cloudflare

Files (200)

• SKILL.md
• README.md · references/agents-sdk/
• api.md · references/agents-sdk/
• configuration.md · references/agents-sdk/
• gotchas.md · references/agents-sdk/
• patterns.md · references/agents-sdk/
• README.md · references/ai-gateway/
• configuration.md · references/ai-gateway/
• dynamic-routing.md · references/ai-gateway/
• features.md · references/ai-gateway/
• sdk-integration.md · references/ai-gateway/
• troubleshooting.md · references/ai-gateway/
• README.md · references/ai-search/
• api.md · references/ai-search/
• configuration.md · references/ai-search/
• gotchas.md · references/ai-search/
• patterns.md · references/ai-search/
• README.md · references/analytics-engine/
• api.md · references/analytics-engine/
• configuration.md · references/analytics-engine/
• gotchas.md · references/analytics-engine/
• patterns.md · references/analytics-engine/
• README.md · references/api-shield/
• api.md · references/api-shield/
• configuration.md · references/api-shield/
• gotchas.md · references/api-shield/
• patterns.md · references/api-shield/
• README.md · references/api/
• api.md · references/api/
• configuration.md · references/api/
• gotchas.md · references/api/
• patterns.md · references/api/
• README.md · references/argo-smart-routing/
• api.md · references/argo-smart-routing/
• configuration.md · references/argo-smart-routing/
• gotchas.md · references/argo-smart-routing/
• patterns.md · references/argo-smart-routing/
• README.md · references/artifacts/
• api.md · references/artifacts/
• configuration.md · references/artifacts/
• README.md · references/bindings/
• api.md · references/bindings/
• configuration.md · references/bindings/
• gotchas.md · references/bindings/
• patterns.md · references/bindings/
• README.md · references/bot-management/
• api.md · references/bot-management/
• configuration.md · references/bot-management/
• gotchas.md · references/bot-management/
• patterns.md · references/bot-management/
• README.md · references/browser-rendering/
• api.md · references/browser-rendering/
• configuration.md · references/browser-rendering/
• gotchas.md · references/browser-rendering/
• patterns.md · references/browser-rendering/
• README.md · references/c3/
• api.md · references/c3/
• configuration.md · references/c3/
• gotchas.md · references/c3/
• patterns.md · references/c3/
• …and 140 more

SKILL.md (first lines)

# Cloudflare Platform Skill (Unified)

Consolidated: cloudflare + workers-best-practices + wrangler + durable-objects.

**Retrieval-first** — fetch latest docs before citing numbers, APIs, config.

## Retrieval Sources

| Source | URL | Use for |
|--------|-----|---------|
| CF Docs | https://developers.cloudflare.com/ | Limits, pricing, API reference |
| Workers types | `npm pack @cloudflare/workers-types` | Type signatures, binding shapes |
| Wrangler schema | `node_modules/wrangler/config-schema.json` | Config fields, binding shapes |
| Changelog | https://developers.cloudflare.com/changelog/ | Recent changes |
| Best Practices | https://developers.cloudflare.com/workers/best-practices/workers-best-practices/ | Canonical rules, anti-patterns |
| DO API | https://developers.cloudflare.com/durable-objects/api/ | DO methods, storage, alarms |

When reference and docs disagree, **trust the docs**.

---

## DECISION TREES

### "I need to run code"
```
├─ Serverless edge functions → Workers
├─ Full-stack with Git deploys → Pages
├─ Stateful coordination/real-time → Durable Objects
├─ Long-running multi-step → Workflows
├─ Run containers → Containers
├─ Multi-tenant (customers deploy) → Workers for Platforms
├─ Scheduled tasks (cron) → Cron Triggers
├─ Lightweight edge logic (modify HTTP) → Snippets
├─ Process execution events (logs) → Tail Workers
└─ Optimize latency to backend → Smart Placement
```

### "I need to store data"
```
├─ Key-value (config, sessions, cache) → KV
├─ Relational SQL → D1 (SQLite) or Hyperdrive (existing PG/MySQL)
├─ Object/file (S3-compatible) → R2
├─ Versioned file trees → Artifacts
├─ Message queue → Queues
├─ Vector embeddings → Vectorize
├─ Per-entity state → DO storage (SQLite)
├─ Secrets → Secrets Store
├─ Streaming ETL to R2 → Pipelines
├─ Managed Iceberg catalog → R2 Data Catalog
├─ Serverless SQL analytics → R2 SQL
└─ Persistent cache → Cache Reserve
```

### "I need AI/ML"
```
├─ Run inference (LLMs, embeddings, images) → Workers AI
├─ Vector database for RAG/search → Vectorize
├─ Build stateful AI agents → Agents SDK
├─ Gateway for any AI provider → AI Gateway
└─ AI-powered search widget → AI Search
```

### "I need security"
```
├─ WAF → WAF
├─ DDoS protection → DDoS
├─ Bot detection → Bot Management
├─ API protection → API Shield
├─ CAPTCHA alternative → Turnstile
└─ Credential leak detection → WAF (managed ruleset)
```

---

## WORKERS BEST PRACTICES

### Configuration
| Rule | Summary |
|------|---------|
| compatibility_date | Set to today on new; update periodically |
| nodejs_compat | Enable flag — many libs need Node.js built-ins |
| wrangler types | Run after config changes — never hand-write Env |
| Secrets | Use `wrangler secret put`, never hardcode |
| wrangler.jsonc | JSON config preferred; newer features JSON-only |

### Request & Response
| Rule | Summary |
|------|---------|
| Streaming | Stream large/unknown payloads — never `await response.text()` on unbounded |
| waitUntil | Use `ctx.waitUntil()` for post-response work; don't destructure ctx |

### Architecture
| Rule | Summary |
|------|---------|
| Bindings over REST | Use in-process bindings (KV, R2, D1, Queues) not REST API |
| Queues & Workflows | Move async work off critical path |
| Service bindings | Worker-to-Worker via service bindings, not public HTTP |
| Hyperdrive | Always for external PG/MySQL connections |

### Security
| Rule | Summary |
|------|---------|
| Web Crypto | `crypto.randomUUID()` / `crypto.getRandomValues()` — never Math.random() |
| No passThroughOnException | Explicit try/catch with structured errors |

### Anti-Patterns (NEVER)
| Anti-pattern | Why |
|-------------|-----|
| `await response.text()` unbounded | Memory exhaustion (128MB limit) |
| Hardcoded secrets | Credential leak |
| `Math.random()` for tokens | Not cryptographically secure |
| Bare `fetch()` no await/waitUntil | Floating promise |
| Module-level mutable request state | Cross-request data leaks |
| REST API from Worker | Unnecessary network hop, latency |
| `ctx.passThroughOnException()` | Hides bugs |
| Hand-written Env | Drifts from wrangler config |
| Destructuring `ctx` | Loses this binding |
| `any` on Env/params | Defeats type safety |
| `as unknown as T` double-cast | Hides type incompatibilities |

From PanPanFR/oh-my-kilo, MIT.

More from PanPanFR/oh-my-kilo