@ts-edge/cloudflare 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,52 @@
+import "@ts-edge/wasm/wasm_exec.js";
+import { type TailscaleNode } from "@ts-edge/wasm";
+export type { TailscaleNode, TailnetSocket, NodeState, NodeConfig, ServeHandler, Server, Peer, } from "@ts-edge/wasm";
+export interface CloudflareNodeConfig {
+    /** `import wasm from "@ts-edge/wasm/node.wasm"` — a CompiledWasm module. */
+    wasm: WebAssembly.Module;
+    authKey: string;
+    hostname?: string;
+    controlURL?: string;
+}
+/**
+ * Create the node and start it. Returns as soon as login is kicked off; await
+ * tailNode.waitUntilRunning() for readiness.
+ */
+export declare function createCloudflareNode(config: CloudflareNodeConfig): Promise<TailscaleNode>;
+/**
+ * A Durable Object base class that hosts one warm tailNode. Extend it and
+ * implement getConfig(); the node is created lazily and kept alive until
+ * stopTailscaleNode() (its control/DERP WebSockets stay open across requests,
+ * which also pins the DO in memory — billed wall-clock duration). Override
+ * fetch() to route requests; call this.getRunningTailscaleNode() to obtain
+ * the started, Running tailNode.
+ */
+export declare abstract class TailscaleNodeDO<Env = unknown> implements DurableObject {
+    #private;
+    protected ctx: DurableObjectState;
+    protected env: Env;
+    protected tailscaleNode: TailscaleNode | undefined;
+    constructor(ctx: DurableObjectState, env: Env);
+    /** Supply the node configuration (typically from env). */
+    protected abstract getConfig(): CloudflareNodeConfig | Promise<CloudflareNodeConfig>;
+    /**
+     * Optional setup hook, called once per node between creation and start() —
+     * attach event listeners (tailNode.on) and register servers (tailNode.serve /
+     * tailNode.listen) here, while the node is still offline, so no early state
+     * transition or inbound connection is missed.
+     */
+    protected beforeStart?(tailNode: TailscaleNode): void | Promise<void>;
+    /** Start the node once and return it after it reaches Running. */
+    protected getRunningTailscaleNode(opts?: {
+        timeoutMs?: number;
+    }): Promise<TailscaleNode>;
+    /**
+     * Fully stop the node, closing its control/DERP WebSockets. With no outgoing
+     * sockets left the DO can hibernate or be evicted, so duration billing stops.
+     * The node was ephemeral: the next getRunningTailscaleNode() creates a
+     * fresh one (new login, beforeStart runs again). Safe to call at any point,
+     * including mid-start.
+     */
+    protected stopTailscaleNode(): Promise<void>;
+    fetch(_request: Request): Promise<Response>;
+}

package/dist/index.js

@@ -0,0 +1,72 @@
+// Copyright (c) 2026 Sam Jean
+// SPDX-License-Identifier: BSD-3-Clause
+// @ts-edge/cloudflare — run a WASM ephemeral Tailscale node inside a Cloudflare
+// Worker. It supplies globalThis.Go (Go's wasm_exec), which workerd lacks, then
+// wraps @ts-edge/wasm. The DERP/control transport uses workerd's native
+// `new WebSocket(url)` client constructor directly.
+import "@ts-edge/wasm/wasm_exec.js"; // side effect: installs globalThis.Go
+import { createNode } from "@ts-edge/wasm";
+/**
+ * Create the node and start it. Returns as soon as login is kicked off; await
+ * tailNode.waitUntilRunning() for readiness.
+ */
+export async function createCloudflareNode(config) {
+    const tailNode = await createNode(config);
+    await tailNode.start();
+    return tailNode;
+}
+/**
+ * A Durable Object base class that hosts one warm tailNode. Extend it and
+ * implement getConfig(); the node is created lazily and kept alive until
+ * stopTailscaleNode() (its control/DERP WebSockets stay open across requests,
+ * which also pins the DO in memory — billed wall-clock duration). Override
+ * fetch() to route requests; call this.getRunningTailscaleNode() to obtain
+ * the started, Running tailNode.
+ */
+export class TailscaleNodeDO {
+    ctx;
+    env;
+    tailscaleNode;
+    #starting;
+    constructor(ctx, env) {
+        this.ctx = ctx;
+        this.env = env;
+    }
+    /** Start the node once and return it after it reaches Running. */
+    async getRunningTailscaleNode(opts = {}) {
+        if (!this.#starting) {
+            this.#starting = (async () => {
+                const tailNode = await createNode(await this.getConfig());
+                this.tailscaleNode = tailNode;
+                if (this.beforeStart)
+                    await this.beforeStart(tailNode);
+                await tailNode.start();
+                return tailNode;
+            })();
+        }
+        const tailNode = await this.#starting;
+        await tailNode.waitUntilRunning(opts);
+        return tailNode;
+    }
+    /**
+     * Fully stop the node, closing its control/DERP WebSockets. With no outgoing
+     * sockets left the DO can hibernate or be evicted, so duration billing stops.
+     * The node was ephemeral: the next getRunningTailscaleNode() creates a
+     * fresh one (new login, beforeStart runs again). Safe to call at any point,
+     * including mid-start.
+     */
+    async stopTailscaleNode() {
+        const starting = this.#starting;
+        this.#starting = undefined;
+        this.tailscaleNode = undefined;
+        if (!starting)
+            return;
+        const tailNode = await starting.catch(() => undefined);
+        await tailNode?.stop();
+    }
+    async fetch(_request) {
+        const tailNode = await this.getRunningTailscaleNode();
+        return new Response(`ts-edge node running: ${tailNode.ipv4 ?? "(no addr)"}\n`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,wCAAwC;AAExC,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,oDAAoD;AAEpD,OAAO,4BAA4B,CAAC,CAAC,sCAAsC;AAC3E,OAAO,EAAE,UAAU,EAAsB,MAAM,eAAe,CAAC;AAmB/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAgB,eAAe;IAKvB;IACA;IALF,aAAa,CAA4B;IACnD,SAAS,CAAqC;IAE9C,YACY,GAAuB,EACvB,GAAQ;QADR,QAAG,GAAH,GAAG,CAAoB;QACvB,QAAG,GAAH,GAAG,CAAK;IACjB,CAAC;IAaJ,kEAAkE;IACxD,KAAK,CAAC,uBAAuB,CAAC,OAA+B,EAAE;QACvE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;gBAC9B,IAAI,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACvD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QACtC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,iBAAiB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAiB;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACtD,OAAO,IAAI,QAAQ,CAAC,yBAAyB,QAAQ,CAAC,IAAI,IAAI,WAAW,IAAI,CAAC,CAAC;IACjF,CAAC;CACF"}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@ts-edge/cloudflare",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Run a WASM ephemeral Tailscale node inside a Cloudflare Worker / Durable Object.",
+  "license": "BSD-3-Clause",
+  "author": "Sam Jean",
+  "files": ["dist"],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "prepare": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@ts-edge/wasm": "workspace:^"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^4.20260702.1",
+    "typescript": "^6.0.3"
+  }
+}