Catalog and connect an app

For a new app, run the scaffolder.

make app-create APP=reports DESCRIPTION="Internal reports API"

For an existing app, edit its existing entry in org/catalog.json. Do not create a second entry or state owner for the same Worker.

Declare durable resources in org/cloudflare/app-reports.tf using the existing worker-app module where its lifecycle fits. Add bindings to the app's Wrangler configuration. Existing API adapters resolve some production identifiers; a new resource type may require additional integration. Do not assume the scaffolder creates storage or secrets.

Choose how to reuse functionality. Import code from org/shared/ when each consumer should bundle its own copy. Use a service binding when another Worker should own the runtime behavior. For example, add this fragment to a consumer's existing configuration:

{
  "services": [
    { "binding": "DATA_SERVICE", "service": "stormtrust-data" }
  ]
}

[[services]]
binding = "DATA_SERVICE"
service = "stormtrust-data"

Generate types with make app-types APP=reports. Use the bound service's documented API and enforce authorization in the receiving Worker. A private binding does not replace tenant or record authorization.

Check the inferred dependency graph.

node scripts/ci/catalog.mjs check
node scripts/ci/catalog.mjs order '["data","reports"]'

Root Wrangler service bindings, external Durable Object bindings, and tail consumers identify runtime dependencies. Local file: and link: package references identify bundled app dependencies. Custom generated configurations need explicit catalog dependencies when discovery cannot see their relationships.

Decide whether the app needs public ingress. Follow the existing gateway registry and policy for gateway-managed hostnames. The origin owns its Custom Domain; the gateway owns its Worker Route. Ordinary DNS stays in Terraform. A new scaffold remains private until those changes are reviewed.

Document the app's purpose, Worker identities, resources, access boundary, health evidence, and recovery constraints under /stormtrust/apps/. Add a central smoke check only when it proves a useful runtime contract. Then validate and deploy the change.