{
  "$schema": "node_modules/wrangler/config-schema.json",
  "name": "executor-cloudflare",
  "compatibility_date": "2025-04-01",
  "compatibility_flags": ["nodejs_compat"],
  "main": "src/worker.ts",
  // Access configuration is set per installation after the first deploy.
  // Preserve those live bindings when this source config does not declare them.
  "keep_vars": true,
  "observability": { "enabled": true },
  // The web UI (Workers Static Assets) — the shared multiplayer SPA built by
  // `vite build` into ./dist. `single-page-application` serves index.html for
  // client routes (e.g. /policies); `run_worker_first` forces the API, MCP, and
  // app-level routes (e.g. /v1/app/npm/dist-tags, the update check) to the
  // Worker instead of the SPA fallback.
  "assets": {
    "directory": "./dist",
    // The MCP session DO reads the built MCP-Apps shell document through this
    // binding (`ui://executor/shell.html` has no filesystem to come from on a
    // deployed Worker).
    "binding": "ASSETS",
    "not_found_handling": "single-page-application",
    "run_worker_first": ["/api/*", "/mcp", "/mcp/*", "/.well-known/*", "/v1", "/v1/*"],
  },
  // D1 is the app's SQLite store (the DbProvider seam). `wrangler deploy`
  // auto-provisions it on first deploy; replace database_id after that, or run
  // `wrangler d1 create executor` and paste the id here.
  "d1_databases": [
    {
      "binding": "DB",
      "database_name": "executor",
      "database_id": "ae748ca1-032c-4427-a1a0-fe39db77d1a9",
    },
  ],
  // Plugin blob seam backend: multi-MB values (resolved OpenAPI specs,
  // introspection snapshots) live here, not in D1 (which caps a value at
  // ~1-2MB). `wrangler r2 bucket create executor-blobs` provisions it.
  "r2_buckets": [
    {
      "binding": "BLOBS",
      "bucket_name": "executor-blobs",
    },
  ],
  // Dynamic Worker Loader binding: when present, sandboxed code runs in real
  // workerd isolates with `globalOutbound: null` (platform-enforced zero egress)
  // via @executor-js/runtime-dynamic-worker; without it the host falls back to
  // the QuickJS-wasm substrate. Remove this block to stay on QuickJS.
  "worker_loaders": [
    {
      "binding": "LOADER",
    },
  ],
  // The MCP session Durable Object: one addressable isolate per MCP session (the
  // DO id IS the session id) so a session survives across the Worker's stateless
  // isolates — without it, `tools/list` after `initialize` can land on a fresh
  // isolate that never saw the session ("Not connected"). `new_sqlite_classes`
  // is the free-tier-eligible SQLite-backed DO storage.
  "durable_objects": {
    "bindings": [
      { "name": "MCP_SESSION", "class_name": "McpSessionDO" },
      { "name": "MCP_EXECUTION_OWNER", "class_name": "McpExecutionOwnerDirectoryDO" },
    ],
  },
  "migrations": [
    { "tag": "v1", "new_sqlite_classes": ["McpSessionDO"] },
    { "tag": "v2", "new_sqlite_classes": ["McpExecutionOwnerDirectoryDO"] },
  ],
  // Cloudflare Access is the entire auth layer. ACCESS_TEAM_DOMAIN, ACCESS_AUD,
  // and ADMIN_EMAILS are installation-specific live vars, set after the first
  // deploy and preserved by keep_vars. EXECUTOR_SECRET_KEY (the at-rest
  // secret-encryption key) is a SECRET, set it with
  // `wrangler secret put EXECUTOR_SECRET_KEY`, never in vars.
  "vars": {
    "ACCESS_NAME_CLAIM": "name",
    "ACCESS_GROUPS_CLAIM": "groups",
    // Never preserve a production dev-auth override through keep_vars.
    "ENABLE_DEV_AUTH": "false",
    "SELF_HOSTED_ORG_ID": "default",
    "SELF_HOSTED_ORG_NAME": "Default",
    // VITE_PUBLIC_SITE_URL is intentionally unset: with no static URL the worker
    // derives the web base URL from each request's origin (RequestWebOrigin), so
    // secret/OAuth handoff links match whatever host the user actually reached.
    // Set it only to force a canonical URL (e.g. behind a proxy that rewrites Host).
  },
}