feat: ship self-hosted KOC LOOP workflows

lib/partner-cors.ts

@@ -1,12 +1,22 @@
-import { env } from "cloudflare:workers";
+import { getRuntimeEnv } from "./runtime-env";
+
+const env = getRuntimeEnv();
 
 function allowedOrigin(request: Request) {
   const origin = request.headers.get("origin");
   if (!origin) return null;
-  const portalOrigin = String(
+  const portalUrl = String(
     (env as unknown as { KOC_PORTAL_URL?: string }).KOC_PORTAL_URL ?? "",
-  ).replace(/\/$/, "");
-  return origin === portalOrigin || origin === "http://localhost:3000"
+  ).trim();
+  let portalOrigin = "";
+  try {
+    portalOrigin = portalUrl ? new URL(portalUrl).origin : "";
+  } catch {
+    portalOrigin = "";
+  }
+  return [portalOrigin, "http://localhost:3000", "http://localhost:3001"].includes(
+    origin,
+  )
     ? origin
     : null;
 }