Configuration & secrets.

Every environment variable, secret, binding, OAuth redirect, webhook URL, and cron trigger Concierge expects. All sensitive values are stored as Cloudflare Workers secrets via wrangler secret put; non‑sensitive values live in the [vars] block of wrangler.toml.

Environment variables

The Worker reads three groups of plain‑text vars: a static default in wrangler.toml, deployment‑specific values injected at deploy time, and optional integration overrides set in the dashboard.

Secrets

Sensitive values, set with wrangler secret put. Grouped by integration.

Core

Google OAuth

Meta: Facebook / Instagram / WhatsApp

Discord

Razorpay optional

Bindings

Cloudflare resource bindings declared in wrangler.toml. The IDs come from the deployment guide.

Cloudflare Queues

Two queues must exist before deploy:

• concierge-safety: producer + consumer for the persona safety classifier. The Worker enqueues a SafetyJob on each persona save and consumes the same queue via #[event(queue)].
• concierge-safety-dlq: dead‑letter queue for safety jobs after 3 retries. Inspect failures here when persona checks stop completing.

wrangler queues create concierge-safety
wrangler queues create concierge-safety-dlq

Local wrangler dev works without queues configured: safety_queue::enqueue logs and falls through, leaving personas in Pending until you deploy against a properly bound environment.

Locale & supported languages

Every tenant has a BCP‑47 locale tag (Tenant.locale) plus an independent currency override. Currently shipped: en-IN (default; Indian‑style number grouping, INR currency) and en-US (Western grouping, USD). Locale is set at signup from the request’s Accept-Language header, falling back to cf-ipcountry, then to en-IN. Admins can change both locale and currency independently from /dashboard/settings.

Adding a new locale is a drop‑in change: place a translated messages.ftl at assets/locales/{tag}/, register the tag in src/i18n.rs::Translator::new and src/locale.rs::Locale::from_request, then rebuild. CLDR data for number / currency formatting ships automatically via icu4x’s compiled_data feature. AI‑generated reply content stays English regardless of the UI locale.

Conversation timing

Three per‑tenant knobs control how the worker treats a customer thread. They live on OnboardingState.conversation (a ConversationConfig) in KV at onboarding:{tenant}; each is Option<u32> and falls back to a constant in src/prompt.rs when unset. Tenants edit them from the Conversation Timing card on /dashboard/settings; PUT /dashboard/settings/conversation validates bounds and the cross‑field invariant before persisting.

OAuth redirect URIs

Register these in the respective developer consoles:

• Google: https://your-domain/auth/callback
• Facebook: https://your-domain/auth/facebook/callback and https://your-domain/instagram/callback

Webhook URLs

Configure these in the respective platforms:

Cron triggers

A daily cron runs at 0 6 * * * (06:00 UTC) for Instagram token refresh. Configured in the [triggers] section of wrangler.toml.

# Identity
name = "concierge"
main = "worker-shim.mjs"
compatibility_date = "2024-01-01"

# Plain-text variables (deployment-specific values come in via --var at deploy time)
[vars]
ENVIRONMENT           = "production"

# Bindings
[[d1_databases]]
binding      = "DB"
database_name = "concierge"
database_id   = "…"

[[kv_namespaces]]
binding = "KV"
id      = "…"

[ai]            binding = "AI"
[[send_email]]   name    = "EMAIL"

[[durable_objects.bindings]]
name       = "REPLY_BUFFER"
class_name = "ReplyBufferDO"

# Persona safety classifier
[[queues.producers]]
queue   = "concierge-safety"
binding = "SAFETY_QUEUE"

[[queues.consumers]]
queue             = "concierge-safety"
max_batch_size    = 10
max_batch_timeout = 5
max_retries       = 3
dead_letter_queue = "concierge-safety-dlq"

# Daily Instagram token refresh, 06:00 UTC
[triggers]
crons = ["0 6 * * *"]