feat(wrangler): Add Secrets Store support

[jvaughan-cloudflare]

This PR introduces the Secrets Store API to the Wrangler CLI. It adds commands namespaces for wrangler secrets-store with sub-namespaces of wrangler secrets-store store and wrangler secrets-store secret for acting upon store and secret resources respectively. The intent here is to be able to fully manage the stores+secrets for an account's Secret Store, from wrangler.

Changes:

• Added wrangler secrets-store store list|create|delete commands
• Added wrangler secrets-store secret list|get|create|update|delete|duplicate commands
• All commands default to local dev, need to pass --remote for acting on remote

Todo:

• Will implement local dev version of commands (specifically create/delete secret), in a subsequent change
• Fix e2e test runner, what do I need to do for API tokens to get the test runner to have the right permissions? Add new api token role to bach, and then update the api token in the github ci to include that role/permissions?

---

• Tests
  • TODO (before merge)
  • Tests included
  • Tests not necessary because:
• Wrangler E2E Tests CI Job required? (Use "e2e" label or ask maintainer to run separately)
  • I don't know
  • Required
  • Not required because:
• Public documentation
  • TODO (before merge)
  • Cloudflare docs PR(s):
  • Documentation not necessary because: Waiting on public documentation until the Secrets Store is released as a product.

[changeset-bot]

🦋 Changeset detected

Latest commit: 7da09b0

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
wrangler	Minor
@cloudflare/vitest-pool-workers	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[github-actions]

A wrangler prerelease is available for testing. You can install this latest build in your project with:

npm install --save-dev https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-wrangler-8382

You can reference the automatically updated head of this PR with:

npm install --save-dev https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/prs/8382/npm-package-wrangler-8382

Or you can use npx with this latest build directly:

npx https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-wrangler-8382 dev path/to/script.js

Additional artifacts:

cloudflare-workers-bindings-extension:

wget https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-workers-bindings-extension-8382 -O ./cloudflare-workers-bindings-extension.0.0.0-v09a32cb08.vsix && code --install-extension ./cloudflare-workers-bindings-extension.0.0.0-v09a32cb08.vsix

create-cloudflare:

npx https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-create-cloudflare-8382 --no-auto-update

@cloudflare/kv-asset-handler:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-kv-asset-handler-8382

miniflare:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-miniflare-8382

@cloudflare/pages-shared:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-pages-shared-8382

@cloudflare/unenv-preset:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-unenv-preset-8382

@cloudflare/vite-plugin:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-vite-plugin-8382

@cloudflare/vitest-pool-workers:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-vitest-pool-workers-8382

@cloudflare/workers-editor-shared:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-workers-editor-shared-8382

@cloudflare/workers-shared:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-workers-shared-8382

@cloudflare/workflows-shared:

npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/13978624980/npm-package-cloudflare-workflows-shared-8382

Note that these links will no longer work once the GitHub Actions artifact expires.

---

wrangler@4.2.0 includes the following runtime dependencies:

Package	Constraint	Resolved
miniflare	workspace:*	4.20250317.1
workerd	1.20250319.0	1.20250319.0
workerd --version	1.20250319.0	2025-03-19

Please ensure constraints are pinned, and miniflare/workerd minor versions match.