@lunora/runtime 1.0.0-alpha.26 → 1.0.0-alpha.27

package/dist/index.d.mts

@@ -2348,6 +2348,17 @@ interface WorkerOptions {
   */
   vectorIntrospector?: VectorIntrospector;
   /**
+  * Voice-session Durable Object namespaces, keyed by the agent's
+  * `lunora/agents.ts` export name (e.g. `{ support: env.VOICE_SUPPORT }`).
+  * Codegen wires this for every voice-enabled agent. When set, the worker
+  * exposes `/_lunora/voice/<agentExportName>` — a WebSocket upgrade that
+  * resolves the caller's identity, forwards it on the server-minted
+  * `x-lunora-userid` / `x-lunora-identity` headers, and hands the socket to
+  * the agent's `VoiceSessionDO`. Omit it (voice-free apps) and the route does
+  * not exist.
+  */
+  voiceAgents?: Record<string, ShardNamespaceLike>;
+  /**
   * Resolver for the Cloudflare Workflows REST client, built from the
   * deployment `env` (its `CLOUDFLARE_ACCOUNT_ID` / `CLOUDFLARE_API_TOKEN`).
   * Set by the codegen-emitted worker entry (which depends on

package/dist/index.d.ts

@@ -2348,6 +2348,17 @@ interface WorkerOptions {
   */
   vectorIntrospector?: VectorIntrospector;
   /**
+  * Voice-session Durable Object namespaces, keyed by the agent's
+  * `lunora/agents.ts` export name (e.g. `{ support: env.VOICE_SUPPORT }`).
+  * Codegen wires this for every voice-enabled agent. When set, the worker
+  * exposes `/_lunora/voice/<agentExportName>` — a WebSocket upgrade that
+  * resolves the caller's identity, forwards it on the server-minted
+  * `x-lunora-userid` / `x-lunora-identity` headers, and hands the socket to
+  * the agent's `VoiceSessionDO`. Omit it (voice-free apps) and the route does
+  * not exist.
+  */
+  voiceAgents?: Record<string, ShardNamespaceLike>;
+  /**
   * Resolver for the Cloudflare Workflows REST client, built from the
   * deployment `env` (its `CLOUDFLARE_ACCOUNT_ID` / `CLOUDFLARE_API_TOKEN`).
   * Set by the codegen-emitted worker entry (which depends on

package/dist/index.mjs

@@ -1,5 +1,5 @@
 export { toAirbyteMessages, toFivetranResponse } from './packem_shared/toAirbyteMessages-DrHdplb4.mjs';
-export { composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker } from './packem_shared/composeWorker-BMxMYwKq.mjs';
+export { composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker } from './packem_shared/composeWorker-UZKPkF3Q.mjs';
 export { createCrossShardRelationCapabilities } from './packem_shared/createCrossShardRelationCapabilities-CbcWjkAn.mjs';
 export { DEFAULT_REGISTRY_CACHE_TTL_MS, SHARD_REGISTRY_DO_NAME, createDynamicShardRegistry } from './packem_shared/DEFAULT_REGISTRY_CACHE_TTL_MS-B3pA7aXp.mjs';
 export { LunoraError, toErrorResponse } from './packem_shared/LunoraError-Bpb9EFJ3.mjs';

package/dist/packem_shared/{composeWorker-BMxMYwKq.mjs → composeWorker-UZKPkF3Q.mjs}

@@ -1917,12 +1917,24 @@ const NDJSON_ENCODER = new TextEncoder();
 const RPC_PATH = "/_lunora/rpc";
 const RPC_BATCH_PATH = "/_lunora/rpc-batch";
 const WS_PATH = "/_lunora/ws";
+const VOICE_PATH_PREFIX = "/_lunora/voice/";
 const SCHEDULER_DISPATCH_PATH = "/_lunora/scheduler/dispatch";
 const CRON_JOBS_RUN_PATH = "/_lunora/admin/cron-jobs/run";
 const ADMIN_PATH_PREFIX = "/_lunora/admin/";
 const MIGRATE_PATH = "/_lunora/migrate";
 const STATUS_PATH = "/_lunora/status";
 const isAdminPath = (pathname) => pathname.startsWith(ADMIN_PATH_PREFIX) || pathname === MIGRATE_PATH;
+const readForwardedIdentity = (request) => {
+  const forwardedUserId = request.headers.get("x-lunora-userid");
+  const forwardedIdentity = request.headers.get("x-lunora-identity");
+  if (forwardedUserId === null && forwardedIdentity === null) {
+    return void 0;
+  }
+  return {
+    ...forwardedIdentity === null ? {} : { identity: forwardedIdentity },
+    ...forwardedUserId === null ? {} : { userId: forwardedUserId }
+  };
+};
 const DEFAULT_AUTH_BASE_PATH = "/api/auth";
 const RECORD_AUTH_EVENT_OP = "__lunora_admin__:recordAuthEvent";
 const AUTH_ATTEMPT_SEGMENTS = ["/sign-in", "/sign-up", "/callback"];
@@ -2240,7 +2252,7 @@ const createWorker = (options) => {
     resolveForwardContext: resolveAdminForwardContext,
     shardDO
   });
-  const dispatchToShard = async (functionPath, args, shardKey, mutationId) => {
+  const dispatchToShard = async (functionPath, args, shardKey, mutationId, forwardedIdentity) => {
     if (options.authorizeShard) {
       const allowed = await options.authorizeShard(null, shardKey);
       if (!allowed) {
@@ -2248,6 +2260,12 @@ const createWorker = (options) => {
       }
     }
     const headers = { "content-type": "application/json", "x-lunora-system": "1" };
+    if (forwardedIdentity?.userId !== void 0 && forwardedIdentity.userId.length > 0) {
+      headers["x-lunora-userid"] = forwardedIdentity.userId;
+    }
+    if (forwardedIdentity?.identity !== void 0 && forwardedIdentity.identity.length > 0) {
+      headers["x-lunora-identity"] = forwardedIdentity.identity;
+    }
     if (mutationId !== void 0 && mutationId.length > 0) {
       headers["x-lunora-mutation-id"] = mutationId;
     }
@@ -2258,16 +2276,17 @@ const createWorker = (options) => {
     });
     return forwardToShard(shardDO, shardKey, forwarded);
   };
-  const startCronWorkflow = async (binding, job, env) => {
+  const startWorkflowInstance = async (binding, args, env, label) => {
     const candidate = env?.[binding];
     if (!candidate || typeof candidate.create !== "function") {
-      throw new LunoraError(`cron job "${job.name}" targets workflow binding "${binding}", which is not bound on env`, {
+      throw new LunoraError(`${label} targets workflow binding "${binding}", which is not bound on env`, {
         code: "CRON_JOB_FAILED",
         status: 500
       });
     }
-    await candidate.create({ params: job.args ?? {} });
+    await candidate.create({ params: args });
   };
+  const startCronWorkflow = async (binding, job, env) => startWorkflowInstance(binding, job.args ?? {}, env, `cron job "${job.name}"`);
   const runOneCronJob = async (job, env) => {
     if (job.workflow) {
       await startCronWorkflow(job.workflow, job, env);
@@ -2364,13 +2383,18 @@ const createWorker = (options) => {
       throw new LunoraError("Scheduler dispatch body must be valid JSON", { code: "BAD_REQUEST", status: 400 });
     }
     const candidate = body ?? {};
+    const args = candidate.args ?? {};
+    if (typeof candidate.workflow === "string" && candidate.workflow.length > 0) {
+      await startWorkflowInstance(candidate.workflow, args, env, "scheduled workflow");
+      return Response.json({ ok: true }, { status: 200 });
+    }
     if (typeof candidate.functionPath !== "string" || candidate.functionPath.length === 0) {
       throw new LunoraError("Scheduler dispatch is missing `functionPath`", { code: "BAD_REQUEST", status: 400 });
     }
-    const args = candidate.args ?? {};
     const shardKey = typeof candidate.shardKey === "string" && candidate.shardKey.length > 0 ? candidate.shardKey : defaultShard;
     const mutationId = typeof candidate.id === "string" && candidate.id.length > 0 ? candidate.id : void 0;
-    const response = await dispatchToShard(candidate.functionPath, args, shardKey, mutationId);
+    const identity = readForwardedIdentity(request);
+    const response = await dispatchToShard(candidate.functionPath, args, shardKey, mutationId, identity);
     await releasePoolSlot(candidate);
     return response;
   };
@@ -2563,6 +2587,59 @@ const createWorker = (options) => {
     }
     return forwardToShard(shardDO, shardKey, new Request(request, { headers: upgradeHeaders }));
   };
+  const handleVoiceUpgrade = async (request, env, url) => {
+    const { voiceAgents } = options;
+    if (voiceAgents === void 0) {
+      return new Response("Not found", { status: 404 });
+    }
+    if (request.headers.get("Upgrade") !== "websocket") {
+      return new Response("Expected a WebSocket upgrade", { headers: { allow: "GET" }, status: 426 });
+    }
+    const blockedUpgrade = enforceWebSocketOrigin(request, resolvedSecurity);
+    if (blockedUpgrade) {
+      return blockedUpgrade;
+    }
+    let agentName;
+    try {
+      agentName = decodeURIComponent(url.pathname.slice(VOICE_PATH_PREFIX.length));
+    } catch {
+      return new Response("Unknown voice agent", { status: 404 });
+    }
+    const namespace = Object.hasOwn(voiceAgents, agentName) ? voiceAgents[agentName] : void 0;
+    if (namespace === void 0) {
+      return new Response("Unknown voice agent", { status: 404 });
+    }
+    const threadKey = url.searchParams.get("threadKey");
+    if (threadKey === null || threadKey.length === 0) {
+      return new Response("Missing threadKey", { status: 400 });
+    }
+    const { headers: forwardedHeaders, identity } = await resolveForwardContext(request, env, publicResolveIdentity);
+    if (options.authorizeShard) {
+      const allowed = await options.authorizeShard(identity, threadKey);
+      if (!allowed) {
+        return new Response("Forbidden", { status: 403 });
+      }
+    } else {
+      guardUnauthenticatedShardAccess("shard");
+    }
+    const upgradeHeaders = new Headers(request.headers);
+    upgradeHeaders.delete("x-lunora-userid");
+    upgradeHeaders.delete("x-lunora-identity");
+    upgradeHeaders.delete("x-lunora-identity-exp");
+    const forwardedUserId = forwardedHeaders["x-lunora-userid"];
+    const forwardedIdentity = forwardedHeaders["x-lunora-identity"];
+    const forwardedExp = forwardedHeaders["x-lunora-identity-exp"];
+    if (forwardedUserId !== void 0) {
+      upgradeHeaders.set("x-lunora-userid", forwardedUserId);
+    }
+    if (forwardedIdentity !== void 0) {
+      upgradeHeaders.set("x-lunora-identity", forwardedIdentity);
+    }
+    if (forwardedExp !== void 0) {
+      upgradeHeaders.set("x-lunora-identity-exp", forwardedExp);
+    }
+    return forwardToShard(namespace, threadKey, new Request(request, { headers: upgradeHeaders }));
+  };
   const authorizeFanOutEnvelope = async (fanOut, functionPath, identity) => {
     if (options.authorizeFanOut) {
       const allowed = await options.authorizeFanOut(identity, fanOut.table, functionPath);
@@ -3091,6 +3168,9 @@ const createWorker = (options) => {
       await applyAdminGate(request, url.pathname);
       return internalRoute(request, env, url, context);
     }
+    if (options.voiceAgents !== void 0 && url.pathname.startsWith(VOICE_PATH_PREFIX)) {
+      return handleVoiceUpgrade(request, env, url);
+    }
     const httpRouteResponse = await dispatchHttpRoute(request, env, context);
     if (httpRouteResponse) {
       return httpRouteResponse;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/runtime",
-  "version": "1.0.0-alpha.26",
+  "version": "1.0.0-alpha.27",
   "description": "Lunora Worker runtime: the RPC router, shard resolver, and query coordinator",
   "keywords": [
     "cloudflare",