@wenaixi/cfbridge

cfbridge

English | 中文

A DeepSeek Harness (DSH) global bundle bridging Cloudflare's official Code Mode MCP (docs / search / execute) and 14 on-demand agent skills into all sessions. Mounting it to the web profile enables Cloudflare MCP tools across all conversations, paired with local project Wrangler CLI passthrough. Built with TypeScript, published as lib/cfbridge.js, distributed natively via dsh.bundle.

Install

Prerequisites: A runnable DSH installation (dsh --profile web); Node and pnpm engines listed in the badges above; a Cloudflare API token — recommended: Account token (cfat_ with Account Resources: Read) or Zone token (cfut_ for DNS operations).

Step 1: Provide API Token

Add your token to your private environment file (git-ignored, never commit real credentials):

# %USERPROFILE%\.dsh\.env
CLOUDFLARE_API_TOKEN=your_token_here

Step 2: Install Bundle

Choose one of the installation methods below:

# Method A - npm (Recommended)
dsh plugin --profile web add @wenaixi/cfbridge

# Method B - GitHub direct install
dsh plugin --profile web add github:Wenaixi/dsh-cfbridge

# Method C - Local clone & build
git clone https://github.com/Wenaixi/dsh-cfbridge.git; cd dsh-cfbridge
npm install
npm run install:bundle            # Installs to web profile by default; use -- --profile <name> for others

Pin a version by appending @<version> or #v<version> (check npm view @wenaixi/cfbridge version).

Step 3: Restart & Verify

Restart DSH (dsh --profile web). New sessions automatically acquire mcp__cloudflare__docs/search/execute tools and the cfbridge skill. Verify configuration with:

dsh --profile web --dump-config | Select-String "cfbridge"

What it is

DSH Bundle (Globally mounted, on-demand activation)
  └─ Installed to web profile (default), auto-mounted across all sessions
       ├─ mcp__cloudflare__docs     ← Semantic documentation search
       ├─ mcp__cloudflare__search   ← OpenAPI endpoint & schema lookup
       ├─ mcp__cloudflare__execute  ← Execution in official isolated sandbox
       ├─ cfbridge SkillProvider    ← 14 skills discovered on demand
       ├─ cfbridge Skill            ← Thin bridge: search-then-execute & approval rules
       ├─ 13 vendored Skills        ← Official Cloudflare skills available offline
       └─ npm run wrangler ...      ← Pinned project Wrangler CLI passthrough

• Two-Stage Progressive Disclosure: During list(), only skill index metadata (name/description/whenToUse, ~120–180 tokens/skill, ~1.7–2.5k tokens total) is indexed. Full skill bodies are loaded strictly on demand during get() (e.g., wrangler ~4.5k tokens), eliminating context window waste.
• Same-Name Precedence: The official DSH registry arbitrates same-name collisions by ascending rank. This bundle defaults to rank: 0, having absolute first-priority precedence over project (100/200), custom (300), user (400/500), and system (600) layers.

Operating Modes (loadMode)

cfbridge supports two operating modes, togglable via the plugin settings UI or config:

Settings & Management Console (Web GUI)

In DSH Web UI → Plugins → Cloudflare Bridge → Configure, enjoy a native, polished management console:

• Segmented Mode Cards: Two-card selector switching between cfbridge Preset Mode (Recommended) and Global Mode;
• MCP Master Switch: One-click physical toggle for Cloudflare Code Mode MCP tools (docs / search / execute);
• Unified Skill Toggles: Single intuitive switch per skill, with category badges (Core, Platform, CLI, AI / Agents, Storage, Zero Trust, etc.) and human-readable summaries;
• Instant Search & Batch Controls: Live keyword search filter, plus one-click Enable All / Disable All operations.

Skills

Standalone installation outside DSH is also supported:

# Claude Code
/plugin marketplace add cloudflare/skills -> /plugin install cloudflare@cloudflare

# Cursor
Settings -> Rules -> Add Rule -> Remote Rule (Github) -> cloudflare/skills

# Any Agent with skills CLI
npx skills add https://github.com/cloudflare/skills

Skill Switches & UI Control

Open DSH -> Plugins -> Cloudflare Bridge card -> Configure:

• Operating Mode: Toggle between Global Mode and cfbridge Preset Mode at the top.
• Dual-Axis Switches: Each skill features two independent toggles:
  • Model: When disabled, the model cannot see or invoke the skill.
  • Human: When disabled, human slash-menu access is hidden while remaining invocable by the model.
  • Both off = Fully disabled: Completely omitted from catalog discovery.
• Deep Controller Architecture (PanelController):
  • Toggles are powered by an in-memory domain controller (PanelController).
  • Synchronous Mutex Guard: An in-memory synchronous lock (_busy) physically eliminates React asynchronous microtask race conditions, preventing revision optimism lock conflicts caused by rapid double-clicks.
  • Clean 1-Op Atomic Batch: Flattens skill toggles into a single atomic 1-op form.mutate submission (only mutating disabledSkills) with zero legacy baggage.

Configuration (Config Schema)

cfbridge exports a standard Schemastery Schema, customizable in your profile's cordis.patch.yml:

Example configuration overlay:

- insert:
    - id: cfbridge
      name: '@wenaixi/cfbridge'
      config:
        loadMode: preset
        rank: 0
        cache: true
        watchSkills: false
        modelHiddenSkills:
          - wrangler

Configuration Stability & Auto-Healing

cfbridge features an integrated self-healing engine to recover corrupted or malformed configuration files:

• Two-Stage Resilient Parser: Recovers active settings from truncated YAML (e.g. power-cut interruptions) and syntax-shattered files via heuristic line-scanning.
• Automatic Backup: Forces a timestamped .bak.<timestamp> backup before modifying files on disk.
• Clean Regeneration: Regenerates compliant 2-line patch YAML retaining secure dynamic !!js token templates.
• One-Click CLI Tool:

  node scripts/repair-config.js                       # Diagnose & heal root cordis.patch.yml
  node scripts/repair-config.js --file <path>         # Heal specified config file
  node scripts/repair-config.js --profile web         # Heal web profile configuration
  node scripts/repair-config.js --dry-run             # Dry-run inspection without modifying files
  

Default Workflow: search -> execute

Always adhere to the "search before execute" principle:

// 1. Search: Look up Worker script endpoints from OpenAPI schema
async () => Object.entries(spec.paths)
  .filter(([path, item]) => path.includes('workers/scripts') && item.get)
  .slice(0, 10)
  .map(([path, item]) => ({ path, params: Object.keys(item.get.parameters || {}) }))

// 2. Execute: Perform real API call after confirmation
async () => cloudflare.request({
  method: 'GET',
  path: `/accounts/${accountId}/workers/scripts`,
})

Verification & Quality Gates

Run the comprehensive validation suite:

npm test               # Canonical quality gate (15/15 passed): build, typechecks, provider, healer, panel, controller headless tests & security checks
npm run check          # Security audit & repository checks (85/85 passed)
npm run validate:bundle -- --strict-router  # Bundle structure & metadata validation (98/98 passed)
npm run test:wrangler  # Wrangler CLI read-only contract verification (4/4 passed)
npm run dump:config    # Inspect active profile composition layer

Management & Removal

# Enable
dsh plugin --profile web add @wenaixi/cfbridge

# Disable / Uninstall
dsh plugin --profile web remove @wenaixi/cfbridge
# or: npm run uninstall:bundle -- --profile web

License

MIT License. See LICENSE for details.