a unique handle within the config, referenced by other instances' params (e.g. "db", "kv-sessions").
the broker id that provisions it (must match a catalog offering's id), e.g. "cloudflare-d1".
Optionalplanthe plan id; defaults to the offering's first plan.
the provider-facing name, e.g. "toolfactory-db".
Optionalparamsprovision params (broker-specific). A string value of the form @<ref>.<key> is a BINDING REFERENCE, resolved at
apply time from that producer instance's outputs — this is what wires the provisioning DAG.
Optionalbindbinding outputs → env var names: where this instance's credentials/ids LAND (the binding-chain sink). e.g.
{ database_id: "CLOUDFLARE_D1_ID" }.
Optionalprotectedguard a stateful resource (a database, a bucket) from destruction: prune + teardown SKIP it unless forced.
The terraform prevent_destroy analog — the safety rail for the resources whose loss is unrecoverable.
A declared instance the platform WANTS (the desired state — one entry in provision.config).