rhema-cloudflare-code
The coding agent as a Cloudflare Durable Object, and the sandbox
daemon that serves its bash: one repository, two deployables.
crates/rhema-cloudflare-code— the Durable Object frontend: WebSocket chat, DO-storage checkpoints,bashin a Cloudflare Sandbox container or on any host speaking the sandbox wire protocol (SANDBOX_BACKEND=http). A deployment artifact, not a library — the worker feature only compiles on wasm32.crates/rhema-sandbox-server—rhema-sandboxd, the sandbox wire protocol served from any host: one root directory per session, the token checked on every route. The image:deploy/docker/.deploy/cloudflare/— the wrangler config, the entry router, and the JS sandbox shim. The deploy walkthrough lives beside them: deploy/cloudflare/README.md.specs/— the DO's design record (specs/rhema-cloudflare-code.md).
The harness the DO assembles (rhema-cloud-agent), the sandbox seam
and its protocol (rhema-sandbox, -local, -http), and the engine
under it all come from crates.io at the pinned versions — they live in
the rhema repository, which keeps their tests and their design record.
Running it
The DO: deploy/cloudflare/README.md walks through the build, the
wrangler deploy, the two secrets, and driving a session. The daemon:
deploy/docker/README.md builds and runs the image.