@dragonmastery/tamer 0.41.0 → 0.42.1

package/README.md

@@ -590,17 +590,16 @@ bun run tamer:down -- --env dev --confirm-env dev
 
 | Doc | Audience |
 | --- | --- |
-| **[Consumer quickstart](docs/consumer-quickstart.md)** | Downstream repos — install from npm, first deploy, version pinning |
-| **[Brownfield adoption](docs/brownfield-adoption.md)** | Downstream repos — legacy CF names, `naming` hooks, sync/plan flow (no IDs in config) |
-| **[App stack CFI → Tamer gap report](docs/app-stack-cfi-tamer-gap-report.md)** | qjrtnp6drr migration — open gaps, CI order, Tamer vs app ownership |
-| **[Tamer + app stack audit](docs/tamer-app-stack-audit.md)** | Full audit outline, diagrams, shipped vs planned |
-| **[Testing](docs/testing.md)** | Contributors — test runners, JUnit, coverage |
-| **[Publish / integration requirements](docs/publish.md)** | Maintainers — cross-repo contracts for DragonMastery stacks |
-| **[npm CLI packaging strategy](docs/npm-cli-packaging-strategy.md)** | Maintainers — npm package build and release layout |
-| **[Runbook](docs/runbook.md)** | Contributors — platform + portal + internal fixture walkthrough |
-| **[Platform architecture](docs/platform-arch.md)** | Platform owners — repos, stacks, runtime model, rollout |
-
-Other material lives under [`docs/`](docs/).
+| **[Consumer quickstart](docs/guide/quickstart.md)** | Downstream repos — install from npm, first deploy, version pinning |
+| **[Brownfield adoption](docs/guide/brownfield-adoption.md)** | Downstream repos — legacy CF names, `naming` hooks, sync/plan flow (no IDs in config) |
+| **[Single-Product Multi-Tenant](docs/guide/single-product-multi-tenant.md)** | Architecture guide — WFP tenants, dispatch routing, per-tenant D1 shards |
+| **[Testing](.maintainers/testing.md)** | Contributors — test runners, JUnit, coverage |
+| **[Publish / integration requirements](.maintainers/publish.md)** | Maintainers — cross-repo contracts for DragonMastery stacks |
+| **[npm CLI packaging strategy](.maintainers/npm-packaging.md)** | Maintainers — npm package build and release layout |
+| **[Runbook](.maintainers/runbook.md)** | Contributors — platform + portal + internal fixture walkthrough |
+| **[Platform architecture](.maintainers/platform-arch.md)** | Platform owners — repos, stacks, runtime model, rollout |
+
+Full documentation site: `bun run docs:dev` (VitePress).
 
 ## License
 

package/dist/{provision-tenant-z4DLxYAM.mjs → provision-tenant-DoGlAu6H.mjs}

@@ -3,8 +3,7 @@ import { P as effectiveDispatchNamespaceName, R as CFApiClient, U as loadConfig,
 import "./r2S3EmptyBucket-DD81ZWQ7.mjs";
 import { n as logApplyChange } from "./planFormat-CJw8Kq2s.mjs";
 import { i as tamerArtifactsKeyPrefix, r as tamerArtifactsBucketName } from "./tamerArtifactsR2-B3X21TGV.mjs";
-import { n as buildSingleModuleDispatchFormFromBuffer, t as buildSingleModuleDispatchForm } from "./buildDispatchUploadForm-XO8AxhXJ.mjs";
-import { resolveTenantBindings } from "./resolveTenantBindings-BypqzcSn.mjs";
+import { resolveTenantBindings } from "./resolveTenantBindings-86AmRQcW.mjs";
 import { basename, resolve } from "path";
 
 //#region src/cli/commands/provision-tenant.ts
@@ -152,20 +151,70 @@ async function provisionTenantInner(options) {
 	const naming = namingFromConfig(config);
 	const bindings = resolveTenantBindings(config, shards, naming, state, env, accountId);
 	if (options.migrate !== false && shards.length > 0) await migrateTenantShards(config, shards, env, naming);
-	let form;
-	const formOpts = {
+	const { writeFileSync, unlinkSync, mkdirSync } = await import("fs");
+	const { join: joinPath, dirname: dirnamePath } = await import("path");
+	const { spawnWranglerSync } = await import("./wranglerSpawn-CfPkFLP3.mjs");
+	const { wranglerConfigCliArgs } = await import("./wranglerOutFile-DDFKeKwO.mjs");
+	let workerDir;
+	let tempWranglerPath;
+	const tempWranglerFile = "wrangler.tenant.json";
+	const wranglerConfig = {
+		name: scriptName,
+		main: options.main ? basename(resolve(process.cwd(), options.main)) : options.moduleName ?? "worker.js",
 		compatibility_date: compatDate,
-		compatibility_flags: options.compatibilityFlags,
-		bindings
+		compatibility_flags: options.compatibilityFlags ?? []
 	};
-	if (options.main) form = buildSingleModuleDispatchForm(resolve(process.cwd(), options.main), formOpts);
-	else if (options.artifactKey) {
+	if (bindings.bindings?.length) {
+		const d1Databases = [];
+		const vars = {};
+		const services = [];
+		for (const b of bindings.bindings) if (b.type === "d1") d1Databases.push({
+			binding: b.name,
+			database_id: b.id
+		});
+		else if (b.type === "plain_text") vars[b.name] = b.text;
+		else if (b.type === "service") services.push({
+			name: b.name,
+			service: b.service,
+			...b.environment ? { environment: b.environment } : {}
+		});
+		if (d1Databases.length) wranglerConfig.d1_databases = d1Databases;
+		if (Object.keys(vars).length) wranglerConfig.vars = vars;
+		if (services.length) wranglerConfig.services = services;
+	}
+	if (options.main) {
+		const mainPath = resolve(process.cwd(), options.main);
+		workerDir = dirnamePath(mainPath);
+		wranglerConfig.main = basename(mainPath);
+		tempWranglerPath = joinPath(workerDir, tempWranglerFile);
+	} else if (options.artifactKey) {
+		const { tmpdir } = await import("os");
 		const bucket = tamerArtifactsBucketName();
 		const fullKey = `${tamerArtifactsKeyPrefix(env)}${options.artifactKey}`;
 		const body = await api.r2GetObject(bucket, fullKey);
-		form = buildSingleModuleDispatchFormFromBuffer(options.moduleName?.trim() || basename(options.artifactKey).replace(/\.(zip|tar|gz)$/i, "") || "worker.js", body, formOpts);
+		const mod = options.moduleName?.trim() || basename(options.artifactKey).replace(/\.(zip|tar|gz)$/i, "") || "worker.js";
+		workerDir = joinPath(tmpdir(), `tamer-tenant-${Date.now()}`);
+		mkdirSync(workerDir, { recursive: true });
+		writeFileSync(joinPath(workerDir, mod), new Uint8Array(body));
+		wranglerConfig.main = mod;
+		tempWranglerPath = joinPath(workerDir, tempWranglerFile);
 	} else throw new Error("provision-tenant: provide --main or --artifact-key");
-	await api.dispatchNamespaceScriptPut(dispatchNamespaceName, scriptName, form);
+	writeFileSync(tempWranglerPath, JSON.stringify(wranglerConfig, null, 2));
+	console.log(`Deploying tenant script ${scriptName} to ${dispatchNamespaceName} via wrangler…`);
+	const deployResult = spawnWranglerSync([
+		"wrangler",
+		...wranglerConfigCliArgs(tempWranglerFile),
+		"deploy",
+		"--dispatch-namespace",
+		dispatchNamespaceName
+	], {
+		cwd: workerDir,
+		stdio: "inherit"
+	});
+	try {
+		unlinkSync(tempWranglerPath);
+	} catch {}
+	if (deployResult.status !== 0) throw new Error(`wrangler deploy failed for tenant ${scriptName} (exit ${deployResult.status})`);
 	state.setTenant(buildTenantEntry(entryOpts, "ready", existing, { d1Shards: shards }));
 	await state.persist(api);
 	const shardsSummary = shards.length > 0 ? `shards: ${shards.map((s) => s.role).join(", ")}` : "no shards declared";
@@ -198,7 +247,7 @@ async function migrateTenantShards(config, shards, env, naming) {
 	const { tmpdir } = await import("os");
 	const { spawnWranglerSync } = await import("./wranglerSpawn-CfPkFLP3.mjs");
 	const { wranglerConfigCliArgs } = await import("./wranglerOutFile-DDFKeKwO.mjs");
-	const { resolveTenantD1Bindings } = await import("./resolveTenantBindings-BypqzcSn.mjs");
+	const { resolveTenantD1Bindings } = await import("./resolveTenantBindings-86AmRQcW.mjs");
 	const shardBindings = config.tenant.shardBindings ?? {};
 	const d1Bindings = resolveTenantD1Bindings(config, shards, naming);
 	const { getConfigBaseDir } = await import("./loader-B5iVsP6t.mjs");
@@ -248,4 +297,4 @@ async function migrateTenantShards(config, shards, env, naming) {
 
 //#endregion
 export { runProvisionTenant };
-//# sourceMappingURL=provision-tenant-z4DLxYAM.mjs.map
+//# sourceMappingURL=provision-tenant-DoGlAu6H.mjs.map

package/dist/provision-tenant-DoGlAu6H.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-tenant-DoGlAu6H.mjs","names":["result: ProvisionTenantResult","allD1: Awaited<ReturnType<typeof api.d1ListAll>> | null","shards: TenantD1ShardRef[]","workerDir: string","tempWranglerPath: string","wranglerConfig: Record<string, unknown>","d1Databases: Array<Record<string, string>>","vars: Record<string, string>","services: Array<Record<string, string>>","join"],"sources":["../src/cli/commands/provision-tenant.ts"],"sourcesContent":["import { basename, resolve } from \"path\";\nimport { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { getDispatchNamespaces } from \"../../types.js\";\nimport { effectiveDispatchNamespaceName } from \"../../features/dispatch-namespace/dispatch-namespace.resolve.js\";\nimport {\n  parseTenantShardRoles,\n  tenantDispatchScriptName,\n  tenantShardDatabaseName,\n  tenantStateKey,\n} from \"../../core/tenant/tenantKeys.js\";\nimport {\n  buildSingleModuleDispatchForm,\n  buildSingleModuleDispatchFormFromBuffer,\n} from \"../../core/wfp/buildDispatchUploadForm.js\";\nimport { resolveTenantBindings } from \"../../core/tenant/resolveTenantBindings.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { tamerArtifactsBucketName, tamerArtifactsKeyPrefix } from \"../../core/state/tamerArtifactsR2.js\";\nimport { logApplyChange } from \"../../core/plan/planFormat.js\";\nimport type { TenantD1ShardRef, TenantStateEntry } from \"../../types.js\";\n\nconst now = (): string => new Date().toISOString();\n\nfunction buildTenantEntry(\n  options: {\n    product: string;\n    workspace: string;\n    dispatchNamespaceName: string;\n    scriptName: string;\n  },\n  status: TenantStateEntry[\"provisioningStatus\"],\n  existing: TenantStateEntry | undefined,\n  patch?: Partial<Pick<TenantStateEntry, \"d1Shards\">>,\n): TenantStateEntry {\n  return {\n    product: options.product,\n    workspace: options.workspace,\n    provisioningStatus: status,\n    dispatchNamespaceName: options.dispatchNamespaceName,\n    scriptName: options.scriptName,\n    d1Shards: patch?.d1Shards ?? existing?.d1Shards,\n    createdAt: existing?.createdAt ?? now(),\n    updatedAt: now(),\n  };\n}\n\n/**\n * Resolve the effective shard set for this provision call.\n *\n *   1. The configured layout (`tenant.d1Shards` in `tamer.config.ts`)\n *      is the source of truth — any role used by `--shards` must\n *      appear here, and `apply` / `drift` / other operators read the\n *      same shape.\n *   2. When `--shards a,b` is passed, trim to that subset (preserving\n *      configured order so plan/provision logs stay deterministic).\n *      Extending the layout is an edit to `tamer.config.ts`, not a\n *      CLI flag — that's why `parseTenantShardRoles` rejects roles\n *      outside the configured set.\n *   3. When the config has no `tenant.d1Shards`, the resolved set is\n *      empty: `provision-tenant` only uploads the dispatch script\n *      (truly generic single-Worker tenant case).\n */\nfunction resolveShardRoles(\n  configured: readonly string[],\n  shardsRaw: string | undefined,\n): string[] {\n  if (shardsRaw == null || shardsRaw.trim() === \"\") return [...configured];\n  return parseTenantShardRoles(shardsRaw, configured);\n}\n\n/**\n * Idempotent tenant provisioning. Each call:\n *\n *   1. Marks the tenant `pending` if there's no record yet.\n *   2. For every shard role declared in `tenant.d1Shards` in\n *      `tamer.config.ts` (or a `--shards` subset): looks up an\n *      existing D1 by derived name (`tenantShardDatabaseName(role,\n *      …)`), creating it via `d1Create` only when missing. Persists\n *      the `(role, derivedName, cfId)` triple to\n *      `state.tenants[…].d1Shards[]`.\n *   3. Marks the tenant `d1_created` once *all* requested shards\n *      exist in state.\n *   4. Uploads the dispatch script (from `--main` or `--artifact-key`)\n *      via the WFP dispatch namespace.\n *   5. Marks the tenant `ready`.\n *\n * When `tenant.d1Shards` is omitted, step 2/3 collapse to a no-op\n * (truly generic single-Worker tenant — only the dispatch script is\n * provisioned). Re-running with the same shard set is a no-op (state\n * already has those rows). Editing `tamer.config.ts` to **extend**\n * the layout (e.g. adding a new role) and re-running picks up the\n * missing shards without disturbing existing ones, so a tenant\n * created with `[\"app\"]` can be migrated to `[\"system\",\"app\",\n * \"history\"]` (or `[\"primary\",\"audit\"]`, or any other set) with one\n * config edit + one `provision-tenant` invocation. Re-running after\n * a config that **shrinks** the layout never deletes shards (use\n * `destroy-tenant` for that).\n */\n/**\n * Machine-readable result envelope emitted on the final stdout line\n * when `--json` is passed. Designed for the Cloudflare Container caller\n * (`provision-workflow`, see `docs/handoff.md` §7) so the Worker can\n * parse the result without scraping human logs. On success the Workflow\n * sees `status: \"ready\"` plus the materialized tenant shape; on\n * failure it sees `status: \"failed\"` with `error` + best-effort\n * `partial` state, and the process exits non-zero.\n */\nexport interface ProvisionTenantResult {\n  status: \"ready\" | \"failed\" | \"noop\";\n  tenantKey: string;\n  product: string;\n  workspace: string;\n  env: string;\n  scriptName: string;\n  dispatchNamespaceName: string;\n  shards: { role: string; derivedName: string; cfId: string }[];\n  error?: string;\n}\n\nexport async function runProvisionTenant(options: {\n  env: string;\n  product: string;\n  workspace: string;\n  main?: string;\n  artifactKey?: string;\n  moduleName?: string;\n  configPath?: string;\n  compatibilityDate?: string;\n  compatibilityFlags?: string[];\n  /**\n   * Raw `--shards` value (`\"system,app\"` etc.) — validated against\n   * `tenant.d1Shards` from the loaded config. Omit to provision every\n   * configured shard.\n   */\n  shardsRaw?: string;\n  json?: boolean;\n  migrate?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  if (env === \"local\") {\n    throw new Error(\n      \"provision-tenant requires a non-local --env (Cloudflare-backed state).\",\n    );\n  }\n\n  try {\n    await provisionTenantInner(options);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    if (options.json) {\n      // Failure envelope: we may have died before loadConfig, so we\n      // can't ask `tenant.ephemeralEnvPattern` whether `env` would\n      // get the `-{env}` suffix. Emit the non-ephemeral form as a\n      // best-effort hint — `error` carries the real signal.\n      const result: ProvisionTenantResult = {\n        status: \"failed\",\n        tenantKey: tenantStateKey(options.product, options.workspace),\n        product: options.product,\n        workspace: options.workspace,\n        env,\n        scriptName: `${options.product}-${options.workspace}`,\n        dispatchNamespaceName: \"\",\n        shards: [],\n        error: msg,\n      };\n      process.stdout.write(JSON.stringify(result) + \"\\n\");\n    }\n    // Container caller (provision-workflow) reads exit code as\n    // primary success/failure signal; JSON envelope on stdout is\n    // secondary detail. Re-throw so the CLI surfaces the original\n    // error in human mode.\n    throw err;\n  }\n}\n\nasync function provisionTenantInner(options: {\n  env: string;\n  product: string;\n  workspace: string;\n  main?: string;\n  artifactKey?: string;\n  moduleName?: string;\n  configPath?: string;\n  compatibilityDate?: string;\n  compatibilityFlags?: string[];\n  shardsRaw?: string;\n  json?: boolean;\n  migrate?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  const config = await loadConfig(options.configPath, { env });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const dns = getDispatchNamespaces(config);\n  if (dns.length === 0) {\n    throw new Error(\n      \"provision-tenant requires at least one dispatch namespace in the Tamer project config (dispatchNamespaces).\",\n    );\n  }\n  const nsConfig = dns[0]!;\n  const dispatchNamespaceName = effectiveDispatchNamespaceName(\n    nsConfig,\n    env,\n    config.tenant,\n  );\n  const scriptName = tenantDispatchScriptName(\n    options.product,\n    options.workspace,\n    env,\n    config.tenant,\n  );\n  const desiredRoles = resolveShardRoles(\n    config.tenant.d1Shards ?? [],\n    options.shardsRaw,\n  );\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  let existing = state.getTenant(options.product, options.workspace);\n  // \"ready\" is a no-op only when the existing layout already covers\n  // every requested shard role. Adding a new role re-opens the tenant\n  // for incremental provisioning without forcing a full re-deploy.\n  if (existing?.provisioningStatus === \"ready\") {\n    const have = new Set((existing.d1Shards ?? []).map((s) => s.role));\n    const missing = desiredRoles.filter((r) => !have.has(r));\n    if (missing.length === 0) {\n      console.log(\n        `Tenant ${tenantStateKey(options.product, options.workspace)} already ready; nothing to do.`,\n      );\n      if (options.json) {\n        const result: ProvisionTenantResult = {\n          status: \"noop\",\n          tenantKey: tenantStateKey(options.product, options.workspace),\n          product: options.product,\n          workspace: options.workspace,\n          env,\n          scriptName,\n          dispatchNamespaceName,\n          shards: (existing.d1Shards ?? []).map((s) => ({\n            role: s.role,\n            derivedName: s.derivedName,\n            cfId: s.cfId,\n          })),\n        };\n        process.stdout.write(JSON.stringify(result) + \"\\n\");\n      }\n      return;\n    }\n    console.log(\n      `Tenant ${tenantStateKey(options.product, options.workspace)} ready but missing shards: ${missing.join(\", \")}; extending layout.`,\n    );\n  }\n\n  const compatDate =\n    options.compatibilityDate ??\n    config.compatibility_date ??\n    new Date().toISOString().slice(0, 10);\n\n  const entryOpts = {\n    product: options.product,\n    workspace: options.workspace,\n    dispatchNamespaceName,\n    scriptName,\n  };\n\n  if (!existing) {\n    state.setTenant(buildTenantEntry(entryOpts, \"pending\", undefined));\n    await state.persist(api);\n    existing = state.getTenant(options.product, options.workspace)!;\n  }\n\n  // Reconcile each requested shard role. We list D1 once per call when\n  // we need to (some role is missing from state) and reuse the result\n  // for every subsequent role.\n  let allD1: Awaited<ReturnType<typeof api.d1ListAll>> | null = null;\n  const shards: TenantD1ShardRef[] = [...(existing.d1Shards ?? [])];\n\n  for (const role of desiredRoles) {\n    if (shards.find((s) => s.role === role)) continue;\n    const derivedName = tenantShardDatabaseName(\n      role,\n      options.workspace,\n      options.product,\n      config.tenant.id,\n      env,\n    );\n    if (allD1 === null) {\n      allD1 = await api.d1ListAll();\n    }\n    let cfId = allD1.find((d) => d.name === derivedName)?.uuid;\n    if (cfId) {\n      // Adopt an existing D1 (e.g. partial-failure resume, or\n      // operator created it out-of-band) without re-issuing POST.\n      logApplyChange({\n        kind: \"d1\",\n        action: \"no_change\",\n        logical: `${role}-shard`,\n        derived: derivedName,\n      });\n    } else {\n      logApplyChange({\n        kind: \"d1\",\n        action: \"create\",\n        logical: `${role}-shard`,\n        derived: derivedName,\n      });\n      const created = await api.d1Create(derivedName);\n      cfId = created.uuid;\n    }\n    shards.push({ role, derivedName, cfId });\n    // Persist after each shard so a network failure mid-loop leaves\n    // the already-created shards recorded — `provision-tenant` is\n    // resumable role-by-role.\n    state.setTenant(\n      buildTenantEntry(entryOpts, \"d1_created\", existing, { d1Shards: shards }),\n    );\n    await state.persist(api);\n    existing = state.getTenant(options.product, options.workspace)!;\n  }\n\n  // Resolve dispatch script bindings from shards + config.\n  const naming = namingFromConfig(config);\n  const bindings = resolveTenantBindings(\n    config,\n    shards,\n    naming,\n    state,\n    env,\n    accountId,\n  );\n\n  // Optionally run migrations on each shard before uploading the script.\n  if (options.migrate !== false && shards.length > 0) {\n    await migrateTenantShards(config, shards, env, naming);\n  }\n\n  // Deploy the tenant worker via wrangler — handles TS compilation, WASM\n  // packaging, node: polyfills, and binding resolution. We write a temporary\n  // wrangler.json with the resolved tenant bindings, then run\n  // `wrangler deploy --dispatch-namespace`.\n  const { writeFileSync, unlinkSync, mkdirSync } = await import(\"fs\");\n  const { join: joinPath, dirname: dirnamePath } = await import(\"path\");\n  const { spawnWranglerSync } = await import(\"../../core/wrangler/wranglerSpawn.js\");\n  const { wranglerConfigCliArgs } = await import(\"../../core/wrangler/wranglerOutFile.js\");\n\n  let workerDir: string;\n  let tempWranglerPath: string;\n  const tempWranglerFile = \"wrangler.tenant.json\";\n\n  // Build the temporary wrangler config for the tenant dispatch script\n  const wranglerConfig: Record<string, unknown> = {\n    name: scriptName,\n    main: options.main ? basename(resolve(process.cwd(), options.main)) : (options.moduleName ?? \"worker.js\"),\n    compatibility_date: compatDate,\n    compatibility_flags: options.compatibilityFlags ?? [],\n  };\n\n  // Add resolved bindings to wrangler config\n  if (bindings.bindings?.length) {\n    // Convert unified bindings format to wrangler config format\n    const d1Databases: Array<Record<string, string>> = [];\n    const vars: Record<string, string> = {};\n    const services: Array<Record<string, string>> = [];\n    for (const b of bindings.bindings) {\n      if (b.type === \"d1\") {\n        d1Databases.push({ binding: b.name, database_id: b.id });\n      } else if (b.type === \"plain_text\") {\n        vars[b.name] = b.text;\n      } else if (b.type === \"service\") {\n        services.push({ name: b.name, service: b.service, ...(b.environment ? { environment: b.environment } : {}) });\n      }\n    }\n    if (d1Databases.length) wranglerConfig.d1_databases = d1Databases;\n    if (Object.keys(vars).length) wranglerConfig.vars = vars;\n    if (services.length) wranglerConfig.services = services;\n  }\n\n  if (options.main) {\n    const mainPath = resolve(process.cwd(), options.main);\n    workerDir = dirnamePath(mainPath);\n    wranglerConfig.main = basename(mainPath);\n    tempWranglerPath = joinPath(workerDir, tempWranglerFile);\n  } else if (options.artifactKey) {\n    // Download pre-built bundle from R2 to a temp directory\n    const { tmpdir } = await import(\"os\");\n    const bucket = tamerArtifactsBucketName();\n    const fullKey = `${tamerArtifactsKeyPrefix(env)}${options.artifactKey}`;\n    const body = await api.r2GetObject(bucket, fullKey);\n    const mod =\n      options.moduleName?.trim() ||\n      basename(options.artifactKey).replace(/\\.(zip|tar|gz)$/i, \"\") ||\n      \"worker.js\";\n    workerDir = joinPath(tmpdir(), `tamer-tenant-${Date.now()}`);\n    mkdirSync(workerDir, { recursive: true });\n    writeFileSync(joinPath(workerDir, mod), new Uint8Array(body));\n    wranglerConfig.main = mod;\n    tempWranglerPath = joinPath(workerDir, tempWranglerFile);\n  } else {\n    throw new Error(\"provision-tenant: provide --main or --artifact-key\");\n  }\n\n  writeFileSync(tempWranglerPath, JSON.stringify(wranglerConfig, null, 2));\n\n  console.log(`Deploying tenant script ${scriptName} to ${dispatchNamespaceName} via wrangler…`);\n  const deployResult = spawnWranglerSync(\n    [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(tempWranglerFile),\n      \"deploy\",\n      \"--dispatch-namespace\",\n      dispatchNamespaceName,\n    ],\n    {\n      cwd: workerDir,\n      stdio: \"inherit\",\n    },\n  );\n\n  // Clean up temp config\n  try {\n    unlinkSync(tempWranglerPath);\n  } catch {\n    /* best-effort */\n  }\n\n  if (deployResult.status !== 0) {\n    throw new Error(\n      `wrangler deploy failed for tenant ${scriptName} (exit ${deployResult.status})`,\n    );\n  }\n\n  state.setTenant(\n    buildTenantEntry(entryOpts, \"ready\", existing, { d1Shards: shards }),\n  );\n  await state.persist(api);\n\n  const shardsSummary =\n    shards.length > 0\n      ? `shards: ${shards.map((s) => s.role).join(\", \")}`\n      : \"no shards declared\";\n  console.log(\n    `Provisioned tenant ${tenantStateKey(options.product, options.workspace)} → script ${scriptName} in ${dispatchNamespaceName} (${shardsSummary})`,\n  );\n\n  if (options.json) {\n    const result: ProvisionTenantResult = {\n      status: \"ready\",\n      tenantKey: tenantStateKey(options.product, options.workspace),\n      product: options.product,\n      workspace: options.workspace,\n      env,\n      scriptName,\n      dispatchNamespaceName,\n      shards: shards.map((s) => ({\n        role: s.role,\n        derivedName: s.derivedName,\n        cfId: s.cfId,\n      })),\n    };\n    process.stdout.write(JSON.stringify(result) + \"\\n\");\n  }\n}\n\n/**\n * Run D1 migrations on each tenant shard by writing a temporary wrangler.json\n * with the shard binding and invoking `wrangler d1 migrations apply`.\n */\nasync function migrateTenantShards(\n  config: import(\"../../types.js\").CfiConfig,\n  shards: TenantD1ShardRef[],\n  env: string,\n  naming: import(\"../../core/naming/NamingEngine.js\").NamingEngine,\n): Promise<void> {\n  const { writeFileSync, unlinkSync, mkdirSync } = await import(\"fs\");\n  const { join } = await import(\"path\");\n  const { tmpdir } = await import(\"os\");\n  const { spawnWranglerSync } = await import(\n    \"../../core/wrangler/wranglerSpawn.js\"\n  );\n  const { wranglerConfigCliArgs } = await import(\n    \"../../core/wrangler/wranglerOutFile.js\"\n  );\n  const { resolveTenantD1Bindings } = await import(\n    \"../../core/tenant/resolveTenantBindings.js\"\n  );\n\n  const shardBindings = config.tenant.shardBindings ?? {};\n  const d1Bindings = resolveTenantD1Bindings(config, shards, naming);\n\n  // Resolve base dir for relative migrationsDir paths\n  const { getConfigBaseDir } = await import(\"../../core/config/loader.js\");\n  const baseDir = getConfigBaseDir();\n\n  for (let i = 0; i < shards.length; i++) {\n    const shard = shards[i]!;\n    const binding = d1Bindings[i]!;\n    const info = shardBindings[shard.role];\n    if (!info?.migrationsDir) {\n      console.log(`  migrate: skipping ${shard.role} (no migrationsDir in shardBindings)`);\n      continue;\n    }\n\n    const migDir = resolve(baseDir, info.migrationsDir);\n    const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);\n    const tempConfig = {\n      name: `tenant-migrate-${shard.role}`,\n      d1_databases: [{ binding: binding.name, database_id: shard.cfId, database_name: shard.derivedName, migrations_dir: \".\" }],\n      compatibility_date: config.compatibility_date ?? \"2024-01-01\",\n    };\n    writeFileSync(tempWranglerPath, JSON.stringify(tempConfig, null, 2));\n\n    const migrateArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(`wrangler.${shard.role}.json`),\n      \"d1\",\n      \"migrations\",\n      \"apply\",\n      binding.name,\n      \"--remote\",\n    ];\n    if (info.migrationsTable) {\n      migrateArgs.push(\"--migrations-table\", info.migrationsTable);\n    }\n\n    console.log(`  migrate: applying migrations for ${shard.role} (${shard.derivedName})...`);\n    const result = spawnWranglerSync(migrateArgs, {\n      cwd: migDir,\n      stdio: \"inherit\",\n    });\n    if (result.status !== 0) {\n      console.warn(`  migrate: failed for ${shard.role} (exit ${result.status})`);\n    }\n    try {\n      unlinkSync(tempWranglerPath);\n    } catch {\n      /* best-effort cleanup */\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAwBA,MAAM,6BAAoB,IAAI,MAAM,EAAC,aAAa;AAElD,SAAS,iBACP,SAMA,QACA,UACA,OACkB;AAClB,QAAO;EACL,SAAS,QAAQ;EACjB,WAAW,QAAQ;EACnB,oBAAoB;EACpB,uBAAuB,QAAQ;EAC/B,YAAY,QAAQ;EACpB,UAAU,OAAO,YAAY,UAAU;EACvC,WAAW,UAAU,aAAa,KAAK;EACvC,WAAW,KAAK;EACjB;;;;;;;;;;;;;;;;;;AAmBH,SAAS,kBACP,YACA,WACU;AACV,KAAI,aAAa,QAAQ,UAAU,MAAM,KAAK,GAAI,QAAO,CAAC,GAAG,WAAW;AACxE,QAAO,sBAAsB,WAAW,WAAW;;AAoDrD,eAAsB,mBAAmB,SAkBvB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,QAAQ,QACV,OAAM,IAAI,MACR,yEACD;AAGH,KAAI;AACF,QAAM,qBAAqB,QAAQ;UAC5B,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,MAAI,QAAQ,MAAM;GAKhB,MAAMA,SAAgC;IACpC,QAAQ;IACR,WAAW,eAAe,QAAQ,SAAS,QAAQ,UAAU;IAC7D,SAAS,QAAQ;IACjB,WAAW,QAAQ;IACnB;IACA,YAAY,GAAG,QAAQ,QAAQ,GAAG,QAAQ;IAC1C,uBAAuB;IACvB,QAAQ,EAAE;IACV,OAAO;IACR;AACD,WAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG,KAAK;;AAMrD,QAAM;;;AAIV,eAAe,qBAAqB,SAalB;CAChB,MAAM,MAAM,QAAQ;CACpB,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YAAY,OAAO,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,sBAAsB,OAAO;AACzC,KAAI,IAAI,WAAW,EACjB,OAAM,IAAI,MACR,8GACD;CAEH,MAAM,WAAW,IAAI;CACrB,MAAM,wBAAwB,+BAC5B,UACA,KACA,OAAO,OACR;CACD,MAAM,aAAa,yBACjB,QAAQ,SACR,QAAQ,WACR,KACA,OAAO,OACR;CACD,MAAM,eAAe,kBACnB,OAAO,OAAO,YAAY,EAAE,EAC5B,QAAQ,UACT;CAED,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,IAAI,WAAW,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAIlE,KAAI,UAAU,uBAAuB,SAAS;EAC5C,MAAM,OAAO,IAAI,KAAK,SAAS,YAAY,EAAE,EAAE,KAAK,MAAM,EAAE,KAAK,CAAC;EAClE,MAAM,UAAU,aAAa,QAAQ,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;AACxD,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAQ,IACN,UAAU,eAAe,QAAQ,SAAS,QAAQ,UAAU,CAAC,gCAC9D;AACD,OAAI,QAAQ,MAAM;IAChB,MAAMA,SAAgC;KACpC,QAAQ;KACR,WAAW,eAAe,QAAQ,SAAS,QAAQ,UAAU;KAC7D,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB;KACA;KACA;KACA,SAAS,SAAS,YAAY,EAAE,EAAE,KAAK,OAAO;MAC5C,MAAM,EAAE;MACR,aAAa,EAAE;MACf,MAAM,EAAE;MACT,EAAE;KACJ;AACD,YAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG,KAAK;;AAErD;;AAEF,UAAQ,IACN,UAAU,eAAe,QAAQ,SAAS,QAAQ,UAAU,CAAC,6BAA6B,QAAQ,KAAK,KAAK,CAAC,qBAC9G;;CAGH,MAAM,aACJ,QAAQ,qBACR,OAAO,uCACP,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;CAEvC,MAAM,YAAY;EAChB,SAAS,QAAQ;EACjB,WAAW,QAAQ;EACnB;EACA;EACD;AAED,KAAI,CAAC,UAAU;AACb,QAAM,UAAU,iBAAiB,WAAW,WAAW,OAAU,CAAC;AAClE,QAAM,MAAM,QAAQ,IAAI;AACxB,aAAW,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;;CAMhE,IAAIC,QAA0D;CAC9D,MAAMC,SAA6B,CAAC,GAAI,SAAS,YAAY,EAAE,CAAE;AAEjE,MAAK,MAAM,QAAQ,cAAc;AAC/B,MAAI,OAAO,MAAM,MAAM,EAAE,SAAS,KAAK,CAAE;EACzC,MAAM,cAAc,wBAClB,MACA,QAAQ,WACR,QAAQ,SACR,OAAO,OAAO,IACd,IACD;AACD,MAAI,UAAU,KACZ,SAAQ,MAAM,IAAI,WAAW;EAE/B,IAAI,OAAO,MAAM,MAAM,MAAM,EAAE,SAAS,YAAY,EAAE;AACtD,MAAI,KAGF,gBAAe;GACb,MAAM;GACN,QAAQ;GACR,SAAS,GAAG,KAAK;GACjB,SAAS;GACV,CAAC;OACG;AACL,kBAAe;IACb,MAAM;IACN,QAAQ;IACR,SAAS,GAAG,KAAK;IACjB,SAAS;IACV,CAAC;AAEF,WADgB,MAAM,IAAI,SAAS,YAAY,EAChC;;AAEjB,SAAO,KAAK;GAAE;GAAM;GAAa;GAAM,CAAC;AAIxC,QAAM,UACJ,iBAAiB,WAAW,cAAc,UAAU,EAAE,UAAU,QAAQ,CAAC,CAC1E;AACD,QAAM,MAAM,QAAQ,IAAI;AACxB,aAAW,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;;CAIhE,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,WAAW,sBACf,QACA,QACA,QACA,OACA,KACA,UACD;AAGD,KAAI,QAAQ,YAAY,SAAS,OAAO,SAAS,EAC/C,OAAM,oBAAoB,QAAQ,QAAQ,KAAK,OAAO;CAOxD,MAAM,EAAE,eAAe,YAAY,cAAc,MAAM,OAAO;CAC9D,MAAM,EAAE,MAAM,UAAU,SAAS,gBAAgB,MAAM,OAAO;CAC9D,MAAM,EAAE,sBAAsB,MAAM,OAAO;CAC3C,MAAM,EAAE,0BAA0B,MAAM,OAAO;CAE/C,IAAIC;CACJ,IAAIC;CACJ,MAAM,mBAAmB;CAGzB,MAAMC,iBAA0C;EAC9C,MAAM;EACN,MAAM,QAAQ,OAAO,SAAS,QAAQ,QAAQ,KAAK,EAAE,QAAQ,KAAK,CAAC,GAAI,QAAQ,cAAc;EAC7F,oBAAoB;EACpB,qBAAqB,QAAQ,sBAAsB,EAAE;EACtD;AAGD,KAAI,SAAS,UAAU,QAAQ;EAE7B,MAAMC,cAA6C,EAAE;EACrD,MAAMC,OAA+B,EAAE;EACvC,MAAMC,WAA0C,EAAE;AAClD,OAAK,MAAM,KAAK,SAAS,SACvB,KAAI,EAAE,SAAS,KACb,aAAY,KAAK;GAAE,SAAS,EAAE;GAAM,aAAa,EAAE;GAAI,CAAC;WAC/C,EAAE,SAAS,aACpB,MAAK,EAAE,QAAQ,EAAE;WACR,EAAE,SAAS,UACpB,UAAS,KAAK;GAAE,MAAM,EAAE;GAAM,SAAS,EAAE;GAAS,GAAI,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,GAAG,EAAE;GAAG,CAAC;AAGjH,MAAI,YAAY,OAAQ,gBAAe,eAAe;AACtD,MAAI,OAAO,KAAK,KAAK,CAAC,OAAQ,gBAAe,OAAO;AACpD,MAAI,SAAS,OAAQ,gBAAe,WAAW;;AAGjD,KAAI,QAAQ,MAAM;EAChB,MAAM,WAAW,QAAQ,QAAQ,KAAK,EAAE,QAAQ,KAAK;AACrD,cAAY,YAAY,SAAS;AACjC,iBAAe,OAAO,SAAS,SAAS;AACxC,qBAAmB,SAAS,WAAW,iBAAiB;YAC/C,QAAQ,aAAa;EAE9B,MAAM,EAAE,WAAW,MAAM,OAAO;EAChC,MAAM,SAAS,0BAA0B;EACzC,MAAM,UAAU,GAAG,wBAAwB,IAAI,GAAG,QAAQ;EAC1D,MAAM,OAAO,MAAM,IAAI,YAAY,QAAQ,QAAQ;EACnD,MAAM,MACJ,QAAQ,YAAY,MAAM,IAC1B,SAAS,QAAQ,YAAY,CAAC,QAAQ,oBAAoB,GAAG,IAC7D;AACF,cAAY,SAAS,QAAQ,EAAE,gBAAgB,KAAK,KAAK,GAAG;AAC5D,YAAU,WAAW,EAAE,WAAW,MAAM,CAAC;AACzC,gBAAc,SAAS,WAAW,IAAI,EAAE,IAAI,WAAW,KAAK,CAAC;AAC7D,iBAAe,OAAO;AACtB,qBAAmB,SAAS,WAAW,iBAAiB;OAExD,OAAM,IAAI,MAAM,qDAAqD;AAGvE,eAAc,kBAAkB,KAAK,UAAU,gBAAgB,MAAM,EAAE,CAAC;AAExE,SAAQ,IAAI,2BAA2B,WAAW,MAAM,sBAAsB,gBAAgB;CAC9F,MAAM,eAAe,kBACnB;EACE;EACA,GAAG,sBAAsB,iBAAiB;EAC1C;EACA;EACA;EACD,EACD;EACE,KAAK;EACL,OAAO;EACR,CACF;AAGD,KAAI;AACF,aAAW,iBAAiB;SACtB;AAIR,KAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MACR,qCAAqC,WAAW,SAAS,aAAa,OAAO,GAC9E;AAGH,OAAM,UACJ,iBAAiB,WAAW,SAAS,UAAU,EAAE,UAAU,QAAQ,CAAC,CACrE;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,gBACJ,OAAO,SAAS,IACZ,WAAW,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,KAC/C;AACN,SAAQ,IACN,sBAAsB,eAAe,QAAQ,SAAS,QAAQ,UAAU,CAAC,YAAY,WAAW,MAAM,sBAAsB,IAAI,cAAc,GAC/I;AAED,KAAI,QAAQ,MAAM;EAChB,MAAMR,SAAgC;GACpC,QAAQ;GACR,WAAW,eAAe,QAAQ,SAAS,QAAQ,UAAU;GAC7D,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB;GACA;GACA;GACA,QAAQ,OAAO,KAAK,OAAO;IACzB,MAAM,EAAE;IACR,aAAa,EAAE;IACf,MAAM,EAAE;IACT,EAAE;GACJ;AACD,UAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG,KAAK;;;;;;;AAQvD,eAAe,oBACb,QACA,QACA,KACA,QACe;CACf,MAAM,EAAE,eAAe,YAAY,cAAc,MAAM,OAAO;CAC9D,MAAM,EAAE,iBAAS,MAAM,OAAO;CAC9B,MAAM,EAAE,WAAW,MAAM,OAAO;CAChC,MAAM,EAAE,sBAAsB,MAAM,OAClC;CAEF,MAAM,EAAE,0BAA0B,MAAM,OACtC;CAEF,MAAM,EAAE,4BAA4B,MAAM,OACxC;CAGF,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;CACvD,MAAM,aAAa,wBAAwB,QAAQ,QAAQ,OAAO;CAGlE,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,UAAU,kBAAkB;AAElC,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;EACtC,MAAM,QAAQ,OAAO;EACrB,MAAM,UAAU,WAAW;EAC3B,MAAM,OAAO,cAAc,MAAM;AACjC,MAAI,CAAC,MAAM,eAAe;AACxB,WAAQ,IAAI,uBAAuB,MAAM,KAAK,sCAAsC;AACpF;;EAGF,MAAM,SAAS,QAAQ,SAAS,KAAK,cAAc;EACnD,MAAM,mBAAmBS,OAAK,QAAQ,YAAY,MAAM,KAAK,OAAO;EACpE,MAAM,aAAa;GACjB,MAAM,kBAAkB,MAAM;GAC9B,cAAc,CAAC;IAAE,SAAS,QAAQ;IAAM,aAAa,MAAM;IAAM,eAAe,MAAM;IAAa,gBAAgB;IAAK,CAAC;GACzH,oBAAoB,OAAO,sBAAsB;GAClD;AACD,gBAAc,kBAAkB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;EAEpE,MAAM,cAAc;GAClB;GACA,GAAG,sBAAsB,YAAY,MAAM,KAAK,OAAO;GACvD;GACA;GACA;GACA,QAAQ;GACR;GACD;AACD,MAAI,KAAK,gBACP,aAAY,KAAK,sBAAsB,KAAK,gBAAgB;AAG9D,UAAQ,IAAI,sCAAsC,MAAM,KAAK,IAAI,MAAM,YAAY,MAAM;EACzF,MAAM,SAAS,kBAAkB,aAAa;GAC5C,KAAK;GACL,OAAO;GACR,CAAC;AACF,MAAI,OAAO,WAAW,EACpB,SAAQ,KAAK,yBAAyB,MAAM,KAAK,SAAS,OAAO,OAAO,GAAG;AAE7E,MAAI;AACF,cAAW,iBAAiB;UACtB"}

package/dist/{resolveTenantBindings-BypqzcSn.mjs → resolveTenantBindings-86AmRQcW.mjs}

@@ -62,4 +62,4 @@ function resolveTenantBindings(config, shards, naming, state, env, accountId) {
 
 //#endregion
 export { resolveTenantBindings, resolveTenantD1Bindings };
-//# sourceMappingURL=resolveTenantBindings-BypqzcSn.mjs.map
+//# sourceMappingURL=resolveTenantBindings-86AmRQcW.mjs.map

package/dist/{resolveTenantBindings-BypqzcSn.mjs.map → resolveTenantBindings-86AmRQcW.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"resolveTenantBindings-BypqzcSn.mjs","names":["bindings: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  >","refCtx: ReferenceContext"],"sources":["../src/core/tenant/resolveTenantBindings.ts"],"sourcesContent":["/**\n * Resolve dispatch script bindings for a provisioned tenant.\n *\n * D1 bindings derive from `tenant.shardBindings` matched to the tenant's\n * shard roles. Vars and services come from `tenant.dispatchVars` /\n * `tenant.dispatchServices` (resolved against state for `${tamer:...}`\n * references).\n */\nimport type { CfiConfig, TenantD1ShardRef } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { DispatchScriptBindings } from \"../../core/wfp/buildDispatchUploadForm.js\";\nimport { materializeTamerResolvable } from \"../../dx/normalize.js\";\nimport {\n  resolveReferencesInString,\n  type ReferenceContext,\n} from \"../../core/references/references.js\";\n\n/**\n * Resolve D1 bindings for the tenant dispatch script.\n * Matches shard roles to `tenant.shardBindings` and produces\n * unified `bindings[]` entries: `{ type: \"d1\", name: binding, id: cfId }`.\n */\nexport function resolveTenantD1Bindings(\n  config: CfiConfig,\n  shards: TenantD1ShardRef[],\n  naming: NamingEngine,\n): Array<{ type: \"d1\"; name: string; id: string }> {\n  const shardBindings = config.tenant.shardBindings ?? {};\n  return shards.map((shard) => {\n    const info = shardBindings[shard.role];\n    const binding = info?.binding ?? `DB_${shard.role.toUpperCase().replace(/-/g, \"_\")}`;\n    return { type: \"d1\", name: binding, id: shard.cfId };\n  });\n}\n\n/**\n * Resolve all dispatch script bindings (D1 + vars + services).\n * References in vars/services are resolved against state.\n * Uses the unified Cloudflare bindings format.\n */\nexport function resolveTenantBindings(\n  config: CfiConfig,\n  shards: TenantD1ShardRef[],\n  naming: NamingEngine,\n  state: StateManager,\n  env: string,\n  accountId: string,\n): DispatchScriptBindings {\n  const bindings: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  > = [];\n\n  // D1 bindings from shard roles\n  bindings.push(...resolveTenantD1Bindings(config, shards, naming));\n\n  // Vars from config.tenant.dispatchVars\n  if (config.tenant.dispatchVars) {\n    const refCtx: ReferenceContext = {\n      config,\n      env,\n      state,\n      naming,\n      accountId,\n    };\n    for (const [key, value] of Object.entries(config.tenant.dispatchVars)) {\n      const text = resolveReferencesInString(\n        materializeTamerResolvable(value),\n        refCtx,\n        `tenant.dispatchVars.${key}`,\n      );\n      bindings.push({ type: \"plain_text\", name: key, text });\n    }\n  }\n\n  // Service bindings from config.tenant.dispatchServices\n  if (config.tenant.dispatchServices?.length) {\n    const refCtx: ReferenceContext = {\n      config,\n      env,\n      state,\n      naming,\n      accountId,\n    };\n    for (const s of config.tenant.dispatchServices) {\n      bindings.push({\n        type: \"service\",\n        name: s.name,\n        service: resolveReferencesInString(\n          materializeTamerResolvable(s.service),\n          refCtx,\n          `tenant.dispatchServices.${s.name}.service`,\n        ),\n        ...(s.environment ? { environment: s.environment } : {}),\n      });\n    }\n  }\n\n  return bindings.length > 0 ? { bindings } : {};\n}\n"],"mappings":";;;;;;;;;AAuBA,SAAgB,wBACd,QACA,QACA,QACiD;CACjD,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;AACvD,QAAO,OAAO,KAAK,UAAU;AAG3B,SAAO;GAAE,MAAM;GAAM,MAFR,cAAc,MAAM,OACX,WAAW,MAAM,MAAM,KAAK,aAAa,CAAC,QAAQ,MAAM,IAAI;GAC9C,IAAI,MAAM;GAAM;GACpD;;;;;;;AAQJ,SAAgB,sBACd,QACA,QACA,QACA,OACA,KACA,WACwB;CACxB,MAAMA,WAIF,EAAE;AAGN,UAAS,KAAK,GAAG,wBAAwB,QAAQ,QAAQ,OAAO,CAAC;AAGjE,KAAI,OAAO,OAAO,cAAc;EAC9B,MAAMC,SAA2B;GAC/B;GACA;GACA;GACA;GACA;GACD;AACD,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,OAAO,aAAa,EAAE;GACrE,MAAM,OAAO,0BACX,2BAA2B,MAAM,EACjC,QACA,uBAAuB,MACxB;AACD,YAAS,KAAK;IAAE,MAAM;IAAc,MAAM;IAAK;IAAM,CAAC;;;AAK1D,KAAI,OAAO,OAAO,kBAAkB,QAAQ;EAC1C,MAAMA,SAA2B;GAC/B;GACA;GACA;GACA;GACA;GACD;AACD,OAAK,MAAM,KAAK,OAAO,OAAO,iBAC5B,UAAS,KAAK;GACZ,MAAM;GACN,MAAM,EAAE;GACR,SAAS,0BACP,2BAA2B,EAAE,QAAQ,EACrC,QACA,2BAA2B,EAAE,KAAK,UACnC;GACD,GAAI,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,GAAG,EAAE;GACxD,CAAC;;AAIN,QAAO,SAAS,SAAS,IAAI,EAAE,UAAU,GAAG,EAAE"}
+{"version":3,"file":"resolveTenantBindings-86AmRQcW.mjs","names":["bindings: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  >","refCtx: ReferenceContext"],"sources":["../src/core/tenant/resolveTenantBindings.ts"],"sourcesContent":["/**\n * Resolve dispatch script bindings for a provisioned tenant.\n *\n * D1 bindings derive from `tenant.shardBindings` matched to the tenant's\n * shard roles. Vars and services come from `tenant.dispatchVars` /\n * `tenant.dispatchServices` (resolved against state for `${tamer:...}`\n * references).\n */\nimport type { CfiConfig, TenantD1ShardRef } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { DispatchScriptBindings } from \"../../core/wfp/buildDispatchUploadForm.js\";\nimport { materializeTamerResolvable } from \"../../dx/normalize.js\";\nimport {\n  resolveReferencesInString,\n  type ReferenceContext,\n} from \"../../core/references/references.js\";\n\n/**\n * Resolve D1 bindings for the tenant dispatch script.\n * Matches shard roles to `tenant.shardBindings` and produces\n * unified `bindings[]` entries: `{ type: \"d1\", name: binding, id: cfId }`.\n */\nexport function resolveTenantD1Bindings(\n  config: CfiConfig,\n  shards: TenantD1ShardRef[],\n  naming: NamingEngine,\n): Array<{ type: \"d1\"; name: string; id: string }> {\n  const shardBindings = config.tenant.shardBindings ?? {};\n  return shards.map((shard) => {\n    const info = shardBindings[shard.role];\n    const binding = info?.binding ?? `DB_${shard.role.toUpperCase().replace(/-/g, \"_\")}`;\n    return { type: \"d1\", name: binding, id: shard.cfId };\n  });\n}\n\n/**\n * Resolve all dispatch script bindings (D1 + vars + services).\n * References in vars/services are resolved against state.\n * Uses the unified Cloudflare bindings format.\n */\nexport function resolveTenantBindings(\n  config: CfiConfig,\n  shards: TenantD1ShardRef[],\n  naming: NamingEngine,\n  state: StateManager,\n  env: string,\n  accountId: string,\n): DispatchScriptBindings {\n  const bindings: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  > = [];\n\n  // D1 bindings from shard roles\n  bindings.push(...resolveTenantD1Bindings(config, shards, naming));\n\n  // Vars from config.tenant.dispatchVars\n  if (config.tenant.dispatchVars) {\n    const refCtx: ReferenceContext = {\n      config,\n      env,\n      state,\n      naming,\n      accountId,\n    };\n    for (const [key, value] of Object.entries(config.tenant.dispatchVars)) {\n      const text = resolveReferencesInString(\n        materializeTamerResolvable(value),\n        refCtx,\n        `tenant.dispatchVars.${key}`,\n      );\n      bindings.push({ type: \"plain_text\", name: key, text });\n    }\n  }\n\n  // Service bindings from config.tenant.dispatchServices\n  if (config.tenant.dispatchServices?.length) {\n    const refCtx: ReferenceContext = {\n      config,\n      env,\n      state,\n      naming,\n      accountId,\n    };\n    for (const s of config.tenant.dispatchServices) {\n      bindings.push({\n        type: \"service\",\n        name: s.name,\n        service: resolveReferencesInString(\n          materializeTamerResolvable(s.service),\n          refCtx,\n          `tenant.dispatchServices.${s.name}.service`,\n        ),\n        ...(s.environment ? { environment: s.environment } : {}),\n      });\n    }\n  }\n\n  return bindings.length > 0 ? { bindings } : {};\n}\n"],"mappings":";;;;;;;;;AAuBA,SAAgB,wBACd,QACA,QACA,QACiD;CACjD,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;AACvD,QAAO,OAAO,KAAK,UAAU;AAG3B,SAAO;GAAE,MAAM;GAAM,MAFR,cAAc,MAAM,OACX,WAAW,MAAM,MAAM,KAAK,aAAa,CAAC,QAAQ,MAAM,IAAI;GAC9C,IAAI,MAAM;GAAM;GACpD;;;;;;;AAQJ,SAAgB,sBACd,QACA,QACA,QACA,OACA,KACA,WACwB;CACxB,MAAMA,WAIF,EAAE;AAGN,UAAS,KAAK,GAAG,wBAAwB,QAAQ,QAAQ,OAAO,CAAC;AAGjE,KAAI,OAAO,OAAO,cAAc;EAC9B,MAAMC,SAA2B;GAC/B;GACA;GACA;GACA;GACA;GACD;AACD,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,OAAO,aAAa,EAAE;GACrE,MAAM,OAAO,0BACX,2BAA2B,MAAM,EACjC,QACA,uBAAuB,MACxB;AACD,YAAS,KAAK;IAAE,MAAM;IAAc,MAAM;IAAK;IAAM,CAAC;;;AAK1D,KAAI,OAAO,OAAO,kBAAkB,QAAQ;EAC1C,MAAMA,SAA2B;GAC/B;GACA;GACA;GACA;GACA;GACD;AACD,OAAK,MAAM,KAAK,OAAO,OAAO,iBAC5B,UAAS,KAAK;GACZ,MAAM;GACN,MAAM,EAAE;GACR,SAAS,0BACP,2BAA2B,EAAE,QAAQ,EACrC,QACA,2BAA2B,EAAE,KAAK,UACnC;GACD,GAAI,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,GAAG,EAAE;GACxD,CAAC;;AAIN,QAAO,SAAS,SAAS,IAAI,EAAE,UAAU,GAAG,EAAE"}

package/dist/{status-WMG5abrN.mjs → status-CL4MEGbn.mjs}

@@ -203,4 +203,4 @@ async function runStatus(options) {
 
 //#endregion
 export { runStatus };
-//# sourceMappingURL=status-WMG5abrN.mjs.map
+//# sourceMappingURL=status-CL4MEGbn.mjs.map

package/dist/{status-WMG5abrN.mjs.map → status-CL4MEGbn.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"status-WMG5abrN.mjs","names":["results: Array<{\n    logicalName: string;\n    namespace: string;\n    status: ResourceStatus;\n  }>","rows: DnsRecordStatusRow[]","meta: string[]","siblingImports: Record<string, Record<string, string>>","logpushLive:\n    | Awaited<ReturnType<CFApiClient[\"logpushAccountJobsList\"]>>\n    | undefined","hints: string[]"],"sources":["../src/features/dispatch-namespace/dispatch-namespace.status.ts","../src/features/dns-records/dns-records.status.ts","../src/cli/commands/status.ts"],"sourcesContent":["import type { DispatchNamespaceResourceConfig, CfiConfig } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceStatus } from \"../../types.js\";\nimport { effectiveDispatchNamespaceName } from \"./dispatch-namespace.resolve.js\";\n\nexport function dispatchNamespaceStatus(\n  resources: DispatchNamespaceResourceConfig[],\n  env: string,\n  state: StateManager,\n  _naming: NamingEngine,\n  config: CfiConfig,\n): Array<{ logicalName: string; namespace: string; status: ResourceStatus }> {\n  const results: Array<{\n    logicalName: string;\n    namespace: string;\n    status: ResourceStatus;\n  }> = [];\n\n  for (const nsConfig of resources) {\n    const resolvedName = effectiveDispatchNamespaceName(nsConfig, env, config.tenant);\n    const key = `dispatch_ns:${resolvedName}`;\n    const entry = state.get(key);\n    results.push({\n      logicalName: nsConfig.logicalName,\n      namespace: resolvedName,\n      status:\n        entry?.type === \"dispatch_namespace\" ? \"ok\" : \"missing\",\n    });\n  }\n\n  return results;\n}\n","import type { DnsRecordResourceConfig, ResourceStatus } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport {\n  dnsRecordAppliesToEnv,\n  dnsRecordStateKey,\n} from \"./dns-records.resolve.js\";\n\nexport interface DnsRecordStatusRow {\n  logicalName: string;\n  type: string;\n  name: string;\n  recordId?: string;\n  status: ResourceStatus;\n}\n\nexport function dnsRecordStatus(\n  resources: DnsRecordResourceConfig[],\n  env: string,\n  state: StateManager,\n): DnsRecordStatusRow[] {\n  const rows: DnsRecordStatusRow[] = [];\n  for (const config of resources) {\n    if (!dnsRecordAppliesToEnv(config, env)) {\n      rows.push({\n        logicalName: config.logicalName,\n        type: config.type,\n        name: config.name,\n        status: \"ok\",\n      });\n      continue;\n    }\n    const entry = state.get(\n      dnsRecordStateKey(config.zoneId, config.type, config.name),\n    );\n    if (entry?.type === \"dns_record\") {\n      rows.push({\n        logicalName: config.logicalName,\n        type: entry.recordType,\n        name: entry.name,\n        recordId: entry.recordId,\n        status: \"ok\",\n      });\n    } else {\n      rows.push({\n        logicalName: config.logicalName,\n        type: config.type,\n        name: config.name,\n        status: \"missing\",\n      });\n    }\n  }\n  return rows;\n}\n","import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { dispatchNamespaceStatus } from \"../../features/dispatch-namespace/index.js\";\nimport { dnsRecordStatus } from \"../../features/dns-records/index.js\";\nimport { getDispatchNamespaces, getDnsRecords, getLogpushJobs } from \"../../types.js\";\nimport { logpushJobStatus } from \"../../features/logpush-job/index.js\";\nimport { tenantStateKey } from \"../../core/tenant/tenantKeys.js\";\nimport { resourceModules } from \"../../core/registry/registry.js\";\nimport {\n  resolveDeployedWorkerName,\n  mergeWorkerConfigForResourcePick,\n} from \"../../core/config/resolver.js\";\nimport { buildOutputsView } from \"../../core/outputs/stackOutputs.js\";\nimport {\n  fetchStackImports,\n  scanConfigForImports,\n} from \"../../core/imports/fetchStackImports.js\";\n\nexport async function runStatus(options: {\n  env?: string;\n  configPath?: string;\n  /** `product:workspace` — show only this workspace tenant from state. */\n  tenant?: string;\n}): Promise<void> {\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const workers = await getWorkers(config, baseDir);\n  console.log(\n    `\\nStatus for ${config.tenant.name} (${config.tenant.slug}) — env: ${env}\\n`,\n  );\n\n  if (options.tenant?.trim()) {\n    const raw = options.tenant.trim();\n    const colon = raw.indexOf(\":\");\n    if (colon < 1) {\n      throw new Error(\n        'status --tenant expects \"product:workspace\" (e.g. todo:acme)',\n      );\n    }\n    const product = raw.slice(0, colon);\n    const workspace = raw.slice(colon + 1);\n    const t = state.getTenant(product, workspace);\n    console.log(`Workspace tenant ${tenantStateKey(product, workspace)}:`);\n    if (!t) {\n      console.log(\"  (no record in tamer state)\\n\");\n      return;\n    }\n    console.log(`  status: ${t.provisioningStatus}`);\n    console.log(`  dispatch namespace: ${t.dispatchNamespaceName}`);\n    console.log(`  script: ${t.scriptName}`);\n    if (t.d1Shards?.length) {\n      console.log(\"  D1 shards:\");\n      for (const s of t.d1Shards) {\n        console.log(`    ${s.role}: ${s.derivedName} [${s.cfId}]`);\n      }\n    }\n    console.log();\n    return;\n  }\n\n  const outputRows = buildOutputsView(config, state);\n  if (outputRows.length > 0) {\n    console.log(\"Stack outputs:\");\n    for (const r of outputRows) {\n      const valueText =\n        r.value === null\n          ? \"(unresolved — run apply)\"\n          : r.value;\n      const meta: string[] = [r.status];\n      if (r.status === \"stale\" && r.declaredSource) {\n        meta.push(`source drifted → ${r.declaredSource}`);\n      }\n      console.log(`  ${r.name}: ${valueText} [${meta.join(\", \")}]`);\n    }\n    console.log();\n  }\n\n  // Inbound imports — show every `${tamer:import:<stack>.<output>}`\n  // referenced by config, grouped by source stack. We tolerate fetch\n  // failures so `tamer status` still works in offline / partial-cred\n  // environments; a missing sibling row just displays \"(unresolved)\".\n  const importRefs = scanConfigForImports(config);\n  let siblingImports: Record<string, Record<string, string>> = {};\n  try {\n    siblingImports = await fetchStackImports(api, config, env);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`(could not pre-fetch imported stacks: ${msg})`);\n  }\n  if (importRefs.length > 0) {\n    console.log(\"Stack imports:\");\n    const byStack = new Map<string, Set<string>>();\n    for (const r of importRefs) {\n      if (!byStack.has(r.stack)) byStack.set(r.stack, new Set());\n      byStack.get(r.stack)!.add(r.output);\n    }\n    for (const [stack, outputs] of [...byStack].sort(([a], [b]) =>\n      a.localeCompare(b),\n    )) {\n      console.log(`  from stack \"${stack}\":`);\n      const stackOutputs = siblingImports[stack] ?? {};\n      for (const out of [...outputs].sort()) {\n        const v = stackOutputs[out];\n        const status = v === undefined ? \"unresolved\" : \"resolved\";\n        const value = v ?? \"(missing — run `tamer apply` on that stack)\";\n        console.log(`    ${out}: ${value} [${status}]`);\n      }\n    }\n    console.log();\n  }\n\n  const dns = dispatchNamespaceStatus(\n    getDispatchNamespaces(config),\n    env,\n    state,\n    naming,\n    config,\n  );\n  if (dns.length > 0) {\n    console.log(\"Dispatch namespaces:\");\n    for (const r of dns) {\n      console.log(`  ${r.logicalName} (${r.namespace}) [${r.status}]`);\n    }\n    console.log();\n  }\n\n  const tenants = state.listTenants();\n  if (tenants.length > 0) {\n    console.log(`Tenants (${tenants.length}):`);\n    for (const t of tenants.sort((a, b) =>\n      `${a.product}:${a.workspace}`.localeCompare(`${b.product}:${b.workspace}`),\n    )) {\n      const shards = t.d1Shards?.length ?? 0;\n      console.log(\n        `  ${t.product}:${t.workspace} [${t.provisioningStatus}] ${t.scriptName} (${shards} shard(s))`,\n      );\n    }\n    console.log();\n  }\n\n  const dnsRows = dnsRecordStatus(getDnsRecords(config), env, state);\n  if (dnsRows.length > 0) {\n    console.log(\"DNS records:\");\n    for (const r of dnsRows) {\n      const id = r.recordId ? ` [${r.recordId}]` : \"\";\n      console.log(`  ${r.logicalName}: ${r.type} ${r.name}${id} [${r.status}]`);\n    }\n    console.log();\n  }\n\n  let logpushLive:\n    | Awaited<ReturnType<CFApiClient[\"logpushAccountJobsList\"]>>\n    | undefined;\n  if (env !== \"local\") {\n    try {\n      logpushLive = await api.logpushAccountJobsList();\n    } catch {\n      // Token may lack Logpush list; state-only rows still print.\n    }\n  }\n  const logpushRows = logpushJobStatus(\n    getLogpushJobs(config),\n    config.tenant,\n    env,\n    state,\n    logpushLive,\n  );\n  if (logpushRows.length > 0) {\n    console.log(\"Logpush jobs:\");\n    for (const r of logpushRows) {\n      const id = r.cfJobId != null ? ` [id ${r.cfJobId}]` : \"\";\n      const hints: string[] = [];\n      if (r.cfEnabled === false) hints.push(\"disabled on Cloudflare\");\n      if (r.cfError) hints.push(`CF error: ${r.cfError}`);\n      const hint = hints.length > 0 ? ` — ${hints.join(\"; \")}` : \"\";\n      console.log(`  ${r.logicalName}: ${r.jobName}${id} [${r.status}]${hint}`);\n    }\n    console.log();\n  }\n\n  for (const [workerKey, workerConfig] of workers) {\n    console.log(`Worker: ${workerKey}`);\n    const deployedName = resolveDeployedWorkerName(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      naming,\n    );\n    const mergedWorker = mergeWorkerConfigForResourcePick(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: siblingImports },\n    );\n    let printedAny = false;\n    for (const mod of resourceModules) {\n      const resources = mod.pickResources(mergedWorker);\n      if (resources.length === 0) continue;\n      const rows = mod.status({\n        resources,\n        env,\n        state,\n        naming,\n        worker: { workerKey, deployedName },\n      });\n      if (rows.length === 0) continue;\n      printedAny = true;\n      console.log(`  ${mod.label}:`);\n      for (const r of rows) {\n        console.log(`    ${r.binding}: ${r.name} [${r.status}]`);\n      }\n    }\n    if (!printedAny) console.log(\"  (no resources)\");\n    console.log();\n  }\n}\n"],"mappings":";;;;;;;;;AAMA,SAAgB,wBACd,WACA,KACA,OACA,SACA,QAC2E;CAC3E,MAAMA,UAID,EAAE;AAEP,MAAK,MAAM,YAAY,WAAW;EAChC,MAAM,eAAe,+BAA+B,UAAU,KAAK,OAAO,OAAO;EACjF,MAAM,MAAM,eAAe;EAC3B,MAAM,QAAQ,MAAM,IAAI,IAAI;AAC5B,UAAQ,KAAK;GACX,aAAa,SAAS;GACtB,WAAW;GACX,QACE,OAAO,SAAS,uBAAuB,OAAO;GACjD,CAAC;;AAGJ,QAAO;;;;;AChBT,SAAgB,gBACd,WACA,KACA,OACsB;CACtB,MAAMC,OAA6B,EAAE;AACrC,MAAK,MAAM,UAAU,WAAW;AAC9B,MAAI,CAAC,sBAAsB,QAAQ,IAAI,EAAE;AACvC,QAAK,KAAK;IACR,aAAa,OAAO;IACpB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,QAAQ;IACT,CAAC;AACF;;EAEF,MAAM,QAAQ,MAAM,IAClB,kBAAkB,OAAO,QAAQ,OAAO,MAAM,OAAO,KAAK,CAC3D;AACD,MAAI,OAAO,SAAS,aAClB,MAAK,KAAK;GACR,aAAa,OAAO;GACpB,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,QAAQ;GACT,CAAC;MAEF,MAAK,KAAK;GACR,aAAa,OAAO;GACpB,MAAM,OAAO;GACb,MAAM,OAAO;GACb,QAAQ;GACT,CAAC;;AAGN,QAAO;;;;;AC7BT,eAAsB,UAAU,SAKd;CAChB,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAEH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;AACjD,SAAQ,IACN,gBAAgB,OAAO,OAAO,KAAK,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,IAC1E;AAED,KAAI,QAAQ,QAAQ,MAAM,EAAE;EAC1B,MAAM,MAAM,QAAQ,OAAO,MAAM;EACjC,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,MAAI,QAAQ,EACV,OAAM,IAAI,MACR,iEACD;EAEH,MAAM,UAAU,IAAI,MAAM,GAAG,MAAM;EACnC,MAAM,YAAY,IAAI,MAAM,QAAQ,EAAE;EACtC,MAAM,IAAI,MAAM,UAAU,SAAS,UAAU;AAC7C,UAAQ,IAAI,oBAAoB,eAAe,SAAS,UAAU,CAAC,GAAG;AACtE,MAAI,CAAC,GAAG;AACN,WAAQ,IAAI,iCAAiC;AAC7C;;AAEF,UAAQ,IAAI,aAAa,EAAE,qBAAqB;AAChD,UAAQ,IAAI,yBAAyB,EAAE,wBAAwB;AAC/D,UAAQ,IAAI,aAAa,EAAE,aAAa;AACxC,MAAI,EAAE,UAAU,QAAQ;AACtB,WAAQ,IAAI,eAAe;AAC3B,QAAK,MAAM,KAAK,EAAE,SAChB,SAAQ,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,YAAY,IAAI,EAAE,KAAK,GAAG;;AAG9D,UAAQ,KAAK;AACb;;CAGF,MAAM,aAAa,iBAAiB,QAAQ,MAAM;AAClD,KAAI,WAAW,SAAS,GAAG;AACzB,UAAQ,IAAI,iBAAiB;AAC7B,OAAK,MAAM,KAAK,YAAY;GAC1B,MAAM,YACJ,EAAE,UAAU,OACR,6BACA,EAAE;GACR,MAAMC,OAAiB,CAAC,EAAE,OAAO;AACjC,OAAI,EAAE,WAAW,WAAW,EAAE,eAC5B,MAAK,KAAK,oBAAoB,EAAE,iBAAiB;AAEnD,WAAQ,IAAI,KAAK,EAAE,KAAK,IAAI,UAAU,IAAI,KAAK,KAAK,KAAK,CAAC,GAAG;;AAE/D,UAAQ,KAAK;;CAOf,MAAM,aAAa,qBAAqB,OAAO;CAC/C,IAAIC,iBAAyD,EAAE;AAC/D,KAAI;AACF,mBAAiB,MAAM,kBAAkB,KAAK,QAAQ,IAAI;UACnD,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,yCAAyC,IAAI,GAAG;;AAE/D,KAAI,WAAW,SAAS,GAAG;AACzB,UAAQ,IAAI,iBAAiB;EAC7B,MAAM,0BAAU,IAAI,KAA0B;AAC9C,OAAK,MAAM,KAAK,YAAY;AAC1B,OAAI,CAAC,QAAQ,IAAI,EAAE,MAAM,CAAE,SAAQ,IAAI,EAAE,uBAAO,IAAI,KAAK,CAAC;AAC1D,WAAQ,IAAI,EAAE,MAAM,CAAE,IAAI,EAAE,OAAO;;AAErC,OAAK,MAAM,CAAC,OAAO,YAAY,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OACtD,EAAE,cAAc,EAAE,CACnB,EAAE;AACD,WAAQ,IAAI,iBAAiB,MAAM,IAAI;GACvC,MAAM,eAAe,eAAe,UAAU,EAAE;AAChD,QAAK,MAAM,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE;IACrC,MAAM,IAAI,aAAa;IACvB,MAAM,SAAS,MAAM,SAAY,eAAe;IAChD,MAAM,QAAQ,KAAK;AACnB,YAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,IAAI,OAAO,GAAG;;;AAGnD,UAAQ,KAAK;;CAGf,MAAM,MAAM,wBACV,sBAAsB,OAAO,EAC7B,KACA,OACA,QACA,OACD;AACD,KAAI,IAAI,SAAS,GAAG;AAClB,UAAQ,IAAI,uBAAuB;AACnC,OAAK,MAAM,KAAK,IACd,SAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,UAAU,KAAK,EAAE,OAAO,GAAG;AAElE,UAAQ,KAAK;;CAGf,MAAM,UAAU,MAAM,aAAa;AACnC,KAAI,QAAQ,SAAS,GAAG;AACtB,UAAQ,IAAI,YAAY,QAAQ,OAAO,IAAI;AAC3C,OAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,MAC/B,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,cAAc,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,CAC3E,EAAE;GACD,MAAM,SAAS,EAAE,UAAU,UAAU;AACrC,WAAQ,IACN,KAAK,EAAE,QAAQ,GAAG,EAAE,UAAU,IAAI,EAAE,mBAAmB,IAAI,EAAE,WAAW,IAAI,OAAO,YACpF;;AAEH,UAAQ,KAAK;;CAGf,MAAM,UAAU,gBAAgB,cAAc,OAAO,EAAE,KAAK,MAAM;AAClE,KAAI,QAAQ,SAAS,GAAG;AACtB,UAAQ,IAAI,eAAe;AAC3B,OAAK,MAAM,KAAK,SAAS;GACvB,MAAM,KAAK,EAAE,WAAW,KAAK,EAAE,SAAS,KAAK;AAC7C,WAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,KAAK,GAAG,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,GAAG;;AAE3E,UAAQ,KAAK;;CAGf,IAAIC;AAGJ,KAAI,QAAQ,QACV,KAAI;AACF,gBAAc,MAAM,IAAI,wBAAwB;SAC1C;CAIV,MAAM,cAAc,iBAClB,eAAe,OAAO,EACtB,OAAO,QACP,KACA,OACA,YACD;AACD,KAAI,YAAY,SAAS,GAAG;AAC1B,UAAQ,IAAI,gBAAgB;AAC5B,OAAK,MAAM,KAAK,aAAa;GAC3B,MAAM,KAAK,EAAE,WAAW,OAAO,QAAQ,EAAE,QAAQ,KAAK;GACtD,MAAMC,QAAkB,EAAE;AAC1B,OAAI,EAAE,cAAc,MAAO,OAAM,KAAK,yBAAyB;AAC/D,OAAI,EAAE,QAAS,OAAM,KAAK,aAAa,EAAE,UAAU;GACnD,MAAM,OAAO,MAAM,SAAS,IAAI,MAAM,MAAM,KAAK,KAAK,KAAK;AAC3D,WAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,OAAO,GAAG,OAAO;;AAE3E,UAAQ,KAAK;;AAGf,MAAK,MAAM,CAAC,WAAW,iBAAiB,SAAS;AAC/C,UAAQ,IAAI,WAAW,YAAY;EACnC,MAAM,eAAe,0BACnB,QACA,WACA,cACA,KACA,OACD;EACD,MAAM,eAAe,iCACnB,QACA,WACA,cACA,KACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS;GAAgB,CACxD;EACD,IAAI,aAAa;AACjB,OAAK,MAAM,OAAO,iBAAiB;GACjC,MAAM,YAAY,IAAI,cAAc,aAAa;AACjD,OAAI,UAAU,WAAW,EAAG;GAC5B,MAAM,OAAO,IAAI,OAAO;IACtB;IACA;IACA;IACA;IACA,QAAQ;KAAE;KAAW;KAAc;IACpC,CAAC;AACF,OAAI,KAAK,WAAW,EAAG;AACvB,gBAAa;AACb,WAAQ,IAAI,KAAK,IAAI,MAAM,GAAG;AAC9B,QAAK,MAAM,KAAK,KACd,SAAQ,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,OAAO,GAAG;;AAG5D,MAAI,CAAC,WAAY,SAAQ,IAAI,mBAAmB;AAChD,UAAQ,KAAK"}
+{"version":3,"file":"status-CL4MEGbn.mjs","names":["results: Array<{\n    logicalName: string;\n    namespace: string;\n    status: ResourceStatus;\n  }>","rows: DnsRecordStatusRow[]","meta: string[]","siblingImports: Record<string, Record<string, string>>","logpushLive:\n    | Awaited<ReturnType<CFApiClient[\"logpushAccountJobsList\"]>>\n    | undefined","hints: string[]"],"sources":["../src/features/dispatch-namespace/dispatch-namespace.status.ts","../src/features/dns-records/dns-records.status.ts","../src/cli/commands/status.ts"],"sourcesContent":["import type { DispatchNamespaceResourceConfig, CfiConfig } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceStatus } from \"../../types.js\";\nimport { effectiveDispatchNamespaceName } from \"./dispatch-namespace.resolve.js\";\n\nexport function dispatchNamespaceStatus(\n  resources: DispatchNamespaceResourceConfig[],\n  env: string,\n  state: StateManager,\n  _naming: NamingEngine,\n  config: CfiConfig,\n): Array<{ logicalName: string; namespace: string; status: ResourceStatus }> {\n  const results: Array<{\n    logicalName: string;\n    namespace: string;\n    status: ResourceStatus;\n  }> = [];\n\n  for (const nsConfig of resources) {\n    const resolvedName = effectiveDispatchNamespaceName(nsConfig, env, config.tenant);\n    const key = `dispatch_ns:${resolvedName}`;\n    const entry = state.get(key);\n    results.push({\n      logicalName: nsConfig.logicalName,\n      namespace: resolvedName,\n      status:\n        entry?.type === \"dispatch_namespace\" ? \"ok\" : \"missing\",\n    });\n  }\n\n  return results;\n}\n","import type { DnsRecordResourceConfig, ResourceStatus } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport {\n  dnsRecordAppliesToEnv,\n  dnsRecordStateKey,\n} from \"./dns-records.resolve.js\";\n\nexport interface DnsRecordStatusRow {\n  logicalName: string;\n  type: string;\n  name: string;\n  recordId?: string;\n  status: ResourceStatus;\n}\n\nexport function dnsRecordStatus(\n  resources: DnsRecordResourceConfig[],\n  env: string,\n  state: StateManager,\n): DnsRecordStatusRow[] {\n  const rows: DnsRecordStatusRow[] = [];\n  for (const config of resources) {\n    if (!dnsRecordAppliesToEnv(config, env)) {\n      rows.push({\n        logicalName: config.logicalName,\n        type: config.type,\n        name: config.name,\n        status: \"ok\",\n      });\n      continue;\n    }\n    const entry = state.get(\n      dnsRecordStateKey(config.zoneId, config.type, config.name),\n    );\n    if (entry?.type === \"dns_record\") {\n      rows.push({\n        logicalName: config.logicalName,\n        type: entry.recordType,\n        name: entry.name,\n        recordId: entry.recordId,\n        status: \"ok\",\n      });\n    } else {\n      rows.push({\n        logicalName: config.logicalName,\n        type: config.type,\n        name: config.name,\n        status: \"missing\",\n      });\n    }\n  }\n  return rows;\n}\n","import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { dispatchNamespaceStatus } from \"../../features/dispatch-namespace/index.js\";\nimport { dnsRecordStatus } from \"../../features/dns-records/index.js\";\nimport { getDispatchNamespaces, getDnsRecords, getLogpushJobs } from \"../../types.js\";\nimport { logpushJobStatus } from \"../../features/logpush-job/index.js\";\nimport { tenantStateKey } from \"../../core/tenant/tenantKeys.js\";\nimport { resourceModules } from \"../../core/registry/registry.js\";\nimport {\n  resolveDeployedWorkerName,\n  mergeWorkerConfigForResourcePick,\n} from \"../../core/config/resolver.js\";\nimport { buildOutputsView } from \"../../core/outputs/stackOutputs.js\";\nimport {\n  fetchStackImports,\n  scanConfigForImports,\n} from \"../../core/imports/fetchStackImports.js\";\n\nexport async function runStatus(options: {\n  env?: string;\n  configPath?: string;\n  /** `product:workspace` — show only this workspace tenant from state. */\n  tenant?: string;\n}): Promise<void> {\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const workers = await getWorkers(config, baseDir);\n  console.log(\n    `\\nStatus for ${config.tenant.name} (${config.tenant.slug}) — env: ${env}\\n`,\n  );\n\n  if (options.tenant?.trim()) {\n    const raw = options.tenant.trim();\n    const colon = raw.indexOf(\":\");\n    if (colon < 1) {\n      throw new Error(\n        'status --tenant expects \"product:workspace\" (e.g. todo:acme)',\n      );\n    }\n    const product = raw.slice(0, colon);\n    const workspace = raw.slice(colon + 1);\n    const t = state.getTenant(product, workspace);\n    console.log(`Workspace tenant ${tenantStateKey(product, workspace)}:`);\n    if (!t) {\n      console.log(\"  (no record in tamer state)\\n\");\n      return;\n    }\n    console.log(`  status: ${t.provisioningStatus}`);\n    console.log(`  dispatch namespace: ${t.dispatchNamespaceName}`);\n    console.log(`  script: ${t.scriptName}`);\n    if (t.d1Shards?.length) {\n      console.log(\"  D1 shards:\");\n      for (const s of t.d1Shards) {\n        console.log(`    ${s.role}: ${s.derivedName} [${s.cfId}]`);\n      }\n    }\n    console.log();\n    return;\n  }\n\n  const outputRows = buildOutputsView(config, state);\n  if (outputRows.length > 0) {\n    console.log(\"Stack outputs:\");\n    for (const r of outputRows) {\n      const valueText =\n        r.value === null\n          ? \"(unresolved — run apply)\"\n          : r.value;\n      const meta: string[] = [r.status];\n      if (r.status === \"stale\" && r.declaredSource) {\n        meta.push(`source drifted → ${r.declaredSource}`);\n      }\n      console.log(`  ${r.name}: ${valueText} [${meta.join(\", \")}]`);\n    }\n    console.log();\n  }\n\n  // Inbound imports — show every `${tamer:import:<stack>.<output>}`\n  // referenced by config, grouped by source stack. We tolerate fetch\n  // failures so `tamer status` still works in offline / partial-cred\n  // environments; a missing sibling row just displays \"(unresolved)\".\n  const importRefs = scanConfigForImports(config);\n  let siblingImports: Record<string, Record<string, string>> = {};\n  try {\n    siblingImports = await fetchStackImports(api, config, env);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`(could not pre-fetch imported stacks: ${msg})`);\n  }\n  if (importRefs.length > 0) {\n    console.log(\"Stack imports:\");\n    const byStack = new Map<string, Set<string>>();\n    for (const r of importRefs) {\n      if (!byStack.has(r.stack)) byStack.set(r.stack, new Set());\n      byStack.get(r.stack)!.add(r.output);\n    }\n    for (const [stack, outputs] of [...byStack].sort(([a], [b]) =>\n      a.localeCompare(b),\n    )) {\n      console.log(`  from stack \"${stack}\":`);\n      const stackOutputs = siblingImports[stack] ?? {};\n      for (const out of [...outputs].sort()) {\n        const v = stackOutputs[out];\n        const status = v === undefined ? \"unresolved\" : \"resolved\";\n        const value = v ?? \"(missing — run `tamer apply` on that stack)\";\n        console.log(`    ${out}: ${value} [${status}]`);\n      }\n    }\n    console.log();\n  }\n\n  const dns = dispatchNamespaceStatus(\n    getDispatchNamespaces(config),\n    env,\n    state,\n    naming,\n    config,\n  );\n  if (dns.length > 0) {\n    console.log(\"Dispatch namespaces:\");\n    for (const r of dns) {\n      console.log(`  ${r.logicalName} (${r.namespace}) [${r.status}]`);\n    }\n    console.log();\n  }\n\n  const tenants = state.listTenants();\n  if (tenants.length > 0) {\n    console.log(`Tenants (${tenants.length}):`);\n    for (const t of tenants.sort((a, b) =>\n      `${a.product}:${a.workspace}`.localeCompare(`${b.product}:${b.workspace}`),\n    )) {\n      const shards = t.d1Shards?.length ?? 0;\n      console.log(\n        `  ${t.product}:${t.workspace} [${t.provisioningStatus}] ${t.scriptName} (${shards} shard(s))`,\n      );\n    }\n    console.log();\n  }\n\n  const dnsRows = dnsRecordStatus(getDnsRecords(config), env, state);\n  if (dnsRows.length > 0) {\n    console.log(\"DNS records:\");\n    for (const r of dnsRows) {\n      const id = r.recordId ? ` [${r.recordId}]` : \"\";\n      console.log(`  ${r.logicalName}: ${r.type} ${r.name}${id} [${r.status}]`);\n    }\n    console.log();\n  }\n\n  let logpushLive:\n    | Awaited<ReturnType<CFApiClient[\"logpushAccountJobsList\"]>>\n    | undefined;\n  if (env !== \"local\") {\n    try {\n      logpushLive = await api.logpushAccountJobsList();\n    } catch {\n      // Token may lack Logpush list; state-only rows still print.\n    }\n  }\n  const logpushRows = logpushJobStatus(\n    getLogpushJobs(config),\n    config.tenant,\n    env,\n    state,\n    logpushLive,\n  );\n  if (logpushRows.length > 0) {\n    console.log(\"Logpush jobs:\");\n    for (const r of logpushRows) {\n      const id = r.cfJobId != null ? ` [id ${r.cfJobId}]` : \"\";\n      const hints: string[] = [];\n      if (r.cfEnabled === false) hints.push(\"disabled on Cloudflare\");\n      if (r.cfError) hints.push(`CF error: ${r.cfError}`);\n      const hint = hints.length > 0 ? ` — ${hints.join(\"; \")}` : \"\";\n      console.log(`  ${r.logicalName}: ${r.jobName}${id} [${r.status}]${hint}`);\n    }\n    console.log();\n  }\n\n  for (const [workerKey, workerConfig] of workers) {\n    console.log(`Worker: ${workerKey}`);\n    const deployedName = resolveDeployedWorkerName(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      naming,\n    );\n    const mergedWorker = mergeWorkerConfigForResourcePick(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: siblingImports },\n    );\n    let printedAny = false;\n    for (const mod of resourceModules) {\n      const resources = mod.pickResources(mergedWorker);\n      if (resources.length === 0) continue;\n      const rows = mod.status({\n        resources,\n        env,\n        state,\n        naming,\n        worker: { workerKey, deployedName },\n      });\n      if (rows.length === 0) continue;\n      printedAny = true;\n      console.log(`  ${mod.label}:`);\n      for (const r of rows) {\n        console.log(`    ${r.binding}: ${r.name} [${r.status}]`);\n      }\n    }\n    if (!printedAny) console.log(\"  (no resources)\");\n    console.log();\n  }\n}\n"],"mappings":";;;;;;;;;AAMA,SAAgB,wBACd,WACA,KACA,OACA,SACA,QAC2E;CAC3E,MAAMA,UAID,EAAE;AAEP,MAAK,MAAM,YAAY,WAAW;EAChC,MAAM,eAAe,+BAA+B,UAAU,KAAK,OAAO,OAAO;EACjF,MAAM,MAAM,eAAe;EAC3B,MAAM,QAAQ,MAAM,IAAI,IAAI;AAC5B,UAAQ,KAAK;GACX,aAAa,SAAS;GACtB,WAAW;GACX,QACE,OAAO,SAAS,uBAAuB,OAAO;GACjD,CAAC;;AAGJ,QAAO;;;;;AChBT,SAAgB,gBACd,WACA,KACA,OACsB;CACtB,MAAMC,OAA6B,EAAE;AACrC,MAAK,MAAM,UAAU,WAAW;AAC9B,MAAI,CAAC,sBAAsB,QAAQ,IAAI,EAAE;AACvC,QAAK,KAAK;IACR,aAAa,OAAO;IACpB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,QAAQ;IACT,CAAC;AACF;;EAEF,MAAM,QAAQ,MAAM,IAClB,kBAAkB,OAAO,QAAQ,OAAO,MAAM,OAAO,KAAK,CAC3D;AACD,MAAI,OAAO,SAAS,aAClB,MAAK,KAAK;GACR,aAAa,OAAO;GACpB,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,QAAQ;GACT,CAAC;MAEF,MAAK,KAAK;GACR,aAAa,OAAO;GACpB,MAAM,OAAO;GACb,MAAM,OAAO;GACb,QAAQ;GACT,CAAC;;AAGN,QAAO;;;;;AC7BT,eAAsB,UAAU,SAKd;CAChB,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAEH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;AACjD,SAAQ,IACN,gBAAgB,OAAO,OAAO,KAAK,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,IAC1E;AAED,KAAI,QAAQ,QAAQ,MAAM,EAAE;EAC1B,MAAM,MAAM,QAAQ,OAAO,MAAM;EACjC,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,MAAI,QAAQ,EACV,OAAM,IAAI,MACR,iEACD;EAEH,MAAM,UAAU,IAAI,MAAM,GAAG,MAAM;EACnC,MAAM,YAAY,IAAI,MAAM,QAAQ,EAAE;EACtC,MAAM,IAAI,MAAM,UAAU,SAAS,UAAU;AAC7C,UAAQ,IAAI,oBAAoB,eAAe,SAAS,UAAU,CAAC,GAAG;AACtE,MAAI,CAAC,GAAG;AACN,WAAQ,IAAI,iCAAiC;AAC7C;;AAEF,UAAQ,IAAI,aAAa,EAAE,qBAAqB;AAChD,UAAQ,IAAI,yBAAyB,EAAE,wBAAwB;AAC/D,UAAQ,IAAI,aAAa,EAAE,aAAa;AACxC,MAAI,EAAE,UAAU,QAAQ;AACtB,WAAQ,IAAI,eAAe;AAC3B,QAAK,MAAM,KAAK,EAAE,SAChB,SAAQ,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,YAAY,IAAI,EAAE,KAAK,GAAG;;AAG9D,UAAQ,KAAK;AACb;;CAGF,MAAM,aAAa,iBAAiB,QAAQ,MAAM;AAClD,KAAI,WAAW,SAAS,GAAG;AACzB,UAAQ,IAAI,iBAAiB;AAC7B,OAAK,MAAM,KAAK,YAAY;GAC1B,MAAM,YACJ,EAAE,UAAU,OACR,6BACA,EAAE;GACR,MAAMC,OAAiB,CAAC,EAAE,OAAO;AACjC,OAAI,EAAE,WAAW,WAAW,EAAE,eAC5B,MAAK,KAAK,oBAAoB,EAAE,iBAAiB;AAEnD,WAAQ,IAAI,KAAK,EAAE,KAAK,IAAI,UAAU,IAAI,KAAK,KAAK,KAAK,CAAC,GAAG;;AAE/D,UAAQ,KAAK;;CAOf,MAAM,aAAa,qBAAqB,OAAO;CAC/C,IAAIC,iBAAyD,EAAE;AAC/D,KAAI;AACF,mBAAiB,MAAM,kBAAkB,KAAK,QAAQ,IAAI;UACnD,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,yCAAyC,IAAI,GAAG;;AAE/D,KAAI,WAAW,SAAS,GAAG;AACzB,UAAQ,IAAI,iBAAiB;EAC7B,MAAM,0BAAU,IAAI,KAA0B;AAC9C,OAAK,MAAM,KAAK,YAAY;AAC1B,OAAI,CAAC,QAAQ,IAAI,EAAE,MAAM,CAAE,SAAQ,IAAI,EAAE,uBAAO,IAAI,KAAK,CAAC;AAC1D,WAAQ,IAAI,EAAE,MAAM,CAAE,IAAI,EAAE,OAAO;;AAErC,OAAK,MAAM,CAAC,OAAO,YAAY,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OACtD,EAAE,cAAc,EAAE,CACnB,EAAE;AACD,WAAQ,IAAI,iBAAiB,MAAM,IAAI;GACvC,MAAM,eAAe,eAAe,UAAU,EAAE;AAChD,QAAK,MAAM,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE;IACrC,MAAM,IAAI,aAAa;IACvB,MAAM,SAAS,MAAM,SAAY,eAAe;IAChD,MAAM,QAAQ,KAAK;AACnB,YAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,IAAI,OAAO,GAAG;;;AAGnD,UAAQ,KAAK;;CAGf,MAAM,MAAM,wBACV,sBAAsB,OAAO,EAC7B,KACA,OACA,QACA,OACD;AACD,KAAI,IAAI,SAAS,GAAG;AAClB,UAAQ,IAAI,uBAAuB;AACnC,OAAK,MAAM,KAAK,IACd,SAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,UAAU,KAAK,EAAE,OAAO,GAAG;AAElE,UAAQ,KAAK;;CAGf,MAAM,UAAU,MAAM,aAAa;AACnC,KAAI,QAAQ,SAAS,GAAG;AACtB,UAAQ,IAAI,YAAY,QAAQ,OAAO,IAAI;AAC3C,OAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,MAC/B,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,cAAc,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,CAC3E,EAAE;GACD,MAAM,SAAS,EAAE,UAAU,UAAU;AACrC,WAAQ,IACN,KAAK,EAAE,QAAQ,GAAG,EAAE,UAAU,IAAI,EAAE,mBAAmB,IAAI,EAAE,WAAW,IAAI,OAAO,YACpF;;AAEH,UAAQ,KAAK;;CAGf,MAAM,UAAU,gBAAgB,cAAc,OAAO,EAAE,KAAK,MAAM;AAClE,KAAI,QAAQ,SAAS,GAAG;AACtB,UAAQ,IAAI,eAAe;AAC3B,OAAK,MAAM,KAAK,SAAS;GACvB,MAAM,KAAK,EAAE,WAAW,KAAK,EAAE,SAAS,KAAK;AAC7C,WAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,KAAK,GAAG,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,GAAG;;AAE3E,UAAQ,KAAK;;CAGf,IAAIC;AAGJ,KAAI,QAAQ,QACV,KAAI;AACF,gBAAc,MAAM,IAAI,wBAAwB;SAC1C;CAIV,MAAM,cAAc,iBAClB,eAAe,OAAO,EACtB,OAAO,QACP,KACA,OACA,YACD;AACD,KAAI,YAAY,SAAS,GAAG;AAC1B,UAAQ,IAAI,gBAAgB;AAC5B,OAAK,MAAM,KAAK,aAAa;GAC3B,MAAM,KAAK,EAAE,WAAW,OAAO,QAAQ,EAAE,QAAQ,KAAK;GACtD,MAAMC,QAAkB,EAAE;AAC1B,OAAI,EAAE,cAAc,MAAO,OAAM,KAAK,yBAAyB;AAC/D,OAAI,EAAE,QAAS,OAAM,KAAK,aAAa,EAAE,UAAU;GACnD,MAAM,OAAO,MAAM,SAAS,IAAI,MAAM,MAAM,KAAK,KAAK,KAAK;AAC3D,WAAQ,IAAI,KAAK,EAAE,YAAY,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,OAAO,GAAG,OAAO;;AAE3E,UAAQ,KAAK;;AAGf,MAAK,MAAM,CAAC,WAAW,iBAAiB,SAAS;AAC/C,UAAQ,IAAI,WAAW,YAAY;EACnC,MAAM,eAAe,0BACnB,QACA,WACA,cACA,KACA,OACD;EACD,MAAM,eAAe,iCACnB,QACA,WACA,cACA,KACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS;GAAgB,CACxD;EACD,IAAI,aAAa;AACjB,OAAK,MAAM,OAAO,iBAAiB;GACjC,MAAM,YAAY,IAAI,cAAc,aAAa;AACjD,OAAI,UAAU,WAAW,EAAG;GAC5B,MAAM,OAAO,IAAI,OAAO;IACtB;IACA;IACA;IACA;IACA,QAAQ;KAAE;KAAW;KAAc;IACpC,CAAC;AACF,OAAI,KAAK,WAAW,EAAG;AACvB,gBAAa;AACb,WAAQ,IAAI,KAAK,IAAI,MAAM,GAAG;AAC9B,QAAK,MAAM,KAAK,KACd,SAAQ,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,OAAO,GAAG;;AAG5D,MAAI,CAAC,WAAY,SAAQ,IAAI,mBAAmB;AAChD,UAAQ,KAAK"}

package/dist/tamer.mjs

@@ -8975,10 +8975,10 @@ async function main() {
 				await import("./migrate-DyrTw9ep.mjs").then((m) => m.runMigrate(parseMigrateArgs(rest)));
 				break;
 			case "types":
-				await import("./types-HPpAxgub.mjs").then((m) => m.runTypes(parseTypesArgs(rest)));
+				await import("./types-DCL0mEjS.mjs").then((m) => m.runTypes(parseTypesArgs(rest)));
 				break;
 			case "status":
-				await import("./status-WMG5abrN.mjs").then((m) => m.runStatus(parseStatusArgs(rest)));
+				await import("./status-CL4MEGbn.mjs").then((m) => m.runStatus(parseStatusArgs(rest)));
 				break;
 			case "events":
 				await import("./events-CqbN9sbT.mjs").then((m) => m.runEvents(parseEventsArgs(rest)));
@@ -9022,12 +9022,12 @@ async function main() {
 			case "wfp": {
 				const [sub, ...wfpRest] = rest;
 				if (sub === "put") {
-					const { parseWfpPutArgs, runWfpPut } = await import("./wfp-put-5XZ-KC3g.mjs");
+					const { parseWfpPutArgs, runWfpPut } = await import("./wfp-put-Bl5K3snx.mjs");
 					await runWfpPut(parseWfpPutArgs(wfpRest));
 					break;
 				}
 				if (sub === "delete") {
-					const { parseWfpDeleteArgs, runWfpDelete } = await import("./wfp-delete-TSVBw9XF.mjs");
+					const { parseWfpDeleteArgs, runWfpDelete } = await import("./wfp-delete-CwWQFxxj.mjs");
 					await runWfpDelete(parseWfpDeleteArgs(wfpRest));
 					break;
 				}
@@ -9035,7 +9035,7 @@ async function main() {
 					const tenantSub = wfpRest[0];
 					const tenantRest = wfpRest.slice(1);
 					if (tenantSub === "list") {
-						await import("./tenant-WNYMWmIe.mjs").then((m) => m.runTenantList({
+						await import("./tenant-MWIs0esz.mjs").then((m) => m.runTenantList({
 							env: parseStringFlag(wfpRest, "--env"),
 							configPath: parseStringFlag(wfpRest, "--config"),
 							json: wfpRest.includes("--json")
@@ -9043,7 +9043,7 @@ async function main() {
 						break;
 					}
 					if (tenantSub === "status") {
-						await import("./tenant-WNYMWmIe.mjs").then((m) => m.runTenantStatus({
+						await import("./tenant-MWIs0esz.mjs").then((m) => m.runTenantStatus({
 							env: parseStringFlag(wfpRest, "--env"),
 							product: parseStringFlag(wfpRest, "--product") ?? "",
 							workspace: parseStringFlag(wfpRest, "--workspace") ?? "",
@@ -9052,7 +9052,7 @@ async function main() {
 						break;
 					}
 					if (tenantSub === "provision") {
-						await import("./provision-tenant-z4DLxYAM.mjs").then((m) => m.runProvisionTenant(parseProvisionTenantArgs(tenantRest)));
+						await import("./provision-tenant-DoGlAu6H.mjs").then((m) => m.runProvisionTenant(parseProvisionTenantArgs(tenantRest)));
 						break;
 					}
 					if (tenantSub === "destroy") {
@@ -9060,7 +9060,7 @@ async function main() {
 						break;
 					}
 					if (tenantSub === "migrate") {
-						await import("./tenant-migrate-DBxTsvJ8.mjs").then((m) => m.runTenantMigrate({
+						await import("./tenant-migrate-CM6cb1zo.mjs").then((m) => m.runTenantMigrate({
 							env: parseStringFlag(wfpRest, "--env"),
 							product: parseStringFlag(wfpRest, "--product") ?? "",
 							workspace: parseStringFlag(wfpRest, "--workspace") ?? "",

package/dist/{tenant-WNYMWmIe.mjs → tenant-MWIs0esz.mjs}

@@ -59,4 +59,4 @@ async function runTenantStatus(options) {
 
 //#endregion
 export { runTenantList, runTenantStatus };
-//# sourceMappingURL=tenant-WNYMWmIe.mjs.map
+//# sourceMappingURL=tenant-MWIs0esz.mjs.map

package/dist/{tenant-WNYMWmIe.mjs.map → tenant-MWIs0esz.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"tenant-WNYMWmIe.mjs","names":[],"sources":["../src/cli/commands/tenant.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\n\n/**\n * `tamer tenant list` — lists all provisioned tenants for an env.\n * `tamer tenant status --product X --workspace Y` — shows one tenant's details.\n */\nexport async function runTenantList(options: {\n  env?: string;\n  configPath?: string;\n  json?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant list: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenants = state.listTenants();\n\n  if (options.json) {\n    console.log(JSON.stringify(tenants, null, 2));\n    return;\n  }\n\n  if (tenants.length === 0) {\n    console.log(`No tenants provisioned for env ${env}.`);\n    return;\n  }\n\n  console.log(`\\nTenants for env ${env} (${tenants.length}):\\n`);\n  console.log(\n    `${\"Product:Workspace\".padEnd(30)} ${\"Status\".padEnd(12)} ${\"Script\".padEnd(40)} Shards`,\n  );\n  console.log(`${\"─\".repeat(30)} ${\"─\".repeat(12)} ${\"─\".repeat(40)} ${\"─\".repeat(10)}`);\n\n  for (const t of tenants.sort((a, b) =>\n    `${a.product}:${a.workspace}`.localeCompare(`${b.product}:${b.workspace}`),\n  )) {\n    const key = `${t.product}:${t.workspace}`;\n    const shards = t.d1Shards?.length ?? 0;\n    console.log(\n      `${key.padEnd(30)} ${t.provisioningStatus.padEnd(12)} ${(t.scriptName ?? \"\").padEnd(40)} ${shards}`,\n    );\n  }\n  console.log(\"\");\n}\n\nexport async function runTenantStatus(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant status: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n\n  console.log(`\\nTenant: ${tenant.product}:${tenant.workspace}`);\n  console.log(`  Status:              ${tenant.provisioningStatus}`);\n  console.log(`  Dispatch namespace:  ${tenant.dispatchNamespaceName}`);\n  console.log(`  Script:              ${tenant.scriptName}`);\n  console.log(`  Created:             ${tenant.createdAt}`);\n  console.log(`  Updated:             ${tenant.updatedAt}`);\n\n  if (tenant.d1Shards && tenant.d1Shards.length > 0) {\n    console.log(`\\n  D1 Shards (${tenant.d1Shards.length}):`);\n    for (const shard of tenant.d1Shards) {\n      console.log(`    ${shard.role.padEnd(16)} ${shard.derivedName} (${shard.cfId})`);\n    }\n  }\n  console.log(\"\");\n}\n"],"mappings":";;;;;;;AAUA,eAAsB,cAAc,SAIlB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,aAAa;AAEnC,KAAI,QAAQ,MAAM;AAChB,UAAQ,IAAI,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AAC7C;;AAGF,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IAAI,kCAAkC,IAAI,GAAG;AACrD;;AAGF,SAAQ,IAAI,qBAAqB,IAAI,IAAI,QAAQ,OAAO,MAAM;AAC9D,SAAQ,IACN,GAAG,oBAAoB,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,SACjF;AACD,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,GAAG;AAEtF,MAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,MAC/B,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,cAAc,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,CAC3E,EAAE;EACD,MAAM,MAAM,GAAG,EAAE,QAAQ,GAAG,EAAE;EAC9B,MAAM,SAAS,EAAE,UAAU,UAAU;AACrC,UAAQ,IACN,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,EAAE,mBAAmB,OAAO,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,OAAO,GAAG,CAAC,GAAG,SAC5F;;AAEH,SAAQ,IAAI,GAAG;;AAGjB,eAAsB,gBAAgB,SAKpB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,mCAAmC;CAErD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAGH,SAAQ,IAAI,aAAa,OAAO,QAAQ,GAAG,OAAO,YAAY;AAC9D,SAAQ,IAAI,0BAA0B,OAAO,qBAAqB;AAClE,SAAQ,IAAI,0BAA0B,OAAO,wBAAwB;AACrE,SAAQ,IAAI,0BAA0B,OAAO,aAAa;AAC1D,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AACzD,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AAEzD,KAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,UAAQ,IAAI,kBAAkB,OAAO,SAAS,OAAO,IAAI;AACzD,OAAK,MAAM,SAAS,OAAO,SACzB,SAAQ,IAAI,OAAO,MAAM,KAAK,OAAO,GAAG,CAAC,GAAG,MAAM,YAAY,IAAI,MAAM,KAAK,GAAG;;AAGpF,SAAQ,IAAI,GAAG"}
+{"version":3,"file":"tenant-MWIs0esz.mjs","names":[],"sources":["../src/cli/commands/tenant.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\n\n/**\n * `tamer tenant list` — lists all provisioned tenants for an env.\n * `tamer tenant status --product X --workspace Y` — shows one tenant's details.\n */\nexport async function runTenantList(options: {\n  env?: string;\n  configPath?: string;\n  json?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant list: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenants = state.listTenants();\n\n  if (options.json) {\n    console.log(JSON.stringify(tenants, null, 2));\n    return;\n  }\n\n  if (tenants.length === 0) {\n    console.log(`No tenants provisioned for env ${env}.`);\n    return;\n  }\n\n  console.log(`\\nTenants for env ${env} (${tenants.length}):\\n`);\n  console.log(\n    `${\"Product:Workspace\".padEnd(30)} ${\"Status\".padEnd(12)} ${\"Script\".padEnd(40)} Shards`,\n  );\n  console.log(`${\"─\".repeat(30)} ${\"─\".repeat(12)} ${\"─\".repeat(40)} ${\"─\".repeat(10)}`);\n\n  for (const t of tenants.sort((a, b) =>\n    `${a.product}:${a.workspace}`.localeCompare(`${b.product}:${b.workspace}`),\n  )) {\n    const key = `${t.product}:${t.workspace}`;\n    const shards = t.d1Shards?.length ?? 0;\n    console.log(\n      `${key.padEnd(30)} ${t.provisioningStatus.padEnd(12)} ${(t.scriptName ?? \"\").padEnd(40)} ${shards}`,\n    );\n  }\n  console.log(\"\");\n}\n\nexport async function runTenantStatus(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant status: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n\n  console.log(`\\nTenant: ${tenant.product}:${tenant.workspace}`);\n  console.log(`  Status:              ${tenant.provisioningStatus}`);\n  console.log(`  Dispatch namespace:  ${tenant.dispatchNamespaceName}`);\n  console.log(`  Script:              ${tenant.scriptName}`);\n  console.log(`  Created:             ${tenant.createdAt}`);\n  console.log(`  Updated:             ${tenant.updatedAt}`);\n\n  if (tenant.d1Shards && tenant.d1Shards.length > 0) {\n    console.log(`\\n  D1 Shards (${tenant.d1Shards.length}):`);\n    for (const shard of tenant.d1Shards) {\n      console.log(`    ${shard.role.padEnd(16)} ${shard.derivedName} (${shard.cfId})`);\n    }\n  }\n  console.log(\"\");\n}\n"],"mappings":";;;;;;;AAUA,eAAsB,cAAc,SAIlB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,aAAa;AAEnC,KAAI,QAAQ,MAAM;AAChB,UAAQ,IAAI,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AAC7C;;AAGF,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IAAI,kCAAkC,IAAI,GAAG;AACrD;;AAGF,SAAQ,IAAI,qBAAqB,IAAI,IAAI,QAAQ,OAAO,MAAM;AAC9D,SAAQ,IACN,GAAG,oBAAoB,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,SACjF;AACD,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,GAAG;AAEtF,MAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,MAC/B,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,cAAc,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,CAC3E,EAAE;EACD,MAAM,MAAM,GAAG,EAAE,QAAQ,GAAG,EAAE;EAC9B,MAAM,SAAS,EAAE,UAAU,UAAU;AACrC,UAAQ,IACN,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,EAAE,mBAAmB,OAAO,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,OAAO,GAAG,CAAC,GAAG,SAC5F;;AAEH,SAAQ,IAAI,GAAG;;AAGjB,eAAsB,gBAAgB,SAKpB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,mCAAmC;CAErD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAGH,SAAQ,IAAI,aAAa,OAAO,QAAQ,GAAG,OAAO,YAAY;AAC9D,SAAQ,IAAI,0BAA0B,OAAO,qBAAqB;AAClE,SAAQ,IAAI,0BAA0B,OAAO,wBAAwB;AACrE,SAAQ,IAAI,0BAA0B,OAAO,aAAa;AAC1D,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AACzD,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AAEzD,KAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,UAAQ,IAAI,kBAAkB,OAAO,SAAS,OAAO,IAAI;AACzD,OAAK,MAAM,SAAS,OAAO,SACzB,SAAQ,IAAI,OAAO,MAAM,KAAK,OAAO,GAAG,CAAC,GAAG,MAAM,YAAY,IAAI,MAAM,KAAK,GAAG;;AAGpF,SAAQ,IAAI,GAAG"}

package/dist/{tenant-migrate-DBxTsvJ8.mjs → tenant-migrate-CM6cb1zo.mjs}

@@ -1,6 +1,6 @@
 import { N as wranglerConfigCliArgs, R as CFApiClient, U as loadConfig, h as StateManager, u as namingFromConfig, w as stackNameForConfig, z as cloudflareAccountIdFromEnv } from "./tamer.mjs";
 import { n as spawnWranglerSync } from "./wranglerSpawn-VkSL0gZd.mjs";
-import { resolveTenantD1Bindings } from "./resolveTenantBindings-BypqzcSn.mjs";
+import { resolveTenantD1Bindings } from "./resolveTenantBindings-86AmRQcW.mjs";
 import { join, resolve } from "path";
 import { unlinkSync, writeFileSync } from "fs";
 
@@ -83,4 +83,4 @@ async function runTenantMigrate(options) {
 
 //#endregion
 export { runTenantMigrate };
-//# sourceMappingURL=tenant-migrate-DBxTsvJ8.mjs.map
+//# sourceMappingURL=tenant-migrate-CM6cb1zo.mjs.map

package/dist/{tenant-migrate-DBxTsvJ8.mjs.map → tenant-migrate-CM6cb1zo.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"tenant-migrate-DBxTsvJ8.mjs","names":[],"sources":["../src/cli/commands/tenant-migrate.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { resolveTenantD1Bindings } from \"../../core/tenant/resolveTenantBindings.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { writeFileSync, unlinkSync } from \"fs\";\nimport { join, resolve } from \"path\";\n\n/**\n * `tamer wfp tenant migrate --env dev --product X --workspace Y`\n *\n * Runs D1 migrations on each shard for the named tenant. Matches shard roles\n * to `resources.d1[].registryRole` → `migrationsDir` to find the migration\n * source directory. Writes a temporary wrangler.json with the shard binding\n * and invokes `wrangler d1 migrations apply --remote`.\n */\nexport async function runTenantMigrate(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant migrate: --env is required\");\n  }\n  if (env === \"local\") {\n    throw new Error(\"tenant migrate requires a non-local --env.\");\n  }\n\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n  if (!tenant.d1Shards || tenant.d1Shards.length === 0) {\n    console.log(`Tenant \"${options.product}:${options.workspace}\" has no D1 shards.`);\n    return;\n  }\n\n  const shardBindings = config.tenant.shardBindings ?? {};\n  const d1Bindings = resolveTenantD1Bindings(config, tenant.d1Shards, naming);\n\n  let migrated = 0;\n  let skipped = 0;\n\n  for (let i = 0; i < tenant.d1Shards.length; i++) {\n    const shard = tenant.d1Shards[i]!;\n    const binding = d1Bindings[i]!;\n    const info = shardBindings[shard.role];\n    if (!info?.migrationsDir) {\n      console.log(`  migrate: skipping ${shard.role} (no migrationsDir in shardBindings)`);\n      skipped++;\n      continue;\n    }\n\n    // Resolve migrationsDir relative to the config base directory\n    const { getConfigBaseDir } = await import(\"../../core/config/loader.js\");\n    const baseDir = getConfigBaseDir();\n    const migDir = resolve(baseDir, info.migrationsDir);\n    const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);\n\n    const tempConfig = {\n      name: `tenant-migrate-${shard.role}`,\n      d1_databases: [{ binding: binding.name, database_id: shard.cfId, database_name: shard.derivedName, migrations_dir: \".\" }],\n      compatibility_date: config.compatibility_date ?? \"2024-01-01\",\n    };\n    writeFileSync(tempWranglerPath, JSON.stringify(tempConfig, null, 2));\n\n    const migrateArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(`wrangler.${shard.role}.json`),\n      \"d1\",\n      \"migrations\",\n      \"apply\",\n      binding.name,\n      \"--remote\",\n    ];\n    if (info.migrationsTable) {\n      migrateArgs.push(\"--migrations-table\", info.migrationsTable);\n    }\n\n    console.log(`  migrate: applying for ${shard.role} (${shard.derivedName})...`);\n    const result = spawnWranglerSync(migrateArgs, {\n      cwd: migDir,\n      stdio: \"inherit\",\n    });\n    if (result.status === 0) {\n      migrated++;\n    } else {\n      console.warn(`  migrate: failed for ${shard.role} (exit ${result.status})`);\n    }\n    try {\n      unlinkSync(tempWranglerPath);\n    } catch {\n      /* best-effort */\n    }\n  }\n\n  console.log(\n    `\\nMigrations complete: ${migrated} shard(s) migrated, ${skipped} skipped.`,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBAAiB,SAKrB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,oCAAoC;AAEtD,KAAI,QAAQ,QACV,OAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAEH,KAAI,CAAC,OAAO,YAAY,OAAO,SAAS,WAAW,GAAG;AACpD,UAAQ,IAAI,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB;AACjF;;CAGF,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;CACvD,MAAM,aAAa,wBAAwB,QAAQ,OAAO,UAAU,OAAO;CAE3E,IAAI,WAAW;CACf,IAAI,UAAU;AAEd,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,SAAS,QAAQ,KAAK;EAC/C,MAAM,QAAQ,OAAO,SAAS;EAC9B,MAAM,UAAU,WAAW;EAC3B,MAAM,OAAO,cAAc,MAAM;AACjC,MAAI,CAAC,MAAM,eAAe;AACxB,WAAQ,IAAI,uBAAuB,MAAM,KAAK,sCAAsC;AACpF;AACA;;EAIF,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAE1C,MAAM,SAAS,QADC,kBAAkB,EACF,KAAK,cAAc;EACnD,MAAM,mBAAmB,KAAK,QAAQ,YAAY,MAAM,KAAK,OAAO;EAEpE,MAAM,aAAa;GACjB,MAAM,kBAAkB,MAAM;GAC9B,cAAc,CAAC;IAAE,SAAS,QAAQ;IAAM,aAAa,MAAM;IAAM,eAAe,MAAM;IAAa,gBAAgB;IAAK,CAAC;GACzH,oBAAoB,OAAO,sBAAsB;GAClD;AACD,gBAAc,kBAAkB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;EAEpE,MAAM,cAAc;GAClB;GACA,GAAG,sBAAsB,YAAY,MAAM,KAAK,OAAO;GACvD;GACA;GACA;GACA,QAAQ;GACR;GACD;AACD,MAAI,KAAK,gBACP,aAAY,KAAK,sBAAsB,KAAK,gBAAgB;AAG9D,UAAQ,IAAI,2BAA2B,MAAM,KAAK,IAAI,MAAM,YAAY,MAAM;EAC9E,MAAM,SAAS,kBAAkB,aAAa;GAC5C,KAAK;GACL,OAAO;GACR,CAAC;AACF,MAAI,OAAO,WAAW,EACpB;MAEA,SAAQ,KAAK,yBAAyB,MAAM,KAAK,SAAS,OAAO,OAAO,GAAG;AAE7E,MAAI;AACF,cAAW,iBAAiB;UACtB;;AAKV,SAAQ,IACN,0BAA0B,SAAS,sBAAsB,QAAQ,WAClE"}
+{"version":3,"file":"tenant-migrate-CM6cb1zo.mjs","names":[],"sources":["../src/cli/commands/tenant-migrate.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { resolveTenantD1Bindings } from \"../../core/tenant/resolveTenantBindings.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { writeFileSync, unlinkSync } from \"fs\";\nimport { join, resolve } from \"path\";\n\n/**\n * `tamer wfp tenant migrate --env dev --product X --workspace Y`\n *\n * Runs D1 migrations on each shard for the named tenant. Matches shard roles\n * to `resources.d1[].registryRole` → `migrationsDir` to find the migration\n * source directory. Writes a temporary wrangler.json with the shard binding\n * and invokes `wrangler d1 migrations apply --remote`.\n */\nexport async function runTenantMigrate(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant migrate: --env is required\");\n  }\n  if (env === \"local\") {\n    throw new Error(\"tenant migrate requires a non-local --env.\");\n  }\n\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n  if (!tenant.d1Shards || tenant.d1Shards.length === 0) {\n    console.log(`Tenant \"${options.product}:${options.workspace}\" has no D1 shards.`);\n    return;\n  }\n\n  const shardBindings = config.tenant.shardBindings ?? {};\n  const d1Bindings = resolveTenantD1Bindings(config, tenant.d1Shards, naming);\n\n  let migrated = 0;\n  let skipped = 0;\n\n  for (let i = 0; i < tenant.d1Shards.length; i++) {\n    const shard = tenant.d1Shards[i]!;\n    const binding = d1Bindings[i]!;\n    const info = shardBindings[shard.role];\n    if (!info?.migrationsDir) {\n      console.log(`  migrate: skipping ${shard.role} (no migrationsDir in shardBindings)`);\n      skipped++;\n      continue;\n    }\n\n    // Resolve migrationsDir relative to the config base directory\n    const { getConfigBaseDir } = await import(\"../../core/config/loader.js\");\n    const baseDir = getConfigBaseDir();\n    const migDir = resolve(baseDir, info.migrationsDir);\n    const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);\n\n    const tempConfig = {\n      name: `tenant-migrate-${shard.role}`,\n      d1_databases: [{ binding: binding.name, database_id: shard.cfId, database_name: shard.derivedName, migrations_dir: \".\" }],\n      compatibility_date: config.compatibility_date ?? \"2024-01-01\",\n    };\n    writeFileSync(tempWranglerPath, JSON.stringify(tempConfig, null, 2));\n\n    const migrateArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(`wrangler.${shard.role}.json`),\n      \"d1\",\n      \"migrations\",\n      \"apply\",\n      binding.name,\n      \"--remote\",\n    ];\n    if (info.migrationsTable) {\n      migrateArgs.push(\"--migrations-table\", info.migrationsTable);\n    }\n\n    console.log(`  migrate: applying for ${shard.role} (${shard.derivedName})...`);\n    const result = spawnWranglerSync(migrateArgs, {\n      cwd: migDir,\n      stdio: \"inherit\",\n    });\n    if (result.status === 0) {\n      migrated++;\n    } else {\n      console.warn(`  migrate: failed for ${shard.role} (exit ${result.status})`);\n    }\n    try {\n      unlinkSync(tempWranglerPath);\n    } catch {\n      /* best-effort */\n    }\n  }\n\n  console.log(\n    `\\nMigrations complete: ${migrated} shard(s) migrated, ${skipped} skipped.`,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBAAiB,SAKrB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,oCAAoC;AAEtD,KAAI,QAAQ,QACV,OAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAEH,KAAI,CAAC,OAAO,YAAY,OAAO,SAAS,WAAW,GAAG;AACpD,UAAQ,IAAI,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB;AACjF;;CAGF,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;CACvD,MAAM,aAAa,wBAAwB,QAAQ,OAAO,UAAU,OAAO;CAE3E,IAAI,WAAW;CACf,IAAI,UAAU;AAEd,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,SAAS,QAAQ,KAAK;EAC/C,MAAM,QAAQ,OAAO,SAAS;EAC9B,MAAM,UAAU,WAAW;EAC3B,MAAM,OAAO,cAAc,MAAM;AACjC,MAAI,CAAC,MAAM,eAAe;AACxB,WAAQ,IAAI,uBAAuB,MAAM,KAAK,sCAAsC;AACpF;AACA;;EAIF,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAE1C,MAAM,SAAS,QADC,kBAAkB,EACF,KAAK,cAAc;EACnD,MAAM,mBAAmB,KAAK,QAAQ,YAAY,MAAM,KAAK,OAAO;EAEpE,MAAM,aAAa;GACjB,MAAM,kBAAkB,MAAM;GAC9B,cAAc,CAAC;IAAE,SAAS,QAAQ;IAAM,aAAa,MAAM;IAAM,eAAe,MAAM;IAAa,gBAAgB;IAAK,CAAC;GACzH,oBAAoB,OAAO,sBAAsB;GAClD;AACD,gBAAc,kBAAkB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;EAEpE,MAAM,cAAc;GAClB;GACA,GAAG,sBAAsB,YAAY,MAAM,KAAK,OAAO;GACvD;GACA;GACA;GACA,QAAQ;GACR;GACD;AACD,MAAI,KAAK,gBACP,aAAY,KAAK,sBAAsB,KAAK,gBAAgB;AAG9D,UAAQ,IAAI,2BAA2B,MAAM,KAAK,IAAI,MAAM,YAAY,MAAM;EAC9E,MAAM,SAAS,kBAAkB,aAAa;GAC5C,KAAK;GACL,OAAO;GACR,CAAC;AACF,MAAI,OAAO,WAAW,EACpB;MAEA,SAAQ,KAAK,yBAAyB,MAAM,KAAK,SAAS,OAAO,OAAO,GAAG;AAE7E,MAAI;AACF,cAAW,iBAAiB;UACtB;;AAKV,SAAQ,IACN,0BAA0B,SAAS,sBAAsB,QAAQ,WAClE"}

package/dist/{types-HPpAxgub.mjs → types-DCL0mEjS.mjs}

@@ -39,4 +39,4 @@ async function runTypes(options) {
 
 //#endregion
 export { runTypes };
-//# sourceMappingURL=types-HPpAxgub.mjs.map
+//# sourceMappingURL=types-DCL0mEjS.mjs.map

package/dist/{types-HPpAxgub.mjs.map → types-DCL0mEjS.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"types-HPpAxgub.mjs","names":[],"sources":["../src/cli/commands/types.ts"],"sourcesContent":["import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport {\n  generateWranglerConfig,\n  writeWranglerJson,\n} from \"../../core/wrangler/generator.js\";\n\nexport async function runTypes(options: {\n  worker?: string;\n  env?: string;\n  configPath?: string;\n}): Promise<void> {\n  const workerFilter = options.worker;\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  const imports = await fetchStackImports(api, config, env);\n\n  const workers = await getWorkers(config, baseDir);\n  const toRun = workerFilter\n    ? workers.filter(([k]) => k === workerFilter)\n    : workers;\n\n  if (toRun.length === 0) {\n    throw new Error(\n      workerFilter\n        ? `Worker \"${workerFilter}\" not found`\n        : \"No workers configured\",\n    );\n  }\n\n  for (const [workerKey, workerConfig] of toRun) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { imports },\n    );\n    const wranglerConfig = generateWranglerConfig(resolved, state, naming);\n    writeWranglerJson(resolved.workerDir, wranglerConfig, resolved.wranglerOutFile);\n\n    const typesArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(resolved.wranglerOutFile),\n      \"types\",\n    ];\n    const result = spawnWranglerSync(typesArgs, {\n      cwd: resolved.workerDir,\n      stdio: \"inherit\",\n    });\n    if (result.status !== 0) {\n      throw new Error(`wrangler types failed for ${workerKey}`);\n    }\n    console.log(`Generated types for ${workerKey}`);\n  }\n}\n"],"mappings":";;;;;;;AAeA,eAAsB,SAAS,SAIb;CAChB,MAAM,eAAe,QAAQ;CAC7B,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI;CAEzD,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,QAAQ,eACV,QAAQ,QAAQ,CAAC,OAAO,MAAM,aAAa,GAC3C;AAEJ,KAAI,MAAM,WAAW,EACnB,OAAM,IAAI,MACR,eACI,WAAW,aAAa,eACxB,wBACL;AAGH,MAAK,MAAM,CAAC,WAAW,iBAAiB,OAAO;EAC7C,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,cACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,CACZ;EACD,MAAM,iBAAiB,uBAAuB,UAAU,OAAO,OAAO;AACtE,oBAAkB,SAAS,WAAW,gBAAgB,SAAS,gBAAgB;AAW/E,MAJe,kBALG;GAChB;GACA,GAAG,sBAAsB,SAAS,gBAAgB;GAClD;GACD,EAC2C;GAC1C,KAAK,SAAS;GACd,OAAO;GACR,CAAC,CACS,WAAW,EACpB,OAAM,IAAI,MAAM,6BAA6B,YAAY;AAE3D,UAAQ,IAAI,uBAAuB,YAAY"}
+{"version":3,"file":"types-DCL0mEjS.mjs","names":[],"sources":["../src/cli/commands/types.ts"],"sourcesContent":["import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport {\n  generateWranglerConfig,\n  writeWranglerJson,\n} from \"../../core/wrangler/generator.js\";\n\nexport async function runTypes(options: {\n  worker?: string;\n  env?: string;\n  configPath?: string;\n}): Promise<void> {\n  const workerFilter = options.worker;\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  const imports = await fetchStackImports(api, config, env);\n\n  const workers = await getWorkers(config, baseDir);\n  const toRun = workerFilter\n    ? workers.filter(([k]) => k === workerFilter)\n    : workers;\n\n  if (toRun.length === 0) {\n    throw new Error(\n      workerFilter\n        ? `Worker \"${workerFilter}\" not found`\n        : \"No workers configured\",\n    );\n  }\n\n  for (const [workerKey, workerConfig] of toRun) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { imports },\n    );\n    const wranglerConfig = generateWranglerConfig(resolved, state, naming);\n    writeWranglerJson(resolved.workerDir, wranglerConfig, resolved.wranglerOutFile);\n\n    const typesArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(resolved.wranglerOutFile),\n      \"types\",\n    ];\n    const result = spawnWranglerSync(typesArgs, {\n      cwd: resolved.workerDir,\n      stdio: \"inherit\",\n    });\n    if (result.status !== 0) {\n      throw new Error(`wrangler types failed for ${workerKey}`);\n    }\n    console.log(`Generated types for ${workerKey}`);\n  }\n}\n"],"mappings":";;;;;;;AAeA,eAAsB,SAAS,SAIb;CAChB,MAAM,eAAe,QAAQ;CAC7B,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI;CAEzD,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,QAAQ,eACV,QAAQ,QAAQ,CAAC,OAAO,MAAM,aAAa,GAC3C;AAEJ,KAAI,MAAM,WAAW,EACnB,OAAM,IAAI,MACR,eACI,WAAW,aAAa,eACxB,wBACL;AAGH,MAAK,MAAM,CAAC,WAAW,iBAAiB,OAAO;EAC7C,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,cACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,CACZ;EACD,MAAM,iBAAiB,uBAAuB,UAAU,OAAO,OAAO;AACtE,oBAAkB,SAAS,WAAW,gBAAgB,SAAS,gBAAgB;AAW/E,MAJe,kBALG;GAChB;GACA,GAAG,sBAAsB,SAAS,gBAAgB;GAClD;GACD,EAC2C;GAC1C,KAAK,SAAS;GACd,OAAO;GACR,CAAC,CACS,WAAW,EACpB,OAAM,IAAI,MAAM,6BAA6B,YAAY;AAE3D,UAAQ,IAAI,uBAAuB,YAAY"}

package/dist/{wfp-delete-TSVBw9XF.mjs → wfp-delete-CwWQFxxj.mjs}

@@ -32,4 +32,4 @@ async function runWfpDelete(options) {
 
 //#endregion
 export { parseWfpDeleteArgs, runWfpDelete };
-//# sourceMappingURL=wfp-delete-TSVBw9XF.mjs.map
+//# sourceMappingURL=wfp-delete-CwWQFxxj.mjs.map

package/dist/{wfp-delete-TSVBw9XF.mjs.map → wfp-delete-CwWQFxxj.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"wfp-delete-TSVBw9XF.mjs","names":["opts: Record<string, string | boolean>"],"sources":["../src/cli/commands/wfp-delete.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\n\nexport function parseWfpDeleteArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    } else {\n      opts[key] = true;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  if (!namespace || !scriptName) {\n    throw new Error(\n      \"usage: tamer wfp delete --namespace <name> --script-name <name> [--force] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    force: opts.force === true || opts.force === \"true\",\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpDelete(options: {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptDelete(options.namespace, options.scriptName, {\n    force: options.force,\n  });\n  console.log(\n    `Deleted script \"${options.scriptName}\" from dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;AAIA,SAAgB,mBAAmB,MAKjC;CACA,MAAMA,OAAyC,EAAE;AACjD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,QAAK,OAAO;AACZ;QAEA,MAAK,OAAO;;CAGhB,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;AACxB,KAAI,CAAC,aAAa,CAAC,WACjB,OAAM,IAAI,MACR,2GACD;AAEH,QAAO;EACL;EACA;EACA,OAAO,KAAK,UAAU,QAAQ,KAAK,UAAU;EAC7C,YAAY,KAAK;EAClB;;AAGH,eAAsB,aAAa,SAKjB;CAEhB,MAAM,aADS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC,EAC5C,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;AAIH,OADY,IAAI,YAAY,UAAU,CAC5B,8BAA8B,QAAQ,WAAW,QAAQ,YAAY,EAC7E,OAAO,QAAQ,OAChB,CAAC;AACF,SAAQ,IACN,mBAAmB,QAAQ,WAAW,6BAA6B,QAAQ,UAAU,IACtF"}
+{"version":3,"file":"wfp-delete-CwWQFxxj.mjs","names":["opts: Record<string, string | boolean>"],"sources":["../src/cli/commands/wfp-delete.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\n\nexport function parseWfpDeleteArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    } else {\n      opts[key] = true;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  if (!namespace || !scriptName) {\n    throw new Error(\n      \"usage: tamer wfp delete --namespace <name> --script-name <name> [--force] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    force: opts.force === true || opts.force === \"true\",\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpDelete(options: {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptDelete(options.namespace, options.scriptName, {\n    force: options.force,\n  });\n  console.log(\n    `Deleted script \"${options.scriptName}\" from dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;AAIA,SAAgB,mBAAmB,MAKjC;CACA,MAAMA,OAAyC,EAAE;AACjD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,QAAK,OAAO;AACZ;QAEA,MAAK,OAAO;;CAGhB,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;AACxB,KAAI,CAAC,aAAa,CAAC,WACjB,OAAM,IAAI,MACR,2GACD;AAEH,QAAO;EACL;EACA;EACA,OAAO,KAAK,UAAU,QAAQ,KAAK,UAAU;EAC7C,YAAY,KAAK;EAClB;;AAGH,eAAsB,aAAa,SAKjB;CAEhB,MAAM,aADS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC,EAC5C,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;AAIH,OADY,IAAI,YAAY,UAAU,CAC5B,8BAA8B,QAAQ,WAAW,QAAQ,YAAY,EAC7E,OAAO,QAAQ,OAChB,CAAC;AACF,SAAQ,IACN,mBAAmB,QAAQ,WAAW,6BAA6B,QAAQ,UAAU,IACtF"}

package/dist/{wfp-put-5XZ-KC3g.mjs → wfp-put-Bl5K3snx.mjs}

@@ -1,7 +1,29 @@
 import { R as CFApiClient, U as loadConfig, z as cloudflareAccountIdFromEnv } from "./tamer.mjs";
-import { t as buildSingleModuleDispatchForm } from "./buildDispatchUploadForm-XO8AxhXJ.mjs";
-import { resolve } from "path";
+import { basename, resolve } from "path";
+import { readFileSync } from "fs";
 
+//#region src/core/wfp/buildDispatchUploadForm.ts
+/**
+* Build multipart body for PUT .../dispatch/namespaces/{ns}/scripts/{script}
+* with a single Worker module file.
+*/
+function buildSingleModuleDispatchForm(mainFilePath, opts) {
+	return buildForm(basename(mainFilePath), readFileSync(mainFilePath), opts);
+}
+function buildForm(moduleName, body, opts) {
+	const metadata = {
+		main_module: moduleName,
+		compatibility_date: opts.compatibility_date
+	};
+	if (opts.compatibility_flags?.length) metadata.compatibility_flags = opts.compatibility_flags;
+	if (opts.bindings?.bindings?.length) metadata.bindings = opts.bindings.bindings;
+	const form = new FormData();
+	form.append("metadata", new Blob([JSON.stringify(metadata)], { type: "application/json" }));
+	form.append(moduleName, new Blob([body], { type: "application/javascript+module" }), moduleName);
+	return form;
+}
+
+//#endregion
 //#region src/cli/commands/wfp-put.ts
 function parseWfpPutArgs(argv) {
 	const opts = {};
@@ -48,4 +70,4 @@ async function runWfpPut(options) {
 
 //#endregion
 export { parseWfpPutArgs, runWfpPut };
-//# sourceMappingURL=wfp-put-5XZ-KC3g.mjs.map
+//# sourceMappingURL=wfp-put-Bl5K3snx.mjs.map

package/dist/wfp-put-Bl5K3snx.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wfp-put-Bl5K3snx.mjs","names":["metadata: Record<string, unknown>","opts: Record<string, string | boolean | string[]>"],"sources":["../src/core/wfp/buildDispatchUploadForm.ts","../src/cli/commands/wfp-put.ts"],"sourcesContent":["import { basename } from \"path\";\nimport { readFileSync } from \"fs\";\n\n/**\n * Optional bindings for the dispatch script metadata.\n * Uses the unified Cloudflare bindings format:\n * `bindings: [{ type, name, ... }]`.\n */\nexport interface DispatchScriptBindings {\n  bindings?: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  >;\n}\n\n/**\n * Build multipart body for PUT .../dispatch/namespaces/{ns}/scripts/{script}\n * with a single Worker module file.\n */\nexport function buildSingleModuleDispatchForm(\n  mainFilePath: string,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const moduleName = basename(mainFilePath);\n  const body = readFileSync(mainFilePath);\n  return buildForm(moduleName, body, opts);\n}\n\n/** Same as {@link buildSingleModuleDispatchForm} but from in-memory bytes (e.g. R2 download). */\nexport function buildSingleModuleDispatchFormFromBuffer(\n  moduleName: string,\n  body: Uint8Array | ArrayBuffer,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const bytes = body instanceof ArrayBuffer ? new Uint8Array(body) : body;\n  return buildForm(moduleName, bytes, opts);\n}\n\nfunction buildForm(\n  moduleName: string,\n  body: Uint8Array,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const metadata: Record<string, unknown> = {\n    main_module: moduleName,\n    compatibility_date: opts.compatibility_date,\n  };\n  if (opts.compatibility_flags?.length) {\n    metadata.compatibility_flags = opts.compatibility_flags;\n  }\n  if (opts.bindings?.bindings?.length) {\n    metadata.bindings = opts.bindings.bindings;\n  }\n  const form = new FormData();\n  form.append(\n    \"metadata\",\n    new Blob([JSON.stringify(metadata)], { type: \"application/json\" }),\n  );\n  // CRITICAL: Cloudflare reads `Content-Type: application/javascript+module`\n  // off the module part to decide whether to treat it as ESM. Without this it\n  // errors with `Main module must be an ES module.` even though metadata uses\n  // `main_module`.\n  form.append(\n    moduleName,\n    new Blob([body], { type: \"application/javascript+module\" }),\n    moduleName,\n  );\n  return form;\n}\n","import { resolve } from \"path\";\nimport { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { buildSingleModuleDispatchForm } from \"../../core/wfp/buildDispatchUploadForm.js\";\n\nexport function parseWfpPutArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean | string[]> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (key === \"compat_flags\") {\n      if (next && !next.startsWith(\"--\")) {\n        opts[key] = next.split(\",\").map((s) => s.trim()).filter(Boolean);\n        i++;\n      }\n    } else if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  const main = opts.main as string | undefined;\n  if (!namespace || !scriptName || !main) {\n    throw new Error(\n      \"usage: tamer wfp put --namespace <name> --script-name <name> --main <file> [--compatibility-date <yyyy-mm-dd>] [--compat-flags a,b] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    main: resolve(process.cwd(), main),\n    compatDate:\n      (opts.compatibility_date as string | undefined) ??\n      (opts.compat_date as string | undefined),\n    flags: opts.compat_flags as string[] | undefined,\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpPut(options: {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const compatDate =\n    options.compatDate ??\n    config.compatibility_date ??\n    new Date().toISOString().slice(0, 10);\n\n  const form = buildSingleModuleDispatchForm(options.main, {\n    compatibility_date: compatDate,\n    compatibility_flags: options.flags,\n  });\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptPut(\n    options.namespace,\n    options.scriptName,\n    form,\n  );\n  console.log(\n    `Uploaded script \"${options.scriptName}\" to dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;;;;;;;AAoBA,SAAgB,8BACd,cACA,MAKU;AAGV,QAAO,UAFY,SAAS,aAAa,EAC5B,aAAa,aAAa,EACJ,KAAK;;AAiB1C,SAAS,UACP,YACA,MACA,MAKU;CACV,MAAMA,WAAoC;EACxC,aAAa;EACb,oBAAoB,KAAK;EAC1B;AACD,KAAI,KAAK,qBAAqB,OAC5B,UAAS,sBAAsB,KAAK;AAEtC,KAAI,KAAK,UAAU,UAAU,OAC3B,UAAS,WAAW,KAAK,SAAS;CAEpC,MAAM,OAAO,IAAI,UAAU;AAC3B,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,EAAE,MAAM,oBAAoB,CAAC,CACnE;AAKD,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,iCAAiC,CAAC,EAC3D,WACD;AACD,QAAO;;;;;AC1ET,SAAgB,gBAAgB,MAO9B;CACA,MAAMC,OAAoD,EAAE;AAC5D,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,gBACV;OAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,SAAK,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,QAAQ;AAChE;;aAEO,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AACzC,QAAK,OAAO;AACZ;;;CAGJ,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;CACxB,MAAM,OAAO,KAAK;AAClB,KAAI,CAAC,aAAa,CAAC,cAAc,CAAC,KAChC,OAAM,IAAI,MACR,qKACD;AAEH,QAAO;EACL;EACA;EACA,MAAM,QAAQ,QAAQ,KAAK,EAAE,KAAK;EAClC,YACG,KAAK,sBACL,KAAK;EACR,OAAO,KAAK;EACZ,YAAY,KAAK;EAClB;;AAGH,eAAsB,UAAU,SAOd;CAChB,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC;CACrE,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,aACJ,QAAQ,cACR,OAAO,uCACP,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;CAEvC,MAAM,OAAO,8BAA8B,QAAQ,MAAM;EACvD,oBAAoB;EACpB,qBAAqB,QAAQ;EAC9B,CAAC;AAGF,OADY,IAAI,YAAY,UAAU,CAC5B,2BACR,QAAQ,WACR,QAAQ,YACR,KACD;AACD,SAAQ,IACN,oBAAoB,QAAQ,WAAW,2BAA2B,QAAQ,UAAU,IACrF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dragonmastery/tamer",
-  "version": "0.41.0",
+  "version": "0.42.1",
   "description": "Tamer: Cloudflare Workers infra CLI (sync, apply, deploy, migrate, destroy) and Wrangler-oriented TypeScript types.",
   "author": "DragonMastery",
   "license": "SEE LICENSE IN LICENSE",

package/dist/buildDispatchUploadForm-XO8AxhXJ.mjs

@@ -1,31 +0,0 @@
-import { basename } from "path";
-import { readFileSync } from "fs";
-
-//#region src/core/wfp/buildDispatchUploadForm.ts
-/**
-* Build multipart body for PUT .../dispatch/namespaces/{ns}/scripts/{script}
-* with a single Worker module file.
-*/
-function buildSingleModuleDispatchForm(mainFilePath, opts) {
-	return buildForm(basename(mainFilePath), readFileSync(mainFilePath), opts);
-}
-/** Same as {@link buildSingleModuleDispatchForm} but from in-memory bytes (e.g. R2 download). */
-function buildSingleModuleDispatchFormFromBuffer(moduleName, body, opts) {
-	return buildForm(moduleName, body instanceof ArrayBuffer ? new Uint8Array(body) : body, opts);
-}
-function buildForm(moduleName, body, opts) {
-	const metadata = {
-		main_module: moduleName,
-		compatibility_date: opts.compatibility_date
-	};
-	if (opts.compatibility_flags?.length) metadata.compatibility_flags = opts.compatibility_flags;
-	if (opts.bindings?.bindings?.length) metadata.bindings = opts.bindings.bindings;
-	const form = new FormData();
-	form.append("metadata", new Blob([JSON.stringify(metadata)], { type: "application/json" }));
-	form.append(moduleName, new Blob([body], { type: "application/javascript+module" }), moduleName);
-	return form;
-}
-
-//#endregion
-export { buildSingleModuleDispatchFormFromBuffer as n, buildSingleModuleDispatchForm as t };
-//# sourceMappingURL=buildDispatchUploadForm-XO8AxhXJ.mjs.map

package/dist/buildDispatchUploadForm-XO8AxhXJ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"buildDispatchUploadForm-XO8AxhXJ.mjs","names":["metadata: Record<string, unknown>"],"sources":["../src/core/wfp/buildDispatchUploadForm.ts"],"sourcesContent":["import { basename } from \"path\";\nimport { readFileSync } from \"fs\";\n\n/**\n * Optional bindings for the dispatch script metadata.\n * Uses the unified Cloudflare bindings format:\n * `bindings: [{ type, name, ... }]`.\n */\nexport interface DispatchScriptBindings {\n  bindings?: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  >;\n}\n\n/**\n * Build multipart body for PUT .../dispatch/namespaces/{ns}/scripts/{script}\n * with a single Worker module file.\n */\nexport function buildSingleModuleDispatchForm(\n  mainFilePath: string,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const moduleName = basename(mainFilePath);\n  const body = readFileSync(mainFilePath);\n  return buildForm(moduleName, body, opts);\n}\n\n/** Same as {@link buildSingleModuleDispatchForm} but from in-memory bytes (e.g. R2 download). */\nexport function buildSingleModuleDispatchFormFromBuffer(\n  moduleName: string,\n  body: Uint8Array | ArrayBuffer,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const bytes = body instanceof ArrayBuffer ? new Uint8Array(body) : body;\n  return buildForm(moduleName, bytes, opts);\n}\n\nfunction buildForm(\n  moduleName: string,\n  body: Uint8Array,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const metadata: Record<string, unknown> = {\n    main_module: moduleName,\n    compatibility_date: opts.compatibility_date,\n  };\n  if (opts.compatibility_flags?.length) {\n    metadata.compatibility_flags = opts.compatibility_flags;\n  }\n  if (opts.bindings?.bindings?.length) {\n    metadata.bindings = opts.bindings.bindings;\n  }\n  const form = new FormData();\n  form.append(\n    \"metadata\",\n    new Blob([JSON.stringify(metadata)], { type: \"application/json\" }),\n  );\n  // CRITICAL: Cloudflare reads `Content-Type: application/javascript+module`\n  // off the module part to decide whether to treat it as ESM. Without this it\n  // errors with `Main module must be an ES module.` even though metadata uses\n  // `main_module`.\n  form.append(\n    moduleName,\n    new Blob([body], { type: \"application/javascript+module\" }),\n    moduleName,\n  );\n  return form;\n}\n"],"mappings":";;;;;;;;AAoBA,SAAgB,8BACd,cACA,MAKU;AAGV,QAAO,UAFY,SAAS,aAAa,EAC5B,aAAa,aAAa,EACJ,KAAK;;;AAI1C,SAAgB,wCACd,YACA,MACA,MAKU;AAEV,QAAO,UAAU,YADH,gBAAgB,cAAc,IAAI,WAAW,KAAK,GAAG,MAC/B,KAAK;;AAG3C,SAAS,UACP,YACA,MACA,MAKU;CACV,MAAMA,WAAoC;EACxC,aAAa;EACb,oBAAoB,KAAK;EAC1B;AACD,KAAI,KAAK,qBAAqB,OAC5B,UAAS,sBAAsB,KAAK;AAEtC,KAAI,KAAK,UAAU,UAAU,OAC3B,UAAS,WAAW,KAAK,SAAS;CAEpC,MAAM,OAAO,IAAI,UAAU;AAC3B,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,EAAE,MAAM,oBAAoB,CAAC,CACnE;AAKD,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,iCAAiC,CAAC,EAC3D,WACD;AACD,QAAO"}

package/dist/provision-tenant-z4DLxYAM.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"provision-tenant-z4DLxYAM.mjs","names":["result: ProvisionTenantResult","allD1: Awaited<ReturnType<typeof api.d1ListAll>> | null","shards: TenantD1ShardRef[]","form: FormData","join"],"sources":["../src/cli/commands/provision-tenant.ts"],"sourcesContent":["import { basename, resolve } from \"path\";\nimport { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { getDispatchNamespaces } from \"../../types.js\";\nimport { effectiveDispatchNamespaceName } from \"../../features/dispatch-namespace/dispatch-namespace.resolve.js\";\nimport {\n  parseTenantShardRoles,\n  tenantDispatchScriptName,\n  tenantShardDatabaseName,\n  tenantStateKey,\n} from \"../../core/tenant/tenantKeys.js\";\nimport {\n  buildSingleModuleDispatchForm,\n  buildSingleModuleDispatchFormFromBuffer,\n} from \"../../core/wfp/buildDispatchUploadForm.js\";\nimport { resolveTenantBindings } from \"../../core/tenant/resolveTenantBindings.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { tamerArtifactsBucketName, tamerArtifactsKeyPrefix } from \"../../core/state/tamerArtifactsR2.js\";\nimport { logApplyChange } from \"../../core/plan/planFormat.js\";\nimport type { TenantD1ShardRef, TenantStateEntry } from \"../../types.js\";\n\nconst now = (): string => new Date().toISOString();\n\nfunction buildTenantEntry(\n  options: {\n    product: string;\n    workspace: string;\n    dispatchNamespaceName: string;\n    scriptName: string;\n  },\n  status: TenantStateEntry[\"provisioningStatus\"],\n  existing: TenantStateEntry | undefined,\n  patch?: Partial<Pick<TenantStateEntry, \"d1Shards\">>,\n): TenantStateEntry {\n  return {\n    product: options.product,\n    workspace: options.workspace,\n    provisioningStatus: status,\n    dispatchNamespaceName: options.dispatchNamespaceName,\n    scriptName: options.scriptName,\n    d1Shards: patch?.d1Shards ?? existing?.d1Shards,\n    createdAt: existing?.createdAt ?? now(),\n    updatedAt: now(),\n  };\n}\n\n/**\n * Resolve the effective shard set for this provision call.\n *\n *   1. The configured layout (`tenant.d1Shards` in `tamer.config.ts`)\n *      is the source of truth — any role used by `--shards` must\n *      appear here, and `apply` / `drift` / other operators read the\n *      same shape.\n *   2. When `--shards a,b` is passed, trim to that subset (preserving\n *      configured order so plan/provision logs stay deterministic).\n *      Extending the layout is an edit to `tamer.config.ts`, not a\n *      CLI flag — that's why `parseTenantShardRoles` rejects roles\n *      outside the configured set.\n *   3. When the config has no `tenant.d1Shards`, the resolved set is\n *      empty: `provision-tenant` only uploads the dispatch script\n *      (truly generic single-Worker tenant case).\n */\nfunction resolveShardRoles(\n  configured: readonly string[],\n  shardsRaw: string | undefined,\n): string[] {\n  if (shardsRaw == null || shardsRaw.trim() === \"\") return [...configured];\n  return parseTenantShardRoles(shardsRaw, configured);\n}\n\n/**\n * Idempotent tenant provisioning. Each call:\n *\n *   1. Marks the tenant `pending` if there's no record yet.\n *   2. For every shard role declared in `tenant.d1Shards` in\n *      `tamer.config.ts` (or a `--shards` subset): looks up an\n *      existing D1 by derived name (`tenantShardDatabaseName(role,\n *      …)`), creating it via `d1Create` only when missing. Persists\n *      the `(role, derivedName, cfId)` triple to\n *      `state.tenants[…].d1Shards[]`.\n *   3. Marks the tenant `d1_created` once *all* requested shards\n *      exist in state.\n *   4. Uploads the dispatch script (from `--main` or `--artifact-key`)\n *      via the WFP dispatch namespace.\n *   5. Marks the tenant `ready`.\n *\n * When `tenant.d1Shards` is omitted, step 2/3 collapse to a no-op\n * (truly generic single-Worker tenant — only the dispatch script is\n * provisioned). Re-running with the same shard set is a no-op (state\n * already has those rows). Editing `tamer.config.ts` to **extend**\n * the layout (e.g. adding a new role) and re-running picks up the\n * missing shards without disturbing existing ones, so a tenant\n * created with `[\"app\"]` can be migrated to `[\"system\",\"app\",\n * \"history\"]` (or `[\"primary\",\"audit\"]`, or any other set) with one\n * config edit + one `provision-tenant` invocation. Re-running after\n * a config that **shrinks** the layout never deletes shards (use\n * `destroy-tenant` for that).\n */\n/**\n * Machine-readable result envelope emitted on the final stdout line\n * when `--json` is passed. Designed for the Cloudflare Container caller\n * (`provision-workflow`, see `docs/handoff.md` §7) so the Worker can\n * parse the result without scraping human logs. On success the Workflow\n * sees `status: \"ready\"` plus the materialized tenant shape; on\n * failure it sees `status: \"failed\"` with `error` + best-effort\n * `partial` state, and the process exits non-zero.\n */\nexport interface ProvisionTenantResult {\n  status: \"ready\" | \"failed\" | \"noop\";\n  tenantKey: string;\n  product: string;\n  workspace: string;\n  env: string;\n  scriptName: string;\n  dispatchNamespaceName: string;\n  shards: { role: string; derivedName: string; cfId: string }[];\n  error?: string;\n}\n\nexport async function runProvisionTenant(options: {\n  env: string;\n  product: string;\n  workspace: string;\n  main?: string;\n  artifactKey?: string;\n  moduleName?: string;\n  configPath?: string;\n  compatibilityDate?: string;\n  compatibilityFlags?: string[];\n  /**\n   * Raw `--shards` value (`\"system,app\"` etc.) — validated against\n   * `tenant.d1Shards` from the loaded config. Omit to provision every\n   * configured shard.\n   */\n  shardsRaw?: string;\n  json?: boolean;\n  migrate?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  if (env === \"local\") {\n    throw new Error(\n      \"provision-tenant requires a non-local --env (Cloudflare-backed state).\",\n    );\n  }\n\n  try {\n    await provisionTenantInner(options);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    if (options.json) {\n      // Failure envelope: we may have died before loadConfig, so we\n      // can't ask `tenant.ephemeralEnvPattern` whether `env` would\n      // get the `-{env}` suffix. Emit the non-ephemeral form as a\n      // best-effort hint — `error` carries the real signal.\n      const result: ProvisionTenantResult = {\n        status: \"failed\",\n        tenantKey: tenantStateKey(options.product, options.workspace),\n        product: options.product,\n        workspace: options.workspace,\n        env,\n        scriptName: `${options.product}-${options.workspace}`,\n        dispatchNamespaceName: \"\",\n        shards: [],\n        error: msg,\n      };\n      process.stdout.write(JSON.stringify(result) + \"\\n\");\n    }\n    // Container caller (provision-workflow) reads exit code as\n    // primary success/failure signal; JSON envelope on stdout is\n    // secondary detail. Re-throw so the CLI surfaces the original\n    // error in human mode.\n    throw err;\n  }\n}\n\nasync function provisionTenantInner(options: {\n  env: string;\n  product: string;\n  workspace: string;\n  main?: string;\n  artifactKey?: string;\n  moduleName?: string;\n  configPath?: string;\n  compatibilityDate?: string;\n  compatibilityFlags?: string[];\n  shardsRaw?: string;\n  json?: boolean;\n  migrate?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  const config = await loadConfig(options.configPath, { env });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const dns = getDispatchNamespaces(config);\n  if (dns.length === 0) {\n    throw new Error(\n      \"provision-tenant requires at least one dispatch namespace in the Tamer project config (dispatchNamespaces).\",\n    );\n  }\n  const nsConfig = dns[0]!;\n  const dispatchNamespaceName = effectiveDispatchNamespaceName(\n    nsConfig,\n    env,\n    config.tenant,\n  );\n  const scriptName = tenantDispatchScriptName(\n    options.product,\n    options.workspace,\n    env,\n    config.tenant,\n  );\n  const desiredRoles = resolveShardRoles(\n    config.tenant.d1Shards ?? [],\n    options.shardsRaw,\n  );\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  let existing = state.getTenant(options.product, options.workspace);\n  // \"ready\" is a no-op only when the existing layout already covers\n  // every requested shard role. Adding a new role re-opens the tenant\n  // for incremental provisioning without forcing a full re-deploy.\n  if (existing?.provisioningStatus === \"ready\") {\n    const have = new Set((existing.d1Shards ?? []).map((s) => s.role));\n    const missing = desiredRoles.filter((r) => !have.has(r));\n    if (missing.length === 0) {\n      console.log(\n        `Tenant ${tenantStateKey(options.product, options.workspace)} already ready; nothing to do.`,\n      );\n      if (options.json) {\n        const result: ProvisionTenantResult = {\n          status: \"noop\",\n          tenantKey: tenantStateKey(options.product, options.workspace),\n          product: options.product,\n          workspace: options.workspace,\n          env,\n          scriptName,\n          dispatchNamespaceName,\n          shards: (existing.d1Shards ?? []).map((s) => ({\n            role: s.role,\n            derivedName: s.derivedName,\n            cfId: s.cfId,\n          })),\n        };\n        process.stdout.write(JSON.stringify(result) + \"\\n\");\n      }\n      return;\n    }\n    console.log(\n      `Tenant ${tenantStateKey(options.product, options.workspace)} ready but missing shards: ${missing.join(\", \")}; extending layout.`,\n    );\n  }\n\n  const compatDate =\n    options.compatibilityDate ??\n    config.compatibility_date ??\n    new Date().toISOString().slice(0, 10);\n\n  const entryOpts = {\n    product: options.product,\n    workspace: options.workspace,\n    dispatchNamespaceName,\n    scriptName,\n  };\n\n  if (!existing) {\n    state.setTenant(buildTenantEntry(entryOpts, \"pending\", undefined));\n    await state.persist(api);\n    existing = state.getTenant(options.product, options.workspace)!;\n  }\n\n  // Reconcile each requested shard role. We list D1 once per call when\n  // we need to (some role is missing from state) and reuse the result\n  // for every subsequent role.\n  let allD1: Awaited<ReturnType<typeof api.d1ListAll>> | null = null;\n  const shards: TenantD1ShardRef[] = [...(existing.d1Shards ?? [])];\n\n  for (const role of desiredRoles) {\n    if (shards.find((s) => s.role === role)) continue;\n    const derivedName = tenantShardDatabaseName(\n      role,\n      options.workspace,\n      options.product,\n      config.tenant.id,\n      env,\n    );\n    if (allD1 === null) {\n      allD1 = await api.d1ListAll();\n    }\n    let cfId = allD1.find((d) => d.name === derivedName)?.uuid;\n    if (cfId) {\n      // Adopt an existing D1 (e.g. partial-failure resume, or\n      // operator created it out-of-band) without re-issuing POST.\n      logApplyChange({\n        kind: \"d1\",\n        action: \"no_change\",\n        logical: `${role}-shard`,\n        derived: derivedName,\n      });\n    } else {\n      logApplyChange({\n        kind: \"d1\",\n        action: \"create\",\n        logical: `${role}-shard`,\n        derived: derivedName,\n      });\n      const created = await api.d1Create(derivedName);\n      cfId = created.uuid;\n    }\n    shards.push({ role, derivedName, cfId });\n    // Persist after each shard so a network failure mid-loop leaves\n    // the already-created shards recorded — `provision-tenant` is\n    // resumable role-by-role.\n    state.setTenant(\n      buildTenantEntry(entryOpts, \"d1_created\", existing, { d1Shards: shards }),\n    );\n    await state.persist(api);\n    existing = state.getTenant(options.product, options.workspace)!;\n  }\n\n  // Resolve dispatch script bindings from shards + config.\n  const naming = namingFromConfig(config);\n  const bindings = resolveTenantBindings(\n    config,\n    shards,\n    naming,\n    state,\n    env,\n    accountId,\n  );\n\n  // Optionally run migrations on each shard before uploading the script.\n  if (options.migrate !== false && shards.length > 0) {\n    await migrateTenantShards(config, shards, env, naming);\n  }\n\n  let form: FormData;\n  const formOpts = {\n    compatibility_date: compatDate,\n    compatibility_flags: options.compatibilityFlags,\n    bindings,\n  };\n  if (options.main) {\n    const mainPath = resolve(process.cwd(), options.main);\n    form = buildSingleModuleDispatchForm(mainPath, formOpts);\n  } else if (options.artifactKey) {\n    const bucket = tamerArtifactsBucketName();\n    const fullKey = `${tamerArtifactsKeyPrefix(env)}${options.artifactKey}`;\n    const body = await api.r2GetObject(bucket, fullKey);\n    const mod =\n      options.moduleName?.trim() ||\n      basename(options.artifactKey).replace(/\\.(zip|tar|gz)$/i, \"\") ||\n      \"worker.js\";\n    form = buildSingleModuleDispatchFormFromBuffer(mod, body, formOpts);\n  } else {\n    throw new Error(\"provision-tenant: provide --main or --artifact-key\");\n  }\n\n  await api.dispatchNamespaceScriptPut(dispatchNamespaceName, scriptName, form);\n\n  state.setTenant(\n    buildTenantEntry(entryOpts, \"ready\", existing, { d1Shards: shards }),\n  );\n  await state.persist(api);\n\n  const shardsSummary =\n    shards.length > 0\n      ? `shards: ${shards.map((s) => s.role).join(\", \")}`\n      : \"no shards declared\";\n  console.log(\n    `Provisioned tenant ${tenantStateKey(options.product, options.workspace)} → script ${scriptName} in ${dispatchNamespaceName} (${shardsSummary})`,\n  );\n\n  if (options.json) {\n    const result: ProvisionTenantResult = {\n      status: \"ready\",\n      tenantKey: tenantStateKey(options.product, options.workspace),\n      product: options.product,\n      workspace: options.workspace,\n      env,\n      scriptName,\n      dispatchNamespaceName,\n      shards: shards.map((s) => ({\n        role: s.role,\n        derivedName: s.derivedName,\n        cfId: s.cfId,\n      })),\n    };\n    process.stdout.write(JSON.stringify(result) + \"\\n\");\n  }\n}\n\n/**\n * Run D1 migrations on each tenant shard by writing a temporary wrangler.json\n * with the shard binding and invoking `wrangler d1 migrations apply`.\n */\nasync function migrateTenantShards(\n  config: import(\"../../types.js\").CfiConfig,\n  shards: TenantD1ShardRef[],\n  env: string,\n  naming: import(\"../../core/naming/NamingEngine.js\").NamingEngine,\n): Promise<void> {\n  const { writeFileSync, unlinkSync, mkdirSync } = await import(\"fs\");\n  const { join } = await import(\"path\");\n  const { tmpdir } = await import(\"os\");\n  const { spawnWranglerSync } = await import(\n    \"../../core/wrangler/wranglerSpawn.js\"\n  );\n  const { wranglerConfigCliArgs } = await import(\n    \"../../core/wrangler/wranglerOutFile.js\"\n  );\n  const { resolveTenantD1Bindings } = await import(\n    \"../../core/tenant/resolveTenantBindings.js\"\n  );\n\n  const shardBindings = config.tenant.shardBindings ?? {};\n  const d1Bindings = resolveTenantD1Bindings(config, shards, naming);\n\n  // Resolve base dir for relative migrationsDir paths\n  const { getConfigBaseDir } = await import(\"../../core/config/loader.js\");\n  const baseDir = getConfigBaseDir();\n\n  for (let i = 0; i < shards.length; i++) {\n    const shard = shards[i]!;\n    const binding = d1Bindings[i]!;\n    const info = shardBindings[shard.role];\n    if (!info?.migrationsDir) {\n      console.log(`  migrate: skipping ${shard.role} (no migrationsDir in shardBindings)`);\n      continue;\n    }\n\n    const migDir = resolve(baseDir, info.migrationsDir);\n    const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);\n    const tempConfig = {\n      name: `tenant-migrate-${shard.role}`,\n      d1_databases: [{ binding: binding.name, database_id: shard.cfId, database_name: shard.derivedName, migrations_dir: \".\" }],\n      compatibility_date: config.compatibility_date ?? \"2024-01-01\",\n    };\n    writeFileSync(tempWranglerPath, JSON.stringify(tempConfig, null, 2));\n\n    const migrateArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(`wrangler.${shard.role}.json`),\n      \"d1\",\n      \"migrations\",\n      \"apply\",\n      binding.name,\n      \"--remote\",\n    ];\n    if (info.migrationsTable) {\n      migrateArgs.push(\"--migrations-table\", info.migrationsTable);\n    }\n\n    console.log(`  migrate: applying migrations for ${shard.role} (${shard.derivedName})...`);\n    const result = spawnWranglerSync(migrateArgs, {\n      cwd: migDir,\n      stdio: \"inherit\",\n    });\n    if (result.status !== 0) {\n      console.warn(`  migrate: failed for ${shard.role} (exit ${result.status})`);\n    }\n    try {\n      unlinkSync(tempWranglerPath);\n    } catch {\n      /* best-effort cleanup */\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAwBA,MAAM,6BAAoB,IAAI,MAAM,EAAC,aAAa;AAElD,SAAS,iBACP,SAMA,QACA,UACA,OACkB;AAClB,QAAO;EACL,SAAS,QAAQ;EACjB,WAAW,QAAQ;EACnB,oBAAoB;EACpB,uBAAuB,QAAQ;EAC/B,YAAY,QAAQ;EACpB,UAAU,OAAO,YAAY,UAAU;EACvC,WAAW,UAAU,aAAa,KAAK;EACvC,WAAW,KAAK;EACjB;;;;;;;;;;;;;;;;;;AAmBH,SAAS,kBACP,YACA,WACU;AACV,KAAI,aAAa,QAAQ,UAAU,MAAM,KAAK,GAAI,QAAO,CAAC,GAAG,WAAW;AACxE,QAAO,sBAAsB,WAAW,WAAW;;AAoDrD,eAAsB,mBAAmB,SAkBvB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,QAAQ,QACV,OAAM,IAAI,MACR,yEACD;AAGH,KAAI;AACF,QAAM,qBAAqB,QAAQ;UAC5B,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,MAAI,QAAQ,MAAM;GAKhB,MAAMA,SAAgC;IACpC,QAAQ;IACR,WAAW,eAAe,QAAQ,SAAS,QAAQ,UAAU;IAC7D,SAAS,QAAQ;IACjB,WAAW,QAAQ;IACnB;IACA,YAAY,GAAG,QAAQ,QAAQ,GAAG,QAAQ;IAC1C,uBAAuB;IACvB,QAAQ,EAAE;IACV,OAAO;IACR;AACD,WAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG,KAAK;;AAMrD,QAAM;;;AAIV,eAAe,qBAAqB,SAalB;CAChB,MAAM,MAAM,QAAQ;CACpB,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YAAY,OAAO,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,sBAAsB,OAAO;AACzC,KAAI,IAAI,WAAW,EACjB,OAAM,IAAI,MACR,8GACD;CAEH,MAAM,WAAW,IAAI;CACrB,MAAM,wBAAwB,+BAC5B,UACA,KACA,OAAO,OACR;CACD,MAAM,aAAa,yBACjB,QAAQ,SACR,QAAQ,WACR,KACA,OAAO,OACR;CACD,MAAM,eAAe,kBACnB,OAAO,OAAO,YAAY,EAAE,EAC5B,QAAQ,UACT;CAED,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,IAAI,WAAW,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAIlE,KAAI,UAAU,uBAAuB,SAAS;EAC5C,MAAM,OAAO,IAAI,KAAK,SAAS,YAAY,EAAE,EAAE,KAAK,MAAM,EAAE,KAAK,CAAC;EAClE,MAAM,UAAU,aAAa,QAAQ,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;AACxD,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAQ,IACN,UAAU,eAAe,QAAQ,SAAS,QAAQ,UAAU,CAAC,gCAC9D;AACD,OAAI,QAAQ,MAAM;IAChB,MAAMA,SAAgC;KACpC,QAAQ;KACR,WAAW,eAAe,QAAQ,SAAS,QAAQ,UAAU;KAC7D,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB;KACA;KACA;KACA,SAAS,SAAS,YAAY,EAAE,EAAE,KAAK,OAAO;MAC5C,MAAM,EAAE;MACR,aAAa,EAAE;MACf,MAAM,EAAE;MACT,EAAE;KACJ;AACD,YAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG,KAAK;;AAErD;;AAEF,UAAQ,IACN,UAAU,eAAe,QAAQ,SAAS,QAAQ,UAAU,CAAC,6BAA6B,QAAQ,KAAK,KAAK,CAAC,qBAC9G;;CAGH,MAAM,aACJ,QAAQ,qBACR,OAAO,uCACP,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;CAEvC,MAAM,YAAY;EAChB,SAAS,QAAQ;EACjB,WAAW,QAAQ;EACnB;EACA;EACD;AAED,KAAI,CAAC,UAAU;AACb,QAAM,UAAU,iBAAiB,WAAW,WAAW,OAAU,CAAC;AAClE,QAAM,MAAM,QAAQ,IAAI;AACxB,aAAW,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;;CAMhE,IAAIC,QAA0D;CAC9D,MAAMC,SAA6B,CAAC,GAAI,SAAS,YAAY,EAAE,CAAE;AAEjE,MAAK,MAAM,QAAQ,cAAc;AAC/B,MAAI,OAAO,MAAM,MAAM,EAAE,SAAS,KAAK,CAAE;EACzC,MAAM,cAAc,wBAClB,MACA,QAAQ,WACR,QAAQ,SACR,OAAO,OAAO,IACd,IACD;AACD,MAAI,UAAU,KACZ,SAAQ,MAAM,IAAI,WAAW;EAE/B,IAAI,OAAO,MAAM,MAAM,MAAM,EAAE,SAAS,YAAY,EAAE;AACtD,MAAI,KAGF,gBAAe;GACb,MAAM;GACN,QAAQ;GACR,SAAS,GAAG,KAAK;GACjB,SAAS;GACV,CAAC;OACG;AACL,kBAAe;IACb,MAAM;IACN,QAAQ;IACR,SAAS,GAAG,KAAK;IACjB,SAAS;IACV,CAAC;AAEF,WADgB,MAAM,IAAI,SAAS,YAAY,EAChC;;AAEjB,SAAO,KAAK;GAAE;GAAM;GAAa;GAAM,CAAC;AAIxC,QAAM,UACJ,iBAAiB,WAAW,cAAc,UAAU,EAAE,UAAU,QAAQ,CAAC,CAC1E;AACD,QAAM,MAAM,QAAQ,IAAI;AACxB,aAAW,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;;CAIhE,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,WAAW,sBACf,QACA,QACA,QACA,OACA,KACA,UACD;AAGD,KAAI,QAAQ,YAAY,SAAS,OAAO,SAAS,EAC/C,OAAM,oBAAoB,QAAQ,QAAQ,KAAK,OAAO;CAGxD,IAAIC;CACJ,MAAM,WAAW;EACf,oBAAoB;EACpB,qBAAqB,QAAQ;EAC7B;EACD;AACD,KAAI,QAAQ,KAEV,QAAO,8BADU,QAAQ,QAAQ,KAAK,EAAE,QAAQ,KAAK,EACN,SAAS;UAC/C,QAAQ,aAAa;EAC9B,MAAM,SAAS,0BAA0B;EACzC,MAAM,UAAU,GAAG,wBAAwB,IAAI,GAAG,QAAQ;EAC1D,MAAM,OAAO,MAAM,IAAI,YAAY,QAAQ,QAAQ;AAKnD,SAAO,wCAHL,QAAQ,YAAY,MAAM,IAC1B,SAAS,QAAQ,YAAY,CAAC,QAAQ,oBAAoB,GAAG,IAC7D,aACkD,MAAM,SAAS;OAEnE,OAAM,IAAI,MAAM,qDAAqD;AAGvE,OAAM,IAAI,2BAA2B,uBAAuB,YAAY,KAAK;AAE7E,OAAM,UACJ,iBAAiB,WAAW,SAAS,UAAU,EAAE,UAAU,QAAQ,CAAC,CACrE;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,gBACJ,OAAO,SAAS,IACZ,WAAW,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,KAC/C;AACN,SAAQ,IACN,sBAAsB,eAAe,QAAQ,SAAS,QAAQ,UAAU,CAAC,YAAY,WAAW,MAAM,sBAAsB,IAAI,cAAc,GAC/I;AAED,KAAI,QAAQ,MAAM;EAChB,MAAMH,SAAgC;GACpC,QAAQ;GACR,WAAW,eAAe,QAAQ,SAAS,QAAQ,UAAU;GAC7D,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB;GACA;GACA;GACA,QAAQ,OAAO,KAAK,OAAO;IACzB,MAAM,EAAE;IACR,aAAa,EAAE;IACf,MAAM,EAAE;IACT,EAAE;GACJ;AACD,UAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG,KAAK;;;;;;;AAQvD,eAAe,oBACb,QACA,QACA,KACA,QACe;CACf,MAAM,EAAE,eAAe,YAAY,cAAc,MAAM,OAAO;CAC9D,MAAM,EAAE,iBAAS,MAAM,OAAO;CAC9B,MAAM,EAAE,WAAW,MAAM,OAAO;CAChC,MAAM,EAAE,sBAAsB,MAAM,OAClC;CAEF,MAAM,EAAE,0BAA0B,MAAM,OACtC;CAEF,MAAM,EAAE,4BAA4B,MAAM,OACxC;CAGF,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;CACvD,MAAM,aAAa,wBAAwB,QAAQ,QAAQ,OAAO;CAGlE,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,UAAU,kBAAkB;AAElC,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;EACtC,MAAM,QAAQ,OAAO;EACrB,MAAM,UAAU,WAAW;EAC3B,MAAM,OAAO,cAAc,MAAM;AACjC,MAAI,CAAC,MAAM,eAAe;AACxB,WAAQ,IAAI,uBAAuB,MAAM,KAAK,sCAAsC;AACpF;;EAGF,MAAM,SAAS,QAAQ,SAAS,KAAK,cAAc;EACnD,MAAM,mBAAmBI,OAAK,QAAQ,YAAY,MAAM,KAAK,OAAO;EACpE,MAAM,aAAa;GACjB,MAAM,kBAAkB,MAAM;GAC9B,cAAc,CAAC;IAAE,SAAS,QAAQ;IAAM,aAAa,MAAM;IAAM,eAAe,MAAM;IAAa,gBAAgB;IAAK,CAAC;GACzH,oBAAoB,OAAO,sBAAsB;GAClD;AACD,gBAAc,kBAAkB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;EAEpE,MAAM,cAAc;GAClB;GACA,GAAG,sBAAsB,YAAY,MAAM,KAAK,OAAO;GACvD;GACA;GACA;GACA,QAAQ;GACR;GACD;AACD,MAAI,KAAK,gBACP,aAAY,KAAK,sBAAsB,KAAK,gBAAgB;AAG9D,UAAQ,IAAI,sCAAsC,MAAM,KAAK,IAAI,MAAM,YAAY,MAAM;EACzF,MAAM,SAAS,kBAAkB,aAAa;GAC5C,KAAK;GACL,OAAO;GACR,CAAC;AACF,MAAI,OAAO,WAAW,EACpB,SAAQ,KAAK,yBAAyB,MAAM,KAAK,SAAS,OAAO,OAAO,GAAG;AAE7E,MAAI;AACF,cAAW,iBAAiB;UACtB"}

package/dist/wfp-put-5XZ-KC3g.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"wfp-put-5XZ-KC3g.mjs","names":["opts: Record<string, string | boolean | string[]>"],"sources":["../src/cli/commands/wfp-put.ts"],"sourcesContent":["import { resolve } from \"path\";\nimport { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { buildSingleModuleDispatchForm } from \"../../core/wfp/buildDispatchUploadForm.js\";\n\nexport function parseWfpPutArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean | string[]> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (key === \"compat_flags\") {\n      if (next && !next.startsWith(\"--\")) {\n        opts[key] = next.split(\",\").map((s) => s.trim()).filter(Boolean);\n        i++;\n      }\n    } else if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  const main = opts.main as string | undefined;\n  if (!namespace || !scriptName || !main) {\n    throw new Error(\n      \"usage: tamer wfp put --namespace <name> --script-name <name> --main <file> [--compatibility-date <yyyy-mm-dd>] [--compat-flags a,b] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    main: resolve(process.cwd(), main),\n    compatDate:\n      (opts.compatibility_date as string | undefined) ??\n      (opts.compat_date as string | undefined),\n    flags: opts.compat_flags as string[] | undefined,\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpPut(options: {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const compatDate =\n    options.compatDate ??\n    config.compatibility_date ??\n    new Date().toISOString().slice(0, 10);\n\n  const form = buildSingleModuleDispatchForm(options.main, {\n    compatibility_date: compatDate,\n    compatibility_flags: options.flags,\n  });\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptPut(\n    options.namespace,\n    options.scriptName,\n    form,\n  );\n  console.log(\n    `Uploaded script \"${options.scriptName}\" to dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;;;AAMA,SAAgB,gBAAgB,MAO9B;CACA,MAAMA,OAAoD,EAAE;AAC5D,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,gBACV;OAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,SAAK,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,QAAQ;AAChE;;aAEO,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AACzC,QAAK,OAAO;AACZ;;;CAGJ,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;CACxB,MAAM,OAAO,KAAK;AAClB,KAAI,CAAC,aAAa,CAAC,cAAc,CAAC,KAChC,OAAM,IAAI,MACR,qKACD;AAEH,QAAO;EACL;EACA;EACA,MAAM,QAAQ,QAAQ,KAAK,EAAE,KAAK;EAClC,YACG,KAAK,sBACL,KAAK;EACR,OAAO,KAAK;EACZ,YAAY,KAAK;EAClB;;AAGH,eAAsB,UAAU,SAOd;CAChB,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC;CACrE,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,aACJ,QAAQ,cACR,OAAO,uCACP,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;CAEvC,MAAM,OAAO,8BAA8B,QAAQ,MAAM;EACvD,oBAAoB;EACpB,qBAAqB,QAAQ;EAC9B,CAAC;AAGF,OADY,IAAI,YAAY,UAAU,CAC5B,2BACR,QAAQ,WACR,QAAQ,YACR,KACD;AACD,SAAQ,IACN,oBAAoB,QAAQ,WAAW,2BAA2B,QAAQ,UAAU,IACrF"}