@striae-org/striae 6.1.7 → 7.0.0

package/workers/pdf-worker/src/{pdf-worker.example.ts → pdf-worker.ts}

@@ -2,7 +2,6 @@ import type { PDFGenerationData, PDFGenerationRequest, ReportModule, ReportPdfOp
 import { getAuditTrailPdfOptions, isAuditTrailReportMode, renderAuditTrailReport } from './audit-trail-report';
 
 interface Env {
-  PDF_WORKER_AUTH: string;
   ACCOUNT_ID?: string;
   BROWSER_API_TOKEN?: string;
 }
@@ -40,15 +39,6 @@ const reportModuleLoaders: Record<string, () => Promise<ReportModule>> = {
 
 };
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
-};
-
-const hasValidHeader = (request: Request, env: Env): boolean =>
-  request.headers.get('X-Custom-Auth-Key') === env.PDF_WORKER_AUTH;
-
 function isTimeoutError(error: unknown): boolean {
   return error instanceof Error && (
     error.name === 'AbortError' ||
@@ -60,7 +50,7 @@ function isTimeoutError(error: unknown): boolean {
 function jsonResponse(body: unknown, status: number): Response {
   return new Response(JSON.stringify(body), {
     status,
-    headers: { ...corsHeaders, 'content-type': 'application/json' },
+    headers: { 'content-type': 'application/json' },
   });
 }
 
@@ -190,10 +180,6 @@ async function renderPdfViaRestEndpoint(env: Env, html: string, pdfOptions: Repo
     responseHeaders.set('cache-control', 'no-store');
   }
 
-  for (const [headerName, headerValue] of Object.entries(corsHeaders)) {
-    responseHeaders.set(headerName, headerValue);
-  }
-
   return new Response(endpointResponse.body, {
     status: endpointResponse.status,
     statusText: endpointResponse.statusText,
@@ -203,14 +189,6 @@ async function renderPdfViaRestEndpoint(env: Env, html: string, pdfOptions: Repo
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
-    if (!hasValidHeader(request, env)) {
-      return jsonResponse({ error: 'Forbidden' }, 403);
-    }
-
     if (request.method === 'POST') {
       try {
         const payload = await request.json() as unknown;

package/workers/pdf-worker/wrangler.jsonc.example

@@ -2,7 +2,8 @@
   "name": "PDF_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/pdf-worker.ts",
-  "compatibility_date": "2026-04-20",
+  "workers_dev": false,
+  "compatibility_date": "2026-04-21",
   "compatibility_flags": [
     "nodejs_compat"
   ],

package/workers/user-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "user-worker",
-  "version": "6.1.7",
+  "version": "7.0.0",
   "private": true,
   "scripts": {
     "deploy": "wrangler deploy",
@@ -8,6 +8,6 @@
     "start": "wrangler dev"
   },
   "devDependencies": {
-    "wrangler": "^4.84.0"
+    "wrangler": "^4.84.1"
   }
 }

package/workers/user-worker/src/auth.ts

@@ -1,12 +1,5 @@
 import type { Env } from './types';
 
-export async function authenticate(request: Request, env: Env): Promise<void> {
-  const authKey = request.headers.get('X-Custom-Auth-Key');
-  if (authKey !== env.USER_DB_AUTH) {
-    throw new Error('Unauthorized');
-  }
-}
-
 export function requireUserKvReadConfig(env: Env): void {
   const hasLegacyPrivateKey = typeof env.USER_KV_ENCRYPTION_PRIVATE_KEY === 'string' && env.USER_KV_ENCRYPTION_PRIVATE_KEY.trim().length > 0;
   const hasRegistryPrivateKeys = typeof env.USER_KV_ENCRYPTION_KEYS_JSON === 'string' && env.USER_KV_ENCRYPTION_KEYS_JSON.trim().length > 0;

package/workers/user-worker/src/handlers/user-routes.ts

@@ -5,56 +5,47 @@ import type {
   AccountDeletionProgressEvent,
   DeleteCasesRequest,
   Env,
-  ResponseHeaders,
   UserData,
   UserRequestData
 } from '../types';
 
-function createJsonResponse(data: unknown, headers: ResponseHeaders, status: number = 200): Response {
+function createJsonResponse(data: unknown, status: number = 200): Response {
   return new Response(JSON.stringify(data), {
     status,
-    headers: {
-      ...headers,
-      'Content-Type': 'application/json; charset=utf-8'
-    }
+    headers: { 'Content-Type': 'application/json; charset=utf-8' }
   });
 }
 
-function createTextResponse(message: string, headers: ResponseHeaders, status: number): Response {
+function createTextResponse(message: string, status: number): Response {
   return new Response(message, {
     status,
-    headers: {
-      ...headers,
-      'Content-Type': 'text/plain; charset=utf-8'
-    }
+    headers: { 'Content-Type': 'text/plain; charset=utf-8' }
   });
 }
 
 export async function handleGetUser(
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const userData = await readUserRecord(env, userUid);
     if (userData === null) {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
-    return createJsonResponse(userData, corsHeaders);
+    return createJsonResponse(userData);
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : 'Unknown user data read error';
     console.error('Failed to get user data:', { uid: userUid, reason: errorMessage });
 
-    return createTextResponse('Failed to get user data', corsHeaders, 500);
+    return createTextResponse('Failed to get user data', 500);
   }
 }
 
 export async function handleAddUser(
   request: Request,
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const requestData: UserRequestData = await request.json();
@@ -96,16 +87,15 @@ export async function handleAddUser(
 
     await writeUserRecord(env, userUid, userData);
 
-    return createJsonResponse(userData, corsHeaders, existingUser !== null ? 200 : 201);
+    return createJsonResponse(userData, existingUser !== null ? 200 : 201);
   } catch {
-    return createTextResponse('Failed to save user data', corsHeaders, 500);
+    return createTextResponse('Failed to save user data', 500);
   }
 }
 
 export async function handleDeleteUser(
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const result = await executeUserDeletion(env, userUid);
@@ -113,29 +103,27 @@ export async function handleDeleteUser(
     return createJsonResponse({
       success: result.success,
       message: result.message
-    }, corsHeaders);
+    });
   } catch (error) {
     console.error('Delete user error:', error);
     const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
 
     if (errorMessage === 'User not found') {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
     return createJsonResponse({
       success: false,
       message: 'Failed to delete user account'
-    }, corsHeaders, 500);
+    }, 500);
   }
 }
 
 export function handleDeleteUserWithProgress(
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Response {
-  const sseHeaders: ResponseHeaders = {
-    ...corsHeaders,
+  const sseHeaders = {
     'Content-Type': 'text/event-stream; charset=utf-8',
     'Cache-Control': 'no-cache, no-transform',
     Connection: 'keep-alive'
@@ -182,14 +170,13 @@ export function handleDeleteUserWithProgress(
 export async function handleAddCases(
   request: Request,
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const { cases = [] }: AddCasesRequest = await request.json();
     const userData = await readUserRecord(env, userUid);
     if (!userData) {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
     const existingCases = userData.cases || [];
@@ -201,31 +188,30 @@ export async function handleAddCases(
     userData.updatedAt = new Date().toISOString();
     await writeUserRecord(env, userUid, userData);
 
-    return createJsonResponse(userData, corsHeaders);
+    return createJsonResponse(userData);
   } catch {
-    return createTextResponse('Failed to add cases', corsHeaders, 500);
+    return createTextResponse('Failed to add cases', 500);
   }
 }
 
 export async function handleDeleteCases(
   request: Request,
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const { casesToDelete }: DeleteCasesRequest = await request.json();
     const userData = await readUserRecord(env, userUid);
     if (!userData) {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
     userData.cases = userData.cases.filter((caseItem) => !casesToDelete.includes(caseItem.caseNumber));
     userData.updatedAt = new Date().toISOString();
     await writeUserRecord(env, userUid, userData);
 
-    return createJsonResponse(userData, corsHeaders);
+    return createJsonResponse(userData);
   } catch {
-    return createTextResponse('Failed to delete cases', corsHeaders, 500);
+    return createTextResponse('Failed to delete cases', 500);
   }
 }

package/workers/user-worker/src/types.ts

@@ -1,9 +1,7 @@
 export interface Env {
-  USER_DB_AUTH: string;
   USER_DB: KVNamespace;
   STRIAE_DATA: R2Bucket;
   STRIAE_FILES: R2Bucket;
-  R2_KEY_SECRET: string;
   DATA_AT_REST_ENCRYPTION_PRIVATE_KEY?: string;
   DATA_AT_REST_ENCRYPTION_KEY_ID?: string;
   DATA_AT_REST_ENCRYPTION_KEYS_JSON?: string;

package/workers/user-worker/src/{user-worker.example.ts → user-worker.ts}

@@ -1,4 +1,4 @@
-import { authenticate, requireUserKvReadConfig, requireUserKvWriteConfig } from './auth';
+import { requireUserKvReadConfig, requireUserKvWriteConfig } from './auth';
 import { USER_CASES_SEGMENT } from './config';
 import {
   handleAddCases,
@@ -10,31 +10,16 @@ import {
 } from './handlers/user-routes';
 import type { Env } from './types';
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, PUT, DELETE, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key'
-};
-
-function createTextResponse(message: string, status: number, headers: Record<string, string>): Response {
+function createTextResponse(message: string, status: number): Response {
   return new Response(message, {
     status,
-    headers: {
-      ...headers,
-      'Content-Type': 'text/plain; charset=utf-8'
-    }
+    headers: { 'Content-Type': 'text/plain; charset=utf-8' }
   });
 }
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
     try {
-      await authenticate(request, env);
-
       // DELETE can mutate user KV data (for example /:uid/cases), so non-GET methods require write config.
       if (request.method === 'GET') {
         requireUserKvReadConfig(env);
@@ -48,15 +33,15 @@ export default {
       const isCasesEndpoint = parts[2] === USER_CASES_SEGMENT;
       
       if (!userUid) {
-        return createTextResponse('Not Found', 404, corsHeaders);
+        return createTextResponse('Not Found', 404);
       }
 
       // Handle regular cases endpoint
       if (isCasesEndpoint) {
         switch (request.method) {
-          case 'PUT': return handleAddCases(request, env, userUid, corsHeaders);
-          case 'DELETE': return handleDeleteCases(request, env, userUid, corsHeaders);
-          default: return createTextResponse('Method not allowed', 405, corsHeaders);
+          case 'PUT': return handleAddCases(request, env, userUid);
+          case 'DELETE': return handleDeleteCases(request, env, userUid);
+          default: return createTextResponse('Method not allowed', 405);
         }
       }
 
@@ -65,24 +50,24 @@ export default {
       const streamProgress = url.searchParams.get('stream') === 'true' || acceptsEventStream;
 
       switch (request.method) {
-        case 'GET': return handleGetUser(env, userUid, corsHeaders);
-        case 'PUT': return handleAddUser(request, env, userUid, corsHeaders);
+        case 'GET': return handleGetUser(env, userUid);
+        case 'PUT': return handleAddUser(request, env, userUid);
         case 'DELETE': return streamProgress
-          ? handleDeleteUserWithProgress(env, userUid, corsHeaders)
-          : handleDeleteUser(env, userUid, corsHeaders);
-        default: return createTextResponse('Method not allowed', 405, corsHeaders);
+          ? handleDeleteUserWithProgress(env, userUid)
+          : handleDeleteUser(env, userUid);
+        default: return createTextResponse('Method not allowed', 405);
       }
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
       if (errorMessage === 'Unauthorized') {
-        return createTextResponse('Forbidden', 403, corsHeaders);
+        return createTextResponse('Forbidden', 403);
       }
 
       if (errorMessage === 'User KV encryption is not fully configured') {
-        return createTextResponse(errorMessage, 500, corsHeaders);
+        return createTextResponse(errorMessage, 500);
       }
       
-      return createTextResponse('Internal Server Error', 500, corsHeaders);
+      return createTextResponse('Internal Server Error', 500);
     }
   }
 };

package/workers/user-worker/wrangler.jsonc.example

@@ -2,7 +2,8 @@
   "name": "USER_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/user-worker.ts",
-  "compatibility_date": "2026-04-20",
+  "workers_dev": false,
+  "compatibility_date": "2026-04-21",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/wrangler.toml.example

@@ -1,8 +1,28 @@
 #:schema node_modules/wrangler/config-schema.json
 name = "PAGES_PROJECT_NAME"
-compatibility_date = "2026-04-20"
+compatibility_date = "2026-04-21"
 compatibility_flags = ["nodejs_compat"]
 pages_build_output_dir = "./build/client"
 
 [placement]
-mode = "smart"
+mode = "smart"
+
+[[services]]
+binding = "USER_WORKER"
+service = "USER_WORKER_NAME"
+
+[[services]]
+binding = "DATA_WORKER"
+service = "DATA_WORKER_NAME"
+
+[[services]]
+binding = "AUDIT_WORKER"
+service = "AUDIT_WORKER_NAME"
+
+[[services]]
+binding = "IMAGE_WORKER"
+service = "IMAGES_WORKER_NAME"
+
+[[services]]
+binding = "PDF_WORKER"
+service = "PDF_WORKER_NAME"