@dragonmastery/tamer 0.43.0 → 0.43.1

package/dist/{tamerArtifactsR2-BePICoT8.mjs → tamerArtifactsR2--lL7OBaD.mjs}

@@ -1,4 +1,4 @@
-import { n as r2S3CredentialsFromEnv } from "./r2S3EmptyBucket-CDE2lTM8.mjs";
+import { n as r2S3CredentialsFromEnv } from "./r2S3EmptyBucket-OKIQdlms.mjs";
 
 //#region src/core/state/tamerArtifactsR2.ts
 /**
@@ -48,4 +48,4 @@ async function deleteEnvArtifacts(api, env) {
 
 //#endregion
 export { tamerArtifactsKeyPrefix as i, ensureTamerArtifactsBucket as n, tamerArtifactsBucketName as r, deleteEnvArtifacts as t };
-//# sourceMappingURL=tamerArtifactsR2-BePICoT8.mjs.map
+//# sourceMappingURL=tamerArtifactsR2--lL7OBaD.mjs.map

package/dist/{tamerArtifactsR2-BePICoT8.mjs.map → tamerArtifactsR2--lL7OBaD.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"tamerArtifactsR2-BePICoT8.mjs","names":[],"sources":["../src/core/state/tamerArtifactsR2.ts"],"sourcesContent":["import type { CFApiClient } from \"../api/CFApiClient.js\";\nimport {\n  emptyR2BucketViaS3,\n  r2S3CredentialsFromEnv,\n} from \"../../features/r2/r2S3EmptyBucket.js\";\n\n/**\n * Account-scoped R2 bucket that holds Tamer-managed artifacts (built bundles,\n * keyed `{env}/{resource-type}/{name}/{version}/...`). Owned by Tamer itself,\n * not by any worker in `tamer.config.ts`. Created once on `tamer bootstrap`\n * (account-scoped, shared across all envs).\n */\nexport function tamerArtifactsBucketName(): string {\n  return \"tamer-artifacts\";\n}\n\n/** Object key prefix for an env's artifacts in the shared bucket. */\nexport function tamerArtifactsKeyPrefix(env: string): string {\n  return `${env}/`;\n}\n\nexport async function findTamerArtifactsBucket(\n  api: CFApiClient,\n): Promise<{ name: string; creation_date: string } | undefined> {\n  const name = tamerArtifactsBucketName();\n  const all = await api.r2ListAll();\n  return all.find((b) => b.name === name);\n}\n\n/** Create the bucket if missing. Idempotent — re-runs are safe. */\nexport async function ensureTamerArtifactsBucket(\n  api: CFApiClient,\n): Promise<string> {\n  const existing = await findTamerArtifactsBucket(api);\n  const name = tamerArtifactsBucketName();\n  if (existing) return name;\n  await api.r2Create(name);\n  return name;\n}\n\n/**\n * Best-effort delete of an env's objects from the shared artifacts bucket.\n * Objects under `{env}/` prefix are deleted; the bucket itself persists for\n * other envs. Requires R2 S3 credentials.\n */\nexport async function deleteEnvArtifacts(\n  api: CFApiClient,\n  env: string,\n): Promise<boolean> {\n  const existing = await findTamerArtifactsBucket(api);\n  if (!existing) return false;\n  const name = existing.name;\n  const accountId = api.getAccountId();\n  const s3creds = r2S3CredentialsFromEnv();\n  if (s3creds) {\n    try {\n      console.log(\n        `R2: deleting artifacts for env \"${env}\" from shared bucket \"${name}\"…`,\n      );\n      // Note: emptyR2BucketViaS3 deletes ALL objects. For env-scoped cleanup\n      // we'd need prefix-scoped S3 deletion. For now, artifacts are disposable\n      // build bundles — skip per-env cleanup and let them age out.\n      console.log(\n        `R2: skipped per-env artifact cleanup (disposable build bundles). Set R2_ACCESS_KEY_ID and R2_SECRET_ACCESS_KEY + use dashboard to clean manually if needed.`,\n      );\n    } catch (e) {\n      console.warn(\n        `R2: artifact cleanup failed for env \"${env}\":`,\n        e instanceof Error ? e.message : e,\n      );\n    }\n  } else {\n    console.log(\n      `R2: skipped artifact cleanup for env \"${env}\" (no S3 credentials; disposable build bundles).`,\n    );\n  }\n  return true;\n}\n"],"mappings":";;;;;;;;;AAYA,SAAgB,2BAAmC;AACjD,QAAO;;;AAIT,SAAgB,wBAAwB,KAAqB;AAC3D,QAAO,GAAG,IAAI;;AAGhB,eAAsB,yBACpB,KAC8D;CAC9D,MAAM,OAAO,0BAA0B;AAEvC,SADY,MAAM,IAAI,WAAW,EACtB,MAAM,MAAM,EAAE,SAAS,KAAK;;;AAIzC,eAAsB,2BACpB,KACiB;CACjB,MAAM,WAAW,MAAM,yBAAyB,IAAI;CACpD,MAAM,OAAO,0BAA0B;AACvC,KAAI,SAAU,QAAO;AACrB,OAAM,IAAI,SAAS,KAAK;AACxB,QAAO;;;;;;;AAQT,eAAsB,mBACpB,KACA,KACkB;CAClB,MAAM,WAAW,MAAM,yBAAyB,IAAI;AACpD,KAAI,CAAC,SAAU,QAAO;CACtB,MAAM,OAAO,SAAS;AACJ,KAAI,cAAc;AAEpC,KADgB,wBAAwB,CAEtC,KAAI;AACF,UAAQ,IACN,mCAAmC,IAAI,wBAAwB,KAAK,IACrE;AAID,UAAQ,IACN,8JACD;UACM,GAAG;AACV,UAAQ,KACN,wCAAwC,IAAI,KAC5C,aAAa,QAAQ,EAAE,UAAU,EAClC;;KAGH,SAAQ,IACN,yCAAyC,IAAI,kDAC9C;AAEH,QAAO"}
+{"version":3,"file":"tamerArtifactsR2--lL7OBaD.mjs","names":[],"sources":["../src/core/state/tamerArtifactsR2.ts"],"sourcesContent":["import type { CFApiClient } from \"../api/CFApiClient.js\";\nimport {\n  emptyR2BucketViaS3,\n  r2S3CredentialsFromEnv,\n} from \"../../features/r2/r2S3EmptyBucket.js\";\n\n/**\n * Account-scoped R2 bucket that holds Tamer-managed artifacts (built bundles,\n * keyed `{env}/{resource-type}/{name}/{version}/...`). Owned by Tamer itself,\n * not by any worker in `tamer.config.ts`. Created once on `tamer bootstrap`\n * (account-scoped, shared across all envs).\n */\nexport function tamerArtifactsBucketName(): string {\n  return \"tamer-artifacts\";\n}\n\n/** Object key prefix for an env's artifacts in the shared bucket. */\nexport function tamerArtifactsKeyPrefix(env: string): string {\n  return `${env}/`;\n}\n\nexport async function findTamerArtifactsBucket(\n  api: CFApiClient,\n): Promise<{ name: string; creation_date: string } | undefined> {\n  const name = tamerArtifactsBucketName();\n  const all = await api.r2ListAll();\n  return all.find((b) => b.name === name);\n}\n\n/** Create the bucket if missing. Idempotent — re-runs are safe. */\nexport async function ensureTamerArtifactsBucket(\n  api: CFApiClient,\n): Promise<string> {\n  const existing = await findTamerArtifactsBucket(api);\n  const name = tamerArtifactsBucketName();\n  if (existing) return name;\n  await api.r2Create(name);\n  return name;\n}\n\n/**\n * Best-effort delete of an env's objects from the shared artifacts bucket.\n * Objects under `{env}/` prefix are deleted; the bucket itself persists for\n * other envs. Requires R2 S3 credentials.\n */\nexport async function deleteEnvArtifacts(\n  api: CFApiClient,\n  env: string,\n): Promise<boolean> {\n  const existing = await findTamerArtifactsBucket(api);\n  if (!existing) return false;\n  const name = existing.name;\n  const accountId = api.getAccountId();\n  const s3creds = r2S3CredentialsFromEnv();\n  if (s3creds) {\n    try {\n      console.log(\n        `R2: deleting artifacts for env \"${env}\" from shared bucket \"${name}\"…`,\n      );\n      // Note: emptyR2BucketViaS3 deletes ALL objects. For env-scoped cleanup\n      // we'd need prefix-scoped S3 deletion. For now, artifacts are disposable\n      // build bundles — skip per-env cleanup and let them age out.\n      console.log(\n        `R2: skipped per-env artifact cleanup (disposable build bundles). Set R2_ACCESS_KEY_ID and R2_SECRET_ACCESS_KEY + use dashboard to clean manually if needed.`,\n      );\n    } catch (e) {\n      console.warn(\n        `R2: artifact cleanup failed for env \"${env}\":`,\n        e instanceof Error ? e.message : e,\n      );\n    }\n  } else {\n    console.log(\n      `R2: skipped artifact cleanup for env \"${env}\" (no S3 credentials; disposable build bundles).`,\n    );\n  }\n  return true;\n}\n"],"mappings":";;;;;;;;;AAYA,SAAgB,2BAAmC;AACjD,QAAO;;;AAIT,SAAgB,wBAAwB,KAAqB;AAC3D,QAAO,GAAG,IAAI;;AAGhB,eAAsB,yBACpB,KAC8D;CAC9D,MAAM,OAAO,0BAA0B;AAEvC,SADY,MAAM,IAAI,WAAW,EACtB,MAAM,MAAM,EAAE,SAAS,KAAK;;;AAIzC,eAAsB,2BACpB,KACiB;CACjB,MAAM,WAAW,MAAM,yBAAyB,IAAI;CACpD,MAAM,OAAO,0BAA0B;AACvC,KAAI,SAAU,QAAO;AACrB,OAAM,IAAI,SAAS,KAAK;AACxB,QAAO;;;;;;;AAQT,eAAsB,mBACpB,KACA,KACkB;CAClB,MAAM,WAAW,MAAM,yBAAyB,IAAI;AACpD,KAAI,CAAC,SAAU,QAAO;CACtB,MAAM,OAAO,SAAS;AACJ,KAAI,cAAc;AAEpC,KADgB,wBAAwB,CAEtC,KAAI;AACF,UAAQ,IACN,mCAAmC,IAAI,wBAAwB,KAAK,IACrE;AAID,UAAQ,IACN,8JACD;UACM,GAAG;AACV,UAAQ,KACN,wCAAwC,IAAI,KAC5C,aAAa,QAAQ,EAAE,UAAU,EAClC;;KAGH,SAAQ,IACN,yCAAyC,IAAI,kDAC9C;AAEH,QAAO"}

package/dist/{tenant-2XTWe9j0.mjs → tenant-BH_JoT9H.mjs}

@@ -1,4 +1,4 @@
-import { $ as CFApiClient, b as StateManager, et as cloudflareAccountIdFromEnv, it as loadConfig, k as stackNameForConfig } from "./tamer.mjs";
+import { $ as cloudflareAccountIdFromEnv, O as stackNameForConfig, Q as CFApiClient, rt as loadConfig, y as StateManager } from "./tamer.mjs";
 
 //#region src/cli/commands/tenant.ts
 /**
@@ -59,4 +59,4 @@ async function runTenantStatus(options) {
 
 //#endregion
 export { runTenantList, runTenantStatus };
-//# sourceMappingURL=tenant-2XTWe9j0.mjs.map
+//# sourceMappingURL=tenant-BH_JoT9H.mjs.map

package/dist/{tenant-2XTWe9j0.mjs.map → tenant-BH_JoT9H.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"tenant-2XTWe9j0.mjs","names":[],"sources":["../src/cli/commands/tenant.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\n\n/**\n * `tamer tenant list` — lists all provisioned tenants for an env.\n * `tamer tenant status --product X --workspace Y` — shows one tenant's details.\n */\nexport async function runTenantList(options: {\n  env?: string;\n  configPath?: string;\n  json?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant list: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenants = state.listTenants();\n\n  if (options.json) {\n    console.log(JSON.stringify(tenants, null, 2));\n    return;\n  }\n\n  if (tenants.length === 0) {\n    console.log(`No tenants provisioned for env ${env}.`);\n    return;\n  }\n\n  console.log(`\\nTenants for env ${env} (${tenants.length}):\\n`);\n  console.log(\n    `${\"Product:Workspace\".padEnd(30)} ${\"Status\".padEnd(12)} ${\"Script\".padEnd(40)} Shards`,\n  );\n  console.log(`${\"─\".repeat(30)} ${\"─\".repeat(12)} ${\"─\".repeat(40)} ${\"─\".repeat(10)}`);\n\n  for (const t of tenants.sort((a, b) =>\n    `${a.product}:${a.workspace}`.localeCompare(`${b.product}:${b.workspace}`),\n  )) {\n    const key = `${t.product}:${t.workspace}`;\n    const shards = t.d1Shards?.length ?? 0;\n    console.log(\n      `${key.padEnd(30)} ${t.provisioningStatus.padEnd(12)} ${(t.scriptName ?? \"\").padEnd(40)} ${shards}`,\n    );\n  }\n  console.log(\"\");\n}\n\nexport async function runTenantStatus(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant status: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n\n  console.log(`\\nTenant: ${tenant.product}:${tenant.workspace}`);\n  console.log(`  Status:              ${tenant.provisioningStatus}`);\n  console.log(`  Dispatch namespace:  ${tenant.dispatchNamespaceName}`);\n  console.log(`  Script:              ${tenant.scriptName}`);\n  console.log(`  Created:             ${tenant.createdAt}`);\n  console.log(`  Updated:             ${tenant.updatedAt}`);\n\n  if (tenant.d1Shards && tenant.d1Shards.length > 0) {\n    console.log(`\\n  D1 Shards (${tenant.d1Shards.length}):`);\n    for (const shard of tenant.d1Shards) {\n      console.log(`    ${shard.role.padEnd(16)} ${shard.derivedName} (${shard.cfId})`);\n    }\n  }\n  console.log(\"\");\n}\n"],"mappings":";;;;;;;AAUA,eAAsB,cAAc,SAIlB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,aAAa;AAEnC,KAAI,QAAQ,MAAM;AAChB,UAAQ,IAAI,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AAC7C;;AAGF,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IAAI,kCAAkC,IAAI,GAAG;AACrD;;AAGF,SAAQ,IAAI,qBAAqB,IAAI,IAAI,QAAQ,OAAO,MAAM;AAC9D,SAAQ,IACN,GAAG,oBAAoB,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,SACjF;AACD,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,GAAG;AAEtF,MAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,MAC/B,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,cAAc,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,CAC3E,EAAE;EACD,MAAM,MAAM,GAAG,EAAE,QAAQ,GAAG,EAAE;EAC9B,MAAM,SAAS,EAAE,UAAU,UAAU;AACrC,UAAQ,IACN,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,EAAE,mBAAmB,OAAO,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,OAAO,GAAG,CAAC,GAAG,SAC5F;;AAEH,SAAQ,IAAI,GAAG;;AAGjB,eAAsB,gBAAgB,SAKpB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,mCAAmC;CAErD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAGH,SAAQ,IAAI,aAAa,OAAO,QAAQ,GAAG,OAAO,YAAY;AAC9D,SAAQ,IAAI,0BAA0B,OAAO,qBAAqB;AAClE,SAAQ,IAAI,0BAA0B,OAAO,wBAAwB;AACrE,SAAQ,IAAI,0BAA0B,OAAO,aAAa;AAC1D,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AACzD,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AAEzD,KAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,UAAQ,IAAI,kBAAkB,OAAO,SAAS,OAAO,IAAI;AACzD,OAAK,MAAM,SAAS,OAAO,SACzB,SAAQ,IAAI,OAAO,MAAM,KAAK,OAAO,GAAG,CAAC,GAAG,MAAM,YAAY,IAAI,MAAM,KAAK,GAAG;;AAGpF,SAAQ,IAAI,GAAG"}
+{"version":3,"file":"tenant-BH_JoT9H.mjs","names":[],"sources":["../src/cli/commands/tenant.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\n\n/**\n * `tamer tenant list` — lists all provisioned tenants for an env.\n * `tamer tenant status --product X --workspace Y` — shows one tenant's details.\n */\nexport async function runTenantList(options: {\n  env?: string;\n  configPath?: string;\n  json?: boolean;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant list: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenants = state.listTenants();\n\n  if (options.json) {\n    console.log(JSON.stringify(tenants, null, 2));\n    return;\n  }\n\n  if (tenants.length === 0) {\n    console.log(`No tenants provisioned for env ${env}.`);\n    return;\n  }\n\n  console.log(`\\nTenants for env ${env} (${tenants.length}):\\n`);\n  console.log(\n    `${\"Product:Workspace\".padEnd(30)} ${\"Status\".padEnd(12)} ${\"Script\".padEnd(40)} Shards`,\n  );\n  console.log(`${\"─\".repeat(30)} ${\"─\".repeat(12)} ${\"─\".repeat(40)} ${\"─\".repeat(10)}`);\n\n  for (const t of tenants.sort((a, b) =>\n    `${a.product}:${a.workspace}`.localeCompare(`${b.product}:${b.workspace}`),\n  )) {\n    const key = `${t.product}:${t.workspace}`;\n    const shards = t.d1Shards?.length ?? 0;\n    console.log(\n      `${key.padEnd(30)} ${t.provisioningStatus.padEnd(12)} ${(t.scriptName ?? \"\").padEnd(40)} ${shards}`,\n    );\n  }\n  console.log(\"\");\n}\n\nexport async function runTenantStatus(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant status: --env is required\");\n  }\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n\n  console.log(`\\nTenant: ${tenant.product}:${tenant.workspace}`);\n  console.log(`  Status:              ${tenant.provisioningStatus}`);\n  console.log(`  Dispatch namespace:  ${tenant.dispatchNamespaceName}`);\n  console.log(`  Script:              ${tenant.scriptName}`);\n  console.log(`  Created:             ${tenant.createdAt}`);\n  console.log(`  Updated:             ${tenant.updatedAt}`);\n\n  if (tenant.d1Shards && tenant.d1Shards.length > 0) {\n    console.log(`\\n  D1 Shards (${tenant.d1Shards.length}):`);\n    for (const shard of tenant.d1Shards) {\n      console.log(`    ${shard.role.padEnd(16)} ${shard.derivedName} (${shard.cfId})`);\n    }\n  }\n  console.log(\"\");\n}\n"],"mappings":";;;;;;;AAUA,eAAsB,cAAc,SAIlB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,UAAU,MAAM,aAAa;AAEnC,KAAI,QAAQ,MAAM;AAChB,UAAQ,IAAI,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AAC7C;;AAGF,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IAAI,kCAAkC,IAAI,GAAG;AACrD;;AAGF,SAAQ,IAAI,qBAAqB,IAAI,IAAI,QAAQ,OAAO,MAAM;AAC9D,SAAQ,IACN,GAAG,oBAAoB,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,GAAG,SAAS,OAAO,GAAG,CAAC,SACjF;AACD,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,GAAG;AAEtF,MAAK,MAAM,KAAK,QAAQ,MAAM,GAAG,MAC/B,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,cAAc,GAAG,EAAE,QAAQ,GAAG,EAAE,YAAY,CAC3E,EAAE;EACD,MAAM,MAAM,GAAG,EAAE,QAAQ,GAAG,EAAE;EAC9B,MAAM,SAAS,EAAE,UAAU,UAAU;AACrC,UAAQ,IACN,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,EAAE,mBAAmB,OAAO,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,OAAO,GAAG,CAAC,GAAG,SAC5F;;AAEH,SAAQ,IAAI,GAAG;;AAGjB,eAAsB,gBAAgB,SAKpB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,mCAAmC;CAErD,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAGH,SAAQ,IAAI,aAAa,OAAO,QAAQ,GAAG,OAAO,YAAY;AAC9D,SAAQ,IAAI,0BAA0B,OAAO,qBAAqB;AAClE,SAAQ,IAAI,0BAA0B,OAAO,wBAAwB;AACrE,SAAQ,IAAI,0BAA0B,OAAO,aAAa;AAC1D,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AACzD,SAAQ,IAAI,0BAA0B,OAAO,YAAY;AAEzD,KAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,UAAQ,IAAI,kBAAkB,OAAO,SAAS,OAAO,IAAI;AACzD,OAAK,MAAM,SAAS,OAAO,SACzB,SAAQ,IAAI,OAAO,MAAM,KAAK,OAAO,GAAG,CAAC,GAAG,MAAM,YAAY,IAAI,MAAM,KAAK,GAAG;;AAGpF,SAAQ,IAAI,GAAG"}

package/dist/{tenant-migrate-B-n4ppSk.mjs → tenant-migrate-C8OXJtYf.mjs}

@@ -1,6 +1,6 @@
-import { $ as CFApiClient, R as wranglerConfigCliArgs, b as StateManager, et as cloudflareAccountIdFromEnv, h as namingFromConfig, it as loadConfig, k as stackNameForConfig } from "./tamer.mjs";
-import { n as spawnWranglerSync } from "./wranglerSpawn-Dg-lr-rf.mjs";
-import { resolveTenantD1Bindings } from "./resolveTenantBindings-CXLwAG0F.mjs";
+import { $ as cloudflareAccountIdFromEnv, L as wranglerConfigCliArgs, O as stackNameForConfig, Q as CFApiClient, m as namingFromConfig, rt as loadConfig, y as StateManager } from "./tamer.mjs";
+import { n as spawnWranglerSync } from "./wranglerSpawn-DX7fppPf.mjs";
+import { resolveTenantD1Bindings } from "./resolveTenantBindings-C-3w6e22.mjs";
 import { join, resolve } from "path";
 import { unlinkSync, writeFileSync } from "fs";
 
@@ -43,7 +43,7 @@ async function runTenantMigrate(options) {
 			skipped++;
 			continue;
 		}
-		const { getConfigBaseDir } = await import("./loader-DY6STQU3.mjs");
+		const { getConfigBaseDir } = await import("./loader-O14iKXe5.mjs");
 		const migDir = resolve(getConfigBaseDir(), info.migrationsDir);
 		const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);
 		const tempConfig = {
@@ -83,4 +83,4 @@ async function runTenantMigrate(options) {
 
 //#endregion
 export { runTenantMigrate };
-//# sourceMappingURL=tenant-migrate-B-n4ppSk.mjs.map
+//# sourceMappingURL=tenant-migrate-C8OXJtYf.mjs.map

package/dist/{tenant-migrate-B-n4ppSk.mjs.map → tenant-migrate-C8OXJtYf.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"tenant-migrate-B-n4ppSk.mjs","names":[],"sources":["../src/cli/commands/tenant-migrate.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { resolveTenantD1Bindings } from \"../../core/tenant/resolveTenantBindings.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { writeFileSync, unlinkSync } from \"fs\";\nimport { join, resolve } from \"path\";\n\n/**\n * `tamer wfp tenant migrate --env dev --product X --workspace Y`\n *\n * Runs D1 migrations on each shard for the named tenant. Matches shard roles\n * to `resources.d1[].registryRole` → `migrationsDir` to find the migration\n * source directory. Writes a temporary wrangler.json with the shard binding\n * and invokes `wrangler d1 migrations apply --remote`.\n */\nexport async function runTenantMigrate(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant migrate: --env is required\");\n  }\n  if (env === \"local\") {\n    throw new Error(\"tenant migrate requires a non-local --env.\");\n  }\n\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n  if (!tenant.d1Shards || tenant.d1Shards.length === 0) {\n    console.log(`Tenant \"${options.product}:${options.workspace}\" has no D1 shards.`);\n    return;\n  }\n\n  const shardBindings = config.tenant.shardBindings ?? {};\n  const d1Bindings = resolveTenantD1Bindings(config, tenant.d1Shards, naming);\n\n  let migrated = 0;\n  let skipped = 0;\n\n  for (let i = 0; i < tenant.d1Shards.length; i++) {\n    const shard = tenant.d1Shards[i]!;\n    const binding = d1Bindings[i]!;\n    const info = shardBindings[shard.role];\n    if (!info?.migrationsDir) {\n      console.log(`  migrate: skipping ${shard.role} (no migrationsDir in shardBindings)`);\n      skipped++;\n      continue;\n    }\n\n    // Resolve migrationsDir relative to the config base directory\n    const { getConfigBaseDir } = await import(\"../../core/config/loader.js\");\n    const baseDir = getConfigBaseDir();\n    const migDir = resolve(baseDir, info.migrationsDir);\n    const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);\n\n    const tempConfig = {\n      name: `tenant-migrate-${shard.role}`,\n      d1_databases: [{ binding: binding.name, database_id: shard.cfId, database_name: shard.derivedName, migrations_dir: \".\" }],\n      compatibility_date: config.compatibility_date ?? \"2024-01-01\",\n    };\n    writeFileSync(tempWranglerPath, JSON.stringify(tempConfig, null, 2));\n\n    const migrateArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(`wrangler.${shard.role}.json`),\n      \"d1\",\n      \"migrations\",\n      \"apply\",\n      binding.name,\n      \"--remote\",\n    ];\n    if (info.migrationsTable) {\n      migrateArgs.push(\"--migrations-table\", info.migrationsTable);\n    }\n\n    console.log(`  migrate: applying for ${shard.role} (${shard.derivedName})...`);\n    const result = spawnWranglerSync(migrateArgs, {\n      cwd: migDir,\n      stdio: \"inherit\",\n    });\n    if (result.status === 0) {\n      migrated++;\n    } else {\n      console.warn(`  migrate: failed for ${shard.role} (exit ${result.status})`);\n    }\n    try {\n      unlinkSync(tempWranglerPath);\n    } catch {\n      /* best-effort */\n    }\n  }\n\n  console.log(\n    `\\nMigrations complete: ${migrated} shard(s) migrated, ${skipped} skipped.`,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBAAiB,SAKrB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,oCAAoC;AAEtD,KAAI,QAAQ,QACV,OAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAEH,KAAI,CAAC,OAAO,YAAY,OAAO,SAAS,WAAW,GAAG;AACpD,UAAQ,IAAI,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB;AACjF;;CAGF,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;CACvD,MAAM,aAAa,wBAAwB,QAAQ,OAAO,UAAU,OAAO;CAE3E,IAAI,WAAW;CACf,IAAI,UAAU;AAEd,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,SAAS,QAAQ,KAAK;EAC/C,MAAM,QAAQ,OAAO,SAAS;EAC9B,MAAM,UAAU,WAAW;EAC3B,MAAM,OAAO,cAAc,MAAM;AACjC,MAAI,CAAC,MAAM,eAAe;AACxB,WAAQ,IAAI,uBAAuB,MAAM,KAAK,sCAAsC;AACpF;AACA;;EAIF,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAE1C,MAAM,SAAS,QADC,kBAAkB,EACF,KAAK,cAAc;EACnD,MAAM,mBAAmB,KAAK,QAAQ,YAAY,MAAM,KAAK,OAAO;EAEpE,MAAM,aAAa;GACjB,MAAM,kBAAkB,MAAM;GAC9B,cAAc,CAAC;IAAE,SAAS,QAAQ;IAAM,aAAa,MAAM;IAAM,eAAe,MAAM;IAAa,gBAAgB;IAAK,CAAC;GACzH,oBAAoB,OAAO,sBAAsB;GAClD;AACD,gBAAc,kBAAkB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;EAEpE,MAAM,cAAc;GAClB;GACA,GAAG,sBAAsB,YAAY,MAAM,KAAK,OAAO;GACvD;GACA;GACA;GACA,QAAQ;GACR;GACD;AACD,MAAI,KAAK,gBACP,aAAY,KAAK,sBAAsB,KAAK,gBAAgB;AAG9D,UAAQ,IAAI,2BAA2B,MAAM,KAAK,IAAI,MAAM,YAAY,MAAM;EAC9E,MAAM,SAAS,kBAAkB,aAAa;GAC5C,KAAK;GACL,OAAO;GACR,CAAC;AACF,MAAI,OAAO,WAAW,EACpB;MAEA,SAAQ,KAAK,yBAAyB,MAAM,KAAK,SAAS,OAAO,OAAO,GAAG;AAE7E,MAAI;AACF,cAAW,iBAAiB;UACtB;;AAKV,SAAQ,IACN,0BAA0B,SAAS,sBAAsB,QAAQ,WAClE"}
+{"version":3,"file":"tenant-migrate-C8OXJtYf.mjs","names":[],"sources":["../src/cli/commands/tenant-migrate.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { resolveTenantD1Bindings } from \"../../core/tenant/resolveTenantBindings.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { writeFileSync, unlinkSync } from \"fs\";\nimport { join, resolve } from \"path\";\n\n/**\n * `tamer wfp tenant migrate --env dev --product X --workspace Y`\n *\n * Runs D1 migrations on each shard for the named tenant. Matches shard roles\n * to `resources.d1[].registryRole` → `migrationsDir` to find the migration\n * source directory. Writes a temporary wrangler.json with the shard binding\n * and invokes `wrangler d1 migrations apply --remote`.\n */\nexport async function runTenantMigrate(options: {\n  env?: string;\n  product: string;\n  workspace: string;\n  configPath?: string;\n}): Promise<void> {\n  const env = options.env;\n  if (!env) {\n    throw new Error(\"tenant migrate: --env is required\");\n  }\n  if (env === \"local\") {\n    throw new Error(\"tenant migrate requires a non-local --env.\");\n  }\n\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n\n  const tenant = state.getTenant(options.product, options.workspace);\n  if (!tenant) {\n    throw new Error(\n      `Tenant \"${options.product}:${options.workspace}\" not found in env ${env}.`,\n    );\n  }\n  if (!tenant.d1Shards || tenant.d1Shards.length === 0) {\n    console.log(`Tenant \"${options.product}:${options.workspace}\" has no D1 shards.`);\n    return;\n  }\n\n  const shardBindings = config.tenant.shardBindings ?? {};\n  const d1Bindings = resolveTenantD1Bindings(config, tenant.d1Shards, naming);\n\n  let migrated = 0;\n  let skipped = 0;\n\n  for (let i = 0; i < tenant.d1Shards.length; i++) {\n    const shard = tenant.d1Shards[i]!;\n    const binding = d1Bindings[i]!;\n    const info = shardBindings[shard.role];\n    if (!info?.migrationsDir) {\n      console.log(`  migrate: skipping ${shard.role} (no migrationsDir in shardBindings)`);\n      skipped++;\n      continue;\n    }\n\n    // Resolve migrationsDir relative to the config base directory\n    const { getConfigBaseDir } = await import(\"../../core/config/loader.js\");\n    const baseDir = getConfigBaseDir();\n    const migDir = resolve(baseDir, info.migrationsDir);\n    const tempWranglerPath = join(migDir, `wrangler.${shard.role}.json`);\n\n    const tempConfig = {\n      name: `tenant-migrate-${shard.role}`,\n      d1_databases: [{ binding: binding.name, database_id: shard.cfId, database_name: shard.derivedName, migrations_dir: \".\" }],\n      compatibility_date: config.compatibility_date ?? \"2024-01-01\",\n    };\n    writeFileSync(tempWranglerPath, JSON.stringify(tempConfig, null, 2));\n\n    const migrateArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(`wrangler.${shard.role}.json`),\n      \"d1\",\n      \"migrations\",\n      \"apply\",\n      binding.name,\n      \"--remote\",\n    ];\n    if (info.migrationsTable) {\n      migrateArgs.push(\"--migrations-table\", info.migrationsTable);\n    }\n\n    console.log(`  migrate: applying for ${shard.role} (${shard.derivedName})...`);\n    const result = spawnWranglerSync(migrateArgs, {\n      cwd: migDir,\n      stdio: \"inherit\",\n    });\n    if (result.status === 0) {\n      migrated++;\n    } else {\n      console.warn(`  migrate: failed for ${shard.role} (exit ${result.status})`);\n    }\n    try {\n      unlinkSync(tempWranglerPath);\n    } catch {\n      /* best-effort */\n    }\n  }\n\n  console.log(\n    `\\nMigrations complete: ${migrated} shard(s) migrated, ${skipped} skipped.`,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBAAiB,SAKrB;CAChB,MAAM,MAAM,QAAQ;AACpB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,oCAAoC;AAEtD,KAAI,QAAQ,QACV,OAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,SAAS,MAAM,UAAU,QAAQ,SAAS,QAAQ,UAAU;AAClE,KAAI,CAAC,OACH,OAAM,IAAI,MACR,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB,IAAI,GAC1E;AAEH,KAAI,CAAC,OAAO,YAAY,OAAO,SAAS,WAAW,GAAG;AACpD,UAAQ,IAAI,WAAW,QAAQ,QAAQ,GAAG,QAAQ,UAAU,qBAAqB;AACjF;;CAGF,MAAM,gBAAgB,OAAO,OAAO,iBAAiB,EAAE;CACvD,MAAM,aAAa,wBAAwB,QAAQ,OAAO,UAAU,OAAO;CAE3E,IAAI,WAAW;CACf,IAAI,UAAU;AAEd,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,SAAS,QAAQ,KAAK;EAC/C,MAAM,QAAQ,OAAO,SAAS;EAC9B,MAAM,UAAU,WAAW;EAC3B,MAAM,OAAO,cAAc,MAAM;AACjC,MAAI,CAAC,MAAM,eAAe;AACxB,WAAQ,IAAI,uBAAuB,MAAM,KAAK,sCAAsC;AACpF;AACA;;EAIF,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAE1C,MAAM,SAAS,QADC,kBAAkB,EACF,KAAK,cAAc;EACnD,MAAM,mBAAmB,KAAK,QAAQ,YAAY,MAAM,KAAK,OAAO;EAEpE,MAAM,aAAa;GACjB,MAAM,kBAAkB,MAAM;GAC9B,cAAc,CAAC;IAAE,SAAS,QAAQ;IAAM,aAAa,MAAM;IAAM,eAAe,MAAM;IAAa,gBAAgB;IAAK,CAAC;GACzH,oBAAoB,OAAO,sBAAsB;GAClD;AACD,gBAAc,kBAAkB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;EAEpE,MAAM,cAAc;GAClB;GACA,GAAG,sBAAsB,YAAY,MAAM,KAAK,OAAO;GACvD;GACA;GACA;GACA,QAAQ;GACR;GACD;AACD,MAAI,KAAK,gBACP,aAAY,KAAK,sBAAsB,KAAK,gBAAgB;AAG9D,UAAQ,IAAI,2BAA2B,MAAM,KAAK,IAAI,MAAM,YAAY,MAAM;EAC9E,MAAM,SAAS,kBAAkB,aAAa;GAC5C,KAAK;GACL,OAAO;GACR,CAAC;AACF,MAAI,OAAO,WAAW,EACpB;MAEA,SAAQ,KAAK,yBAAyB,MAAM,KAAK,SAAS,OAAO,OAAO,GAAG;AAE7E,MAAI;AACF,cAAW,iBAAiB;UACtB;;AAKV,SAAQ,IACN,0BAA0B,SAAS,sBAAsB,QAAQ,WAClE"}

package/dist/{types-BCTgIotG.mjs → types-ChGaMTT3.mjs}

@@ -1,8 +1,8 @@
-import { $ as CFApiClient, P as resolveWorkerConfig, R as wranglerConfigCliArgs, _ as fetchStackImports, b as StateManager, et as cloudflareAccountIdFromEnv, h as namingFromConfig, it as loadConfig, k as stackNameForConfig, nt as getConfigBaseDir, rt as getWorkers } from "./tamer.mjs";
-import "./registry-CRgobiU4.mjs";
-import "./r2S3EmptyBucket-CDE2lTM8.mjs";
-import { n as writeWranglerJson, t as generateWranglerConfig } from "./generator-Cu5XUkjr.mjs";
-import { n as spawnWranglerSync } from "./wranglerSpawn-Dg-lr-rf.mjs";
+import { $ as cloudflareAccountIdFromEnv, L as wranglerConfigCliArgs, N as resolveWorkerConfig, O as stackNameForConfig, Q as CFApiClient, g as fetchStackImports, m as namingFromConfig, nt as getWorkers, rt as loadConfig, tt as getConfigBaseDir, y as StateManager } from "./tamer.mjs";
+import "./registry-D3heJge_.mjs";
+import "./r2S3EmptyBucket-OKIQdlms.mjs";
+import { n as writeWranglerJson, t as generateWranglerConfig } from "./generator--De7tWLA.mjs";
+import { n as spawnWranglerSync } from "./wranglerSpawn-DX7fppPf.mjs";
 
 //#region src/cli/commands/types.ts
 async function runTypes(options) {
@@ -39,4 +39,4 @@ async function runTypes(options) {
 
 //#endregion
 export { runTypes };
-//# sourceMappingURL=types-BCTgIotG.mjs.map
+//# sourceMappingURL=types-ChGaMTT3.mjs.map

package/dist/{types-BCTgIotG.mjs.map → types-ChGaMTT3.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"types-BCTgIotG.mjs","names":[],"sources":["../src/cli/commands/types.ts"],"sourcesContent":["import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport {\n  generateWranglerConfig,\n  writeWranglerJson,\n} from \"../../core/wrangler/generator.js\";\n\nexport async function runTypes(options: {\n  worker?: string;\n  env?: string;\n  configPath?: string;\n}): Promise<void> {\n  const workerFilter = options.worker;\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  const imports = await fetchStackImports(api, config, env);\n\n  const workers = await getWorkers(config, baseDir);\n  const toRun = workerFilter\n    ? workers.filter(([k]) => k === workerFilter)\n    : workers;\n\n  if (toRun.length === 0) {\n    throw new Error(\n      workerFilter\n        ? `Worker \"${workerFilter}\" not found`\n        : \"No workers configured\",\n    );\n  }\n\n  for (const [workerKey, workerConfig] of toRun) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { imports },\n    );\n    const wranglerConfig = generateWranglerConfig(resolved, state, naming);\n    writeWranglerJson(resolved.workerDir, wranglerConfig, resolved.wranglerOutFile);\n\n    const typesArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(resolved.wranglerOutFile),\n      \"types\",\n    ];\n    const result = spawnWranglerSync(typesArgs, {\n      cwd: resolved.workerDir,\n      stdio: \"inherit\",\n    });\n    if (result.status !== 0) {\n      throw new Error(`wrangler types failed for ${workerKey}`);\n    }\n    console.log(`Generated types for ${workerKey}`);\n  }\n}\n"],"mappings":";;;;;;;AAeA,eAAsB,SAAS,SAIb;CAChB,MAAM,eAAe,QAAQ;CAC7B,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI;CAEzD,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,QAAQ,eACV,QAAQ,QAAQ,CAAC,OAAO,MAAM,aAAa,GAC3C;AAEJ,KAAI,MAAM,WAAW,EACnB,OAAM,IAAI,MACR,eACI,WAAW,aAAa,eACxB,wBACL;AAGH,MAAK,MAAM,CAAC,WAAW,iBAAiB,OAAO;EAC7C,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,cACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,CACZ;EACD,MAAM,iBAAiB,uBAAuB,UAAU,OAAO,OAAO;AACtE,oBAAkB,SAAS,WAAW,gBAAgB,SAAS,gBAAgB;AAW/E,MAJe,kBALG;GAChB;GACA,GAAG,sBAAsB,SAAS,gBAAgB;GAClD;GACD,EAC2C;GAC1C,KAAK,SAAS;GACd,OAAO;GACR,CAAC,CACS,WAAW,EACpB,OAAM,IAAI,MAAM,6BAA6B,YAAY;AAE3D,UAAQ,IAAI,uBAAuB,YAAY"}
+{"version":3,"file":"types-ChGaMTT3.mjs","names":[],"sources":["../src/cli/commands/types.ts"],"sourcesContent":["import { loadConfig, getWorkers, getConfigBaseDir } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { wranglerConfigCliArgs } from \"../../core/wrangler/wranglerOutFile.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport {\n  generateWranglerConfig,\n  writeWranglerJson,\n} from \"../../core/wrangler/generator.js\";\n\nexport async function runTypes(options: {\n  worker?: string;\n  env?: string;\n  configPath?: string;\n}): Promise<void> {\n  const workerFilter = options.worker;\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n\n  const config = await loadConfig(configPath, { env });\n  const baseDir = getConfigBaseDir();\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const naming = namingFromConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  const imports = await fetchStackImports(api, config, env);\n\n  const workers = await getWorkers(config, baseDir);\n  const toRun = workerFilter\n    ? workers.filter(([k]) => k === workerFilter)\n    : workers;\n\n  if (toRun.length === 0) {\n    throw new Error(\n      workerFilter\n        ? `Worker \"${workerFilter}\" not found`\n        : \"No workers configured\",\n    );\n  }\n\n  for (const [workerKey, workerConfig] of toRun) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { imports },\n    );\n    const wranglerConfig = generateWranglerConfig(resolved, state, naming);\n    writeWranglerJson(resolved.workerDir, wranglerConfig, resolved.wranglerOutFile);\n\n    const typesArgs = [\n      \"wrangler\",\n      ...wranglerConfigCliArgs(resolved.wranglerOutFile),\n      \"types\",\n    ];\n    const result = spawnWranglerSync(typesArgs, {\n      cwd: resolved.workerDir,\n      stdio: \"inherit\",\n    });\n    if (result.status !== 0) {\n      throw new Error(`wrangler types failed for ${workerKey}`);\n    }\n    console.log(`Generated types for ${workerKey}`);\n  }\n}\n"],"mappings":";;;;;;;AAeA,eAAsB,SAAS,SAIb;CAChB,MAAM,eAAe,QAAQ;CAC7B,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAE3B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,UAAU,kBAAkB;CAClC,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI;CAEzD,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,QAAQ,eACV,QAAQ,QAAQ,CAAC,OAAO,MAAM,aAAa,GAC3C;AAEJ,KAAI,MAAM,WAAW,EACnB,OAAM,IAAI,MACR,eACI,WAAW,aAAa,eACxB,wBACL;AAGH,MAAK,MAAM,CAAC,WAAW,iBAAiB,OAAO;EAC7C,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,cACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,CACZ;EACD,MAAM,iBAAiB,uBAAuB,UAAU,OAAO,OAAO;AACtE,oBAAkB,SAAS,WAAW,gBAAgB,SAAS,gBAAgB;AAW/E,MAJe,kBALG;GAChB;GACA,GAAG,sBAAsB,SAAS,gBAAgB;GAClD;GACD,EAC2C;GAC1C,KAAK,SAAS;GACd,OAAO;GACR,CAAC,CACS,WAAW,EACpB,OAAM,IAAI,MAAM,6BAA6B,YAAY;AAE3D,UAAQ,IAAI,uBAAuB,YAAY"}

package/dist/{verifyPlanFile-DrFZjkVY.mjs → verifyPlanFile-BX1NO3yj.mjs}

@@ -1,4 +1,4 @@
-import { a as readPlanFile, r as computeAttestation } from "./cloudflareSnapshot-dKYupX1L.mjs";
+import { a as readPlanFile, r as computeAttestation } from "./cloudflareSnapshot-4-UXu92B.mjs";
 
 //#region src/core/plan/verifyPlanFile.ts
 function verifyPlanFile(args) {
@@ -30,4 +30,4 @@ function verifyPlanFile(args) {
 
 //#endregion
 export { verifyPlanFile as t };
-//# sourceMappingURL=verifyPlanFile-DrFZjkVY.mjs.map
+//# sourceMappingURL=verifyPlanFile-BX1NO3yj.mjs.map

package/dist/{verifyPlanFile-DrFZjkVY.mjs.map → verifyPlanFile-BX1NO3yj.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"verifyPlanFile-DrFZjkVY.mjs","names":["reasons: string[]"],"sources":["../src/core/plan/verifyPlanFile.ts"],"sourcesContent":["/**\n * Cross-check a saved {@link PlanFile} against the current `(config, state,\n * live Cloudflare)` triple. Shared by `tamer apply --plan` and `tamer\n * destroy --plan`: both commands must refuse to execute against drifted\n * inputs unless the operator explicitly passes `--allow-stale`.\n *\n * The hashes are produced by {@link computeAttestation} (config + state)\n * and {@link hashCloudflareSnapshot} (live CF snapshot). Same algorithm on\n * both sides; if either side ever changes its canonical-JSON contract,\n * older plans must be regenerated.\n */\n\nimport type { CfiConfig, CfiState } from \"../../types.js\";\nimport { computeAttestation, readPlanFile } from \"./planFile.js\";\nimport type { PlanMode } from \"./plan.types.js\";\n\nexport function verifyPlanFile(args: {\n  /** Filesystem path passed by the operator (`--plan plan.json`). */\n  planPath: string;\n  /** \"apply\" or \"destroy\" — used for diagnostics only. */\n  command: \"apply\" | \"destroy\";\n  /**\n   * Required mode for the plan. `apply --plan` accepts only forward plans;\n   * `destroy --plan` accepts only destroy plans. Mismatch is a hard error\n   * (no `--allow-stale` override) since the actions are different.\n   */\n  expectedMode: PlanMode;\n  env: string;\n  tenantId: string;\n  config: CfiConfig;\n  stateAtPlanCheck: CfiState;\n  /**\n   * Hash of the live Cloudflare snapshot computed at run time. When the\n   * plan was generated with `attestation.cloudflareHash`, mismatches mean\n   * infra drifted out-of-band between plan and run. Omitted for\n   * `env: local` and for older plan files written before drift-aware\n   * refresh.\n   */\n  liveCloudflareHash: string | undefined;\n  allowStale: boolean;\n}): void {\n  const plan = readPlanFile(args.planPath);\n  const cmd = args.command;\n\n  if (plan.tenantId !== args.tenantId) {\n    throw new Error(\n      `${cmd} --plan: plan tenant \"${plan.tenantId}\" does not match current config tenant \"${args.tenantId}\"`,\n    );\n  }\n  if (plan.env !== args.env) {\n    throw new Error(\n      `${cmd} --plan: plan env \"${plan.env}\" does not match --env \"${args.env}\"`,\n    );\n  }\n\n  const planMode = plan.report.mode ?? \"forward\";\n  if (planMode !== args.expectedMode) {\n    throw new Error(\n      `${cmd} --plan: plan mode \"${planMode}\" does not match expected mode \"${args.expectedMode}\". ` +\n        `Use \\`tamer plan${args.expectedMode === \"destroy\" ? \" --destroy\" : \"\"} --out ${args.planPath}\\` to regenerate.`,\n    );\n  }\n\n  const current = computeAttestation(args.config, args.stateAtPlanCheck);\n  const configMatches = current.configHash === plan.attestation.configHash;\n  const stateMatches = current.stateHash === plan.attestation.stateHash;\n  const cloudflareMatches =\n    plan.attestation.cloudflareHash === undefined ||\n    args.liveCloudflareHash === undefined ||\n    plan.attestation.cloudflareHash === args.liveCloudflareHash;\n\n  if (configMatches && stateMatches && cloudflareMatches) {\n    console.log(`Plan attestation verified (${args.planPath}).`);\n    return;\n  }\n\n  const reasons: string[] = [];\n  if (!configMatches) reasons.push(\"config has changed since plan was generated\");\n  if (!stateMatches) reasons.push(\"recorded state has changed since plan was generated\");\n  if (!cloudflareMatches)\n    reasons.push(\n      \"Cloudflare-side resources drifted since plan was generated (out-of-band create/delete)\",\n    );\n  const detail = reasons.join(\"; \");\n\n  if (args.allowStale) {\n    console.warn(\n      `Plan attestation mismatch (${detail}). Proceeding anyway because --allow-stale was set.`,\n    );\n    return;\n  }\n  throw new Error(\n    `${cmd} --plan refused: ${detail}. Re-run \"tamer plan${args.expectedMode === \"destroy\" ? \" --destroy\" : \"\"} --out ${args.planPath}\" or pass --allow-stale to override.`,\n  );\n}\n"],"mappings":";;;AAgBA,SAAgB,eAAe,MAwBtB;CACP,MAAM,OAAO,aAAa,KAAK,SAAS;CACxC,MAAM,MAAM,KAAK;AAEjB,KAAI,KAAK,aAAa,KAAK,SACzB,OAAM,IAAI,MACR,GAAG,IAAI,wBAAwB,KAAK,SAAS,0CAA0C,KAAK,SAAS,GACtG;AAEH,KAAI,KAAK,QAAQ,KAAK,IACpB,OAAM,IAAI,MACR,GAAG,IAAI,qBAAqB,KAAK,IAAI,0BAA0B,KAAK,IAAI,GACzE;CAGH,MAAM,WAAW,KAAK,OAAO,QAAQ;AACrC,KAAI,aAAa,KAAK,aACpB,OAAM,IAAI,MACR,GAAG,IAAI,sBAAsB,SAAS,kCAAkC,KAAK,aAAa,qBACrE,KAAK,iBAAiB,YAAY,eAAe,GAAG,SAAS,KAAK,SAAS,mBACjG;CAGH,MAAM,UAAU,mBAAmB,KAAK,QAAQ,KAAK,iBAAiB;CACtE,MAAM,gBAAgB,QAAQ,eAAe,KAAK,YAAY;CAC9D,MAAM,eAAe,QAAQ,cAAc,KAAK,YAAY;CAC5D,MAAM,oBACJ,KAAK,YAAY,mBAAmB,UACpC,KAAK,uBAAuB,UAC5B,KAAK,YAAY,mBAAmB,KAAK;AAE3C,KAAI,iBAAiB,gBAAgB,mBAAmB;AACtD,UAAQ,IAAI,8BAA8B,KAAK,SAAS,IAAI;AAC5D;;CAGF,MAAMA,UAAoB,EAAE;AAC5B,KAAI,CAAC,cAAe,SAAQ,KAAK,8CAA8C;AAC/E,KAAI,CAAC,aAAc,SAAQ,KAAK,sDAAsD;AACtF,KAAI,CAAC,kBACH,SAAQ,KACN,yFACD;CACH,MAAM,SAAS,QAAQ,KAAK,KAAK;AAEjC,KAAI,KAAK,YAAY;AACnB,UAAQ,KACN,8BAA8B,OAAO,qDACtC;AACD;;AAEF,OAAM,IAAI,MACR,GAAG,IAAI,mBAAmB,OAAO,sBAAsB,KAAK,iBAAiB,YAAY,eAAe,GAAG,SAAS,KAAK,SAAS,sCACnI"}
+{"version":3,"file":"verifyPlanFile-BX1NO3yj.mjs","names":["reasons: string[]"],"sources":["../src/core/plan/verifyPlanFile.ts"],"sourcesContent":["/**\n * Cross-check a saved {@link PlanFile} against the current `(config, state,\n * live Cloudflare)` triple. Shared by `tamer apply --plan` and `tamer\n * destroy --plan`: both commands must refuse to execute against drifted\n * inputs unless the operator explicitly passes `--allow-stale`.\n *\n * The hashes are produced by {@link computeAttestation} (config + state)\n * and {@link hashCloudflareSnapshot} (live CF snapshot). Same algorithm on\n * both sides; if either side ever changes its canonical-JSON contract,\n * older plans must be regenerated.\n */\n\nimport type { CfiConfig, CfiState } from \"../../types.js\";\nimport { computeAttestation, readPlanFile } from \"./planFile.js\";\nimport type { PlanMode } from \"./plan.types.js\";\n\nexport function verifyPlanFile(args: {\n  /** Filesystem path passed by the operator (`--plan plan.json`). */\n  planPath: string;\n  /** \"apply\" or \"destroy\" — used for diagnostics only. */\n  command: \"apply\" | \"destroy\";\n  /**\n   * Required mode for the plan. `apply --plan` accepts only forward plans;\n   * `destroy --plan` accepts only destroy plans. Mismatch is a hard error\n   * (no `--allow-stale` override) since the actions are different.\n   */\n  expectedMode: PlanMode;\n  env: string;\n  tenantId: string;\n  config: CfiConfig;\n  stateAtPlanCheck: CfiState;\n  /**\n   * Hash of the live Cloudflare snapshot computed at run time. When the\n   * plan was generated with `attestation.cloudflareHash`, mismatches mean\n   * infra drifted out-of-band between plan and run. Omitted for\n   * `env: local` and for older plan files written before drift-aware\n   * refresh.\n   */\n  liveCloudflareHash: string | undefined;\n  allowStale: boolean;\n}): void {\n  const plan = readPlanFile(args.planPath);\n  const cmd = args.command;\n\n  if (plan.tenantId !== args.tenantId) {\n    throw new Error(\n      `${cmd} --plan: plan tenant \"${plan.tenantId}\" does not match current config tenant \"${args.tenantId}\"`,\n    );\n  }\n  if (plan.env !== args.env) {\n    throw new Error(\n      `${cmd} --plan: plan env \"${plan.env}\" does not match --env \"${args.env}\"`,\n    );\n  }\n\n  const planMode = plan.report.mode ?? \"forward\";\n  if (planMode !== args.expectedMode) {\n    throw new Error(\n      `${cmd} --plan: plan mode \"${planMode}\" does not match expected mode \"${args.expectedMode}\". ` +\n        `Use \\`tamer plan${args.expectedMode === \"destroy\" ? \" --destroy\" : \"\"} --out ${args.planPath}\\` to regenerate.`,\n    );\n  }\n\n  const current = computeAttestation(args.config, args.stateAtPlanCheck);\n  const configMatches = current.configHash === plan.attestation.configHash;\n  const stateMatches = current.stateHash === plan.attestation.stateHash;\n  const cloudflareMatches =\n    plan.attestation.cloudflareHash === undefined ||\n    args.liveCloudflareHash === undefined ||\n    plan.attestation.cloudflareHash === args.liveCloudflareHash;\n\n  if (configMatches && stateMatches && cloudflareMatches) {\n    console.log(`Plan attestation verified (${args.planPath}).`);\n    return;\n  }\n\n  const reasons: string[] = [];\n  if (!configMatches) reasons.push(\"config has changed since plan was generated\");\n  if (!stateMatches) reasons.push(\"recorded state has changed since plan was generated\");\n  if (!cloudflareMatches)\n    reasons.push(\n      \"Cloudflare-side resources drifted since plan was generated (out-of-band create/delete)\",\n    );\n  const detail = reasons.join(\"; \");\n\n  if (args.allowStale) {\n    console.warn(\n      `Plan attestation mismatch (${detail}). Proceeding anyway because --allow-stale was set.`,\n    );\n    return;\n  }\n  throw new Error(\n    `${cmd} --plan refused: ${detail}. Re-run \"tamer plan${args.expectedMode === \"destroy\" ? \" --destroy\" : \"\"} --out ${args.planPath}\" or pass --allow-stale to override.`,\n  );\n}\n"],"mappings":";;;AAgBA,SAAgB,eAAe,MAwBtB;CACP,MAAM,OAAO,aAAa,KAAK,SAAS;CACxC,MAAM,MAAM,KAAK;AAEjB,KAAI,KAAK,aAAa,KAAK,SACzB,OAAM,IAAI,MACR,GAAG,IAAI,wBAAwB,KAAK,SAAS,0CAA0C,KAAK,SAAS,GACtG;AAEH,KAAI,KAAK,QAAQ,KAAK,IACpB,OAAM,IAAI,MACR,GAAG,IAAI,qBAAqB,KAAK,IAAI,0BAA0B,KAAK,IAAI,GACzE;CAGH,MAAM,WAAW,KAAK,OAAO,QAAQ;AACrC,KAAI,aAAa,KAAK,aACpB,OAAM,IAAI,MACR,GAAG,IAAI,sBAAsB,SAAS,kCAAkC,KAAK,aAAa,qBACrE,KAAK,iBAAiB,YAAY,eAAe,GAAG,SAAS,KAAK,SAAS,mBACjG;CAGH,MAAM,UAAU,mBAAmB,KAAK,QAAQ,KAAK,iBAAiB;CACtE,MAAM,gBAAgB,QAAQ,eAAe,KAAK,YAAY;CAC9D,MAAM,eAAe,QAAQ,cAAc,KAAK,YAAY;CAC5D,MAAM,oBACJ,KAAK,YAAY,mBAAmB,UACpC,KAAK,uBAAuB,UAC5B,KAAK,YAAY,mBAAmB,KAAK;AAE3C,KAAI,iBAAiB,gBAAgB,mBAAmB;AACtD,UAAQ,IAAI,8BAA8B,KAAK,SAAS,IAAI;AAC5D;;CAGF,MAAMA,UAAoB,EAAE;AAC5B,KAAI,CAAC,cAAe,SAAQ,KAAK,8CAA8C;AAC/E,KAAI,CAAC,aAAc,SAAQ,KAAK,sDAAsD;AACtF,KAAI,CAAC,kBACH,SAAQ,KACN,yFACD;CACH,MAAM,SAAS,QAAQ,KAAK,KAAK;AAEjC,KAAI,KAAK,YAAY;AACnB,UAAQ,KACN,8BAA8B,OAAO,qDACtC;AACD;;AAEF,OAAM,IAAI,MACR,GAAG,IAAI,mBAAmB,OAAO,sBAAsB,KAAK,iBAAiB,YAAY,eAAe,GAAG,SAAS,KAAK,SAAS,sCACnI"}

package/dist/{wfp-delete-BblKos51.mjs → wfp-delete-Bt00-azB.mjs}

@@ -1,4 +1,4 @@
-import { $ as CFApiClient, et as cloudflareAccountIdFromEnv, it as loadConfig } from "./tamer.mjs";
+import { $ as cloudflareAccountIdFromEnv, Q as CFApiClient, rt as loadConfig } from "./tamer.mjs";
 
 //#region src/cli/commands/wfp-delete.ts
 function parseWfpDeleteArgs(argv) {
@@ -32,4 +32,4 @@ async function runWfpDelete(options) {
 
 //#endregion
 export { parseWfpDeleteArgs, runWfpDelete };
-//# sourceMappingURL=wfp-delete-BblKos51.mjs.map
+//# sourceMappingURL=wfp-delete-Bt00-azB.mjs.map

package/dist/{wfp-delete-BblKos51.mjs.map → wfp-delete-Bt00-azB.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"wfp-delete-BblKos51.mjs","names":["opts: Record<string, string | boolean>"],"sources":["../src/cli/commands/wfp-delete.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\n\nexport function parseWfpDeleteArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    } else {\n      opts[key] = true;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  if (!namespace || !scriptName) {\n    throw new Error(\n      \"usage: tamer wfp delete --namespace <name> --script-name <name> [--force] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    force: opts.force === true || opts.force === \"true\",\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpDelete(options: {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptDelete(options.namespace, options.scriptName, {\n    force: options.force,\n  });\n  console.log(\n    `Deleted script \"${options.scriptName}\" from dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;AAIA,SAAgB,mBAAmB,MAKjC;CACA,MAAMA,OAAyC,EAAE;AACjD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,QAAK,OAAO;AACZ;QAEA,MAAK,OAAO;;CAGhB,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;AACxB,KAAI,CAAC,aAAa,CAAC,WACjB,OAAM,IAAI,MACR,2GACD;AAEH,QAAO;EACL;EACA;EACA,OAAO,KAAK,UAAU,QAAQ,KAAK,UAAU;EAC7C,YAAY,KAAK;EAClB;;AAGH,eAAsB,aAAa,SAKjB;CAEhB,MAAM,aADS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC,EAC5C,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;AAIH,OADY,IAAI,YAAY,UAAU,CAC5B,8BAA8B,QAAQ,WAAW,QAAQ,YAAY,EAC7E,OAAO,QAAQ,OAChB,CAAC;AACF,SAAQ,IACN,mBAAmB,QAAQ,WAAW,6BAA6B,QAAQ,UAAU,IACtF"}
+{"version":3,"file":"wfp-delete-Bt00-azB.mjs","names":["opts: Record<string, string | boolean>"],"sources":["../src/cli/commands/wfp-delete.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\n\nexport function parseWfpDeleteArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    } else {\n      opts[key] = true;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  if (!namespace || !scriptName) {\n    throw new Error(\n      \"usage: tamer wfp delete --namespace <name> --script-name <name> [--force] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    force: opts.force === true || opts.force === \"true\",\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpDelete(options: {\n  namespace: string;\n  scriptName: string;\n  force?: boolean;\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptDelete(options.namespace, options.scriptName, {\n    force: options.force,\n  });\n  console.log(\n    `Deleted script \"${options.scriptName}\" from dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;AAIA,SAAgB,mBAAmB,MAKjC;CACA,MAAMA,OAAyC,EAAE;AACjD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,QAAK,OAAO;AACZ;QAEA,MAAK,OAAO;;CAGhB,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;AACxB,KAAI,CAAC,aAAa,CAAC,WACjB,OAAM,IAAI,MACR,2GACD;AAEH,QAAO;EACL;EACA;EACA,OAAO,KAAK,UAAU,QAAQ,KAAK,UAAU;EAC7C,YAAY,KAAK;EAClB;;AAGH,eAAsB,aAAa,SAKjB;CAEhB,MAAM,aADS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC,EAC5C,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;AAIH,OADY,IAAI,YAAY,UAAU,CAC5B,8BAA8B,QAAQ,WAAW,QAAQ,YAAY,EAC7E,OAAO,QAAQ,OAChB,CAAC;AACF,SAAQ,IACN,mBAAmB,QAAQ,WAAW,6BAA6B,QAAQ,UAAU,IACtF"}

package/dist/{wfp-put-oYvLiM_c.mjs → wfp-put-ZLt3oVZo.mjs}

@@ -1,4 +1,4 @@
-import { $ as CFApiClient, et as cloudflareAccountIdFromEnv, it as loadConfig } from "./tamer.mjs";
+import { $ as cloudflareAccountIdFromEnv, Q as CFApiClient, rt as loadConfig } from "./tamer.mjs";
 import { basename, resolve } from "path";
 import { readFileSync } from "fs";
 
@@ -70,4 +70,4 @@ async function runWfpPut(options) {
 
 //#endregion
 export { parseWfpPutArgs, runWfpPut };
-//# sourceMappingURL=wfp-put-oYvLiM_c.mjs.map
+//# sourceMappingURL=wfp-put-ZLt3oVZo.mjs.map

package/dist/{wfp-put-oYvLiM_c.mjs.map → wfp-put-ZLt3oVZo.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"wfp-put-oYvLiM_c.mjs","names":["metadata: Record<string, unknown>","opts: Record<string, string | boolean | string[]>"],"sources":["../src/core/wfp/buildDispatchUploadForm.ts","../src/cli/commands/wfp-put.ts"],"sourcesContent":["import { basename } from \"path\";\nimport { readFileSync } from \"fs\";\n\n/**\n * Optional bindings for the dispatch script metadata.\n * Uses the unified Cloudflare bindings format:\n * `bindings: [{ type, name, ... }]`.\n */\nexport interface DispatchScriptBindings {\n  bindings?: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  >;\n}\n\n/**\n * Build multipart body for PUT .../dispatch/namespaces/{ns}/scripts/{script}\n * with a single Worker module file.\n */\nexport function buildSingleModuleDispatchForm(\n  mainFilePath: string,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const moduleName = basename(mainFilePath);\n  const body = readFileSync(mainFilePath);\n  return buildForm(moduleName, body, opts);\n}\n\n/** Same as {@link buildSingleModuleDispatchForm} but from in-memory bytes (e.g. R2 download). */\nexport function buildSingleModuleDispatchFormFromBuffer(\n  moduleName: string,\n  body: Uint8Array | ArrayBuffer,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const bytes = body instanceof ArrayBuffer ? new Uint8Array(body) : body;\n  return buildForm(moduleName, bytes, opts);\n}\n\nfunction buildForm(\n  moduleName: string,\n  body: Uint8Array,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const metadata: Record<string, unknown> = {\n    main_module: moduleName,\n    compatibility_date: opts.compatibility_date,\n  };\n  if (opts.compatibility_flags?.length) {\n    metadata.compatibility_flags = opts.compatibility_flags;\n  }\n  if (opts.bindings?.bindings?.length) {\n    metadata.bindings = opts.bindings.bindings;\n  }\n  const form = new FormData();\n  form.append(\n    \"metadata\",\n    new Blob([JSON.stringify(metadata)], { type: \"application/json\" }),\n  );\n  // CRITICAL: Cloudflare reads `Content-Type: application/javascript+module`\n  // off the module part to decide whether to treat it as ESM. Without this it\n  // errors with `Main module must be an ES module.` even though metadata uses\n  // `main_module`.\n  form.append(\n    moduleName,\n    new Blob([body], { type: \"application/javascript+module\" }),\n    moduleName,\n  );\n  return form;\n}\n","import { resolve } from \"path\";\nimport { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { buildSingleModuleDispatchForm } from \"../../core/wfp/buildDispatchUploadForm.js\";\n\nexport function parseWfpPutArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean | string[]> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (key === \"compat_flags\") {\n      if (next && !next.startsWith(\"--\")) {\n        opts[key] = next.split(\",\").map((s) => s.trim()).filter(Boolean);\n        i++;\n      }\n    } else if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  const main = opts.main as string | undefined;\n  if (!namespace || !scriptName || !main) {\n    throw new Error(\n      \"usage: tamer wfp put --namespace <name> --script-name <name> --main <file> [--compatibility-date <yyyy-mm-dd>] [--compat-flags a,b] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    main: resolve(process.cwd(), main),\n    compatDate:\n      (opts.compatibility_date as string | undefined) ??\n      (opts.compat_date as string | undefined),\n    flags: opts.compat_flags as string[] | undefined,\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpPut(options: {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const compatDate =\n    options.compatDate ??\n    config.compatibility_date ??\n    new Date().toISOString().slice(0, 10);\n\n  const form = buildSingleModuleDispatchForm(options.main, {\n    compatibility_date: compatDate,\n    compatibility_flags: options.flags,\n  });\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptPut(\n    options.namespace,\n    options.scriptName,\n    form,\n  );\n  console.log(\n    `Uploaded script \"${options.scriptName}\" to dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;;;;;;;AAoBA,SAAgB,8BACd,cACA,MAKU;AAGV,QAAO,UAFY,SAAS,aAAa,EAC5B,aAAa,aAAa,EACJ,KAAK;;AAiB1C,SAAS,UACP,YACA,MACA,MAKU;CACV,MAAMA,WAAoC;EACxC,aAAa;EACb,oBAAoB,KAAK;EAC1B;AACD,KAAI,KAAK,qBAAqB,OAC5B,UAAS,sBAAsB,KAAK;AAEtC,KAAI,KAAK,UAAU,UAAU,OAC3B,UAAS,WAAW,KAAK,SAAS;CAEpC,MAAM,OAAO,IAAI,UAAU;AAC3B,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,EAAE,MAAM,oBAAoB,CAAC,CACnE;AAKD,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,iCAAiC,CAAC,EAC3D,WACD;AACD,QAAO;;;;;AC1ET,SAAgB,gBAAgB,MAO9B;CACA,MAAMC,OAAoD,EAAE;AAC5D,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,gBACV;OAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,SAAK,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,QAAQ;AAChE;;aAEO,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AACzC,QAAK,OAAO;AACZ;;;CAGJ,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;CACxB,MAAM,OAAO,KAAK;AAClB,KAAI,CAAC,aAAa,CAAC,cAAc,CAAC,KAChC,OAAM,IAAI,MACR,qKACD;AAEH,QAAO;EACL;EACA;EACA,MAAM,QAAQ,QAAQ,KAAK,EAAE,KAAK;EAClC,YACG,KAAK,sBACL,KAAK;EACR,OAAO,KAAK;EACZ,YAAY,KAAK;EAClB;;AAGH,eAAsB,UAAU,SAOd;CAChB,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC;CACrE,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,aACJ,QAAQ,cACR,OAAO,uCACP,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;CAEvC,MAAM,OAAO,8BAA8B,QAAQ,MAAM;EACvD,oBAAoB;EACpB,qBAAqB,QAAQ;EAC9B,CAAC;AAGF,OADY,IAAI,YAAY,UAAU,CAC5B,2BACR,QAAQ,WACR,QAAQ,YACR,KACD;AACD,SAAQ,IACN,oBAAoB,QAAQ,WAAW,2BAA2B,QAAQ,UAAU,IACrF"}
+{"version":3,"file":"wfp-put-ZLt3oVZo.mjs","names":["metadata: Record<string, unknown>","opts: Record<string, string | boolean | string[]>"],"sources":["../src/core/wfp/buildDispatchUploadForm.ts","../src/cli/commands/wfp-put.ts"],"sourcesContent":["import { basename } from \"path\";\nimport { readFileSync } from \"fs\";\n\n/**\n * Optional bindings for the dispatch script metadata.\n * Uses the unified Cloudflare bindings format:\n * `bindings: [{ type, name, ... }]`.\n */\nexport interface DispatchScriptBindings {\n  bindings?: Array<\n    | { type: \"d1\"; name: string; id: string }\n    | { type: \"plain_text\"; name: string; text: string }\n    | { type: \"service\"; name: string; service: string; environment?: string }\n  >;\n}\n\n/**\n * Build multipart body for PUT .../dispatch/namespaces/{ns}/scripts/{script}\n * with a single Worker module file.\n */\nexport function buildSingleModuleDispatchForm(\n  mainFilePath: string,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const moduleName = basename(mainFilePath);\n  const body = readFileSync(mainFilePath);\n  return buildForm(moduleName, body, opts);\n}\n\n/** Same as {@link buildSingleModuleDispatchForm} but from in-memory bytes (e.g. R2 download). */\nexport function buildSingleModuleDispatchFormFromBuffer(\n  moduleName: string,\n  body: Uint8Array | ArrayBuffer,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const bytes = body instanceof ArrayBuffer ? new Uint8Array(body) : body;\n  return buildForm(moduleName, bytes, opts);\n}\n\nfunction buildForm(\n  moduleName: string,\n  body: Uint8Array,\n  opts: {\n    compatibility_date: string;\n    compatibility_flags?: string[];\n    bindings?: DispatchScriptBindings;\n  },\n): FormData {\n  const metadata: Record<string, unknown> = {\n    main_module: moduleName,\n    compatibility_date: opts.compatibility_date,\n  };\n  if (opts.compatibility_flags?.length) {\n    metadata.compatibility_flags = opts.compatibility_flags;\n  }\n  if (opts.bindings?.bindings?.length) {\n    metadata.bindings = opts.bindings.bindings;\n  }\n  const form = new FormData();\n  form.append(\n    \"metadata\",\n    new Blob([JSON.stringify(metadata)], { type: \"application/json\" }),\n  );\n  // CRITICAL: Cloudflare reads `Content-Type: application/javascript+module`\n  // off the module part to decide whether to treat it as ESM. Without this it\n  // errors with `Main module must be an ES module.` even though metadata uses\n  // `main_module`.\n  form.append(\n    moduleName,\n    new Blob([body], { type: \"application/javascript+module\" }),\n    moduleName,\n  );\n  return form;\n}\n","import { resolve } from \"path\";\nimport { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { buildSingleModuleDispatchForm } from \"../../core/wfp/buildDispatchUploadForm.js\";\n\nexport function parseWfpPutArgs(argv: string[]): {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n} {\n  const opts: Record<string, string | boolean | string[]> = {};\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const key = arg.slice(2).replace(/-/g, \"_\");\n    const next = argv[i + 1];\n    if (key === \"compat_flags\") {\n      if (next && !next.startsWith(\"--\")) {\n        opts[key] = next.split(\",\").map((s) => s.trim()).filter(Boolean);\n        i++;\n      }\n    } else if (next && !next.startsWith(\"--\")) {\n      opts[key] = next;\n      i++;\n    }\n  }\n  const namespace = opts.namespace as string | undefined;\n  const scriptName = opts.script_name as string | undefined;\n  const main = opts.main as string | undefined;\n  if (!namespace || !scriptName || !main) {\n    throw new Error(\n      \"usage: tamer wfp put --namespace <name> --script-name <name> --main <file> [--compatibility-date <yyyy-mm-dd>] [--compat-flags a,b] [--config <project.config.ts>]\",\n    );\n  }\n  return {\n    namespace,\n    scriptName,\n    main: resolve(process.cwd(), main),\n    compatDate:\n      (opts.compatibility_date as string | undefined) ??\n      (opts.compat_date as string | undefined),\n    flags: opts.compat_flags as string[] | undefined,\n    configPath: opts.config as string | undefined,\n  };\n}\n\nexport async function runWfpPut(options: {\n  namespace: string;\n  scriptName: string;\n  main: string;\n  compatDate?: string;\n  flags?: string[];\n  configPath?: string;\n}): Promise<void> {\n  const config = await loadConfig(options.configPath, { env: \"local\" });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const compatDate =\n    options.compatDate ??\n    config.compatibility_date ??\n    new Date().toISOString().slice(0, 10);\n\n  const form = buildSingleModuleDispatchForm(options.main, {\n    compatibility_date: compatDate,\n    compatibility_flags: options.flags,\n  });\n\n  const api = new CFApiClient(accountId);\n  await api.dispatchNamespaceScriptPut(\n    options.namespace,\n    options.scriptName,\n    form,\n  );\n  console.log(\n    `Uploaded script \"${options.scriptName}\" to dispatch namespace \"${options.namespace}\".`,\n  );\n}\n"],"mappings":";;;;;;;;;AAoBA,SAAgB,8BACd,cACA,MAKU;AAGV,QAAO,UAFY,SAAS,aAAa,EAC5B,aAAa,aAAa,EACJ,KAAK;;AAiB1C,SAAS,UACP,YACA,MACA,MAKU;CACV,MAAMA,WAAoC;EACxC,aAAa;EACb,oBAAoB,KAAK;EAC1B;AACD,KAAI,KAAK,qBAAqB,OAC5B,UAAS,sBAAsB,KAAK;AAEtC,KAAI,KAAK,UAAU,UAAU,OAC3B,UAAS,WAAW,KAAK,SAAS;CAEpC,MAAM,OAAO,IAAI,UAAU;AAC3B,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,EAAE,MAAM,oBAAoB,CAAC,CACnE;AAKD,MAAK,OACH,YACA,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,iCAAiC,CAAC,EAC3D,WACD;AACD,QAAO;;;;;AC1ET,SAAgB,gBAAgB,MAO9B;CACA,MAAMC,OAAoD,EAAE;AAC5D,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,WAAW,KAAK,CAAE;EAC3B,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,MAAM,IAAI;EAC3C,MAAM,OAAO,KAAK,IAAI;AACtB,MAAI,QAAQ,gBACV;OAAI,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AAClC,SAAK,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,QAAQ;AAChE;;aAEO,QAAQ,CAAC,KAAK,WAAW,KAAK,EAAE;AACzC,QAAK,OAAO;AACZ;;;CAGJ,MAAM,YAAY,KAAK;CACvB,MAAM,aAAa,KAAK;CACxB,MAAM,OAAO,KAAK;AAClB,KAAI,CAAC,aAAa,CAAC,cAAc,CAAC,KAChC,OAAM,IAAI,MACR,qKACD;AAEH,QAAO;EACL;EACA;EACA,MAAM,QAAQ,QAAQ,KAAK,EAAE,KAAK;EAClC,YACG,KAAK,sBACL,KAAK;EACR,OAAO,KAAK;EACZ,YAAY,KAAK;EAClB;;AAGH,eAAsB,UAAU,SAOd;CAChB,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,SAAS,CAAC;CACrE,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,aACJ,QAAQ,cACR,OAAO,uCACP,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;CAEvC,MAAM,OAAO,8BAA8B,QAAQ,MAAM;EACvD,oBAAoB;EACpB,qBAAqB,QAAQ;EAC9B,CAAC;AAGF,OADY,IAAI,YAAY,UAAU,CAC5B,2BACR,QAAQ,WACR,QAAQ,YACR,KACD;AACD,SAAQ,IACN,oBAAoB,QAAQ,WAAW,2BAA2B,QAAQ,UAAU,IACrF"}

package/dist/{worker-route-BPDAwUL0.mjs → worker-route-u4qd5ddC.mjs}

@@ -1,5 +1,5 @@
-import { M as mergedWorkerConfigForEnv, P as resolveWorkerConfig, rt as getWorkers } from "./tamer.mjs";
-import { n as workerRouteStateKey, t as findZoneIdByName } from "./zoneResolver-Dfp2glm8.mjs";
+import { N as resolveWorkerConfig, j as mergedWorkerConfigForEnv, nt as getWorkers } from "./tamer.mjs";
+import { n as workerRouteStateKey, t as findZoneIdByName } from "./zoneResolver-BPrCHiEV.mjs";
 
 //#region src/features/worker-route/worker-route.sync.ts
 /**
@@ -259,4 +259,4 @@ async function workerRoutesDrift(env, config, baseDir, accountId, naming, state,
 
 //#endregion
 export { workerRouteSync as i, workerRoutesDestroy as n, workerRoutesApply as r, workerRoutesDrift as t };
-//# sourceMappingURL=worker-route-BPDAwUL0.mjs.map
+//# sourceMappingURL=worker-route-u4qd5ddC.mjs.map

package/dist/{worker-route-BPDAwUL0.mjs.map → worker-route-u4qd5ddC.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"worker-route-BPDAwUL0.mjs","names":["list: Array<{ id: string; pattern: string; script: string }>","entry: WorkerRouteStateEntry","list: Array<{ id: string; pattern: string; script: string }>","key","entry: WorkerRouteStateEntry","drift: ResourceDrift","list: Array<{ id: string; pattern: string; script: string }>"],"sources":["../src/features/worker-route/worker-route.sync.ts","../src/features/worker-route/worker-route.prune.ts","../src/features/worker-route/worker-route.apply.ts","../src/features/worker-route/worker-route.destroy.ts","../src/features/worker-route/worker-route.drift.ts"],"sourcesContent":["import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport { workerRouteStateKey } from \"./worker-route.stateKey.js\";\nimport type { WorkerRouteStateEntry } from \"../../types.js\";\n\n/**\n * Merge Workers zone routes for `tamerRoutes` (API-managed) into state from\n * Cloudflare listings. Drops stale `worker_route` rows for workers in this\n * config when the route no longer exists on CF.\n */\nexport async function workerRouteSync(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /**\n     * Pre-fetched sibling stack outputs so cross-stack route hosts/zones\n     * resolve to real patterns (else they stay as placeholders and never\n     * match anything CF returned). Optional — sync is tolerant mode.\n     */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<void> {\n  if (env === \"local\") return;\n\n  const workers = await getWorkers(config, baseDir);\n  const workerKeys = new Set(workers.map(([k]) => k));\n  const touchedKeys = new Set<string>();\n  const ts = new Date().toISOString();\n\n  for (const [workerKey, wc] of workers) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: opts.imports },\n    );\n    for (const route of resolved.apiManagedRoutes) {\n      const zoneId = await findZoneIdByName(api, route.zone_name);\n      if (!zoneId) {\n        console.warn(\n          `[sync] worker routes: zone \"${route.zone_name}\" not found; skip ${route.pattern}`,\n        );\n        continue;\n      }\n      let list: Array<{ id: string; pattern: string; script: string }>;\n      try {\n        list = await api.zoneWorkerRoutesList(zoneId);\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.warn(\n          `[sync] worker routes: list failed for zone ${route.zone_name}: ${msg}`,\n        );\n        continue;\n      }\n      const hit = list.find(\n        (r) => r.pattern === route.pattern && r.script === resolved.workerName,\n      );\n      if (!hit) continue;\n\n      const key = workerRouteStateKey(zoneId, hit.id);\n      touchedKeys.add(key);\n      const existing = state.get(key);\n      const prev =\n        existing?.type === \"worker_route\" ? existing : undefined;\n      const entry: WorkerRouteStateEntry = {\n        type: \"worker_route\",\n        workerKey,\n        workerName: resolved.workerName,\n        zoneId,\n        zoneName: route.zone_name,\n        routeId: hit.id,\n        pattern: route.pattern,\n        createdAt: prev?.createdAt ?? ts,\n        updatedAt: ts,\n      };\n      state.set(key, entry);\n    }\n  }\n\n  /**\n   * Dropping stale `worker_route` state without calling Cloudflare's zone route\n   * delete API leaves orphaned public URL patterns on the script (common after\n   * removing `tamerRoutes`).\n   */\n  for (const [k, e] of Object.entries(state.getAll())) {\n    if (e.type !== \"worker_route\") continue;\n    if (!workerKeys.has(e.workerKey)) continue;\n    if (touchedKeys.has(k)) continue;\n    try {\n      await api.zoneWorkerRouteDelete(e.zoneId, e.routeId);\n      console.log(\n        `[sync] deleted stale Workers zone route ${e.pattern} → ${e.workerName} (${e.zoneName})`,\n      );\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[sync] failed to delete stale zone route ${e.pattern}: ${msg}`);\n    }\n    state.delete(k);\n  }\n}\n","import type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { ResolvedWorkerConfig } from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport { workerRouteStateKey } from \"./worker-route.stateKey.js\";\n\n/**\n * Remove Workers **zone routes** (`/zones/{id}/workers/routes`) that still point\n * at {@link ResolvedWorkerConfig.workerName} but are **not** in the resolved\n * desired set ({@link ResolvedWorkerConfig.apiManagedRoutes}), scoped to\n * {@link staleSweepZones}.\n *\n * Used on **`tamer deploy`** after removing `tamerRoutes` so orphaned patterns\n * are not left on the account. Wrangler **`routes`** / custom domains are a\n * separate surface — this only touches API-managed zone routes.\n *\n * When {@link staleSweepZones} is omitted or empty, this is a no-op (safe default).\n */\nexport async function pruneStaleApiManagedZoneRoutesForWorker(\n  api: CFApiClient,\n  state: StateManager,\n  resolved: ResolvedWorkerConfig,\n  staleSweepZones: string[] | undefined,\n): Promise<void> {\n  if (!staleSweepZones?.length) return;\n\n  const desired = new Set(\n    resolved.apiManagedRoutes.map((r) => `${r.zone_name}\\0${r.pattern}`),\n  );\n\n  for (const zoneName of staleSweepZones) {\n    const zoneId = await findZoneIdByName(api, zoneName);\n    if (!zoneId) {\n      console.warn(\n        `[deploy] stale route prune: zone \"${zoneName}\" not found; skip`,\n      );\n      continue;\n    }\n\n    let list: Array<{ id: string; pattern: string; script: string }>;\n    try {\n      list = await api.zoneWorkerRoutesList(zoneId);\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(\n        `[deploy] stale route prune: list failed for \"${zoneName}\": ${msg}`,\n      );\n      continue;\n    }\n\n    for (const r of list) {\n      if (r.script !== resolved.workerName) continue;\n      const sig = `${zoneName}\\0${r.pattern}`;\n      if (desired.has(sig)) continue;\n\n      try {\n        await api.zoneWorkerRouteDelete(zoneId, r.id);\n        console.log(\n          `[deploy] pruned stale zone route ${r.pattern} → ${resolved.workerName} (${zoneName})`,\n        );\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.warn(\n          `[deploy] stale route prune: failed to delete ${r.pattern}: ${msg}`,\n        );\n      }\n      state.delete(workerRouteStateKey(zoneId, r.id));\n    }\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport {\n  mergedWorkerConfigForEnv,\n  resolveWorkerConfig,\n} from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport { pruneStaleApiManagedZoneRoutesForWorker } from \"./worker-route.prune.js\";\nimport { workerRouteStateKey } from \"./worker-route.stateKey.js\";\nimport type { WorkerRouteStateEntry } from \"../../types.js\";\n\n/**\n * Ensure API-managed zone routes exist after the Worker script exists (call\n * after successful `wrangler deploy`).\n */\nexport async function workerRoutesApply(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /**\n     * Pre-fetched sibling stack outputs for `${tamer:import:…}` references\n     * in `tamerRoutes[].host` / `.zone`. Caller (`deploy`) is expected to\n     * load these once and reuse across worker iterations to avoid repeated\n     * D1 hydrate calls.\n     */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<void> {\n  if (env === \"local\") return;\n\n  const workers = await getWorkers(config, baseDir);\n  const ts = new Date().toISOString();\n\n  for (const [workerKey, wc] of workers) {\n    const declared = mergedWorkerConfigForEnv(wc, env, config.tenant);\n    const staleSweepZones = declared.tamerStaleRouteSweepZones;\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { imports: opts.imports },\n    );\n    await pruneStaleApiManagedZoneRoutesForWorker(\n      api,\n      state,\n      resolved,\n      staleSweepZones,\n    );\n    for (const route of resolved.apiManagedRoutes) {\n      const zoneId = await findZoneIdByName(api, route.zone_name);\n      if (!zoneId) {\n        throw new Error(\n          `worker routes: zone \"${route.zone_name}\" not found (check DNS / account access)`,\n        );\n      }\n      const list = await api.zoneWorkerRoutesList(zoneId);\n      const exists = list.find(\n        (r) => r.pattern === route.pattern && r.script === resolved.workerName,\n      );\n      if (exists) {\n        const key = workerRouteStateKey(zoneId, exists.id);\n        const existing = state.get(key);\n        const prev =\n          existing?.type === \"worker_route\" ? existing : undefined;\n        state.set(key, {\n          type: \"worker_route\",\n          workerKey,\n          workerName: resolved.workerName,\n          zoneId,\n          zoneName: route.zone_name,\n          routeId: exists.id,\n          pattern: route.pattern,\n          createdAt: prev?.createdAt ?? ts,\n          updatedAt: ts,\n        });\n        continue;\n      }\n\n      const created = await api.zoneWorkerRouteCreate(zoneId, {\n        pattern: route.pattern,\n        script: resolved.workerName,\n      });\n      const key = workerRouteStateKey(zoneId, created.id);\n      const entry: WorkerRouteStateEntry = {\n        type: \"worker_route\",\n        workerKey,\n        workerName: resolved.workerName,\n        zoneId,\n        zoneName: route.zone_name,\n        routeId: created.id,\n        pattern: route.pattern,\n        createdAt: ts,\n        updatedAt: ts,\n      };\n      state.set(key, entry);\n    }\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\n\n/**\n * Delete API-managed zone routes for workers declared in this stack's config\n * (before deleting Workers so routes are not left orphaned).\n */\nexport async function workerRoutesDestroy(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  state: StateManager,\n  api: CFApiClient,\n): Promise<void> {\n  if (env === \"local\") return;\n\n  const workers = await getWorkers(config, baseDir);\n  const allowed = new Set(workers.map(([k]) => k));\n\n  for (const [k, e] of Object.entries(state.getAll())) {\n    if (e.type !== \"worker_route\") continue;\n    if (!allowed.has(e.workerKey)) continue;\n    try {\n      await api.zoneWorkerRouteDelete(e.zoneId, e.routeId);\n      console.log(\n        `Deleted zone route ${e.pattern} (${e.routeId}) → ${e.workerName}`,\n      );\n    } catch (err) {\n      console.warn(\n        `Failed to delete zone route ${e.pattern}:`,\n        err instanceof Error ? err.message : err,\n      );\n    }\n    state.delete(k);\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceDrift } from \"../../core/drift/drift.types.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport type { WorkerRouteStateEntry } from \"../../types.js\";\n\nfunction stateRouteForWorkerPattern(\n  state: StateManager,\n  workerKey: string,\n  pattern: string,\n): WorkerRouteStateEntry | undefined {\n  for (const e of Object.values(state.getAll())) {\n    if (\n      e.type === \"worker_route\" &&\n      e.workerKey === workerKey &&\n      e.pattern === pattern\n    ) {\n      return e;\n    }\n  }\n  return undefined;\n}\n\nexport async function workerRoutesDrift(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /** Pre-fetched sibling stack outputs; tolerant lookup. */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<ResourceDrift | null> {\n  if (env === \"local\") return null;\n\n  const workers = await getWorkers(config, baseDir);\n  const drift: ResourceDrift = {\n    kind: \"worker_route\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n  let sawAnyApiRoute = false;\n\n  for (const [workerKey, wc] of workers) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: opts.imports },\n    );\n    for (const route of resolved.apiManagedRoutes) {\n      sawAnyApiRoute = true;\n      const zoneId = await findZoneIdByName(api, route.zone_name);\n      if (!zoneId) {\n        drift.undeployed.push({\n          logicalName: workerKey,\n          derivedName: route.pattern,\n          detail: `zone \"${route.zone_name}\" not found`,\n        });\n        continue;\n      }\n      let list: Array<{ id: string; pattern: string; script: string }>;\n      try {\n        list = await api.zoneWorkerRoutesList(zoneId);\n      } catch {\n        continue;\n      }\n      const hit = list.find(\n        (r) => r.pattern === route.pattern && r.script === resolved.workerName,\n      );\n      const st = stateRouteForWorkerPattern(state, workerKey, route.pattern);\n      if (hit) {\n        if (!st || st.routeId !== hit.id) {\n          drift.unrecordedInState.push({\n            logicalName: workerKey,\n            derivedName: route.pattern,\n            cfId: hit.id,\n          });\n        }\n      } else if (st) {\n        drift.missingFromCloudflare.push({\n          logicalName: workerKey,\n          derivedName: route.pattern,\n          cfId: st.routeId,\n        });\n      } else {\n        drift.undeployed.push({\n          logicalName: workerKey,\n          derivedName: route.pattern,\n        });\n      }\n    }\n  }\n\n  return sawAnyApiRoute ? drift : null;\n}\n"],"mappings":";;;;;;;;;AAeA,eAAsB,gBACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAOI,EAAE,EACS;AACf,KAAI,QAAQ,QAAS;CAErB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,aAAa,IAAI,IAAI,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;CACnD,MAAM,8BAAc,IAAI,KAAa;CACrC,MAAM,sBAAK,IAAI,MAAM,EAAC,aAAa;AAEnC,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EACrC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS,KAAK;GAAS,CACtD;AACD,OAAK,MAAM,SAAS,SAAS,kBAAkB;GAC7C,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,OAAI,CAAC,QAAQ;AACX,YAAQ,KACN,+BAA+B,MAAM,UAAU,oBAAoB,MAAM,UAC1E;AACD;;GAEF,IAAIA;AACJ,OAAI;AACF,WAAO,MAAM,IAAI,qBAAqB,OAAO;YACtC,KAAK;IACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,KACN,8CAA8C,MAAM,UAAU,IAAI,MACnE;AACD;;GAEF,MAAM,MAAM,KAAK,MACd,MAAM,EAAE,YAAY,MAAM,WAAW,EAAE,WAAW,SAAS,WAC7D;AACD,OAAI,CAAC,IAAK;GAEV,MAAM,MAAM,oBAAoB,QAAQ,IAAI,GAAG;AAC/C,eAAY,IAAI,IAAI;GACpB,MAAM,WAAW,MAAM,IAAI,IAAI;GAC/B,MAAM,OACJ,UAAU,SAAS,iBAAiB,WAAW;GACjD,MAAMC,QAA+B;IACnC,MAAM;IACN;IACA,YAAY,SAAS;IACrB;IACA,UAAU,MAAM;IAChB,SAAS,IAAI;IACb,SAAS,MAAM;IACf,WAAW,MAAM,aAAa;IAC9B,WAAW;IACZ;AACD,SAAM,IAAI,KAAK,MAAM;;;;;;;;AASzB,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,EAAE;AACnD,MAAI,EAAE,SAAS,eAAgB;AAC/B,MAAI,CAAC,WAAW,IAAI,EAAE,UAAU,CAAE;AAClC,MAAI,YAAY,IAAI,EAAE,CAAE;AACxB,MAAI;AACF,SAAM,IAAI,sBAAsB,EAAE,QAAQ,EAAE,QAAQ;AACpD,WAAQ,IACN,2CAA2C,EAAE,QAAQ,KAAK,EAAE,WAAW,IAAI,EAAE,SAAS,GACvF;WACM,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,KAAK,4CAA4C,EAAE,QAAQ,IAAI,MAAM;;AAE/E,QAAM,OAAO,EAAE;;;;;;;;;;;;;;;;;;AC9FnB,eAAsB,wCACpB,KACA,OACA,UACA,iBACe;AACf,KAAI,CAAC,iBAAiB,OAAQ;CAE9B,MAAM,UAAU,IAAI,IAClB,SAAS,iBAAiB,KAAK,MAAM,GAAG,EAAE,UAAU,IAAI,EAAE,UAAU,CACrE;AAED,MAAK,MAAM,YAAY,iBAAiB;EACtC,MAAM,SAAS,MAAM,iBAAiB,KAAK,SAAS;AACpD,MAAI,CAAC,QAAQ;AACX,WAAQ,KACN,qCAAqC,SAAS,mBAC/C;AACD;;EAGF,IAAIC;AACJ,MAAI;AACF,UAAO,MAAM,IAAI,qBAAqB,OAAO;WACtC,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,KACN,gDAAgD,SAAS,KAAK,MAC/D;AACD;;AAGF,OAAK,MAAM,KAAK,MAAM;AACpB,OAAI,EAAE,WAAW,SAAS,WAAY;GACtC,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE;AAC9B,OAAI,QAAQ,IAAI,IAAI,CAAE;AAEtB,OAAI;AACF,UAAM,IAAI,sBAAsB,QAAQ,EAAE,GAAG;AAC7C,YAAQ,IACN,oCAAoC,EAAE,QAAQ,KAAK,SAAS,WAAW,IAAI,SAAS,GACrF;YACM,KAAK;IACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,KACN,gDAAgD,EAAE,QAAQ,IAAI,MAC/D;;AAEH,SAAM,OAAO,oBAAoB,QAAQ,EAAE,GAAG,CAAC;;;;;;;;;;;AChDrD,eAAsB,kBACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAQI,EAAE,EACS;AACf,KAAI,QAAQ,QAAS;CAErB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,sBAAK,IAAI,MAAM,EAAC,aAAa;AAEnC,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EAErC,MAAM,kBADW,yBAAyB,IAAI,KAAK,OAAO,OAAO,CAChC;EACjC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,KAAK,SAAS,CAC1B;AACD,QAAM,wCACJ,KACA,OACA,UACA,gBACD;AACD,OAAK,MAAM,SAAS,SAAS,kBAAkB;GAC7C,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,OAAI,CAAC,OACH,OAAM,IAAI,MACR,wBAAwB,MAAM,UAAU,0CACzC;GAGH,MAAM,UADO,MAAM,IAAI,qBAAqB,OAAO,EAC/B,MACjB,MAAM,EAAE,YAAY,MAAM,WAAW,EAAE,WAAW,SAAS,WAC7D;AACD,OAAI,QAAQ;IACV,MAAMC,QAAM,oBAAoB,QAAQ,OAAO,GAAG;IAClD,MAAM,WAAW,MAAM,IAAIA,MAAI;IAC/B,MAAM,OACJ,UAAU,SAAS,iBAAiB,WAAW;AACjD,UAAM,IAAIA,OAAK;KACb,MAAM;KACN;KACA,YAAY,SAAS;KACrB;KACA,UAAU,MAAM;KAChB,SAAS,OAAO;KAChB,SAAS,MAAM;KACf,WAAW,MAAM,aAAa;KAC9B,WAAW;KACZ,CAAC;AACF;;GAGF,MAAM,UAAU,MAAM,IAAI,sBAAsB,QAAQ;IACtD,SAAS,MAAM;IACf,QAAQ,SAAS;IAClB,CAAC;GACF,MAAM,MAAM,oBAAoB,QAAQ,QAAQ,GAAG;GACnD,MAAMC,QAA+B;IACnC,MAAM;IACN;IACA,YAAY,SAAS;IACrB;IACA,UAAU,MAAM;IAChB,SAAS,QAAQ;IACjB,SAAS,MAAM;IACf,WAAW;IACX,WAAW;IACZ;AACD,SAAM,IAAI,KAAK,MAAM;;;;;;;;;;;AClG3B,eAAsB,oBACpB,KACA,QACA,SACA,OACA,KACe;AACf,KAAI,QAAQ,QAAS;CAErB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,UAAU,IAAI,IAAI,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;AAEhD,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,EAAE;AACnD,MAAI,EAAE,SAAS,eAAgB;AAC/B,MAAI,CAAC,QAAQ,IAAI,EAAE,UAAU,CAAE;AAC/B,MAAI;AACF,SAAM,IAAI,sBAAsB,EAAE,QAAQ,EAAE,QAAQ;AACpD,WAAQ,IACN,sBAAsB,EAAE,QAAQ,IAAI,EAAE,QAAQ,MAAM,EAAE,aACvD;WACM,KAAK;AACZ,WAAQ,KACN,+BAA+B,EAAE,QAAQ,IACzC,eAAe,QAAQ,IAAI,UAAU,IACtC;;AAEH,QAAM,OAAO,EAAE;;;;;;ACzBnB,SAAS,2BACP,OACA,WACA,SACmC;AACnC,MAAK,MAAM,KAAK,OAAO,OAAO,MAAM,QAAQ,CAAC,CAC3C,KACE,EAAE,SAAS,kBACX,EAAE,cAAc,aAChB,EAAE,YAAY,QAEd,QAAO;;AAMb,eAAsB,kBACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAGI,EAAE,EACyB;AAC/B,KAAI,QAAQ,QAAS,QAAO;CAE5B,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAMC,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CACD,IAAI,iBAAiB;AAErB,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EACrC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS,KAAK;GAAS,CACtD;AACD,OAAK,MAAM,SAAS,SAAS,kBAAkB;AAC7C,oBAAiB;GACjB,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,OAAI,CAAC,QAAQ;AACX,UAAM,WAAW,KAAK;KACpB,aAAa;KACb,aAAa,MAAM;KACnB,QAAQ,SAAS,MAAM,UAAU;KAClC,CAAC;AACF;;GAEF,IAAIC;AACJ,OAAI;AACF,WAAO,MAAM,IAAI,qBAAqB,OAAO;WACvC;AACN;;GAEF,MAAM,MAAM,KAAK,MACd,MAAM,EAAE,YAAY,MAAM,WAAW,EAAE,WAAW,SAAS,WAC7D;GACD,MAAM,KAAK,2BAA2B,OAAO,WAAW,MAAM,QAAQ;AACtE,OAAI,KACF;QAAI,CAAC,MAAM,GAAG,YAAY,IAAI,GAC5B,OAAM,kBAAkB,KAAK;KAC3B,aAAa;KACb,aAAa,MAAM;KACnB,MAAM,IAAI;KACX,CAAC;cAEK,GACT,OAAM,sBAAsB,KAAK;IAC/B,aAAa;IACb,aAAa,MAAM;IACnB,MAAM,GAAG;IACV,CAAC;OAEF,OAAM,WAAW,KAAK;IACpB,aAAa;IACb,aAAa,MAAM;IACpB,CAAC;;;AAKR,QAAO,iBAAiB,QAAQ"}
+{"version":3,"file":"worker-route-u4qd5ddC.mjs","names":["list: Array<{ id: string; pattern: string; script: string }>","entry: WorkerRouteStateEntry","list: Array<{ id: string; pattern: string; script: string }>","key","entry: WorkerRouteStateEntry","drift: ResourceDrift","list: Array<{ id: string; pattern: string; script: string }>"],"sources":["../src/features/worker-route/worker-route.sync.ts","../src/features/worker-route/worker-route.prune.ts","../src/features/worker-route/worker-route.apply.ts","../src/features/worker-route/worker-route.destroy.ts","../src/features/worker-route/worker-route.drift.ts"],"sourcesContent":["import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport { workerRouteStateKey } from \"./worker-route.stateKey.js\";\nimport type { WorkerRouteStateEntry } from \"../../types.js\";\n\n/**\n * Merge Workers zone routes for `tamerRoutes` (API-managed) into state from\n * Cloudflare listings. Drops stale `worker_route` rows for workers in this\n * config when the route no longer exists on CF.\n */\nexport async function workerRouteSync(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /**\n     * Pre-fetched sibling stack outputs so cross-stack route hosts/zones\n     * resolve to real patterns (else they stay as placeholders and never\n     * match anything CF returned). Optional — sync is tolerant mode.\n     */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<void> {\n  if (env === \"local\") return;\n\n  const workers = await getWorkers(config, baseDir);\n  const workerKeys = new Set(workers.map(([k]) => k));\n  const touchedKeys = new Set<string>();\n  const ts = new Date().toISOString();\n\n  for (const [workerKey, wc] of workers) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: opts.imports },\n    );\n    for (const route of resolved.apiManagedRoutes) {\n      const zoneId = await findZoneIdByName(api, route.zone_name);\n      if (!zoneId) {\n        console.warn(\n          `[sync] worker routes: zone \"${route.zone_name}\" not found; skip ${route.pattern}`,\n        );\n        continue;\n      }\n      let list: Array<{ id: string; pattern: string; script: string }>;\n      try {\n        list = await api.zoneWorkerRoutesList(zoneId);\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.warn(\n          `[sync] worker routes: list failed for zone ${route.zone_name}: ${msg}`,\n        );\n        continue;\n      }\n      const hit = list.find(\n        (r) => r.pattern === route.pattern && r.script === resolved.workerName,\n      );\n      if (!hit) continue;\n\n      const key = workerRouteStateKey(zoneId, hit.id);\n      touchedKeys.add(key);\n      const existing = state.get(key);\n      const prev =\n        existing?.type === \"worker_route\" ? existing : undefined;\n      const entry: WorkerRouteStateEntry = {\n        type: \"worker_route\",\n        workerKey,\n        workerName: resolved.workerName,\n        zoneId,\n        zoneName: route.zone_name,\n        routeId: hit.id,\n        pattern: route.pattern,\n        createdAt: prev?.createdAt ?? ts,\n        updatedAt: ts,\n      };\n      state.set(key, entry);\n    }\n  }\n\n  /**\n   * Dropping stale `worker_route` state without calling Cloudflare's zone route\n   * delete API leaves orphaned public URL patterns on the script (common after\n   * removing `tamerRoutes`).\n   */\n  for (const [k, e] of Object.entries(state.getAll())) {\n    if (e.type !== \"worker_route\") continue;\n    if (!workerKeys.has(e.workerKey)) continue;\n    if (touchedKeys.has(k)) continue;\n    try {\n      await api.zoneWorkerRouteDelete(e.zoneId, e.routeId);\n      console.log(\n        `[sync] deleted stale Workers zone route ${e.pattern} → ${e.workerName} (${e.zoneName})`,\n      );\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[sync] failed to delete stale zone route ${e.pattern}: ${msg}`);\n    }\n    state.delete(k);\n  }\n}\n","import type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { ResolvedWorkerConfig } from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport { workerRouteStateKey } from \"./worker-route.stateKey.js\";\n\n/**\n * Remove Workers **zone routes** (`/zones/{id}/workers/routes`) that still point\n * at {@link ResolvedWorkerConfig.workerName} but are **not** in the resolved\n * desired set ({@link ResolvedWorkerConfig.apiManagedRoutes}), scoped to\n * {@link staleSweepZones}.\n *\n * Used on **`tamer deploy`** after removing `tamerRoutes` so orphaned patterns\n * are not left on the account. Wrangler **`routes`** / custom domains are a\n * separate surface — this only touches API-managed zone routes.\n *\n * When {@link staleSweepZones} is omitted or empty, this is a no-op (safe default).\n */\nexport async function pruneStaleApiManagedZoneRoutesForWorker(\n  api: CFApiClient,\n  state: StateManager,\n  resolved: ResolvedWorkerConfig,\n  staleSweepZones: string[] | undefined,\n): Promise<void> {\n  if (!staleSweepZones?.length) return;\n\n  const desired = new Set(\n    resolved.apiManagedRoutes.map((r) => `${r.zone_name}\\0${r.pattern}`),\n  );\n\n  for (const zoneName of staleSweepZones) {\n    const zoneId = await findZoneIdByName(api, zoneName);\n    if (!zoneId) {\n      console.warn(\n        `[deploy] stale route prune: zone \"${zoneName}\" not found; skip`,\n      );\n      continue;\n    }\n\n    let list: Array<{ id: string; pattern: string; script: string }>;\n    try {\n      list = await api.zoneWorkerRoutesList(zoneId);\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(\n        `[deploy] stale route prune: list failed for \"${zoneName}\": ${msg}`,\n      );\n      continue;\n    }\n\n    for (const r of list) {\n      if (r.script !== resolved.workerName) continue;\n      const sig = `${zoneName}\\0${r.pattern}`;\n      if (desired.has(sig)) continue;\n\n      try {\n        await api.zoneWorkerRouteDelete(zoneId, r.id);\n        console.log(\n          `[deploy] pruned stale zone route ${r.pattern} → ${resolved.workerName} (${zoneName})`,\n        );\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.warn(\n          `[deploy] stale route prune: failed to delete ${r.pattern}: ${msg}`,\n        );\n      }\n      state.delete(workerRouteStateKey(zoneId, r.id));\n    }\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport {\n  mergedWorkerConfigForEnv,\n  resolveWorkerConfig,\n} from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport { pruneStaleApiManagedZoneRoutesForWorker } from \"./worker-route.prune.js\";\nimport { workerRouteStateKey } from \"./worker-route.stateKey.js\";\nimport type { WorkerRouteStateEntry } from \"../../types.js\";\n\n/**\n * Ensure API-managed zone routes exist after the Worker script exists (call\n * after successful `wrangler deploy`).\n */\nexport async function workerRoutesApply(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /**\n     * Pre-fetched sibling stack outputs for `${tamer:import:…}` references\n     * in `tamerRoutes[].host` / `.zone`. Caller (`deploy`) is expected to\n     * load these once and reuse across worker iterations to avoid repeated\n     * D1 hydrate calls.\n     */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<void> {\n  if (env === \"local\") return;\n\n  const workers = await getWorkers(config, baseDir);\n  const ts = new Date().toISOString();\n\n  for (const [workerKey, wc] of workers) {\n    const declared = mergedWorkerConfigForEnv(wc, env, config.tenant);\n    const staleSweepZones = declared.tamerStaleRouteSweepZones;\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { imports: opts.imports },\n    );\n    await pruneStaleApiManagedZoneRoutesForWorker(\n      api,\n      state,\n      resolved,\n      staleSweepZones,\n    );\n    for (const route of resolved.apiManagedRoutes) {\n      const zoneId = await findZoneIdByName(api, route.zone_name);\n      if (!zoneId) {\n        throw new Error(\n          `worker routes: zone \"${route.zone_name}\" not found (check DNS / account access)`,\n        );\n      }\n      const list = await api.zoneWorkerRoutesList(zoneId);\n      const exists = list.find(\n        (r) => r.pattern === route.pattern && r.script === resolved.workerName,\n      );\n      if (exists) {\n        const key = workerRouteStateKey(zoneId, exists.id);\n        const existing = state.get(key);\n        const prev =\n          existing?.type === \"worker_route\" ? existing : undefined;\n        state.set(key, {\n          type: \"worker_route\",\n          workerKey,\n          workerName: resolved.workerName,\n          zoneId,\n          zoneName: route.zone_name,\n          routeId: exists.id,\n          pattern: route.pattern,\n          createdAt: prev?.createdAt ?? ts,\n          updatedAt: ts,\n        });\n        continue;\n      }\n\n      const created = await api.zoneWorkerRouteCreate(zoneId, {\n        pattern: route.pattern,\n        script: resolved.workerName,\n      });\n      const key = workerRouteStateKey(zoneId, created.id);\n      const entry: WorkerRouteStateEntry = {\n        type: \"worker_route\",\n        workerKey,\n        workerName: resolved.workerName,\n        zoneId,\n        zoneName: route.zone_name,\n        routeId: created.id,\n        pattern: route.pattern,\n        createdAt: ts,\n        updatedAt: ts,\n      };\n      state.set(key, entry);\n    }\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\n\n/**\n * Delete API-managed zone routes for workers declared in this stack's config\n * (before deleting Workers so routes are not left orphaned).\n */\nexport async function workerRoutesDestroy(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  state: StateManager,\n  api: CFApiClient,\n): Promise<void> {\n  if (env === \"local\") return;\n\n  const workers = await getWorkers(config, baseDir);\n  const allowed = new Set(workers.map(([k]) => k));\n\n  for (const [k, e] of Object.entries(state.getAll())) {\n    if (e.type !== \"worker_route\") continue;\n    if (!allowed.has(e.workerKey)) continue;\n    try {\n      await api.zoneWorkerRouteDelete(e.zoneId, e.routeId);\n      console.log(\n        `Deleted zone route ${e.pattern} (${e.routeId}) → ${e.workerName}`,\n      );\n    } catch (err) {\n      console.warn(\n        `Failed to delete zone route ${e.pattern}:`,\n        err instanceof Error ? err.message : err,\n      );\n    }\n    state.delete(k);\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceDrift } from \"../../core/drift/drift.types.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { findZoneIdByName } from \"../../core/routes/zoneResolver.js\";\nimport type { WorkerRouteStateEntry } from \"../../types.js\";\n\nfunction stateRouteForWorkerPattern(\n  state: StateManager,\n  workerKey: string,\n  pattern: string,\n): WorkerRouteStateEntry | undefined {\n  for (const e of Object.values(state.getAll())) {\n    if (\n      e.type === \"worker_route\" &&\n      e.workerKey === workerKey &&\n      e.pattern === pattern\n    ) {\n      return e;\n    }\n  }\n  return undefined;\n}\n\nexport async function workerRoutesDrift(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /** Pre-fetched sibling stack outputs; tolerant lookup. */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<ResourceDrift | null> {\n  if (env === \"local\") return null;\n\n  const workers = await getWorkers(config, baseDir);\n  const drift: ResourceDrift = {\n    kind: \"worker_route\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n  let sawAnyApiRoute = false;\n\n  for (const [workerKey, wc] of workers) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: opts.imports },\n    );\n    for (const route of resolved.apiManagedRoutes) {\n      sawAnyApiRoute = true;\n      const zoneId = await findZoneIdByName(api, route.zone_name);\n      if (!zoneId) {\n        drift.undeployed.push({\n          logicalName: workerKey,\n          derivedName: route.pattern,\n          detail: `zone \"${route.zone_name}\" not found`,\n        });\n        continue;\n      }\n      let list: Array<{ id: string; pattern: string; script: string }>;\n      try {\n        list = await api.zoneWorkerRoutesList(zoneId);\n      } catch {\n        continue;\n      }\n      const hit = list.find(\n        (r) => r.pattern === route.pattern && r.script === resolved.workerName,\n      );\n      const st = stateRouteForWorkerPattern(state, workerKey, route.pattern);\n      if (hit) {\n        if (!st || st.routeId !== hit.id) {\n          drift.unrecordedInState.push({\n            logicalName: workerKey,\n            derivedName: route.pattern,\n            cfId: hit.id,\n          });\n        }\n      } else if (st) {\n        drift.missingFromCloudflare.push({\n          logicalName: workerKey,\n          derivedName: route.pattern,\n          cfId: st.routeId,\n        });\n      } else {\n        drift.undeployed.push({\n          logicalName: workerKey,\n          derivedName: route.pattern,\n        });\n      }\n    }\n  }\n\n  return sawAnyApiRoute ? drift : null;\n}\n"],"mappings":";;;;;;;;;AAeA,eAAsB,gBACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAOI,EAAE,EACS;AACf,KAAI,QAAQ,QAAS;CAErB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,aAAa,IAAI,IAAI,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;CACnD,MAAM,8BAAc,IAAI,KAAa;CACrC,MAAM,sBAAK,IAAI,MAAM,EAAC,aAAa;AAEnC,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EACrC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS,KAAK;GAAS,CACtD;AACD,OAAK,MAAM,SAAS,SAAS,kBAAkB;GAC7C,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,OAAI,CAAC,QAAQ;AACX,YAAQ,KACN,+BAA+B,MAAM,UAAU,oBAAoB,MAAM,UAC1E;AACD;;GAEF,IAAIA;AACJ,OAAI;AACF,WAAO,MAAM,IAAI,qBAAqB,OAAO;YACtC,KAAK;IACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,KACN,8CAA8C,MAAM,UAAU,IAAI,MACnE;AACD;;GAEF,MAAM,MAAM,KAAK,MACd,MAAM,EAAE,YAAY,MAAM,WAAW,EAAE,WAAW,SAAS,WAC7D;AACD,OAAI,CAAC,IAAK;GAEV,MAAM,MAAM,oBAAoB,QAAQ,IAAI,GAAG;AAC/C,eAAY,IAAI,IAAI;GACpB,MAAM,WAAW,MAAM,IAAI,IAAI;GAC/B,MAAM,OACJ,UAAU,SAAS,iBAAiB,WAAW;GACjD,MAAMC,QAA+B;IACnC,MAAM;IACN;IACA,YAAY,SAAS;IACrB;IACA,UAAU,MAAM;IAChB,SAAS,IAAI;IACb,SAAS,MAAM;IACf,WAAW,MAAM,aAAa;IAC9B,WAAW;IACZ;AACD,SAAM,IAAI,KAAK,MAAM;;;;;;;;AASzB,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,EAAE;AACnD,MAAI,EAAE,SAAS,eAAgB;AAC/B,MAAI,CAAC,WAAW,IAAI,EAAE,UAAU,CAAE;AAClC,MAAI,YAAY,IAAI,EAAE,CAAE;AACxB,MAAI;AACF,SAAM,IAAI,sBAAsB,EAAE,QAAQ,EAAE,QAAQ;AACpD,WAAQ,IACN,2CAA2C,EAAE,QAAQ,KAAK,EAAE,WAAW,IAAI,EAAE,SAAS,GACvF;WACM,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,KAAK,4CAA4C,EAAE,QAAQ,IAAI,MAAM;;AAE/E,QAAM,OAAO,EAAE;;;;;;;;;;;;;;;;;;AC9FnB,eAAsB,wCACpB,KACA,OACA,UACA,iBACe;AACf,KAAI,CAAC,iBAAiB,OAAQ;CAE9B,MAAM,UAAU,IAAI,IAClB,SAAS,iBAAiB,KAAK,MAAM,GAAG,EAAE,UAAU,IAAI,EAAE,UAAU,CACrE;AAED,MAAK,MAAM,YAAY,iBAAiB;EACtC,MAAM,SAAS,MAAM,iBAAiB,KAAK,SAAS;AACpD,MAAI,CAAC,QAAQ;AACX,WAAQ,KACN,qCAAqC,SAAS,mBAC/C;AACD;;EAGF,IAAIC;AACJ,MAAI;AACF,UAAO,MAAM,IAAI,qBAAqB,OAAO;WACtC,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,KACN,gDAAgD,SAAS,KAAK,MAC/D;AACD;;AAGF,OAAK,MAAM,KAAK,MAAM;AACpB,OAAI,EAAE,WAAW,SAAS,WAAY;GACtC,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE;AAC9B,OAAI,QAAQ,IAAI,IAAI,CAAE;AAEtB,OAAI;AACF,UAAM,IAAI,sBAAsB,QAAQ,EAAE,GAAG;AAC7C,YAAQ,IACN,oCAAoC,EAAE,QAAQ,KAAK,SAAS,WAAW,IAAI,SAAS,GACrF;YACM,KAAK;IACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,KACN,gDAAgD,EAAE,QAAQ,IAAI,MAC/D;;AAEH,SAAM,OAAO,oBAAoB,QAAQ,EAAE,GAAG,CAAC;;;;;;;;;;;AChDrD,eAAsB,kBACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAQI,EAAE,EACS;AACf,KAAI,QAAQ,QAAS;CAErB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,sBAAK,IAAI,MAAM,EAAC,aAAa;AAEnC,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EAErC,MAAM,kBADW,yBAAyB,IAAI,KAAK,OAAO,OAAO,CAChC;EACjC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA,EAAE,SAAS,KAAK,SAAS,CAC1B;AACD,QAAM,wCACJ,KACA,OACA,UACA,gBACD;AACD,OAAK,MAAM,SAAS,SAAS,kBAAkB;GAC7C,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,OAAI,CAAC,OACH,OAAM,IAAI,MACR,wBAAwB,MAAM,UAAU,0CACzC;GAGH,MAAM,UADO,MAAM,IAAI,qBAAqB,OAAO,EAC/B,MACjB,MAAM,EAAE,YAAY,MAAM,WAAW,EAAE,WAAW,SAAS,WAC7D;AACD,OAAI,QAAQ;IACV,MAAMC,QAAM,oBAAoB,QAAQ,OAAO,GAAG;IAClD,MAAM,WAAW,MAAM,IAAIA,MAAI;IAC/B,MAAM,OACJ,UAAU,SAAS,iBAAiB,WAAW;AACjD,UAAM,IAAIA,OAAK;KACb,MAAM;KACN;KACA,YAAY,SAAS;KACrB;KACA,UAAU,MAAM;KAChB,SAAS,OAAO;KAChB,SAAS,MAAM;KACf,WAAW,MAAM,aAAa;KAC9B,WAAW;KACZ,CAAC;AACF;;GAGF,MAAM,UAAU,MAAM,IAAI,sBAAsB,QAAQ;IACtD,SAAS,MAAM;IACf,QAAQ,SAAS;IAClB,CAAC;GACF,MAAM,MAAM,oBAAoB,QAAQ,QAAQ,GAAG;GACnD,MAAMC,QAA+B;IACnC,MAAM;IACN;IACA,YAAY,SAAS;IACrB;IACA,UAAU,MAAM;IAChB,SAAS,QAAQ;IACjB,SAAS,MAAM;IACf,WAAW;IACX,WAAW;IACZ;AACD,SAAM,IAAI,KAAK,MAAM;;;;;;;;;;;AClG3B,eAAsB,oBACpB,KACA,QACA,SACA,OACA,KACe;AACf,KAAI,QAAQ,QAAS;CAErB,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAM,UAAU,IAAI,IAAI,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;AAEhD,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,EAAE;AACnD,MAAI,EAAE,SAAS,eAAgB;AAC/B,MAAI,CAAC,QAAQ,IAAI,EAAE,UAAU,CAAE;AAC/B,MAAI;AACF,SAAM,IAAI,sBAAsB,EAAE,QAAQ,EAAE,QAAQ;AACpD,WAAQ,IACN,sBAAsB,EAAE,QAAQ,IAAI,EAAE,QAAQ,MAAM,EAAE,aACvD;WACM,KAAK;AACZ,WAAQ,KACN,+BAA+B,EAAE,QAAQ,IACzC,eAAe,QAAQ,IAAI,UAAU,IACtC;;AAEH,QAAM,OAAO,EAAE;;;;;;ACzBnB,SAAS,2BACP,OACA,WACA,SACmC;AACnC,MAAK,MAAM,KAAK,OAAO,OAAO,MAAM,QAAQ,CAAC,CAC3C,KACE,EAAE,SAAS,kBACX,EAAE,cAAc,aAChB,EAAE,YAAY,QAEd,QAAO;;AAMb,eAAsB,kBACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAGI,EAAE,EACyB;AAC/B,KAAI,QAAQ,QAAS,QAAO;CAE5B,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAMC,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CACD,IAAI,iBAAiB;AAErB,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EACrC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS,KAAK;GAAS,CACtD;AACD,OAAK,MAAM,SAAS,SAAS,kBAAkB;AAC7C,oBAAiB;GACjB,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAAM,UAAU;AAC3D,OAAI,CAAC,QAAQ;AACX,UAAM,WAAW,KAAK;KACpB,aAAa;KACb,aAAa,MAAM;KACnB,QAAQ,SAAS,MAAM,UAAU;KAClC,CAAC;AACF;;GAEF,IAAIC;AACJ,OAAI;AACF,WAAO,MAAM,IAAI,qBAAqB,OAAO;WACvC;AACN;;GAEF,MAAM,MAAM,KAAK,MACd,MAAM,EAAE,YAAY,MAAM,WAAW,EAAE,WAAW,SAAS,WAC7D;GACD,MAAM,KAAK,2BAA2B,OAAO,WAAW,MAAM,QAAQ;AACtE,OAAI,KACF;QAAI,CAAC,MAAM,GAAG,YAAY,IAAI,GAC5B,OAAM,kBAAkB,KAAK;KAC3B,aAAa;KACb,aAAa,MAAM;KACnB,MAAM,IAAI;KACX,CAAC;cAEK,GACT,OAAM,sBAAsB,KAAK;IAC/B,aAAa;IACb,aAAa,MAAM;IACnB,MAAM,GAAG;IACV,CAAC;OAEF,OAAM,WAAW,KAAK;IACpB,aAAa;IACb,aAAa,MAAM;IACpB,CAAC;;;AAKR,QAAO,iBAAiB,QAAQ"}

package/dist/{workers-D08-ri2Q.mjs → workers-CEPTZmdi.mjs}

@@ -1,4 +1,4 @@
-import { P as resolveWorkerConfig, h as namingFromConfig, rt as getWorkers } from "./tamer.mjs";
+import { N as resolveWorkerConfig, m as namingFromConfig, nt as getWorkers } from "./tamer.mjs";
 
 //#region src/features/workers/workers.destroy.ts
 /**
@@ -77,4 +77,4 @@ async function workersDrift(env, config, baseDir, accountId, naming, state, api,
 
 //#endregion
 export { workersDestroy as n, workersDrift as t };
-//# sourceMappingURL=workers-D08-ri2Q.mjs.map
+//# sourceMappingURL=workers-CEPTZmdi.mjs.map

package/dist/{workers-D08-ri2Q.mjs.map → workers-CEPTZmdi.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"workers-D08-ri2Q.mjs","names":["resolved: Awaited<ReturnType<typeof resolveWorkerConfig>>[]","drift: ResourceDrift","exists: boolean"],"sources":["../src/features/workers/workers.destroy.ts","../src/features/workers/workers.drift.ts"],"sourcesContent":["import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\n\n/**\n * Remove deployed Workers: dispatch-namespace scripts via CF API, then global scripts via `wrangler delete`.\n * Call before deleting D1/R2/KV/dispatch namespaces so bindings and namespace script counts are cleared.\n */\nexport async function workersDestroy(\n  env: string,\n  baseDir: string,\n  accountId: string,\n  config: CfiConfig,\n  state: StateManager,\n  api: CFApiClient,\n  _force?: boolean,\n): Promise<void> {\n  const naming = namingFromConfig(config);\n  const workers = await getWorkers(config, baseDir);\n  const resolved: Awaited<ReturnType<typeof resolveWorkerConfig>>[] = [];\n\n  for (const [workerKey, workerConfig] of workers) {\n    // Tolerant resolution: destroy only consumes `workerName` and\n    // `dispatchNamespace` — both derived from naming, not references —\n    // so unresolved `${tamer:import:…}` placeholders in `vars` /\n    // `tamerRoutes` must not crash teardown of a stack whose siblings\n    // have already been destroyed.\n    resolved.push(\n      await resolveWorkerConfig(\n        config,\n        workerKey,\n        workerConfig,\n        env,\n        baseDir,\n        accountId,\n        naming,\n        state,\n        { referencesMode: \"tolerant\" },\n      ),\n    );\n  }\n\n  const inNamespace = resolved.filter((r) => r.dispatchNamespace);\n  const globalWorkers = resolved.filter((r) => !r.dispatchNamespace);\n\n  for (const r of inNamespace) {\n    const ns = r.dispatchNamespace!;\n    try {\n      await api.dispatchNamespaceScriptDelete(ns, r.workerName, {\n        force: true,\n      });\n      console.log(`Deleted Worker \"${r.workerName}\" from dispatch namespace \"${ns}\"`);\n    } catch (err) {\n      console.warn(\n        `Failed to delete dispatch Worker \"${r.workerName}\" in \"${ns}\":`,\n        err instanceof Error ? err.message : err,\n      );\n    }\n  }\n\n  for (const r of globalWorkers) {\n    // Use the CF API directly instead of `wrangler delete` — avoids\n    // wrangler account-resolution issues (stale wrangler.json, env var\n    // priority bugs, etc.). Tamer already has the account ID + API token.\n    try {\n      const deleted = await api.workersScriptDelete(r.workerName);\n      if (deleted) {\n        console.log(`Deleted Worker \"${r.workerName}\"`);\n      } else {\n        console.log(`Worker \"${r.workerName}\" already gone`);\n      }\n    } catch (err) {\n      console.warn(\n        `Failed to delete Worker \"${r.workerName}\":`,\n        err instanceof Error ? err.message : err,\n      );\n    }\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceDrift } from \"../../core/drift/drift.types.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\n\n/**\n * Drift for declared **global** Worker scripts (not dispatch-namespace\n * tenant scripts — those are owned by `provision-tenant` / WFP).\n *\n * Tamer does not store deployed worker script ids in state today, so this\n * report only emits `undeployed` (declared but missing on Cloudflare). It\n * never claims `unrecordedInState` for scripts because the state model has\n * no `worker_script` entry to be missing.\n *\n * Returns `null` for `local` env or when there are no global workers (so\n * `computeDriftReport` can skip emitting the section entirely).\n */\nexport async function workersDrift(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /** Pre-fetched sibling stack outputs; tolerant lookup. */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<ResourceDrift | null> {\n  if (env === \"local\") return null;\n\n  const workers = await getWorkers(config, baseDir);\n  if (workers.length === 0) return null;\n\n  const drift: ResourceDrift = {\n    kind: \"worker_script\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n\n  let sawGlobalWorker = false;\n  for (const [workerKey, wc] of workers) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: opts.imports },\n    );\n    if (resolved.dispatchNamespace) continue;\n    sawGlobalWorker = true;\n\n    let exists: boolean;\n    try {\n      const script = await api.workersScriptGet(resolved.workerName);\n      exists = !!script;\n    } catch {\n      continue;\n    }\n    if (!exists) {\n      drift.undeployed.push({\n        logicalName: workerKey,\n        derivedName: resolved.workerName,\n      });\n    }\n  }\n\n  return sawGlobalWorker ? drift : null;\n}\n"],"mappings":";;;;;;;AAYA,eAAsB,eACpB,KACA,SACA,WACA,QACA,OACA,KACA,QACe;CACf,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAMA,WAA8D,EAAE;AAEtE,MAAK,MAAM,CAAC,WAAW,iBAAiB,QAMtC,UAAS,KACP,MAAM,oBACJ,QACA,WACA,cACA,KACA,SACA,WACA,QACA,OACA,EAAE,gBAAgB,YAAY,CAC/B,CACF;CAGH,MAAM,cAAc,SAAS,QAAQ,MAAM,EAAE,kBAAkB;CAC/D,MAAM,gBAAgB,SAAS,QAAQ,MAAM,CAAC,EAAE,kBAAkB;AAElE,MAAK,MAAM,KAAK,aAAa;EAC3B,MAAM,KAAK,EAAE;AACb,MAAI;AACF,SAAM,IAAI,8BAA8B,IAAI,EAAE,YAAY,EACxD,OAAO,MACR,CAAC;AACF,WAAQ,IAAI,mBAAmB,EAAE,WAAW,6BAA6B,GAAG,GAAG;WACxE,KAAK;AACZ,WAAQ,KACN,qCAAqC,EAAE,WAAW,QAAQ,GAAG,KAC7D,eAAe,QAAQ,IAAI,UAAU,IACtC;;;AAIL,MAAK,MAAM,KAAK,cAId,KAAI;AAEF,MADgB,MAAM,IAAI,oBAAoB,EAAE,WAAW,CAEzD,SAAQ,IAAI,mBAAmB,EAAE,WAAW,GAAG;MAE/C,SAAQ,IAAI,WAAW,EAAE,WAAW,gBAAgB;UAE/C,KAAK;AACZ,UAAQ,KACN,4BAA4B,EAAE,WAAW,KACzC,eAAe,QAAQ,IAAI,UAAU,IACtC;;;;;;;;;;;;;;;;;;AC3DP,eAAsB,aACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAGI,EAAE,EACyB;AAC/B,KAAI,QAAQ,QAAS,QAAO;CAE5B,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;AACjD,KAAI,QAAQ,WAAW,EAAG,QAAO;CAEjC,MAAMC,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CAED,IAAI,kBAAkB;AACtB,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EACrC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS,KAAK;GAAS,CACtD;AACD,MAAI,SAAS,kBAAmB;AAChC,oBAAkB;EAElB,IAAIC;AACJ,MAAI;AAEF,YAAS,CAAC,CADK,MAAM,IAAI,iBAAiB,SAAS,WAAW;UAExD;AACN;;AAEF,MAAI,CAAC,OACH,OAAM,WAAW,KAAK;GACpB,aAAa;GACb,aAAa,SAAS;GACvB,CAAC;;AAIN,QAAO,kBAAkB,QAAQ"}
+{"version":3,"file":"workers-CEPTZmdi.mjs","names":["resolved: Awaited<ReturnType<typeof resolveWorkerConfig>>[]","drift: ResourceDrift","exists: boolean"],"sources":["../src/features/workers/workers.destroy.ts","../src/features/workers/workers.drift.ts"],"sourcesContent":["import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\nimport { spawnWranglerSync } from \"../../core/wrangler/wranglerSpawn.js\";\n\n/**\n * Remove deployed Workers: dispatch-namespace scripts via CF API, then global scripts via `wrangler delete`.\n * Call before deleting D1/R2/KV/dispatch namespaces so bindings and namespace script counts are cleared.\n */\nexport async function workersDestroy(\n  env: string,\n  baseDir: string,\n  accountId: string,\n  config: CfiConfig,\n  state: StateManager,\n  api: CFApiClient,\n  _force?: boolean,\n): Promise<void> {\n  const naming = namingFromConfig(config);\n  const workers = await getWorkers(config, baseDir);\n  const resolved: Awaited<ReturnType<typeof resolveWorkerConfig>>[] = [];\n\n  for (const [workerKey, workerConfig] of workers) {\n    // Tolerant resolution: destroy only consumes `workerName` and\n    // `dispatchNamespace` — both derived from naming, not references —\n    // so unresolved `${tamer:import:…}` placeholders in `vars` /\n    // `tamerRoutes` must not crash teardown of a stack whose siblings\n    // have already been destroyed.\n    resolved.push(\n      await resolveWorkerConfig(\n        config,\n        workerKey,\n        workerConfig,\n        env,\n        baseDir,\n        accountId,\n        naming,\n        state,\n        { referencesMode: \"tolerant\" },\n      ),\n    );\n  }\n\n  const inNamespace = resolved.filter((r) => r.dispatchNamespace);\n  const globalWorkers = resolved.filter((r) => !r.dispatchNamespace);\n\n  for (const r of inNamespace) {\n    const ns = r.dispatchNamespace!;\n    try {\n      await api.dispatchNamespaceScriptDelete(ns, r.workerName, {\n        force: true,\n      });\n      console.log(`Deleted Worker \"${r.workerName}\" from dispatch namespace \"${ns}\"`);\n    } catch (err) {\n      console.warn(\n        `Failed to delete dispatch Worker \"${r.workerName}\" in \"${ns}\":`,\n        err instanceof Error ? err.message : err,\n      );\n    }\n  }\n\n  for (const r of globalWorkers) {\n    // Use the CF API directly instead of `wrangler delete` — avoids\n    // wrangler account-resolution issues (stale wrangler.json, env var\n    // priority bugs, etc.). Tamer already has the account ID + API token.\n    try {\n      const deleted = await api.workersScriptDelete(r.workerName);\n      if (deleted) {\n        console.log(`Deleted Worker \"${r.workerName}\"`);\n      } else {\n        console.log(`Worker \"${r.workerName}\" already gone`);\n      }\n    } catch (err) {\n      console.warn(\n        `Failed to delete Worker \"${r.workerName}\":`,\n        err instanceof Error ? err.message : err,\n      );\n    }\n  }\n}\n","import type { CfiConfig } from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { NamingEngine } from \"../../core/naming/NamingEngine.js\";\nimport type { ResourceDrift } from \"../../core/drift/drift.types.js\";\nimport { getWorkers } from \"../../core/config/loader.js\";\nimport { resolveWorkerConfig } from \"../../core/config/resolver.js\";\n\n/**\n * Drift for declared **global** Worker scripts (not dispatch-namespace\n * tenant scripts — those are owned by `provision-tenant` / WFP).\n *\n * Tamer does not store deployed worker script ids in state today, so this\n * report only emits `undeployed` (declared but missing on Cloudflare). It\n * never claims `unrecordedInState` for scripts because the state model has\n * no `worker_script` entry to be missing.\n *\n * Returns `null` for `local` env or when there are no global workers (so\n * `computeDriftReport` can skip emitting the section entirely).\n */\nexport async function workersDrift(\n  env: string,\n  config: CfiConfig,\n  baseDir: string,\n  accountId: string,\n  naming: NamingEngine,\n  state: StateManager,\n  api: CFApiClient,\n  opts: {\n    /** Pre-fetched sibling stack outputs; tolerant lookup. */\n    imports?: Record<string, Record<string, string>>;\n  } = {},\n): Promise<ResourceDrift | null> {\n  if (env === \"local\") return null;\n\n  const workers = await getWorkers(config, baseDir);\n  if (workers.length === 0) return null;\n\n  const drift: ResourceDrift = {\n    kind: \"worker_script\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n\n  let sawGlobalWorker = false;\n  for (const [workerKey, wc] of workers) {\n    const resolved = await resolveWorkerConfig(\n      config,\n      workerKey,\n      wc,\n      env,\n      baseDir,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports: opts.imports },\n    );\n    if (resolved.dispatchNamespace) continue;\n    sawGlobalWorker = true;\n\n    let exists: boolean;\n    try {\n      const script = await api.workersScriptGet(resolved.workerName);\n      exists = !!script;\n    } catch {\n      continue;\n    }\n    if (!exists) {\n      drift.undeployed.push({\n        logicalName: workerKey,\n        derivedName: resolved.workerName,\n      });\n    }\n  }\n\n  return sawGlobalWorker ? drift : null;\n}\n"],"mappings":";;;;;;;AAYA,eAAsB,eACpB,KACA,SACA,WACA,QACA,OACA,KACA,QACe;CACf,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CACjD,MAAMA,WAA8D,EAAE;AAEtE,MAAK,MAAM,CAAC,WAAW,iBAAiB,QAMtC,UAAS,KACP,MAAM,oBACJ,QACA,WACA,cACA,KACA,SACA,WACA,QACA,OACA,EAAE,gBAAgB,YAAY,CAC/B,CACF;CAGH,MAAM,cAAc,SAAS,QAAQ,MAAM,EAAE,kBAAkB;CAC/D,MAAM,gBAAgB,SAAS,QAAQ,MAAM,CAAC,EAAE,kBAAkB;AAElE,MAAK,MAAM,KAAK,aAAa;EAC3B,MAAM,KAAK,EAAE;AACb,MAAI;AACF,SAAM,IAAI,8BAA8B,IAAI,EAAE,YAAY,EACxD,OAAO,MACR,CAAC;AACF,WAAQ,IAAI,mBAAmB,EAAE,WAAW,6BAA6B,GAAG,GAAG;WACxE,KAAK;AACZ,WAAQ,KACN,qCAAqC,EAAE,WAAW,QAAQ,GAAG,KAC7D,eAAe,QAAQ,IAAI,UAAU,IACtC;;;AAIL,MAAK,MAAM,KAAK,cAId,KAAI;AAEF,MADgB,MAAM,IAAI,oBAAoB,EAAE,WAAW,CAEzD,SAAQ,IAAI,mBAAmB,EAAE,WAAW,GAAG;MAE/C,SAAQ,IAAI,WAAW,EAAE,WAAW,gBAAgB;UAE/C,KAAK;AACZ,UAAQ,KACN,4BAA4B,EAAE,WAAW,KACzC,eAAe,QAAQ,IAAI,UAAU,IACtC;;;;;;;;;;;;;;;;;;AC3DP,eAAsB,aACpB,KACA,QACA,SACA,WACA,QACA,OACA,KACA,OAGI,EAAE,EACyB;AAC/B,KAAI,QAAQ,QAAS,QAAO;CAE5B,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;AACjD,KAAI,QAAQ,WAAW,EAAG,QAAO;CAEjC,MAAMC,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CAED,IAAI,kBAAkB;AACtB,MAAK,MAAM,CAAC,WAAW,OAAO,SAAS;EACrC,MAAM,WAAW,MAAM,oBACrB,QACA,WACA,IACA,KACA,SACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY,SAAS,KAAK;GAAS,CACtD;AACD,MAAI,SAAS,kBAAmB;AAChC,oBAAkB;EAElB,IAAIC;AACJ,MAAI;AAEF,YAAS,CAAC,CADK,MAAM,IAAI,iBAAiB,SAAS,WAAW;UAExD;AACN;;AAEF,MAAI,CAAC,OACH,OAAM,WAAW,KAAK;GACpB,aAAa;GACb,aAAa,SAAS;GACvB,CAAC;;AAIN,QAAO,kBAAkB,QAAQ"}

package/dist/wranglerOutFile-BwTiiBhi.mjs

@@ -0,0 +1,3 @@
+import { I as assertSafeWranglerOutFile, L as wranglerConfigCliArgs } from "./tamer.mjs";
+
+export { wranglerConfigCliArgs };

package/dist/{wranglerSpawn-Dg-lr-rf.mjs → wranglerSpawn-DX7fppPf.mjs}

@@ -39,4 +39,4 @@ function spawnBuildSync(command, options) {
 
 //#endregion
 export { spawnWranglerSync as n, wranglerSpawnDeps as r, spawnBuildSync as t };
-//# sourceMappingURL=wranglerSpawn-Dg-lr-rf.mjs.map
+//# sourceMappingURL=wranglerSpawn-DX7fppPf.mjs.map

package/dist/{wranglerSpawn-Dg-lr-rf.mjs.map → wranglerSpawn-DX7fppPf.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"wranglerSpawn-Dg-lr-rf.mjs","names":["nodeSpawnSync"],"sources":["../src/core/wrangler/wranglerSpawn.ts"],"sourcesContent":["import {\n  spawnSync as nodeSpawnSync,\n  type SpawnSyncOptions,\n} from \"child_process\";\n\n/** Narrow spawn signature used by `spawnWranglerSync` (easier to mock in tests). */\nexport type WranglerSpawnSyncFn = (\n  command: string,\n  args: readonly string[],\n  options: SpawnSyncOptions,\n) => ReturnType<typeof nodeSpawnSync>;\n\n/** Injectable spawn for unit tests (defaults to Node `spawnSync`). */\nexport const wranglerSpawnDeps = {\n  spawnSync: nodeSpawnSync as WranglerSpawnSyncFn,\n};\n\nexport type SpawnWranglerSyncOptions = Pick<\n  SpawnSyncOptions,\n  \"cwd\" | \"stdio\" | \"env\"\n> & {\n  /**\n   * Default `true`. Use `false` where avoiding the shell matters (e.g. some\n   * Windows paths with `wrangler delete`).\n   */\n  shell?: boolean;\n};\n\n/**\n * Spawn Wrangler via `bunx wrangler …` so the project-local peer/devDependency\n * resolves like npm/bun scripts (`node_modules/.bin`).\n */\nexport function spawnWranglerSync(\n  argv: string[],\n  options: SpawnWranglerSyncOptions,\n): ReturnType<typeof nodeSpawnSync> {\n  return wranglerSpawnDeps.spawnSync(\"bunx\", argv, {\n    cwd: options.cwd,\n    stdio: options.stdio,\n    env: options.env ? { ...process.env, ...options.env } : process.env,\n    shell: options.shell ?? true,\n  });\n}\n\n/**\n * Spawn an arbitrary shell command (e.g. `vite build`) for workers that declare\n * a {@link WorkerBuildConfig} pre-deploy step. Uses the same injectable spawn\n * as {@link spawnWranglerSync} so unit tests capture it via the wrangler spawn\n * mock. Runs with `shell: true` so the `command` string is interpreted by the\n * shell (pipes, `&&`, env-prefixes all work).\n */\nexport function spawnBuildSync(\n  command: string,\n  options: SpawnWranglerSyncOptions,\n): ReturnType<typeof nodeSpawnSync> {\n  return wranglerSpawnDeps.spawnSync(command, [], {\n    cwd: options.cwd,\n    stdio: options.stdio,\n    env: options.env ? { ...process.env, ...options.env } : process.env,\n    shell: true,\n  });\n}\n"],"mappings":";;;;AAaA,MAAa,oBAAoB,EACpBA,WACZ;;;;;AAiBD,SAAgB,kBACd,MACA,SACkC;AAClC,QAAO,kBAAkB,UAAU,QAAQ,MAAM;EAC/C,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,KAAK,QAAQ,MAAM;GAAE,GAAG,QAAQ;GAAK,GAAG,QAAQ;GAAK,GAAG,QAAQ;EAChE,OAAO,QAAQ,SAAS;EACzB,CAAC;;;;;;;;;AAUJ,SAAgB,eACd,SACA,SACkC;AAClC,QAAO,kBAAkB,UAAU,SAAS,EAAE,EAAE;EAC9C,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,KAAK,QAAQ,MAAM;GAAE,GAAG,QAAQ;GAAK,GAAG,QAAQ;GAAK,GAAG,QAAQ;EAChE,OAAO;EACR,CAAC"}
+{"version":3,"file":"wranglerSpawn-DX7fppPf.mjs","names":["nodeSpawnSync"],"sources":["../src/core/wrangler/wranglerSpawn.ts"],"sourcesContent":["import {\n  spawnSync as nodeSpawnSync,\n  type SpawnSyncOptions,\n} from \"child_process\";\n\n/** Narrow spawn signature used by `spawnWranglerSync` (easier to mock in tests). */\nexport type WranglerSpawnSyncFn = (\n  command: string,\n  args: readonly string[],\n  options: SpawnSyncOptions,\n) => ReturnType<typeof nodeSpawnSync>;\n\n/** Injectable spawn for unit tests (defaults to Node `spawnSync`). */\nexport const wranglerSpawnDeps = {\n  spawnSync: nodeSpawnSync as WranglerSpawnSyncFn,\n};\n\nexport type SpawnWranglerSyncOptions = Pick<\n  SpawnSyncOptions,\n  \"cwd\" | \"stdio\" | \"env\"\n> & {\n  /**\n   * Default `true`. Use `false` where avoiding the shell matters (e.g. some\n   * Windows paths with `wrangler delete`).\n   */\n  shell?: boolean;\n};\n\n/**\n * Spawn Wrangler via `bunx wrangler …` so the project-local peer/devDependency\n * resolves like npm/bun scripts (`node_modules/.bin`).\n */\nexport function spawnWranglerSync(\n  argv: string[],\n  options: SpawnWranglerSyncOptions,\n): ReturnType<typeof nodeSpawnSync> {\n  return wranglerSpawnDeps.spawnSync(\"bunx\", argv, {\n    cwd: options.cwd,\n    stdio: options.stdio,\n    env: options.env ? { ...process.env, ...options.env } : process.env,\n    shell: options.shell ?? true,\n  });\n}\n\n/**\n * Spawn an arbitrary shell command (e.g. `vite build`) for workers that declare\n * a {@link WorkerBuildConfig} pre-deploy step. Uses the same injectable spawn\n * as {@link spawnWranglerSync} so unit tests capture it via the wrangler spawn\n * mock. Runs with `shell: true` so the `command` string is interpreted by the\n * shell (pipes, `&&`, env-prefixes all work).\n */\nexport function spawnBuildSync(\n  command: string,\n  options: SpawnWranglerSyncOptions,\n): ReturnType<typeof nodeSpawnSync> {\n  return wranglerSpawnDeps.spawnSync(command, [], {\n    cwd: options.cwd,\n    stdio: options.stdio,\n    env: options.env ? { ...process.env, ...options.env } : process.env,\n    shell: true,\n  });\n}\n"],"mappings":";;;;AAaA,MAAa,oBAAoB,EACpBA,WACZ;;;;;AAiBD,SAAgB,kBACd,MACA,SACkC;AAClC,QAAO,kBAAkB,UAAU,QAAQ,MAAM;EAC/C,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,KAAK,QAAQ,MAAM;GAAE,GAAG,QAAQ;GAAK,GAAG,QAAQ;GAAK,GAAG,QAAQ;EAChE,OAAO,QAAQ,SAAS;EACzB,CAAC;;;;;;;;;AAUJ,SAAgB,eACd,SACA,SACkC;AAClC,QAAO,kBAAkB,UAAU,SAAS,EAAE,EAAE;EAC9C,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,KAAK,QAAQ,MAAM;GAAE,GAAG,QAAQ;GAAK,GAAG,QAAQ;GAAK,GAAG,QAAQ;EAChE,OAAO;EACR,CAAC"}

package/dist/wranglerSpawn-PEDw4vkF.mjs

@@ -0,0 +1,3 @@
+import { n as spawnWranglerSync, r as wranglerSpawnDeps, t as spawnBuildSync } from "./wranglerSpawn-DX7fppPf.mjs";
+
+export { spawnWranglerSync };

package/dist/{zoneResolver-Dfp2glm8.mjs → zoneResolver-BPrCHiEV.mjs}

@@ -29,4 +29,4 @@ async function findZoneIdByName(api, zoneName) {
 
 //#endregion
 export { workerRouteStateKey as n, findZoneIdByName as t };
-//# sourceMappingURL=zoneResolver-Dfp2glm8.mjs.map
+//# sourceMappingURL=zoneResolver-BPrCHiEV.mjs.map

package/dist/{zoneResolver-Dfp2glm8.mjs.map → zoneResolver-BPrCHiEV.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"zoneResolver-Dfp2glm8.mjs","names":[],"sources":["../src/features/worker-route/worker-route.stateKey.ts","../src/core/routes/zoneResolver.ts"],"sourcesContent":["/** Primary key in `CfiState.resources` for a Cloudflare Workers zone route. */\nexport function workerRouteStateKey(zoneId: string, routeId: string): string {\n  return `wr_route:${zoneId}:${routeId}`;\n}\n","import type { CFApiClient } from \"../api/CFApiClient.js\";\n\n/**\n * Per-process cache of `zone_name` → `zone_id`. Zone IDs are stable for the\n * life of a Cloudflare account, so caching across a single Tamer invocation is\n * safe and avoids hammering `/zones` once per worker × env.\n */\nconst cache = new Map<string, string | null>();\n\n/**\n * Look up a Cloudflare zone ID by exact name. Returns `undefined` if no zone\n * matches under the configured account.\n *\n * Used by API-driven route operations (sync / destroy) when wrangler's\n * `zone_name` route shape needs to be reconciled to a `zone_id`.\n */\nexport async function findZoneIdByName(\n  api: CFApiClient,\n  zoneName: string,\n): Promise<string | undefined> {\n  const cached = cache.get(zoneName);\n  if (cached !== undefined) return cached ?? undefined;\n  const matches = await api.zonesListByName(zoneName);\n  const id = matches[0]?.id;\n  cache.set(zoneName, id ?? null);\n  return id;\n}\n\n/** Test-only: reset the per-process zone cache. */\nexport function resetZoneCache(): void {\n  cache.clear();\n}\n"],"mappings":";;AACA,SAAgB,oBAAoB,QAAgB,SAAyB;AAC3E,QAAO,YAAY,OAAO,GAAG;;;;;;;;;;ACK/B,MAAM,wBAAQ,IAAI,KAA4B;;;;;;;;AAS9C,eAAsB,iBACpB,KACA,UAC6B;CAC7B,MAAM,SAAS,MAAM,IAAI,SAAS;AAClC,KAAI,WAAW,OAAW,QAAO,UAAU;CAE3C,MAAM,MADU,MAAM,IAAI,gBAAgB,SAAS,EAChC,IAAI;AACvB,OAAM,IAAI,UAAU,MAAM,KAAK;AAC/B,QAAO"}
+{"version":3,"file":"zoneResolver-BPrCHiEV.mjs","names":[],"sources":["../src/features/worker-route/worker-route.stateKey.ts","../src/core/routes/zoneResolver.ts"],"sourcesContent":["/** Primary key in `CfiState.resources` for a Cloudflare Workers zone route. */\nexport function workerRouteStateKey(zoneId: string, routeId: string): string {\n  return `wr_route:${zoneId}:${routeId}`;\n}\n","import type { CFApiClient } from \"../api/CFApiClient.js\";\n\n/**\n * Per-process cache of `zone_name` → `zone_id`. Zone IDs are stable for the\n * life of a Cloudflare account, so caching across a single Tamer invocation is\n * safe and avoids hammering `/zones` once per worker × env.\n */\nconst cache = new Map<string, string | null>();\n\n/**\n * Look up a Cloudflare zone ID by exact name. Returns `undefined` if no zone\n * matches under the configured account.\n *\n * Used by API-driven route operations (sync / destroy) when wrangler's\n * `zone_name` route shape needs to be reconciled to a `zone_id`.\n */\nexport async function findZoneIdByName(\n  api: CFApiClient,\n  zoneName: string,\n): Promise<string | undefined> {\n  const cached = cache.get(zoneName);\n  if (cached !== undefined) return cached ?? undefined;\n  const matches = await api.zonesListByName(zoneName);\n  const id = matches[0]?.id;\n  cache.set(zoneName, id ?? null);\n  return id;\n}\n\n/** Test-only: reset the per-process zone cache. */\nexport function resetZoneCache(): void {\n  cache.clear();\n}\n"],"mappings":";;AACA,SAAgB,oBAAoB,QAAgB,SAAyB;AAC3E,QAAO,YAAY,OAAO,GAAG;;;;;;;;;;ACK/B,MAAM,wBAAQ,IAAI,KAA4B;;;;;;;;AAS9C,eAAsB,iBACpB,KACA,UAC6B;CAC7B,MAAM,SAAS,MAAM,IAAI,SAAS;AAClC,KAAI,WAAW,OAAW,QAAO,UAAU;CAE3C,MAAM,MADU,MAAM,IAAI,gBAAgB,SAAS,EAChC,IAAI;AACvB,OAAM,IAAI,UAAU,MAAM,KAAK;AAC/B,QAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dragonmastery/tamer",
-  "version": "0.43.0",
+  "version": "0.43.1",
   "description": "Tamer: Cloudflare Workers infra CLI (sync, apply, deploy, migrate, destroy) and Wrangler-oriented TypeScript types.",
   "author": "DragonMastery",
   "license": "SEE LICENSE IN LICENSE",

package/dist/SecretsVault-D_JTJm5s.mjs

@@ -1,3 +0,0 @@
-import { m as SecretsVault } from "./tamer.mjs";
-
-export { SecretsVault };

package/dist/crypto-5HwDmS4B.mjs

@@ -1,3 +0,0 @@
-import { d as decryptSecretValue, f as encryptSecretValue, u as SecretsCryptoError } from "./tamer.mjs";
-
-export { decryptSecretValue, encryptSecretValue };

package/dist/drift-RsT8UGQw.mjs

@@ -1,8 +0,0 @@
-import "./registry-CRgobiU4.mjs";
-import "./r2S3EmptyBucket-CDE2lTM8.mjs";
-import { n as runDrift, t as computeDriftReport } from "./drift-B-oPsgPW.mjs";
-import "./logpush-job-DZG-3nkJ.mjs";
-import "./worker-route-BPDAwUL0.mjs";
-import "./workers-D08-ri2Q.mjs";
-
-export { runDrift };

package/dist/fingerprint-D6E5FTkq.mjs

@@ -1,3 +0,0 @@
-import { l as secretValueFingerprint } from "./tamer.mjs";
-
-export {  };

package/dist/loader-DY6STQU3.mjs

@@ -1,3 +0,0 @@
-import { it as loadConfig, nt as getConfigBaseDir, rt as getWorkers } from "./tamer.mjs";
-
-export { getConfigBaseDir };

package/dist/masterKey-D9gq3eNP.mjs

@@ -1,3 +0,0 @@
-import { G as readMasterKeyFromEnv, H as generateMasterKey, U as masterKeyEnvVarName, V as MASTER_KEY_BYTE_LENGTH, W as parseMasterKey } from "./tamer.mjs";
-
-export { readMasterKeyFromEnv };

package/dist/secretsDb-CMEcKvSi.mjs

@@ -1,3 +0,0 @@
-import { J as deleteEnvSecretRows, K as SECRET_HISTORY_CAP, Q as tamerSecretsDatabaseName, X as findTamerSecretsDatabaseUuid, Y as ensureTamerSecretsDatabase, Z as secretRowKey, q as copyEnvSecretRows } from "./tamer.mjs";
-
-export { ensureTamerSecretsDatabase };