Files
thedotmack__claude-mem/workers/sync-hub/src/secrets.d.ts
T
Alex Newman b3eafc82b9 feat(sync): complete SyncHub-only client cutover
Retire legacy client adoption and per-kind sync state, establish the one-time launch boundary, and expose authenticated Hub health. Add bounded device metadata and a loopback-only two-client protocol-v2 matrix E2E.
2026-07-20 09:30:22 -07:00

27 lines
1.1 KiB
TypeScript

/**
* Secret bindings — set via `wrangler secret put` (DEPLOY.md), deliberately
* NOT declared in wrangler.jsonc vars: a var and a secret share one
* namespace, and a committed var would shadow (or conflict with) the secret
* at deploy time. `wrangler types` only generates config-declared bindings,
* so the secrets are typed here via global interface merging with the
* generated `Env` (worker-configuration.d.ts). Optional on purpose: the
* watchdog treats absence as "unconfigured" and skips instead of crashing.
*/
interface Env {
/** Shared Hub/Pro internal projector and payload-free metadata credential. */
CMEM_INTERNAL_PROJECTOR_SECRET?: string;
/**
* Cloudflare API token for the GraphQL Analytics API.
* Scope: Account → Account Analytics → Read.
* `wrangler secret put ANALYTICS_API_TOKEN`
*/
ANALYTICS_API_TOKEN?: string;
/**
* Discord webhook URL for watchdog alerts (runtime credential lives in
* ~/Scripts/claude-mem/.env as DISCORD_UPDATES_WEBHOOK — NEVER hardcode
* or commit a webhook URL).
* `wrangler secret put DISCORD_WEBHOOK_URL`
*/
DISCORD_WEBHOOK_URL?: string;
}