feat(cloudflare): advertise cf native CLI

[realmroot]

Outcome

Advertise cf alongside Wrangler on the Cloudflare Resource so Realmroot can run Cloudflare API v4 commands with Agent authority.

Companion CLI change: realmroot/cli#23

Identity and authorization

Both commands use the existing process-local API base broker. The Adapter continues to validate its DPoP token, approved operation scope, and provider OAuth grant. Unpublished Cloudflare operations remain rejected. No new credential or authorization model is introduced.

Verification

• pnpm run types:check
• pnpm run typecheck
• pnpm test (206 tests)
• pnpm run lint
• pnpm run build
• pnpm run docs:check

Review environment acceptance: after deploying this branch to adapters.realmroot.dev, use the matching Realmroot CLI branch and an Agent with zone.read authority to run realmroot exec cloudflare -- cf zones list. Confirm the command succeeds through the Resource Server, then run an existing Wrangler read command to check compatibility.

Deployment and live regression

Deployed commit d9a4e0f to adapters.realmroot.dev as Worker version 6b997f51-f532-4bd4-a1bd-57e5734aec59; the deployment list independently confirmed it at 100%. D1 reported no pending migrations. Health, Cloudflare protected-resource metadata, and GitHub Resource discovery passed. With approved Agent authority, cf zones list --per-page 1 returned one zone and Wrangler whoami still resolved the Agent identity. No live resources were created or changed by the regression probes.

Provider evidence

• Cloudflare cf launch
• cf command client, which reads CLOUDFLARE_API_BASE_URL and CLOUDFLARE_API_TOKEN.

Checklist

• No credentials, customer data, or personal provider data added.
• Identity fidelity remains provider delegated.
• Resource and scope behavior fails closed.
• Provider errors remain inside the Adapter boundary.
• Documentation and native readiness limits are stated.
• Tests cover native tool discovery at the HTTP boundary.
• Commit includes a Developer Certificate of Origin sign-off.

---

_{🤖 Created by Jarvis via Realmroot}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	realmroot-adapters	d9a4e0f	Commit Preview URL Branch Preview URL	Sep 29 2026, 05:37 PM