MN://WORK/cf-toolkit
cf-toolkit
Multi-account Wrangler without a wrapper around every command.
- Bash
- Keychain
- direnv
- Wrangler
$ trace "cf-toolkit"
- project config
- account_id
- Keychain token
- guard
The problem
The dangerous deployment is the one that looks normal while targeting the wrong Cloudflare account.
The constraint
Target and credential boundaries need to remain independent so one bad configuration does not erase the other guard.
The approach
A pinned account_id plus a scoped Keychain-loaded token create two locks, with a local guard before Wrangler runs.
The outcome
A deployment workflow that turns “wrong account” into a preflight failure.
Next route
Open another project
The index is the wider system.