cf-orbs 0.2.3 → 0.2.4

package/README.md

@@ -120,6 +120,7 @@ Before the deploy, `init` stops with one `Failed: … — fix: …` line when:
 - An extra image key has no `image/<key>.Dockerfile`.
 - The account has no workers.dev subdomain and you gave no `--subdomain` (in a terminal, `init` asks for one).
 - `wrangler containers list` fails with a clear plan or login error (Workers Paid is needed). Any other error is a warning.
+- The folder has no saved deployment and a Worker of the same name already exists in the account. `init` stops before it makes a control token, sets a secret or deploys, so it cannot overwrite a Worker that another folder made. Pass `--adopt` to take it over: a new control token replaces the old one, and this folder's config and `image/` are deployed. A rerun in the folder that made the Worker is not checked. If the check cannot run, it is a warning.
 
 After the deploy, `init` checks that `/v1/health` answers, that `/v1/status` accepts the control token, that at least one prewarm instance starts from the new image (self-test; skipped when `prewarm` is 0, and with `--no-deploy` until a build has run), and that the provider runs for 15 s with no token rejection and no second provider on the token.
 
@@ -184,7 +185,7 @@ Example: 120 awake hours a month at 20% CPU costs about $27.50 a month in total
 
 | Command | Does |
 | --- | --- |
-| `cf-orbs init [dir]` | Scaffold, deploy and check a provider. Flags: `--provider cloudflare\|external`, `--token-file`, `--account-id`, `--provider-name`, `--subdomain`, `--vcpu <1\|2\|3\|4>`, `--name <worker>`, `--no-deploy` (preview: [Workers Builds](https://github.com/meirdick/cf-orbs/blob/main/docs/install-workers-builds.md), no Docker) |
+| `cf-orbs init [dir]` | Scaffold, deploy and check a provider. Flags: `--provider cloudflare\|external`, `--token-file`, `--account-id`, `--provider-name`, `--subdomain`, `--vcpu <1\|2\|3\|4>`, `--name <worker>`, `--no-deploy` (preview: [Workers Builds](https://github.com/meirdick/cf-orbs/blob/main/docs/install-workers-builds.md), no Docker), `--adopt` (take over an existing Worker of the same name; see Back up) |
 | `cf-orbs status [orb]` | Install status (provider, awake orbs, snapshots), or one orb |
 | `cf-orbs logs <orb>` | Redacted bootstrap log of one orb. `--lines N` (default 200) |
 | `cf-orbs logs --provider` | Redacted provider log (last 20 lines) |
@@ -227,7 +228,7 @@ After `cf-orbs deploy`, an orb that is awake keeps the old Worker code until it
 
 ### Back up
 
-Running orbs need nothing on your machine: the Worker, the orbs and the snapshots are in Cloudflare. Back up `cf-orbs.config.jsonc` and `image/` (a private git repo is enough; the `.gitignore` that `init` writes keeps the control token out). Keep the Amp provider token in a password manager if you want to restore without making a new one. The control token can be made again. See [Back up and restore](https://cf-orbs-site.mdick85.workers.dev/docs/guides/back-up-and-restore/).
+Running orbs need nothing on your machine: the Worker, the orbs and the snapshots are in Cloudflare. Back up `cf-orbs.config.jsonc` and `image/` (a private git repo is enough; the `.gitignore` that `init` writes keeps the control token out). Keep the Amp provider token in a password manager if you want to restore without making a new one. The control token can be made again. To restore in a new folder, run `init --adopt`: without it, `init` stops because the Worker already exists. See [Back up and restore](https://cf-orbs-site.mdick85.workers.dev/docs/guides/back-up-and-restore/).
 
 ## Troubleshooting
 
@@ -279,7 +280,7 @@ To report a vulnerability, see [SECURITY.md](https://github.com/meirdick/cf-orbs
 
 ## Status and known gaps
 
-v0.2.3. The control plane, dispatch program, provider host and CLI are built and unit tested. On 2026-10-30 a real Amp thread ran end to end on a fresh install: spawn from the image, setup, pause with a project snapshot, wake from the snapshot in 2.3 s, first answer 41 s after the message.
+v0.2.4. The control plane, dispatch program, provider host and CLI are built and unit tested. On 2026-10-30 a real Amp thread ran end to end on a fresh install: spawn from the image, setup, pause with a project snapshot, wake from the snapshot in 2.3 s, first answer 41 s after the message.
 
 Known gaps:
 

package/dist/commands/init.js

@@ -14,7 +14,7 @@ import { dockerOk, nodeMajor, whoami } from "../probes.js";
 import { cliVersion, GIT_DEPLOY_COMMAND, generateToken, gitPackageJson, materialize, missingDockerfiles, readControlToken, readState, withSecretsFile, writeControlToken, writeState, writeWranglerConfig, } from "../project.js";
 import { checkSubdomain, registerSubdomain, suggestSubdomain, wranglerBearer } from "../subdomain.js";
 import { ask, askHidden } from "../ui.js";
-import { classifyDeployFailure, deployFailureError, lastErrorLine, makeWrangler, WRANGLER_PIN, } from "../wrangler.js";
+import { classifyDeployFailure, deployFailureError, lastErrorLine, lookupWorker, makeWrangler, WRANGLER_PIN, } from "../wrangler.js";
 import { deployProject, startPrewarm } from "./deploy.js";
 export const PROVIDER_WAIT_MS = 90_000;
 /** How long init waits for the prewarm instances (a first start on a cold host pulls the image). */
@@ -134,6 +134,12 @@ export function plan(o, p) {
         { kind: "plan-check" },
         { kind: "scaffold", mode: o.mode, git: Boolean(o.noDeploy) },
     ];
+    // A folder with no saved deployment and no control token must not overwrite a Worker it did not create.
+    // A folder with a control token made the Worker before (a run that failed before it saved the URL) or holds a
+    // restored backup: it keeps the same token, so nothing is lost. Runs after scaffold (the Worker name is in the
+    // config then) and before the control token, the secrets and the deploy.
+    if (!p.deployed && !p.hasControlToken)
+        steps.push({ kind: "adopt-check", adopt: Boolean(o.adopt) });
     steps.push({ kind: "control-token", action: p.hasControlToken ? "reuse" : "generate" });
     if (ampSource)
         steps.push({ kind: "amp-token", source: ampSource });
@@ -330,6 +336,19 @@ export async function runInit(ctx, o, steps) {
                 await writeState(paths, state);
                 break;
             }
+            case "adopt-check": {
+                if (!config)
+                    throw new Error("init plan bug: adopt-check before scaffold");
+                const found = await lookupWorker(makeWrangler(ctx.run, { accountId }), config.name);
+                if (found.kind === "found") {
+                    if (!s.adopt)
+                        throw new CliError(`Worker ${config.name} already exists in this account and this folder did not create it`, "run init in the folder that made it, restore that folder (see Back up and restore), pass --name <new> for a second install, or pass --adopt to take it over");
+                    ui.warn(`adopt: taking over Worker ${config.name}; a new control token replaces the old one (the folder that made it loses CLI access); this folder's config and image/ are deployed`);
+                }
+                else if (found.kind === "unknown")
+                    ui.warn(`existing-Worker check could not run (${found.reason}); init goes on`);
+                break;
+            }
             case "control-token":
                 controlToken = s.action === "reuse" ? await readControlToken(paths) : undefined;
                 if (!controlToken) {
@@ -765,6 +784,7 @@ export function initOptions(ctx, existing) {
         vcpu: parseVcpuFlag(flagString(ctx.args, "vcpu")),
         name,
         noDeploy: flagBool(ctx.args, "no-deploy"),
+        adopt: flagBool(ctx.args, "adopt"),
         mode: modeFlag ?? existing?.providerHost ?? "cloudflare",
         nonInteractive: flagBool(ctx.args, "non-interactive") || Boolean(ctx.env.CI),
         tokenFile: flagString(ctx.args, "token-file"),

package/dist/index.js

@@ -36,6 +36,8 @@ export const COMMANDS = {
             "--name <name>                    Worker name (default cf-orbs; a second install needs another)",
             "--no-deploy                      preview: no Docker, no deploy. Make a git repo for Workers Builds,",
             "                                 create the Worker and its secrets, print the dashboard steps",
+            "--adopt                          take over a Worker of the same name that this folder did not create;",
+            "                                 init stops without it. A new control token replaces the old one",
         ],
         flags: {
             provider: { type: "string" },
@@ -46,6 +48,7 @@ export const COMMANDS = {
             vcpu: { type: "string" },
             name: { type: "string" },
             "no-deploy": { type: "boolean" },
+            adopt: { type: "boolean" },
         },
         dirPositional: true,
         run: initCommand,

package/dist/wrangler.js

@@ -135,6 +135,27 @@ export function deployFailureError(kind, output) {
             return new CliError(`wrangler deploy failed: ${lastErrorLine(output)}`, "fix the error above, then rerun cf-orbs deploy");
     }
 }
+/**
+ * Does a Worker with this name exist in the account? Runs `wrangler deployments list --json --name <name>`.
+ * Verified with wrangler 4.156.0: an existing Worker exits 0 and prints a JSON array. A missing one exits 1,
+ * prints nothing on stdout and prints `This Worker does not exist on your account. [code: 10007]` on stderr.
+ * Any other result (auth, network, bad account id, odd output) is "unknown".
+ */
+export async function lookupWorker(w, name) {
+    const r = await w.run(["deployments", "list", "--json", "--name", name], { timeoutMs: 60_000 });
+    const out = `${r.stdout}\n${r.stderr}`;
+    if (r.code === 0) {
+        try {
+            if (Array.isArray(JSON.parse(r.stdout.slice(Math.max(0, r.stdout.indexOf("["))))))
+                return { kind: "found" };
+        }
+        catch { }
+        return { kind: "unknown", reason: "unreadable wrangler output" };
+    }
+    if (/\[code: 10007\]|This Worker does not exist/.test(out))
+        return { kind: "missing" };
+    return { kind: "unknown", reason: lastErrorLine(out) };
+}
 /** Last meaningful line of wrangler output, preferring the "✘ [ERROR]" line. */
 export function lastErrorLine(output) {
     const clean = output.replace(new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g"), "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cf-orbs",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Run Amp orbs on Cloudflare Containers: self-hosted orb provider, one command to install.",
   "license": "Apache-2.0",
   "type": "module",

package/templates/worker/src/api.ts

@@ -18,7 +18,7 @@ import { type Env, orbDoName, PROVIDER_DO_NAME, REGISTRY_DO_NAME } from "./env";
 import { BENCH_ORB_RE, type BenchStartRequest, parseBenchStart } from "./orb/bench";
 import { restartProvider } from "./provider-restart";
 
-export const API_VERSION = "0.2.3";
+export const API_VERSION = "0.2.4";
 
 /** D2. Amp sends `amp-<thread id>`. Never starts with `_` or `.`, so it cannot look like an internal name. */
 export const ORB_ID_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;