Date: 2026-07-29
Status: Code-level bindings exist; Cloudflare binding provisioning needed
Gateway Bindings
File: services/gateway/src/index.ts → Env interface
| Binding | Type | Required | Provisioned | Notes |
|---|
DB | D1Database | ✅ Required | ⚠️ Unknown | Auth + tenant resolution |
CONNECTOR | Fetcher | ✅ Required | ⚠️ Unknown | Downstream connector service |
MCP_CONNECTOR | Fetcher | ✅ Required | ⚠️ Unknown | 19-tool MCP boundary |
PIPELINE | Fetcher | ✅ Required | ⚠️ Unknown | Pipeline service |
INTELLIGENCE | Fetcher | ✅ Required | ⚠️ Unknown | Intelligence service |
KNOWLEDGE | Fetcher | ✅ Required | ⚠️ Unknown | Knowledge service |
BFF | Fetcher | ✅ Required | ⚠️ Unknown | Backend-for-frontend |
AGENT_RUNTIME | Fetcher | ✅ Required | ⚠️ Unknown | Agent runtime |
SPINE | Fetcher | ⚠️ Optional | ⚠️ Unknown | Neon Workbench boundary |
MCP_POOL | Fetcher | ⚠️ Optional | ⚠️ Unknown | MCP pool (internal) |
WEBHOOK_INGRESS | Fetcher | ⚠️ Optional | ⚠️ Unknown | Webhook ingestion |
HUB_CONTROLLER | Fetcher | ✅ Required | ⚠️ Unknown | Hub controller |
ADMIN | Fetcher | ✅ Required | ⚠️ Unknown | Admin service |
BILLING | Fetcher | ✅ Required | ⚠️ Unknown | Billing service |
TENANTS | Fetcher | ✅ Required | ⚠️ Unknown | Tenants service |
FOLDER_WATCHER | Fetcher | ⚠️ Optional | ⚠️ Unknown | Folder watcher |
RATE_LIMITS | KVNamespace | ✅ Required | ⚠️ Unknown | Rate limiting |
SESSIONS | KVNamespace | ✅ Required | ⚠️ Unknown | Session storage |
CONNECTOR_STATUS | KVNamespace | ⚠️ Optional | ⚠️ Unknown | Connector status cache |
SIGNAL_CACHE | KVNamespace | ⚠️ Optional | ⚠️ Unknown | Signal cache |
METRICS | KVNamespace | ⚠️ Optional | ⚠️ Unknown | Metrics cache |
OAUTH_STATE_KV | KVNamespace | ⚠️ Optional | ⚠️ Unknown | OAuth state |
TENANT0_ENDPOINTS | DurableObjectNamespace | ⚠️ Optional | ⚠️ Unknown | Tenant endpoints |
MCP Connector Bindings
File: services/mcp-connector/src/index.ts
| Binding | Type | Required | Notes |
|---|
DB | D1Database | ✅ Required | OAuth clients, tokens |
SESSIONS | KVNamespace | ✅ Required | Session storage |
GATEWAY_CONNECTOR_AUTH_SECRET | Secret | ✅ Required | Gateway→Connector auth |
Connector Service Bindings
File: services/connector/src/index.ts
| Binding | Type | Required | Notes |
|---|
PIPELINE_QUEUE | Queue | ✅ Required | Pipeline processing |
KNOWLEDGE_QUEUE | Queue | ✅ Required | Knowledge processing |
MCP_IDEMPOTENCY | KVNamespace | ✅ Required | Idempotency checks |
CONNECTOR_STATUS | KVNamespace | ✅ Required | Status cache |
EDGE_DB | D1Database | ✅ Required | Edge database |
FILES | R2Bucket | ✅ Required | File storage |
Connector Sync Bindings
File: services/connector-sync/src/index.ts
| Binding | Type | Required | Notes |
|---|
SYNC_QUEUE | Queue | ✅ Required | Sync job processing |
CONNECTOR_STATUS | KVNamespace | ✅ Required | Status cache |
DB | D1Database | ✅ Required | Sync state |
SYNC_SCHEDULER | DurableObjectNamespace | ⚠️ Optional | Sync scheduling |
Continuity Service Bindings
File: services/continuity/src/index.ts
| Binding | Type | Required | Notes |
|---|
TASKS_QUEUE | Queue | ⚠️ Optional | Task processing |
DB | D1Database | ✅ Required | Continuity state |
Billing Service Bindings
File: services/billing/src/index.ts
| Binding | Type | Required | Notes |
|---|
DB | D1Database | ✅ Required | Billing state |
WEBHOOK_REPLAY | KVNamespace | ⚠️ Optional | Webhook replay |
Storage Summary
| Storage Type | Count | Services Using |
|---|
| D1Database | 7+ | Gateway, MCP Connector, Connector, Connector Sync, Continuity, Billing, Agent Registry |
| KVNamespace | 8+ | Gateway (6), MCP Connector (1), Connector (2), Billing (1) |
| Queue | 4+ | Connector (2), Connector Sync (1), Continuity (1) |
| R2Bucket | 1 | Connector (FILES) |
| DurableObjectNamespace | 2+ | Gateway (TENANT0), Connector Sync (SYNC_SCHEDULER) |
| Vectorize | 0 | Not yet used |
What's Missing (Cloudflare Provisioning)
Required for Customer Zero
| Binding | Action | Priority |
|---|
| D1 Database | Create integratewise-prod D1 database | P0 |
| KV Namespaces | Create RATE_LIMITS, SESSIONS, CONNECTOR_STATUS, SIGNAL_CACHE, METRICS, OAUTH_STATE_KV | P0 |
| Queues | Create pipeline-process, intelligence-events, connector-sync, knowledge-queue | P0 |
| R2 Bucket | Create integratewise-files bucket | P0 |
| Service Bindings | Bind all downstream Workers to Gateway | P0 |
| Durable Objects | Enable TENANT0_ENDPOINTS, SYNC_SCHEDULER | P1 |
Required for External Product
| Binding | Action | Priority |
|---|
| RLS Policies | Apply migration 042 tenant_rls policies to D1 | P0 |
| Tenant Secret Namespacing | Configure TENANT_<slug>_* secrets in Secret Store | P0 |
| Shared D1 | Verify all queries include tenant_id filter | P0 |
Not Yet Needed
| Binding | Status | When |
|---|
| Vectorize | Not used | When semantic search is implemented |
| AI Gateway | Not used | When AI routing is implemented |
| Additional R2 | Not used | When file storage scales |
Binding Provisioning Checklist
# 1. Create D1 database
wrangler d1 create integratewise-prod
# 2. Create KV namespaces
wrangler kv namespace create RATE_LIMITS
wrangler kv namespace create SESSIONS
wrangler kv namespace create CONNECTOR_STATUS
wrangler kv namespace create SIGNAL_CACHE
wrangler kv namespace create METRICS
wrangler kv namespace create OAUTH_STATE_KV
# 3. Create Queues
wrangler queues create pipeline-process
wrangler queues create intelligence-events
wrangler queues create connector-sync
wrangler queues create knowledge-queue
# 4. Create R2 bucket
wrangler r2 bucket create integratewise-files
# 5. Apply migrations to D1
wrangler d1 execute integratewise-prod --file migrations/035_canonical_spine_schema_fortress.sql
wrangler d1 execute integratewise-prod --file migrations/042_real_tenant_rls_and_runtime_scope.sql
# 6. Bind services in wrangler.toml
# (Add binding declarations to each service's wrangler.toml)
Verification
After provisioning:
# Verify D1
wrangler d1 execute integratewise-prod --command "SELECT count(*) FROM information_schema.tables;"
# Verify KV
wrangler kv namespace list
# Verify Queues
wrangler queues list
# Verify R2
wrangler r2 bucket list