cloudflare
diff --git a/‎.changeset/base-config-secrets.md‎
Lines changed: 7 additions & 0 deletions b/‎.changeset/base-config-secrets.md‎
Lines changed: 7 additions & 0 deletions
diff --git a/‎packages/deploy-helpers/src/preview/api.ts‎
Lines changed: 49 additions & 0 deletions b/‎packages/deploy-helpers/src/preview/api.ts‎
Lines changed: 49 additions & 0 deletions
@@ -0,0 +1,7 @@
+---
+"wrangler": minor
+---
+
+Add Preview base config secret commands
+
+Wrangler now manages Worker Preview base config secrets with `wrangler preview base-config secret put`, `delete`, `list`, and `bulk`. These commands update the Worker's `previews_base_config.env`, keeping shared defaults scoped to all of that Worker's Previews. `wrangler preview base-config secret list` reads from the Worker's Preview base config and prints secret names with values masked. `wrangler preview base-config secret bulk` deletes a secret when its value is `null`, matching `wrangler secret bulk`.
@@ -145,6 +145,24 @@ type WorkerPreviewDefaultsResource = {
 	preview_defaults?: PreviewDefaults;
 };
 
+export type PreviewBaseConfig = {
+	observability?: Observability;
+	logpush?: boolean;
+	limits?: CfUserLimits;
+	placement?: CfPlacement;
+	cache?: CacheOptions;
+	tail_consumers?: Array<{ name: string }>;
+	env?: EnvBindings;
+};
+
+export type PreviewBaseConfigPatch = Partial<Omit<PreviewBaseConfig, "env">> & {
+	env?: Record<string, Binding | null>;
+};
+
+type WorkerPreviewBaseConfigResource = {
+	previews_base_config?: PreviewBaseConfig;
+};
+
 export async function getPreview(
 	config: Config,
 	accountId: string,
@@ -321,3 +339,34 @@ export async function editWorkerPreviewDefaults(
 
 	return worker.preview_defaults ?? {};
 }
+
+export async function getPreviewBaseConfig(
+	config: Config,
+	accountId: string,
+	workerName: string
+): Promise<PreviewBaseConfig> {
+	const worker = await fetchResult<WorkerPreviewBaseConfigResource>(
+		config,
+		`/accounts/${accountId}/workers/workers/${workerName}`
+	);
+	return worker.previews_base_config ?? {};
+}
+
+export async function patchPreviewBaseConfig(
+	config: Config,
+	accountId: string,
+	workerName: string,
+	previewBaseConfig: PreviewBaseConfigPatch
+): Promise<PreviewBaseConfig> {
+	const worker = await fetchResult<WorkerPreviewBaseConfigResource>(
+		config,
+		`/accounts/${accountId}/workers/workers/${workerName}`,
+		{
+			method: "PATCH",
+			headers: { "Content-Type": "application/merge-patch+json" },
+			body: JSON.stringify({ previews_base_config: previewBaseConfig }),
+		}
+	);
+
+	return worker.previews_base_config ?? {};
+}