wrangler.toml.example

name = "aiep-workers"
main = "workers/event-store.js"
compatibility_date = "2025-01-01"
compatibility_flags = ["nodejs_compat"]

[vars]
ENVIRONMENT = "production"

# KV namespace — provision before deploying:
#   wrangler kv namespace create AIEP_EVENTS
# Then replace the placeholder id below with the output id.
[[kv_namespaces]]
binding = "AIEP_EVENTS"
id = "REPLACE_WITH_KV_NAMESPACE_ID"  # <-- set this before deploying

# R2 bucket — run `wrangler r2 bucket create aiep-nda` to provision
[[r2_buckets]]
binding = "AIEP_NDA_BUCKET"
bucket_name = "aiep-nda"

# Durable Object for tamper-evident event chain
# EventChainDO is exported from workers/event-chain-do.js and re-exported by the main Worker
[[durable_objects.bindings]]
name = "EVENT_CHAIN"
class_name = "EventChainDO"

[[migrations]]
tag = "v1"
new_sqlite_classes = ["EventChainDO"]

# Secrets — provision via the Cloudflare dashboard or CLI. Not declared in
# wrangler.toml because there is no valid [secrets] section in Wrangler v4
# (an empty value here would override a real provisioned secret).
#
#   wrangler secret put TOKEN_SECRET
#   wrangler secret put TOKEN_SECRET --env production
#
# TOKEN_SECRET: 32-byte random hex HMAC-SHA-256 key for dl-nda.js token verification.

# Routes
[[routes]]
pattern = "counters.aiep.dev/*"
zone_name = "aiep.dev"

[[routes]]
pattern = "aiep.dev/dl/nda/*"
zone_name = "aiep.dev"

[env.preview]
name = "aiep-workers-preview"
vars = { ENVIRONMENT = "preview" }

[env.production]
name = "aiep-workers"

# Provision: wrangler kv namespace create AIEP_EVENTS --env production
# Then replace the id value below with the output of that command.
[[env.production.kv_namespaces]]
binding = "AIEP_EVENTS"
id = "REPLACE_WITH_PRODUCTION_KV_NAMESPACE_ID"

[env.production.vars]
ENVIRONMENT = "production"

# Provision: wrangler secret put TOKEN_SECRET --env production
# TOKEN_SECRET: 32+ byte random hex string — generate with: openssl rand -hex 32