@substrat-run/adapter-cloudflare 0.2.0

package/dist/scope-do.js

@@ -0,0 +1,339 @@
+import { DurableObject } from 'cloudflare:workers';
+import { domainEvent, domainEventInput, eventId, instant, objectRef, principalId, } from '@substrat-run/contracts';
+import { ulid, } from '@substrat-run/kernel';
+import { OperationQueue } from './serialization.js';
+import { doScopedSql } from './sql.js';
+import { createDoTupleChecker } from './checker.js';
+const KERNEL_DDL = `
+  CREATE TABLE IF NOT EXISTS _substrat_outbox (
+    id TEXT PRIMARY KEY,
+    type TEXT NOT NULL,
+    schema_version INTEGER NOT NULL,
+    occurred_at TEXT NOT NULL,
+    tenant_id TEXT NOT NULL,
+    scope_id TEXT NOT NULL,
+    actor TEXT NOT NULL,
+    entity_type TEXT NOT NULL,
+    entity_id TEXT NOT NULL,
+    pii_class TEXT NOT NULL,
+    subject_id TEXT,
+    payload TEXT,
+    drained_at TEXT
+  );
+  CREATE TABLE IF NOT EXISTS _substrat_migrations (
+    module_id TEXT NOT NULL,
+    version TEXT NOT NULL,
+    applied_at TEXT NOT NULL,
+    PRIMARY KEY (module_id, version)
+  );
+  CREATE TABLE IF NOT EXISTS _substrat_tuples (
+    subject TEXT NOT NULL,
+    relation TEXT NOT NULL,
+    object TEXT NOT NULL,
+    expires_at TEXT,
+    PRIMARY KEY (subject, relation, object)
+  );
+  CREATE TABLE IF NOT EXISTS _substrat_deliveries (
+    event_id TEXT NOT NULL,
+    consumer_module TEXT NOT NULL,
+    delivered_at TEXT NOT NULL,
+    error TEXT,
+    PRIMARY KEY (event_id, consumer_module)
+  );
+`;
+/**
+ * Workers RPC carries only a plain `Error`'s message/name/stack faithfully; a
+ * custom subclass (e.g. Zod's `ZodError`, whose `message` is a getter over its
+ * issues) arrives on the coordinator side as just its class name. Contract
+ * matchers assert on the message (`/subjectId/`, `/boom/`, …), so re-wrap any
+ * non-plain error as a plain `Error` before it crosses the boundary — the
+ * message (which for a ZodError includes the failing path/detail) survives.
+ */
+function toRpcError(err) {
+    if (err instanceof Error) {
+        return err.constructor === Error ? err : new Error(err.message);
+    }
+    return new Error(String(err));
+}
+export function defineScopeDO(modules, bareOps) {
+    return class ScopeDO extends DurableObject {
+        sql;
+        queue = new OperationQueue();
+        operations = new Map();
+        modules = new Map();
+        guards = new Map();
+        predicates = new Map();
+        withdrawn = new Map();
+        relations = new Map();
+        checker;
+        systemPrincipal = principalId.parse(ulid());
+        applied = new Set();
+        migrationPromise;
+        constructor(ctx, env) {
+            super(ctx, env);
+            this.sql = ctx.storage.sql;
+            for (const stmt of KERNEL_DDL.split(';')) {
+                const s = stmt.trim();
+                if (s)
+                    this.sql.exec(s);
+            }
+            for (const registration of modules)
+                this.registerModule(registration);
+            for (const [name, handler] of Object.entries(bareOps))
+                this.defineOperation(name, handler);
+            // Which migrations have already run (a warm DO wakes with rows here).
+            for (const row of this.sql
+                .exec('SELECT module_id, version FROM _substrat_migrations')
+                .toArray()) {
+                this.applied.add(`${row.module_id}@${row.version}`);
+            }
+            const controlPlane = this.controlPlaneReader();
+            this.checker = createDoTupleChecker({ scopeSql: this.sql, controlPlane });
+        }
+        // -- module registration (port of SqliteScopeHost.registerModule) ---------
+        registerModule(registration) {
+            const manifest = registration.manifest;
+            this.modules.set(manifest.id, {
+                id: manifest.id,
+                migrations: registration.migrations ?? [],
+                consumers: Object.entries(registration.consumers ?? {}).map(([eventType, handler]) => ({
+                    eventType,
+                    handler,
+                })),
+            });
+            for (const [name, handler] of Object.entries(registration.predicates ?? {})) {
+                this.predicates.set(name, { module: manifest.id, handler });
+            }
+            for (const guard of manifest.guards ?? []) {
+                const forOperation = this.guards.get(guard.before) ?? [];
+                forOperation.push({ predicate: guard.predicate, config: guard.config, declaredBy: manifest.id });
+                this.guards.set(guard.before, forOperation);
+            }
+            for (const rel of manifest.entityRelations ?? []) {
+                const parents = this.relations.get(rel.entityType) ?? new Set();
+                parents.add(rel.parentType);
+                this.relations.set(rel.entityType, parents);
+            }
+            for (const name of manifest.withdraws ?? []) {
+                this.withdrawn.set(name, manifest.id);
+                this.operations.delete(name);
+            }
+            for (const [name, handler] of Object.entries(registration.operations ?? {})) {
+                this.defineOperation(name, handler);
+            }
+        }
+        defineOperation(name, handler) {
+            if (this.withdrawn.has(name))
+                return; // withdrawn by another manifest — never binds
+            this.operations.set(name, handler);
+        }
+        // -- RPC surface ----------------------------------------------------------
+        /** Trigger lazy migration (the coordinator calls this at provision time). */
+        async migrate() {
+            await this.ensureMigrations();
+        }
+        /** Admin scope-tuple write (role assignment / grant scoped to this scope). */
+        async writeTuple(subject, relation, object, expiresAt) {
+            await this.queue.enqueue(() => {
+                this.sql.exec(`INSERT OR REPLACE INTO _substrat_tuples (subject, relation, object, expires_at)
+           VALUES (?, ?, ?, ?)`, subject, relation, object, expiresAt);
+            });
+        }
+        async invoke(operation, input, principal, tenantId, scopeId) {
+            await this.ensureMigrations();
+            const handler = this.operations.get(operation);
+            if (!handler)
+                throw new Error(`unknown operation: ${operation}`);
+            return this.queue.enqueue(async () => {
+                let result;
+                // The async transaction is the K-4 boundary: guards + handler + emits
+                // commit together, or a throw (from either) rolls domain writes AND
+                // emitted events back as one — verified across `await` in workerd.
+                try {
+                    await this.ctx.storage.transaction(async () => {
+                        const ctx = this.operationContext(principal, tenantId, scopeId);
+                        await this.runGuards(operation, ctx, input);
+                        result = await handler(ctx, input);
+                    });
+                }
+                catch (err) {
+                    throw toRpcError(err);
+                }
+                // Post-commit: drain the outbox to consumers, each delivery its own txn.
+                await this.dispatch(tenantId, scopeId);
+                return result;
+            });
+        }
+        // -- guards (K-17) --------------------------------------------------------
+        async runGuards(operation, ctx, input) {
+            const declared = this.guards.get(operation);
+            if (!declared)
+                return;
+            for (const guard of declared) {
+                const predicate = this.predicates.get(guard.predicate);
+                if (!predicate) {
+                    throw new Error(`unknown guard predicate: '${guard.predicate}' — declared by ${guard.declaredBy} ` +
+                        `before '${operation}'; no registered module contributes it (operation blocked)`);
+                }
+                await predicate.handler(ctx, guard.config, input);
+            }
+        }
+        // -- migrations (port of applyPendingMigrations) --------------------------
+        ensureMigrations() {
+            if (!this.migrationPromise)
+                this.migrationPromise = this.applyPendingMigrations();
+            return this.migrationPromise;
+        }
+        async applyPendingMigrations() {
+            const pending = [];
+            for (const mod of this.modules.values()) {
+                for (const migration of mod.migrations) {
+                    if (!this.applied.has(`${mod.id}@${migration.version}`)) {
+                        pending.push({ moduleId: mod.id, migration });
+                    }
+                }
+            }
+            if (pending.length === 0)
+                return;
+            await this.queue.enqueue(async () => {
+                for (const { moduleId, migration } of pending) {
+                    const key = `${moduleId}@${migration.version}`;
+                    if (this.applied.has(key))
+                        continue;
+                    try {
+                        await this.ctx.storage.transaction(async () => {
+                            const already = this.sql
+                                .exec('SELECT 1 FROM _substrat_migrations WHERE module_id = ? AND version = ?', moduleId, migration.version)
+                                .toArray()[0];
+                            if (!already) {
+                                for (const stmt of migration.sql.split(';')) {
+                                    const s = stmt.trim();
+                                    if (s)
+                                        this.sql.exec(s);
+                                }
+                                this.sql.exec('INSERT INTO _substrat_migrations (module_id, version, applied_at) VALUES (?, ?, ?)', moduleId, migration.version, new Date().toISOString());
+                            }
+                        });
+                    }
+                    catch (err) {
+                        throw new Error(`migration failed for ${key} — scope fails closed: ${err.message}`);
+                    }
+                    this.applied.add(key);
+                }
+            });
+        }
+        // -- event dispatch (port of dispatch) ------------------------------------
+        async dispatch(tenantId, scopeId) {
+            for (let round = 0; round < 50; round++) {
+                let deliveredAny = false;
+                for (const mod of this.modules.values()) {
+                    for (const consumer of mod.consumers) {
+                        const rows = this.sql
+                            .exec(`SELECT * FROM _substrat_outbox o
+                 WHERE o.type = ?
+                   AND NOT EXISTS (
+                     SELECT 1 FROM _substrat_deliveries d
+                     WHERE d.event_id = o.id AND d.consumer_module = ?
+                   )
+                 ORDER BY o.id`, consumer.eventType, mod.id)
+                            .toArray();
+                        for (const row of rows) {
+                            const event = this.parseOutboxRow(row);
+                            try {
+                                await this.ctx.storage.transaction(async () => {
+                                    const ctx = this.operationContext(this.systemPrincipal, tenantId, scopeId, {
+                                        system: mod.id,
+                                    });
+                                    await consumer.handler(ctx, event);
+                                    this.sql.exec(`INSERT INTO _substrat_deliveries (event_id, consumer_module, delivered_at)
+                     VALUES (?, ?, ?)`, event.id, mod.id, new Date().toISOString());
+                                });
+                                deliveredAny = true;
+                            }
+                            catch (err) {
+                                // Dead-letter (v0): journal the failure so one poison event
+                                // can't wedge the loop. Written outside the rolled-back txn.
+                                this.sql.exec(`INSERT INTO _substrat_deliveries (event_id, consumer_module, delivered_at, error)
+                   VALUES (?, ?, ?, ?)`, event.id, mod.id, new Date().toISOString(), String(err));
+                            }
+                        }
+                    }
+                }
+                if (!deliveredAny)
+                    return;
+            }
+        }
+        parseOutboxRow(row) {
+            return domainEvent.parse({
+                id: row.id,
+                type: row.type,
+                schemaVersion: row.schema_version,
+                occurredAt: row.occurred_at,
+                tenantId: row.tenant_id,
+                scopeId: row.scope_id,
+                actor: JSON.parse(row.actor),
+                entity: { entityType: row.entity_type, entityId: row.entity_id },
+                piiClass: row.pii_class,
+                ...(row.subject_id ? { subjectId: row.subject_id } : {}),
+                payload: row.payload === null ? undefined : JSON.parse(row.payload),
+            });
+        }
+        // -- operation context (port of operationContext) -------------------------
+        operationContext(principal, tenantId, scopeId, systemActor) {
+            const checker = this.checker;
+            const relations = this.relations;
+            const sql = this.sql;
+            return {
+                tenantId,
+                scopeId,
+                principal,
+                sql: doScopedSql(sql),
+                emit: (event) => {
+                    const parsed = domainEventInput.parse(event);
+                    const full = domainEvent.parse({
+                        ...parsed,
+                        id: eventId.parse(ulid()),
+                        occurredAt: instant.parse(new Date().toISOString()),
+                        tenantId,
+                        scopeId,
+                        actor: systemActor ?? principal,
+                    });
+                    sql.exec(`INSERT INTO _substrat_outbox
+               (id, type, schema_version, occurred_at, tenant_id, scope_id, actor,
+                entity_type, entity_id, pii_class, subject_id, payload)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, full.id, full.type, full.schemaVersion, full.occurredAt, full.tenantId, full.scopeId, JSON.stringify(full.actor), full.entity.entityType, full.entity.entityId, full.piiClass, full.subjectId ?? null, full.payload === undefined ? null : JSON.stringify(full.payload));
+                },
+                check: (permission, entity) => systemActor
+                    ? Promise.resolve({
+                        allowed: true,
+                        proof: [
+                            {
+                                subject: objectRef.parse(`system:${systemActor.system.replace(/[^a-zA-Z0-9_.-]/g, '-')}`),
+                                relation: `granted:${permission}`,
+                                object: objectRef.parse(`scope:${scopeId}`),
+                            },
+                        ],
+                    })
+                    : checker.check(principal, permission, { tenantId, scopeId }, entity),
+                link: (child, parent) => {
+                    const allowed = relations.get(child.entityType);
+                    if (!allowed?.has(parent.entityType)) {
+                        throw new Error(`undeclared entity relation: ${child.entityType} → ${parent.entityType} ` +
+                            `(declare it in a module manifest's entityRelations)`);
+                    }
+                    sql.exec(`INSERT OR IGNORE INTO _substrat_tuples (subject, relation, object)
+             VALUES (?, 'parent', ?)`, `${child.entityType}:${child.entityId}`, `${parent.entityType}:${parent.entityId}`);
+                },
+            };
+        }
+        controlPlaneReader() {
+            const ns = this.env.CONTROL_PLANE;
+            const stub = ns.get(ns.idFromName('control-plane'));
+            return {
+                tenantTuples: (tenantId, subject, relationPrefix) => stub.tenantTuples(tenantId, subject, relationPrefix),
+                getRole: (tenantId, key) => stub.getRole(tenantId, key),
+            };
+        }
+    };
+}
+//# sourceMappingURL=scope-do.js.map

package/dist/scope-do.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-do.js","sourceRoot":"","sources":["../src/scope-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,OAAO,EACP,OAAO,EACP,SAAS,EACT,WAAW,GAQZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,IAAI,GAQL,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAA2B,MAAM,cAAc,CAAC;AAgD7E,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoClB,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAA6B,EAC7B,OAAyD;IAEzD,OAAO,MAAM,OAAQ,SAAQ,aAAyB;QACnC,GAAG,CAAa;QAChB,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,GAAG,EAA4C,CAAC;QACjE,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;QAC9C,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;QAC5C,UAAU,GAAG,IAAI,GAAG,EAAuD,CAAC;QAC5E,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC3C,OAAO,CAAoB;QAC3B,eAAe,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,gBAAgB,CAAiB;QAEzC,YAAY,GAAuB,EAAE,GAAe;YAClD,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YAED,KAAK,MAAM,YAAY,IAAI,OAAO;gBAAE,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YACtE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE3F,sEAAsE;YACtE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG;iBACvB,IAAI,CAAC,qDAAqD,CAAC;iBAC3D,OAAO,EAAyD,EAAE,CAAC;gBACpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,4EAA4E;QAEpE,cAAc,CAAC,YAAgC;YACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5B,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,EAAE;gBACzC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrF,SAAS;oBACT,OAAO;iBACR,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzD,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;gBACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;gBAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAEO,eAAe,CAAC,IAAY,EAAE,OAAyC;YAC7E,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,8CAA8C;YACpF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,4EAA4E;QAE5E,6EAA6E;QAC7E,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAED,8EAA8E;QAC9E,KAAK,CAAC,UAAU,CACd,OAAe,EACf,QAAgB,EAChB,MAAc,EACd,SAAwB;YAExB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CACX;+BACqB,EACrB,OAAO,EACP,QAAQ,EACR,MAAM,EACN,SAAS,CACV,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,KAAc,EACd,SAAsB,EACtB,QAAkB,EAClB,OAAgB;YAEhB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;gBACnC,IAAI,MAAe,CAAC;gBACpB,sEAAsE;gBACtE,oEAAoE;gBACpE,mEAAmE;gBACnE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;wBAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAChE,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC5C,MAAM,GAAG,MAAO,OAA8C,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC7E,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;gBACD,yEAAyE;gBACzE,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACvC,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAEpE,KAAK,CAAC,SAAS,CACrB,SAAiB,EACjB,GAAqB,EACrB,KAAc;YAEd,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACvD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,CAAC,SAAS,mBAAmB,KAAK,CAAC,UAAU,GAAG;wBAChF,WAAW,SAAS,4DAA4D,CACnF,CAAC;gBACJ,CAAC;gBACD,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,4EAA4E;QAEpE,gBAAgB;YACtB,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;QAEO,KAAK,CAAC,sBAAsB;YAClC,MAAM,OAAO,GAAoD,EAAE,CAAC;YACpE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;oBACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;wBACxD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;gBAClC,KAAK,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC;oBAC9C,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAS;oBACpC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;4BAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;iCACrB,IAAI,CACH,wEAAwE,EACxE,QAAQ,EACR,SAAS,CAAC,OAAO,CAClB;iCACA,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;4BAChB,IAAI,CAAC,OAAO,EAAE,CAAC;gCACb,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;oCAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oCACtB,IAAI,CAAC;wCAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gCAC1B,CAAC;gCACD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,oFAAoF,EACpF,QAAQ,EACR,SAAS,CAAC,OAAO,EACjB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;4BACJ,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAC9E,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAEpE,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,OAAgB;YACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;gBACxC,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;6BAClB,IAAI,CACH;;;;;;+BAMe,EACf,QAAQ,CAAC,SAAS,EAClB,GAAG,CAAC,EAAE,CACP;6BACA,OAAO,EAA4B,CAAC;wBACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;4BACvB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;4BACvC,IAAI,CAAC;gCACH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;oCAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE;wCACzE,MAAM,EAAE,GAAG,CAAC,EAAE;qCACf,CAAC,CAAC;oCACH,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oCACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CACX;sCACkB,EAClB,KAAK,CAAC,EAAE,EACR,GAAG,CAAC,EAAE,EACN,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;gCACJ,CAAC,CAAC,CAAC;gCACH,YAAY,GAAG,IAAI,CAAC;4BACtB,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,4DAA4D;gCAC5D,6DAA6D;gCAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CACX;uCACqB,EACrB,KAAK,CAAC,EAAE,EACR,GAAG,CAAC,EAAE,EACN,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,YAAY;oBAAE,OAAO;YAC5B,CAAC;QACH,CAAC;QAEO,cAAc,CAAC,GAAc;YACnC,OAAO,WAAW,CAAC,KAAK,CAAC;gBACvB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,aAAa,EAAE,GAAG,CAAC,cAAc;gBACjC,UAAU,EAAE,GAAG,CAAC,WAAW;gBAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC5B,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE;gBAChE,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAEpE,gBAAgB,CACtB,SAAsB,EACtB,QAAkB,EAClB,OAAgB,EAChB,WAAgC;YAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YACrB,OAAO;gBACL,QAAQ;gBACR,OAAO;gBACP,SAAS;gBACT,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC;gBACrB,IAAI,EAAE,CAAC,KAAuB,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC;wBAC7B,GAAG,MAAM;wBACT,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wBACzB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;wBACnD,QAAQ;wBACR,OAAO;wBACP,KAAK,EAAE,WAAW,IAAI,SAAS;qBAChC,CAAC,CAAC;oBACH,GAAG,CAAC,IAAI,CACN;;;yDAG6C,EAC7C,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1B,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,IAAI,IAAI,EACtB,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CACjE,CAAC;gBACJ,CAAC;gBACD,KAAK,EAAE,CAAC,UAAyB,EAAE,MAAkB,EAAE,EAAE,CACvD,WAAW;oBACT,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;wBACd,OAAO,EAAE,IAAa;wBACtB,KAAK,EAAE;4BACL;gCACE,OAAO,EAAE,SAAS,CAAC,KAAK,CACtB,UAAU,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAChE;gCACD,QAAQ,EAAE,WAAW,UAAU,EAAE;gCACjC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,OAAO,EAAE,CAAC;6BAC5C;yBACF;qBACF,CAAC;oBACJ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC;gBACzE,IAAI,EAAE,CAAC,KAAgB,EAAE,MAAiB,EAAE,EAAE;oBAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAChD,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,CAAC,UAAU,MAAM,MAAM,CAAC,UAAU,GAAG;4BACvE,qDAAqD,CACxD,CAAC;oBACJ,CAAC;oBACD,GAAG,CAAC,IAAI,CACN;qCACyB,EACzB,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,EACvC,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,CAC1C,CAAC;gBACJ,CAAC;aACF,CAAC;QACJ,CAAC;QAEO,kBAAkB;YACxB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YAClC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAkC,CAAC;YACrF,OAAO;gBACL,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAClD,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC;gBACtD,OAAO,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/serialization.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Per-scope serialization (K-6). One operation runs to completion before the
+ * next starts — the conservative semantics both adapters must honor. A Durable
+ * Object's input gate "over-delivers" (it allows subtler interleavings around
+ * non-storage awaits), so — exactly as the pure adapter does — the CF adapter
+ * enforces strict serialization explicitly with a per-scope task queue rather
+ * than trusting the gate. Kernel and module code may never depend on any
+ * interleaving subtler than strict.
+ *
+ * Identical in spirit to `adapter-sqlite/src/actor.ts`; kept here so the DO owns
+ * its own queue with no cross-package coupling.
+ */
+export declare class OperationQueue {
+    private tail;
+    enqueue<T>(op: () => Promise<T> | T): Promise<T>;
+}
+//# sourceMappingURL=serialization.d.ts.map

package/dist/serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../src/serialization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,IAAI,CAAuC;IAEnD,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAMjD"}

package/dist/serialization.js

@@ -0,0 +1,22 @@
+/**
+ * Per-scope serialization (K-6). One operation runs to completion before the
+ * next starts — the conservative semantics both adapters must honor. A Durable
+ * Object's input gate "over-delivers" (it allows subtler interleavings around
+ * non-storage awaits), so — exactly as the pure adapter does — the CF adapter
+ * enforces strict serialization explicitly with a per-scope task queue rather
+ * than trusting the gate. Kernel and module code may never depend on any
+ * interleaving subtler than strict.
+ *
+ * Identical in spirit to `adapter-sqlite/src/actor.ts`; kept here so the DO owns
+ * its own queue with no cross-package coupling.
+ */
+export class OperationQueue {
+    tail = Promise.resolve();
+    enqueue(op) {
+        const result = this.tail.then(op);
+        // The chain must survive failures; callers still see the rejection.
+        this.tail = result.catch(() => undefined);
+        return result;
+    }
+}
+//# sourceMappingURL=serialization.js.map

package/dist/serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.js","sourceRoot":"","sources":["../src/serialization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IACjB,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,OAAO,CAAI,EAAwB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,oEAAoE;QACpE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/sql.d.ts

@@ -0,0 +1,17 @@
+import type { ScopedSql } from '@substrat-run/kernel';
+/**
+ * Adapts a Durable Object's `SqlStorage` to the kernel's `ScopedSql` contract
+ * (`query`/`exec`). DO SQL is synchronous — `exec` returns a cursor eagerly —
+ * so this mirrors the better-sqlite3 wrapper in `adapter-sqlite` one-to-one.
+ *
+ * Note (from the spikes): the DO runtime FORBIDS manual `BEGIN`/`COMMIT` via SQL.
+ * Use `ctx.storage.transaction(async () => …)` — the ASYNC transaction API — which
+ * commits on success and rolls back on a throw EVEN ACROSS an `await` (verified in
+ * workerd). The ScopeDO therefore wraps each operation exactly like the pure
+ * adapter's `BEGIN IMMEDIATE … COMMIT/ROLLBACK`: domain writes and outbox emits
+ * commit or roll back together, with read-your-own-writes intact and no buffering.
+ * (`transactionSync` also exists but is synchronous-only — it commits at the first
+ * await, so it is not used for the async operation body.)
+ */
+export declare function doScopedSql(sql: SqlStorage): ScopedSql;
+//# sourceMappingURL=sql.d.ts.map

package/dist/sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.d.ts","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAY,MAAM,sBAAsB,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAStD"}

package/dist/sql.js

@@ -0,0 +1,24 @@
+/**
+ * Adapts a Durable Object's `SqlStorage` to the kernel's `ScopedSql` contract
+ * (`query`/`exec`). DO SQL is synchronous — `exec` returns a cursor eagerly —
+ * so this mirrors the better-sqlite3 wrapper in `adapter-sqlite` one-to-one.
+ *
+ * Note (from the spikes): the DO runtime FORBIDS manual `BEGIN`/`COMMIT` via SQL.
+ * Use `ctx.storage.transaction(async () => …)` — the ASYNC transaction API — which
+ * commits on success and rolls back on a throw EVEN ACROSS an `await` (verified in
+ * workerd). The ScopeDO therefore wraps each operation exactly like the pure
+ * adapter's `BEGIN IMMEDIATE … COMMIT/ROLLBACK`: domain writes and outbox emits
+ * commit or roll back together, with read-your-own-writes intact and no buffering.
+ * (`transactionSync` also exists but is synchronous-only — it commits at the first
+ * await, so it is not used for the async operation body.)
+ */
+export function doScopedSql(sql) {
+    return {
+        query: (q, params = []) => sql.exec(q, ...params).toArray(),
+        exec: (q, params = []) => {
+            const cursor = sql.exec(q, ...params);
+            return { changes: cursor.rowsWritten };
+        },
+    };
+}
+//# sourceMappingURL=sql.js.map

package/dist/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,GAAe;IACzC,OAAO;QACL,KAAK,EAAE,CAA+B,CAAS,EAAE,SAA8B,EAAE,EAAO,EAAE,CACxF,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAI,MAAqB,CAAC,CAAC,OAAO,EAAS;QACzD,IAAI,EAAE,CAAC,CAAS,EAAE,SAA8B,EAAE,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAI,MAAqB,CAAC,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@substrat-run/adapter-cloudflare",
+  "version": "0.2.0",
+  "description": "Cloudflare Durable-Object scope host (D-14): DO-per-scope, real kernel semantics on Workers",
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/substrat-run/substrat.git",
+    "directory": "packages/adapter-cloudflare"
+  },
+  "homepage": "https://github.com/substrat-run/substrat",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@substrat-run/kernel": "^0.2.0",
+    "@substrat-run/contracts": "^0.2.0"
+  },
+  "devDependencies": {
+    "@cloudflare/vitest-pool-workers": "^0.8.19",
+    "@cloudflare/workers-types": "^4.20250109.0",
+    "wrangler": "^4.110.0",
+    "typescript": "^5.6.0",
+    "vitest": "^3.0.0",
+    "@substrat-run/contract-tests": "^0.2.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "test": "vitest run"
+  }
+}