@astrale-os/adapter-cloudflare 0.1.1 → 0.1.3

package/dist/wrangler-cli.js

@@ -0,0 +1,201 @@
+/**
+ * Thin wrapper around the `wrangler` binary — the only place the adapter shells
+ * out. `watch` runs `wrangler dev` (local workerd) and resolves once the worker
+ * reports its local URL; `deploy` runs `wrangler deploy` and parses the
+ * authoritative public URL from the output; secrets go through `wrangler secret
+ * bulk`. The wrangler binary is resolved from the project's `node_modules/.bin`,
+ * falling back to `npx wrangler`.
+ */
+import { spawn } from 'node:child_process';
+import { existsSync, readdirSync } from 'node:fs';
+import { mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseDeployUrl, parseDevReadyUrl } from './parse-output';
+function wranglerCommand(projectDir) {
+    const local = join(projectDir, 'node_modules', '.bin', 'wrangler');
+    if (existsSync(local))
+        return { cmd: local, prefix: [] };
+    return { cmd: 'npx', prefix: ['--yes', 'wrangler'] };
+}
+export async function runWranglerDev(args) {
+    const { cmd, prefix } = wranglerCommand(args.projectDir);
+    const wranglerArgs = [
+        ...prefix,
+        'dev',
+        '--config',
+        args.configPath,
+        '--port',
+        String(args.port),
+        '--local-protocol',
+        'http',
+        '--ip',
+        '127.0.0.1',
+        ...(args.remote ? ['--remote'] : []),
+    ];
+    const child = spawn(cmd, wranglerArgs, {
+        cwd: args.projectDir,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        env: { ...process.env, WRANGLER_SEND_METRICS: 'false' },
+    });
+    const fallbackUrl = `http://localhost:${args.port}`;
+    let resolved = false;
+    const url = await new Promise((resolve, reject) => {
+        const onData = (buf) => {
+            const text = buf.toString();
+            for (const line of text.split('\n')) {
+                if (line.trim())
+                    args.onLog?.(line);
+            }
+            if (!resolved) {
+                const ready = parseDevReadyUrl(text, args.port);
+                if (ready) {
+                    resolved = true;
+                    resolve(ready);
+                }
+            }
+            else if (/Reloading|Detected changes|Updated/i.test(text)) {
+                args.onReload();
+            }
+        };
+        child.stdout?.on('data', onData);
+        child.stderr?.on('data', onData);
+        child.on('exit', (code) => {
+            if (!resolved) {
+                resolved = true;
+                reject(new Error(`wrangler dev exited before becoming ready (code ${code ?? 'null'}).`));
+            }
+        });
+        child.on('error', (err) => {
+            if (!resolved) {
+                resolved = true;
+                reject(err);
+            }
+        });
+        // Safety net: if we never matched a URL but the process is alive, assume the
+        // conventional localhost URL after a grace period.
+        setTimeout(() => {
+            if (!resolved && child.exitCode === null) {
+                resolved = true;
+                resolve(fallbackUrl);
+            }
+        }, 15_000).unref?.();
+    });
+    return { url, stop: () => stopChild(child) };
+}
+export async function runWranglerDeploy(args) {
+    const { cmd, prefix } = wranglerCommand(args.projectDir);
+    const deploy = (configPath) => runCapture(cmd, [...prefix, 'deploy', '--config', configPath], args.projectDir, args.onLog);
+    return deployWithSelfFallback(deploy, args);
+}
+/**
+ * Deploy with a one-time SELF-binding first-deploy recovery. A fresh worker that
+ * declares a `services: SELF` binding can't deploy (its own script doesn't exist
+ * yet); on THAT specific failure we deploy the SELF-less fallback to create the
+ * script, then redeploy WITH SELF so autobinding works. Steady state (every
+ * deploy after the first) is a single pass. The `deploy` runner is injected so
+ * the orchestration is unit-testable without shelling out.
+ */
+export async function deployWithSelfFallback(deploy, args) {
+    let { code, out } = await deploy(args.configPath);
+    if (code !== 0 && args.fallbackConfigPath && isSelfBindingMissing(out, args.workerName)) {
+        args.onLog?.('SELF service binding not resolvable yet (first deploy) — creating the worker, then re-binding SELF');
+        const first = await deploy(args.fallbackConfigPath);
+        if (first.code !== 0) {
+            throw new Error(`wrangler deploy (no-self pass) failed (code ${first.code}):\n${first.out.slice(-2000)}`);
+        }
+        ;
+        ({ code, out } = await deploy(args.configPath));
+    }
+    if (code !== 0) {
+        throw new Error(`wrangler deploy failed (code ${code}):\n${out.slice(-2000)}`);
+    }
+    const url = parseDeployUrl(out, args.route);
+    if (!url) {
+        throw new Error(`could not determine deployed URL from wrangler output:\n${out.slice(-2000)}`);
+    }
+    return { url, raw: out };
+}
+/**
+ * True when wrangler failed specifically because the worker's OWN `SELF` service
+ * binding can't resolve yet (first deploy of a fresh script). Requires the
+ * worker name so an unrelated missing-service error doesn't trigger the two-pass.
+ */
+export function isSelfBindingMissing(out, workerName) {
+    const bindingError = /could not resolve binding/i.test(out) ||
+        /service\b[^\n]*\bnot found/i.test(out) ||
+        /script\b[^\n]*\bnot found/i.test(out);
+    if (!bindingError || !/\bSELF\b/.test(out))
+        return false;
+    return workerName ? out.includes(workerName) : true;
+}
+export async function bulkPutSecrets(args) {
+    const names = Object.keys(args.secrets);
+    if (names.length === 0)
+        return;
+    const { cmd, prefix } = wranglerCommand(args.projectDir);
+    const dir = await mkdtemp(join(tmpdir(), 'astrale-secrets-'));
+    const file = join(dir, 'secrets.json');
+    try {
+        await writeFile(file, JSON.stringify(args.secrets));
+        const { code, out } = await runCapture(cmd, [...prefix, 'secret', 'bulk', file, '--config', args.configPath], args.projectDir, args.onLog);
+        if (code !== 0) {
+            throw new Error(`wrangler secret bulk failed (code ${code}):\n${out.slice(-1500)}`);
+        }
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+// ── internals ──────────────────────────────────────────────────────────────
+function runCapture(cmd, args, cwd, onLog) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, args, {
+            cwd,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: { ...process.env, WRANGLER_SEND_METRICS: 'false' },
+        });
+        let out = '';
+        const onData = (buf) => {
+            const text = buf.toString();
+            out += text;
+            for (const line of text.split('\n'))
+                if (line.trim())
+                    onLog?.(line);
+        };
+        child.stdout?.on('data', onData);
+        child.stderr?.on('data', onData);
+        child.on('exit', (code) => resolve({ code: code ?? 1, out }));
+        child.on('error', reject);
+    });
+}
+async function stopChild(child) {
+    if (child.exitCode !== null)
+        return;
+    await new Promise((resolve) => {
+        child.on('exit', () => resolve());
+        child.kill('SIGTERM');
+        setTimeout(() => {
+            if (child.exitCode === null)
+                child.kill('SIGKILL');
+            resolve();
+        }, 4000).unref?.();
+    });
+}
+/**
+ * Build the single-module worker bundle WITHOUT deploying — `wrangler deploy
+ * --dry-run --outdir` (no Cloudflare auth required). Returns the path of the
+ * bundled .js module (the managed adapter publishes its bytes).
+ */
+export async function runWranglerBundle(args) {
+    const { cmd, prefix } = wranglerCommand(args.projectDir);
+    const { code, out } = await runCapture(cmd, [...prefix, 'deploy', '--dry-run', '--outdir', args.outDir, '--config', args.configPath], args.projectDir, args.onLog);
+    if (code !== 0)
+        throw new Error(`wrangler bundle failed (exit ${code}): ${out.slice(-400)}`);
+    const js = readdirSync(args.outDir).filter((f) => f.endsWith('.js'));
+    if (js.length === 0)
+        throw new Error(`wrangler bundle produced no .js in ${args.outDir}`);
+    const preferred = js.find((f) => f.startsWith('worker')) ?? js[0];
+    return join(args.outDir, preferred);
+}
+//# sourceMappingURL=wrangler-cli.js.map

package/dist/wrangler-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrangler-cli.js","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjE,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACxD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAA;AACtD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAOpC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM;QACT,KAAK;QACL,UAAU;QACV,IAAI,CAAC,UAAU;QACf,QAAQ;QACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,kBAAkB;QAClB,MAAM;QACN,MAAM;QACN,WAAW;QACX,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;KACxD,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAA;IACnD,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;YACrC,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,GAAG,IAAI,CAAA;oBACf,OAAO,CAAC,KAAK,CAAC,CAAA;gBAChB,CAAC;YACH,CAAC;iBAAM,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,QAAQ,EAAE,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;QACF,6EAA6E;QAC7E,mDAAmD;QACnD,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACzC,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,CAAC,WAAW,CAAC,CAAA;YACtB,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAyC;IAEzC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,EAAE,CACpC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7F,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsE,EACtE,IAAgB;IAEhB,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEjD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,KAAK,EAAE,CACV,oGAAoG,CACrG,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CACzF,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,UAAmB;IACnE,MAAM,YAAY,GAChB,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QACtC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACxD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAKpC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC9B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACnD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAChE,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;QACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,UAAU,CACjB,GAAW,EACX,IAAc,EACd,GAAW,EACX,KAA8B;IAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;SACxD,CAAC,CAAA;QACF,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,GAAG,IAAI,IAAI,CAAA;YACX,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;QACrE,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAmB;IAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAM;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAClD,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EACxF,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5F,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACpE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IACzF,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAA;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACrC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/adapter-cloudflare",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Deploy an Astrale domain as a standalone Cloudflare Worker",
   "keywords": [
     "adapter",
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "jose": "^6.1.3",
-    "@astrale-os/devkit": "^0.1.1"
+    "@astrale-os/devkit": "^0.1.2"
   },
   "devDependencies": {
     "@astrale-os/ox": ">=0.1.0 <1.0.0",

package/src/astrale.ts

@@ -0,0 +1,194 @@
+/**
+ * `astrale(envs)` — the Astrale-managed deployment adapter.
+ *
+ * Ships the domain THROUGH the platform instead of to the author's own cloud
+ * account: `deploy` builds the same single-module workerd bundle the Cloudflare
+ * adapter ships (shared codegen + `wrangler deploy --dry-run`), then publishes
+ * it via the admin domain's catalog — `DomainPublished.register` →
+ * `::release { bundleBase64 }` (the worker stages the bytes in the platform
+ * registry) → `::install { instanceId, source: { kind: 'package' } }`, which
+ * deploys it as a host-local Service next to the target instance and installs
+ * the domain on it. No Cloudflare account, no wrangler auth — the only
+ * credential is the author's Astrale identity, supplied by the `astrale` CLI
+ * session this adapter shells out to (the same trust source as
+ * `astrale instance install`).
+ *
+ * `watch` is identical to the Cloudflare adapter's local dev (wrangler dev on
+ * localhost) — managed deploys change WHERE the worker runs, not how you
+ * iterate locally.
+ *
+ * Current limits (v1): client/ SPA assets are not shipped (managed packages
+ * serve no `/ui` yet) and no runtime secrets reach the service — the bundle
+ * must be self-contained (its signing identity is baked in by the codegen).
+ */
+
+import type { DomainAdapter } from '@astrale-os/devkit'
+
+import { defineAdapter } from '@astrale-os/devkit'
+import { spawn } from 'node:child_process'
+import { existsSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+import type { AstraleParams } from './params'
+
+import { logTo, prepare } from './cloudflare'
+import { runWranglerBundle, runWranglerDev } from './wrangler-cli'
+
+const DEFAULT_PORT = 8787
+const DEFAULT_ADMIN_URL = 'https://admin.eu.astrale.ai/api'
+const DEFAULT_REGION = 'eu'
+const ADMIN_ORIGIN = 'admin.astrale.ai'
+
+export function astrale(envs: Record<string, AstraleParams>): DomainAdapter<AstraleParams> {
+  return defineAdapter<AstraleParams>({
+    name: 'astrale',
+    envs,
+
+    // Local dev is unchanged: wrangler dev on localhost. Managed deploys change
+    // WHERE the worker ships, not the inner loop.
+    async watch(params, ctx) {
+      const { configPath } = await prepare(
+        { ...(params.vars ? { vars: params.vars } : {}), port: params.port ?? DEFAULT_PORT },
+        ctx,
+        'dev',
+      )
+      const handle = await runWranglerDev({
+        projectDir: ctx.projectDir,
+        configPath,
+        port: params.port ?? DEFAULT_PORT,
+        remote: false,
+        onReload: ctx.onReload,
+        onLog: logTo(),
+      })
+      return { url: handle.url, stop: handle.stop }
+    },
+
+    async deploy(params, ctx) {
+      const log = logTo()
+      if (ctx.clientDir) {
+        log(
+          `client/ detected — managed deploys do not ship SPA assets yet; ` +
+            `/ui will not serve on the managed service (functions/methods are unaffected).`,
+        )
+      }
+
+      // 1. Codegen + bundle: the exact worker module a Cloudflare deploy would
+      //    ship, produced locally with `wrangler deploy --dry-run` (no auth).
+      //    `clientDir` is stripped: managed packages don't ship SPA assets yet,
+      //    and leaving it in would put a dangling `assets.directory` (the
+      //    unbuilt dist-client) into the generated config.
+      const { clientDir: _omitted, ...bundleCtx } = ctx
+      const { configPath } = await prepare({}, bundleCtx, 'dev')
+      const outDir = join(ctx.projectDir, '.astrale', 'dist-managed')
+      const bundlePath = await runWranglerBundle({
+        projectDir: ctx.projectDir,
+        configPath,
+        outDir,
+        onLog: log,
+      })
+      const bundle = await readFile(bundlePath)
+
+      // 2. Publish through the platform, authenticated by the author's astrale
+      //    CLI session. The release payload rides STDIN — a bundle is megabytes
+      //    of base64, far past argv limits.
+      const name = params.name ?? packageNameFor(ctx.domain.origin)
+      const adminUrl = params.adminUrl ?? DEFAULT_ADMIN_URL
+      const version = `0.0.0-managed.${Date.now()}`
+
+      log(`registering "${name}" (${ctx.domain.origin}) in the platform catalog…`)
+      await astraleCall(ctx.projectDir, params, adminUrl, {
+        path: `/${ADMIN_ORIGIN}/class.DomainPublished/register`,
+        data: { origin: ctx.domain.origin, name },
+      })
+
+      log(`publishing ${name}@${version} (${bundle.length} bytes)…`)
+      await astraleCall(ctx.projectDir, params, adminUrl, {
+        path: `/admin/domains/${name}::release`,
+        data: { version, bundleBase64: bundle.toString('base64'), makeCurrent: true },
+        viaStdin: true,
+      })
+
+      log(`installing on instance "${params.instance}"…`)
+      const installed = (await astraleCall(ctx.projectDir, params, adminUrl, {
+        path: `/admin/domains/${name}::install`,
+        data: { instanceId: params.instance, source: { kind: 'package' } },
+      })) as { serviceSlug?: string; state?: string; error?: string | null }
+
+      if (installed.error || installed.state !== 'installed') {
+        throw new Error(
+          `managed install failed: state=${installed.state ?? '?'} error=${installed.error ?? '?'}`,
+        )
+      }
+      if (!installed.serviceSlug) {
+        throw new Error('managed install returned no serviceSlug — cannot derive the service URL')
+      }
+      const region = params.region ?? DEFAULT_REGION
+      return { url: `https://${installed.serviceSlug}.svc.${region}.astrale.ai` }
+    },
+
+    secretsFile(params) {
+      return params.secrets
+    },
+  })
+}
+
+/** Catalog package name from the origin: first DNS label (e.g. `my-notes.example.dev` → `my-notes`). */
+function packageNameFor(origin: string): string {
+  const label = origin.split('.')[0] ?? origin
+  return label.toLowerCase().replace(/[^a-z0-9-]+/g, '-')
+}
+
+/**
+ * Invoke the user's `astrale` CLI for one platform call and parse its JSON
+ * output. The CLI owns identity (IdP session, audience scoping, delegation
+ * minting) — reimplementing that here would fork the trust path.
+ */
+async function astraleCall(
+  projectDir: string,
+  params: AstraleParams,
+  adminUrl: string,
+  call: { path: string; data: unknown; viaStdin?: boolean },
+): Promise<unknown> {
+  const args = ['call', call.path, '--url', adminUrl, '--json']
+  if (params.identity) args.push('--as', params.identity)
+  const payload = JSON.stringify(call.data)
+  if (!call.viaStdin) args.push('--data', payload)
+
+  const { code, out } = await new Promise<{ code: number; out: string }>((resolve, reject) => {
+    const child = spawn(astraleBin(projectDir), args, {
+      cwd: projectDir,
+      stdio: [call.viaStdin ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+    })
+    let out = ''
+    child.stdout?.on('data', (b: Buffer) => (out += b.toString()))
+    child.stderr?.on('data', (b: Buffer) => (out += b.toString()))
+    child.on('exit', (c) => resolve({ code: c ?? 1, out }))
+    child.on('error', reject)
+    if (call.viaStdin) {
+      child.stdin?.write(payload)
+      child.stdin?.end()
+    }
+  })
+  if (code !== 0) {
+    throw new Error(
+      `astrale call ${call.path} failed (exit ${code}): ${out.trim().slice(0, 500)}\n` +
+        `Is the astrale CLI installed and signed in? (astrale auth login)`,
+    )
+  }
+  try {
+    return JSON.parse(out)
+  } catch {
+    throw new Error(`astrale call ${call.path}: could not parse CLI output: ${out.slice(0, 300)}`)
+  }
+}
+
+/** The user's astrale CLI: ~/.astrale/bin/astrale when present, else PATH. */
+function astraleBin(_projectDir: string): string {
+  const home = process.env.HOME
+  if (home) {
+    const installed = join(home, '.astrale', 'bin', 'astrale')
+    if (existsSync(installed)) return installed
+  }
+  return 'astrale'
+}

package/src/cloudflare.ts

@@ -85,7 +85,7 @@ export function cloudflare(
 
 // ── codegen orchestration ──────────────────────────────────────────────────
 
-async function prepare(
+export async function prepare(
   params: CloudflareParams,
   ctx: WatchCtx | DeployCtx,
   mode: 'dev' | 'deploy',
@@ -223,6 +223,6 @@ export function workerName(params: CloudflareParams, origin: string): string {
     .replace(/^-+|-+$/g, '')
 }
 
-function logTo(): (line: string) => void {
+export function logTo(): (line: string) => void {
   return (line: string) => process.stderr.write(`\x1b[2m  ${line}\x1b[0m\n`)
 }

package/src/index.ts

@@ -13,5 +13,6 @@
  * `*.workers.dev`; an env with a `route` ships to that custom domain.
  */
 
+export { astrale } from './astrale'
 export { cloudflare } from './cloudflare'
-export type { CloudflareParams } from './params'
+export type { AstraleParams, CloudflareParams } from './params'

package/src/params.ts

@@ -47,3 +47,23 @@ export interface CloudflareParams {
    */
   wrangler?: Record<string, unknown>
 }
+
+/** Params for the Astrale-managed adapter (`astrale(envs)`). */
+export interface AstraleParams {
+  /** Target instance slug the domain installs onto (e.g. `'bryan-e2e5'`). */
+  instance: string
+  /** Catalog package name. Default: the origin's first DNS label. */
+  name?: string
+  /** Admin kernel URL the publish calls target. Default the platform admin. */
+  adminUrl?: string
+  /** Routing region of the `.svc` service URL. Default `'eu'`. */
+  region?: string
+  /** CLI identity (`--as`) for the publish calls. Default: the CLI's active identity. */
+  identity?: string
+  /** Gitignored secrets file — injected ONLY into local `watch` (managed services receive no secrets yet). */
+  secrets?: string
+  /** Local dev port for `wrangler dev`. Default 8787. */
+  port?: number
+  /** Extra plain vars for local `watch`. */
+  vars?: Record<string, string>
+}

package/src/wrangler-cli.ts

@@ -10,7 +10,7 @@
 import type { ChildProcess } from 'node:child_process'
 
 import { spawn } from 'node:child_process'
-import { existsSync } from 'node:fs'
+import { existsSync, readdirSync } from 'node:fs'
 import { mkdtemp, rm, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
@@ -238,3 +238,28 @@ async function stopChild(child: ChildProcess): Promise<void> {
     }, 4000).unref?.()
   })
 }
+
+/**
+ * Build the single-module worker bundle WITHOUT deploying — `wrangler deploy
+ * --dry-run --outdir` (no Cloudflare auth required). Returns the path of the
+ * bundled .js module (the managed adapter publishes its bytes).
+ */
+export async function runWranglerBundle(args: {
+  projectDir: string
+  configPath: string
+  outDir: string
+  onLog?: (line: string) => void
+}): Promise<string> {
+  const { cmd, prefix } = wranglerCommand(args.projectDir)
+  const { code, out } = await runCapture(
+    cmd,
+    [...prefix, 'deploy', '--dry-run', '--outdir', args.outDir, '--config', args.configPath],
+    args.projectDir,
+    args.onLog,
+  )
+  if (code !== 0) throw new Error(`wrangler bundle failed (exit ${code}): ${out.slice(-400)}`)
+  const js = readdirSync(args.outDir).filter((f) => f.endsWith('.js'))
+  if (js.length === 0) throw new Error(`wrangler bundle produced no .js in ${args.outDir}`)
+  const preferred = js.find((f) => f.startsWith('worker')) ?? js[0]!
+  return join(args.outDir, preferred)
+}

package/template/astrale.config.ts

@@ -11,6 +11,15 @@
  */
 import { cloudflare } from '@astrale-os/adapter-cloudflare'
 import { defineDomain } from '@astrale-os/devkit'
+// No Cloudflare account? Swap the adapter for the Astrale-managed one — it
+// publishes the same bundle THROUGH the platform and installs it on your
+// instance as a managed service (auth = your `astrale auth login` session):
+//
+//   import { astrale } from '@astrale-os/adapter-cloudflare'
+//   adapter: astrale({
+//     dev: { secrets: '.env.dev' },              // local wrangler dev, unchanged
+//     prod: { instance: '<your-instance-slug>' } // pnpm prod → managed deploy
+//   }),
 
 import { schema } from './schema'
 

package/template/package.json

@@ -2,6 +2,9 @@
   "name": "astrale-domain",
   "version": "0.1.0",
   "private": true,
+  "workspaces": [
+    "client"
+  ],
   "type": "module",
   "scripts": {
     "dev": "astrale-domain dev",
@@ -16,6 +19,7 @@
     "@astrale-os/kernel-core": ">=0.3.0 <1.0.0",
     "@astrale-os/kernel-dsl": ">=0.1.0 <1.0.0",
     "@astrale-os/sdk": ">=0.1.0 <1.0.0",
+    "@hono/node-server": "^1.19.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {
@@ -26,5 +30,10 @@
   },
   "engines": {
     "node": ">=22"
-  }
+  },
+  "trustedDependencies": [
+    "esbuild",
+    "sharp",
+    "workerd"
+  ]
 }