Implements secure R2 object storage routes in PinMe Cloudflare Workers.
npx skills add https://github.com/glitternetwork/pinme --skill pinme-r2
Please help me install this Agent Skill. Skill: pinme-r2 Source: https://github.com/glitternetwork/pinme/tree/main/skills/pinme-r2 Command: npx skills add https://github.com/glitternetwork/pinme --skill pinme-r2
Adding file upload, download, and management to a PinMe-deployed Cloudflare Worker requires correct use of the injected R2 binding, streaming semantics, Range handling, and strict security controls. This Skill guides the AI to build those routes correctly without credentials, bucket configuration, or Wrangler edits.
Use the pinme-r2 skill to add secure file upload and download routes to my PinMe Worker.
High-intent search queries and answers about installing and using this skill.
Pass request.body directly to env.R2.put with a server-generated key, after validating Content-Length and content type against an allowlist. Avoid calling arrayBuffer() or base64 conversion, which causes Worker memory amplification.
PinMe automatically injects an R2Bucket binding as env.R2 into every deployed Worker, scoped to the current project. Declare it in your Env interface and deploy with pinme save or pinme update-worker; never edit the generated wrangler.toml.
Store file bodies, images, and media in R2 addressed by key, and store searchable metadata like ownership, status, and size in D1. Never store complete files or base64 payloads in D1 rows.
Yes, pass the validated Range header to env.R2.get and return status 206 with content-range headers when object.range is present. Validate the header format first and translate unsatisfiable ranges to a 416 response.
Client-supplied keys allow path traversal and access to other users' objects. Generate opaque UUID file IDs under a server-derived owner prefix like users/{userId}/files/, and derive the user ID only from verified identity claims.
Use multipart only when objects exceed the Cloudflare request-body limit or resumability is a product requirement. It requires authenticating every part operation, binding upload IDs to owners in durable state, and idempotent completion.
glitternetworkIntegrate OpenRouter-backed LLM access into PinMe Workers with TypeScript.
glitternetworkDeploy static files or full-stack projects to IPFS and Cloudflare Workers.
adamrdrewManage structure and ownership of progress.yaml for phase tracking.
popup-studio-aiGenerate presigned URLs and manage file metadata via REST API endpoints.
