@substrat-run/adapter-cloudflare 0.92.1 → 0.94.0

package/dist/route-resolver.d.ts

@@ -1,17 +1,34 @@
 import { type RouteTarget } from '@substrat-run/contracts';
-export type RouteResolver = (hostname: string) => Promise<RouteTarget | undefined>;
-/** A hostname row → what the router dispatches on. Shared with `CloudflareScopeHost`
- * so the two cannot drift on what "resolvable" means. */
-export declare function toRouteTarget(row: {
+/**
+ * Hostname → route target, for the router worker (K-26).
+ *
+ * Deliberately NOT `CloudflareScopeHost`. That coordinator needs a `SCOPE`
+ * namespace binding because it can open scope DOs, and the router has no business
+ * doing that — it resolves a name and forwards. Handing it the full host would give
+ * it authority over every tenant's data to save one file.
+ *
+ * So this is the whole surface: one directory read, and no way to reach a scope.
+ * The router's wrangler config binds `CONTROL_PLANE` and nothing else, which makes
+ * that boundary a deployment fact rather than a convention.
+ */
+/** A route row as the control-plane DO's `readRoute` hands it back. */
+export interface RouteRowLike {
     tenant_id: string;
     scope_id: string;
     vertical_slug: string | null;
     surface: string;
     region: string | null;
-    status: string;
+    /** The scope's bound version's dispatch script, joined in the read. */
     deployment_ref?: string | null;
+    /** The dispatched code's declared outbound surface (#303) as JSON text — the
+     *  `outbound` array lifted from the resolved version's manifest in the same read.
+     *  Null = a pre-#303 manifest (or no version), which dispatches unenforced. */
     outbound_json?: string | null;
-} | undefined): RouteTarget | undefined;
+}
+export type RouteResolver = (hostname: string) => Promise<RouteTarget | undefined>;
+/** A hostname row → what the router dispatches on. Shared with `CloudflareScopeHost`
+ * so the two cannot drift on what "resolvable" means. */
+export declare function toRouteTarget(row: RouteRowLike | undefined): RouteTarget | undefined;
 /** DNS is case-insensitive, so the map is normalized and lookups must match. */
 export declare const normalizeHostname: (hostname: string) => string;
 /**

package/dist/route-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-resolver.d.ts","sourceRoot":"","sources":["../src/route-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAiCxE,MAAM,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;AAEnF;yDACyD;AACzD,wBAAgB,aAAa,CAC3B,GAAG,EACC;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GACD,SAAS,GACZ,WAAW,GAAG,SAAS,CAyBzB;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,aAAc,MAAM,KAAG,MAAgC,CAAC;AAEtF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,sBAAsB,GAAG,aAAa,CAgBvF"}
+{"version":3,"file":"route-resolver.d.ts","sourceRoot":"","sources":["../src/route-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAExE;;;;;;;;;;;GAWG;AAEH,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;mFAE+E;IAC/E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAOD,MAAM,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;AAEnF;yDACyD;AACzD,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CA2BpF;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,aAAc,MAAM,KAAG,MAAgC,CAAC;AAEtF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,sBAAsB,GAAG,aAAa,CAgBvF"}

package/dist/route-resolver.js

@@ -2,7 +2,9 @@ import { routeTarget } from '@substrat-run/contracts';
 /** A hostname row → what the router dispatches on. Shared with `CloudflareScopeHost`
  * so the two cannot drift on what "resolvable" means. */
 export function toRouteTarget(row) {
-    if (!row || row.status !== 'active')
+    // No status check here: `readRoute` filters `h.status = 'active'` in SQL, the same
+    // way adapter-sqlite's `resolveHostname` does. One place decides what resolves.
+    if (!row)
         return undefined;
     // The declared outbound surface rides as JSON text from the directory read (#303).
     // A row that carries none — pre-#303 manifest, no bound version — resolves null,
@@ -58,7 +60,7 @@ export function createRouteResolver(controlPlane) {
         //
         // Only the NAMESPACE may be held across requests. Nothing derived from it may be.
         const cp = controlPlane.get(controlPlane.idFromName('control-plane'));
-        return toRouteTarget(await cp.readHostname(normalizeHostname(hostname)));
+        return toRouteTarget(await cp.readRoute(normalizeHostname(hostname)));
     };
 }
 //# sourceMappingURL=route-resolver.js.map

package/dist/route-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-resolver.js","sourceRoot":"","sources":["../src/route-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,yBAAyB,CAAC;AAmCxE;yDACyD;AACzD,MAAM,UAAU,aAAa,CAC3B,GAWa;IAEb,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,mFAAmF;IACnF,iFAAiF;IACjF,+EAA+E;IAC/E,IAAI,aAAa,GAAoB,IAAI,CAAC;IAC1C,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAY,CAAC;YACxD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kFAAkF;QACpF,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QACzC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;AAEtF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoC;IACtE,OAAO,KAAK,EAAE,QAAgB,EAAE,EAAE;QAChC,oEAAoE;QACpE,EAAE;QACF,+EAA+E;QAC/E,kFAAkF;QAClF,8EAA8E;QAC9E,gFAAgF;QAChF,gFAAgF;QAChF,EAAE;QACF,kFAAkF;QAClF,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CACzB,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CACZ,CAAC;QAC/B,OAAO,aAAa,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"route-resolver.js","sourceRoot":"","sources":["../src/route-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,yBAAyB,CAAC;AAqCxE;yDACyD;AACzD,MAAM,UAAU,aAAa,CAAC,GAA6B;IACzD,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,mFAAmF;IACnF,iFAAiF;IACjF,+EAA+E;IAC/E,IAAI,aAAa,GAAoB,IAAI,CAAC;IAC1C,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAY,CAAC;YACxD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kFAAkF;QACpF,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QACzC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;AAEtF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoC;IACtE,OAAO,KAAK,EAAE,QAAgB,EAAE,EAAE;QAChC,oEAAoE;QACpE,EAAE;QACF,+EAA+E;QAC/E,kFAAkF;QAClF,8EAA8E;QAC9E,gFAAgF;QAChF,gFAAgF;QAChF,EAAE;QACF,kFAAkF;QAClF,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CACzB,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CACZ,CAAC;QAC/B,OAAO,aAAa,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC;AACJ,CAAC"}

package/dist/sql.d.ts

@@ -1,4 +1,4 @@
-import type { ScopedSql } from '@substrat-run/kernel';
+import { type ScopedSql } from '@substrat-run/kernel';
 /**
  * Adapts a Durable Object's `SqlStorage` to the kernel's `ScopedSql` contract
  * (`query`/`exec`). DO SQL is synchronous — `exec` returns a cursor eagerly —
@@ -12,6 +12,11 @@ import type { ScopedSql } from '@substrat-run/kernel';
  * commit or roll back together, with read-your-own-writes intact and no buffering.
  * (`transactionSync` also exists but is synchronous-only — it commits at the first
  * await, so it is not used for the async operation body.)
+ *
+ * `guardSpine` wraps it because this is the connection MODULE code holds (#954):
+ * "never write `_substrat_*`" was a lint rule only, and lint never runs on the
+ * hosted push path. The DO's own spine writes go through `this.sql` directly and
+ * never pass through here.
  */
 export declare function doScopedSql(sql: SqlStorage): ScopedSql;
 //# sourceMappingURL=sql.d.ts.map

package/dist/sql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sql.d.ts","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAY,MAAM,sBAAsB,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAStD"}
+{"version":3,"file":"sql.d.ts","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,SAAS,EAAiB,MAAM,sBAAsB,CAAC;AAEjF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAStD"}

package/dist/sql.js

@@ -1,3 +1,4 @@
+import { guardSpine } from '@substrat-run/kernel';
 /**
  * Adapts a Durable Object's `SqlStorage` to the kernel's `ScopedSql` contract
  * (`query`/`exec`). DO SQL is synchronous — `exec` returns a cursor eagerly —
@@ -11,14 +12,19 @@
  * commit or roll back together, with read-your-own-writes intact and no buffering.
  * (`transactionSync` also exists but is synchronous-only — it commits at the first
  * await, so it is not used for the async operation body.)
+ *
+ * `guardSpine` wraps it because this is the connection MODULE code holds (#954):
+ * "never write `_substrat_*`" was a lint rule only, and lint never runs on the
+ * hosted push path. The DO's own spine writes go through `this.sql` directly and
+ * never pass through here.
  */
 export function doScopedSql(sql) {
-    return {
+    return guardSpine({
         query: (q, params = []) => sql.exec(q, ...params).toArray(),
         exec: (q, params = []) => {
             const cursor = sql.exec(q, ...params);
             return { changes: cursor.rowsWritten };
         },
-    };
+    });
 }
 //# sourceMappingURL=sql.js.map

package/dist/sql.js.map

@@ -1 +1 @@
-{"version":3,"file":"sql.js","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,GAAe;IACzC,OAAO;QACL,KAAK,EAAE,CAA+B,CAAS,EAAE,MAAM,GAAwB,EAAE,EAAO,EAAE,CACxF,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAI,MAAqB,CAAC,CAAC,OAAO,EAAS;QACzD,IAAI,EAAE,CAAC,CAAS,EAAE,MAAM,GAAwB,EAAE,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAI,MAAqB,CAAC,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAiC,MAAM,sBAAsB,CAAC;AAEjF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,WAAW,CAAC,GAAe;IACzC,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,CAA+B,CAAS,EAAE,MAAM,GAAwB,EAAE,EAAO,EAAE,CACxF,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAI,MAAqB,CAAC,CAAC,OAAO,EAAS;QACzD,IAAI,EAAE,CAAC,CAAS,EAAE,MAAM,GAAwB,EAAE,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAI,MAAqB,CAAC,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/adapter-cloudflare",
-  "version": "0.92.1",
+  "version": "0.94.0",
   "description": "Cloudflare Durable-Object scope host (D-14): DO-per-scope, real kernel semantics on Workers",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -26,8 +26,8 @@
     "dist"
   ],
   "dependencies": {
-    "@substrat-run/contracts": "^0.92.1",
-    "@substrat-run/kernel": "^0.92.1"
+    "@substrat-run/contracts": "^0.94.0",
+    "@substrat-run/kernel": "^0.94.0"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.9.0",
@@ -35,7 +35,7 @@
     "typescript": "^7.0.0",
     "vitest": "^3.2.7",
     "wrangler": "^4.110.0",
-    "@substrat-run/contract-tests": "^0.92.1"
+    "@substrat-run/contract-tests": "^0.94.0"
   },
   "publishConfig": {
     "access": "public"