Add worker and secret management to setup scripts

scripts/setup.ts

@@ -10,6 +10,8 @@ import { Database } from "./setup/d1-database";
 import { KVNamespace } from "./setup/kv-namespace";
 import { Queue } from "./setup/queue";
 import { R2Bucket } from "./setup/r2-bucket";
+import { Secret } from "./setup/secret";
+import { Worker } from "./setup/worker";
 
 config({ path: "./.dev.vars" });
 
@@ -59,6 +61,12 @@ try {
 		"Do you have a Verifier API key? (press enter to continue) ",
 	);
 
+	// We need to create a worker if it doesn't exist to associate the secrets
+	let worker = await Worker.upsert(cf, account, projectName);
+
+	await Secret.create(cf, account, worker, "GRAVATAR_API_KEY", gravatar);
+	await Secret.create(cf, account, worker, "VERIFIER_API_KEY", verifier);
+
 	consola.info("Creating .dev.vars file with the app environment variables.");
 
 	await write(

scripts/setup/kv-namespace.ts

@@ -14,7 +14,7 @@ export class KVNamespace extends Data<ObjectParser> {
 	}
 
 	static async create(cf: Cloudflare, account: Account, title: string) {
-		consola.info("Creating KV namespace...");
+		consola.info(`Creating KV namespace ${title}.`);
 
 		let result = await cf.kv.namespaces.create({
 			account_id: account.id,

scripts/setup/queue.ts

@@ -14,7 +14,7 @@ export class Queue extends Data<ObjectParser> {
 	}
 
 	static async create(cf: Cloudflare, account: Account, name: string) {
-		consola.info("Creating queue...");
+		consola.info(`Creating queue ${name}.`);
 
 		let result = await cf.queues.create({
 			account_id: account.id,

scripts/setup/r2-bucket.ts

@@ -10,7 +10,7 @@ export class R2Bucket extends Data<ObjectParser> {
 	}
 
 	static async create(cf: Cloudflare, account: Account, name: string) {
-		consola.info("Creating queue...");
+		consola.info(`Creating R2 bucket ${name}.`);
 
 		let result = await cf.r2.buckets.create({ account_id: account.id, name });
 

scripts/setup/secret.ts

@@ -0,0 +1,50 @@
+import { Data } from "@edgefirst-dev/data";
+import { ObjectParser } from "@edgefirst-dev/data/parser";
+import type Cloudflare from "cloudflare";
+import consola from "consola";
+import { generatePath } from "react-router";
+import type { Account } from "./account";
+import { Worker } from "./worker";
+
+export class Secret extends Data<ObjectParser> {
+	get name() {
+		return this.parser.string("name");
+	}
+
+	get type() {
+		return this.parser.string("type");
+	}
+
+	static async create(
+		cf: Cloudflare,
+		account: Account,
+		worker: Worker,
+		name: string,
+		text: string,
+	) {
+		consola.info(`Creating secret ${name}.`);
+
+		let path = generatePath(
+			"/client/v4/accounts/:accountId/workers/scripts/:name/secrets",
+			{ accountId: account.id, name: worker.name },
+		);
+
+		let response = await fetch(new URL(path, "https://api.cloudflare.com"), {
+			method: "PUT",
+			body: JSON.stringify({ name, text, type: "secret_text" }),
+			headers: {
+				Authorization: `Bearer ${cf.apiToken}`,
+				"Content-Type": "application/json",
+			},
+		});
+
+		if (!response.ok) throw new Error(`Failed to create secret ${name}.`);
+
+		let result = await response.json();
+		let parser = new ObjectParser(result);
+
+		consola.success(`Created secret ${name}.`);
+
+		return new Secret(parser.object("result"));
+	}
+}

scripts/setup/worker.ts

@@ -0,0 +1,81 @@
+import { Data } from "@edgefirst-dev/data";
+import { ObjectParser } from "@edgefirst-dev/data/parser";
+import type { Cloudflare } from "cloudflare";
+import consola from "consola";
+import { generatePath, resolvePath } from "react-router";
+import type { Account } from "./account";
+
+export class Worker extends Data<ObjectParser> {
+	get name() {
+		return this.parser.string("id");
+	}
+
+	static async create(cf: Cloudflare, account: Account, name: string) {
+		consola.info(`Creating worker ${name}.`);
+
+		let formData = new FormData();
+		formData.set("account_id", account.id);
+		formData.set("metadata", JSON.stringify({ main_module: "worker.ts" }));
+		formData.set(
+			"worker.ts",
+			new File(["export default { fetch() {} }"], "worker.ts", {
+				type: "application/javascript+module",
+			}),
+		);
+
+		let path = generatePath(
+			"/client/v4/accounts/:accountId/workers/services/:name/environments/staging",
+			{ accountId: account.id, name },
+		);
+
+		let response = await fetch(new URL(path, "https://api.cloudflare.com"), {
+			method: "PUT",
+			body: formData,
+			headers: { Authorization: `Bearer ${cf.apiToken}` },
+		});
+
+		let result = await response.json();
+
+		let parser = new ObjectParser(result);
+
+		let worker = new Worker(parser.object("result"));
+
+		consola.success(`Created worker ${worker.name}.`);
+
+		return worker;
+	}
+
+	static async find(cf: Cloudflare, account: Account, name: string) {
+		consola.info(`Looking up for Worker named ${name}...`);
+
+		let { result } = await cf.workers.scripts.list({
+			account_id: account.id,
+		});
+
+		let workers = result
+			.map((item) => new Worker(new ObjectParser(item)))
+			.filter((worker) => worker.name === name);
+
+		if (workers.length === 0) {
+			consola.info(`No workers found named ${name}.`);
+			return null;
+		}
+
+		if (workers.length > 1) {
+			throw new Error(`Found more than one worker named ${name}.`);
+		}
+
+		return workers.at(0) ?? null;
+	}
+
+	static async upsert(cf: Cloudflare, account: Account, projectName: string) {
+		let worker = await Worker.find(cf, account, projectName);
+
+		if (worker) {
+			consola.success(`Using found worker ${projectName}.`);
+			return worker;
+		}
+
+		return await Worker.create(cf, account, projectName);
+	}
+}