From 536e1a7c8e231a61c995a2e79bc1f2261aa82093 Mon Sep 17 00:00:00 2001 From: rogu3bear Date: Wed, 1 Jul 2026 00:47:24 -0500 Subject: [PATCH] fix maildesk sender-domain preview lane Sender-domain readback for maildesk already uses the global Cloudflare lane because the dev lane cannot resolve every private zone. The generated component preview commands need the same lane, otherwise the composite plan advertises previews that fail before writing an operation artifact. Keep the change at the lifecycle command generator and pin it with the maildesk contract fixture. --- scripts/cf_maildesk_cf_lifecycle.py | 2 +- scripts/verify_maildesk_cf_contract.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/cf_maildesk_cf_lifecycle.py b/scripts/cf_maildesk_cf_lifecycle.py index e722ec0..7018144 100644 --- a/scripts/cf_maildesk_cf_lifecycle.py +++ b/scripts/cf_maildesk_cf_lifecycle.py @@ -470,7 +470,7 @@ def sender_readback_available(sender: dict[str, Any]) -> bool: def sender_domain_enable_plan_command(domain: str) -> str: quoted_domain = shlex.quote(domain) return ( - "cfctl apply sender_domain enable " + "CF_TOKEN_LANE=global cfctl apply sender_domain enable " f"--zone {quoted_domain} --name {quoted_domain} --plan" ) diff --git a/scripts/verify_maildesk_cf_contract.sh b/scripts/verify_maildesk_cf_contract.sh index d13a905..cab4ed5 100755 --- a/scripts/verify_maildesk_cf_contract.sh +++ b/scripts/verify_maildesk_cf_contract.sh @@ -194,7 +194,7 @@ jq -e ' and .readiness.mail_ready == false and (.drift_classes | index("sender_domain_drift")) != null and (.drift_classes | index("provider_status_unavailable")) == null - and any(.plan.operations[]; .surface == "sender_domain" and .preview_command == "cfctl apply sender_domain enable --zone example.com --name example.com --plan" and .blocked == null) + and any(.plan.operations[]; .surface == "sender_domain" and .preview_command == "CF_TOKEN_LANE=global cfctl apply sender_domain enable --zone example.com --name example.com --plan" and .blocked == null) ' "${unverified_sender_artifact_path}" >/dev/null || die "unverified sender-domain drift contract did not match" cfctl_output="$(