I create public functions for workers to consume, authenticated by a shared token you generate and store on Convex & Cloudflare:
// convex/fub/worker/api.ts
// consumable by a CF worker
export const getSyncProgress = query({
args: {
...secretArg,
progressId: v.string(),
},