@cat-factory/app 0.160.0 → 0.161.0

package/app/components/environments/EnvironmentStatusPanel.vue

@@ -16,6 +16,7 @@ const { t, d } = useI18n()
 const PROVISION_TYPE_KEYS: Record<ProvisionType, string> = {
   kubernetes: 'environments.provisionType.kubernetes',
   'docker-compose': 'environments.provisionType.docker-compose',
+  cloudflare: 'environments.provisionType.cloudflare',
   custom: 'environments.provisionType.custom',
   infraless: 'environments.provisionType.infraless',
 }
@@ -23,6 +24,7 @@ const ENGINE_KEYS: Record<InfraEngine, string> = {
   'local-docker': 'environments.engine.local-docker',
   'local-k3s': 'environments.engine.local-k3s',
   'remote-kubernetes': 'environments.engine.remote-kubernetes',
+  cloudflare: 'environments.engine.cloudflare',
   'remote-custom': 'environments.engine.remote-custom',
   none: 'environments.engine.none',
 }

package/app/components/panels/inspector/ServiceTestConfig.vue

@@ -104,6 +104,7 @@ const PROVISION_TYPES = computed<{ value: ProvisionType; label: string }[]>(() =
   { value: 'infraless', label: t('inspector.testConfig.provisionTypes.infraless') },
   { value: 'docker-compose', label: t('inspector.testConfig.provisionTypes.docker-compose') },
   { value: 'kubernetes', label: t('inspector.testConfig.provisionTypes.kubernetes') },
+  { value: 'cloudflare', label: t('inspector.testConfig.provisionTypes.cloudflare') },
   { value: 'custom', label: t('inspector.testConfig.provisionTypes.custom') },
 ])
 
@@ -869,6 +870,14 @@ function setSize(value: InstanceSize) {
       </div>
     </div>
 
+    <!-- cloudflare: nothing to collect. Unlike compose (a path) or kubernetes (a manifest
+         source), the per-PR recipe lives in the target repository's own preview workflow, so
+         declaring the type IS the whole service-side configuration. Say so explicitly rather
+         than rendering an empty panel that reads like something failed to load. -->
+    <p v-if="provisionType === 'cloudflare'" class="text-[11px] text-slate-500">
+      {{ t('inspector.testConfig.cloudflareHint') }}
+    </p>
+
     <!-- custom: pin the custom manifest type this service produces (matched to a remote-custom
          handler the workspace configures). -->
     <div v-if="provisionType === 'custom'" class="space-y-2">

package/app/components/settings/CloudflareHandlerSection.vue

@@ -0,0 +1,319 @@
+<script setup lang="ts">
+// The `cloudflare` provision type's infra handler (the workspace "how"): the Cloudflare
+// account's workers.dev subdomain, the VCS API token, and the two name templates that are the
+// contract with the target repository's preview workflow.
+//
+// A SELF-CONTAINED section rather than another branch of InfraHandlersConfigurator: that file
+// already carries three provision types at ~600 lines, and a fourth inline would push it well
+// past the point where any single type is findable. It owns its own save/remove/test so the
+// configurator gains exactly one line.
+//
+// There is deliberately no per-user (local-mode) override here, unlike kubernetes: a Cloudflare
+// preview is built by CI and lives in the cloud, so "this machine only" has no meaning for it.
+import { computed, ref, watch } from 'vue'
+import type { InfraHandlerConfig } from '@cat-factory/contracts'
+
+type CloudflareHandlerConfig = Extract<InfraHandlerConfig, { engine: 'cloudflare' }>
+type CloudflareConfig = CloudflareHandlerConfig['cloudflare']
+
+const { t } = useI18n()
+const infra = useInfraConfigStore()
+const toast = useToast()
+const { confirmAction } = useConfirmAction()
+
+const busy = ref(false)
+const testing = ref(false)
+const testResult = ref<{ ok: boolean; message?: string } | null>(null)
+const editing = ref(false)
+
+const handler = computed(() => infra.handlerFor('cloudflare') ?? null)
+
+// The form state. `label` is prefilled so an operator who fills in only the subdomain still
+// produces a valid config; the two templates are left EMPTY on purpose — blank means "use the
+// reference workflow's naming", and showing the defaults as placeholders rather than values
+// keeps an untouched handler from pinning a shape it never chose.
+const label = ref('Cloudflare Workers preview')
+const workersSubdomain = ref('')
+const repo = ref('')
+const apiBaseUrl = ref('')
+const workerNameTemplate = ref('')
+const environmentNameTemplate = ref('')
+const token = ref('')
+
+// Prefill from the saved handler whenever it (re)loads, so re-opening the form edits the
+// stored config instead of silently starting from blank and overwriting it on save. The token
+// is never echoed back by the API, so it stays empty — see `secretsForSave`.
+watch(
+  handler,
+  (h) => {
+    const cfg = (h?.config as CloudflareHandlerConfig | undefined)?.cloudflare
+    if (!cfg) return
+    label.value = cfg.label
+    workersSubdomain.value = cfg.workersSubdomain
+    repo.value = cfg.repo ?? ''
+    apiBaseUrl.value = cfg.apiBaseUrl ?? ''
+    workerNameTemplate.value = cfg.workerNameTemplate ?? ''
+    environmentNameTemplate.value = cfg.environmentNameTemplate ?? ''
+  },
+  { immediate: true },
+)
+
+const canSave = computed(() => workersSubdomain.value.trim() !== '' && label.value.trim() !== '')
+
+function buildConfig(): CloudflareHandlerConfig {
+  const trimmed = (value: string) => value.trim()
+  const cloudflare: CloudflareConfig = {
+    label: trimmed(label.value),
+    workersSubdomain: trimmed(workersSubdomain.value),
+    // Every optional field is OMITTED when blank rather than sent as an empty string: the
+    // contract's optionals mean "fall back to the default", and an empty string would fail
+    // the schema's own minLength/regex checks instead.
+    ...(trimmed(repo.value) ? { repo: trimmed(repo.value) } : {}),
+    ...(trimmed(apiBaseUrl.value) ? { apiBaseUrl: trimmed(apiBaseUrl.value) } : {}),
+    ...(trimmed(workerNameTemplate.value)
+      ? { workerNameTemplate: trimmed(workerNameTemplate.value) }
+      : {}),
+    ...(trimmed(environmentNameTemplate.value)
+      ? { environmentNameTemplate: trimmed(environmentNameTemplate.value) }
+      : {}),
+  }
+  return { engine: 'cloudflare', cloudflare }
+}
+
+/**
+ * An UNTOUCHED token field on an already-connected handler sends no secret, so the stored one
+ * is kept. Sending `''` would clear it and leave the handler unable to authenticate.
+ */
+function secretsForSave(): Record<string, string> {
+  const value = token.value.trim()
+  return value ? { githubToken: value } : {}
+}
+
+async function save() {
+  if (!canSave.value) return
+  busy.value = true
+  try {
+    await infra.registerHandler({
+      provisionType: 'cloudflare',
+      config: buildConfig(),
+      secrets: secretsForSave(),
+    })
+    token.value = ''
+    editing.value = false
+    toast.add({
+      title: t('settings.infrastructure.handler.saved'),
+      icon: 'i-lucide-check',
+      color: 'success',
+    })
+  } catch (e) {
+    toast.add({
+      title: t('settings.infrastructure.handler.saveFailed'),
+      description: e instanceof Error ? e.message : String(e),
+      icon: 'i-lucide-triangle-alert',
+      color: 'error',
+    })
+  } finally {
+    busy.value = false
+  }
+}
+
+async function test() {
+  testing.value = true
+  testResult.value = null
+  try {
+    testResult.value = await infra.testHandler({
+      config: buildConfig(),
+      secrets: secretsForSave(),
+    })
+  } catch (e) {
+    testResult.value = { ok: false, message: e instanceof Error ? e.message : String(e) }
+  } finally {
+    testing.value = false
+  }
+}
+
+async function remove() {
+  if (!(await confirmAction('remove', t('settings.infrastructure.handler.cloudflareNoun')))) return
+  busy.value = true
+  try {
+    await infra.unregisterHandler('cloudflare')
+    toast.add({ title: t('settings.infrastructure.handler.removed'), icon: 'i-lucide-check' })
+  } catch (e) {
+    toast.add({
+      title: t('settings.infrastructure.handler.saveFailed'),
+      description: e instanceof Error ? e.message : String(e),
+      icon: 'i-lucide-triangle-alert',
+      color: 'error',
+    })
+  } finally {
+    busy.value = false
+  }
+}
+</script>
+
+<template>
+  <section class="space-y-2 rounded-lg border border-slate-700 bg-slate-900/40 p-3">
+    <h3 class="text-sm font-semibold text-slate-200">
+      {{ t('inspector.testConfig.provisionTypes.cloudflare') }}
+    </h3>
+    <p class="text-[11px] text-slate-400">
+      {{ t('settings.infrastructure.cloudflare.intro') }}
+    </p>
+
+    <div
+      v-if="handler && !editing"
+      class="space-y-2 rounded-md border border-emerald-500/30 bg-emerald-500/5 p-2.5"
+      data-testid="cloudflare-handler-connected"
+    >
+      <div class="flex items-start justify-between gap-2">
+        <UCheckbox
+          :model-value="true"
+          disabled
+          size="lg"
+          :label="t('settings.infrastructure.handler.connectionEstablished')"
+          :ui="{ label: 'text-[13px] font-semibold text-emerald-300' }"
+        />
+        <div class="flex items-center gap-1">
+          <UButton
+            icon="i-lucide-pencil"
+            color="neutral"
+            variant="ghost"
+            size="xs"
+            :disabled="busy"
+            :aria-label="t('common.edit')"
+            @click="editing = true"
+          />
+          <UButton
+            icon="i-lucide-trash-2"
+            color="error"
+            variant="ghost"
+            size="xs"
+            :disabled="busy"
+            :aria-label="t('settings.infrastructure.handler.disconnect')"
+            @click="remove"
+          />
+        </div>
+      </div>
+      <p class="pl-7 text-[11px] text-slate-300">
+        {{ t('settings.infrastructure.cloudflare.connectedAs', { subdomain: workersSubdomain }) }}
+      </p>
+    </div>
+
+    <div v-else class="space-y-2" data-testid="cloudflare-handler-form">
+      <div class="space-y-1">
+        <label class="text-[11px] text-slate-400">{{
+          t('settings.infrastructure.cloudflare.label')
+        }}</label>
+        <UInput v-model="label" size="xs" />
+      </div>
+
+      <div class="space-y-1">
+        <label class="text-[11px] text-slate-400">{{
+          t('settings.infrastructure.cloudflare.subdomain')
+        }}</label>
+        <UInput v-model="workersSubdomain" size="xs" placeholder="my-account" />
+        <p class="text-[11px] text-slate-500">
+          {{ t('settings.infrastructure.cloudflare.subdomainHint') }}
+        </p>
+      </div>
+
+      <div class="space-y-1">
+        <label class="text-[11px] text-slate-400">{{
+          t('settings.infrastructure.cloudflare.token')
+        }}</label>
+        <UInput
+          v-model="token"
+          type="password"
+          size="xs"
+          :placeholder="
+            handler
+              ? t('settings.infrastructure.cloudflare.tokenKeep')
+              : t('settings.infrastructure.cloudflare.tokenPlaceholder')
+          "
+        />
+        <p class="text-[11px] text-slate-500">
+          {{ t('settings.infrastructure.cloudflare.tokenHint') }}
+        </p>
+      </div>
+
+      <div class="space-y-1">
+        <label class="text-[11px] text-slate-400">{{
+          t('settings.infrastructure.cloudflare.repo')
+        }}</label>
+        <UInput v-model="repo" size="xs" placeholder="owner/repo" />
+        <p class="text-[11px] text-slate-500">
+          {{ t('settings.infrastructure.cloudflare.repoHint') }}
+        </p>
+      </div>
+
+      <details class="rounded-md border border-slate-700/70 p-2">
+        <summary class="cursor-pointer text-[11px] text-slate-400">
+          {{ t('settings.infrastructure.cloudflare.advanced') }}
+        </summary>
+        <div class="mt-2 space-y-2">
+          <div class="space-y-1">
+            <label class="text-[11px] text-slate-400">{{
+              t('settings.infrastructure.cloudflare.workerTemplate')
+            }}</label>
+            <!-- The placeholder is a FORMAT EXAMPLE containing vue-i18n metacharacters, so it
+                 stays inline rather than becoming a catalog key. -->
+            <UInput
+              v-model="workerNameTemplate"
+              size="xs"
+              placeholder="cat-factory-pr-{{pullNumber}}"
+            />
+          </div>
+          <div class="space-y-1">
+            <label class="text-[11px] text-slate-400">{{
+              t('settings.infrastructure.cloudflare.environmentTemplate')
+            }}</label>
+            <UInput v-model="environmentNameTemplate" size="xs" placeholder="pr-{{pullNumber}}" />
+          </div>
+          <p class="text-[11px] text-slate-500">
+            {{ t('settings.infrastructure.cloudflare.templateHint') }}
+          </p>
+          <div class="space-y-1">
+            <label class="text-[11px] text-slate-400">{{
+              t('settings.infrastructure.cloudflare.apiBaseUrl')
+            }}</label>
+            <UInput v-model="apiBaseUrl" size="xs" placeholder="https://api.github.com" />
+          </div>
+        </div>
+      </details>
+
+      <div class="flex items-center gap-2">
+        <UButton size="xs" :disabled="!canSave || busy" @click="save">
+          {{ t('common.save') }}
+        </UButton>
+        <UButton
+          size="xs"
+          color="neutral"
+          variant="subtle"
+          :disabled="!canSave || testing"
+          :loading="testing"
+          @click="test"
+        >
+          {{ t('settings.providerConnection.test.button') }}
+        </UButton>
+        <UButton
+          v-if="handler"
+          size="xs"
+          color="neutral"
+          variant="ghost"
+          :disabled="busy"
+          @click="editing = false"
+        >
+          {{ t('common.cancel') }}
+        </UButton>
+      </div>
+
+      <p
+        v-if="testResult"
+        class="text-[11px]"
+        :class="testResult.ok ? 'text-emerald-300' : 'text-rose-300'"
+      >
+        {{ testResult.message }}
+      </p>
+    </div>
+  </section>
+</template>

package/app/components/settings/InfraHandlersConfigurator.vue

@@ -6,6 +6,8 @@
 //                      service-owned, configured on the service).
 //   - docker-compose → handled by the runtime's local Docker capability — informational, no
 //                      connection (a DinD-capable runner stands the service's compose stack up).
+//   - cloudflare     → the built-in per-PR Cloudflare Workers preview, driven over the VCS
+//                      deployments API. Its whole section lives in CloudflareHandlerSection.vue.
 //   - custom         → the custom-manifest-type catalog editor + a `remote-custom` HTTP handler
 //                      per custom type (matched to a service's pinned `manifestId`).
 // In LOCAL mode each handler additionally offers a per-USER override (this-machine only),
@@ -25,6 +27,7 @@ type RemoteCustomConfig = Extract<InfraHandlerConfig, { engine: 'remote-custom'
 import KubernetesEngineForm from '~/components/settings/KubernetesEngineForm.vue'
 import ProviderManifestEditor from '~/components/settings/ProviderManifestEditor.vue'
 import CustomManifestTypeEditor from '~/components/settings/CustomManifestTypeEditor.vue'
+import CloudflareHandlerSection from '~/components/settings/CloudflareHandlerSection.vue'
 
 const { t } = useI18n()
 const infra = useInfraConfigStore()
@@ -542,6 +545,10 @@ function notifyError(e: unknown) {
       <p class="text-[12px] text-slate-400">{{ t('settings.infrastructure.dockerComposeInfo') }}</p>
     </section>
 
+    <!-- cloudflare: a self-contained section (see the component's own note on why it is not
+         another branch here). -->
+    <CloudflareHandlerSection />
+
     <!-- custom: the catalog editor + a remote-custom HTTP handler per custom type. -->
     <section class="space-y-3 rounded-lg border border-slate-700 bg-slate-900/40 p-3">
       <h3 class="text-sm font-semibold text-slate-200">

package/app/composables/useWorkspaceStream.ts

@@ -1,5 +1,6 @@
 import { ref, onScopeDispose } from 'vue'
 import type { WorkspaceEvent } from '~/types/domain'
+import { wsOriginFor } from '~/utils/apiOrigin'
 
 /**
  * Subscribes to the backend's per-workspace WebSocket event stream and keeps the
@@ -50,8 +51,10 @@ export function useWorkspaceStream() {
   let reconnectTimer: ReturnType<typeof setTimeout> | null = null
   let boardDebounce: ReturnType<typeof setTimeout> | null = null
 
-  // http→ws, https→wss (apiBase is an absolute origin, see nuxt.config.ts).
-  const wsBase = String(apiBase).replace(/^http/, 'ws')
+  // http→ws, https→wss. `apiBase` is an absolute origin on a split-origin deployment (see
+  // nuxt.config.ts) and EMPTY on a same-origin one (one proxy in front of the SPA + the API —
+  // the compose preview stack), where the socket origin comes from the page instead.
+  const wsBase = wsOriginFor(String(apiBase), import.meta.client ? window.location.origin : '')
 
   // A coarse board refresh (the resync on reconnect, and the `board` event fan-out) must not be
   // left silently stale by ONE transient failure: retry a few times with backoff so a blip

package/app/stores/providerConnections.ts

@@ -20,6 +20,7 @@ const BUILTIN_BACKEND_KINDS: Record<ProviderConnectionKind, BackendKindOption[]>
   environment: [
     { kind: 'manifest', label: 'HTTP manifest', engines: ['remote-custom'] },
     { kind: 'kubernetes', label: 'Kubernetes', engines: ['local-k3s', 'remote-kubernetes'] },
+    { kind: 'cloudflare', label: 'Cloudflare Workers', engines: ['cloudflare'] },
   ],
   'runner-pool': [
     { kind: 'manifest', label: 'HTTP manifest pool' },

package/app/utils/apiOrigin.spec.ts

@@ -0,0 +1,37 @@
+import { describe, expect, it } from 'vitest'
+import { apiOriginFor, wsOriginFor } from '~/utils/apiOrigin'
+
+// The split-origin deployment (an absolute apiBase) and the same-origin one (empty apiBase, one
+// reverse proxy in front of both halves — the compose preview stack) must both produce a usable
+// socket origin. An empty apiBase used to yield a RELATIVE WebSocket URL, which is exactly the
+// case a preview stack hits: its host port is assigned at `up` time, so no absolute origin can be
+// baked into the build.
+
+describe('apiOriginFor', () => {
+  it('keeps an absolute apiBase (split origins)', () => {
+    expect(apiOriginFor('https://api.example.com', 'https://app.example.com')).toBe(
+      'https://api.example.com',
+    )
+  })
+
+  it('falls back to the page origin when apiBase is empty or blank (same origin)', () => {
+    expect(apiOriginFor('', 'http://localhost:49153')).toBe('http://localhost:49153')
+    expect(apiOriginFor('   ', 'http://localhost:49153')).toBe('http://localhost:49153')
+  })
+
+  it('is empty when neither is known (SSR — no socket is opened there)', () => {
+    expect(apiOriginFor('', '')).toBe('')
+  })
+})
+
+describe('wsOriginFor', () => {
+  it('maps http→ws and https→wss', () => {
+    expect(wsOriginFor('http://localhost:8787', '')).toBe('ws://localhost:8787')
+    expect(wsOriginFor('https://api.example.com', '')).toBe('wss://api.example.com')
+  })
+
+  it('derives the socket origin from the page for a same-origin deployment', () => {
+    expect(wsOriginFor('', 'https://preview.example.com')).toBe('wss://preview.example.com')
+    expect(wsOriginFor('', 'http://localhost:49153')).toBe('ws://localhost:49153')
+  })
+})

package/app/utils/apiOrigin.ts

@@ -0,0 +1,30 @@
+/**
+ * Where the SPA's API lives, resolved from the build-time `runtimeConfig.public.apiBase`.
+ *
+ * Two deployment topologies are supported and they differ ONLY here:
+ *
+ * - **Split origins** (the production Cloudflare/Node deployments): `apiBase` is an absolute
+ *   origin (`https://api.example.com`), the SPA is served from a different one, and the backend
+ *   allow-lists the SPA via `CORS_ALLOWED_ORIGINS`.
+ * - **Same origin**: `apiBase` is EMPTY and one reverse proxy serves both the static SPA and the
+ *   API (the compose preview stack in `deploy/preview/compose`). REST calls are then relative and
+ *   need nothing extra — but the WebSocket URL does, because the socket origin cannot be derived
+ *   from an empty string. That is what this module exists for: it substitutes the PAGE's origin,
+ *   so the stream connects to whatever host/port the stack happens to be published on. A preview
+ *   stack's host port is assigned at `up` time, so it is not knowable when the SPA is built —
+ *   same-origin is the only topology that works there.
+ */
+
+/** The API origin the SPA should talk to: `apiBase` when set, else the page's own origin. */
+export function apiOriginFor(apiBase: string, pageOrigin: string): string {
+  return apiBase.trim() || pageOrigin
+}
+
+/**
+ * The WebSocket origin (`http`→`ws`, `https`→`wss`) for the API. Falls back to `pageOrigin` for
+ * the same-origin topology; returns `''` only when neither is known (SSR, where no socket is
+ * opened anyway).
+ */
+export function wsOriginFor(apiBase: string, pageOrigin: string): string {
+  return apiOriginFor(apiBase, pageOrigin).replace(/^http/, 'ws')
+}

package/i18n/locales/de.json

@@ -173,7 +173,26 @@
         "loading": "Infrastruktureinstellungen werden geladen…",
         "kubeNoun": "der Kubernetes-Handler",
         "kubeOverrideNoun": "der Kubernetes-Override",
-        "customNoun": "dieser Handler"
+        "customNoun": "dieser Handler",
+        "cloudflareNoun": "den Cloudflare-Handler"
+      },
+      "cloudflare": {
+        "intro": "Startet pro Pull Request einen Cloudflare Worker, indem der Preview-Workflow des Ziel-Repositorys angestoßen wird. cat-factory spricht nie direkt mit Cloudflare: Es legt ein Deployment an, liest dessen Status und setzt zum Abbau einen inactive-Status.",
+        "label": "Anzeigename",
+        "subdomain": "workers.dev-Subdomain",
+        "subdomainHint": "Die Preview-URL lautet https://WORKER.SUBDOMAIN.workers.dev — gib nur das Subdomain-Label ein, ohne \".workers.dev\".",
+        "token": "VCS-API-Token",
+        "tokenPlaceholder": "Fein granuliertes Token einfügen",
+        "tokenKeep": "Leer lassen, um das gespeicherte Token zu behalten",
+        "tokenHint": "Benötigt \"Deployments: read & write\" für das Repository und sonst nichts.",
+        "repo": "Workflow-Repository (optional)",
+        "repoHint": "Leer lassen, um das jeweilige Repository des Service-Frames zu verwenden. Nur festlegen, wenn ein Repository den Preview-Workflow für mehrere Services enthält.",
+        "advanced": "Erweitert",
+        "workerTemplate": "Vorlage für den Worker-Namen",
+        "environmentTemplate": "Vorlage für den Deployment-Umgebungsnamen",
+        "templateHint": "Diese Werte sind der Vertrag mit dem Preview-Workflow: cat-factory leitet daraus die URL ab, und der Workflow benennt seine Ressourcen genauso. Leer lassen, um die Benennung des Referenz-Workflows zu verwenden. Verfügbare Platzhalter: pullNumber, branch, blockId.",
+        "apiBaseUrl": "Basis-URL der VCS-API",
+        "connectedAs": "Previews werden auf {subdomain}.workers.dev bereitgestellt."
       }
     },
     "providerConnection": {
@@ -1100,6 +1119,7 @@
         "infraless": "Keine Infrastruktur",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Cloudflare Workers-Preview",
         "custom": "Benutzerdefiniert"
       },
       "composePath": "docker-compose-Pfad",
@@ -1142,6 +1162,7 @@
       "rendererHint": "Raw wendet die Manifeste unverändert an. Kustomize baut zuerst ein Overlay (benötigt den Container-Deploy-Adapter).",
       "customManifestId": "Benutzerdefinierter Manifesttyp",
       "customManifestIdPlaceholder": "Wähle einen Manifesttyp",
+      "cloudflareHint": "Hier gibt es nichts zu konfigurieren: Das Rezept pro Pull Request liegt im Preview-Workflow dieses Repositorys. Verbinde unter Infrastruktur einen Cloudflare Workers-Handler, um Konto und Benennung festzulegen.",
       "customNoTypes": "Es sind noch keine benutzerdefinierten Manifesttypen definiert. Füge einen im Infrastruktur-Fenster hinzu.",
       "customManifestIdHint": "Der benutzerdefinierte Typ, den dieser Service erzeugt, zugeordnet zu einem Remote-Custom-Handler, den der Workspace konfiguriert.",
       "customManifestPath": "Manifest-Pfad (optional)",
@@ -4756,6 +4777,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Benutzerdefiniert",
       "infraless": "Keine Infrastruktur"
     },
@@ -4763,6 +4785,7 @@
       "local-docker": "Lokales Docker",
       "local-k3s": "Lokales k3s",
       "remote-kubernetes": "Remote-Kubernetes",
+      "cloudflare": "Cloudflare-Preview",
       "remote-custom": "Remote benutzerdefiniert (HTTP)",
       "none": "Keine"
     }

package/i18n/locales/en.json

@@ -860,6 +860,7 @@
         "infraless": "No infrastructure",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Cloudflare Workers preview",
         "custom": "Custom"
       },
       "composePath": "docker-compose path",
@@ -902,6 +903,7 @@
       "rendererHint": "Raw applies the manifests as-is. Kustomize builds an overlay first (needs the container deploy adapter).",
       "customManifestId": "Custom manifest type",
       "customManifestIdPlaceholder": "Pick a manifest type",
+      "cloudflareHint": "Nothing to configure here: the per-pull-request recipe lives in this repository’s own preview workflow. Connect a Cloudflare Workers handler under Infrastructure to choose the account and the naming.",
       "customNoTypes": "No custom manifest types are defined yet. Add one in the Infrastructure window.",
       "customManifestIdHint": "The custom type this service produces, matched to a remote-custom handler the workspace configures.",
       "customManifestPath": "Manifest path (optional)",
@@ -2256,7 +2258,26 @@
         "loading": "Loading infrastructure settings…",
         "kubeNoun": "the Kubernetes handler",
         "kubeOverrideNoun": "the Kubernetes override",
-        "customNoun": "this handler"
+        "customNoun": "this handler",
+        "cloudflareNoun": "the Cloudflare handler"
+      },
+      "cloudflare": {
+        "intro": "Stands up a per-pull-request Cloudflare Worker by driving the target repository's own preview workflow. cat-factory never talks to Cloudflare directly: it creates a deployment, reads its status, and posts an inactive status to tear down.",
+        "label": "Display name",
+        "subdomain": "workers.dev subdomain",
+        "subdomainHint": "The preview URL becomes https://WORKER.SUBDOMAIN.workers.dev — enter just the subdomain label, without \".workers.dev\".",
+        "token": "VCS API token",
+        "tokenPlaceholder": "Paste a fine-grained token",
+        "tokenKeep": "Leave blank to keep the stored token",
+        "tokenHint": "Needs Deployments: read & write on the repository, and nothing else.",
+        "repo": "Workflow repository (optional)",
+        "repoHint": "Leave blank to use each service frame's own repository. Pin it only when one repository holds the preview workflow for several services.",
+        "advanced": "Advanced",
+        "workerTemplate": "Worker name template",
+        "environmentTemplate": "Deployment environment template",
+        "templateHint": "These are the contract with the preview workflow: cat-factory derives the URL from them and the workflow names its resources the same way. Leave blank to use the reference workflow's naming. Available placeholders: pullNumber, branch, blockId.",
+        "apiBaseUrl": "VCS API base URL",
+        "connectedAs": "Previews deploy to {subdomain}.workers.dev."
       }
     },
     "providerConnection": {
@@ -4599,6 +4620,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Custom",
       "infraless": "No infrastructure"
     },
@@ -4606,6 +4628,7 @@
       "local-docker": "Local Docker",
       "local-k3s": "Local k3s",
       "remote-kubernetes": "Remote Kubernetes",
+      "cloudflare": "Cloudflare preview",
       "remote-custom": "Remote custom (HTTP)",
       "none": "None"
     }

package/i18n/locales/es.json

@@ -800,6 +800,7 @@
         "infraless": "Sin infraestructura",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Vista previa de Cloudflare Workers",
         "custom": "Personalizado"
       },
       "composePath": "Ruta de docker-compose",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw aplica los manifiestos tal cual. Kustomize construye primero un overlay (requiere el adaptador de despliegue en contenedor).",
       "customManifestId": "Tipo de manifiesto personalizado",
       "customManifestIdPlaceholder": "Elige un tipo de manifiesto",
+      "cloudflareHint": "Aquí no hay nada que configurar: la receta por pull request vive en el flujo de trabajo de vista previa de este repositorio. Conecta un controlador de Cloudflare Workers en Infraestructura para elegir la cuenta y los nombres.",
       "customNoTypes": "Aún no hay tipos de manifiesto personalizados. Añade uno en la ventana de Infraestructura.",
       "customManifestIdHint": "El tipo personalizado que produce este servicio, emparejado con un gestor remote-custom que configura el espacio de trabajo.",
       "customManifestPath": "Ruta del manifiesto (opcional)",
@@ -2854,7 +2856,26 @@
         "loading": "Cargando la configuración de infraestructura…",
         "kubeNoun": "el controlador de Kubernetes",
         "kubeOverrideNoun": "la anulación de Kubernetes",
-        "customNoun": "este controlador"
+        "customNoun": "este controlador",
+        "cloudflareNoun": "el controlador de Cloudflare"
+      },
+      "cloudflare": {
+        "intro": "Levanta un Worker de Cloudflare por cada pull request activando el flujo de trabajo de vista previa del repositorio de destino. cat-factory nunca habla directamente con Cloudflare: crea un despliegue, lee su estado y publica un estado inactive para desmontarlo.",
+        "label": "Nombre visible",
+        "subdomain": "Subdominio de workers.dev",
+        "subdomainHint": "La URL de vista previa será https://WORKER.SUBDOMAIN.workers.dev: introduce solo la etiqueta del subdominio, sin \".workers.dev\".",
+        "token": "Token de la API del VCS",
+        "tokenPlaceholder": "Pega un token de permisos detallados",
+        "tokenKeep": "Déjalo en blanco para conservar el token guardado",
+        "tokenHint": "Necesita \"Deployments: read & write\" en el repositorio, y nada más.",
+        "repo": "Repositorio del flujo de trabajo (opcional)",
+        "repoHint": "Déjalo en blanco para usar el repositorio propio de cada frame de servicio. Fíjalo solo cuando un repositorio contenga el flujo de vista previa de varios servicios.",
+        "advanced": "Avanzado",
+        "workerTemplate": "Plantilla del nombre del Worker",
+        "environmentTemplate": "Plantilla del nombre del entorno de despliegue",
+        "templateHint": "Son el contrato con el flujo de vista previa: cat-factory deriva la URL de ellas y el flujo nombra sus recursos igual. Déjalas en blanco para usar la nomenclatura del flujo de referencia. Marcadores disponibles: pullNumber, branch, blockId.",
+        "apiBaseUrl": "URL base de la API del VCS",
+        "connectedAs": "Las vistas previas se despliegan en {subdomain}.workers.dev."
       }
     },
     "modelPolicy": {
@@ -4414,6 +4435,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Personalizado",
       "infraless": "Sin infraestructura"
     },
@@ -4421,6 +4443,7 @@
       "local-docker": "Docker local",
       "local-k3s": "k3s local",
       "remote-kubernetes": "Kubernetes remoto",
+      "cloudflare": "Vista previa de Cloudflare",
       "remote-custom": "Personalizado remoto (HTTP)",
       "none": "Ninguno"
     }

package/i18n/locales/fr.json

@@ -800,6 +800,7 @@
         "infraless": "Aucune infrastructure",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Aperçu Cloudflare Workers",
         "custom": "Personnalisé"
       },
       "composePath": "Chemin docker-compose",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw applique les manifestes tels quels. Kustomize construit d'abord un overlay (nécessite l'adaptateur de déploiement en conteneur).",
       "customManifestId": "Type de manifeste personnalisé",
       "customManifestIdPlaceholder": "Choisir un type de manifeste",
+      "cloudflareHint": "Rien à configurer ici : la recette par pull request se trouve dans le workflow d’aperçu de ce dépôt. Connectez un gestionnaire Cloudflare Workers dans Infrastructure pour choisir le compte et le nommage.",
       "customNoTypes": "Aucun type de manifeste personnalisé n'est encore défini. Ajoutez-en un dans la fenêtre Infrastructure.",
       "customManifestIdHint": "Le type personnalisé que ce service produit, associé à un gestionnaire remote-custom configuré par l'espace de travail.",
       "customManifestPath": "Chemin du manifeste (facultatif)",
@@ -2854,7 +2856,26 @@
         "loading": "Chargement de la configuration de l'infrastructure…",
         "kubeNoun": "le gestionnaire Kubernetes",
         "kubeOverrideNoun": "le remplacement Kubernetes",
-        "customNoun": "ce gestionnaire"
+        "customNoun": "ce gestionnaire",
+        "cloudflareNoun": "le gestionnaire Cloudflare"
+      },
+      "cloudflare": {
+        "intro": "Déploie un Worker Cloudflare par pull request en déclenchant le workflow d’aperçu du dépôt cible. cat-factory ne parle jamais directement à Cloudflare : il crée un déploiement, lit son statut et publie un statut inactive pour le démonter.",
+        "label": "Nom affiché",
+        "subdomain": "Sous-domaine workers.dev",
+        "subdomainHint": "L’URL d’aperçu devient https://WORKER.SUBDOMAIN.workers.dev — saisissez uniquement le libellé du sous-domaine, sans « .workers.dev ».",
+        "token": "Jeton d’API du VCS",
+        "tokenPlaceholder": "Collez un jeton à portée fine",
+        "tokenKeep": "Laissez vide pour conserver le jeton enregistré",
+        "tokenHint": "Nécessite « Deployments : read & write » sur le dépôt, et rien d’autre.",
+        "repo": "Dépôt du workflow (facultatif)",
+        "repoHint": "Laissez vide pour utiliser le dépôt propre à chaque frame de service. Ne le fixez que si un seul dépôt porte le workflow d’aperçu de plusieurs services.",
+        "advanced": "Avancé",
+        "workerTemplate": "Modèle de nom du Worker",
+        "environmentTemplate": "Modèle de nom d’environnement de déploiement",
+        "templateHint": "Ce sont le contrat avec le workflow d’aperçu : cat-factory en dérive l’URL et le workflow nomme ses ressources de la même façon. Laissez vide pour reprendre la nomenclature du workflow de référence. Espaces réservés disponibles : pullNumber, branch, blockId.",
+        "apiBaseUrl": "URL de base de l’API du VCS",
+        "connectedAs": "Les aperçus sont déployés sur {subdomain}.workers.dev."
       }
     },
     "modelPolicy": {
@@ -4414,6 +4435,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Personnalisé",
       "infraless": "Sans infrastructure"
     },
@@ -4421,6 +4443,7 @@
       "local-docker": "Docker local",
       "local-k3s": "k3s local",
       "remote-kubernetes": "Kubernetes distant",
+      "cloudflare": "Aperçu Cloudflare",
       "remote-custom": "Personnalisé distant (HTTP)",
       "none": "Aucun"
     }

package/i18n/locales/he.json

@@ -800,6 +800,7 @@
         "infraless": "ללא תשתית",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "תצוגה מקדימה של Cloudflare Workers",
         "custom": "מותאם אישית"
       },
       "composePath": "נתיב docker-compose",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw מחיל את המניפסטים כפי שהם. Kustomize בונה תחילה overlay (דורש את מתאם הפריסה בקונטיינר).",
       "customManifestId": "סוג מניפסט מותאם",
       "customManifestIdPlaceholder": "בחר סוג מניפסט",
+      "cloudflareHint": "אין כאן מה להגדיר: המתכון לכל בקשת משיכה נמצא בתהליך העבודה לתצוגה מקדימה של מאגר זה. חבר מטפל של Cloudflare Workers תחת תשתית כדי לבחור את החשבון ואת מוסכמות השמות.",
       "customNoTypes": "עדיין לא הוגדרו סוגי מניפסט מותאמים. הוסף אחד בחלון התשתית.",
       "customManifestIdHint": "הסוג המותאם שהשירות הזה מייצר, המותאם למטפל remote-custom שהמרחב מגדיר.",
       "customManifestPath": "נתיב המניפסט (אופציונלי)",
@@ -2189,7 +2191,26 @@
         "loading": "טוען הגדרות תשתית…",
         "kubeNoun": "מטפל ה-Kubernetes",
         "kubeOverrideNoun": "עקיפת ה-Kubernetes",
-        "customNoun": "מטפל זה"
+        "customNoun": "מטפל זה",
+        "cloudflareNoun": "את מטפל Cloudflare"
+      },
+      "cloudflare": {
+        "intro": "מקים Worker של Cloudflare לכל בקשת משיכה על ידי הפעלת תהליך העבודה לתצוגה מקדימה של המאגר היעד. cat-factory אף פעם לא פונה ישירות ל-Cloudflare: הוא יוצר פריסה, קורא את מצבה, ומפרסם מצב inactive כדי לפרק אותה.",
+        "label": "שם לתצוגה",
+        "subdomain": "תת-דומיין של workers.dev",
+        "subdomainHint": "כתובת התצוגה המקדימה תהיה https://WORKER.SUBDOMAIN.workers.dev — הזן רק את תווית תת-הדומיין, בלי \".workers.dev\".",
+        "token": "אסימון API של מערכת ניהול הגרסאות",
+        "tokenPlaceholder": "הדבק אסימון בעל הרשאות מדויקות",
+        "tokenKeep": "השאר ריק כדי לשמור על האסימון הקיים",
+        "tokenHint": "נדרשת הרשאת \"Deployments: read & write\" על המאגר בלבד.",
+        "repo": "המאגר שמכיל את תהליך העבודה (אופציונלי)",
+        "repoHint": "השאר ריק כדי להשתמש במאגר של כל מסגרת שירות. קבע ערך רק כאשר מאגר אחד מחזיק את תהליך התצוגה המקדימה עבור כמה שירותים.",
+        "advanced": "מתקדם",
+        "workerTemplate": "תבנית לשם ה-Worker",
+        "environmentTemplate": "תבנית לשם סביבת הפריסה",
+        "templateHint": "אלה ההסכם מול תהליך התצוגה המקדימה: cat-factory גוזר מהם את הכתובת, ותהליך העבודה מעניק לאותם משאבים את אותם שמות. השאר ריק כדי להשתמש בשמות של תהליך העבודה הייחוס. מצייני מקום זמינים: pullNumber, branch, blockId.",
+        "apiBaseUrl": "כתובת הבסיס של ה-API של מערכת ניהול הגרסאות",
+        "connectedAs": "תצוגות מקדימות נפרסות אל {subdomain}.workers.dev."
       }
     },
     "providerConnection": {
@@ -4425,6 +4446,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "מותאם",
       "infraless": "ללא תשתית"
     },
@@ -4432,6 +4454,7 @@
       "local-docker": "Docker מקומי",
       "local-k3s": "k3s מקומי",
       "remote-kubernetes": "Kubernetes מרוחק",
+      "cloudflare": "תצוגה מקדימה של Cloudflare",
       "remote-custom": "מותאם מרוחק (HTTP)",
       "none": "ללא"
     }

package/i18n/locales/it.json

@@ -173,7 +173,26 @@
         "loading": "Caricamento delle impostazioni dell'infrastruttura…",
         "kubeNoun": "l'handler Kubernetes",
         "kubeOverrideNoun": "l'override Kubernetes",
-        "customNoun": "questo handler"
+        "customNoun": "questo handler",
+        "cloudflareNoun": "l’handler Cloudflare"
+      },
+      "cloudflare": {
+        "intro": "Avvia un Worker Cloudflare per ogni pull request attivando il workflow di anteprima del repository di destinazione. cat-factory non parla mai direttamente con Cloudflare: crea un deployment, ne legge lo stato e pubblica uno stato inactive per smantellarlo.",
+        "label": "Nome visualizzato",
+        "subdomain": "Sottodominio workers.dev",
+        "subdomainHint": "L’URL di anteprima diventa https://WORKER.SUBDOMAIN.workers.dev: inserisci solo l’etichetta del sottodominio, senza \".workers.dev\".",
+        "token": "Token API del VCS",
+        "tokenPlaceholder": "Incolla un token a granularità fine",
+        "tokenKeep": "Lascia vuoto per mantenere il token salvato",
+        "tokenHint": "Richiede \"Deployments: read & write\" sul repository e nient’altro.",
+        "repo": "Repository del workflow (facoltativo)",
+        "repoHint": "Lascia vuoto per usare il repository di ciascun frame di servizio. Fissalo solo quando un repository contiene il workflow di anteprima per più servizi.",
+        "advanced": "Avanzate",
+        "workerTemplate": "Modello del nome del Worker",
+        "environmentTemplate": "Modello del nome dell’ambiente di deployment",
+        "templateHint": "Sono il contratto con il workflow di anteprima: cat-factory ne ricava l’URL e il workflow nomina le sue risorse allo stesso modo. Lascia vuoto per usare la denominazione del workflow di riferimento. Segnaposto disponibili: pullNumber, branch, blockId.",
+        "apiBaseUrl": "URL base dell’API del VCS",
+        "connectedAs": "Le anteprime vengono distribuite su {subdomain}.workers.dev."
       }
     },
     "providerConnection": {
@@ -1100,6 +1119,7 @@
         "infraless": "Nessuna infrastruttura",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Anteprima Cloudflare Workers",
         "custom": "Personalizzato"
       },
       "composePath": "Percorso docker-compose",
@@ -1142,6 +1162,7 @@
       "rendererHint": "Raw applica i manifest cosi' come sono. Kustomize compila prima un overlay (richiede l'adattatore di deploy in container).",
       "customManifestId": "Tipo di manifest personalizzato",
       "customManifestIdPlaceholder": "Scegli un tipo di manifest",
+      "cloudflareHint": "Qui non c’è nulla da configurare: la ricetta per ogni pull request si trova nel workflow di anteprima di questo repository. Collega un handler Cloudflare Workers in Infrastruttura per scegliere account e denominazione.",
       "customNoTypes": "Nessun tipo di manifest personalizzato ancora definito. Aggiungine uno nella finestra Infrastruttura.",
       "customManifestIdHint": "Il tipo personalizzato che questo servizio produce, abbinato a un handler remote-custom configurato dal workspace.",
       "customManifestPath": "Percorso del manifest (facoltativo)",
@@ -4756,6 +4777,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Personalizzato",
       "infraless": "Nessuna infrastruttura"
     },
@@ -4763,6 +4785,7 @@
       "local-docker": "Docker locale",
       "local-k3s": "k3s locale",
       "remote-kubernetes": "Kubernetes remoto",
+      "cloudflare": "Anteprima Cloudflare",
       "remote-custom": "Personalizzato remoto (HTTP)",
       "none": "Nessuno"
     }

package/i18n/locales/ja.json

@@ -800,6 +800,7 @@
         "infraless": "インフラなし",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Cloudflare Workers プレビュー",
         "custom": "カスタム"
       },
       "composePath": "docker-compose のパス",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw はマニフェストをそのまま適用します。Kustomize はまずオーバーレイをビルドします（コンテナのデプロイアダプターが必要）。",
       "customManifestId": "カスタムマニフェストタイプ",
       "customManifestIdPlaceholder": "マニフェストタイプを選択",
+      "cloudflareHint": "ここで設定する項目はありません。プルリクエストごとの手順はこのリポジトリのプレビュー用ワークフローにあります。アカウントと命名を選ぶには、インフラストラクチャで Cloudflare Workers ハンドラーを接続してください。",
       "customNoTypes": "カスタムマニフェストタイプはまだ定義されていません。インフラウィンドウで追加してください。",
       "customManifestIdHint": "このサービスが生成するカスタムタイプ。ワークスペースが構成する remote-custom ハンドラーと照合されます。",
       "customManifestPath": "マニフェストのパス（任意）",
@@ -2190,7 +2192,26 @@
         "loading": "インフラ設定を読み込んでいます…",
         "kubeNoun": "Kubernetes ハンドラー",
         "kubeOverrideNoun": "Kubernetes のオーバーライド",
-        "customNoun": "このハンドラー"
+        "customNoun": "このハンドラー",
+        "cloudflareNoun": "Cloudflare ハンドラー"
+      },
+      "cloudflare": {
+        "intro": "対象リポジトリのプレビュー用ワークフローを起動して、プルリクエストごとに Cloudflare Worker を立ち上げます。cat-factory が Cloudflare と直接やり取りすることはありません。デプロイメントを作成し、その状態を読み取り、破棄時には inactive 状態を書き込みます。",
+        "label": "表示名",
+        "subdomain": "workers.dev サブドメイン",
+        "subdomainHint": "プレビュー URL は https://WORKER.SUBDOMAIN.workers.dev になります。「.workers.dev」を除いたサブドメインのラベルだけを入力してください。",
+        "token": "VCS API トークン",
+        "tokenPlaceholder": "細かい権限のトークンを貼り付けてください",
+        "tokenKeep": "空欄のままにすると保存済みのトークンを保持します",
+        "tokenHint": "リポジトリに対する Deployments の読み取り・書き込み権限のみが必要です。",
+        "repo": "ワークフローのリポジトリ（任意）",
+        "repoHint": "空欄にすると各サービスフレーム自身のリポジトリを使用します。1 つのリポジトリが複数サービスのプレビュー用ワークフローを持つ場合のみ指定してください。",
+        "advanced": "詳細設定",
+        "workerTemplate": "Worker 名のテンプレート",
+        "environmentTemplate": "デプロイメント環境名のテンプレート",
+        "templateHint": "これらはプレビュー用ワークフローとの取り決めです。cat-factory はここから URL を導出し、ワークフローも同じ名前でリソースを作成します。空欄にすると参照ワークフローの命名を使用します。使用できるプレースホルダー: pullNumber、branch、blockId。",
+        "apiBaseUrl": "VCS API のベース URL",
+        "connectedAs": "プレビューは {subdomain}.workers.dev にデプロイされます。"
       }
     },
     "providerConnection": {
@@ -4426,6 +4447,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "カスタム",
       "infraless": "インフラなし"
     },
@@ -4433,6 +4455,7 @@
       "local-docker": "ローカル Docker",
       "local-k3s": "ローカル k3s",
       "remote-kubernetes": "リモート Kubernetes",
+      "cloudflare": "Cloudflare プレビュー",
       "remote-custom": "リモートカスタム (HTTP)",
       "none": "なし"
     }

package/i18n/locales/pl.json

@@ -800,6 +800,7 @@
         "infraless": "Bez infrastruktury",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Podgląd Cloudflare Workers",
         "custom": "Niestandardowy"
       },
       "composePath": "Ścieżka docker-compose",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw stosuje manifesty bez zmian. Kustomize najpierw buduje overlay (wymaga kontenerowego adaptera wdrożenia).",
       "customManifestId": "Niestandardowy typ manifestu",
       "customManifestIdPlaceholder": "Wybierz typ manifestu",
+      "cloudflareHint": "Nie ma tu nic do skonfigurowania: przepis dla każdego pull requesta znajduje się we własnym workflow podglądu tego repozytorium. Podłącz obsługę Cloudflare Workers w sekcji Infrastruktura, aby wybrać konto i nazewnictwo.",
       "customNoTypes": "Nie zdefiniowano jeszcze niestandardowych typów manifestów. Dodaj jeden w oknie Infrastruktura.",
       "customManifestIdHint": "Niestandardowy typ, który tworzy ta usługa, dopasowany do handlera remote-custom skonfigurowanego przez przestrzeń roboczą.",
       "customManifestPath": "Ścieżka manifestu (opcjonalnie)",
@@ -2854,7 +2856,26 @@
         "loading": "Ładowanie ustawień infrastruktury…",
         "kubeNoun": "obsługę Kubernetes",
         "kubeOverrideNoun": "nadpisanie Kubernetes",
-        "customNoun": "tę obsługę"
+        "customNoun": "tę obsługę",
+        "cloudflareNoun": "obsługę Cloudflare"
+      },
+      "cloudflare": {
+        "intro": "Uruchamia Worker Cloudflare dla każdego pull requesta, wyzwalając workflow podglądu w docelowym repozytorium. cat-factory nigdy nie komunikuje się bezpośrednio z Cloudflare: tworzy wdrożenie, odczytuje jego status i publikuje status inactive, aby je usunąć.",
+        "label": "Nazwa wyświetlana",
+        "subdomain": "Subdomena workers.dev",
+        "subdomainHint": "Adres podglądu to https://WORKER.SUBDOMAIN.workers.dev — wpisz samą etykietę subdomeny, bez „.workers.dev”.",
+        "token": "Token API systemu kontroli wersji",
+        "tokenPlaceholder": "Wklej token o precyzyjnych uprawnieniach",
+        "tokenKeep": "Pozostaw puste, aby zachować zapisany token",
+        "tokenHint": "Wymaga uprawnienia „Deployments: read & write” do repozytorium i niczego więcej.",
+        "repo": "Repozytorium z workflow (opcjonalnie)",
+        "repoHint": "Pozostaw puste, aby użyć własnego repozytorium każdej ramki usługi. Ustaw tylko wtedy, gdy jedno repozytorium zawiera workflow podglądu dla wielu usług.",
+        "advanced": "Zaawansowane",
+        "workerTemplate": "Szablon nazwy Workera",
+        "environmentTemplate": "Szablon nazwy środowiska wdrożenia",
+        "templateHint": "To umowa z workflow podglądu: cat-factory wyprowadza z nich adres URL, a workflow tak samo nazywa swoje zasoby. Pozostaw puste, aby użyć nazewnictwa z workflow referencyjnego. Dostępne symbole: pullNumber, branch, blockId.",
+        "apiBaseUrl": "Bazowy adres URL API systemu kontroli wersji",
+        "connectedAs": "Podglądy są wdrażane pod adresem {subdomain}.workers.dev."
       }
     },
     "modelPolicy": {
@@ -4414,6 +4435,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Niestandardowy",
       "infraless": "Bez infrastruktury"
     },
@@ -4421,6 +4443,7 @@
       "local-docker": "Lokalny Docker",
       "local-k3s": "Lokalny k3s",
       "remote-kubernetes": "Zdalny Kubernetes",
+      "cloudflare": "Podgląd Cloudflare",
       "remote-custom": "Zdalny niestandardowy (HTTP)",
       "none": "Brak"
     }

package/i18n/locales/tr.json

@@ -800,6 +800,7 @@
         "infraless": "Altyapısız",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Cloudflare Workers önizlemesi",
         "custom": "Özel"
       },
       "composePath": "docker-compose yolu",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw manifestleri olduğu gibi uygular. Kustomize önce bir overlay oluşturur (kapsayıcı dağıtım adaptörü gerekir).",
       "customManifestId": "Özel manifest türü",
       "customManifestIdPlaceholder": "Bir manifest türü seçin",
+      "cloudflareHint": "Burada yapılandırılacak bir şey yok: her pull request için izlenecek adımlar bu deponun kendi önizleme iş akışında. Hesabı ve adlandırmayı seçmek için Altyapı bölümünden bir Cloudflare Workers işleyicisi bağlayın.",
       "customNoTypes": "Henüz özel manifest türü tanımlanmadı. Altyapı penceresinden bir tane ekleyin.",
       "customManifestIdHint": "Bu servisin ürettiği özel tür; çalışma alanının yapılandırdığı remote-custom işleyiciyle eşleştirilir.",
       "customManifestPath": "Manifest yolu (isteğe bağlı)",
@@ -2190,7 +2192,26 @@
         "loading": "Altyapı ayarları yükleniyor…",
         "kubeNoun": "Kubernetes işleyicisi",
         "kubeOverrideNoun": "Kubernetes geçersiz kılması",
-        "customNoun": "bu işleyici"
+        "customNoun": "bu işleyici",
+        "cloudflareNoun": "Cloudflare işleyicisini"
+      },
+      "cloudflare": {
+        "intro": "Hedef deponun kendi önizleme iş akışını tetikleyerek her pull request için bir Cloudflare Worker ayağa kaldırır. cat-factory Cloudflare ile hiçbir zaman doğrudan konuşmaz: bir dağıtım oluşturur, durumunu okur ve kaldırmak için inactive durumu yazar.",
+        "label": "Görünen ad",
+        "subdomain": "workers.dev alt alan adı",
+        "subdomainHint": "Önizleme adresi https://WORKER.SUBDOMAIN.workers.dev olur — yalnızca alt alan adı etiketini girin, \".workers.dev\" olmadan.",
+        "token": "VCS API belirteci",
+        "tokenPlaceholder": "İnce ayarlı bir belirteç yapıştırın",
+        "tokenKeep": "Kayıtlı belirteci korumak için boş bırakın",
+        "tokenHint": "Depo üzerinde yalnızca \"Deployments: read & write\" yetkisi gerekir.",
+        "repo": "İş akışının bulunduğu depo (isteğe bağlı)",
+        "repoHint": "Her hizmet çerçevesinin kendi deposunu kullanmak için boş bırakın. Yalnızca tek bir depo birden çok hizmetin önizleme iş akışını barındırıyorsa sabitleyin.",
+        "advanced": "Gelişmiş",
+        "workerTemplate": "Worker adı şablonu",
+        "environmentTemplate": "Dağıtım ortamı adı şablonu",
+        "templateHint": "Bunlar önizleme iş akışıyla yapılan anlaşmadır: cat-factory adresi bunlardan türetir ve iş akışı kaynaklarını aynı şekilde adlandırır. Referans iş akışının adlandırmasını kullanmak için boş bırakın. Kullanılabilir yer tutucular: pullNumber, branch, blockId.",
+        "apiBaseUrl": "VCS API taban adresi",
+        "connectedAs": "Önizlemeler {subdomain}.workers.dev üzerine dağıtılır."
       }
     },
     "providerConnection": {
@@ -4426,6 +4447,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Özel",
       "infraless": "Altyapısız"
     },
@@ -4433,6 +4455,7 @@
       "local-docker": "Yerel Docker",
       "local-k3s": "Yerel k3s",
       "remote-kubernetes": "Uzak Kubernetes",
+      "cloudflare": "Cloudflare önizlemesi",
       "remote-custom": "Uzak özel (HTTP)",
       "none": "Yok"
     }

package/i18n/locales/uk.json

@@ -800,6 +800,7 @@
         "infraless": "Без інфраструктури",
         "docker-compose": "Docker Compose",
         "kubernetes": "Kubernetes",
+        "cloudflare": "Попередній перегляд Cloudflare Workers",
         "custom": "Власний"
       },
       "composePath": "Шлях docker-compose",
@@ -842,6 +843,7 @@
       "rendererHint": "Raw застосовує маніфести як є. Kustomize спершу будує overlay (потрібен контейнерний адаптер розгортання).",
       "customManifestId": "Власний тип маніфесту",
       "customManifestIdPlaceholder": "Виберіть тип маніфесту",
+      "cloudflareHint": "Тут нема чого налаштовувати: рецепт для кожного пул-реквесту міститься у власному робочому процесі попереднього перегляду цього репозиторію. Підключіть обробник Cloudflare Workers у розділі «Інфраструктура», щоб обрати обліковий запис і найменування.",
       "customNoTypes": "Власні типи маніфестів ще не визначені. Додайте один у вікні Інфраструктура.",
       "customManifestIdHint": "Власний тип, який створює ця служба, зіставлений з обробником remote-custom, який налаштовує робочий простір.",
       "customManifestPath": "Шлях до маніфесту (необов'язково)",
@@ -2854,7 +2856,26 @@
         "loading": "Завантаження налаштувань інфраструктури…",
         "kubeNoun": "обробник Kubernetes",
         "kubeOverrideNoun": "перевизначення Kubernetes",
-        "customNoun": "цей обробник"
+        "customNoun": "цей обробник",
+        "cloudflareNoun": "обробник Cloudflare"
+      },
+      "cloudflare": {
+        "intro": "Піднімає окремий Cloudflare Worker для кожного пул-реквесту, запускаючи власний робочий процес попереднього перегляду цільового репозиторію. cat-factory ніколи не звертається до Cloudflare напряму: він створює розгортання, читає його статус і публікує статус inactive, щоб його прибрати.",
+        "label": "Відображувана назва",
+        "subdomain": "Субдомен workers.dev",
+        "subdomainHint": "Адреса перегляду буде https://WORKER.SUBDOMAIN.workers.dev — введіть лише мітку субдомену, без «.workers.dev».",
+        "token": "Токен API системи контролю версій",
+        "tokenPlaceholder": "Вставте токен із точними дозволами",
+        "tokenKeep": "Залиште порожнім, щоб зберегти наявний токен",
+        "tokenHint": "Потрібен лише дозвіл «Deployments: read & write» для репозиторію.",
+        "repo": "Репозиторій з робочим процесом (необовʼязково)",
+        "repoHint": "Залиште порожнім, щоб використовувати власний репозиторій кожного фрейму сервісу. Задавайте лише тоді, коли один репозиторій містить робочий процес перегляду для кількох сервісів.",
+        "advanced": "Додатково",
+        "workerTemplate": "Шаблон назви Worker",
+        "environmentTemplate": "Шаблон назви середовища розгортання",
+        "templateHint": "Це домовленість із робочим процесом перегляду: cat-factory виводить із них адресу, а робочий процес так само називає свої ресурси. Залиште порожнім, щоб узяти найменування з еталонного робочого процесу. Доступні підстановки: pullNumber, branch, blockId.",
+        "apiBaseUrl": "Базова адреса API системи контролю версій",
+        "connectedAs": "Перегляди розгортаються на {subdomain}.workers.dev."
       }
     },
     "modelPolicy": {
@@ -4414,6 +4435,7 @@
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
+      "cloudflare": "Cloudflare Workers",
       "custom": "Власний",
       "infraless": "Без інфраструктури"
     },
@@ -4421,6 +4443,7 @@
       "local-docker": "Локальний Docker",
       "local-k3s": "Локальний k3s",
       "remote-kubernetes": "Віддалений Kubernetes",
+      "cloudflare": "Попередній перегляд Cloudflare",
       "remote-custom": "Віддалений власний (HTTP)",
       "none": "Немає"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.160.0",
+  "version": "0.161.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
     "valibot": "^1.4.2",
     "vue": "3.5.40",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.173.0"
+    "@cat-factory/contracts": "0.175.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",