Cloudflare Worker API

Save as worker.js and deploy via Pages Functions

// worker.js for portal.metfabworks.com
// Place in /functions/api/[[path]].js for Cloudflare Pages

export default {
  async fetch(request, env) {
    const url = new URL(request.url);
    const { pathname } = url;
    const method = request.method;
    
    // Get user from Cloudflare Access JWT
    const jwt = request.headers.get('CF-Authorization');
    const user = jwt ? JSON.parse(atob(jwt.split('.')[1])) : null;
    const role = user?.groups?.[0] || user?.email === 'sean@metfabworks.com' ? 'admin' : 'guest';
    
    const headers = {
      'Content-Type': 'application/json',
      'Access-Control-Allow-Origin': '*',
      'Access-Control-Allow-Methods': 'GET,POST,PUT,DELETE,OPTIONS',
      'Access-Control-Allow-Headers': 'Content-Type,CF-Authorization'
    };
    
    if (method === 'OPTIONS') return new Response(null, { headers });
    
    // CAPA Endpoints
    if (pathname === '/api/capa' && method === 'GET') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM capa ORDER BY due_date ASC"
      ).all();
      return Response.json(results, { headers });
    }
    
    if (pathname === '/api/capa' && method === 'POST' && role !== 'auditor') {
      const data = await request.json();
      const id = crypto.randomUUID();
      await env.DB.prepare(
        "INSERT INTO capa VALUES (?, ?, ?, ?, ?, ?)"
      ).bind(
        id, data.issue, data.root_cause, data.action, data.owner, 
        data.due_date, data.status || 'open', data.priority || 'medium',
        user.email, new Date().toISOString()
      ).run();
      return Response.json({success: true, id}, { headers });
    }
    
    // Calibration Endpoints
    if (pathname === '/api/calibration' && method === 'GET') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM calibration ORDER BY due_date ASC"
      ).all();
      return Response.json(results, { headers });
    }
    
    // Risks Endpoints
    if (pathname === '/api/risks' && method === 'GET') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM risks ORDER BY score DESC"
      ).all();
      return Response.json(results, { headers });
    }
    
    // 5S Audit Endpoints
    if (pathname === '/api/5s' && method === 'GET') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM audit_5s ORDER BY audit_date DESC"
      ).all();
      return Response.json(results, { headers });
    }
    
    // Kaizen Endpoints
    if (pathname === '/api/kaizen' && method === 'GET') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM kaizen ORDER BY date DESC"
      ).all();
      return Response.json(results, { headers });
    }
    
    // Documents Endpoints
    if (pathname === '/api/documents' && method === 'GET') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM documents ORDER BY review_date ASC"
      ).all();
      return Response.json(results, { headers });
    }
    
    // Users Endpoint (Admin only)
    if (pathname === '/api/users' && method === 'GET' && role === 'admin') {
      const { results } = await env.DB.prepare(
        "SELECT * FROM users ORDER BY created_at DESC"
      ).all();
      return Response.json(results, { headers });
    }
    
    return new Response('Not Found', { status: 404, headers });
  }
}

Step-by-Step Deployment

1. 1
   Create D1 Database

   Cloudflare Dashboard → D1 → Create Database → Name: metfab-vda → Execute schema.sql from Schema tab
2. 2
   Deploy to Cloudflare Pages

   Pages → Create Project → Upload this HTML file → Custom domain: portal.metfabworks.com
3. 3
   Bind D1 Database

   Pages → Settings → Functions → D1 database bindings → Variable: DB → Database: metfab-vda
4. 4
   Configure Zero Trust Access

   Zero Trust → Access → Applications → Add portal.metfabworks.com → Policy: Include sean@metfabworks.com, seanjmoh@gmail.com as Admin
5. 5
   Deploy Worker API

   Create /functions/api/[[path]].js with code from Worker API tab → Deploy
6. 6
   Replace localStorage with API Calls

   Update JS: Replace localStorage.getItem() with fetch('/api/capa') etc. See Migration tab for sample code.

Data Migration

Sample API Replacement Code:

// BEFORE (localStorage)
const capaData = JSON.parse(localStorage.getItem('capa')) || [];
localStorage.setItem('capa', JSON.stringify(data));

// AFTER (Cloudflare D1 API)
async function getCapa() {
  const res = await fetch('/api/capa');
  return await res.json();
}

async function saveCapa(data) {
  await fetch('/api/capa', {
    method: 'POST',
    headers: {'Content-Type': 'application/json'},
    body: JSON.stringify(data)
  });
}

// Migration Script (run once after D1 setup)
async function migrateToD1() {
  const modules = ['capa', 'calibration', 'risks', '5s', 'kaizen', 'documents'];
  for (const mod of modules) {
    const data = JSON.parse(localStorage.getItem(mod) || '[]');
    for (const item of data) {
      await fetch(`/api/${mod}`, {
        method: 'POST',
        headers: {'Content-Type': 'application/json'},
        body: JSON.stringify(item)
      });
    }
  }
  alert('Migration complete! Clear localStorage.');
}