@striae-org/striae 3.0.4

package/workers/image-worker/wrangler.jsonc.example

@@ -0,0 +1,22 @@
+{
+  "name": "IMAGES_WORKER_NAME",
+  "account_id": "ACCOUNT_ID",
+  "main": "src/image-worker.ts",
+  "compatibility_date": "2026-03-09",
+  "compatibility_flags": [
+    "nodejs_compat"
+  ], 
+  
+  "observability": { 
+	"enabled": true
+  },
+  
+  "routes": [
+    {
+      "pattern": "IMAGES_WORKER_DOMAIN",
+      "custom_domain": true
+    }
+  ],
+
+  "placement": { "mode": "smart" }
+}

package/workers/keys-worker/package.json

@@ -0,0 +1,17 @@
+{
+	"name": "keys-worker",
+	"version": "0.0.0",
+	"private": true,
+	"scripts": {
+		"deploy": "wrangler deploy",
+		"dev": "wrangler dev",
+		"start": "wrangler dev",
+		"test": "vitest"
+	},
+	"devDependencies": {
+		"@cloudflare/puppeteer": "^1.0.4",
+		"@cloudflare/vitest-pool-workers": "^0.12.9",
+		"vitest": "~3.2.0",
+		"wrangler": "^4.69.0"
+	}
+}

package/workers/keys-worker/src/keys.example.ts

@@ -0,0 +1,66 @@
+interface Env {
+  R2_KEY_SECRET: string;
+  ACCOUNT_HASH: string;
+  IMAGES_API_TOKEN: string;
+  USER_DB_AUTH: string;
+  KEYS_AUTH: string;
+}
+
+const corsHeaders: Record<string, string> = {
+  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
+  'Access-Control-Allow-Methods': 'GET,POST,OPTIONS',
+  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
+  'Content-Type': 'text/plain'
+};
+
+const hasValidHeader = (request: Request, env: Env): boolean => 
+  request.headers.get("X-Custom-Auth-Key") === env.KEYS_AUTH;
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    if (request.method === 'OPTIONS') {
+      return new Response(null, { headers: corsHeaders });
+    }
+
+    if (!hasValidHeader(request, env)) {
+      return new Response('Forbidden', { 
+        status: 403,
+        headers: corsHeaders
+      });
+    }
+
+    const url = new URL(request.url);
+    const path = url.pathname.replace('/', '');
+    
+    // Handle regular key retrieval
+    if (request.method === 'GET') {
+      const keyName = path;
+      
+      if (!keyName) {
+        return new Response('Key name required', { 
+          status: 400,
+          headers: corsHeaders 
+        });
+      }
+
+      if (!(keyName in env)) {
+        return new Response('Key not found', { 
+          status: 404,
+          headers: corsHeaders 
+        });
+      }
+
+      // Type assertion needed here since TypeScript doesn't know that keyName exists in env
+      const keyValue = env[keyName as keyof Env];
+      
+      return new Response(keyValue, {
+        headers: corsHeaders
+      });
+    }
+
+    return new Response('Method not allowed', {
+      status: 405,
+      headers: corsHeaders
+    });
+  }
+};

package/workers/keys-worker/src/keys.ts

@@ -0,0 +1,66 @@
+interface Env {
+  R2_KEY_SECRET: string;
+  ACCOUNT_HASH: string;
+  IMAGES_API_TOKEN: string;
+  USER_DB_AUTH: string;
+  KEYS_AUTH: string;
+}
+
+const corsHeaders: Record<string, string> = {
+  'Access-Control-Allow-Origin': 'https://app.striae.org',
+  'Access-Control-Allow-Methods': 'GET,POST,OPTIONS',
+  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
+  'Content-Type': 'text/plain'
+};
+
+const hasValidHeader = (request: Request, env: Env): boolean => 
+  request.headers.get("X-Custom-Auth-Key") === env.KEYS_AUTH;
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    if (request.method === 'OPTIONS') {
+      return new Response(null, { headers: corsHeaders });
+    }
+
+    if (!hasValidHeader(request, env)) {
+      return new Response('Forbidden', { 
+        status: 403,
+        headers: corsHeaders
+      });
+    }
+
+    const url = new URL(request.url);
+    const path = url.pathname.replace('/', '');
+    
+    // Handle regular key retrieval
+    if (request.method === 'GET') {
+      const keyName = path;
+      
+      if (!keyName) {
+        return new Response('Key name required', { 
+          status: 400,
+          headers: corsHeaders 
+        });
+      }
+
+      if (!(keyName in env)) {
+        return new Response('Key not found', { 
+          status: 404,
+          headers: corsHeaders 
+        });
+      }
+
+      // Type assertion needed here since TypeScript doesn't know that keyName exists in env
+      const keyValue = env[keyName as keyof Env];
+      
+      return new Response(keyValue, {
+        headers: corsHeaders
+      });
+    }
+
+    return new Response('Method not allowed', {
+      status: 405,
+      headers: corsHeaders
+    });
+  }
+};