@tanstack/ai-isolate-cloudflare weekly downloads statistics

@tanstack/ai-isolate-cloudflare

Cloudflare Workers driver for TanStack AI Code Mode.

This package runs generated JavaScript in a Worker and keeps external_* tool execution on your host process through a request/response loop.

Installation

Environment Guidance

• Local development: supported with wrangler dev (the worker_loader binding works in local workerd on the Workers Free plan). • Remote dev: supported with wrangler dev --remote on a Workers Paid plan. • Production: supported on Cloudflare accounts on the Workers Paid plan ($5/mo). The Free plan rejects worker_loader deploys at the API level. Before rollout, put the Worker behind authentication (e.g. Cloudflare Access or the authorization driver option), rate limiting, and CORS restrictions — running LLM-authored code is a high-trust operation.

If you want a self-contained host without Cloudflare infrastructure, prefer @tanstack/ai-isolate-node or @tanstack/ai-isolate-quickjs.

Quick Start

Worker Setup

Option 1: Local dev with wrangler dev

From this package directory:

This starts a local Worker endpoint (default http://localhost:8787) with the worker_loader binding from wrangler.toml. Local workerd accepts the binding on the Workers Free plan, so no upgrade is needed for inner-loop iteration.

Option 2: Wrangler remote dev

Runs through Cloudflare's network for validation against the hosted runtime. Requires a Workers Paid plan because worker_loader is gated to Paid for any edge usage.

Option 3: Production deployment

Requires a Workers Paid plan. The Free plan rejects deploys with worker_loader (code: 10195 — "In order to use Dynamic Workers, you must switch to a paid plan."). Without the binding, the Worker returns a WorkerLoaderNotAvailable error. Because this Worker executes LLM-generated code, only deploy it behind authentication, rate limiting, and an allow-listed origin.

API

createCloudflareIsolateDriver(config)

Creates a driver that delegates code execution to a Worker endpoint.

• workerUrl (required): URL of the Worker endpoint • authorization (optional): value sent as Authorization header • timeout (optional): request timeout in ms (default: 30000) • maxToolRounds (optional): max Worker host tool callback rounds (default: 10)

Worker Entry Export

The package also exports a Worker entrypoint:

Use this when you want to bundle or compose the provided worker logic in your own Worker project.

Security Notes

• Protect the worker endpoint if it is reachable outside trusted infrastructure. • Validate auth headers server-side if you set authorization in the driver. • Add rate limiting and request monitoring for untrusted traffic. • Treat generated code execution as a high-risk surface; keep strict input and network boundaries.

Architecture