@astrale-os/adapter-cloudflare 0.4.9 → 0.5.0-beta.1

package/dist/worker/index.js

@@ -0,0 +1,186 @@
+import { issuer } from '@astrale-os/kernel-core/auth';
+import { createRemoteApplication } from '@astrale-os/sdk/server';
+import { Hono as HonoApplication } from 'hono';
+const MAXIMUM_CACHED_APPLICATIONS = 4;
+const APPLICATION_CLOSE_TIMEOUT_MS = 5_000;
+/**
+ * Compose one Cloudflare module Worker without request-global mutation.
+ * Environment bindings are captured once per immutable serving URL/version generation.
+ */
+export function cloudflareWorkerEntry() {
+    return function (config) {
+        const applications = new Map();
+        const applicationFor = async (url, bindings) => {
+            const version = deploymentVersion(bindings);
+            const key = `${url}\u0000${version}`;
+            const cached = applications.get(key);
+            if (cached !== undefined)
+                return cached;
+            const environment = config.resolveEnvironment === undefined
+                ? bindings
+                : await config.resolveEnvironment(bindings);
+            const routedFetch = async (input, init) => {
+                const request = new Request(input, init);
+                const destination = new URL(request.url);
+                if (destination.origin === new URL(url).origin) {
+                    const self = config.selfBinding?.(bindings);
+                    if (self !== null && self !== undefined)
+                        return self.fetch(request);
+                    return serving.app.fetch(request, environment);
+                }
+                const route = config.routeSubrequest?.(destination, bindings);
+                return route === null || route === undefined ? fetch(request) : route.fetch(request);
+            };
+            const deploymentQuery = `deployment=${encodeURIComponent(version)}`;
+            const issuerId = issuer.accept(url);
+            const host = new HonoApplication();
+            host.get('/meta', (context) => context.json({
+                origin: config.definition.schema.origin,
+                issuer: issuerId,
+                schemaRevision: config.definition.domain.$.revision,
+                deploymentVersion: version,
+            }));
+            const serving = createRemoteApplication({
+                definition: config.definition,
+                environment,
+                identity: {
+                    issuer: issuerId,
+                    subject: config.definition.schema.origin,
+                    privateKey: typeof config.privateKey === 'function'
+                        ? config.privateKey(bindings)
+                        : config.privateKey,
+                    fetch: routedFetch,
+                    ...(new URL(url).protocol === 'http:' ? { allowInsecureHttp: true } : {}),
+                },
+                deployment: {
+                    bundleHref: `${url}/.well-known/astrale/domain.bundle.json?${deploymentQuery}`,
+                    endpoint: { http: `${url}/invoke` },
+                    ...(config.definition.frontend === undefined
+                        ? {}
+                        : { frontendBaseHref: url, frontendCacheKey: version }),
+                    ...(config.manifest === undefined ? {} : { manifest: config.manifest }),
+                    installation: {
+                        href: `${url}/install`,
+                        method: 'POST',
+                        authentication: { kind: 'public' },
+                    },
+                },
+                app: host,
+                server: {
+                    path: '/invoke',
+                    health: { probe: { check: () => true } },
+                    limits: {
+                        maximumRequestBytes: 1024 * 1024,
+                        maximumPublicationBytes: 1024 * 1024,
+                        maximumBundleBytes: 8 * 1024 * 1024,
+                        maximumInstallationBytes: 8 * 1024 * 1024,
+                        invocationTimeoutMs: 30_000,
+                    },
+                },
+            });
+            const created = Object.freeze({
+                origin: new URL(url).origin,
+                application: serving,
+                environment,
+            });
+            if (applications.size >= MAXIMUM_CACHED_APPLICATIONS) {
+                const oldest = applications.keys().next().value;
+                if (oldest !== undefined) {
+                    const evicted = applications.get(oldest);
+                    applications.delete(oldest);
+                    if (evicted !== undefined) {
+                        try {
+                            await closeEvictedApplication(evicted.application);
+                        }
+                        catch (cause) {
+                            await serving
+                                .close({ deadline: Date.now() + APPLICATION_CLOSE_TIMEOUT_MS })
+                                .catch(() => undefined);
+                            throw cause;
+                        }
+                    }
+                }
+            }
+            applications.set(key, created);
+            return created;
+        };
+        return Object.freeze({
+            async fetch(request, bindings, executionContext) {
+                const requestUrl = new URL(request.url);
+                if (config.definition.frontend !== undefined) {
+                    const asset = await frontendAsset(config.definition, bindings, requestUrl, request);
+                    if (asset !== undefined)
+                        return asset;
+                }
+                const publicUrl = canonicalServingUrl(config.resolveUrl?.(bindings, requestOrigin(requestUrl, request)) ??
+                    bindings.WORKER_URL ??
+                    requestOrigin(requestUrl, request));
+                const serving = await applicationFor(publicUrl, bindings);
+                return serving.application.app.fetch(request, serving.environment, executionContext);
+            },
+        });
+    };
+}
+/** Close an evicted Application before its environment bindings leave the cache. */
+export function closeEvictedApplication(application, now = Date.now) {
+    return application.close({ deadline: now() + APPLICATION_CLOSE_TIMEOUT_MS });
+}
+async function frontendAsset(definition, environment, url, request) {
+    const frontend = definition.frontend;
+    if (frontend === undefined || frontend.source.kind === 'external')
+        return undefined;
+    const routes = frontend.routes;
+    const route = Object.values(routes).find((candidate) => candidate.path === url.pathname);
+    const staticAsset = url.pathname.startsWith('/assets/');
+    if (route === undefined && !staticAsset)
+        return undefined;
+    if (request.method !== 'GET' && request.method !== 'HEAD')
+        return undefined;
+    const binding = environment.ASSETS;
+    if (binding === undefined)
+        return undefined;
+    const dev = environment.FRONTEND_DEV_URL?.replace(/\/+$/u, '');
+    if (dev !== undefined && dev.length > 0) {
+        return fetch(new Request(`${dev}${url.pathname}${url.search}`, request));
+    }
+    const path = route === undefined ? `${url.pathname}${url.search}` : `/${route.document}${url.search}`;
+    return binding.fetch(new Request(new URL(path, url.origin), request));
+}
+function requestOrigin(url, request) {
+    if (url.protocol !== 'http:')
+        return url.origin;
+    const forwarded = request.headers.get('x-forwarded-proto')?.split(',')[0]?.trim().toLowerCase();
+    return forwarded === 'https' ? `https://${url.host}` : url.origin;
+}
+function canonicalServingUrl(input) {
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch (cause) {
+        throw new TypeError('Cloudflare Worker serving URL is invalid.', { cause });
+    }
+    if ((url.protocol !== 'https:' && url.protocol !== 'http:') ||
+        url.username !== '' ||
+        url.password !== '' ||
+        url.pathname !== '/' ||
+        url.search !== '' ||
+        url.hash !== '') {
+        throw new TypeError('Cloudflare Worker serving URL must be one HTTP(S) origin.');
+    }
+    return url.origin;
+}
+function deploymentVersion(environment) {
+    const input = environment.ASTRALE_VERSION_METADATA;
+    if (input !== null &&
+        typeof input === 'object' &&
+        typeof input.id === 'string' &&
+        input.id.length > 0) {
+        return input.id;
+    }
+    const fallback = environment.ASTRALE_DEPLOYMENT_VERSION;
+    if (typeof fallback === 'string' && fallback.length > 0)
+        return fallback;
+    throw new TypeError('Cloudflare Worker deployment version is unavailable.');
+}
+//# sourceMappingURL=index.js.map

package/dist/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAA;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,MAAM,CAAA;AAE9C,MAAM,2BAA2B,GAAG,CAAC,CAAA;AACrC,MAAM,4BAA4B,GAAG,KAAK,CAAA;AA0D1C;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IAKnC,OAAO,UACL,MAA8D;QAE9D,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0C,CAAA;QAEtE,MAAM,cAAc,GAAG,KAAK,EAC1B,GAAW,EACX,QAAkB,EACuB,EAAE;YAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,OAAO,EAAE,CAAA;YACpC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAA;YACvC,MAAM,WAAW,GACf,MAAM,CAAC,kBAAkB,KAAK,SAAS;gBACrC,CAAC,CAAE,QAAmC;gBACtC,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YAE/C,MAAM,WAAW,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAA;oBAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;oBACnE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;gBAChD,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;gBAC7D,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACtF,CAAC,CAAA;YAED,MAAM,eAAe,GAAG,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAA;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACnC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAA;YAClC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAC5B,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;gBACvC,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACnD,iBAAiB,EAAE,OAAO;aAC3B,CAAC,CACH,CAAA;YACD,MAAM,OAAO,GAAsB,uBAAuB,CAAC;gBACzD,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,WAAW;gBACX,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;oBACxC,UAAU,EACR,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU;wBACrC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAC7B,CAAC,CAAC,MAAM,CAAC,UAAU;oBACvB,KAAK,EAAE,WAAW;oBAClB,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1E;gBACD,UAAU,EAAE;oBACV,UAAU,EAAE,GAAG,GAAG,2CAA2C,eAAe,EAAE;oBAC9E,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,SAAS,EAAE;oBACnC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS;wBAC1C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;oBACzD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACvE,YAAY,EAAE;wBACZ,IAAI,EAAE,GAAG,GAAG,UAAU;wBACtB,MAAM,EAAE,MAAM;wBACd,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACnC;iBACF;gBACD,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;oBACxC,MAAM,EAAE;wBACN,mBAAmB,EAAE,IAAI,GAAG,IAAI;wBAChC,uBAAuB,EAAE,IAAI,GAAG,IAAI;wBACpC,kBAAkB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;wBACnC,wBAAwB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;wBACzC,mBAAmB,EAAE,MAAM;qBAC5B;iBACF;aACF,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;gBAC3B,WAAW,EAAE,OAAO;gBACpB,WAAW;aACZ,CAAC,CAAA;YACF,IAAI,YAAY,CAAC,IAAI,IAAI,2BAA2B,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;gBAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBACxC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,IAAI,CAAC;4BACH,MAAM,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;wBACpD,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,OAAO;iCACV,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,4BAA4B,EAAE,CAAC;iCAC9D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;4BACzB,MAAM,KAAK,CAAA;wBACb,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC9B,OAAO,OAAO,CAAA;QAChB,CAAC,CAAA;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,QAAkB,EAAE,gBAAmC;gBACnF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACvC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC7C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;oBACnF,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAA;gBACvC,CAAC;gBACD,MAAM,SAAS,GAAG,mBAAmB,CACnC,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;oBAC/D,QAAQ,CAAC,UAAU;oBACnB,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CACrC,CAAA;gBACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;gBACzD,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;YACtF,CAAC;SACF,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CACrC,WAAuC,EACvC,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,4BAA4B,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,UAAkD,EAClD,WAAsC,EACtC,GAAQ,EACR,OAAgB;IAEhB,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAA;IACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAiD,CAAA;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxF,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAA;IAClC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,gBAAgB,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,IAAI,GACR,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAC1F,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ,EAAE,OAAgB;IAC/C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,MAAM,CAAA;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC/F,OAAO,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;AACnE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;QACvD,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAA;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAsC;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,wBAAwB,CAAA;IAClD,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EACnB,CAAC;QACD,OAAO,KAAK,CAAC,EAAE,CAAA;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,0BAA0B,CAAA;IACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IACxE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAA;AAC7E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/adapter-cloudflare",
-  "version": "0.4.9",
+  "version": "0.5.0-beta.1",
   "description": "Deploy an Astrale domain as a standalone Cloudflare Worker",
   "keywords": [
     "adapter",
@@ -15,6 +15,7 @@
     "dist",
     "src",
     "template",
+    "!template/node_modules",
     "!template/pnpm-lock.yaml"
   ],
   "type": "module",
@@ -26,14 +27,21 @@
       "import": "./dist/index.js"
     },
     "./build": {
-      "types": "./dist/build.d.ts",
-      "import": "./dist/build.js"
+      "types": "./dist/build/index.d.ts",
+      "import": "./dist/build/index.js"
+    },
+    "./worker": {
+      "types": "./dist/worker/index.d.ts",
+      "import": "./dist/worker/index.js"
     },
     "./package.json": "./package.json"
   },
   "dependencies": {
+    "@astrale-os/kernel-core": "0.9.0-beta.1",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.1",
+    "hono": "^4.6.20",
     "jose": "^6.1.3",
-    "@astrale-os/sdk": "^0.4.15"
+    "@astrale-os/sdk": "^0.5.0-beta.1"
   },
   "devDependencies": {
     "@astrale-os/ox": ">=0.1.0 <1.0.0",
@@ -43,7 +51,7 @@
     "oxlint": "latest",
     "typescript": "~6.0.1-rc",
     "vitest": "^3.0.0",
-    "wrangler": "4.106.0"
+    "wrangler": "4.121.0"
   },
   "engines": {
     "node": ">=22"

package/src/build/codegen/worker.ts

@@ -0,0 +1,53 @@
+/** Codegen for the Cloudflare module entry owned by the adapter. */
+
+export interface WorkerCodegenOptions {
+  readonly origin: string
+  /** Optional same-zone routing service selected by the adapter environment. */
+  readonly router?: {
+    readonly binding: string
+    readonly hostSuffix: string
+    readonly minLabels: number
+  }
+}
+
+export function generateWorkerEntry(options: WorkerCodegenOptions): string {
+  const router = options.router
+  const routerPredicate =
+    router === undefined
+      ? ''
+      : `
+function isInstanceHost(host: string): boolean {
+  return host.endsWith('${router.hostSuffix}') && host.split('.').length >= ${router.minLabels}
+}
+`
+  const routeSubrequest =
+    router === undefined
+      ? ''
+      : `
+  routeSubrequest: (url, env) => {
+    const labels = url.hostname.split('.')
+    if (env.DISPATCHER && labels[1] === 'svc') return env.DISPATCHER.get(labels[0]!)
+    if (env.${router.binding} && isInstanceHost(url.hostname)) return env.${router.binding}
+    return null
+  },`
+
+  return `// AUTO-GENERATED by @astrale-os/adapter-cloudflare — do not edit.
+// Regenerated by every Astrale Domain build, dev, and deploy operation.
+// Domain origin: ${options.origin}
+import type { CloudflareAdapterBindings } from '@astrale-os/adapter-cloudflare/worker'
+import type { ApplicationEnvironment } from '../implementation.js'
+
+import { cloudflareWorkerEntry } from '@astrale-os/adapter-cloudflare/worker'
+import { domain } from '../implementation.js'
+import { PRIVATE_JWK } from './identity.js'
+
+type WorkerEnv = CloudflareEnv & ApplicationEnvironment & CloudflareAdapterBindings
+${routerPredicate}
+export default cloudflareWorkerEntry<WorkerEnv>()({
+  definition: domain,
+  privateKey: PRIVATE_JWK,
+  resolveUrl: (env, requestOrigin) => env.WORKER_URL ?? requestOrigin,
+  selfBinding: (env) => env.SELF,${routeSubrequest}
+})
+`
+}

package/src/{codegen → build/codegen}/wrangler.ts

@@ -4,7 +4,7 @@
  * internal adapter detail the dev never sees.
  *
  * `main` is `./worker.gen.ts` (same dir). `assets.directory` points at the
- * project's Vite build (`CLIENT_DIST_DIR`). A `SELF` service binding enables autobinding
+ * adapter's materialized frontend stage. A `SELF` service binding enables autobinding
  * (a handler calling back into its own domain). Custom-domain deploys attach a
  * `custom_domain` route; otherwise the Worker ships to `*.workers.dev`.
  *
@@ -12,15 +12,17 @@
  * (extra bindings: KV, R2, D1, queues, …) — see `mergeUserConfig`.
  */
 
-import { CLIENT_DIST_DIR } from '../client'
-import { deepMergeConfig } from './merge'
+import { deepMergeConfig } from './merge.js'
 
 export interface WranglerCodegenOptions {
   workerName: string
   /** Full custom hostname for a routed deploy (e.g. 'crm.acme.dev'). */
   route?: string
-  /** Whether the project has a built client SPA to serve under /ui/*. */
-  hasClient: boolean
+  /** Exact materialized local frontend; absence means no ASSETS binding. */
+  frontend?: {
+    readonly directory: string
+    readonly routes: readonly string[]
+  }
   /** Plain (non-secret) vars to bake in. */
   vars?: Record<string, string>
   /** Add the SELF service binding (autobinding). */
@@ -41,15 +43,17 @@ export interface WranglerCodegenOptions {
   wrangler?: Record<string, unknown>
 }
 
-const COMPATIBILITY_DATE = '2026-07-07'
+// Wrangler 4.121.0's pinned workerd accepts dates through 2026-08-11.
+const COMPATIBILITY_DATE = '2026-08-11'
 
 export function generateWranglerConfig(opts: WranglerCodegenOptions): string {
   const config: Record<string, unknown> = {
     name: opts.workerName,
     main: './worker.gen.ts',
     compatibility_date: COMPATIBILITY_DATE,
-    compatibility_flags: ['nodejs_compat', 'nodejs_compat_populate_process_env'],
+    compatibility_flags: ['nodejs_compat'],
     workers_dev: true,
+    version_metadata: { binding: 'ASTRALE_VERSION_METADATA' },
     observability: { enabled: true },
   }
 
@@ -57,12 +61,23 @@ export function generateWranglerConfig(opts: WranglerCodegenOptions): string {
     config.routes = [{ pattern: opts.route, custom_domain: true }]
   }
 
-  if (opts.hasClient) {
+  if (opts.frontend !== undefined) {
     config.assets = {
-      directory: `../${CLIENT_DIST_DIR}`,
+      directory: opts.frontend.directory,
       binding: 'ASSETS',
-      not_found_handling: 'single-page-application',
-      run_worker_first: true,
+      run_worker_first: [
+        '/invoke',
+        '/invoke/*',
+        '/install',
+        '/install/*',
+        '/health',
+        '/health/*',
+        '/meta',
+        '/meta/*',
+        '/.well-known',
+        '/.well-known/*',
+        ...opts.frontend.routes,
+      ],
     }
   }
 
@@ -82,7 +97,14 @@ export function generateWranglerConfig(opts: WranglerCodegenOptions): string {
 }
 
 /** Keys the adapter owns and won't let `params.wrangler` clobber. */
-const ADAPTER_OWNED_KEYS = ['name', 'main', 'assets', 'routes']
+const ADAPTER_OWNED_KEYS = [
+  'name',
+  'main',
+  'assets',
+  'routes',
+  'compatibility_date',
+  'version_metadata',
+]
 
 /**
  * Deep-merge the dev's raw wrangler overlay over the generated config, after