@theholocron/cloudflare-client 1.19.0 → 1.20.0

package/README.md

@@ -93,6 +93,31 @@ await cf.pages.updateProject(ACCOUNT, "my-docs-preview", {
 });
 ```
 
+## Usage — Workers
+
+```ts
+const cf = createCloudflareClient({ token: process.env.CLOUDFLARE_API_TOKEN! });
+const ACCOUNT = process.env.CLOUDFLARE_ACCOUNT_ID!;
+
+// Deploy (or update) a Worker script
+await cf.workers.putScript(ACCOUNT, "my-worker", "export default { fetch() { … } };");
+
+// Set a secret — one call both stores the encrypted value and binds it as
+// `env.MY_SECRET` in the Worker; values are write-only, never echoed back
+await cf.workers.putSecret(ACCOUNT, "my-worker", "MY_SECRET", "shh");
+
+// List secret names bound to a script (no values)
+const secrets = await cf.workers.listSecrets(ACCOUNT, "my-worker");
+
+// Remove a secret binding
+await cf.workers.deleteSecret(ACCOUNT, "my-worker", "MY_SECRET");
+
+// Route management — zone-scoped
+const routes = await cf.workers.listRoutes("zone-id");
+await cf.workers.createRoute("zone-id", "example.com/*", "my-worker");
+await cf.workers.updateRoute("zone-id", routes[0].id, "example.com/*", "my-worker");
+```
+
 ## Auth
 
 Create an [API Token](https://dash.cloudflare.com/profile/api-tokens) with the permissions your use case requires:
@@ -102,6 +127,8 @@ Create an [API Token](https://dash.cloudflare.com/profile/api-tokens) with the p
 | DNS management     | `Zone:Read`, `DNS:Edit`          |
 | Tunnel management  | `Account:Cloudflare Tunnel:Edit` |
 | Pages deployments  | `Account:Cloudflare Pages:Edit`  |
+| Workers + secrets  | `Account:Workers Scripts:Edit`   |
+| Worker routes      | `Zone:Workers Routes:Edit`       |
 | Token verification | `User:API Tokens:Read`           |
 
 Pass the token directly or via the `CLOUDFLARE_API_TOKEN` environment variable.

package/dist/index.d.mts

@@ -117,6 +117,11 @@ interface CfWorkerRoute {
   pattern: string;
   script: string | null;
 }
+/** https://developers.cloudflare.com/api/operations/worker-script-put-encrypted-secret-binding */
+interface CfWorkerSecret {
+  name: string;
+  type: "secret_text";
+}
 //#endregion
 //#region src/index.d.ts
 declare function createCloudflareClient(opts: CloudflareClientOptions): {
@@ -169,8 +174,11 @@ declare function createCloudflareClient(opts: CloudflareClientOptions): {
     listRoutes: (zoneId: string) => Promise<CfWorkerRoute[]>;
     createRoute: (zoneId: string, pattern: string, script: string) => Promise<CfWorkerRoute>;
     updateRoute: (zoneId: string, routeId: string, pattern: string, script: string) => Promise<CfWorkerRoute>;
+    putSecret: (accountId: string, scriptName: string, name: string, value: string) => Promise<CfWorkerSecret>;
+    listSecrets: (accountId: string, scriptName: string) => Promise<CfWorkerSecret[]>;
+    deleteSecret: (accountId: string, scriptName: string, name: string) => Promise<void>;
   };
 };
 type CloudflareClient = ReturnType<typeof createCloudflareClient>;
 //#endregion
-export { type CfDnsRecord, type CfDnsRecordInput, type CfDnsRecordType, type CfEnvelope, type CfIngressRule, type CfPagesDeployment, type CfPagesDeploymentStage, type CfPagesDomain, type CfPagesEnvConfig, type CfPagesEnvVar, type CfPagesEnvVarType, type CfPagesProject, type CfPagesProjectInput, type CfTokenVerification, type CfTunnel, type CfTunnelConfig, type CfWorkerRoute, type CfZone, CloudflareClient, type CloudflareClientOptions, createCloudflareClient };
+export { type CfDnsRecord, type CfDnsRecordInput, type CfDnsRecordType, type CfEnvelope, type CfIngressRule, type CfPagesDeployment, type CfPagesDeploymentStage, type CfPagesDomain, type CfPagesEnvConfig, type CfPagesEnvVar, type CfPagesEnvVarType, type CfPagesProject, type CfPagesProjectInput, type CfTokenVerification, type CfTunnel, type CfTunnelConfig, type CfWorkerRoute, type CfWorkerSecret, type CfZone, CloudflareClient, type CloudflareClientOptions, createCloudflareClient };

package/dist/index.mjs

@@ -113,7 +113,14 @@ function workers(rest, opts) {
 		updateRoute: (zoneId, routeId, pattern, script) => cfRequest(rest, "PUT", `/zones/${zoneId}/workers/routes/${routeId}`, {
 			pattern,
 			script
-		})
+		}),
+		putSecret: (accountId, scriptName, name, value) => cfRequest(rest, "PUT", `/accounts/${accountId}/workers/scripts/${encodeURIComponent(scriptName)}/secrets`, {
+			name,
+			text: value,
+			type: "secret_text"
+		}),
+		listSecrets: (accountId, scriptName) => cfRequest(rest, "GET", `/accounts/${accountId}/workers/scripts/${encodeURIComponent(scriptName)}/secrets`),
+		deleteSecret: (accountId, scriptName, name) => cfRequest(rest, "DELETE", `/accounts/${accountId}/workers/scripts/${encodeURIComponent(scriptName)}/secrets/${encodeURIComponent(name)}`)
 	};
 }
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/cloudflare-client",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "description": "A TypeScript client for the Cloudflare API",
   "keywords": [
     "cloudflare",
@@ -33,7 +33,7 @@
   ],
   "dependencies": {
     "@theholocron/observability": "^0.3.0",
-    "@theholocron/http-client": "^1.19.0"
+    "@theholocron/http-client": "^1.20.0"
   },
   "devDependencies": {
     "@theholocron/cli": "5.0.0-alpha.3",