Zero DevOps E-commerce with Cloudflare Workers & Turborepo

name = "public-api-worker"
main = "src/index.ts"
compatibility_date = "2026-06-01"
compatibility_flags = ["nodejs_compat"]

# Global Environment Variables
[vars]
ENVIRONMENT = "production"
API_VERSION = "v1"

# Cloudflare D1 Database Bindings
[[d1_databases]]
binding = "DB"
database_name = "ecommerce-db-prod"
database_id = "f052e46d-34e8-4217-b715-e21544f808db"
migrations_dir = "../../packages/database/migrations"

# Cloudflare KV Namespaces (Product Cache & Session Stores)
[[kv_namespaces]]
binding = "CACHE_KV"
id = "77c8e9b4122d4f3b8956e18dbcfb219e"

# Cloudflare R2 Buckets (Product Images & Attachments)
[[r2_buckets]]
binding = "PRODUCTS_R2"
bucket_name = "aura-storefront-assets-prod"

# Cloudflare Queue Bindings (Async Event Broker)
[[queues.producers]]
queue = "ecommerce-events-prod"
binding = "EVENT_QUEUE"

# -------------------------------------------------------------
# Staging Environment Override
# -------------------------------------------------------------
[env.staging]
name = "public-api-worker-staging"

[env.staging.vars]
ENVIRONMENT = "staging"

[[env.staging.d1_databases]]
binding = "DB"
database_name = "ecommerce-db-staging"
database_id = "d182e46d-55c8-4721-a115-e21544f999cc"
migrations_dir = "../../packages/database/migrations"

[[env.staging.kv_namespaces]]
binding = "CACHE_KV"
id = "22c8e9b4122d4f3b8956e18dbcfb319f"

[[env.staging.r2_buckets]]
binding = "PRODUCTS_R2"
bucket_name = "aura-storefront-assets-staging"

[[env.staging.queues.producers]]
queue = "ecommerce-events-staging"
binding = "EVENT_QUEUE"

import { drizzle } from "drizzle-orm/d1";
import { eq, sql } from "drizzle-orm";
import { orders, orderItems, inventoryStocks } from "../../packages/database/schema";

export interface Env {
  DB: D1Database;
  EVENT_QUEUE: Queue;
}

interface CheckoutPayload {
  userId: string;
  items: { sku: string; quantity: number; price: number }[];
}

export async function processEdgeCheckout(
  env: Env,
  payload: CheckoutPayload
): Promise<{ success: boolean; orderId?: string; error?: string }> {
  const db = drizzle(env.DB);
  const orderId = crypto.randomUUID();
  const totalAmount = payload.items.reduce((sum, item) => sum + item.price * item.quantity, 0);

  try {
    // 1. Prepare batch statements
    // SQLite locking is mitigated by grouping verification, update, and logging
    const statements: any[] = [];

    // Statement A: Create the core order record
    statements.push(
      db.insert(orders).values({
        id: orderId,
        userId: payload.userId,
        totalAmount: totalAmount,
        status: "PROCESSING",
        createdAt: new Date(),
      })
    );

    // Statements B: Insert order items and deduct stock
    for (const item of payload.items) {
      // Record order line item
      statements.push(
        db.insert(orderItems).values({
          orderId: orderId,
          sku: item.sku,
          quantity: item.quantity,
          unitPrice: item.price,
        })
      );

      // Deduct stock immediately. The WHERE clause prevents stock going negative
      statements.push(
        db
          .update(inventoryStocks)
          .set({
            availableQty: sql`${inventoryStocks.availableQty} - ${item.quantity}`,
            updatedAt: new Date(),
          })
          .where(
            sql`${inventoryStocks.sku} = ${item.sku} AND ${inventoryStocks.availableQty} >= ${item.quantity}`
          )
      );
    }

    // 2. Execute statements in a single batch transaction block
    // D1 guarantees all statements run atomically inside a single BEGIN IMMEDIATE/COMMIT block
    const results = await env.DB.batch(statements);

    // 3. Post-batch validation: Check if stock update succeeded
    // Since SQL UPDATE returns success even if 0 rows matched the WHERE clause,
    // we must verify that rows were actually updated.
    // The index offset matches our batch array order.
    let itemOffset = 2; // Order insert (0) + First Item insert (1) -> Stock update starts at index 2
    for (let i = 0; i < payload.items.length; i++) {
      const updateResult = results[itemOffset];
      if (updateResult.meta.rows_written === 0) {
        // If a row wasn't written, it means availableQty >= item.quantity failed
        throw new Error(`Stock allocation failed for SKU: ${payload.items[i].sku}. Insufficient stock.`);
      }
      itemOffset += 3; // Step past: Item Insert (1) + Next Stock Update (1) + Next Item Insert (1)...
    }

    // 4. Publish background order completion event
    await env.EVENT_QUEUE.send({
      type: "ORDER_CREATED",
      orderId: orderId,
      timestamp: Date.now(),
    });

    return { success: true, orderId: orderId };
  } catch (error: any) {
    console.error("Checkout batch failed:", error.message);
    return { success: false, error: error.message || "Unknown error during checkout." };
  }
}

# Source: .github/workflows/openapi-sdk.yml
- name: Generate OpenAPI JSON Spec
  run: pnpm --filter @ecommerce/contract build:openapi

- name: Generate Dart SDK (Flutter)
  run: |
    openapi-generator-cli generate \
      -i ./packages/contract/openapi.json \
      -g dart \
      -o ./sdks/dart \
      --additional-properties=pubName=aura_api_sdk,pubVersion=1.0.0

- name: Generate Swift SDK (iOS)
  run: |
    openapi-generator-cli generate \
      -i ./packages/contract/openapi.json \
      -g swift5 \
      -o ./sdks/swift \
      --additional-properties=projectName=AuraApiSDK

- name: Create Pull Request
  uses: peter-evans/create-pull-request@v6
  with:
    commit-message: 'chore: auto-generate API SDKs from latest contracts'
    branch: 'auto/sdk-update'

wrangler secret put STRIPE_WEBHOOK_SECRET
wrangler secret put JWT_SECRET

stripe listen --forward-to localhost:8787/api/webhooks/stripe