite": "^8.0.14",
     "vitest": "^4.1.7",
-    "@authhero/multi-tenancy": "14.25.1",
-    "authhero": "8.7.2"
+    "authhero": "8.8.1",
+    "@authhero/multi-tenancy": "14.25.1"
   },
   "peerDependencies": {
     "@authhero/multi-tenancy": "^14.0.0",
@@ -62,8 +62,8 @@
   "dependencies": {
     "nanoid": "^5.1.11",
     "wretch": "^3.0.8",
-    "@authhero/kysely-adapter": "11.8.11",
-    "@authhero/adapter-interfaces": "3.2.0"
+    "@authhero/adapter-interfaces": "3.3.0",
+    "@authhero/kysely-adapter": "11.9.0"
   },
   "scripts": {
     "build": "vite build && tsc -p tsconfig.types.json && rollup -c rollup.dts.config.mjs",