Skip to content

Admin Phase 3: bind ADMIN_DB — storage provisioned, migration applied, verified#54

Merged
MartinMontero merged 1 commit into
mainfrom
claude/wcjbt-credential-health-check-64ymr3
Jul 11, 2026
Merged

Admin Phase 3: bind ADMIN_DB — storage provisioned, migration applied, verified#54
MartinMontero merged 1 commit into
mainfrom
claude/wcjbt-credential-health-check-64ymr3

Conversation

@MartinMontero

@MartinMontero MartinMontero commented Jul 11, 2026

Copy link
Copy Markdown
Owner

What does this PR do?

Lands the config side of the operator-authorized Phase-3 provisioning (single commit 9971426):

  • Provisioned: wcjbt-admin D1 database created on the project account (region ENAM); migration 0001_admin_storage.sql applied remotely; all 4 tables + 5 indexes verified against the live database (staged_edits, mod_cases, mod_labels, admin_action_audit).
  • Bound: wrangler.jsonc gains the ADMIN_DB entry with its own migrations-admin dir; wrangler deploy --dry-run confirms the full binding map resolves (env.ADMIN_DB (wcjbt-admin)).
  • Header trued up: the schema file goes from draft to provisioned-record, keeping the three recreate steps for downstream AGPL deployers.

Deliberately a separate database from wcjbt-auth: moderation casework and content staging carry a different retention and legal posture than sign-in state. No code path reads these tables yet — the Phase-3+ server slices land next, starting with the insert-only tripwire test for admin_action_audit (mirroring the 0002 audit contract).

Type of change

  • New catalog entry
  • Fix/update to an existing entry
  • New or updated recipe
  • Build flow / docs
  • Enforcement engine / tooling
  • Other (infrastructure binding — config + schema record only)

Required checks

  • npm run check passes (no content/schema changes in this diff)
  • npm run enforce passes (no dependency changes — zero new deps)
  • npm test passes (no code paths touched)
  • npm run build — binding validated via wrangler deploy --dry-run; merge triggers the real Workers Build

(Correction on record: an earlier revision cited the commit as 1d0b0f8 — an unverified hash, same error class as the PR-#53 correction. The verified commit is 9971426.)

🤖 Generated with Claude Code

https://claude.ai/code/session_01LVPyHAtQ1cdK76RpFasafP

Operator-authorized ('provision: go'). The wcjbt-admin D1 database now exists
(region ENAM), migration 0001_admin_storage applied remotely, and all four
tables + five indexes verified against the live database. wrangler.jsonc gains
the ADMIN_DB binding with its own migrations-admin dir; a wrangler dry-run
confirms the full binding map resolves. The schema header is trued up from
draft to provisioned, keeping the three recreate steps for downstream AGPL
deployers.

Deliberately separate from the wcjbt-auth store: moderation casework and
content staging carry a different retention and legal posture than sign-in
state. No code path reads these tables yet — the Phase-3+ server slices land
against them next, starting with the insert-only tripwire test for
admin_action_audit (mirroring the 0002 audit contract).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LVPyHAtQ1cdK76RpFasafP
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
wecanjustbuildthings 9971426 Jul 11 2026, 06:55 AM

@MartinMontero
MartinMontero merged commit 0ccc56e into main Jul 11, 2026
14 checks passed
@MartinMontero
MartinMontero deleted the claude/wcjbt-credential-health-check-64ymr3 branch July 11, 2026 07:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants