@astrale-os/adapter-cloudflare 0.4.10 → 0.5.0-beta.11

package/dist/worker/index.d.ts

@@ -0,0 +1,61 @@
+import type { schema } from '@astrale-os/kernel-dsl/v1';
+import type { DomainDefinition } from '@astrale-os/sdk';
+import type { Application, RemoteDeploymentInput, RemoteIdentityInput } from '@astrale-os/sdk/server';
+import type { ExecutionContext } from 'hono';
+/** SDK-owned Publication manifest passed through without adapter interpretation. */
+export type CloudflareManifest = NonNullable<RemoteDeploymentInput['manifest']>;
+export interface Fetcher {
+    fetch(request: Request): Response | Promise<Response>;
+}
+/** Adapter-owned bindings generated into every Cloudflare deployment. */
+export interface CloudflareAdapterBindings {
+    /** Native Cloudflare deployment metadata (direct Wrangler deployments). */
+    readonly ASTRALE_VERSION_METADATA?: {
+        readonly id: string;
+        readonly tag: string;
+        readonly timestamp: string;
+    };
+    /** Content-derived generation supplied by providers without version metadata. */
+    readonly ASTRALE_DEPLOYMENT_VERSION?: string;
+    readonly WORKER_URL?: string;
+    readonly ASSETS?: Fetcher;
+    readonly SELF?: Fetcher;
+    readonly FRONTEND_DEV_URL?: string;
+    readonly DISPATCHER?: {
+        get(name: string): Fetcher;
+    };
+}
+interface CloudflareWorkerSharedConfig<Bindings extends CloudflareAdapterBindings, Environment> {
+    readonly privateKey: RemoteIdentityInput['privateKey'] | ((bindings: Bindings) => RemoteIdentityInput['privateKey']);
+    /** Compose provider bindings into the exact Domain environment once per deployment generation. */
+    readonly resolveEnvironment?: (bindings: Bindings) => Environment | Promise<Environment>;
+    readonly manifest?: CloudflareManifest;
+    /** Maximum time allowed for one Domain invocation. Defaults to 30 seconds. */
+    readonly invocationTimeoutMs?: number;
+    readonly resolveUrl?: (bindings: Bindings, requestOrigin: string) => string;
+    readonly selfBinding?: (bindings: Bindings) => Fetcher | null | undefined;
+    readonly routeSubrequest?: (url: URL, bindings: Bindings) => Fetcher | null | undefined;
+}
+/**
+ * Resolve a Domain lazily when its module graph is too expensive for provider startup admission.
+ * The adapter resolves at most once concurrently and retries after a rejected resolution.
+ */
+export type CloudflareWorkerConfig<S extends schema.DomainSchema, Bindings extends CloudflareAdapterBindings, Environment> = CloudflareWorkerSharedConfig<Bindings, Environment> & ({
+    readonly definition: DomainDefinition<S>;
+    readonly resolveDefinition?: never;
+} | {
+    readonly definition?: never;
+    readonly resolveDefinition: (bindings: Bindings) => DomainDefinition<S> | Promise<DomainDefinition<S>>;
+});
+export interface CloudflareWorker<Environment> {
+    fetch(request: Request, environment: Environment, executionContext?: ExecutionContext): Response | Promise<Response>;
+}
+/**
+ * Compose one Cloudflare module Worker without request-global mutation.
+ * Environment bindings are captured once per immutable serving URL/version generation.
+ */
+export declare function cloudflareWorkerEntry<Bindings extends CloudflareAdapterBindings, Environment = Bindings>(): <const S extends schema.DomainSchema>(config: CloudflareWorkerConfig<S, Bindings, Environment>) => CloudflareWorker<Bindings>;
+/** Close an evicted Application before its environment bindings leave the cache. */
+export declare function closeEvictedApplication(application: Pick<Application, 'close'>, now?: () => number): Promise<void>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/worker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAiB,MAAM,iBAAiB,CAAA;AACtE,OAAO,KAAK,EACV,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAQ,MAAM,MAAM,CAAA;AAWlD,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAA;AAE/E,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACtD;AAED,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,2EAA2E;IAC3E,QAAQ,CAAC,wBAAwB,CAAC,EAAE;QAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,iFAAiF;IACjF,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;CACrD;AAED,UAAU,4BAA4B,CAAC,QAAQ,SAAS,yBAAyB,EAAE,WAAW;IAC5F,QAAQ,CAAC,UAAU,EACf,mBAAmB,CAAC,YAAY,CAAC,GACjC,CAAC,CAAC,QAAQ,EAAE,QAAQ,KAAK,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAA;IAC/D,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IACtC,8EAA8E;IAC9E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,KAAK,MAAM,CAAA;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,KAAK,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;CACxF;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,CAChC,CAAC,SAAS,MAAM,CAAC,YAAY,EAC7B,QAAQ,SAAS,yBAAyB,EAC1C,WAAW,IACT,4BAA4B,CAAC,QAAQ,EAAE,WAAW,CAAC,GACrD,CACI;IACE,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAA;CACnC,GACD;IACE,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,QAAQ,EAAE,QAAQ,KACf,gBAAgB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAA;CACxD,CACJ,CAAA;AAEH,MAAM,WAAW,gBAAgB,CAAC,WAAW;IAC3C,KAAK,CACH,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,WAAW,EACxB,gBAAgB,CAAC,EAAE,gBAAgB,GAClC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChC;AAQD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,SAAS,yBAAyB,EAC1C,WAAW,GAAG,QAAQ,MAEL,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY,UAC1C,sBAAsB,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,KACvD,gBAAgB,CAAC,QAAQ,CAAC,CAqJ9B;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EACvC,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/worker/index.js

@@ -0,0 +1,212 @@
+import { issuer } from '@astrale-os/kernel-core/auth';
+import { createRemoteApplication } from '@astrale-os/sdk/server';
+import { Hono as HonoApplication } from 'hono';
+import { dispatchCloudflareRequest, prepareCloudflareRequest } from './fetch.js';
+const MAXIMUM_CACHED_APPLICATIONS = 4;
+const APPLICATION_CLOSE_TIMEOUT_MS = 5_000;
+/**
+ * Compose one Cloudflare module Worker without request-global mutation.
+ * Environment bindings are captured once per immutable serving URL/version generation.
+ */
+export function cloudflareWorkerEntry() {
+    return function (config) {
+        const applications = new Map();
+        let resolvedDefinition = config.definition;
+        let pendingDefinition;
+        const definitionFor = async (bindings) => {
+            if (resolvedDefinition !== undefined)
+                return resolvedDefinition;
+            if (pendingDefinition !== undefined)
+                return pendingDefinition;
+            const resolve = config.resolveDefinition;
+            if (resolve === undefined)
+                throw new TypeError('Cloudflare Worker Domain definition is unavailable.');
+            const current = Promise.resolve().then(() => resolve(bindings));
+            pendingDefinition = current;
+            try {
+                const definition = await current;
+                resolvedDefinition = definition;
+                return definition;
+            }
+            finally {
+                if (pendingDefinition === current)
+                    pendingDefinition = undefined;
+            }
+        };
+        const applicationFor = async (url, bindings, definition) => {
+            const version = deploymentVersion(bindings);
+            const key = `${url}\u0000${version}`;
+            const cached = applications.get(key);
+            if (cached !== undefined)
+                return cached;
+            const environment = config.resolveEnvironment === undefined
+                ? bindings
+                : await config.resolveEnvironment(bindings);
+            const routedFetch = async (input, init) => {
+                const { request, rejectRedirect } = prepareCloudflareRequest(input, init);
+                const destination = new URL(request.url);
+                if (destination.origin === new URL(url).origin) {
+                    const self = config.selfBinding?.(bindings);
+                    return dispatchCloudflareRequest(request, rejectRedirect, (transportRequest) => self !== null && self !== undefined
+                        ? self.fetch(transportRequest)
+                        : serving.app.fetch(transportRequest, environment));
+                }
+                const route = config.routeSubrequest?.(destination, bindings);
+                return dispatchCloudflareRequest(request, rejectRedirect, (transportRequest) => route === null || route === undefined
+                    ? fetch(transportRequest)
+                    : route.fetch(transportRequest));
+            };
+            const deploymentQuery = `deployment=${encodeURIComponent(version)}`;
+            const issuerId = issuer.accept(url);
+            const host = new HonoApplication();
+            host.get('/meta', (context) => context.json({
+                origin: definition.schema.origin,
+                issuer: issuerId,
+                schemaRevision: definition.domain.$.revision,
+                deploymentVersion: version,
+            }));
+            const serving = createRemoteApplication({
+                definition,
+                environment,
+                identity: {
+                    issuer: issuerId,
+                    subject: definition.schema.origin,
+                    privateKey: typeof config.privateKey === 'function'
+                        ? config.privateKey(bindings)
+                        : config.privateKey,
+                    fetch: routedFetch,
+                    ...(new URL(url).protocol === 'http:' ? { allowInsecureHttp: true } : {}),
+                },
+                deployment: {
+                    bundleHref: `${url}/.well-known/astrale/domain.bundle.json?${deploymentQuery}`,
+                    endpoint: { http: `${url}/invoke` },
+                    ...(definition.frontend === undefined
+                        ? {}
+                        : { frontendBaseHref: url, frontendCacheKey: version }),
+                    ...(config.manifest === undefined ? {} : { manifest: config.manifest }),
+                    delivery: {
+                        href: `${url}/install`,
+                        method: 'POST',
+                        authentication: { kind: 'public' },
+                    },
+                },
+                app: host,
+                server: {
+                    path: '/invoke',
+                    health: { probe: { check: () => true } },
+                    limits: {
+                        maximumRequestBytes: 1024 * 1024,
+                        maximumPublicationBytes: 1024 * 1024,
+                        maximumBundleBytes: 8 * 1024 * 1024,
+                        maximumDeliveryBytes: 8 * 1024 * 1024,
+                        invocationTimeoutMs: config.invocationTimeoutMs ?? 30_000,
+                    },
+                },
+            });
+            const created = Object.freeze({
+                origin: new URL(url).origin,
+                application: serving,
+                environment,
+            });
+            if (applications.size >= MAXIMUM_CACHED_APPLICATIONS) {
+                const oldest = applications.keys().next().value;
+                if (oldest !== undefined) {
+                    const evicted = applications.get(oldest);
+                    applications.delete(oldest);
+                    if (evicted !== undefined) {
+                        try {
+                            await closeEvictedApplication(evicted.application);
+                        }
+                        catch (cause) {
+                            await serving
+                                .close({ deadline: Date.now() + APPLICATION_CLOSE_TIMEOUT_MS })
+                                .catch(() => undefined);
+                            throw cause;
+                        }
+                    }
+                }
+            }
+            applications.set(key, created);
+            return created;
+        };
+        return Object.freeze({
+            async fetch(request, bindings, executionContext) {
+                const requestUrl = new URL(request.url);
+                const definition = await definitionFor(bindings);
+                if (definition.frontend !== undefined) {
+                    const asset = await frontendAsset(definition, bindings, requestUrl, request);
+                    if (asset !== undefined)
+                        return asset;
+                }
+                const publicUrl = canonicalServingUrl(config.resolveUrl?.(bindings, requestOrigin(requestUrl, request)) ??
+                    bindings.WORKER_URL ??
+                    requestOrigin(requestUrl, request));
+                const serving = await applicationFor(publicUrl, bindings, definition);
+                return serving.application.app.fetch(request, serving.environment, executionContext);
+            },
+        });
+    };
+}
+/** Close an evicted Application before its environment bindings leave the cache. */
+export function closeEvictedApplication(application, now = Date.now) {
+    return application.close({ deadline: now() + APPLICATION_CLOSE_TIMEOUT_MS });
+}
+async function frontendAsset(definition, environment, url, request) {
+    const frontend = definition.frontend;
+    if (frontend === undefined || frontend.source.kind === 'external')
+        return undefined;
+    const routes = frontend.routes;
+    const route = Object.values(routes).find((candidate) => candidate.path === url.pathname);
+    const staticAsset = url.pathname.startsWith('/assets/');
+    if (route === undefined && !staticAsset)
+        return undefined;
+    if (request.method !== 'GET' && request.method !== 'HEAD')
+        return undefined;
+    const binding = environment.ASSETS;
+    if (binding === undefined)
+        return undefined;
+    const dev = environment.FRONTEND_DEV_URL?.replace(/\/+$/u, '');
+    if (dev !== undefined && dev.length > 0) {
+        return fetch(new Request(`${dev}${url.pathname}${url.search}`, request));
+    }
+    const path = route === undefined ? `${url.pathname}${url.search}` : `/${route.document}${url.search}`;
+    return binding.fetch(new Request(new URL(path, url.origin), request));
+}
+function requestOrigin(url, request) {
+    if (url.protocol !== 'http:')
+        return url.origin;
+    const forwarded = request.headers.get('x-forwarded-proto')?.split(',')[0]?.trim().toLowerCase();
+    return forwarded === 'https' ? `https://${url.host}` : url.origin;
+}
+function canonicalServingUrl(input) {
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch (cause) {
+        throw new TypeError('Cloudflare Worker serving URL is invalid.', { cause });
+    }
+    if ((url.protocol !== 'https:' && url.protocol !== 'http:') ||
+        url.username !== '' ||
+        url.password !== '' ||
+        url.pathname !== '/' ||
+        url.search !== '' ||
+        url.hash !== '') {
+        throw new TypeError('Cloudflare Worker serving URL must be one HTTP(S) origin.');
+    }
+    return url.origin;
+}
+function deploymentVersion(environment) {
+    const input = environment.ASTRALE_VERSION_METADATA;
+    if (input !== null &&
+        typeof input === 'object' &&
+        typeof input.id === 'string' &&
+        input.id.length > 0) {
+        return input.id;
+    }
+    const fallback = environment.ASTRALE_DEPLOYMENT_VERSION;
+    if (typeof fallback === 'string' && fallback.length > 0)
+        return fallback;
+    throw new TypeError('Cloudflare Worker deployment version is unavailable.');
+}
+//# sourceMappingURL=index.js.map

package/dist/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAA;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,MAAM,CAAA;AAE9C,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAEhF,MAAM,2BAA2B,GAAG,CAAC,CAAA;AACrC,MAAM,4BAA4B,GAAG,KAAK,CAAA;AA4E1C;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IAInC,OAAO,UACL,MAAwD;QAExD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0C,CAAA;QACtE,IAAI,kBAAkB,GAAoC,MAAM,CAAC,UAAU,CAAA;QAC3E,IAAI,iBAA2D,CAAA;QAE/D,MAAM,aAAa,GAAG,KAAK,EAAE,QAAkB,EAAgC,EAAE;YAC/E,IAAI,kBAAkB,KAAK,SAAS;gBAAE,OAAO,kBAAkB,CAAA;YAC/D,IAAI,iBAAiB,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAA;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAA;YACxC,IAAI,OAAO,KAAK,SAAS;gBACvB,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC/D,iBAAiB,GAAG,OAAO,CAAA;YAC3B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAA;gBAChC,kBAAkB,GAAG,UAAU,CAAA;gBAC/B,OAAO,UAAU,CAAA;YACnB,CAAC;oBAAS,CAAC;gBACT,IAAI,iBAAiB,KAAK,OAAO;oBAAE,iBAAiB,GAAG,SAAS,CAAA;YAClE,CAAC;QACH,CAAC,CAAA;QAED,MAAM,cAAc,GAAG,KAAK,EAC1B,GAAW,EACX,QAAkB,EAClB,UAA+B,EACU,EAAE;YAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,OAAO,EAAE,CAAA;YACpC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAA;YACvC,MAAM,WAAW,GACf,MAAM,CAAC,kBAAkB,KAAK,SAAS;gBACrC,CAAC,CAAE,QAAmC;gBACtC,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YAE/C,MAAM,WAAW,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACzE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAA;oBAC3C,OAAO,yBAAyB,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAC7E,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;wBACjC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;wBAC9B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,WAAW,CAAC,CACrD,CAAA;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;gBAC7D,OAAO,yBAAyB,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAC7E,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;oBACnC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAClC,CAAA;YACH,CAAC,CAAA;YAED,MAAM,eAAe,GAAG,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAA;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACnC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAA;YAClC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAC5B,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM;gBAChC,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBAC5C,iBAAiB,EAAE,OAAO;aAC3B,CAAC,CACH,CAAA;YACD,MAAM,OAAO,GAAsB,uBAAuB,CAAC;gBACzD,UAAU;gBACV,WAAW;gBACX,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM;oBACjC,UAAU,EACR,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU;wBACrC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAC7B,CAAC,CAAC,MAAM,CAAC,UAAU;oBACvB,KAAK,EAAE,WAAW;oBAClB,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1E;gBACD,UAAU,EAAE;oBACV,UAAU,EAAE,GAAG,GAAG,2CAA2C,eAAe,EAAE;oBAC9E,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,SAAS,EAAE;oBACnC,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;oBACzD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACvE,QAAQ,EAAE;wBACR,IAAI,EAAE,GAAG,GAAG,UAAU;wBACtB,MAAM,EAAE,MAAM;wBACd,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACnC;iBACF;gBACD,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;oBACxC,MAAM,EAAE;wBACN,mBAAmB,EAAE,IAAI,GAAG,IAAI;wBAChC,uBAAuB,EAAE,IAAI,GAAG,IAAI;wBACpC,kBAAkB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;wBACnC,oBAAoB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;wBACrC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,MAAM;qBAC1D;iBACF;aACF,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;gBAC3B,WAAW,EAAE,OAAO;gBACpB,WAAW;aACZ,CAAC,CAAA;YACF,IAAI,YAAY,CAAC,IAAI,IAAI,2BAA2B,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;gBAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBACxC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,IAAI,CAAC;4BACH,MAAM,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;wBACpD,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,OAAO;iCACV,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,4BAA4B,EAAE,CAAC;iCAC9D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;4BACzB,MAAM,KAAK,CAAA;wBACb,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC9B,OAAO,OAAO,CAAA;QAChB,CAAC,CAAA;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,QAAkB,EAAE,gBAAmC;gBACnF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACvC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAA;gBAChD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;oBAC5E,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAA;gBACvC,CAAC;gBACD,MAAM,SAAS,GAAG,mBAAmB,CACnC,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;oBAC/D,QAAQ,CAAC,UAAU;oBACnB,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CACrC,CAAA;gBACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;gBACrE,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;YACtF,CAAC;SACF,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CACrC,WAAuC,EACvC,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,4BAA4B,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,UAA+B,EAC/B,WAAsC,EACtC,GAAQ,EACR,OAAgB;IAEhB,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAA;IACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAiD,CAAA;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxF,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAA;IAClC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,gBAAgB,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,IAAI,GACR,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAC1F,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ,EAAE,OAAgB;IAC/C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,MAAM,CAAA;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC/F,OAAO,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;AACnE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;QACvD,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAA;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAsC;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,wBAAwB,CAAA;IAClD,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EACnB,CAAC;QACD,OAAO,KAAK,CAAC,EAAE,CAAA;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,0BAA0B,CAAA;IACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IACxE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAA;AAC7E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/adapter-cloudflare",
-  "version": "0.4.10",
+  "version": "0.5.0-beta.11",
   "description": "Deploy an Astrale domain as a standalone Cloudflare Worker",
   "keywords": [
     "adapter",
@@ -15,6 +15,7 @@
     "dist",
     "src",
     "template",
+    "!template/node_modules",
     "!template/pnpm-lock.yaml"
   ],
   "type": "module",
@@ -26,14 +27,21 @@
       "import": "./dist/index.js"
     },
     "./build": {
-      "types": "./dist/build.d.ts",
-      "import": "./dist/build.js"
+      "types": "./dist/build/index.d.ts",
+      "import": "./dist/build/index.js"
+    },
+    "./worker": {
+      "types": "./dist/worker/index.d.ts",
+      "import": "./dist/worker/index.js"
     },
     "./package.json": "./package.json"
   },
   "dependencies": {
+    "@astrale-os/kernel-core": ">=0.9.0-beta.3 <1.0.0",
+    "@astrale-os/kernel-dsl": ">=0.2.0-beta.2 <1.0.0",
+    "hono": "^4.6.20",
     "jose": "^6.1.3",
-    "@astrale-os/sdk": "^0.4.19"
+    "@astrale-os/sdk": "^0.5.0-beta.8"
   },
   "devDependencies": {
     "@astrale-os/ox": ">=0.1.0 <1.0.0",
@@ -43,7 +51,7 @@
     "oxlint": "latest",
     "typescript": "~6.0.1-rc",
     "vitest": "^3.0.0",
-    "wrangler": "4.106.0"
+    "wrangler": "4.121.0"
   },
   "engines": {
     "node": ">=22"

package/src/build/codegen/worker.ts

@@ -0,0 +1,53 @@
+/** Codegen for the Cloudflare module entry owned by the adapter. */
+
+export interface WorkerCodegenOptions {
+  readonly origin: string
+  /** Optional same-zone routing service selected by the adapter environment. */
+  readonly router?: {
+    readonly binding: string
+    readonly hostSuffix: string
+    readonly minLabels: number
+  }
+}
+
+export function generateWorkerEntry(options: WorkerCodegenOptions): string {
+  const router = options.router
+  const routerPredicate =
+    router === undefined
+      ? ''
+      : `
+function isInstanceHost(host: string): boolean {
+  return host.endsWith('${router.hostSuffix}') && host.split('.').length >= ${router.minLabels}
+}
+`
+  const routeSubrequest =
+    router === undefined
+      ? ''
+      : `
+  routeSubrequest: (url, env) => {
+    const labels = url.hostname.split('.')
+    if (env.DISPATCHER && labels[1] === 'svc') return env.DISPATCHER.get(labels[0]!)
+    if (env.${router.binding} && isInstanceHost(url.hostname)) return env.${router.binding}
+    return null
+  },`
+
+  return `// AUTO-GENERATED by @astrale-os/adapter-cloudflare — do not edit.
+// Regenerated by every Astrale Domain build, dev, and deploy operation.
+// Domain origin: ${options.origin}
+import type { CloudflareAdapterBindings } from '@astrale-os/adapter-cloudflare/worker'
+import type { ApplicationEnvironment } from '../implementation.js'
+
+import { cloudflareWorkerEntry } from '@astrale-os/adapter-cloudflare/worker'
+import { domain } from '../implementation.js'
+import { PRIVATE_JWK } from './identity.js'
+
+type WorkerEnv = CloudflareEnv & ApplicationEnvironment & CloudflareAdapterBindings
+${routerPredicate}
+export default cloudflareWorkerEntry<WorkerEnv>()({
+  definition: domain,
+  privateKey: PRIVATE_JWK,
+  resolveUrl: (env, requestOrigin) => env.WORKER_URL ?? requestOrigin,
+  selfBinding: (env) => env.SELF,${routeSubrequest}
+})
+`
+}

package/src/{codegen → build/codegen}/wrangler.ts

@@ -4,7 +4,7 @@
  * internal adapter detail the dev never sees.
  *
  * `main` is `./worker.gen.ts` (same dir). `assets.directory` points at the
- * project's Vite build (`CLIENT_DIST_DIR`). A `SELF` service binding enables autobinding
+ * adapter's materialized frontend stage. A `SELF` service binding enables autobinding
  * (a handler calling back into its own domain). Custom-domain deploys attach a
  * `custom_domain` route; otherwise the Worker ships to `*.workers.dev`.
  *
@@ -12,15 +12,17 @@
  * (extra bindings: KV, R2, D1, queues, …) — see `mergeUserConfig`.
  */
 
-import { CLIENT_DIST_DIR } from '../client'
-import { deepMergeConfig } from './merge'
+import { deepMergeConfig } from './merge.js'
 
 export interface WranglerCodegenOptions {
   workerName: string
   /** Full custom hostname for a routed deploy (e.g. 'crm.acme.dev'). */
   route?: string
-  /** Whether the project has a built client SPA to serve under /ui/*. */
-  hasClient: boolean
+  /** Exact materialized local frontend; absence means no ASSETS binding. */
+  frontend?: {
+    readonly directory: string
+    readonly routes: readonly string[]
+  }
   /** Plain (non-secret) vars to bake in. */
   vars?: Record<string, string>
   /** Add the SELF service binding (autobinding). */
@@ -41,15 +43,17 @@ export interface WranglerCodegenOptions {
   wrangler?: Record<string, unknown>
 }
 
-const COMPATIBILITY_DATE = '2026-07-07'
+// Wrangler 4.121.0's pinned workerd accepts dates through 2026-08-11.
+const COMPATIBILITY_DATE = '2026-08-11'
 
 export function generateWranglerConfig(opts: WranglerCodegenOptions): string {
   const config: Record<string, unknown> = {
     name: opts.workerName,
     main: './worker.gen.ts',
     compatibility_date: COMPATIBILITY_DATE,
-    compatibility_flags: ['nodejs_compat', 'nodejs_compat_populate_process_env'],
+    compatibility_flags: ['nodejs_compat'],
     workers_dev: true,
+    version_metadata: { binding: 'ASTRALE_VERSION_METADATA' },
     observability: { enabled: true },
   }
 
@@ -57,12 +61,23 @@ export function generateWranglerConfig(opts: WranglerCodegenOptions): string {
     config.routes = [{ pattern: opts.route, custom_domain: true }]
   }
 
-  if (opts.hasClient) {
+  if (opts.frontend !== undefined) {
     config.assets = {
-      directory: `../${CLIENT_DIST_DIR}`,
+      directory: opts.frontend.directory,
       binding: 'ASSETS',
-      not_found_handling: 'single-page-application',
-      run_worker_first: true,
+      run_worker_first: [
+        '/invoke',
+        '/invoke/*',
+        '/install',
+        '/install/*',
+        '/health',
+        '/health/*',
+        '/meta',
+        '/meta/*',
+        '/.well-known',
+        '/.well-known/*',
+        ...opts.frontend.routes,
+      ],
     }
   }
 
@@ -82,7 +97,14 @@ export function generateWranglerConfig(opts: WranglerCodegenOptions): string {
 }
 
 /** Keys the adapter owns and won't let `params.wrangler` clobber. */
-const ADAPTER_OWNED_KEYS = ['name', 'main', 'assets', 'routes']
+const ADAPTER_OWNED_KEYS = [
+  'name',
+  'main',
+  'assets',
+  'routes',
+  'compatibility_date',
+  'version_metadata',
+]
 
 /**
  * Deep-merge the dev's raw wrangler overlay over the generated config, after