@dragonmastery/tamer 0.35.2 → 0.35.4

package/dist/{status-_k3a77Fw.mjs → status-CZBPBtNy.mjs}

@@ -1,6 +1,6 @@
 import { f as getDispatchNamespaces, m as getLogpushJobs, p as getDnsRecords } from "./normalize-DVSTRZhO.mjs";
-import { B as loadConfig, C as stackNameForConfig, D as resolveDeployedWorkerName, I as CFApiClient, L as cloudflareAccountIdFromEnv, T as mergeWorkerConfigForResourcePick, f as fetchStackImports, h as StateManager, m as scanConfigForImports, u as namingFromConfig, y as tenantStateKey, z as getWorkers } from "./tamer.mjs";
-import { n as resourceModules } from "./registry-D-vo1TTV.mjs";
+import { B as getWorkers, C as stackNameForConfig, D as resolveDeployedWorkerName, I as CFApiClient, L as cloudflareAccountIdFromEnv, T as mergeWorkerConfigForResourcePick, V as loadConfig, f as fetchStackImports, h as StateManager, m as scanConfigForImports, u as namingFromConfig, y as tenantStateKey, z as getConfigBaseDir } from "./tamer.mjs";
+import { n as resourceModules } from "./registry-BlHEOKlN.mjs";
 import "./r2S3EmptyBucket-B9_pHfvB.mjs";
 import { r as dnsRecordStateKey, t as dnsRecordAppliesToEnv } from "./dns-records.resolve-DV6XBZf3.mjs";
 import { t as logpushJobStatus } from "./logpush-job-GqVKG_HI.mjs";
@@ -58,8 +58,8 @@ function dnsRecordStatus(resources, env, state) {
 async function runStatus(options) {
 	const env = options.env ?? "local";
 	const configPath = options.configPath;
-	const baseDir = process.cwd();
 	const config = await loadConfig(configPath, { env });
+	const baseDir = getConfigBaseDir();
 	const accountId = config.account_id ?? cloudflareAccountIdFromEnv();
 	if (!accountId) throw new Error("account_id required in config or CLOUDFLARE_ACCOUNT_ID env var");
 	const naming = namingFromConfig(config);
@@ -193,4 +193,4 @@ async function runStatus(options) {
 
 //#endregion
 export { runStatus };
-//# sourceMappingURL=status-_k3a77Fw.mjs.map
+//# sourceMappingURL=status-CZBPBtNy.mjs.map

package/dist/status-CZBPBtNy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-CZBPBtNy.mjs","names":["results: Array<{\n    logicalName: string;\n    namespace: string;\n    status: ResourceStatus;\n  }>","rows: DnsRecordStatusRow[]","meta: string[]","siblingImports: Record<string, Record<string, string>>","logpushLive:\n    | Awaited<ReturnType<CFApiClient[\"logpushAccountJobsList\"]>>\n    | undefined","hints: string[]"],"sources":["../src/features/dispatch-namespace/dispatch-namespace.status.ts","../src/features/dns-records/dns-records.status.ts","../src/cli/commands/status.ts"],"sourcesContent":["import type { DispatchNamespaceResourceConfig } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceStatus } from \"../../types.js\";\n\nexport function dispatchNamespaceStatus(\n  resources: DispatchNamespaceResourceConfig[],\n  _env: string,\n  state: StateManager,\n  _naming: NamingEngine,\n): Array<{ logicalName: string; namespace: string; status: ResourceStatus }> {\n  const results: Array<{\n    logicalName: string;\n    namespace: string;\n    status: ResourceStatus;\n  }> = [];\n\n  for (const config of resources) {\n    const key = `dispatch_ns:${config.namespace}`;\n    const entry = state.get(key);\n    results.push({\n      logicalName: config.logicalName,\n      namespace: config.namespace,\n      status:\n        entry?.type === \"dispatch_namespace\" ? \"ok\" : \"missing\",\n    });\n  }\n\n  return results;\n}\n","import type { DnsRecordResourceConfig, ResourceStatus } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport {\n  dnsRecordAppliesToEnv,\n  dnsRecordStateKey,\n} from \"./dns-records.resolve.js\";\n\nexport interface DnsRecordStatusRow {\n  logicalName: string;\n  type: string;\n  name: string;\n  recordId?: string;\n  status: ResourceStatus;\n}\n\nexport function dnsRecordStatus(\n  resources: DnsRecordResourceConfig[],\n  env: string,\n  state: StateManager,\n): DnsRecordStatusRow[] {\n  const rows: DnsRecordStatusRow[] = [];\n  for (const config of resources) {\n    if (!dnsRecordAppliesToEnv(config, env)) {\n      rows.push({\n        logicalName: config.logicalName,\n        type: config.type,\n        name: config.name,\n        status: \"ok\",\n      });\n      continue;\n    }\n    const entry = state.get(\n      dnsRecordStateKey(config.zoneId, config.type, config.name),\n    );\n    if (entry?.type === \"dns_record\") {\n      rows.push({\n        logicalName: config.logicalName,\n        type: entry.recordType,\n        name: entry.name,\n        recordId: entry.recordId,\n        status: \"ok\",\n      });\n    } else {\n      rows.push({\n        logicalName: config.logicalName,\n        type: config.type,\n        name: config.name,\n        status: \"missing\",\n      });\n    }\n  }\n  return rows;\n}\n","import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { dispatchNamespaceStatus } from \"../../features/dispatch-namespace/index.js\";\nimport { dnsRecordStatus } from \"../../features/dns-records/index.js\";\nimport { getDispatchNamespaces, getDnsRecords, getLogpushJobs } from \"../../types.js\";\nimport { logpushJobStatus } from \"../../features/logpush-job/index.js\";\nimport { tenantStateKey } from \"../../core/tenant/tenantKeys.js\";\nimport { resourceModules } from \"../../core/registry/registry.js\";\nimport {\n  resolveDeployedWorkerName,\n  mergeWorkerConfigForResourcePick,\n} from \"../../core/config/resolver.js\";\nimport { buildOutputsView } from \"../../core/outputs/stackOutputs.js\";\nimport {\n  fetchStackImports,\n  scanConfigForImports,\n} from \"../../core/imports/fetchStackImports.js\";\n\nexport async function runStatus(options: {\n  env?: string;\n  configPath?: string;\n  /** `product:workspace` — show only this workspace tenant from state. */\n  tenant?: string;\n}): Promise<void> {\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const workers = await getWorkers(config, baseDir);\n  console.log(\n    `\\nStatus for ${config.tenant.name} (${config.tenant.slug}) — env: ${env}\\n`,\n  );\n\n  if (options.tenant?.trim()) {\n    const raw = options.tenant.trim();\n    const colon = raw.indexOf(\":\");\n    if (colon < 1) {\n      throw new Error(\n        'status --tenant expects \"product:workspace\" (e.g. todo:acme)',\n      );\n    }\n    const product = raw.slice(0, colon);\n    const workspace = raw.slice(colon + 1);\n    const t = state.getTenant(product, workspace);\n    console.log(`Workspace tenant ${tenantStateKey(product, workspace)}:`);\n    if (!t) {\n      console.log(\"  (no record in tamer state)\\n\");\n      return;\n    }\n    console.log(`  status: ${t.provisioningStatus}`);\n    console.log(`  dispatch namespace: ${t.dispatchNamespaceName}`);\n    console.log(`  script: ${t.scriptName}`);\n    if (t.d1Shards?.length) {\n      console.log(\"  D1 shards:\");\n      for (const s of t.d1Shards) {\n        console.log(`    ${s.role}: ${s.derivedName} [${s.cfId}]`);\n      }\n    }\n    console.log();\n    return;\n  }\n\n  const outputRows = buildOutputsView(config, state);\n  if (outputRows.length > 0) {\n    console.log(\"Stack outputs:\");\n    for (const r of outputRows) {\n      const valueText =\n        r.value === null\n          ? \"(unresolved — run apply)\"\n          : r.value;\n      const meta: string[] = [r.status];\n      if (r.status === \"stale\" && r.declaredSource) {\n        meta.push(`source drifted → ${r.declaredSource}`);\n      }\n      console.log(`  ${r.name}: ${valueText} [${meta.join(\", \")}]`);\n    }\n    console.log();\n  }\n\n  // Inbound imports — show every `${tamer:import:<stack>.<output>}`\n  // referenced by config, grouped by source stack. We tolerate fetch\n  // failures so `tamer status` still works in offline / partial-cred\n  // environments; a missing sibling row just displays \"(unresolved)\".\n  const importRefs = scanConfigForImports(config);\n  let siblingImports: Record<string, Record<string, string>> = {};\n  try {\n    siblingImports = await fetchStackImports(api, config, env);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`(could not pre-fetch imported stacks: ${msg})`);\n  }\n  if (importRefs.length > 0) {\n    console.log(\"Stack imports:\");\n    const byStack = new Map<string, Set<string>>();\n    for (const r of importRefs) {\n      if (!byStack.has(r.stack)) byStack.set(r.stack, new Set());\n      byStack.get(r.stack)!.add(r.output);\n    }\n    for (const [stack, outputs] of [...byStack].sort(([a], [b]) =>\n      a.localeCompare(b),\n    )) {\n      console.log(`  from stack \"${stack}\":`);\n      const stackOutputs = siblingImports[stack] ?? {};\n      for (const out of [...outputs].sort()) {\n        const v = stackOutputs[out];\n        const status = v === undefined ? \"unresolved\" : \"resolved\";\n        const value = v ?? \"(missing — run `tamer apply` on that stack)\";\n        console.log(`    ${out}: ${value} [${status}]`);\n      }\n    }\n    console.log();\n  }\n\n  const dns = dispatchNamespaceStatus(\n    getDispatchNamespaces(config),\n    env,\n    state,\n    naming,\n  );\n  if (dns.length > 0) {\n    console.log(\"Dispatch namespaces:\");\n    for (const r of dns) {\n      console.log(`  ${r.logicalName} (${r.namespace}) [${r.status}]`);\n    }\n    console.log();\n  }\n\n  const dnsRows = dnsRecordStatus(getDnsRecords(config), env, state);\n  if (dnsRows.length > 0) {\n    console.log(\"DNS records:\");\n    for (const r of dnsRows) {\n      const id = r.recordId ? ` [${r.recordId}]` : \"\";\n      console.log(`  ${r.logicalName}: ${r.type} ${r.name}${id} [${r.status}]`);\n    }\n    console.log();\n  }\n\n  let logpushLive:\n    | Awaited<ReturnType<CFApiClient[\"logpushAccountJobsList\"]>>\n    | undefined;\n  if (env !== \"local\") {\n    try {\n      logpushLive = await api.logpushAccountJobsList();\n    } catch {\n      // Token may lack Logpush list; state-only rows still print.\n    }\n  }\n  const logpushRows = logpushJobStatus(\n    getLogpushJobs(config),\n    config.tenant,\n    env,\n    state,\n    logpushLive,\n  );\n  if (logpushRows.length > 0) {\n    console.log(\"Logpush jobs:\");\n    for (const r of logpushRows) {\n      const id = r.cfJobId != null ? ` [id ${r.cfJobId}]` : \"\";\n      const hints: string[] = [];\n      if (r.cfEnabled === false) hints.push(\"disabled on Cloudflare\");\n      if (r.cfError) hints.push(`CF error: ${r.cfError}`);\n      const hint = hints.length > 0 ? ` — ${hints.join(\"; \")}` : \"\";\n      console.log(`  ${r.logicalName}: ${r.jobName}${id} [${r.status}]${hint}`);\n    }\n    console.log();\n  }\n\n  for (const [workerKey, workerConfig] of workers) {\n    console.log(`Worker: ${workerKey}`);\n    const deployedName = resolveDeployedWorkerName(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      naming,\n    );\n    const mergedWorker = mergeWorkerConfigForResourcePick(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: siblingImports },\n    );\n    let printedAny = false;\n    for (const mod of resourceModules) {\n      const resources = mod.pickResources(mergedWorker);\n      if (resources.length === 0) continue;\n      const rows = mod.status({\n        resources,\n        env,\n        state,\n        naming,\n        worker: { workerKey, deployedName },\n      });\n      if (rows.length === 0) continue;\n      printedAny = true;\n      console.log(`  ${mod.label}:`);\n      for (const r of rows) {\n        console.log(`    ${r.binding}: ${r.name} [${r.status}]`);\n      }\n    }\n    if (!printedAny) console.log(\"  (no resources)\");\n    console.log();\n  }\n}\n"],"mappings":";;;;;;;;;AAKA,SAAgB,wBACd,WACA,MACA,OACA,SAC2E;CAC3E,MAAMA,UAID,EAAE;AAEP,MAAK,MAAM,UAAU,WAAW;EAC9B,MAAM,MAAM,eAAe,OAAO;EAClC,MAAM,QAAQ,MAAM,IAAI,IAAI;AAC5B,UAAQ,KAAK;GACX,aAAa,OAAO;GACpB,WAAW,OAAO;GAClB,QACE,OAAO,SAAS,uBAAuB,OAAO;GACjD,CAAC;;AAGJ,QAAO;;;;;ACbT,SAAgB,gBACd,WACA,KACA,OACsB;CACtB,MAAMC,OAA6B,EAAE;AACrC,MAAK,MAAM,UAAU,WAAW;AAC9B,MAAI,CAAC,sBAAsB,QAAQ,IAAI,EAAE;AACvC,QAAK,KAAK;IACR,aAAa,OAAO;IACpB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,QAAQ;IACT,CAAC;AACF;;EAEF,MAAM,QAAQ,MAAM,IAClB,kBAAkB,OAAO,QAAQ,OAAO,MAAM,OAAO,KAAK,CAC3D;AACD,MAAI,OAAO,SAAS,aAClB,MAAK,KAAK;GACR,aAAa,OAAO;GACpB,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,QAAQ;GACT,CAAC;MAEF,MAAK,KAAK;GACR,aAAa,OAAO;GACpB,MAAM,OAAO;GACb,MAAM,OAAO;GACb,QAAQ;GACT,CAAC;;AAGN,QAAO;;;;;AC7BT,eAAsB,UAAU,SAKd;CAChB,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAEH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;AACjD,SAAQ,IACN,gBAAgB,OAAO,OAAO,KAAK,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,IAC1E;AAED,KAAI,QAAQ,QAAQ,MAAM,EAAE;EAC1B,MAAM,MAAM,QAAQ,OAAO,MAAM;EACjC,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,MAAI,QAAQ,EACV,OAAM,IAAI,MACR,iEACD;EAEH,MAAM,UAAU,IAAI,MAAM,GAAG,MAAM;EACnC,MAAM,YAAY,IAAI,MAAM,QAAQ,EAAE;EACtC,MAAM,IAAI,MAAM,UAAU,SAAS,UAAU;AAC7C,UAAQ,IAAI,oBAAoB,eAAe,SAAS,UAAU,CAAC,GAAG;AACtE,MAAI,CAAC,GAAG;AACN,WAAQ,IAAI,iCAAiC;AAC7C;;AAEF,UAAQ,IAAI,aAAa,EAAE,qBAAqB;AAChD,UAAQ,IAAI,yBAAyB,EAAE,wBAAwB;AAC/D,UAAQ,IAAI,aAAa,EAAE,aAAa;AACxC,MAAI,EAAE,UAAU,QAAQ;AACtB,WAAQ,IAAI,eAAe;AAC3B,QAAK,MAAM,KAAK,EAAE,SAChB,SAAQ,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,YAAY,IAAI,EAAE,KAAK,GAAG;;AAG9D,UAAQ,KAAK;AACb;;CAGF,MAAM,aAAa,iBAAiB,QAAQ,MAAM;AAClD,KAAI,WAAW,SAAS,GAAG;AACzB,UAAQ,IAAI,iBAAiB;AAC7B,OAAK,MAAM,KAAK,YAAY;GAC1B,MAAM,YACJ,EAAE,UAAU,OACR,6BACA,EAAE;GACR,MAAMC,OAAiB,CAAC,EAAE,OAAO;AACjC,OAAI,EAAE,WAAW,WAAW,EAAE,eAC5B,MAAK,KAAK,oBAAoB,EAAE,iBAAiB;AAEnD,WAAQ,IAAI,KAAK,EAAE,KAAK,IAAI,UAAU,IAAI,KAAK,KAAK,KAAK,CAAC,GAAG;;AAE/D,UAAQ,KAAK;;CAOf,MAAM,aAAa,qBAAqB,OAAO;CAC/C,IAAIC,iBAAyD,EAAE;AAC/D,KAAI;AACF,mBAAiB,MAAM,kBAAkB,KAAK,QAAQ,IAAI;UACnD,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,yCAAyC,IAAI,GAAG;;AAE/D,KAAI,WAAW,SAAS,GAAG;AACzB,UAAQ,IAAI,iBAAiB;EAC7B,MAAM,0BAAU,IAAI,KAA0B;AAC9C,OAAK,MAAM,KAAK,YAAY;AAC1B,OAAI,CAAC,QAAQ,IAAI,EAAE,MAAM,CAAE,SAAQ,IAAI,EAAE,uBAAO,IAAI,KAAK,CAAC;AAC1D,WAAQ,IAAI,EAAE,MAAM,CAAE,IAAI,EAAE,OAAO;;AAErC,OAAK,MAAM,CAAC,OAAO,YAAY,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OACtD,EAAE,cAAc,EAAE,CACnB,EAAE;AACD,WAAQ,IAAI,iBAAiB,MAAM,IAAI;GACvC,MAAM,eAAe,eAAe,UAAU,EAAE;AAChD,QAAK,MAAM,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE;IACrC,MAAM,IAAI,aAAa;IACvB,MAAM,SAAS,MAAM,SAAY,eAAe;IAChD,MAAM,QAAQ,KAAK;AACnB,YAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,IAAI,OAAO,GAAG;;;AAGnD,UAAQ,KAAK;;CAGf,MAAM,MAAM,wBACV,sBAAsB,OAAO,EAC7B,KACA,OACA,OACD;AACD,KAAI,IAAI,SAAS,GAAG;AAClB,UAAQ,IAAI,uBAAuB;AACnC,OAAK,MAAM,KAAK,IACd,SAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,UAAU,KAAK,EAAE,OAAO,GAAG;AAElE,UAAQ,KAAK;;CAGf,MAAM,UAAU,gBAAgB,cAAc,OAAO,EAAE,KAAK,MAAM;AAClE,KAAI,QAAQ,SAAS,GAAG;AACtB,UAAQ,IAAI,eAAe;AAC3B,OAAK,MAAM,KAAK,SAAS;GACvB,MAAM,KAAK,EAAE,WAAW,KAAK,EAAE,SAAS,KAAK;AAC7C,WAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,KAAK,GAAG,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,GAAG;;AAE3E,UAAQ,KAAK;;CAGf,IAAIC;AAGJ,KAAI,QAAQ,QACV,KAAI;AACF,gBAAc,MAAM,IAAI,wBAAwB;SAC1C;CAIV,MAAM,cAAc,iBAClB,eAAe,OAAO,EACtB,OAAO,QACP,KACA,OACA,YACD;AACD,KAAI,YAAY,SAAS,GAAG;AAC1B,UAAQ,IAAI,gBAAgB;AAC5B,OAAK,MAAM,KAAK,aAAa;GAC3B,MAAM,KAAK,EAAE,WAAW,OAAO,QAAQ,EAAE,QAAQ,KAAK;GACtD,MAAMC,QAAkB,EAAE;AAC1B,OAAI,EAAE,cAAc,MAAO,OAAM,KAAK,yBAAyB;AAC/D,OAAI,EAAE,QAAS,OAAM,KAAK,aAAa,EAAE,UAAU;GACnD,MAAM,OAAO,MAAM,SAAS,IAAI,MAAM,MAAM,KAAK,KAAK,KAAK;AAC3D,WAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,OAAO,GAAG,OAAO;;AAE3E,UAAQ,KAAK;;AAGf,MAAK,MAAM,CAAC,WAAW,iBAAiB,SAAS;AAC/C,UAAQ,IAAI,WAAW,YAAY;EACnC,MAAM,eAAe,0BACnB,QACA,WACA,cACA,KACA,OACD;EACD,MAAM,eAAe,iCACnB,QACA,WACA,cACA,KACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS;GAAgB,CACxD;EACD,IAAI,aAAa;AACjB,OAAK,MAAM,OAAO,iBAAiB;GACjC,MAAM,YAAY,IAAI,cAAc,aAAa;AACjD,OAAI,UAAU,WAAW,EAAG;GAC5B,MAAM,OAAO,IAAI,OAAO;IACtB;IACA;IACA;IACA;IACA,QAAQ;KAAE;KAAW;KAAc;IACpC,CAAC;AACF,OAAI,KAAK,WAAW,EAAG;AACvB,gBAAa;AACb,WAAQ,IAAI,KAAK,IAAI,MAAM,GAAG;AAC9B,QAAK,MAAM,KAAK,KACd,SAAQ,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,OAAO,GAAG;;AAG5D,MAAI,CAAC,WAAY,SAAQ,IAAI,mBAAmB;AAChD,UAAQ,KAAK"}

package/dist/{sync-C5RjLfgk.mjs → sync-Cjml_emC.mjs}

@@ -1,17 +1,17 @@
 import { f as getDispatchNamespaces, m as getLogpushJobs, p as getDnsRecords } from "./normalize-DVSTRZhO.mjs";
-import { B as loadConfig, C as stackNameForConfig, I as CFApiClient, L as cloudflareAccountIdFromEnv, T as mergeWorkerConfigForResourcePick, f as fetchStackImports, h as StateManager, u as namingFromConfig, z as getWorkers } from "./tamer.mjs";
-import { n as resourceModules } from "./registry-D-vo1TTV.mjs";
+import { B as getWorkers, C as stackNameForConfig, I as CFApiClient, L as cloudflareAccountIdFromEnv, T as mergeWorkerConfigForResourcePick, V as loadConfig, f as fetchStackImports, h as StateManager, u as namingFromConfig, z as getConfigBaseDir } from "./tamer.mjs";
+import { n as resourceModules } from "./registry-BlHEOKlN.mjs";
 import "./r2S3EmptyBucket-B9_pHfvB.mjs";
 import { n as dispatchNamespaceSync, t as dnsRecordSync } from "./dns-records.sync-PoahWQjY.mjs";
 import { i as logpushJobSync } from "./logpush-job-GqVKG_HI.mjs";
-import { i as workerRouteSync } from "./worker-route-RexL6xCk.mjs";
+import { i as workerRouteSync } from "./worker-route-C7kgtUXH.mjs";
 
 //#region src/cli/commands/sync.ts
 async function runSync(options) {
 	const env = options.env ?? "local";
 	const configPath = options.configPath;
-	const baseDir = process.cwd();
 	const config = await loadConfig(configPath, { env });
+	const baseDir = getConfigBaseDir();
 	const accountId = config.account_id ?? cloudflareAccountIdFromEnv();
 	if (!accountId) throw new Error("account_id required in config or CLOUDFLARE_ACCOUNT_ID env var");
 	const api = new CFApiClient(accountId);
@@ -85,4 +85,4 @@ async function runSync(options) {
 
 //#endregion
 export { runSync };
-//# sourceMappingURL=sync-C5RjLfgk.mjs.map
+//# sourceMappingURL=sync-Cjml_emC.mjs.map

package/dist/sync-Cjml_emC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-Cjml_emC.mjs","names":[],"sources":["../src/cli/commands/sync.ts"],"sourcesContent":["import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { dispatchNamespaceSync } from \"../../features/dispatch-namespace/index.js\";\nimport { dnsRecordSync } from \"../../features/dns-records/index.js\";\nimport { getDispatchNamespaces, getDnsRecords, getLogpushJobs } from \"../../types.js\";\nimport { logpushJobSync } from \"../../features/logpush-job/index.js\";\nimport { workerRouteSync } from \"../../features/worker-route/index.js\";\nimport { resourceModules } from \"../../core/registry/registry.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport { mergeWorkerConfigForResourcePick } from \"../../core/config/resolver.js\";\n\nexport async function runSync(options: {\n  env?: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  // Tolerant pre-fetch: sync runs against existing cloud state, so we\n  // pass real import values into worker-route resolution to avoid\n  // matching against `${tamer:import:…}` placeholders.\n  const imports = await fetchStackImports(api, config, env).catch((err) => {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`[sync] skipping cross-stack imports: ${msg}`);\n    return {} as Record<string, Record<string, string>>;\n  });\n\n  async function safeList<T>(\n    label: string,\n    fn: () => Promise<T[]>,\n  ): Promise<T[]> {\n    try {\n      return await fn();\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[sync] skipping ${label}: ${msg}`);\n      return [];\n    }\n  }\n\n  const lists = await Promise.all(\n    resourceModules.map((m) =>\n      safeList(`${m.label} list`, () => m.fetchAll(api)),\n    ),\n  );\n\n  if (getDispatchNamespaces(config).length > 0) {\n    try {\n      await dispatchNamespaceSync(\n        getDispatchNamespaces(config),\n        config.tenant,\n        env,\n        api,\n        state,\n      );\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[sync] skipping dispatch namespaces: ${msg}`);\n    }\n  }\n\n  if (getDnsRecords(config).length > 0) {\n    try {\n      await dnsRecordSync(\n        getDnsRecords(config),\n        config.tenant,\n        env,\n        api,\n        state,\n      );\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[sync] skipping dns records: ${msg}`);\n    }\n  }\n\n  if (getLogpushJobs(config).length > 0 && env !== \"local\") {\n    try {\n      await logpushJobSync(\n        getLogpushJobs(config),\n        config.tenant,\n        env,\n        api,\n        state,\n      );\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[sync] skipping logpush jobs: ${msg}`);\n    }\n  }\n\n  const workers = await getWorkers(config, baseDir);\n  for (const [workerKey, workerConfig] of workers) {\n    const mergedWorker = mergeWorkerConfigForResourcePick(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports },\n    );\n    resourceModules.forEach((mod, i) => {\n      const resources = mod.pickResources(mergedWorker);\n      if (resources.length === 0) return;\n      mod.sync({\n        resources,\n        all: lists[i],\n        tenant: config.tenant,\n        env,\n        api,\n        state,\n        naming,\n        config,\n        baseDir,\n      });\n    });\n  }\n\n  try {\n    await workerRouteSync(env, config, baseDir, accountId, naming, state, api, {\n      imports,\n    });\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`[sync] skipping worker routes: ${msg}`);\n  }\n\n  await state.persist(api);\n  console.log(`Synced state for env: ${env}`);\n}\n"],"mappings":";;;;;;;;;AAeA,eAAsB,QAAQ,SAGZ;CAChB,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAIxB,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI,CAAC,OAAO,QAAQ;EACvE,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,wCAAwC,MAAM;AAC3D,SAAO,EAAE;GACT;CAEF,eAAe,SACb,OACA,IACc;AACd,MAAI;AACF,UAAO,MAAM,IAAI;WACV,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,KAAK,mBAAmB,MAAM,IAAI,MAAM;AAChD,UAAO,EAAE;;;CAIb,MAAM,QAAQ,MAAM,QAAQ,IAC1B,gBAAgB,KAAK,MACnB,SAAS,GAAG,EAAE,MAAM,cAAc,EAAE,SAAS,IAAI,CAAC,CACnD,CACF;AAED,KAAI,sBAAsB,OAAO,CAAC,SAAS,EACzC,KAAI;AACF,QAAM,sBACJ,sBAAsB,OAAO,EAC7B,OAAO,QACP,KACA,KACA,MACD;UACM,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,wCAAwC,MAAM;;AAI/D,KAAI,cAAc,OAAO,CAAC,SAAS,EACjC,KAAI;AACF,QAAM,cACJ,cAAc,OAAO,EACrB,OAAO,QACP,KACA,KACA,MACD;UACM,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,gCAAgC,MAAM;;AAIvD,KAAI,eAAe,OAAO,CAAC,SAAS,KAAK,QAAQ,QAC/C,KAAI;AACF,QAAM,eACJ,eAAe,OAAO,EACtB,OAAO,QACP,KACA,KACA,MACD;UACM,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,iCAAiC,MAAM;;CAIxD,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;AACjD,MAAK,MAAM,CAAC,WAAW,iBAAiB,SAAS;EAC/C,MAAM,eAAe,iCACnB,QACA,WACA,cACA,KACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY;GAAS,CACxC;AACD,kBAAgB,SAAS,KAAK,MAAM;GAClC,MAAM,YAAY,IAAI,cAAc,aAAa;AACjD,OAAI,UAAU,WAAW,EAAG;AAC5B,OAAI,KAAK;IACP;IACA,KAAK,MAAM;IACX,QAAQ,OAAO;IACf;IACA;IACA;IACA;IACA;IACA;IACD,CAAC;IACF;;AAGJ,KAAI;AACF,QAAM,gBAAgB,KAAK,QAAQ,SAAS,WAAW,QAAQ,OAAO,KAAK,EACzE,SACD,CAAC;UACK,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,kCAAkC,MAAM;;AAGvD,OAAM,MAAM,QAAQ,IAAI;AACxB,SAAQ,IAAI,yBAAyB,MAAM"}

package/dist/tamer.mjs

@@ -4206,7 +4206,41 @@ function rejectLegacyTamerConfigFile(context) {
 	throw new Error(`${context}: tamer.config.ts is not supported. Move the default export to tamer/project.config.ts and optional per-env overlays to tamer/env/<env>.config.ts (or use tamer.project.config.ts at the repo root with optional tamer.env.<env>.ts).`);
 }
 /**
-* Resolve which config file(s) to load. See docs/design-tamer-project-config.md.
+* Check a single directory for Tamer config files. Returns the resolved
+* sources if found, or undefined to continue walking up.
+*/
+function checkDir(dir, env) {
+	const nestedProject = resolve(dir, "tamer", "project.config.ts");
+	if (existsSync(nestedProject)) {
+		let overlay = null;
+		if (env) {
+			const candidate = overlayPathForNestedLayout(dirname(nestedProject), env);
+			if (existsSync(candidate)) overlay = candidate;
+		}
+		return {
+			mode: "merged",
+			projectPath: nestedProject,
+			overlayPath: overlay
+		};
+	}
+	const flatProject = resolve(dir, "tamer.project.config.ts");
+	if (existsSync(flatProject)) {
+		let overlay = null;
+		if (env) {
+			const candidate = overlayPathForFlatLayout(dir, env);
+			if (existsSync(candidate)) overlay = candidate;
+		}
+		return {
+			mode: "merged",
+			projectPath: flatProject,
+			overlayPath: overlay
+		};
+	}
+	if (existsSync(resolve(dir, "tamer.config.ts"))) rejectLegacyTamerConfigFile("Config discovery");
+}
+/**
+* Resolve which config file(s) to load. Walks up from `cwd` to the filesystem
+* root, so commands work from any subdirectory (like `git` or `npm`).
 *
 * - **Merged:** `tamer/project.config.ts` or `tamer.project.config.ts`, plus optional env overlay.
 * - **Single:** explicit `--config` path to any `.ts` file **except** `tamer.config.ts` (e.g. alternate snapshots in tests).
@@ -4237,34 +4271,15 @@ function resolveConfigSources(cwd, explicitConfigPath, env) {
 			path: abs
 		};
 	}
-	const nestedProject = resolve(cwd, "tamer", "project.config.ts");
-	if (existsSync(nestedProject)) {
-		let overlay = null;
-		if (env) {
-			const candidate = overlayPathForNestedLayout(dirname(nestedProject), env);
-			if (existsSync(candidate)) overlay = candidate;
-		}
-		return {
-			mode: "merged",
-			projectPath: nestedProject,
-			overlayPath: overlay
-		};
-	}
-	const flatProject = resolve(cwd, "tamer.project.config.ts");
-	if (existsSync(flatProject)) {
-		let overlay = null;
-		if (env) {
-			const candidate = overlayPathForFlatLayout(cwd, env);
-			if (existsSync(candidate)) overlay = candidate;
-		}
-		return {
-			mode: "merged",
-			projectPath: flatProject,
-			overlayPath: overlay
-		};
+	let dir = cwd;
+	for (;;) {
+		const found = checkDir(dir, env);
+		if (found) return found;
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
 	}
-	if (existsSync(resolve(cwd, "tamer.config.ts"))) rejectLegacyTamerConfigFile("Config discovery");
-	throw new Error(`No Tamer project config under ${cwd}. Create tamer/project.config.ts (or tamer.project.config.ts at the repo root).`);
+	throw new Error(`No Tamer project config found walking up from ${cwd}. Create tamer/project.config.ts (or tamer.project.config.ts at the repo root).`);
 }
 
 //#endregion
@@ -4546,8 +4561,23 @@ const CfiConfigSchema = object({
 	worker: WorkerConfigSchema.optional(),
 	workers: record(string(), WorkerConfigSchema).optional()
 }).refine((data) => (data.worker ?? data.workers) && !(data.worker && data.workers), { error: "Must have either worker or workers, not both" });
+/**
+* Directory where the config was discovered. When config is found via
+* walk-up from a subdirectory, this is the parent directory containing the
+* config — use it as `baseDir` for worker `path` resolution instead of
+* `process.cwd()`.
+*/
+let _configBaseDir = process.cwd();
+function getConfigBaseDir() {
+	return _configBaseDir;
+}
 async function loadConfig(configPath, options = {}) {
-	const sources = resolveConfigSources(options.cwd ?? process.cwd(), configPath, options.env);
+	const cwd = options.cwd ?? process.cwd();
+	const sources = resolveConfigSources(cwd, configPath, options.env);
+	if (sources.mode === "merged") {
+		const projectDir = dirname(sources.projectPath);
+		_configBaseDir = basename(projectDir) === "tamer" ? dirname(projectDir) : projectDir;
+	} else _configBaseDir = cwd;
 	let raw;
 	if (sources.mode === "single") {
 		raw = (await import(sources.path)).default;
@@ -7615,7 +7645,7 @@ function assertSecretName(name) {
 }
 /** Resolve worker dir + declared secret names for `secrets load`. */
 async function resolveWorkerSecretsLoadTarget(ctx, workerKey, options) {
-	const baseDir = process.cwd();
+	const baseDir = getConfigBaseDir();
 	const workers = await getWorkers(ctx.config, baseDir);
 	const hit = workers.find(([key]) => key === workerKey);
 	if (!hit) {
@@ -8170,8 +8200,17 @@ const STATUS_LABEL = {
 	removed_from_vault: "removed from vault",
 	undeclared_on_worker: "not in secrets.required"
 };
-function isDeclaredIssue(status) {
-	return status !== "in_sync" && status !== "undeclared_on_worker";
+/**
+* Only `declared_no_value` (secret declared in config but missing from vault)
+* is a hard failure — that's the "you forgot to set a secret" case that
+* should block CI before deploy.
+*
+* `never_deployed` and `rotated_not_deployed` are normal pre-deploy states:
+* the secret IS in the vault, deploy will push it. They're reported
+* informationally but don't fail the command.
+*/
+function isDeclaredFailure(status) {
+	return status === "declared_no_value" || status === "removed_from_vault";
 }
 function sortEntries(entries) {
 	return [...entries].sort((a, b) => secretDerivedName(a.worker, a.name).localeCompare(secretDerivedName(b.worker, b.name)));
@@ -8218,13 +8257,16 @@ async function runSecretsVerify(options) {
 		for (const entry of onWorkerOnly) printEntry(entry);
 		console.log("");
 	}
-	const declaredIssues = declared.filter((e) => isDeclaredIssue(e.status)).length;
-	if (declaredIssues === 0) {
-		const suffix = onWorkerOnly.length > 0 ? ` (${onWorkerOnly.length} on worker but not in config — informational only)` : "";
-		console.log(`All declared secrets in sync.${suffix}\n`);
+	const failures = declared.filter((e) => isDeclaredFailure(e.status));
+	const pending = declared.filter((e) => !isDeclaredFailure(e.status) && e.status !== "in_sync");
+	if (failures.length === 0) {
+		const parts = ["All declared secrets are in the vault."];
+		if (pending.length > 0) parts.push(`${pending.length} will be pushed on next deploy.`);
+		if (onWorkerOnly.length > 0) parts.push(`${onWorkerOnly.length} on worker but not in config (informational only).`);
+		console.log(`${parts.join(" ")}\n`);
 		return 0;
 	}
-	console.log(`${declaredIssues} declared secret(s) need attention.\n`);
+	console.log(`${failures.length} declared secret(s) missing from vault — run \`tamer secrets set\` or \`tamer secrets load\` before deploying.\n`);
 	return 1;
 }
 
@@ -8704,14 +8746,14 @@ async function main() {
 	try {
 		switch (command) {
 			case "bootstrap":
-				await import("./bootstrap-CsL4IT9Z.mjs").then((m) => m.runBootstrap(parseBootstrapArgs(rest)));
+				await import("./bootstrap-BYxkCI8L.mjs").then((m) => m.runBootstrap(parseBootstrapArgs(rest)));
 				break;
 			case "sync":
-				await import("./sync-C5RjLfgk.mjs").then((m) => m.runSync(parseSyncArgs(rest)));
+				await import("./sync-Cjml_emC.mjs").then((m) => m.runSync(parseSyncArgs(rest)));
 				break;
 			case "apply": {
 				const a = parseApplyArgs(rest);
-				await import("./apply-Cz1lxAOp.mjs").then((m) => m.runApply({
+				await import("./apply-BL5JfcZI.mjs").then((m) => m.runApply({
 					env: a.env,
 					addShard: a.addShard,
 					configPath: a.configPath,
@@ -8723,11 +8765,11 @@ async function main() {
 				break;
 			}
 			case "dev":
-				await import("./dev-vGQIP7tD.mjs").then((m) => m.runDev(parseDevArgs(rest)));
+				await import("./dev-BTBTiCyd.mjs").then((m) => m.runDev(parseDevArgs(rest)));
 				break;
 			case "deploy": {
 				const d = parseDeployArgs(rest);
-				await import("./deploy-D2tQrtN9.mjs").then((m) => m.runDeploy({
+				await import("./deploy-DxUCsnnc.mjs").then((m) => m.runDeploy({
 					worker: d.worker,
 					env: d.env,
 					configPath: d.configPath,
@@ -8736,23 +8778,23 @@ async function main() {
 				break;
 			}
 			case "migrate":
-				await import("./migrate-DDBMzPtR.mjs").then((m) => m.runMigrate(parseMigrateArgs(rest)));
+				await import("./migrate-C0xs4MUW.mjs").then((m) => m.runMigrate(parseMigrateArgs(rest)));
 				break;
 			case "types":
-				await import("./types-CqmFeIBf.mjs").then((m) => m.runTypes(parseTypesArgs(rest)));
+				await import("./types-CN3DpOC2.mjs").then((m) => m.runTypes(parseTypesArgs(rest)));
 				break;
 			case "status":
-				await import("./status-_k3a77Fw.mjs").then((m) => m.runStatus(parseStatusArgs(rest)));
+				await import("./status-CZBPBtNy.mjs").then((m) => m.runStatus(parseStatusArgs(rest)));
 				break;
 			case "events":
-				await import("./events-yk4J3l0M.mjs").then((m) => m.runEvents(parseEventsArgs(rest)));
+				await import("./events-B0bvWdiQ.mjs").then((m) => m.runEvents(parseEventsArgs(rest)));
 				break;
 			case "drift":
-				exitStatus = await import("./drift-C3wIrNyg.mjs").then((m) => m.runDrift(parseDriftArgs(rest)));
+				exitStatus = await import("./drift-1nXkTBh5.mjs").then((m) => m.runDrift(parseDriftArgs(rest)));
 				break;
 			case "plan": {
 				const p = parsePlanArgs(rest);
-				exitStatus = await import("./plan-Dot2VV7R.mjs").then((m) => m.runPlan({
+				exitStatus = await import("./plan-C8oQWM35.mjs").then((m) => m.runPlan({
 					env: p.env,
 					configPath: p.configPath,
 					json: p.json,
@@ -8764,14 +8806,14 @@ async function main() {
 				break;
 			}
 			case "import":
-				await import("./import-CZ6509_t.mjs").then((m) => m.runImport(parseImportArgs(rest)));
+				await import("./import-yXAfQXg2.mjs").then((m) => m.runImport(parseImportArgs(rest)));
 				break;
 			case "doctor":
 				exitStatus = await import("./doctor-BnsOxqnA.mjs").then((m) => m.runDoctor(parseDoctorArgs(rest)));
 				break;
 			case "provision-tenant": {
 				const p = parseProvisionTenantArgs(rest);
-				await import("./provision-tenant-C2EL79oz.mjs").then((m) => m.runProvisionTenant({
+				await import("./provision-tenant-Dh3-p5ZK.mjs").then((m) => m.runProvisionTenant({
 					env: p.env,
 					product: p.product,
 					workspace: p.workspace,
@@ -8788,7 +8830,7 @@ async function main() {
 			}
 			case "destroy-tenant": {
 				const t = parseDestroyTenantArgs(rest);
-				await import("./destroy-tenant-Ugu7Y1EH.mjs").then((m) => m.runDestroyTenant({
+				await import("./destroy-tenant-CT_uzdl7.mjs").then((m) => m.runDestroyTenant({
 					env: t.env,
 					product: t.product,
 					workspace: t.workspace,
@@ -8801,7 +8843,7 @@ async function main() {
 			}
 			case "destroy": {
 				const d = parseDestroyArgs(rest);
-				await import("./destroy-CEv14T0X.mjs").then((m) => m.runDestroy({
+				await import("./destroy-BtHfgI6x.mjs").then((m) => m.runDestroy({
 					env: d.env,
 					force: d.force,
 					skipWorkers: d.skipWorkers,
@@ -8816,12 +8858,12 @@ async function main() {
 			case "wfp": {
 				const [sub, ...wfpRest] = rest;
 				if (sub === "put") {
-					const { parseWfpPutArgs, runWfpPut } = await import("./wfp-put-D0tDs0J5.mjs");
+					const { parseWfpPutArgs, runWfpPut } = await import("./wfp-put-BMSAGpZ6.mjs");
 					await runWfpPut(parseWfpPutArgs(wfpRest));
 					break;
 				}
 				if (sub === "delete") {
-					const { parseWfpDeleteArgs, runWfpDelete } = await import("./wfp-delete-C-1pIY3Z.mjs");
+					const { parseWfpDeleteArgs, runWfpDelete } = await import("./wfp-delete-DJXpe2B7.mjs");
 					await runWfpDelete(parseWfpDeleteArgs(wfpRest));
 					break;
 				}
@@ -8921,5 +8963,5 @@ Environment variables (same as Wrangler):
 main();
 
 //#endregion
-export { resolveReferencesInString as A, loadConfig as B, stackNameForConfig as C, resolveDeployedWorkerName as D, mergedWorkerConfigForEnv as E, ensureTamerSecretsDatabase as F, CFApiClient as I, cloudflareAccountIdFromEnv as L, effectiveDispatchNamespaceName as M, isEphemeralEnv as N, resolveWorkerConfig as O, deleteEnvSecretRows as P, cloudflareApiTokenFromEnv as R, ensureTamerStateDatabase as S, mergeWorkerConfigForResourcePick as T, tenantDispatchScriptName as _, reconcileSecrets as a, createEmptyCfiState as b, vaultReaderFromMap as c, requiredSecretsForWorker as d, fetchStackImports as f, parseTenantShardRoles as g, StateManager as h, pushSecretsForDeploy as i, wranglerConfigCliArgs as j, rewriteIntraStackServiceTargets as k, createDeploySecretsResources as l, scanConfigForImports as m, parseSecretsArgs as n, secretsDrift as o, importedStackNames as p, runSecrets as r, secretsPlanItems as s, SECRETS_USAGE as t, namingFromConfig as u, tenantShardDatabaseName as v, buildIntraStackScriptNameMap as w, deleteEnvStateRows as x, tenantStateKey as y, getWorkers as z };
+export { resolveReferencesInString as A, getWorkers as B, stackNameForConfig as C, resolveDeployedWorkerName as D, mergedWorkerConfigForEnv as E, ensureTamerSecretsDatabase as F, CFApiClient as I, cloudflareAccountIdFromEnv as L, effectiveDispatchNamespaceName as M, isEphemeralEnv as N, resolveWorkerConfig as O, deleteEnvSecretRows as P, cloudflareApiTokenFromEnv as R, ensureTamerStateDatabase as S, mergeWorkerConfigForResourcePick as T, loadConfig as V, tenantDispatchScriptName as _, reconcileSecrets as a, createEmptyCfiState as b, vaultReaderFromMap as c, requiredSecretsForWorker as d, fetchStackImports as f, parseTenantShardRoles as g, StateManager as h, pushSecretsForDeploy as i, wranglerConfigCliArgs as j, rewriteIntraStackServiceTargets as k, createDeploySecretsResources as l, scanConfigForImports as m, parseSecretsArgs as n, secretsDrift as o, importedStackNames as p, runSecrets as r, secretsPlanItems as s, SECRETS_USAGE as t, namingFromConfig as u, tenantShardDatabaseName as v, buildIntraStackScriptNameMap as w, deleteEnvStateRows as x, tenantStateKey as y, getConfigBaseDir as z };
 //# sourceMappingURL=tamer.mjs.map