@agent-os/workspace-session-cloudflare

Purpose

Cloudflare Sandbox-compatible backend for @agent-os/workspace-session.

Public API Status

Backend package. It uses structural SDK types instead of importing a Cloudflare SDK.

Invariant

The workspace-session carrier owns lifecycle facts. This backend supplies concrete session, workspace root, cleanup, backup, preview, and destroy proof refs plus bounded exec inside an existing session. SDK clients, namespace bindings, preview tokens, backup handle objects, exec output bodies, and sandbox objects never enter ledger-visible payloads.

Minimal Usage

Adapt a structural Cloudflare Sandbox namespace or client and pass the provider to the workspace-session carrier. Missing refs fail closed; there is no resolver-derived or ambient fallback. Exec uses sessionRef to recover the existing sandbox session and runs one bounded command with capped stdout/stderr. It does not allocate preview ports or background processes.

import { makeCloudflareWorkspaceSessionLiveProvider } from "@agent-os/workspace-session-cloudflare";

Verification

cd packages/providers/workspace-session-cloudflare
vp test run

Real Cloudflare Sandbox smoke requires an app-supplied namespace binding.