Cloudflare

@webframp/cloudflarev2026.07.18.2· 19d agoMODELS

01README

Cloudflare management - zones, DNS records, WAF/firewall rules, Workers, and cache/CDN

02Release Notes

2026.07.18.2

Added: An upgrades array entry (no-op) to cache.ts, dns.ts, waf.ts, worker.ts, zone.ts for proper typeVersion tracking on existing instances. No schema or behavior changes.

2026.07.18.1

Changed: Renamed the manifest tags: field to labels: — the schema's actual field name. No runtime or install behavior change.

2026.07.13.1

Changed: Pinned the zod import specifier to npm:zod@4.4.3 across all model files (zone, worker, waf, dns, cache), matching the version used by the rest of the repo. Previously these files pinned 4.3.6. No API or runtime behavior changes — 4.4.3 is a backward-compatible patch.

03Models5

@webframp/cloudflare/zonev2026.07.18.2cloudflare/zone.ts

Global Arguments

Argument	Type	Required	Description
apiToken	string	yes	Cloudflare API token with Zone read/write permissions

fn list(status?: enum)

List all zones in the account

Argument	Type	Required	Description
status?	enum	no	Filter by zone status

fn get(zoneId: string)

Get details for a specific zone

Argument	Type	Required	Description
zoneId	string	yes	Zone ID

fn get_settings(zoneId: string)

Get all settings for a zone

Argument	Type	Required	Description
zoneId	string	yes	Zone ID

fn update_setting(zoneId: string, setting: string, value: unknown)

Update a specific zone setting

Argument	Type	Required	Description
zoneId	string	yes	Zone ID
setting	string	yes	Setting name (e.g., 'ssl', 'cache_level', 'minify')
value	unknown	yes	New value for the setting

fn pause(zoneId: string)

Pause a zone (disable Cloudflare proxy)

Argument	Type	Required	Description
zoneId	string	yes	Zone ID

fn unpause(zoneId: string)

Unpause a zone (enable Cloudflare proxy)

Argument	Type	Required	Description
zoneId	string	yes	Zone ID

Resources

zones(infinite)— List of all zones in the account

zone(infinite)— Single zone details

settings(infinite)— Zone settings (caching, SSL, etc.)

@webframp/cloudflare/dnsv2026.07.18.2cloudflare/dns.ts

Global Arguments

Argument	Type	Required	Description
apiToken	string	yes	Cloudflare API token with DNS read/write permissions
zoneId	string	yes	Zone ID to manage DNS records for

fn list(type?: enum, name?: string)

List all DNS records in the zone

Argument	Type	Required	Description
type?	enum	no	Filter by record type
name?	string	no	Filter by record name (exact match)

fn get(recordId: string)

Get a specific DNS record

Argument	Type	Required	Description
recordId	string	yes	DNS record ID

fn create(type: enum, name: string, content: string, ttl: number, proxied: boolean, priority?: number, comment?: string)

Create a new DNS record

Argument	Type	Required	Description
type	enum	yes	Record type
name	string	yes	Record name (e.g., 'www' or '@' for root)
content	string	yes	Record content (IP address, hostname, etc.)
ttl	number	yes	TTL in seconds (1 = auto)
proxied	boolean	yes	Enable Cloudflare proxy (orange cloud)
priority?	number	no	Priority (required for MX records)
comment?	string	no	Comment for the record

fn update(recordId: string, type: enum, name: string, content: string, ttl: number, proxied: boolean, priority?: number, comment?: string)

Update an existing DNS record

Argument	Type	Required	Description
recordId	string	yes	DNS record ID to update
type	enum	yes	Record type
name	string	yes	Record name
content	string	yes	Record content
ttl	number	yes	TTL in seconds (1 = auto)
proxied	boolean	yes	Enable Cloudflare proxy
priority?	number	no	Priority (for MX records)
comment?	string	no	Comment for the record

fn delete(recordId: string)

Delete a DNS record

Argument	Type	Required	Description
recordId	string	yes	DNS record ID to delete

fn export()

Export all DNS records in BIND format

Resources

records(infinite)— List of DNS records for the zone

record(infinite)— Single DNS record

Files

export(text/plain)— DNS records exported in BIND zone file format

@webframp/cloudflare/wafv2026.07.18.2cloudflare/waf.ts

Global Arguments

Argument	Type	Required	Description
apiToken	string	yes	Cloudflare API token with Firewall read/write permissions
zoneId	string	yes	Zone ID to manage firewall rules for

fn list_rules()

List all firewall rules

fn create_rule(expression: string, action: enum, description?: string, priority?: number, paused: boolean)

Create a new firewall rule

Argument	Type	Required	Description
expression	string	yes	Firewall expression (e.g., 'ip.src eq 1.2.3.4' or 'http.request.uri.path contains \
action	enum	yes	Action to take when rule matches
description?	string	no	Human-readable description
priority?	number	no	Rule priority (lower = higher priority)
paused	boolean	yes	Create rule in paused state

fn delete_rule(ruleId: string)

Delete a firewall rule

Argument	Type	Required	Description
ruleId	string	yes	Firewall rule ID to delete

fn toggle_rule(ruleId: string, paused: boolean)

Pause or unpause a firewall rule

Argument	Type	Required	Description
ruleId	string	yes	Firewall rule ID
paused	boolean	yes	Set to true to pause, false to enable

fn list_packages()

List WAF packages (managed rulesets)

fn get_security_events(limit: number)

Get recent security events (blocks, challenges, etc.)

Argument	Type	Required	Description
limit	number	yes	Maximum number of events to fetch

Resources

rules(infinite)— Firewall rules for the zone

rule(infinite)— Single firewall rule

packages(infinite)— WAF packages (managed rulesets)

events(7d)— Recent security events

@webframp/cloudflare/workerv2026.07.18.2cloudflare/worker.ts

Global Arguments

Argument	Type	Required	Description
apiToken	string	yes	Cloudflare API token with Workers read/write permissions
accountId	string	yes	Cloudflare account ID

fn list_scripts()

List all Worker scripts in the account

fn get_script(scriptName: string)

Get Worker script metadata and source code

Argument	Type	Required	Description
scriptName	string	yes	Worker script name

fn deploy(scriptName: string, script: string, bindings?: array)

Deploy a Worker script

Argument	Type	Required	Description
scriptName	string	yes	Worker script name
script	string	yes	JavaScript/TypeScript source code
bindings?	array	no	Environment bindings

fn delete_script(scriptName: string)

Delete a Worker script

Argument	Type	Required	Description
scriptName	string	yes	Worker script name to delete

fn list_routes(zoneId: string)

List Worker routes for a zone

Argument	Type	Required	Description
zoneId	string	yes	Zone ID

fn create_route(zoneId: string, pattern: string, scriptName: string)

Create a Worker route

Argument	Type	Required	Description
zoneId	string	yes	Zone ID
pattern	string	yes	Route pattern (e.g., 'example.com/*')
scriptName	string	yes	Worker script name to execute

fn delete_route(zoneId: string, routeId: string)

Delete a Worker route

Argument	Type	Required	Description
zoneId	string	yes	Zone ID
routeId	string	yes	Route ID to delete

fn toggle_subdomain(scriptName: string, enabled: boolean)

Enable or disable workers.dev subdomain for a Worker script

Argument	Type	Required	Description
scriptName	string	yes	Worker script name
enabled	boolean	yes	Enable or disable workers.dev subdomain

Resources

scripts(infinite)— List of Worker scripts in the account

script(infinite)— Single Worker script metadata

routes(infinite)— Worker routes for a zone

deployment(infinite)— Worker deployment result

Files

source(application/javascript)— Worker script source code

@webframp/cloudflare/cachev2026.07.18.2cloudflare/cache.ts

Global Arguments

Argument	Type	Required	Description
apiToken	string	yes	Cloudflare API token with Cache Purge permissions
zoneId	string	yes	Zone ID to manage cache for

fn purge_all()

Purge all cached content for the zone

fn purge_urls(urls: array)

Purge specific URLs from cache

Argument	Type	Required	Description
urls	array	yes	List of URLs to purge (max 30)

fn purge_tags(tags: array)

Purge cache by Cache-Tag headers (Enterprise only)

Argument	Type	Required	Description
tags	array	yes	List of Cache-Tag values to purge

fn purge_prefixes(prefixes: array)

Purge cache by URL prefixes (Enterprise only)

Argument	Type	Required	Description
prefixes	array	yes	List of URL prefixes to purge

fn get_settings()

Get cache-related settings for the zone

fn set_cache_level(level: enum)

Set the cache level for the zone

Argument	Type	Required	Description
level	enum	yes	Cache level: bypass (no cache), basic, simplified, or aggressive

fn toggle_dev_mode(enabled: boolean)

Toggle development mode (bypasses cache for 3 hours)

Argument	Type	Required	Description
enabled	boolean	yes	Enable or disable development mode

fn get_analytics(since: string, until: string)

Get cache analytics (hit rate, bandwidth)

Argument	Type	Required	Description
since	string	yes	Start time (minutes ago, e.g., '-1440' for last 24h)
until	string	yes	End time (minutes ago, '0' for now)

Resources

purge(7d)— Cache purge operation result

settings(infinite)— Cache-related zone settings

analytics(1d)— Cache analytics and hit rates

04Previous Versions14

2026.07.18.1Jul 18, 2026

2026.07.18.1

Changed: Renamed the manifest tags: field to labels: — the schema's actual field name. No runtime or install behavior change.

2026.07.13.1

updated labels

2026.07.13.1Jul 14, 2026

2026.07.13.1

2026.06.27.1Jun 27, 2026

2026.06.27.1

Fixed: Removed stale "zod": "npm:zod@4.3.6" alias from deno.json imports map. All source files already used direct npm:zod@4.3.6 specifiers; the alias was dead. The scorer's deno doc --lint flagged it as a mismatch, causing the extension to fail scoring (Warning Import "zod" not a dependency).

Upgrade note: If you use @webframp/cloudflare-audit, pull both extensions together — cloudflare-audit@2026.06.27.1 requires cloudflare@2026.06.27.1.

2026.06.26.1

Fixed: get_analytics (cache model) and get_security_events (waf model) now use parameterized GraphQL variables. Previously these methods failed silently due to a query syntax error — they returned empty/zero data instead of actual analytics. After upgrading, expect to see real cache hit-rate and security event data where there was none before.

Added: All paginated methods (zone list, DNS list, WAF rules, WAF packages, worker scripts, worker routes) now log a WARNING when results are truncated at the 1000-item pagination cap. Previously truncation was silent.

Upgrade note: If you use @webframp/cloudflare-audit, pull both extensions together — cloudflare-audit@2026.06.26.1 requires cloudflare@2026.06.26.1.

2026.06.26.1Jun 26, 2026

2026.06.21.1Jun 22, 2026

2026.06.16.1Jun 16, 2026

2026.06.15.1Jun 16, 2026

2026.05.27.1May 27, 2026

2026.05.20.1May 20, 2026

2026.04.22.1Apr 22, 2026

2026.04.13.1Apr 13, 2026

2026.03.31.2Mar 31, 2026

2026.03.31.1Mar 31, 2026

2026.03.28.1Mar 30, 2026

05Stats

100 / 100

Downloads

774

Archive size

27.9 KB

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License declared1/1earned
Verified public repository2/2earned

Repository

https://github.com/webframp/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64

07Labels

#cloudflare #dns #cdn #waf #firewall #workers #cache #security #edge