worker-secrets

Add a new CLI command to the hfs tool. Use when adding user-facing commands, subcommands, or flags to the CLI.

Create a new D1 database migration for the secret-vault. Use when adding tables, columns, or indexes to the vault's schema.

Review code changes for security issues specific to this encrypted secret vault. Use when modifying auth, encryption, scope enforcement, or any data-access paths.

Diagnose and fix issues with the secret-vault Worker, hfs CLI, D1 database, Cloudflare Access auth, and encryption. Use when something is broken, returning errors, or behaving unexpectedly.

Add a new API endpoint to the secret-vault Cloudflare Worker. Use when creating new routes, resources, or API functionality in the vault.

Write tests for the secret-vault Worker and hfs CLI. Use when adding test coverage, fixing bugs with regression tests, or validating behavior.

Define API endpoints with Zod schemas and auto-generated OpenAPI specs using @hono/zod-openapi. Use when adding, modifying, or documenting API routes.

Cloudflare Workers runtime constraints, D1 patterns, Hono conventions, and edge-specific best practices. Use when writing or modifying any Worker code, D1 queries, or wrangler config.

Deploy the secret-vault Cloudflare Worker and run pending D1 migrations. Use when deploying changes, after modifying the Worker source or adding migrations.

Set up and run local development for the secret-vault Worker and hfs CLI. Use when starting development, running locally, or onboarding.

Optimize the secret-vault Worker and hfs CLI for performance, latency, and resource usage. Use when addressing slow responses, high latency, or scaling concerns.