@volter/twin-cloudflare 0.1.0

package/dist/src/cloudflare-budget.d.ts

@@ -0,0 +1,22 @@
+import { RateBudget, type RateBudgetDeclaration, type RateBudgetOptions, type RateBudgetReservation, type RateBudgetSnapshot } from '@volter/world-core';
+export declare const CLOUDFLARE_BUDGET_WINDOW_MS = 60000;
+export declare const CLOUDFLARE_BUDGET_CEILING = 60;
+export declare const CLOUDFLARE_BUDGET_MAX_RETRY_AFTER_S = 300;
+export declare const CLOUDFLARE_CALL_WEIGHTS: {
+    readonly mutation: 3;
+    readonly read: 2;
+};
+export declare const CLOUDFLARE_RATE_BUDGET: RateBudgetDeclaration;
+export declare function cloudflareCallWeight(method: string, path: string): number;
+export declare function cloudflareBudgetPath(opts?: {
+    root?: string;
+    token?: string;
+} | string): string;
+export type CloudflareBudgetOptions = Omit<RateBudgetOptions, 'vendor'>;
+export declare class CloudflareBudget extends RateBudget {
+    constructor(opts?: CloudflareBudgetOptions);
+}
+export type { RateBudgetErrorKind as CloudflareBudgetErrorKind } from '@volter/world-core';
+export { RateBudgetError as CloudflareBudgetError } from '@volter/world-core';
+export type CloudflareBudgetReservation = RateBudgetReservation;
+export type CloudflareBudgetSnapshot = RateBudgetSnapshot;

package/dist/src/cloudflare-budget.js

@@ -0,0 +1,40 @@
+// Cloudflare client-side rate budget. The mechanism is shared @volter/world-core RateBudget;
+// only Cloudflare's documented limit and conservative weights live here.
+//
+// Official source, live-fetched 2026-08-21:
+// https://developers.cloudflare.com/fundamentals/api/reference/limits/
+// Cloudflare publishes a global 1,200 requests / five minutes per user/account token.
+// This declaration stays at the kernel fallback's much tighter 60 weighted units/minute.
+import { declareRateBudget, rateBudgetPath, rateBudgetWeight, RateBudget, } from '@volter/world-core';
+const VENDOR = 'cloudflare';
+export const CLOUDFLARE_BUDGET_WINDOW_MS = 60_000;
+export const CLOUDFLARE_BUDGET_CEILING = 60;
+export const CLOUDFLARE_BUDGET_MAX_RETRY_AFTER_S = 300;
+export const CLOUDFLARE_CALL_WEIGHTS = { mutation: 3, read: 2 };
+export const CLOUDFLARE_RATE_BUDGET = {
+    windowMs: CLOUDFLARE_BUDGET_WINDOW_MS,
+    ceiling: CLOUDFLARE_BUDGET_CEILING,
+    defaultWeight: CLOUDFLARE_CALL_WEIGHTS.read,
+    maxRetryAfterSeconds: CLOUDFLARE_BUDGET_MAX_RETRY_AFTER_S,
+    rules: [
+        { match: '^(POST|PUT|PATCH|DELETE) ', weight: CLOUDFLARE_CALL_WEIGHTS.mutation },
+    ],
+    reason: 'Cloudflare publishes a global Client API limit of 1,200 requests per five minutes per user/account token ' +
+        '(https://developers.cloudflare.com/fundamentals/api/reference/limits/, live-fetched 2026-08-21). ' +
+        'This declaration is deliberately tighter: 60 weighted units per minute; reads cost 2 (30/minute) and ' +
+        'mutations cost 3 (20/minute). It neither exceeds the documented sustained limit nor the kernel fallback burst.',
+};
+declareRateBudget(VENDOR, CLOUDFLARE_RATE_BUDGET);
+export function cloudflareCallWeight(method, path) {
+    return rateBudgetWeight(VENDOR, `${method.toUpperCase()} ${path.split('?')[0] ?? path}`);
+}
+export function cloudflareBudgetPath(opts = {}) {
+    const value = typeof opts === 'string' ? { root: opts } : opts;
+    return rateBudgetPath({ ...value, vendor: VENDOR });
+}
+export class CloudflareBudget extends RateBudget {
+    constructor(opts = {}) {
+        super({ ...opts, vendor: VENDOR });
+    }
+}
+export { RateBudgetError as CloudflareBudgetError } from '@volter/world-core';

package/dist/src/cloudflare-capabilities.d.ts

@@ -0,0 +1,6 @@
+import { type CapabilityReport, type CapabilitySpec } from '@volter/world-tooling';
+export declare const CLOUDFLARE_OFFICIAL_AREAS: readonly ["abuse-reports", "accounts", "acm", "addressing", "ai", "ai-audit", "ai-gateway", "ai-security", "aisearch", "alerting", "analytics-query", "api-gateway", "argo", "audit-logs", "billing", "bot-management", "botnet-feed", "brand-protection", "browser-rendering", "cache", "calls", "certificate-authorities", "client-certificates", "cloud-connector", "cloudforce-one", "connectivity", "content-scanning", "csam-scanner", "custom-certificates", "custom-csrs", "custom-hostnames", "custom-nameservers", "custom-pages", "d1", "dcv-delegation", "ddos-protection", "diagnostics", "dls", "dns", "dns-firewall", "durable-objects", "email-auth", "email-routing", "email-security", "email-sending", "filters", "firewall", "flagship", "fraud", "google-tag-gateway", "healthchecks", "hostnames", "hyperdrive", "iam", "images", "intel", "ips", "keyless-certificates", "kv", "leaked-credential-checks", "load-balancers", "logpush", "logs", "magic-cloud-networking", "magic-network-monitoring", "magic-transit", "managed-transforms", "memberships", "moq", "mtls-certificates", "network-interconnects", "organizations", "origin-ca-certificates", "origin-post-quantum-encryption", "origin-tls-client-auth", "origin-tls-compliance-modes", "page-rules", "page-shield", "pages", "pipelines", "precursor", "queues", "r2", "r2-data-catalog", "radar", "rate-limits", "realtime-kit", "registrar", "registrar-sandbox", "request-tracers", "resource-sharing", "resource-tagging", "rules", "rulesets", "rum", "schema-validation", "secrets-store", "security-center", "security-txt", "snippets", "spectrum", "speed", "ssl", "stream", "tenant-custom-nameservers", "tenants", "token-validation", "turnstile", "url-normalization", "url-scanner", "user", "vectorize", "vulnerability-scanner", "waiting-rooms", "web3", "workers", "workers-for-platforms", "workflows", "zaraz", "zero-trust", "zones"];
+export declare const CLOUDFLARE_OPENAPI_AREAS: string[];
+export declare const CLOUDFLARE_AREAS: string[];
+export declare const CLOUDFLARE_CAPABILITIES: CapabilitySpec[];
+export declare function cloudflareCapabilities(): Promise<CapabilityReport>;