# rhema-cloudflare-code

The coding agent as a Cloudflare Durable Object, and the sandbox
daemon that serves its `bash`: one repository, two deployables.

- **`crates/rhema-cloudflare-code`** — the Durable Object frontend:
  WebSocket chat, DO-storage checkpoints, `bash` in a Cloudflare
  Sandbox container or on any host speaking the sandbox wire protocol
  (`SANDBOX_BACKEND=http`). A deployment artifact, not a library —
  the worker feature only compiles on wasm32.
- **`crates/rhema-sandbox-server`** — `rhema-sandboxd`, the sandbox
  wire protocol served from any host: one root directory per session,
  the token checked on every route. The image: `deploy/docker/`.
- **`deploy/cloudflare/`** — the wrangler config, the entry router,
  and the JS sandbox shim. The deploy walkthrough lives beside them:
  [deploy/cloudflare/README.md](deploy/cloudflare/README.md).
- **`specs/`** — the DO's design record
  (`specs/rhema-cloudflare-code.md`).

The harness the DO assembles (`rhema-cloud-agent`), the sandbox seam
and its protocol (`rhema-sandbox`, `-local`, `-http`), and the engine
under it all come from crates.io at the pinned versions — they live in
the rhema repository, which keeps their tests and their design record.

# Running it

The DO: `deploy/cloudflare/README.md` walks through the build, the
wrangler deploy, the two secrets, and driving a session. The daemon:
`deploy/docker/README.md` builds and runs the image.