@astrale-os/adapter-cloudflare 0.5.0-beta.52 → 0.5.0-beta.54

package/dist/adapter.js

@@ -92,6 +92,7 @@ export function cloudflareWithDependencies(environments, dependencies) {
                     remote: parameters.remote ?? false,
                     secrets,
                     autoPickPort: parameters.port === undefined,
+                    pinLocalOrigin: parameters.host === undefined && parameters.remote !== true,
                     ...(parameters.host === undefined ? {} : { ip: '0.0.0.0' }),
                     onReload: context.onReload,
                 });

package/dist/build/worker/codegen/service.d.ts

@@ -1,9 +1,9 @@
-import type { BuildMaterial } from '@astrale-os/sdk/deployment/build';
+import type { Build } from '@astrale-os/sdk/deployment/build';
 export interface ExecutionCodegenOptions {
     readonly origin: string;
     readonly runtimeSpecifier: string;
     readonly workerSpecifier?: string;
-    readonly material: BuildMaterial;
+    readonly build: Build;
     readonly maximumRequestBytes?: number;
     readonly providerAssignedWorker?: string;
     readonly router?: {

package/dist/build/worker/codegen/service.js

@@ -1,5 +1,7 @@
+import { generatedMaterial } from '@astrale-os/sdk/deployment/build';
 export function generateExecutionService(options) {
     const workerSpecifier = options.workerSpecifier ?? '@astrale-os/adapter-cloudflare/worker';
+    const generated = generatedMaterial(options.build);
     const router = options.router;
     const routerPredicate = router === undefined
         ? ''
@@ -17,15 +19,15 @@ function isInstanceHost(host: string): boolean {
     if (env.${router.binding} && isInstanceHost(url.hostname)) return env.${router.binding}
     return null
   },`;
-    const frontend = options.material.frontend === undefined
+    const frontend = generated.material.frontend === undefined
         ? ''
-        : `  frontend: ${JSON.stringify(options.material.frontend)} as const satisfies NonNullable<BuildMaterial['frontend']>,\n`;
+        : `  frontend: ${JSON.stringify(generated.material.frontend)} as const satisfies NonNullable<BuildMaterial['frontend']>,\n`;
     return `// AUTO-GENERATED by @astrale-os/adapter-cloudflare — do not edit.
 // Domain origin: ${options.origin}
-import type { BuildMaterial } from '@astrale-os/sdk/deployment/build'
+import type { BuildMaterial, GeneratedBuildMaterial } from '@astrale-os/sdk/deployment/build'
 import type { CloudflareAdapterBindings } from ${JSON.stringify(workerSpecifier)}
 
-import { cloudflareWorkerEntry } from ${JSON.stringify(workerSpecifier)}
+import { generatedCloudflareWorkerEntry } from ${JSON.stringify(workerSpecifier)}
 import { decodeSigningIdentity, runtimeBindings } from ${JSON.stringify(workerSpecifier)}
 
 type WorkerEnv = CloudflareEnv & CloudflareAdapterBindings & {
@@ -33,10 +35,10 @@ type WorkerEnv = CloudflareEnv & CloudflareAdapterBindings & {
 }
 type RuntimeEnv = Omit<WorkerEnv, 'ASTRALE_SIGNING_IDENTITY'>
 ${routerPredicate}
-export default cloudflareWorkerEntry<WorkerEnv, RuntimeEnv>()({
+export default generatedCloudflareWorkerEntry<WorkerEnv, RuntimeEnv>()({
 ${frontend}  load: async () => ({
     runtime: (await import(${JSON.stringify(options.runtimeSpecifier)})).default,
-    material: ${JSON.stringify(options.material)} as const satisfies BuildMaterial,
+    material: ${JSON.stringify(generated)} as unknown as GeneratedBuildMaterial,
   }),
   privateKey: (env) => decodeSigningIdentity(env.ASTRALE_SIGNING_IDENTITY),
   resolveEnvironment: runtimeBindings,

package/dist/build/worker/execution.prepare.js

@@ -1,4 +1,3 @@
-import { material } from '@astrale-os/sdk/deployment/build';
 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { dirname, join, relative, resolve } from 'node:path';
 import { SIGNING_IDENTITY_BINDING } from '../../identity/binding.js';
@@ -20,7 +19,7 @@ export async function prepareExecution(input) {
         origin: input.context.build.schema.compiled.root.origin,
         runtimeSpecifier,
         workerSpecifier,
-        material: material(input.context.build),
+        build: input.context.build,
         ...(maximumRequestBytes === undefined ? {} : { maximumRequestBytes }),
         ...(input.configuredIssuer === undefined && input.direct
             ? { providerAssignedWorker: input.name }

package/dist/build/wrangler/development.d.ts

@@ -9,6 +9,8 @@ export declare function runWranglerDev(args: {
     remote: boolean;
     readonly ip?: string;
     readonly autoPickPort?: boolean;
+    /** Pin ordinary local requests to one stable issuer after the final port is selected. */
+    readonly pinLocalOrigin?: boolean;
     readonly secrets: Readonly<Record<string, string>>;
     readonly onReload: () => void;
     readonly onLog?: (line: string) => void;

package/dist/build/wrangler/development.js

@@ -15,6 +15,7 @@ export async function runWranglerDev(args) {
     }
     const secretEnvironment = await createSecretEnvironment(args.secrets);
     const redact = secretRedactor(args.secrets);
+    const fallbackUrl = `http://localhost:${args.port}`;
     const wranglerArgs = [
         ...prefix,
         'dev',
@@ -26,6 +27,7 @@ export async function runWranglerDev(args) {
         'http',
         '--ip',
         args.ip ?? '127.0.0.1',
+        ...(args.pinLocalOrigin ? ['--var', `WORKER_URL:${fallbackUrl}`] : []),
         ...(secretEnvironment === undefined ? [] : ['--env-file', secretEnvironment.path]),
         ...(args.remote ? ['--remote'] : []),
     ];
@@ -41,7 +43,6 @@ export async function runWranglerDev(args) {
         await secretEnvironment?.remove();
         throw cause;
     }
-    const fallbackUrl = `http://localhost:${args.port}`;
     let resolved = false;
     let buildErrorTail = '';
     let outputTail = '';
@@ -103,7 +104,7 @@ export async function runWranglerDev(args) {
         throw cause;
     }
     return {
-        url,
+        url: args.pinLocalOrigin ? fallbackUrl : url,
         async stop() {
             try {
                 await stopChild(child);

package/dist/worker/entry.d.ts

@@ -1,5 +1,5 @@
 import type { JsonWebKey } from '@astrale-os/sdk/auth';
-import type { BuildMaterial } from '@astrale-os/sdk/deployment/build/material';
+import type { BuildMaterial, GeneratedBuildMaterial } from '@astrale-os/sdk/deployment/build/material';
 import type { ExecutionContext } from '@astrale-os/sdk/execution';
 import type { Runtime } from '@astrale-os/sdk/runtime';
 export interface Fetcher {
@@ -16,11 +16,11 @@ export interface CloudflareAdapterBindings {
         get(name: string): Fetcher;
     };
 }
-export interface CloudflareWorkerConfig<RuntimeValue extends Runtime, Bindings extends CloudflareAdapterBindings, Environment> {
+export interface CloudflareWorkerConfig<RuntimeValue extends Runtime, Bindings extends CloudflareAdapterBindings, Environment, Material = BuildMaterial> {
     /** Generated frontend evidence available without restoring the execution Build. */
     readonly frontend?: BuildMaterial['frontend'];
     /** Load the exact Runtime and Build once, after the isolate has accepted a request. */
-    readonly load: () => CloudflareWorkerSource<RuntimeValue> | Promise<CloudflareWorkerSource<RuntimeValue>>;
+    readonly load: () => CloudflareWorkerSource<RuntimeValue, Material> | Promise<CloudflareWorkerSource<RuntimeValue, Material>>;
     readonly privateKey: JsonWebKey | ((bindings: Bindings) => JsonWebKey);
     readonly resolveEnvironment?: (bindings: Bindings) => Environment;
     readonly resolveUrl?: (bindings: Bindings, requestOrigin: string) => string;
@@ -30,12 +30,14 @@ export interface CloudflareWorkerConfig<RuntimeValue extends Runtime, Bindings e
     readonly invocationTimeoutMs?: number;
     readonly maximumRequestBytes?: number;
 }
-export interface CloudflareWorkerSource<RuntimeValue extends Runtime> {
+export interface CloudflareWorkerSource<RuntimeValue extends Runtime, Material = BuildMaterial> {
     readonly runtime: RuntimeValue;
-    readonly material: BuildMaterial;
+    readonly material: Material;
 }
 export interface CloudflareWorker<Bindings> {
     fetch(request: Request, environment: Bindings, executionContext?: ExecutionContext): Response | Promise<Response>;
 }
 /** Compose one exact revision Service; the provider gateway owns revision selection. */
-export declare function cloudflareWorkerEntry<Bindings extends CloudflareAdapterBindings, Environment = Bindings>(): <RuntimeValue extends Runtime>(config: CloudflareWorkerConfig<RuntimeValue, Bindings, Environment>) => CloudflareWorker<Bindings>;
+export declare function cloudflareWorkerEntry<Bindings extends CloudflareAdapterBindings, Environment = Bindings>(): <RuntimeValue extends Runtime>(config: CloudflareWorkerConfig<RuntimeValue, Bindings, Environment, BuildMaterial>) => CloudflareWorker<Bindings>;
+/** Compose generated execution code whose exact Build material carries build-owner evidence. */
+export declare function generatedCloudflareWorkerEntry<Bindings extends CloudflareAdapterBindings, Environment = Bindings>(): <RuntimeValue extends Runtime>(config: CloudflareWorkerConfig<RuntimeValue, Bindings, Environment, GeneratedBuildMaterial>) => CloudflareWorker<Bindings>;

package/dist/worker/entry.js

@@ -1,10 +1,17 @@
 import { issuer } from '@astrale-os/sdk/auth';
-import { restoreBuild } from '@astrale-os/sdk/deployment/build/material';
+import { restoreBuild, restoreGeneratedBuild } from '@astrale-os/sdk/deployment/build/material';
 import { addressing, assemble } from '@astrale-os/sdk/deployment/release/runtime';
 import { createIdentity, serve } from '@astrale-os/sdk/execution';
 import { dispatchCloudflareRequest, prepareCloudflareRequest } from './fetch.js';
 /** Compose one exact revision Service; the provider gateway owns revision selection. */
 export function cloudflareWorkerEntry() {
+    return createCloudflareWorkerEntry(restoreBuild);
+}
+/** Compose generated execution code whose exact Build material carries build-owner evidence. */
+export function generatedCloudflareWorkerEntry() {
+    return createCloudflareWorkerEntry(restoreGeneratedBuild);
+}
+function createCloudflareWorkerEntry(restore) {
     return function (config) {
         let currentIssuer;
         let realized;
@@ -14,7 +21,7 @@ export function cloudflareWorkerEntry() {
             realized = Promise.resolve()
                 .then(config.load)
                 .then((source) => {
-                const build = restoreBuild(source.material, source.runtime);
+                const build = restore(source.material, source.runtime);
                 const application = serve({
                     runtime: source.runtime,
                     load(environment) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/adapter-cloudflare",
-  "version": "0.5.0-beta.52",
+  "version": "0.5.0-beta.54",
   "description": "Deploy an Astrale application through Cloudflare Workers",
   "keywords": [
     "adapter",
@@ -45,7 +45,7 @@
     "hono": "^4.6.20",
     "jose": "^6.1.3",
     "wrangler": "4.123.0",
-    "@astrale-os/sdk": "0.5.0-beta.49"
+    "@astrale-os/sdk": "0.5.0-beta.51"
   },
   "devDependencies": {
     "@astrale-os/ox": ">=0.1.0 <1.0.0",
@@ -60,7 +60,7 @@
     "node": ">=22"
   },
   "scripts": {
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p __tests__/tsconfig.types.json",
     "test": "vitest run",
     "lint": "oxlint --disable-nested-config .",
     "format": "pnpm exec oxfmt --write .",