feat: add KV_NAMESPACE_ID support for Cloudflare Workers and update deployment scripts

Author: tn3w

.github/workflows/build.yml

@@ -110,6 +110,9 @@ jobs:
         env:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          KV_NAMESPACE_ID: ${{ secrets.KV_NAMESPACE_ID }}
         run: |
+          sed -i "s/\"KV_NAMESPACE_ID\"/\"${KV_NAMESPACE_ID}\"/" ../wrangler.jsonc
           npm ci
+          npm run upload
           npm run deploy

.github/workflows/deploy-worker.yml

@@ -19,6 +19,7 @@ jobs:
     env:
       CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+      KV_NAMESPACE_ID: ${{ secrets.KV_NAMESPACE_ID }}
       HAS_CF: ${{ secrets.CLOUDFLARE_API_TOKEN != '' }}
     steps:
       - uses: actions/checkout@v4
@@ -41,5 +42,7 @@ jobs:
         if: env.HAS_CF == 'true'
         working-directory: worker
         run: |
+          sed -i "s/\"KV_NAMESPACE_ID\"/\"${KV_NAMESPACE_ID}\"/" ../wrangler.jsonc
           npm ci
+          npm run upload
           npm run deploy

worker/package.json

@@ -8,6 +8,7 @@
 		"lookup": "tsx scripts/lookup.ts",
 		"typecheck": "tsc --noEmit",
 		"format": "prettier --write .",
+		"upload": "wrangler kv key put --config ../wrangler.jsonc --binding INTEL --remote intel.bin --path ../intel.bin",
 		"deploy": "wrangler deploy --config ../wrangler.jsonc",
 		"dev": "wrangler dev --config ../wrangler.jsonc"
 	},

worker/src/worker.ts

@@ -1,23 +1,40 @@
-import bin from "../../intel.bin"
 import { IntelDb } from "./lib/intel"
 
-const db = new IntelDb(bin as ArrayBuffer)
-db.lookup("8.8.8.8") // warm v4 path
-db.lookup("2606:4700:4700::1111") // warm v6 path
+type Env = { INTEL: KVNamespace; INTEL_KEY?: string }
+
+let db: IntelDb | null = null
+let loading: Promise<IntelDb> | null = null
+
+async function getDb(env: Env): Promise<IntelDb> {
+	if (db) return db
+	if (!loading) loading = load(env)
+	return loading
+}
+
+async function load(env: Env): Promise<IntelDb> {
+	const buffer = await env.INTEL.get(env.INTEL_KEY || "intel.bin", "arrayBuffer")
+	if (!buffer) throw new Error("intel.bin missing from KV")
+	const loaded = new IntelDb(buffer)
+	loaded.lookup("8.8.8.8") // warm v4 path
+	loaded.lookup("2606:4700:4700::1111") // warm v6 path
+	db = loaded
+	return loaded
+}
 
 export default {
-	async fetch(request: Request, _env: unknown, ctx: ExecutionContext): Promise<Response> {
+	async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
 		const url = new URL(request.url)
 		const queryIp = url.searchParams.get("ip")
 		const ip = queryIp || request.headers.get("CF-Connecting-IP") || ""
 		if (!ip) return json({ error: "no ip" }, 400, "no-store")
 
-		if (!queryIp) return json(db.lookup(ip), 200, "private, max-age=3600")
+		const intel = await getDb(env)
+		if (!queryIp) return json(intel.lookup(ip), 200, "private, max-age=3600")
 
 		const cached = await caches.default.match(request)
 		if (cached) return cached
 
-		const response = json(db.lookup(ip), 200, "public, max-age=3600")
+		const response = json(intel.lookup(ip), 200, "public, max-age=3600")
 		ctx.waitUntil(caches.default.put(request, response.clone()))
 		return response
 	},

wrangler.jsonc

@@ -3,7 +3,7 @@
 	"name": "ipintel",
 	"main": "worker/src/worker.ts",
 	"compatibility_date": "2026-06-06",
-	"rules": [{ "type": "Data", "globs": ["**/*.bin"], "fallthrough": true }],
+	"kv_namespaces": [{ "binding": "INTEL", "id": "KV_NAMESPACE_ID" }],
 	"observability": { "enabled": true },
 	"workers_dev": false,
 	"preview_urls": false