alepha 0.20.6 → 0.20.7

package/dist/cli/platform/index.d.ts

@@ -7,6 +7,7 @@ import * as _$alepha_logger0 from "alepha/logger";
 import { ConsoleColorProvider } from "alepha/logger";
 import { FileSystemProvider, ShellProvider } from "alepha/system";
 import { DateTimeProvider } from "alepha/datetime";
+import * as _$typebox from "typebox";
 
 //#region ../../src/cli/platform/atoms/platformOptions.d.ts
 /**
@@ -15,50 +16,62 @@ import { DateTimeProvider } from "alepha/datetime";
  * Filled from the `platform` section of `alepha.config.ts`.
  * Read by `PlatformCommand` to resolve environments and adapters.
  */
-declare const platformOptions: _$alepha.Atom<_$alepha.TOptional<_$alepha.TObject<{
+declare const platformOptions: _$alepha.Atom<_$typebox.TOptional<_$typebox.TObject<{
   /**
    * Project name override. Defaults to root package.json "name".
    */
-  name: _$alepha.TOptional<_$alepha.TString>;
+  name: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Monorepo app paths relative to root. Omit for standalone apps.
    */
-  apps: _$alepha.TOptional<_$alepha.TArray<_$alepha.TString>>;
+  apps: _$typebox.TOptional<_$typebox.TArray<_$typebox.TString>>;
   /**
    * Default environment when --env is omitted.
    *
    * @default "production"
    */
-  default: _$alepha.TOptional<_$alepha.TString>;
+  default: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Secret store configuration for syncing .env secrets
    * to external providers (e.g. GitHub Actions environments).
    */
-  secrets: _$alepha.TOptional<_$alepha.TObject<{
+  secrets: _$typebox.TOptional<_$typebox.TObject<{
     /**
      * Secret store backend.
      */
-    store: _$alepha.TUnsafe<"github">;
+    store: _$typebox.TUnsafe<"github">;
     /**
      * Pattern for resolving environment names in the store.
      * Placeholders: {project}, {env}.
      *
      * @default "{project}-{env}"
      */
-    environmentPattern: _$alepha.TOptional<_$alepha.TString>;
+    environmentPattern: _$typebox.TOptional<_$typebox.TString>;
   }>>;
   /**
    * Named environments with their adapter and configuration.
    */
-  environments: _$alepha.TRecord<"^.*$", _$alepha.TObject<{
-    adapter: _$alepha.TUnsafe<"cloudflare" | "vercel">;
+  environments: _$typebox.TRecord<"^.*$", _$typebox.TObject<{
+    adapter: _$typebox.TUnsafe<"cloudflare" | "vercel">;
     /**
      * Custom domain for the deployed worker (e.g. "api.example.com").
      *
      * On Cloudflare this is attached as a custom-domain route.
      * Omit to use the adapter's default `*.workers.dev` / preview URL.
+     *
+     * Wildcards are supported for multi-tenant SaaS apps:
+     * `"*.club.alepha.dev"` routes every subdomain to the worker.
+     * Wildcard patterns require `zone` to be set, and the wildcard DNS
+     * record must already exist (proxied) in the Cloudflare zone.
+     */
+    domain: _$typebox.TOptional<_$typebox.TString>;
+    /**
+     * Cloudflare zone name (e.g. "alepha.dev") that owns `domain`.
+     *
+     * Required when `domain` contains a wildcard (`*`). Ignored for
+     * plain custom domains, which Cloudflare resolves automatically.
      */
-    domain: _$alepha.TOptional<_$alepha.TString>;
+    zone: _$typebox.TOptional<_$typebox.TString>;
     /**
      * Cloudflare data jurisdiction for R2 buckets and D1 databases.
      * - "eu": data stays within the EU
@@ -66,7 +79,7 @@ declare const platformOptions: _$alepha.Atom<_$alepha.TOptional<_$alepha.TObject
      *
      * Omit for the default (global) jurisdiction.
      */
-    jurisdiction: _$alepha.TOptional<_$alepha.TUnsafe<"eu" | "fedramp">>;
+    jurisdiction: _$typebox.TOptional<_$typebox.TUnsafe<"eu" | "fedramp">>;
     /**
      * Cloudflare account ID to deploy into.
      *
@@ -74,7 +87,7 @@ declare const platformOptions: _$alepha.Atom<_$alepha.TOptional<_$alepha.TObject
      * token's account when the token is scoped to exactly one.
      * Required when the token has access to multiple accounts.
      */
-    accountId: _$alepha.TOptional<_$alepha.TString>;
+    accountId: _$typebox.TOptional<_$typebox.TString>;
   }>>;
 }>>, "alepha.cli.platform.options">;
 /**
@@ -87,6 +100,7 @@ type PlatformOptions = Static<typeof platformOptions.schema>;
 interface EnvironmentConfig {
   adapter: "cloudflare" | "vercel";
   domain?: string;
+  zone?: string;
   vars?: Record<string, string>;
   jurisdiction?: "eu" | "fedramp";
   accountId?: string;
@@ -118,146 +132,146 @@ declare class PlatformCacheProvider {
 }
 //#endregion
 //#region ../../src/cli/platform/schemas/cloudflare.d.ts
-declare const cloudflareAccountSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  name: _$alepha.TString;
+declare const cloudflareAccountSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  name: _$typebox.TString;
 }>;
 type CloudflareAccount = Static<typeof cloudflareAccountSchema>;
-declare const cloudflareD1Schema: _$alepha.TObject<{
-  uuid: _$alepha.TString;
-  name: _$alepha.TString;
+declare const cloudflareD1Schema: _$typebox.TObject<{
+  uuid: _$typebox.TString;
+  name: _$typebox.TString;
 }>;
 type CloudflareD1 = Static<typeof cloudflareD1Schema>;
-declare const cloudflareKVSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  title: _$alepha.TString;
+declare const cloudflareKVSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  title: _$typebox.TString;
 }>;
 type CloudflareKV = Static<typeof cloudflareKVSchema>;
-declare const cloudflareR2Schema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  creation_date: _$alepha.TOptional<_$alepha.TString>;
+declare const cloudflareR2Schema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  creation_date: _$typebox.TOptional<_$typebox.TString>;
 }>;
 type CloudflareR2 = Static<typeof cloudflareR2Schema>;
-declare const cloudflareR2ListSchema: _$alepha.TObject<{
-  buckets: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    creation_date: _$alepha.TOptional<_$alepha.TString>;
+declare const cloudflareR2ListSchema: _$typebox.TObject<{
+  buckets: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    creation_date: _$typebox.TOptional<_$typebox.TString>;
   }>>;
 }>;
-declare const cloudflareQueueSchema: _$alepha.TObject<{
-  queue_id: _$alepha.TString;
-  queue_name: _$alepha.TString;
+declare const cloudflareQueueSchema: _$typebox.TObject<{
+  queue_id: _$typebox.TString;
+  queue_name: _$typebox.TString;
 }>;
 type CloudflareQueue = Static<typeof cloudflareQueueSchema>;
-declare const cloudflareQueueConsumerSchema: _$alepha.TObject<{
-  consumer_id: _$alepha.TString;
-  service: _$alepha.TString;
-  environment: _$alepha.TOptional<_$alepha.TString>;
+declare const cloudflareQueueConsumerSchema: _$typebox.TObject<{
+  consumer_id: _$typebox.TString;
+  service: _$typebox.TString;
+  environment: _$typebox.TOptional<_$typebox.TString>;
 }>;
 type CloudflareQueueConsumer = Static<typeof cloudflareQueueConsumerSchema>;
-declare const cloudflareHyperdriveOriginSchema: _$alepha.TObject<{
-  host: _$alepha.TString;
+declare const cloudflareHyperdriveOriginSchema: _$typebox.TObject<{
+  host: _$typebox.TString;
 }>;
-declare const cloudflareHyperdriveSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  name: _$alepha.TString;
-  origin: _$alepha.TObject<{
-    host: _$alepha.TString;
+declare const cloudflareHyperdriveSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  name: _$typebox.TString;
+  origin: _$typebox.TObject<{
+    host: _$typebox.TString;
   }>;
 }>;
 type CloudflareHyperdrive = Static<typeof cloudflareHyperdriveSchema>;
-declare const cloudflareWorkerSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  created_on: _$alepha.TString;
-  modified_on: _$alepha.TString;
+declare const cloudflareWorkerSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  created_on: _$typebox.TString;
+  modified_on: _$typebox.TString;
 }>;
 type CloudflareWorker = Static<typeof cloudflareWorkerSchema>;
-declare const cloudflareDeploymentVersionSchema: _$alepha.TObject<{
-  version_id: _$alepha.TString;
-  percentage: _$alepha.TNumber;
+declare const cloudflareDeploymentVersionSchema: _$typebox.TObject<{
+  version_id: _$typebox.TString;
+  percentage: _$typebox.TNumber;
 }>;
-declare const cloudflareDeploymentSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  versions: _$alepha.TArray<_$alepha.TObject<{
-    version_id: _$alepha.TString;
-    percentage: _$alepha.TNumber;
+declare const cloudflareDeploymentSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  versions: _$typebox.TArray<_$typebox.TObject<{
+    version_id: _$typebox.TString;
+    percentage: _$typebox.TNumber;
   }>>;
-  created_on: _$alepha.TString;
+  created_on: _$typebox.TString;
 }>;
 type CloudflareDeployment = Static<typeof cloudflareDeploymentSchema>;
-declare const cloudflareDeploymentListSchema: _$alepha.TObject<{
-  deployments: _$alepha.TArray<_$alepha.TObject<{
-    id: _$alepha.TString;
-    versions: _$alepha.TArray<_$alepha.TObject<{
-      version_id: _$alepha.TString;
-      percentage: _$alepha.TNumber;
+declare const cloudflareDeploymentListSchema: _$typebox.TObject<{
+  deployments: _$typebox.TArray<_$typebox.TObject<{
+    id: _$typebox.TString;
+    versions: _$typebox.TArray<_$typebox.TObject<{
+      version_id: _$typebox.TString;
+      percentage: _$typebox.TNumber;
     }>>;
-    created_on: _$alepha.TString;
+    created_on: _$typebox.TString;
   }>>;
 }>;
-declare const cloudflareVersionSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  metadata: _$alepha.TObject<{
-    created_on: _$alepha.TString;
+declare const cloudflareVersionSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  metadata: _$typebox.TObject<{
+    created_on: _$typebox.TString;
   }>;
-  annotations: _$alepha.TOptional<_$alepha.TRecord<"^.*$", _$alepha.TString>>;
+  annotations: _$typebox.TOptional<_$typebox.TRecord<"^.*$", _$typebox.TString>>;
 }>;
 type CloudflareVersion = Static<typeof cloudflareVersionSchema>;
-declare const cloudflareVersionListSchema: _$alepha.TObject<{
-  items: _$alepha.TArray<_$alepha.TObject<{
-    id: _$alepha.TString;
-    metadata: _$alepha.TObject<{
-      created_on: _$alepha.TString;
+declare const cloudflareVersionListSchema: _$typebox.TObject<{
+  items: _$typebox.TArray<_$typebox.TObject<{
+    id: _$typebox.TString;
+    metadata: _$typebox.TObject<{
+      created_on: _$typebox.TString;
     }>;
-    annotations: _$alepha.TOptional<_$alepha.TRecord<"^.*$", _$alepha.TString>>;
+    annotations: _$typebox.TOptional<_$typebox.TRecord<"^.*$", _$typebox.TString>>;
   }>>;
 }>;
-declare const cloudflareSecretSchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  type: _$alepha.TString;
+declare const cloudflareSecretSchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  type: _$typebox.TString;
 }>;
 type CloudflareSecret = Static<typeof cloudflareSecretSchema>;
-declare const createD1BodySchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  primary_location_hint: _$alepha.TOptional<_$alepha.TString>;
-  jurisdiction: _$alepha.TOptional<_$alepha.TString>;
+declare const createD1BodySchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  primary_location_hint: _$typebox.TOptional<_$typebox.TString>;
+  jurisdiction: _$typebox.TOptional<_$typebox.TString>;
 }>;
-declare const createKVBodySchema: _$alepha.TObject<{
-  title: _$alepha.TString;
+declare const createKVBodySchema: _$typebox.TObject<{
+  title: _$typebox.TString;
 }>;
-declare const createR2BodySchema: _$alepha.TObject<{
-  name: _$alepha.TString;
+declare const createR2BodySchema: _$typebox.TObject<{
+  name: _$typebox.TString;
 }>;
-declare const createQueueBodySchema: _$alepha.TObject<{
-  queue_name: _$alepha.TString;
+declare const createQueueBodySchema: _$typebox.TObject<{
+  queue_name: _$typebox.TString;
 }>;
-declare const createHyperdriveOriginSchema: _$alepha.TObject<{
-  scheme: _$alepha.TString;
-  host: _$alepha.TString;
-  port: _$alepha.TNumber;
-  database: _$alepha.TString;
-  user: _$alepha.TString;
-  password: _$alepha.TString;
+declare const createHyperdriveOriginSchema: _$typebox.TObject<{
+  scheme: _$typebox.TString;
+  host: _$typebox.TString;
+  port: _$typebox.TNumber;
+  database: _$typebox.TString;
+  user: _$typebox.TString;
+  password: _$typebox.TString;
 }>;
-declare const createHyperdriveBodySchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  origin: _$alepha.TObject<{
-    scheme: _$alepha.TString;
-    host: _$alepha.TString;
-    port: _$alepha.TNumber;
-    database: _$alepha.TString;
-    user: _$alepha.TString;
-    password: _$alepha.TString;
+declare const createHyperdriveBodySchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  origin: _$typebox.TObject<{
+    scheme: _$typebox.TString;
+    host: _$typebox.TString;
+    port: _$typebox.TNumber;
+    database: _$typebox.TString;
+    user: _$typebox.TString;
+    password: _$typebox.TString;
   }>;
 }>;
-declare const putSecretBodySchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  text: _$alepha.TString;
-  type: _$alepha.TString;
+declare const putSecretBodySchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  text: _$typebox.TString;
+  type: _$typebox.TString;
 }>;
-declare const cloudflareApiErrorSchema: _$alepha.TObject<{
-  code: _$alepha.TNumber;
-  message: _$alepha.TString;
+declare const cloudflareApiErrorSchema: _$typebox.TObject<{
+  code: _$typebox.TNumber;
+  message: _$typebox.TString;
 }>;
 type CloudflareApiError = Static<typeof cloudflareApiErrorSchema>;
 //#endregion
@@ -368,6 +382,38 @@ declare class CloudflareApi {
   listVersions(scriptName: string): Promise<CloudflareVersion[]>;
   listSecrets(scriptName: string): Promise<CloudflareSecret[]>;
   putSecret(scriptName: string, name: string, value: string): Promise<void>;
+  /**
+   * Fetch the current worker bindings via the script-settings endpoint.
+   * Used to merge new secrets into the existing binding set in one PATCH
+   * (avoids the per-secret `putSecret` calls, each of which creates a
+   * Cloudflare deployment — pushing 7 secrets meant 7 deployment rows).
+   *
+   * Secret bindings come back with `name` + `type` but no `text` (they're
+   * write-only on Cloudflare's side); to preserve them across a PATCH we
+   * forward each one as `{ type, name }` and Cloudflare keeps the stored
+   * value.
+   */
+  getWorkerSettings(scriptName: string): Promise<{
+    bindings: Array<{
+      type: string;
+      name: string;
+      text?: string;
+    }>;
+  }>;
+  /**
+   * Replace the worker's binding set in one call (= one Cloudflare
+   * deployment, regardless of how many secrets are being updated).
+   *
+   * The endpoint expects multipart FormData with a `settings` field whose
+   * value is a JSON-encoded `{ bindings: [...] }` — the `fetch` helper
+   * above is JSON-only, so this one bypasses it and calls `globalThis.fetch`
+   * directly. Mirrors what `wrangler secret bulk` does internally.
+   */
+  patchWorkerBindings(scriptName: string, bindings: Array<{
+    type: string;
+    name: string;
+    text?: string;
+  }>): Promise<void>;
   protected fetch<T = unknown>(path: string, options?: {
     method?: string;
     body?: unknown;
@@ -603,6 +649,11 @@ declare class CloudflareAdapter extends PlatformAdapter {
    */
   static readonly EXCLUDED_SECRET_KEYS: Set<string>;
   secrets(ctx: PlatformContext, run: RunnerMethod): Promise<void>;
+  /**
+   * Plain-text binding used to fingerprint the deployed secret set so the
+   * next `up` can skip the PATCH when nothing has changed.
+   */
+  static readonly SECRETS_HASH_BINDING = "ALEPHA_SECRETS_HASH";
   provision(ctx: PlatformContext, run: RunnerMethod): Promise<void>;
   migrate(ctx: PlatformContext, run: RunnerMethod): Promise<void>;
   protected migrateD1(ctx: PlatformContext, run: RunnerMethod): Promise<void>;
@@ -625,40 +676,40 @@ declare class CloudflareAdapter extends PlatformAdapter {
 }
 //#endregion
 //#region ../../src/cli/platform/schemas/vercel.d.ts
-declare const vercelProjectSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  name: _$alepha.TString;
-  accountId: _$alepha.TString;
+declare const vercelProjectSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  name: _$typebox.TString;
+  accountId: _$typebox.TString;
 }>;
 type VercelProject = Static<typeof vercelProjectSchema>;
-declare const createProjectBodySchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  framework: _$alepha.TOptional<_$alepha.TNull>;
+declare const createProjectBodySchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  framework: _$typebox.TOptional<_$typebox.TNull>;
 }>;
-declare const vercelDeploymentSchema: _$alepha.TObject<{
-  uid: _$alepha.TString;
-  name: _$alepha.TString;
-  url: _$alepha.TString;
-  state: _$alepha.TOptional<_$alepha.TString>;
-  readyState: _$alepha.TOptional<_$alepha.TString>;
-  created: _$alepha.TOptional<_$alepha.TNumber>;
-  target: _$alepha.TOptional<_$alepha.TString>;
-  alias: _$alepha.TOptional<_$alepha.TArray<_$alepha.TString>>;
+declare const vercelDeploymentSchema: _$typebox.TObject<{
+  uid: _$typebox.TString;
+  name: _$typebox.TString;
+  url: _$typebox.TString;
+  state: _$typebox.TOptional<_$typebox.TString>;
+  readyState: _$typebox.TOptional<_$typebox.TString>;
+  created: _$typebox.TOptional<_$typebox.TNumber>;
+  target: _$typebox.TOptional<_$typebox.TString>;
+  alias: _$typebox.TOptional<_$typebox.TArray<_$typebox.TString>>;
 }>;
 type VercelDeployment = Static<typeof vercelDeploymentSchema>;
-declare const vercelEnvVarSchema: _$alepha.TObject<{
-  id: _$alepha.TString;
-  key: _$alepha.TString;
-  value: _$alepha.TOptional<_$alepha.TString>;
-  type: _$alepha.TString;
-  target: _$alepha.TArray<_$alepha.TString>;
+declare const vercelEnvVarSchema: _$typebox.TObject<{
+  id: _$typebox.TString;
+  key: _$typebox.TString;
+  value: _$typebox.TOptional<_$typebox.TString>;
+  type: _$typebox.TString;
+  target: _$typebox.TArray<_$typebox.TString>;
 }>;
 type VercelEnvVar = Static<typeof vercelEnvVarSchema>;
-declare const createEnvVarBodySchema: _$alepha.TObject<{
-  key: _$alepha.TString;
-  value: _$alepha.TString;
-  type: _$alepha.TString;
-  target: _$alepha.TArray<_$alepha.TString>;
+declare const createEnvVarBodySchema: _$typebox.TObject<{
+  key: _$typebox.TString;
+  value: _$typebox.TString;
+  type: _$typebox.TString;
+  target: _$typebox.TArray<_$typebox.TString>;
 }>;
 //#endregion
 //#region ../../src/cli/platform/services/VercelCli.d.ts
@@ -819,6 +870,7 @@ declare class PlatformInspector {
     } | undefined;
     environments: Record<string, {
       domain?: string | undefined;
+      zone?: string | undefined;
       jurisdiction?: "eu" | "fedramp" | undefined;
       accountId?: string | undefined;
       adapter: "cloudflare" | "vercel";
@@ -1014,6 +1066,7 @@ declare class SecretsCommand {
     } | undefined;
     environments: Record<string, {
       domain?: string | undefined;
+      zone?: string | undefined;
       jurisdiction?: "eu" | "fedramp" | undefined;
       accountId?: string | undefined;
       adapter: "cloudflare" | "vercel";
@@ -1025,21 +1078,21 @@ declare class SecretsCommand {
   protected readonly githubStore: GitHubSecretStore;
   protected readonly filter: SecretFilterService;
   protected readonly color: ConsoleColorProvider;
-  protected readonly envFlags: _$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
+  protected readonly envFlags: _$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
   }>;
-  protected readonly list: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    format: _$alepha.TOptional<_$alepha.TString>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly diff: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly apply: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    "dry-run": _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  readonly secrets: _$alepha_command0.CommandPrimitive<_$alepha.TObject<_$alepha.TProperties>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
+  protected readonly list: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    format: _$typebox.TOptional<_$typebox.TString>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly diff: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly apply: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    "dry-run": _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  readonly secrets: _$alepha_command0.CommandPrimitive<_$typebox.TObject<_$typebox.TProperties>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
   resolveStore(): SecretStoreProvider;
   protected resolveEnvironmentName(project: string, env: string): string;
 }
@@ -1057,6 +1110,7 @@ declare class PlatformCommand {
     } | undefined;
     environments: Record<string, {
       domain?: string | undefined;
+      zone?: string | undefined;
       jurisdiction?: "eu" | "fedramp" | undefined;
       accountId?: string | undefined;
       adapter: "cloudflare" | "vercel";
@@ -1073,55 +1127,55 @@ declare class PlatformCommand {
   /**
    * Common flags for env/app targeting.
    */
-  protected readonly envFlags: _$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
+  protected readonly envFlags: _$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
   }>;
-  protected readonly plan: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly up: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly down: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly status: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly build: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly deploy: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  protected readonly migrate: _$alepha_command0.CommandPrimitive<_$alepha.TObject<{
-    env: _$alepha.TOptional<_$alepha.TString>;
-    app: _$alepha.TOptional<_$alepha.TString>;
-    verbose: _$alepha.TOptional<_$alepha.TBoolean>;
-    json: _$alepha.TOptional<_$alepha.TBoolean>;
-  }>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
-  readonly platform: _$alepha_command0.CommandPrimitive<_$alepha.TObject<_$alepha.TProperties>, _$alepha.TSchema, _$alepha.TObject<_$alepha.TProperties>>;
+  protected readonly plan: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly up: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly down: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly status: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly build: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly deploy: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  protected readonly migrate: _$alepha_command0.CommandPrimitive<_$typebox.TObject<{
+    env: _$typebox.TOptional<_$typebox.TString>;
+    app: _$typebox.TOptional<_$typebox.TString>;
+    verbose: _$typebox.TOptional<_$typebox.TBoolean>;
+    json: _$typebox.TOptional<_$typebox.TBoolean>;
+  }>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
+  readonly platform: _$alepha_command0.CommandPrimitive<_$typebox.TObject<_$typebox.TProperties>, _$typebox.TSchema, _$typebox.TObject<_$typebox.TProperties>>;
   /**
    * Resolve app definitions.
    *
@@ -1235,118 +1289,120 @@ declare class MemorySecretStore implements SecretStoreProvider {
 }
 //#endregion
 //#region ../../src/cli/platform/schemas/platform.d.ts
-declare const platformStatusWorkerSchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  exists: _$alepha.TBoolean;
-  id: _$alepha.TOptional<_$alepha.TString>;
-  detail: _$alepha.TOptional<_$alepha.TString>;
-  version: _$alepha.TOptional<_$alepha.TString>;
-  tag: _$alepha.TOptional<_$alepha.TString>;
-  createdAt: _$alepha.TOptional<_$alepha.TString>;
+declare const platformStatusWorkerSchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  exists: _$typebox.TBoolean;
+  id: _$typebox.TOptional<_$typebox.TString>;
+  detail: _$typebox.TOptional<_$typebox.TString>;
+  version: _$typebox.TOptional<_$typebox.TString>;
+  tag: _$typebox.TOptional<_$typebox.TString>;
+  createdAt: _$typebox.TOptional<_$typebox.TString>;
 }>;
-declare const platformStatusResourceSchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  exists: _$alepha.TBoolean;
-  id: _$alepha.TOptional<_$alepha.TString>;
-  detail: _$alepha.TOptional<_$alepha.TString>;
+declare const platformStatusResourceSchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  exists: _$typebox.TBoolean;
+  id: _$typebox.TOptional<_$typebox.TString>;
+  detail: _$typebox.TOptional<_$typebox.TString>;
 }>;
-declare const platformStatusSecretSchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  deployed: _$alepha.TBoolean;
+declare const platformStatusSecretSchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  deployed: _$typebox.TBoolean;
 }>;
-declare const platformStatusSchema: _$alepha.TObject<{
-  project: _$alepha.TString;
-  env: _$alepha.TString;
-  adapter: _$alepha.TString;
-  workers: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    exists: _$alepha.TBoolean;
-    id: _$alepha.TOptional<_$alepha.TString>;
-    detail: _$alepha.TOptional<_$alepha.TString>;
-    version: _$alepha.TOptional<_$alepha.TString>;
-    tag: _$alepha.TOptional<_$alepha.TString>;
-    createdAt: _$alepha.TOptional<_$alepha.TString>;
+declare const platformStatusSchema: _$typebox.TObject<{
+  project: _$typebox.TString;
+  env: _$typebox.TString;
+  adapter: _$typebox.TString;
+  workers: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    exists: _$typebox.TBoolean;
+    id: _$typebox.TOptional<_$typebox.TString>;
+    detail: _$typebox.TOptional<_$typebox.TString>;
+    version: _$typebox.TOptional<_$typebox.TString>;
+    tag: _$typebox.TOptional<_$typebox.TString>;
+    createdAt: _$typebox.TOptional<_$typebox.TString>;
   }>>;
-  databases: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    exists: _$alepha.TBoolean;
-    id: _$alepha.TOptional<_$alepha.TString>;
-    detail: _$alepha.TOptional<_$alepha.TString>;
+  databases: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    exists: _$typebox.TBoolean;
+    id: _$typebox.TOptional<_$typebox.TString>;
+    detail: _$typebox.TOptional<_$typebox.TString>;
   }>>;
-  buckets: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    exists: _$alepha.TBoolean;
-    id: _$alepha.TOptional<_$alepha.TString>;
-    detail: _$alepha.TOptional<_$alepha.TString>;
+  buckets: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    exists: _$typebox.TBoolean;
+    id: _$typebox.TOptional<_$typebox.TString>;
+    detail: _$typebox.TOptional<_$typebox.TString>;
   }>>;
-  kvNamespaces: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    exists: _$alepha.TBoolean;
-    id: _$alepha.TOptional<_$alepha.TString>;
-    detail: _$alepha.TOptional<_$alepha.TString>;
+  kvNamespaces: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    exists: _$typebox.TBoolean;
+    id: _$typebox.TOptional<_$typebox.TString>;
+    detail: _$typebox.TOptional<_$typebox.TString>;
   }>>;
-  queues: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    exists: _$alepha.TBoolean;
-    id: _$alepha.TOptional<_$alepha.TString>;
-    detail: _$alepha.TOptional<_$alepha.TString>;
+  queues: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    exists: _$typebox.TBoolean;
+    id: _$typebox.TOptional<_$typebox.TString>;
+    detail: _$typebox.TOptional<_$typebox.TString>;
   }>>;
-  secrets: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    deployed: _$alepha.TBoolean;
+  secrets: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    deployed: _$typebox.TBoolean;
   }>>;
 }>;
 type PlatformStatusOutput = Static<typeof platformStatusSchema>;
-declare const platformPlanAppResourcesSchema: _$alepha.TObject<{
-  hasDatabase: _$alepha.TBoolean;
-  hasBucket: _$alepha.TBoolean;
-  hasKV: _$alepha.TBoolean;
-  hasQueue: _$alepha.TBoolean;
-  hasCron: _$alepha.TBoolean;
+declare const platformPlanAppResourcesSchema: _$typebox.TObject<{
+  hasDatabase: _$typebox.TBoolean;
+  hasBucket: _$typebox.TBoolean;
+  hasKV: _$typebox.TBoolean;
+  hasQueue: _$typebox.TBoolean;
+  hasCron: _$typebox.TBoolean;
 }>;
-declare const platformPlanAppSchema: _$alepha.TObject<{
-  name: _$alepha.TString;
-  path: _$alepha.TString;
-  resources: _$alepha.TObject<{
-    hasDatabase: _$alepha.TBoolean;
-    hasBucket: _$alepha.TBoolean;
-    hasKV: _$alepha.TBoolean;
-    hasQueue: _$alepha.TBoolean;
-    hasCron: _$alepha.TBoolean;
+declare const platformPlanAppSchema: _$typebox.TObject<{
+  name: _$typebox.TString;
+  path: _$typebox.TString;
+  resources: _$typebox.TObject<{
+    hasDatabase: _$typebox.TBoolean;
+    hasBucket: _$typebox.TBoolean;
+    hasKV: _$typebox.TBoolean;
+    hasQueue: _$typebox.TBoolean;
+    hasCron: _$typebox.TBoolean;
   }>;
 }>;
-declare const platformPlanEnvironmentSchema: _$alepha.TObject<{
-  adapter: _$alepha.TString;
-  domain: _$alepha.TOptional<_$alepha.TString>;
+declare const platformPlanEnvironmentSchema: _$typebox.TObject<{
+  adapter: _$typebox.TString;
+  domain: _$typebox.TOptional<_$typebox.TString>;
+  zone: _$typebox.TOptional<_$typebox.TString>;
 }>;
-declare const platformPlanResourceSchema: _$alepha.TObject<{
-  label: _$alepha.TString;
-  value: _$alepha.TString;
+declare const platformPlanResourceSchema: _$typebox.TObject<{
+  label: _$typebox.TString;
+  value: _$typebox.TString;
 }>;
-declare const platformPlanSchema: _$alepha.TObject<{
-  project: _$alepha.TString;
-  env: _$alepha.TString;
-  mode: _$alepha.TUnsafe<"monorepo" | "standalone">;
-  apps: _$alepha.TArray<_$alepha.TObject<{
-    name: _$alepha.TString;
-    path: _$alepha.TString;
-    resources: _$alepha.TObject<{
-      hasDatabase: _$alepha.TBoolean;
-      hasBucket: _$alepha.TBoolean;
-      hasKV: _$alepha.TBoolean;
-      hasQueue: _$alepha.TBoolean;
-      hasCron: _$alepha.TBoolean;
+declare const platformPlanSchema: _$typebox.TObject<{
+  project: _$typebox.TString;
+  env: _$typebox.TString;
+  mode: _$typebox.TUnsafe<"monorepo" | "standalone">;
+  apps: _$typebox.TArray<_$typebox.TObject<{
+    name: _$typebox.TString;
+    path: _$typebox.TString;
+    resources: _$typebox.TObject<{
+      hasDatabase: _$typebox.TBoolean;
+      hasBucket: _$typebox.TBoolean;
+      hasKV: _$typebox.TBoolean;
+      hasQueue: _$typebox.TBoolean;
+      hasCron: _$typebox.TBoolean;
     }>;
   }>>;
-  environments: _$alepha.TRecord<"^.*$", _$alepha.TObject<{
-    adapter: _$alepha.TString;
-    domain: _$alepha.TOptional<_$alepha.TString>;
+  environments: _$typebox.TRecord<"^.*$", _$typebox.TObject<{
+    adapter: _$typebox.TString;
+    domain: _$typebox.TOptional<_$typebox.TString>;
+    zone: _$typebox.TOptional<_$typebox.TString>;
   }>>;
-  resources: _$alepha.TArray<_$alepha.TObject<{
-    label: _$alepha.TString;
-    value: _$alepha.TString;
+  resources: _$typebox.TArray<_$typebox.TObject<{
+    label: _$typebox.TString;
+    value: _$typebox.TString;
   }>>;
-  secretCount: _$alepha.TNumber;
+  secretCount: _$typebox.TNumber;
 }>;
 type PlatformPlanOutput = Static<typeof platformPlanSchema>;
 //#endregion