fix: make CLOUDFLARE_API_TOKEN optional and skip deploy if not provided

Author: prdai

.github/workflows/reusable-client-ci.yml

@@ -46,7 +46,7 @@ on:
         default: false
     secrets:
       CLOUDFLARE_API_TOKEN:
-        required: true
+        required: false
 
 jobs:
   lint:
@@ -80,7 +80,8 @@ jobs:
     if: |
       always() &&
       !inputs.skip_deploy &&
-      (needs.lint.result == 'success' || needs.lint.result == 'skipped')
+      (needs.lint.result == 'success' || needs.lint.result == 'skipped') &&
+      secrets.CLOUDFLARE_API_TOKEN != ''
     environment: ${{ inputs.environment }}
     steps:
       - name: Checkout

.github/workflows/reusable-worker-ci.yml

@@ -33,7 +33,7 @@ on:
         description: "Bun version"
         required: false
         type: string
-        default: "latest"
+        default: "1.3.5"
       skip_deploy:
         description: "Skip deployment (CI only)"
         required: false

.github/workflows/reusable-worker-ci.yml.bak

@@ -0,0 +1,122 @@
+# Reusable CI/CD workflow for Cloudflare Worker services
+# Called by individual service repos
+name: Worker Service CI/CD
+
+on:
+  workflow_call:
+    inputs:
+      service_name:
+        description: "Name of the service (e.g., core-auth-service)"
+        required: true
+        type: string
+      environment:
+        description: "Deployment environment (dev or production)"
+        required: false
+        type: string
+        default: "dev"
+      run_lint:
+        description: "Whether to run linting"
+        required: false
+        type: boolean
+        default: true
+      run_typecheck:
+        description: "Whether to run typecheck"
+        required: false
+        type: boolean
+        default: true
+      node_version:
+        description: "Node.js version"
+        required: false
+        type: string
+        default: "22"
+      bun_version:
+        description: "Bun version"
+        required: false
+        type: string
+        default: "latest"
+      skip_deploy:
+        description: "Skip deployment (CI only)"
+        required: false
+        type: boolean
+        default: false
+    secrets:
+      CLOUDFLARE_API_TOKEN:
+        required: false
+
+jobs:
+  lint:
+    name: Lint & Typecheck
+    runs-on: ubuntu-latest
+    if: inputs.run_lint || inputs.run_typecheck
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ inputs.bun_version }}
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Generate Wrangler Types
+        if: inputs.run_typecheck
+        run: bunx wrangler types --env-interface CloudflareBindings
+
+      - name: Lint
+        if: inputs.run_lint
+        run: bun run lint
+
+      - name: Typecheck
+        if: inputs.run_typecheck
+        run: bunx tsc --noEmit
+
+  deploy:
+    name: Deploy to ${{ inputs.environment }}
+    runs-on: ubuntu-latest
+    needs: [lint]
+    if: |
+      always() &&
+      !inputs.skip_deploy &&
+      (needs.lint.result == 'success' || needs.lint.result == 'skipped') &&
+      secrets.CLOUDFLARE_API_TOKEN != ''
+    environment: ${{ inputs.environment }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ inputs.bun_version }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ inputs.node_version }}
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Deploy to dev
+        if: inputs.environment == 'dev'
+        run: bunx wrangler deploy --env dev --minify
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: 8f0203259905d8923687286c84921e6c
+
+      - name: Deploy to production
+        if: inputs.environment == 'production'
+        run: bunx wrangler deploy --minify
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: 8f0203259905d8923687286c84921e6c
+
+      - name: Deployment summary
+        run: |
+          echo "## Deployment Summary" >> $GITHUB_STEP_SUMMARY
+          echo "- **Service:** ${{ inputs.service_name }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Environment:** ${{ inputs.environment }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Commit:** ${{ github.sha }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Triggered by:** ${{ github.actor }}" >> $GITHUB_STEP_SUMMARY