@dragonmastery/tamer 0.1.2 → 0.28.0

package/dist/generator-CIMbcPzv.mjs

@@ -0,0 +1,77 @@
+import { a as resourceModules } from "./fetchStackImports-B4ZJahOt.mjs";
+import { join } from "path";
+import { writeFileSync } from "fs";
+
+//#region src/features/secrets-store/secrets-store.generate.ts
+/**
+* Resolve `secretsStoreSecrets[]` worker bindings into wrangler-shape
+* `secrets_store_secrets[]` entries by looking up the referenced
+* Tamer-managed store's `store_id` in state. Throws with an actionable
+* message if a referenced store has never been applied — the binding
+* would otherwise be deployed against a non-existent store.
+*/
+function secretsStoreSecretsGenerate(bindings, env, state, naming) {
+	const out = [];
+	for (const b of bindings) {
+		const derivedName = naming.secretsStoreName(b.store, env);
+		const entry = state.get(`secrets_store:${derivedName}`);
+		if (!entry || entry.type !== "secrets_store") throw new Error(`Secrets Store binding "${b.binding}" references store "${b.store}" — not in state. Declare it under \`resources.secretsStores\` and run 'tamer apply --env ${env}' first.`);
+		out.push({
+			binding: b.binding,
+			store_id: entry.cfId,
+			secret_name: b.secretName
+		});
+	}
+	return out;
+}
+
+//#endregion
+//#region src/core/wrangler/generator.ts
+/**
+* Build the worker's `wrangler.json` by asking every registered resource
+* module for its bindings fragment, then merging on top of the
+* passthrough config (`resolved.wranglerConfig`). Adding a new resource
+* kind requires zero edits here — register the module, done.
+*/
+function generateWranglerConfig(resolved, state, naming) {
+	let config = {
+		...resolved.wranglerConfig,
+		$schema: "node_modules/wrangler/config-schema.json"
+	};
+	const worker = {
+		workerKey: resolved.workerKey,
+		deployedName: resolved.workerName
+	};
+	for (const mod of resourceModules) {
+		const resources = mod.pickResources(resolved.resources);
+		const fragment = mod.generate({
+			resources,
+			env: resolved.env,
+			state,
+			naming,
+			passthrough: resolved.wranglerConfig,
+			worker
+		});
+		config = {
+			...config,
+			...fragment
+		};
+	}
+	const secretBindings = resolved.resources?.secretsStoreSecrets ?? [];
+	if (secretBindings.length > 0) {
+		const passthroughSecrets = resolved.wranglerConfig.secrets_store_secrets ?? [];
+		const generated = secretsStoreSecretsGenerate(secretBindings, resolved.env, state, naming);
+		config = {
+			...config,
+			secrets_store_secrets: [...passthroughSecrets, ...generated]
+		};
+	}
+	return config;
+}
+function writeWranglerJson(workerDir, config, outFile = "wrangler.json") {
+	writeFileSync(join(workerDir, outFile), JSON.stringify(config, null, 2), "utf-8");
+}
+
+//#endregion
+export { writeWranglerJson as n, generateWranglerConfig as t };
+//# sourceMappingURL=generator-CIMbcPzv.mjs.map

package/dist/generator-CIMbcPzv.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator-CIMbcPzv.mjs","names":["out: GeneratedSecretsStoreSecretBinding[]","config: WranglerConfig"],"sources":["../src/features/secrets-store/secrets-store.generate.ts","../src/core/wrangler/generator.ts"],"sourcesContent":["import type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type {\n  StateEntry,\n  SecretsStoreSecretBinding,\n  SecretsStoreStateEntry,\n} from \"../../types.js\";\n\nexport interface SecretsStoreStateLike {\n  get(key: string): StateEntry | undefined;\n  getAll(): Record<string, StateEntry>;\n}\n\n/**\n * One row of wrangler's `secrets_store_secrets[]` array. Resolved from a\n * worker's declared `secretsStoreSecrets[]` by looking up the\n * Tamer-managed store's `store_id` in state. The named secret itself must\n * already exist inside the store (created out-of-band via wrangler\n * `secrets-store secret create`); Tamer never reads or writes secret\n * values.\n */\nexport interface GeneratedSecretsStoreSecretBinding {\n  binding: string;\n  store_id: string;\n  secret_name: string;\n}\n\n/**\n * Resolve `secretsStoreSecrets[]` worker bindings into wrangler-shape\n * `secrets_store_secrets[]` entries by looking up the referenced\n * Tamer-managed store's `store_id` in state. Throws with an actionable\n * message if a referenced store has never been applied — the binding\n * would otherwise be deployed against a non-existent store.\n */\nexport function secretsStoreSecretsGenerate(\n  bindings: SecretsStoreSecretBinding[],\n  env: string,\n  state: SecretsStoreStateLike,\n  naming: NamingEngine,\n): GeneratedSecretsStoreSecretBinding[] {\n  const out: GeneratedSecretsStoreSecretBinding[] = [];\n  for (const b of bindings) {\n    const derivedName = naming.secretsStoreName(b.store, env);\n    const entry = state.get(`secrets_store:${derivedName}`) as\n      | SecretsStoreStateEntry\n      | undefined;\n    if (!entry || entry.type !== \"secrets_store\") {\n      throw new Error(\n        `Secrets Store binding \"${b.binding}\" references store \"${b.store}\" — ` +\n          `not in state. Declare it under \\`resources.secretsStores\\` and run ` +\n          `'tamer apply --env ${env}' first.`,\n      );\n    }\n    out.push({\n      binding: b.binding,\n      store_id: entry.cfId,\n      secret_name: b.secretName,\n    });\n  }\n  return out;\n}\n","import { writeFileSync } from \"fs\";\nimport { join } from \"path\";\nimport type { WranglerConfig } from \"../../generated/wrangler-types.js\";\nimport type { ResolvedWorkerConfig } from \"../config/resolver.js\";\nimport type { StateManager } from \"../state/StateManager.js\";\nimport type { NamingEngine } from \"../naming/NamingEngine.js\";\nimport { resourceModules } from \"../registry/registry.js\";\nimport { secretsStoreSecretsGenerate } from \"../../features/secrets-store/secrets-store.generate.js\";\n\nexport class CfiError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"CfiError\";\n  }\n}\n\n/**\n * Build the worker's `wrangler.json` by asking every registered resource\n * module for its bindings fragment, then merging on top of the\n * passthrough config (`resolved.wranglerConfig`). Adding a new resource\n * kind requires zero edits here — register the module, done.\n */\nexport function generateWranglerConfig(\n  resolved: ResolvedWorkerConfig,\n  state: StateManager,\n  naming: NamingEngine,\n): WranglerConfig {\n  let config: WranglerConfig = {\n    ...resolved.wranglerConfig,\n    $schema: \"node_modules/wrangler/config-schema.json\",\n  };\n\n  const worker = {\n    workerKey: resolved.workerKey,\n    deployedName: resolved.workerName,\n  };\n  for (const mod of resourceModules) {\n    const resources = mod.pickResources(resolved.resources);\n    const fragment = mod.generate({\n      resources,\n      env: resolved.env,\n      state,\n      naming,\n      passthrough: resolved.wranglerConfig,\n      worker,\n    });\n    config = { ...config, ...fragment };\n  }\n\n  const secretBindings = resolved.resources?.secretsStoreSecrets ?? [];\n  if (secretBindings.length > 0) {\n    const passthroughSecrets =\n      resolved.wranglerConfig.secrets_store_secrets ?? [];\n    const generated = secretsStoreSecretsGenerate(\n      secretBindings,\n      resolved.env,\n      state,\n      naming,\n    );\n    config = {\n      ...config,\n      secrets_store_secrets: [...passthroughSecrets, ...generated],\n    };\n  }\n\n  return config;\n}\n\nexport function writeWranglerJson(\n  workerDir: string,\n  config: WranglerConfig,\n  outFile: string = \"wrangler.json\",\n): void {\n  const path = join(workerDir, outFile);\n  writeFileSync(path, JSON.stringify(config, null, 2), \"utf-8\");\n}\n"],"mappings":";;;;;;;;;;;;AAiCA,SAAgB,4BACd,UACA,KACA,OACA,QACsC;CACtC,MAAMA,MAA4C,EAAE;AACpD,MAAK,MAAM,KAAK,UAAU;EACxB,MAAM,cAAc,OAAO,iBAAiB,EAAE,OAAO,IAAI;EACzD,MAAM,QAAQ,MAAM,IAAI,iBAAiB,cAAc;AAGvD,MAAI,CAAC,SAAS,MAAM,SAAS,gBAC3B,OAAM,IAAI,MACR,0BAA0B,EAAE,QAAQ,sBAAsB,EAAE,MAAM,4FAE1C,IAAI,UAC7B;AAEH,MAAI,KAAK;GACP,SAAS,EAAE;GACX,UAAU,MAAM;GAChB,aAAa,EAAE;GAChB,CAAC;;AAEJ,QAAO;;;;;;;;;;;ACpCT,SAAgB,uBACd,UACA,OACA,QACgB;CAChB,IAAIC,SAAyB;EAC3B,GAAG,SAAS;EACZ,SAAS;EACV;CAED,MAAM,SAAS;EACb,WAAW,SAAS;EACpB,cAAc,SAAS;EACxB;AACD,MAAK,MAAM,OAAO,iBAAiB;EACjC,MAAM,YAAY,IAAI,cAAc,SAAS,UAAU;EACvD,MAAM,WAAW,IAAI,SAAS;GAC5B;GACA,KAAK,SAAS;GACd;GACA;GACA,aAAa,SAAS;GACtB;GACD,CAAC;AACF,WAAS;GAAE,GAAG;GAAQ,GAAG;GAAU;;CAGrC,MAAM,iBAAiB,SAAS,WAAW,uBAAuB,EAAE;AACpE,KAAI,eAAe,SAAS,GAAG;EAC7B,MAAM,qBACJ,SAAS,eAAe,yBAAyB,EAAE;EACrD,MAAM,YAAY,4BAChB,gBACA,SAAS,KACT,OACA,OACD;AACD,WAAS;GACP,GAAG;GACH,uBAAuB,CAAC,GAAG,oBAAoB,GAAG,UAAU;GAC7D;;AAGH,QAAO;;AAGT,SAAgB,kBACd,WACA,QACA,UAAkB,iBACZ;AAEN,eADa,KAAK,WAAW,QAAQ,EACjB,KAAK,UAAU,QAAQ,MAAM,EAAE,EAAE,QAAQ"}

package/dist/import-BrduwA9Z.mjs

@@ -0,0 +1,164 @@
+import { n as loadConfig, t as getWorkers } from "./loader-DP7yXqT6.mjs";
+import { n as cloudflareAccountIdFromEnv, t as CFApiClient } from "./CFApiClient-DhbyyV71.mjs";
+import { _ as namingFromConfig, a as resourceModules, i as getResourceModule, p as resolveWorkerConfig, t as fetchStackImports } from "./fetchStackImports-B4ZJahOt.mjs";
+import { f as stackNameForConfig, t as StateManager } from "./StateManager-DTqtLLVX.mjs";
+import "./r2S3EmptyBucket-DD81ZWQ7.mjs";
+import { n as workerRouteStateKey, t as findZoneIdByName } from "./zoneResolver-VoxLHM4N.mjs";
+
+//#region src/cli/commands/import.ts
+const REGISTRY_KINDS = new Set(resourceModules.map((m) => m.kind));
+/**
+* `tamer import` — register an existing Cloudflare resource into Tamer state
+* by logical name (CloudFormation `import_resources` analogue). For all
+* resource-registry kinds the work is delegated to the module's
+* `importOne` hook; `dispatch_namespace` and `worker_route` remain inline
+* because they aren't registry resources today.
+*/
+async function runImport(options) {
+	const env = options.env;
+	if (env === "local") throw new Error("import: --env local is not supported (no persisted state)");
+	const baseDir = process.cwd();
+	const config = await loadConfig(options.configPath, { env });
+	const accountId = config.account_id ?? cloudflareAccountIdFromEnv();
+	if (!accountId) throw new Error("account_id required in config or CLOUDFLARE_ACCOUNT_ID env var");
+	const api = new CFApiClient(accountId);
+	const naming = namingFromConfig(config);
+	const state = new StateManager(config.tenant.id, env, stackNameForConfig(config));
+	await state.hydrate(api);
+	state.beginOperation("import", `${options.kind}:${options.logical}`);
+	const ts = (/* @__PURE__ */ new Date()).toISOString();
+	try {
+		if (REGISTRY_KINDS.has(options.kind)) {
+			const mod = getResourceModule(options.kind);
+			if (!mod) throw new Error(`unknown import kind "${options.kind}"`);
+			await mod.importOne({
+				options: {
+					env,
+					kind: options.kind,
+					logical: options.logical,
+					cfId: options.cfId,
+					shardDate: options.shardDate,
+					createdDate: options.createdDate,
+					routeId: options.routeId,
+					zoneName: options.zoneName
+				},
+				env,
+				api,
+				state,
+				naming,
+				ts
+			});
+		} else if (options.kind === "dispatch_namespace") await importDispatchNamespace({
+			options,
+			env,
+			api,
+			state,
+			ts
+		});
+		else if (options.kind === "dns_record") await importDnsRecord({
+			options,
+			env,
+			api,
+			state,
+			config,
+			ts
+		});
+		else if (options.kind === "worker_route") await importWorkerRoute({
+			options,
+			env,
+			baseDir,
+			accountId,
+			api,
+			naming,
+			state,
+			config,
+			ts
+		});
+		else throw new Error(`unknown import kind "${options.kind}"`);
+		state.finishOperation("imported");
+		await state.persist(api);
+		console.log(`Imported ${options.kind} "${options.logical}" into ${env} state.`);
+	} catch (err) {
+		const msg = err instanceof Error ? err.message : String(err);
+		state.failOperation(msg);
+		try {
+			await state.persist(api);
+		} catch {}
+		throw err;
+	}
+}
+async function importDispatchNamespace(ctx) {
+	const { options, api, state, ts } = ctx;
+	const hit = (await api.dispatchNamespaceListAll()).find((n) => n.namespace_name === options.cfId);
+	if (!hit) throw new Error(`import dispatch_namespace: namespace "${options.cfId}" not found`);
+	const derivedName = hit.namespace_name;
+	const key = `dispatch_ns:${derivedName}`;
+	const existing = state.get(key);
+	state.set(key, {
+		type: "dispatch_namespace",
+		logicalName: options.logical,
+		derivedName,
+		createdAt: existing?.type === "dispatch_namespace" ? existing.createdAt : ts,
+		updatedAt: ts
+	});
+}
+async function importDnsRecord(ctx) {
+	const { options, api, state, config, ts } = ctx;
+	if (!options.cfId) throw new Error("import dns_record: --cf-id <recordId> is required (the record id from `tamer drift` or the Cloudflare dashboard URL)");
+	const declared = (config.dnsRecords ?? []).find((r) => r.logicalName === options.logical);
+	if (!declared) throw new Error(`import dns_record: no dnsRecords entry with logicalName "${options.logical}" in the Tamer project config`);
+	const hit = (await api.zoneDnsRecordListAll(declared.zoneId)).find((r) => r.id === options.cfId);
+	if (!hit) throw new Error(`import dns_record: record id "${options.cfId}" not found in zone "${declared.zoneId}"`);
+	if (hit.type !== declared.type) throw new Error(`import dns_record: cf record type "${hit.type}" does not match declared type "${declared.type}"`);
+	const { dnsRecordStateKey } = await import("./dns-records.resolve-C2T0m4NG.mjs");
+	const key = dnsRecordStateKey(declared.zoneId, declared.type, declared.name);
+	const existing = state.get(key);
+	state.set(key, {
+		type: "dns_record",
+		logicalName: options.logical,
+		zoneId: declared.zoneId,
+		recordType: declared.type,
+		name: hit.name,
+		content: hit.content,
+		ttl: hit.ttl ?? 1,
+		proxied: hit.proxied ?? false,
+		priority: hit.priority,
+		comment: hit.comment ?? "",
+		recordId: hit.id,
+		createdAt: existing?.type === "dns_record" ? existing.createdAt : ts,
+		updatedAt: ts
+	});
+}
+async function importWorkerRoute(ctx) {
+	const { options, env, baseDir, accountId, api, naming, state, config, ts } = ctx;
+	if (!options.routeId) throw new Error("import worker_route: --route-id <id> is required");
+	const wc = (await getWorkers(config, baseDir)).find(([k]) => k === options.logical)?.[1];
+	if (!wc) throw new Error(`import worker_route: no worker key "${options.logical}" in the Tamer project config`);
+	const imports = await fetchStackImports(api, config, env);
+	const resolved = await resolveWorkerConfig(config, options.logical, wc, env, baseDir, accountId, naming, state, { imports });
+	if (resolved.apiManagedRoutes.length === 0) throw new Error(`import worker_route: worker "${options.logical}" declares no api-managed tamerRoutes for env ${env}`);
+	const route = options.zoneName ? resolved.apiManagedRoutes.find((r) => r.zone_name === options.zoneName) : resolved.apiManagedRoutes[0];
+	if (!route) throw new Error(`import worker_route: no route for zone "${options.zoneName}" in resolved config`);
+	const zoneId = await findZoneIdByName(api, route.zone_name);
+	if (!zoneId) throw new Error(`import worker_route: zone "${route.zone_name}" not found`);
+	const hit = (await api.zoneWorkerRoutesList(zoneId)).find((r) => r.id === options.routeId);
+	if (!hit) throw new Error(`import worker_route: route id "${options.routeId}" not found in zone "${route.zone_name}"`);
+	if (hit.pattern !== route.pattern) throw new Error(`import worker_route: cf pattern "${hit.pattern}" does not match resolved "${route.pattern}"`);
+	const key = workerRouteStateKey(zoneId, options.routeId);
+	const existing = state.get(key);
+	state.set(key, {
+		type: "worker_route",
+		workerKey: options.logical,
+		workerName: resolved.workerName,
+		zoneId,
+		zoneName: route.zone_name,
+		routeId: options.routeId,
+		pattern: route.pattern,
+		createdAt: existing?.type === "worker_route" ? existing.createdAt : ts,
+		updatedAt: ts
+	});
+}
+
+//#endregion
+export { runImport };
+//# sourceMappingURL=import-BrduwA9Z.mjs.map

package/dist/import-BrduwA9Z.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-BrduwA9Z.mjs","names":[],"sources":["../src/cli/commands/import.ts"],"sourcesContent":["import { loadConfig, getWorkers } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport { workerRouteStateKey } from \"../../features/worker-route/worker-route.stateKey.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport {\n  getResourceModule,\n  resourceModules,\n  type ResourceKind,\n} from \"../../core/registry/registry.js\";\n\n/** All registered resource kinds plus the non-registry imports. */\nexport type ImportKind =\n  | ResourceKind\n  | \"dispatch_namespace\"\n  | \"dns_record\"\n  | \"worker_route\";\n\nexport interface ImportOptions {\n  env: string;\n  kind: ImportKind;\n  /** Logical name from `tamer.config.ts` (or worker key, for `worker_route`). */\n  logical: string;\n  /** Cloudflare resource id (D1 uuid, KV id, R2 bucket name, or namespace name). */\n  cfId?: string;\n  /** Required for sharded D1 imports (YYYY-MM-DD). */\n  shardDate?: string;\n  /** R2 buckets only: creation date (YYYY-MM-DD) used in the binding key. */\n  createdDate?: string;\n  /** worker_route only: the route id from `/zones/{id}/workers/routes`. */\n  routeId?: string;\n  /** worker_route only: zone name from `tamerRoutes`. */\n  zoneName?: string;\n  configPath?: string;\n}\n\nconst REGISTRY_KINDS = new Set<string>(resourceModules.map((m) => m.kind));\n\n/**\n * `tamer import` — register an existing Cloudflare resource into Tamer state\n * by logical name (CloudFormation `import_resources` analogue). For all\n * resource-registry kinds the work is delegated to the module's\n * `importOne` hook; `dispatch_namespace` and `worker_route` remain inline\n * because they aren't registry resources today.\n */\nexport async function runImport(options: ImportOptions): Promise<void> {\n  const env = options.env;\n  if (env === \"local\") {\n    throw new Error(\"import: --env local is not supported (no persisted state)\");\n  }\n  const baseDir = process.cwd();\n  const config = await loadConfig(options.configPath, { env });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  state.beginOperation(\"import\", `${options.kind}:${options.logical}`);\n\n  const ts = new Date().toISOString();\n\n  try {\n    if (REGISTRY_KINDS.has(options.kind)) {\n      const mod = getResourceModule(options.kind as ResourceKind);\n      if (!mod) throw new Error(`unknown import kind \"${options.kind}\"`);\n      await mod.importOne({\n        options: {\n          env,\n          kind: options.kind,\n          logical: options.logical,\n          cfId: options.cfId,\n          shardDate: options.shardDate,\n          createdDate: options.createdDate,\n          routeId: options.routeId,\n          zoneName: options.zoneName,\n        },\n        env,\n        api,\n        state,\n        naming,\n        ts,\n      });\n    } else if (options.kind === \"dispatch_namespace\") {\n      await importDispatchNamespace({ options, env, api, state, ts });\n    } else if (options.kind === \"dns_record\") {\n      await importDnsRecord({ options, env, api, state, config, ts });\n    } else if (options.kind === \"worker_route\") {\n      await importWorkerRoute({\n        options,\n        env,\n        baseDir,\n        accountId,\n        api,\n        naming,\n        state,\n        config,\n        ts,\n      });\n    } else {\n      throw new Error(`unknown import kind \"${options.kind}\"`);\n    }\n\n    state.finishOperation(\"imported\");\n    await state.persist(api);\n    console.log(`Imported ${options.kind} \"${options.logical}\" into ${env} state.`);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    state.failOperation(msg);\n    try {\n      await state.persist(api);\n    } catch {\n      /* swallow secondary persist failure */\n    }\n    throw err;\n  }\n}\n\nasync function importDispatchNamespace(ctx: {\n  options: ImportOptions;\n  env: string;\n  api: CFApiClient;\n  state: StateManager;\n  ts: string;\n}): Promise<void> {\n  const { options, api, state, ts } = ctx;\n  const namespaces = await api.dispatchNamespaceListAll();\n  const hit = namespaces.find((n) => n.namespace_name === options.cfId);\n  if (!hit) {\n    throw new Error(\n      `import dispatch_namespace: namespace \"${options.cfId}\" not found`,\n    );\n  }\n  const derivedName = hit.namespace_name;\n  const key = `dispatch_ns:${derivedName}`;\n  const existing = state.get(key);\n  state.set(key, {\n    type: \"dispatch_namespace\",\n    logicalName: options.logical,\n    derivedName,\n    createdAt:\n      existing?.type === \"dispatch_namespace\" ? existing.createdAt : ts,\n    updatedAt: ts,\n  });\n}\n\nasync function importDnsRecord(ctx: {\n  options: ImportOptions;\n  env: string;\n  api: CFApiClient;\n  state: StateManager;\n  config: Awaited<ReturnType<typeof loadConfig>>;\n  ts: string;\n}): Promise<void> {\n  const { options, api, state, config, ts } = ctx;\n  if (!options.cfId) {\n    throw new Error(\n      \"import dns_record: --cf-id <recordId> is required (the record id from `tamer drift` or the Cloudflare dashboard URL)\",\n    );\n  }\n  const declared = (config.dnsRecords ?? []).find(\n    (r) => r.logicalName === options.logical,\n  );\n  if (!declared) {\n    throw new Error(\n      `import dns_record: no dnsRecords entry with logicalName \"${options.logical}\" in the Tamer project config`,\n    );\n  }\n  const list = await api.zoneDnsRecordListAll(declared.zoneId);\n  const hit = list.find((r) => r.id === options.cfId);\n  if (!hit) {\n    throw new Error(\n      `import dns_record: record id \"${options.cfId}\" not found in zone \"${declared.zoneId}\"`,\n    );\n  }\n  if (hit.type !== declared.type) {\n    throw new Error(\n      `import dns_record: cf record type \"${hit.type}\" does not match declared type \"${declared.type}\"`,\n    );\n  }\n  const { dnsRecordStateKey } = await import(\n    \"../../features/dns-records/dns-records.resolve.js\"\n  );\n  const key = dnsRecordStateKey(declared.zoneId, declared.type, declared.name);\n  const existing = state.get(key);\n  state.set(key, {\n    type: \"dns_record\",\n    logicalName: options.logical,\n    zoneId: declared.zoneId,\n    recordType: declared.type,\n    name: hit.name,\n    content: hit.content,\n    ttl: hit.ttl ?? 1,\n    proxied: hit.proxied ?? false,\n    priority: hit.priority,\n    comment: hit.comment ?? \"\",\n    recordId: hit.id,\n    createdAt: existing?.type === \"dns_record\" ? existing.createdAt : ts,\n    updatedAt: ts,\n  });\n}\n\nasync function importWorkerRoute(ctx: {\n  options: ImportOptions;\n  env: string;\n  baseDir: string;\n  accountId: string;\n  api: CFApiClient;\n  naming: ReturnType<typeof namingFromConfig>;\n  state: StateManager;\n  config: Awaited<ReturnType<typeof loadConfig>>;\n  ts: string;\n}): Promise<void> {\n  const { options, env, baseDir, accountId, api, naming, state, config, ts } =\n    ctx;\n  if (!options.routeId) {\n    throw new Error(\"import worker_route: --route-id <id> is required\");\n  }\n  const workers = await getWorkers(config, baseDir);\n  const wc = workers.find(([k]) => k === options.logical)?.[1];\n  if (!wc) {\n    throw new Error(\n      `import worker_route: no worker key \"${options.logical}\" in the Tamer project config`,\n    );\n  }\n  const imports = await fetchStackImports(api, config, env);\n  const resolved = await resolveWorkerConfig(\n    config,\n    options.logical,\n    wc,\n    env,\n    baseDir,\n    accountId,\n    naming,\n    state,\n    { imports },\n  );\n  if (resolved.apiManagedRoutes.length === 0) {\n    throw new Error(\n      `import worker_route: worker \"${options.logical}\" declares no api-managed tamerRoutes for env ${env}`,\n    );\n  }\n\n  const route = options.zoneName\n    ? resolved.apiManagedRoutes.find((r) => r.zone_name === options.zoneName)\n    : resolved.apiManagedRoutes[0];\n  if (!route) {\n    throw new Error(\n      `import worker_route: no route for zone \"${options.zoneName}\" in resolved config`,\n    );\n  }\n  const zoneId = await findZoneIdByName(api, route.zone_name);\n  if (!zoneId) {\n    throw new Error(`import worker_route: zone \"${route.zone_name}\" not found`);\n  }\n  const list = await api.zoneWorkerRoutesList(zoneId);\n  const hit = list.find((r) => r.id === options.routeId);\n  if (!hit) {\n    throw new Error(\n      `import worker_route: route id \"${options.routeId}\" not found in zone \"${route.zone_name}\"`,\n    );\n  }\n  if (hit.pattern !== route.pattern) {\n    throw new Error(\n      `import worker_route: cf pattern \"${hit.pattern}\" does not match resolved \"${route.pattern}\"`,\n    );\n  }\n  const key = workerRouteStateKey(zoneId, options.routeId);\n  const existing = state.get(key);\n  state.set(key, {\n    type: \"worker_route\",\n    workerKey: options.logical,\n    workerName: resolved.workerName,\n    zoneId,\n    zoneName: route.zone_name,\n    routeId: options.routeId,\n    pattern: route.pattern,\n    createdAt: existing?.type === \"worker_route\" ? existing.createdAt : ts,\n    updatedAt: ts,\n  });\n}\n"],"mappings":";;;;;;;;AAyCA,MAAM,iBAAiB,IAAI,IAAY,gBAAgB,KAAK,MAAM,EAAE,KAAK,CAAC;;;;;;;;AAS1E,eAAsB,UAAU,SAAuC;CACrE,MAAM,MAAM,QAAQ;AACpB,KAAI,QAAQ,QACV,OAAM,IAAI,MAAM,4DAA4D;CAE9E,MAAM,UAAU,QAAQ,KAAK;CAC7B,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YAAY,OAAO,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAEH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;AACxB,OAAM,eAAe,UAAU,GAAG,QAAQ,KAAK,GAAG,QAAQ,UAAU;CAEpE,MAAM,sBAAK,IAAI,MAAM,EAAC,aAAa;AAEnC,KAAI;AACF,MAAI,eAAe,IAAI,QAAQ,KAAK,EAAE;GACpC,MAAM,MAAM,kBAAkB,QAAQ,KAAqB;AAC3D,OAAI,CAAC,IAAK,OAAM,IAAI,MAAM,wBAAwB,QAAQ,KAAK,GAAG;AAClE,SAAM,IAAI,UAAU;IAClB,SAAS;KACP;KACA,MAAM,QAAQ;KACd,SAAS,QAAQ;KACjB,MAAM,QAAQ;KACd,WAAW,QAAQ;KACnB,aAAa,QAAQ;KACrB,SAAS,QAAQ;KACjB,UAAU,QAAQ;KACnB;IACD;IACA;IACA;IACA;IACA;IACD,CAAC;aACO,QAAQ,SAAS,qBAC1B,OAAM,wBAAwB;GAAE;GAAS;GAAK;GAAK;GAAO;GAAI,CAAC;WACtD,QAAQ,SAAS,aAC1B,OAAM,gBAAgB;GAAE;GAAS;GAAK;GAAK;GAAO;GAAQ;GAAI,CAAC;WACtD,QAAQ,SAAS,eAC1B,OAAM,kBAAkB;GACtB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC;MAEF,OAAM,IAAI,MAAM,wBAAwB,QAAQ,KAAK,GAAG;AAG1D,QAAM,gBAAgB,WAAW;AACjC,QAAM,MAAM,QAAQ,IAAI;AACxB,UAAQ,IAAI,YAAY,QAAQ,KAAK,IAAI,QAAQ,QAAQ,SAAS,IAAI,SAAS;UACxE,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,QAAM,cAAc,IAAI;AACxB,MAAI;AACF,SAAM,MAAM,QAAQ,IAAI;UAClB;AAGR,QAAM;;;AAIV,eAAe,wBAAwB,KAMrB;CAChB,MAAM,EAAE,SAAS,KAAK,OAAO,OAAO;CAEpC,MAAM,OADa,MAAM,IAAI,0BAA0B,EAChC,MAAM,MAAM,EAAE,mBAAmB,QAAQ,KAAK;AACrE,KAAI,CAAC,IACH,OAAM,IAAI,MACR,yCAAyC,QAAQ,KAAK,aACvD;CAEH,MAAM,cAAc,IAAI;CACxB,MAAM,MAAM,eAAe;CAC3B,MAAM,WAAW,MAAM,IAAI,IAAI;AAC/B,OAAM,IAAI,KAAK;EACb,MAAM;EACN,aAAa,QAAQ;EACrB;EACA,WACE,UAAU,SAAS,uBAAuB,SAAS,YAAY;EACjE,WAAW;EACZ,CAAC;;AAGJ,eAAe,gBAAgB,KAOb;CAChB,MAAM,EAAE,SAAS,KAAK,OAAO,QAAQ,OAAO;AAC5C,KAAI,CAAC,QAAQ,KACX,OAAM,IAAI,MACR,uHACD;CAEH,MAAM,YAAY,OAAO,cAAc,EAAE,EAAE,MACxC,MAAM,EAAE,gBAAgB,QAAQ,QAClC;AACD,KAAI,CAAC,SACH,OAAM,IAAI,MACR,4DAA4D,QAAQ,QAAQ,+BAC7E;CAGH,MAAM,OADO,MAAM,IAAI,qBAAqB,SAAS,OAAO,EAC3C,MAAM,MAAM,EAAE,OAAO,QAAQ,KAAK;AACnD,KAAI,CAAC,IACH,OAAM,IAAI,MACR,iCAAiC,QAAQ,KAAK,uBAAuB,SAAS,OAAO,GACtF;AAEH,KAAI,IAAI,SAAS,SAAS,KACxB,OAAM,IAAI,MACR,sCAAsC,IAAI,KAAK,kCAAkC,SAAS,KAAK,GAChG;CAEH,MAAM,EAAE,sBAAsB,MAAM,OAClC;CAEF,MAAM,MAAM,kBAAkB,SAAS,QAAQ,SAAS,MAAM,SAAS,KAAK;CAC5E,MAAM,WAAW,MAAM,IAAI,IAAI;AAC/B,OAAM,IAAI,KAAK;EACb,MAAM;EACN,aAAa,QAAQ;EACrB,QAAQ,SAAS;EACjB,YAAY,SAAS;EACrB,MAAM,IAAI;EACV,SAAS,IAAI;EACb,KAAK,IAAI,OAAO;EAChB,SAAS,IAAI,WAAW;EACxB,UAAU,IAAI;EACd,SAAS,IAAI,WAAW;EACxB,UAAU,IAAI;EACd,WAAW,UAAU,SAAS,eAAe,SAAS,YAAY;EAClE,WAAW;EACZ,CAAC;;AAGJ,eAAe,kBAAkB,KAUf;CAChB,MAAM,EAAE,SAAS,KAAK,SAAS,WAAW,KAAK,QAAQ,OAAO,QAAQ,OACpE;AACF,KAAI,CAAC,QAAQ,QACX,OAAM,IAAI,MAAM,mDAAmD;CAGrE,MAAM,MADU,MAAM,WAAW,QAAQ,QAAQ,EAC9B,MAAM,CAAC,OAAO,MAAM,QAAQ,QAAQ,GAAG;AAC1D,KAAI,CAAC,GACH,OAAM,IAAI,MACR,uCAAuC,QAAQ,QAAQ,+BACxD;CAEH,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI;CACzD,MAAM,WAAW,MAAM,oBACrB,QACA,QAAQ,SACR,IACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,CACZ;AACD,KAAI,SAAS,iBAAiB,WAAW,EACvC,OAAM,IAAI,MACR,gCAAgC,QAAQ,QAAQ,gDAAgD,MACjG;CAGH,MAAM,QAAQ,QAAQ,WAClB,SAAS,iBAAiB,MAAM,MAAM,EAAE,cAAc,QAAQ,SAAS,GACvE,SAAS,iBAAiB;AAC9B,KAAI,CAAC,MACH,OAAM,IAAI,MACR,2CAA2C,QAAQ,SAAS,sBAC7D;CAEH,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,8BAA8B,MAAM,UAAU,aAAa;CAG7E,MAAM,OADO,MAAM,IAAI,qBAAqB,OAAO,EAClC,MAAM,MAAM,EAAE,OAAO,QAAQ,QAAQ;AACtD,KAAI,CAAC,IACH,OAAM,IAAI,MACR,kCAAkC,QAAQ,QAAQ,uBAAuB,MAAM,UAAU,GAC1F;AAEH,KAAI,IAAI,YAAY,MAAM,QACxB,OAAM,IAAI,MACR,oCAAoC,IAAI,QAAQ,6BAA6B,MAAM,QAAQ,GAC5F;CAEH,MAAM,MAAM,oBAAoB,QAAQ,QAAQ,QAAQ;CACxD,MAAM,WAAW,MAAM,IAAI,IAAI;AAC/B,OAAM,IAAI,KAAK;EACb,MAAM;EACN,WAAW,QAAQ;EACnB,YAAY,SAAS;EACrB;EACA,UAAU,MAAM;EAChB,SAAS,QAAQ;EACjB,SAAS,MAAM;EACf,WAAW,UAAU,SAAS,iBAAiB,SAAS,YAAY;EACpE,WAAW;EACZ,CAAC"}