wrangler.toml

name = "github-tracker"
main = "src/worker/index.ts"
compatibility_date = "2026-03-01"
compatibility_flags = [
  "global_fetch_strictly_public",
  # nodejs_als: required by @sentry/cloudflare for AsyncLocalStorage (request context propagation)
  "nodejs_als",
]
workers_dev = false

[assets]
# The Cloudflare Vite plugin overrides this directory at build time.
# The `public/` value is needed for wrangler dev and vitest-pool-workers (which parse wrangler.toml directly).
directory = "public"
binding = "ASSETS"
not_found_handling = "single-page-application"

# DEPLOY: Change the pattern below to your custom domain.
[[routes]]
pattern = "gh.gordoncode.dev"
custom_domain = true

# DEPLOY: Uncomment and set your Sentry DSN, or leave commented to disable error reporting.
# [vars]
# SENTRY_DSN = "https://your-public-key@o12345.ingest.us.sentry.io/your-project-id"

[[ratelimits]]
name = "PROXY_RATE_LIMITER"
namespace_id = "1001"

[ratelimits.simple]
limit = 10
period = 10

# Single-use nonce store for /api/proxy/unseal — blocks unseal-then-reseal expiry
# renewal of a credential-export bundle. Holds only opaque nonce values (never
# plaintext, ciphertext, or tokens), TTL bounded by the bundle's own expiry window.
[[kv_namespaces]]
binding = "CREDENTIAL_NONCE_KV"
id = "6eb3cac2fc7b416f870e7c28f39aa63f"
preview_id = "783627e2f20d48e8b9853bc2d2368f6a"

[observability]
enabled = true
head_sampling_rate = 1

[observability.logs]
enabled = true
head_sampling_rate = 1
persist = true
invocation_logs = true