dckcandClaude Opus 5.5
9356f63c64
The admin socket now also speaks OCapN over Cap'n Web: a WebSocket there reaches the VatAdmin DO, an OCapN peer whose bootstrap (swissnum vatAdmin) offers createVat(src, params). params may hold remote objects; the vat's root comes back as one. Each OCapN vat is its own peer: SES and @endo/ocapn run in its facet (vat-runtime.js, bundled with esbuild), around the vat's own module, which exports buildRootObject(vatPowers, params). Passing a client's object to a vat, or a vat's root to the client, is an OCapN handoff, so the receiver dials the exporter. Nothing here can dial out, so the VatAdmin is also the router: a client registers its gateway under a designator, a vat's designator is its id, and every peer reaches every other through it. The netlayer is ertp-clerk's, made to work over Workers RPC stubs and plain promises as well as Cap'n Web. Not yet: sturdyrefs that survive a restart, an adminNode, and grants (egress, mount) for OCapN vats. App vats (export class App) still work beside them. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
47 lines
1.9 KiB
Cap'n Proto
47 lines
1.9 KiB
Cap'n Proto
# toybox: vats whose code is installed at runtime, each a Durable Object facet.
|
|
#
|
|
# Sockets have no address here: whoever starts workerd hands them in
|
|
# (-S name=fd from systemd, or -s name=addr), so holding a socket is the
|
|
# authority it grants. `state` is likewise overridden with -d state=<dir>,
|
|
# and the switchboard's address with -e switchboard=<addr>.
|
|
using Workerd = import "/workerd/workerd.capnp";
|
|
|
|
const config :Workerd.Config = (
|
|
services = [
|
|
(name = "main", worker = .supervisor),
|
|
(name = "nowhere", network = (allow = [])),
|
|
# the way out: one switchboard socket, i.e. one handle (see switchboard.capnp)
|
|
(name = "switchboard", external = (address = "unix:switchboard.sock", http = ())),
|
|
(name = "state", disk = (path = "state", writable = true)),
|
|
],
|
|
sockets = [
|
|
# the ingress: reach the vat mounted at a request's labels
|
|
(name = "http", http = (), service = (name = "main", entrypoint = "Public")),
|
|
# create vats, install code, grant egress and ingress
|
|
(name = "admin", http = (), service = (name = "main", entrypoint = "Admin")),
|
|
],
|
|
);
|
|
|
|
const supervisor :Workerd.Worker = (
|
|
compatibilityDate = "2026-10-01",
|
|
# bundled by build.js
|
|
modules = [
|
|
(name = "supervisor.js", esModule = embed "dist/supervisor.js"),
|
|
(name = "vat-runtime.txt", text = embed "dist/vat-runtime.js"),
|
|
],
|
|
durableObjectNamespaces = [
|
|
(className = "Vat", uniqueKey = "toybox-vat", enableSql = true),
|
|
(className = "Directory", uniqueKey = "toybox-directory", enableSql = true),
|
|
(className = "VatAdmin", uniqueKey = "toybox-vat-admin", enableSql = true),
|
|
],
|
|
durableObjectStorage = (localDisk = "state"),
|
|
bindings = [
|
|
(name = "VATS", durableObjectNamespace = "Vat"),
|
|
(name = "DIRECTORY", durableObjectNamespace = "Directory"),
|
|
(name = "VAT_ADMIN", durableObjectNamespace = "VatAdmin"),
|
|
(name = "LOADER", workerLoader = ()),
|
|
(name = "SWITCHBOARD", service = "switchboard"),
|
|
],
|
|
globalOutbound = "nowhere",
|
|
);
|