Herald + Cloudflare Worker

import { Herald } from '@herald-protocol/sdk';

export default {
  async fetch(req: Request, env: Env): Promise<Response> {
    const url = new URL(req.url);

    if (url.pathname === '/api/governance' && req.method === 'POST') {
      return handleGovernance(req, env);
    }

    if (url.pathname === '/api/webhooks/herald' && req.method === 'POST') {
      return handleWebhook(req, env);
    }

    return new Response('Not found', { status: 404 });
  },
};

interface Env {
  HERALD_API_KEY: string;
  HERALD_WEBHOOK_SECRET: string;
}

async function handleGovernance(req: Request, env: Env): Promise<Response> {
  const herald = new Herald({ apiKey: env.HERALD_API_KEY });
  const { title, voters } = await req.json();

  if (!voters?.length || !title) {
    return Response.json({ error: 'voters and title required' }, { status: 400 });
  }

  const result = await herald.notifyBulk({
    wallets: voters,
    subject: `🗳 New Proposal: ${title}`,
    body: `A new governance proposal has been published.\nCast your vote on the DAO dashboard.`,
    category: 'governance',
    receipt: true,
    idempotencyPrefix: `gov_${Date.now()}`,
  });

  return Response.json(result, { status: 202 });
}

async function handleWebhook(req: Request, env: Env): Promise<Response> {
  const signature = req.headers.get('x-herald-signature');
  const payload = await req.json();
  const rawBody = JSON.stringify(payload);

  if (!signature || !env.HERALD_WEBHOOK_SECRET) {
    return Response.json({ error: 'Missing signature or secret' }, { status: 401 });
  }

  const isValid = await Herald.verifyWebhookSignature(rawBody, signature, env.HERALD_WEBHOOK_SECRET);

  if (!isValid) {
    return Response.json({ error: 'Invalid signature' }, { status: 401 });
  }

  console.log(`[Webhook] ${payload.event}: ${payload.notificationId}`);
  return Response.json({ received: true });
}