Skip to content
SiteSwarm Platform Documentation

Cloudflare Account Capabilities

Cloudflare Account Capabilities & Paid-Tier Verification Runbook

1. Executive Summary & Purpose

This operational runbook defines the verified platform capability entitlements, operational scaling limits, and verification commands for SiteSwarm’s corporate Cloudflare account (JP Technology Solutions).

Upgrading to Workers Paid and provisioning the canonical corporate workers.dev subdomain satisfies core platform prerequisites:

  1. Multi-Tenant Deployment Scale: Lifts free-tier script limits to accommodate dozens of client edge applications (apps/*) and ephemeral pull request preview deployments.
  2. Compute & Execution Quotas: Unlocks Unbound execution duration (up to 30s+ CPU time) for server-side rendering, CMS publishing, and background workflows.
  3. Outbound Transactional Email: Activates Cloudflare Email Service and Authenticated SMTP (smtp.mx.cloudflare.net:465) required for inquiry dispatch and client notifications (#515).
  4. State Storage Quotas: Expands Cloudflare D1 database storage/throughput and prepares Cloudflare R2 object storage for client media.

Architectural Invariant (Domain Separation): Technical specifications and runbooks document capability IDs, entitlement flags, and operational limits only; retail billing amounts and subscription pricing are strictly out of scope for technical documentation.

flowchart TD
    Account["Corporate Account\n(ID: 7fba1ed07b005a3c31a890fe6c20cda2)"] --> PaidPlan["Workers Paid Plan\n(Rate Plan: workers_paid)"]
    PaidPlan --> Subdomain["Corporate Subdomain\n(jpsoftwareassociates.workers.dev)"]
    PaidPlan --> ComputeScale["Extended Compute & Scripts\n• Multi-tenant app scripts\n• Unbound CPU duration\n• Browser Rendering hours"]
    PaidPlan --> StorageScale["Storage Scaling\n• D1 Databases (10GB+ per DB)\n• KV High-Volume Reads/Writes\n• R2 Object Storage"]
    PaidPlan --> EmailService["Cloudflare Email Service\n• Outbound Authenticated SMTP\n• Unblocks Issue #515"]

2. Account & Subscription Profile

Resource / Capability Value / Identifier Status Source / Seam
Account Name Jpsoftwareassociates@gmail.com's Account active Cloudflare Dashboard / wrangler whoami
Account ID 7fba1ed07b005a3c31a890fe6c20cda2 active CLOUDFLARE_ACCOUNT_ID
Corporate workers.dev Subdomain jpsoftwareassociates verified /accounts/:id/workers/subdomain
Canonical Workers URL *.jpsoftwareassociates.workers.dev active Edge Ingress Routing
Core Rate Plan workers_paid active /accounts/:id/subscriptions
Email Service Entitlement email_service_emails_sent enabled Outbound Authenticated SMTP (#515)
Browser Rendering Entitlement browser_rendering_total_browser_hours enabled Automated demo screencasts & audits
Queues & Workflows queues_enabled, workflows_enabled enabled Async event processing platform

3. Operational Limits & Multi-Tenant Capabilities

3.1 Script & Deployment Scaling

  • Script Limit: Supports hundreds of independent worker services, enabling independent isolation for each tenant application (apps/<client>), horizontal platform service (services/*), and ephemeral PR preview deployments (<app>-preview-pr-<N>).
  • Deployment Safety: Workers Deploy API validates bundle payloads against paid-tier size ceilings (up to 10MB+ compressed assets vs. free-tier 1MB constraints).

3.2 Compute Execution Modes

  • Bundled / Standard: Low-latency edge requests (sub-50ms CPU).
  • Unbound: High-compute operations (image analysis, bulk content ingestion, Astro dynamic SSR) with CPU limits up to 30 seconds.

3.3 Outbound Email Integration (#515)

  • With Workers Paid active, the corporate account has access to Cloudflare’s outbound email infrastructure (smtp.mx.cloudflare.net:465).
  • Unblocks configuring transactional notifications directly within Worker handlers without requiring third-party API dependencies for early-stage prototypes.

4. Verification & Health Attestation Commands

Execute the following commands to verify account membership and active subscription capabilities:

4.1 CLI Membership & Account Attestation

Terminal window
# Verify authentication and account access via Wrangler
npx wrangler whoami


# Expected Output:
# Account Name: Jpsoftwareassociates@gmail.com's Account
# Account ID: 7fba1ed07b005a3c31a890fe6c20cda2

4.2 Corporate Subdomain Attestation

Terminal window
ACCOUNT_ID="7fba1ed07b005a3c31a890fe6c20cda2"
TOKEN="$(grep '^CLOUDFLARE_API_TOKEN=' .env | cut -d '=' -f2-)"


# Verify canonical corporate workers.dev subdomain
curl -s -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/subdomain" \
  -H "Authorization: Bearer $TOKEN" | jq -r '.result.subdomain'


# Expected Output:
# jpsoftwareassociates

4.3 Workers Paid Subscription Verification

Terminal window
# Verify rate plan ID is workers_paid
curl -s -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/subscriptions" \
  -H "Authorization: Bearer $TOKEN" | jq -r '.result[] | select(.rate_plan.id=="workers_paid") | .rate_plan.public_name'


# Expected Output:
# Workers Paid

4.4 D1 & Storage Access Verification

Terminal window
# Verify D1 database subsystem is accessible
npx wrangler d1 list

5. Downstream Integration & Unblocked Stories

The activation of Workers Paid and the jpsoftwareassociates.workers.dev subdomain unblocks:

  1. Issue #515 (feat(email): Cloudflare Email Service and Authenticated SMTP routing):
    • Outbound Authenticated SMTP routing from inquiries@jpsoftwareassociates.com.
  2. Issue #523 (feat(infra): transition SiteSwarm platform resources):
    • Provisioning production D1 databases (siteswarm-production-db, siteswarm-staging-db) and R2 buckets under Account ID 7fba1ed07b005a3c31a890fe6c20cda2.
    • Re-pointing all apps/*/wrangler.jsonc and services/*/wrangler.jsonc bindings.