{
	"$schema": "node_modules/wrangler/config-schema.json",
	"name": "auth",
	"main": "src/auth.app.ts",
	"compatibility_date": "2025-09-20",
	"compatibility_flags": ["nodejs_compat"],
	// Shared `recflare` D1 database (also used by the rooms worker). The `auth` worker
	// owns the `accounts` table; a dedicated migrations_table keeps its migration
	// history separate from the rooms worker's migrations on the same database. The
	// "local" placeholder is replaced with the real id from RECFLARE_D1 (see .env) at
	// deploy time.
	"d1_databases": [
		{
			"binding": "DB",
			"database_name": "recflare",
			"database_id": "local",
			"migrations_dir": "migrations",
			"migrations_table": "d1_migrations_auth"
		}
	],
	// Shared match-presence KV (owned by the `match` worker) — used to place new
	// accounts into the Orientation room on signup.
	"kv_namespaces": [
		{
			"binding": "RECFLARE_MATCH_PRESENCE",
			"id": "local"
		}
	],
	// Preserve environment variables and secrets already set in Cloudflare (e.g.
	// JWT_SECRET, managed via `wrangler secret put`) instead of clearing them on
	// deploy — keeps the signing key out of source.
	"keep_vars": true,
	"logpush": false,
	"upload_source_maps": true,
	"observability": {
		"logs": {
			"enabled": true,
			"head_sampling_rate": 1 // 100%
		}
	},
	"vars": {
		"ENVIRONMENT": "development", // overridden during deployment
		"SENTRY_RELEASE": "unknown" // overridden during deployment
	}
}