Cloudflare workers

Fabric Experiments already includes Cloudflare worker packages.

Manifest worker

cloudflare/manifest-worker serves signed manifests from KV:

• GET /manifest
• GET /{tenantId}/manifest
• GET /{tenantId}/manifest/v/{version}
• POST /admin/publish
• GET /.well-known/jwks/{orgId}
• GET /.well-known/revocations/{orgId}

Publishing is HMAC-protected in staging/production.

Exposure worker

cloudflare/exposure-worker accepts:

• POST /v1/exposure
• POST /v1/conversion

It validates events and writes NDJSON batches to R2.

Audit export worker

cloudflare/audit-export-worker runs every five minutes, polls the API for active export targets, writes destination batches, and acknowledges cursor progress.

Docs worker

cloudflare/docs-worker serves the static Fumadocs export at your documentation domain.