@cat-factory/contracts 0.173.0 → 0.175.0

package/dist/entities.d.ts

@@ -287,7 +287,7 @@ export declare const blockSchema: v.ObjectSchema<{
      * runs with no infra stood up.
      */
     readonly provisioning: v.OptionalSchema<v.ObjectSchema<{
-        readonly type: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+        readonly type: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
         readonly manifestSource: v.OptionalSchema<v.VariantSchema<"type", [v.ObjectSchema<{
             readonly type: v.LiteralSchema<"colocated", undefined>;
             readonly path: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 500, undefined>]>;

package/dist/environments.d.ts

@@ -259,8 +259,13 @@ export type EnvironmentManifest = v.InferOutput<typeof environmentManifestSchema
  * The provision type a service declares — the INPUT SHAPE it produces. `infraless` means
  * the service stands up no environment (the Tester runs with no infra). A `custom` service
  * additionally pins a `manifestId` (see {@link serviceProvisioningSchema}).
+ *
+ * `cloudflare` is the per-PR Cloudflare Workers preview: unlike every other type the service
+ * declares NOTHING repo-specific here, because the recipe lives in the repo's own preview
+ * workflow rather than in a compose file or a manifest tree the platform reads. Declaring the
+ * type is the whole service side of it.
  */
-export declare const provisionTypeSchema: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+export declare const provisionTypeSchema: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
 export type ProvisionType = v.InferOutput<typeof provisionTypeSchema>;
 /**
  * Machine-readable cause of an environment-provisioning failure, surfaced on the run's
@@ -277,9 +282,10 @@ export type EnvironmentFailureReason = v.InferOutput<typeof environmentFailureRe
  * The engine a workspace/user handler uses to stand up / connect to an environment for a
  * provision type. `none` is the synthetic engine for `infraless`. `local-docker` runs a
  * compose stack locally; `local-k3s`/`remote-kubernetes` drive a kube apiserver;
+ * `cloudflare` drives a repo's preview workflow over the VCS deployments API;
  * `remote-custom` is the generic BYO HTTP management API.
  */
-export declare const infraEngineSchema: v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "remote-custom", "none"], undefined>;
+export declare const infraEngineSchema: v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "cloudflare", "remote-custom", "none"], undefined>;
 export type InfraEngine = v.InferOutput<typeof infraEngineSchema>;
 /** A custom-manifest-type identifier (lower-kebab slug). */
 export declare const manifestIdSchema: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
@@ -950,8 +956,49 @@ export declare const eksProvisionConfigSchema: v.ObjectSchema<{
     }, undefined>], undefined>, undefined>, undefined>;
 }, undefined>;
 export type EksProvisionConfig = v.InferOutput<typeof eksProvisionConfigSchema>;
+/** The secret-bundle key the Cloudflare env backend reads its VCS API token from. */
+export declare const CLOUDFLARE_ENV_TOKEN_SECRET_KEY = "githubToken";
+/** Default templates, exported so the provider, the UI hints and the docs cannot drift apart. */
+export declare const CLOUDFLARE_DEFAULT_WORKER_NAME_TEMPLATE = "cat-factory-pr-{{pullNumber}}";
+export declare const CLOUDFLARE_DEFAULT_ENVIRONMENT_NAME_TEMPLATE = "pr-{{pullNumber}}";
+/**
+ * The Cloudflare preview engine connection (the "how"). Everything here is non-secret; the
+ * VCS API token rides the encrypted secret bundle under
+ * {@link CLOUDFLARE_ENV_TOKEN_SECRET_KEY}.
+ *
+ * The two name templates are the CONTRACT WITH THE WORKFLOW, which is why they are config and
+ * not constants: the platform derives the environment name it deploys under and the Worker
+ * URL it hands the tester, and the workflow names its resources from the same values. Change
+ * one and you must change the other. They default to the reference workflow's shape, so a
+ * deployment that copied `deploy/preview` unmodified sets neither.
+ */
+export declare const cloudflareEnvironmentConfigSchema: v.ObjectSchema<{
+    readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+    /**
+     * The account's `*.workers.dev` subdomain — the preview URL is
+     * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+     * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+     * takes minutes.
+     */
+    readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+    /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+    readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+    /**
+     * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+     * provision — which is the point of a built-in backend over a pasted manifest: one handler
+     * serves every repository in the workspace instead of being pinned to one.
+     */
+    readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+    /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+    readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+    /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+    readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+    /** Fallback TTL (ms) after which the env is swept + torn down. */
+    readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+}, undefined>;
+export type CloudflareEnvironmentConfig = v.InferOutput<typeof cloudflareEnvironmentConfigSchema>;
 /** Built-in environment backend kinds the contract knows by name. */
-export declare const RESERVED_ENVIRONMENT_BACKEND_KINDS: readonly ['manifest', 'kubernetes', 'eks'];
+export declare const RESERVED_ENVIRONMENT_BACKEND_KINDS: readonly ['manifest', 'kubernetes', 'eks', 'cloudflare'];
 /**
  * The `kind` slug of a CUSTOM (third-party, programmatically-registered) environment
  * backend: any lower-kebab slug that isn't a reserved built-in. A custom backend stores
@@ -1461,6 +1508,32 @@ export declare const environmentBackendConfigSchema: v.VariantSchema<"kind", [v.
             }, "a secret entry must set exactly one of secretRef or valueTemplate.">]>, undefined>;
         }, undefined>], undefined>, undefined>, undefined>;
     }, undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly kind: v.LiteralSchema<"cloudflare", undefined>;
+    readonly cloudflare: v.ObjectSchema<{
+        readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+        /**
+         * The account's `*.workers.dev` subdomain — the preview URL is
+         * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+         * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+         * takes minutes.
+         */
+        readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+        /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+        readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+        /**
+         * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+         * provision — which is the point of a built-in backend over a pasted manifest: one handler
+         * serves every repository in the workspace instead of being pinned to one.
+         */
+        readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+        /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+        readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+        /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+        readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+        /** Fallback TTL (ms) after which the env is swept + torn down. */
+        readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+    }, undefined>;
 }, undefined>, v.ObjectSchema<{
     readonly kind: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>, v.RegexAction<string, "must be a lower-kebab slug">, v.CheckAction<string, "reserved backend kind">]>;
     readonly manifest: v.ObjectSchema<{
@@ -1602,7 +1675,7 @@ export type EnvironmentBackendKind = EnvironmentBackendConfig['kind'];
  * handler (the "how") at provision time.
  */
 export declare const serviceProvisioningSchema: v.ObjectSchema<{
-    readonly type: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+    readonly type: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
     /** `kubernetes`: where the per-PR manifests live (colocated in the PR repo, or a separate repo). */
     readonly manifestSource: v.OptionalSchema<v.VariantSchema<"type", [v.ObjectSchema<{
         readonly type: v.LiteralSchema<"colocated", undefined>;
@@ -2293,6 +2366,32 @@ export declare const infraHandlerConfigSchema: v.VariantSchema<"engine", [v.Obje
             readonly scope: v.OptionalSchema<v.PicklistSchema<["per-environment", "shared"], undefined>, undefined>;
         }, undefined>, undefined>, undefined>;
     }, undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly engine: v.LiteralSchema<"cloudflare", undefined>;
+    readonly cloudflare: v.ObjectSchema<{
+        readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+        /**
+         * The account's `*.workers.dev` subdomain — the preview URL is
+         * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+         * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+         * takes minutes.
+         */
+        readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+        /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+        readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+        /**
+         * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+         * provision — which is the point of a built-in backend over a pasted manifest: one handler
+         * serves every repository in the workspace instead of being pinned to one.
+         */
+        readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+        /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+        readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+        /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+        readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+        /** Fallback TTL (ms) after which the env is swept + torn down. */
+        readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+    }, undefined>;
 }, undefined>, v.ObjectSchema<{
     readonly engine: v.LiteralSchema<"remote-custom", undefined>;
     readonly manifest: v.ObjectSchema<{
@@ -2464,10 +2563,10 @@ export declare const upsertCustomManifestTypeSchema: v.ObjectSchema<{
 export type UpsertCustomManifestTypeInput = v.InferOutput<typeof upsertCustomManifestTypeSchema>;
 /** One registered infra handler, as exposed to clients (never secret VALUES). */
 export declare const environmentHandlerViewSchema: v.ObjectSchema<{
-    readonly provisionType: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+    readonly provisionType: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
     /** For `custom`: the manifest id this handler is keyed to; `null` otherwise. */
     readonly manifestId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
-    readonly engine: v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "remote-custom", "none"], undefined>;
+    readonly engine: v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "cloudflare", "remote-custom", "none"], undefined>;
     readonly providerId: v.StringSchema<undefined>;
     readonly label: v.StringSchema<undefined>;
     readonly baseUrl: v.StringSchema<undefined>;
@@ -2807,6 +2906,32 @@ export declare const environmentHandlerViewSchema: v.ObjectSchema<{
                 readonly scope: v.OptionalSchema<v.PicklistSchema<["per-environment", "shared"], undefined>, undefined>;
             }, undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly engine: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly engine: v.LiteralSchema<"remote-custom", undefined>;
         readonly manifest: v.ObjectSchema<{
@@ -2950,7 +3075,7 @@ export type EnvironmentHandlerView = v.InferOutput<typeof environmentHandlerView
  * the engine). Every secret key the chosen backend references must be supplied.
  */
 export declare const registerEnvironmentHandlerSchema: v.ObjectSchema<{
-    readonly provisionType: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+    readonly provisionType: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
     readonly manifestId: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>, undefined>, undefined>;
     readonly config: v.VariantSchema<"engine", [v.ObjectSchema<{
         readonly engine: v.LiteralSchema<"local-docker", undefined>;
@@ -3275,6 +3400,32 @@ export declare const registerEnvironmentHandlerSchema: v.ObjectSchema<{
                 readonly scope: v.OptionalSchema<v.PicklistSchema<["per-environment", "shared"], undefined>, undefined>;
             }, undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly engine: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly engine: v.LiteralSchema<"remote-custom", undefined>;
         readonly manifest: v.ObjectSchema<{
@@ -3743,6 +3894,32 @@ export declare const testEnvironmentHandlerSchema: v.ObjectSchema<{
                 readonly scope: v.OptionalSchema<v.PicklistSchema<["per-environment", "shared"], undefined>, undefined>;
             }, undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly engine: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly engine: v.LiteralSchema<"remote-custom", undefined>;
         readonly manifest: v.ObjectSchema<{
@@ -4212,6 +4389,32 @@ export declare const upsertEnvironmentUserHandlerBodySchema: v.ObjectSchema<{
                 readonly scope: v.OptionalSchema<v.PicklistSchema<["per-environment", "shared"], undefined>, undefined>;
             }, undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly engine: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly engine: v.LiteralSchema<"remote-custom", undefined>;
         readonly manifest: v.ObjectSchema<{
@@ -4353,10 +4556,10 @@ export type UpsertEnvironmentUserHandlerBody = v.InferOutput<typeof upsertEnviro
 /** The batched per-type handler bundle: every workspace handler + the custom-type catalog. */
 export declare const environmentHandlersBundleSchema: v.ObjectSchema<{
     readonly handlers: v.ArraySchema<v.ObjectSchema<{
-        readonly provisionType: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+        readonly provisionType: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
         /** For `custom`: the manifest id this handler is keyed to; `null` otherwise. */
         readonly manifestId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
-        readonly engine: v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "remote-custom", "none"], undefined>;
+        readonly engine: v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "cloudflare", "remote-custom", "none"], undefined>;
         readonly providerId: v.StringSchema<undefined>;
         readonly label: v.StringSchema<undefined>;
         readonly baseUrl: v.StringSchema<undefined>;
@@ -4696,6 +4899,32 @@ export declare const environmentHandlersBundleSchema: v.ObjectSchema<{
                     readonly scope: v.OptionalSchema<v.PicklistSchema<["per-environment", "shared"], undefined>, undefined>;
                 }, undefined>, undefined>, undefined>;
             }, undefined>;
+        }, undefined>, v.ObjectSchema<{
+            readonly engine: v.LiteralSchema<"cloudflare", undefined>;
+            readonly cloudflare: v.ObjectSchema<{
+                readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+                /**
+                 * The account's `*.workers.dev` subdomain — the preview URL is
+                 * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+                 * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+                 * takes minutes.
+                 */
+                readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+                /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+                readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+                /**
+                 * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+                 * provision — which is the point of a built-in backend over a pasted manifest: one handler
+                 * serves every repository in the workspace instead of being pinned to one.
+                 */
+                readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+                /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+                readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+                /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+                readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+                /** Fallback TTL (ms) after which the env is swept + torn down. */
+                readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+            }, undefined>;
         }, undefined>, v.ObjectSchema<{
             readonly engine: v.LiteralSchema<"remote-custom", undefined>;
             readonly manifest: v.ObjectSchema<{
@@ -4899,13 +5128,13 @@ export declare const environmentHandleSchema: v.ObjectSchema<{
      * (`kubernetes` | `docker-compose` | `custom` | `infraless`). Recorded at provision
      * time so run details can show exactly what was provisioned. Null for legacy rows.
      */
-    readonly provisionType: v.OptionalSchema<v.NullableSchema<v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>, undefined>, undefined>;
+    readonly provisionType: v.OptionalSchema<v.NullableSchema<v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>, undefined>, undefined>;
     /**
      * The resolved engine that handled the provisioning (`local-docker` | `local-k3s` |
      * `remote-kubernetes` | `remote-custom` | `none`). Surfaced in run details alongside
      * the provider label. Null for legacy rows.
      */
-    readonly engine: v.OptionalSchema<v.NullableSchema<v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "remote-custom", "none"], undefined>, undefined>, undefined>;
+    readonly engine: v.OptionalSchema<v.NullableSchema<v.PicklistSchema<["local-docker", "local-k3s", "remote-kubernetes", "cloudflare", "remote-custom", "none"], undefined>, undefined>, undefined>;
 }, undefined>;
 export type EnvironmentHandle = v.InferOutput<typeof environmentHandleSchema>;
 /** A workspace's provider binding, as exposed to clients (never secret values). */
@@ -5413,6 +5642,32 @@ export declare const environmentConnectionSchema: v.ObjectSchema<{
                 }, "a secret entry must set exactly one of secretRef or valueTemplate.">]>, undefined>;
             }, undefined>], undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly kind: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly kind: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>, v.RegexAction<string, "must be a lower-kebab slug">, v.CheckAction<string, "reserved backend kind">]>;
         readonly manifest: v.ObjectSchema<{
@@ -6046,6 +6301,32 @@ export declare const registerEnvironmentProviderSchema: v.ObjectSchema<{
                 }, "a secret entry must set exactly one of secretRef or valueTemplate.">]>, undefined>;
             }, undefined>], undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly kind: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly kind: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>, v.RegexAction<string, "must be a lower-kebab slug">, v.CheckAction<string, "reserved backend kind">]>;
         readonly manifest: v.ObjectSchema<{
@@ -6681,6 +6962,32 @@ export declare const testEnvironmentConnectionSchema: v.ObjectSchema<{
                 }, "a secret entry must set exactly one of secretRef or valueTemplate.">]>, undefined>;
             }, undefined>], undefined>, undefined>, undefined>;
         }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly kind: v.LiteralSchema<"cloudflare", undefined>;
+        readonly cloudflare: v.ObjectSchema<{
+            readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+            /**
+             * The account's `*.workers.dev` subdomain — the preview URL is
+             * `https://<worker>.<subdomain>.workers.dev`. The platform can DERIVE that before anything
+             * is built, which is what lets a tester be handed a URL without waiting on a deploy that
+             * takes minutes.
+             */
+            readonly workersSubdomain: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 63, undefined>, v.RegexAction<string, "must be a bare workers.dev subdomain label, e.g. \"my-account\"">]>;
+            /** VCS API root. Absent ⇒ `https://api.github.com`. Set it for GitHub Enterprise Server. */
+            readonly apiBaseUrl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+            /**
+             * `owner/repo` carrying the preview workflow. Absent ⇒ THE BLOCK'S OWN REPO, resolved per
+             * provision — which is the point of a built-in backend over a pasted manifest: one handler
+             * serves every repository in the workspace instead of being pinned to one.
+             */
+            readonly repo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.RegexAction<string, "must be \"owner/repo\"">]>, undefined>;
+            /** Worker name template; the URL is derived from it. Absent ⇒ `cat-factory-pr-{{pullNumber}}`. */
+            readonly workerNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Deployment environment name template. Absent ⇒ `pr-{{pullNumber}}`. */
+            readonly environmentNameTemplate: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>, v.RegexAction<string, "may contain only lowercase letters, digits, hyphens and {{placeholders}}">]>, undefined>;
+            /** Fallback TTL (ms) after which the env is swept + torn down. */
+            readonly defaultTtlMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
     }, undefined>, v.ObjectSchema<{
         readonly kind: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>, v.RegexAction<string, "must be a lower-kebab slug">, v.CheckAction<string, "reserved backend kind">]>;
         readonly manifest: v.ObjectSchema<{
@@ -7067,7 +7374,7 @@ export declare const provisioningRecommendationSchema: v.ObjectSchema<{
     readonly detected: v.BooleanSchema<undefined>;
     /** The prefilled service provisioning the user confirms/edits (the "what + where"). */
     readonly provisioning: v.ObjectSchema<{
-        readonly type: v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>;
+        readonly type: v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>;
         /** `kubernetes`: where the per-PR manifests live (colocated in the PR repo, or a separate repo). */
         readonly manifestSource: v.OptionalSchema<v.VariantSchema<"type", [v.ObjectSchema<{
             readonly type: v.LiteralSchema<"colocated", undefined>;
@@ -7496,7 +7803,7 @@ export declare const detectServiceProvisioningSchema: v.ObjectSchema<{
      * manifests are also present. Only `kubernetes`/`docker-compose`/`custom` change the search
      * order (the others have nothing to auto-detect); absent ⇒ prefer `kubernetes` (richer).
      */
-    readonly prefer: v.OptionalSchema<v.PicklistSchema<["kubernetes", "docker-compose", "custom", "infraless"], undefined>, undefined>;
+    readonly prefer: v.OptionalSchema<v.PicklistSchema<["kubernetes", "docker-compose", "cloudflare", "custom", "infraless"], undefined>, undefined>;
     /**
      * `custom` only: the selected custom-manifest-type id. When PRESENT, that type's `detect()`
      * hook runs (or its `defaultManifestPath` seeds the path search when it has no hook — see