import { Effect } from "effect";import { HttpEffect, HttpRouter } from "effect/unstable/http"; import { dbProviderLayer, ExecutorApp, textFailureStrategy } from "@executor-js/api/server"; import { loadConfig, type CloudflareEnv } from "./config";import { makeCloudflarePlugins } from "./plugins";import { createD1ExecutorDb } from "./db/d1";import { cloudflareAccessIdentityLayer } from "./auth/cloudflare-access";import { CloudflareCodeExecutorProvider, makeCloudflareHostConfig, makeCloudflarePluginsProvider,} from "./execution";import { ErrorCaptureLive } from "./observability";import { cloudflareAccountMiddleware } from "./account/account-provider";import { makeCloudflareApprovalHandler } from "./mcp";import { makeCloudflareMcpAgentHandler } from "./mcp/agent-handler";import { preloadQuickJs } from "./quickjs"; // ===========================================================================// The Cloudflare host, as ONE `ExecutorApp.make` call: the 4th app alongside// cloud / self-host / local, differing only by the injected Layers.//// The whole scenario in 60 seconds: Cloudflare Access is the identity (validate// the Cf-Access-Jwt-Assertion JWT, no Better Auth, no WorkOS, no app login),// D1 is the SQLite store (same FumaDB assembly as self-host), QuickJS is the// in-process code substrate, no billing, single-tenant. `diff` against// host-selfhost/src/app.ts is three injected Layers: identity, db, plugins/config.//// Built per isolate (async) so the D1 schema bring-up happens once at first// fetch; `env` arrives with that fetch (a Worker has no module-scope bindings),// so the providers close over it instead of reading process.env.// =========================================================================== export const makeCloudflareApp = async (env: CloudflareEnv) => { const config = loadConfig(env); const plugins = makeCloudflarePlugins(config.secretKey); // Load the Workers-compatible (WASM-inlined) QuickJS variant before any // executor is built, the default variant cannot fetch its .wasm on Workers. await preloadQuickJs(); // Open and idempotently bring up the D1 schema once. This is the long-lived // handle the per-request scoped executor reads through the DbProvider seam. const dbHandle = await createD1ExecutorDb(env.DB, env.BLOBS); const identityLayer = cloudflareAccessIdentityLayer(config); const mcpAgentHandler = makeCloudflareMcpAgentHandler(config); const approvalHandler = makeCloudflareApprovalHandler(config, env); const { appLayer, toWebHandler } = ExecutorApp.make({ plugins, providers: { identity: identityLayer, db: dbProviderLayer(Effect.succeed(dbHandle)), engine: { codeExecutor: CloudflareCodeExecutorProvider }, plugins: { provider: makeCloudflarePluginsProvider(config), config: makeCloudflareHostConfig(config), }, errorCapture: ErrorCaptureLive, // The account API (`/api/account/*`) backs the shared multiplayer shell's // auth context; `me` reflects the Access principal. Members/keys are // Access-managed, so the rest of the surface is stubbed. account: cloudflareAccountMiddleware(config), }, extensions: { routes: [ // Browser approval of paused MCP executions: the console resume page // reads paused detail (GET) and records the decision (POST .../resume), // Access-gated, routed to the owning session's Durable Object. HttpRouter.add("*", "/api/mcp-sessions/*", HttpEffect.fromWebHandler(approvalHandler)), ], }, config: { mountPrefix: "/api", failure: textFailureStrategy }, boot: identityLayer, }); return { appLayer, toWebHandler, mcpAgentHandler };};
import { Effect } from "effect";
import { HttpEffect, HttpRouter } from "effect/unstable/http";
import { dbProviderLayer, ExecutorApp, textFailureStrategy } from "@executor-js/api/server";
import { loadConfig, type CloudflareEnv } from "./config";
import { makeCloudflarePlugins } from "./plugins";
import { createD1ExecutorDb } from "./db/d1";
import { cloudflareAccessIdentityLayer } from "./auth/cloudflare-access";
import {
CloudflareCodeExecutorProvider,
makeCloudflareHostConfig,
makeCloudflarePluginsProvider,
} from "./execution";
import { ErrorCaptureLive } from "./observability";
import { cloudflareAccountMiddleware } from "./account/account-provider";
import { makeCloudflareApprovalHandler } from "./mcp";
import { makeCloudflareMcpAgentHandler } from "./mcp/agent-handler";
import { preloadQuickJs } from "./quickjs";
// ===========================================================================
// The Cloudflare host, as ONE `ExecutorApp.make` call: the 4th app alongside
// cloud / self-host / local, differing only by the injected Layers.
//
// The whole scenario in 60 seconds: Cloudflare Access is the identity (validate
// the Cf-Access-Jwt-Assertion JWT, no Better Auth, no WorkOS, no app login),
// D1 is the SQLite store (same FumaDB assembly as self-host), QuickJS is the
// in-process code substrate, no billing, single-tenant. `diff` against
// host-selfhost/src/app.ts is three injected Layers: identity, db, plugins/config.
//
// Built per isolate (async) so the D1 schema bring-up happens once at first
// fetch; `env` arrives with that fetch (a Worker has no module-scope bindings),
// so the providers close over it instead of reading process.env.
// ===========================================================================
export const makeCloudflareApp = async (env: CloudflareEnv) => {
const config = loadConfig(env);
const plugins = makeCloudflarePlugins(config.secretKey);
// Load the Workers-compatible (WASM-inlined) QuickJS variant before any
// executor is built, the default variant cannot fetch its .wasm on Workers.
await preloadQuickJs();
// Open and idempotently bring up the D1 schema once. This is the long-lived
// handle the per-request scoped executor reads through the DbProvider seam.
const dbHandle = await createD1ExecutorDb(env.DB, env.BLOBS);
const identityLayer = cloudflareAccessIdentityLayer(config);
const mcpAgentHandler = makeCloudflareMcpAgentHandler(config);
const approvalHandler = makeCloudflareApprovalHandler(config, env);
const { appLayer, toWebHandler } = ExecutorApp.make({
plugins,
providers: {
identity: identityLayer,
db: dbProviderLayer(Effect.succeed(dbHandle)),
engine: { codeExecutor: CloudflareCodeExecutorProvider },
plugins: {
provider: makeCloudflarePluginsProvider(config),
config: makeCloudflareHostConfig(config),
},
errorCapture: ErrorCaptureLive,
// The account API (`/api/account/*`) backs the shared multiplayer shell's
// auth context; `me` reflects the Access principal. Members/keys are
// Access-managed, so the rest of the surface is stubbed.
account: cloudflareAccountMiddleware(config),
},
extensions: {
routes: [
// Browser approval of paused MCP executions: the console resume page
// reads paused detail (GET) and records the decision (POST .../resume),
// Access-gated, routed to the owning session's Durable Object.
HttpRouter.add("*", "/api/mcp-sessions/*", HttpEffect.fromWebHandler(approvalHandler)),
],
},
config: { mountPrefix: "/api", failure: textFailureStrategy },
boot: identityLayer,
});
return { appLayer, toWebHandler, mcpAgentHandler };
};