Edge Quickstart

• Node’s buffer, crypto, path, process and util modules.
• A bundler that loads a .wasm import as a compiled WebAssembly.Module. Mirage’s Rust module and Monty both load this way.

​

Install

npm install @struktoai/mirage-edge
npm install -D wrangler

name = "mirage"
main = "src/worker.ts"
compatibility_date = "2026-10-01"
compatibility_flags = ["nodejs_compat", "no_handle_cross_request_promise_resolution"]

​

Run a workspace

import { MountMode, RAMVFS, Workspace } from '@struktoai/mirage-edge'

export default {
  async fetch(request: Request): Promise<Response> {
    const { command } = (await request.json()) as { command: string }
    const ws = new Workspace(
      { '/data': new RAMVFS() },
      { mode: MountMode.EXEC, runtimes: ['workspace', 'monty'], maxMemory: '32MB' },
    )
    try {
      const result = await ws.shell(command)
      return Response.json({ exit: result.exitCode, stdout: result.stdoutText })
    } finally {
      await ws.close()
    }
  },
}

npx wrangler dev
curl -s localhost:8787 -d '{"command": "seq 1 100 | sort -rn | head -3"}'

​

Serve the server API

import { createApp } from '@struktoai/mirage-edge'

export default createApp({ maxWorkspaces: 8 })

[vars]
MIRAGE_AUTH_MODE = "token"

npx wrangler secret put MIRAGE_AUTH_TOKEN
curl -s localhost:8787/v1/workspaces -H "Authorization: Bearer $MIRAGE_AUTH_TOKEN" \
  -H 'content-type: application/json' \
  -d '{"id": "demo", "config": {"mounts": {"/": {"vfs": "ram"}}, "runtimes": ["workspace", "monty"]}}'
curl -s localhost:8787/v1/workspaces/demo/shell -H "Authorization: Bearer $MIRAGE_AUTH_TOKEN" \
  -H 'content-type: application/json' -d '{"command": "python3 -c \"print(6 * 7)\""}'

​

Limits

• An edge isolate has little memory and no disk; a Cloudflare Worker has 128 MB. Set max_memory on each workspace so a large write fails with Disk quota exceeded before the isolate runs out.
• Workspaces live in the isolate’s memory. A request routed to another isolate does not see them, and they are gone when the isolate is evicted. store.type must be ram.
• A config’s mounts come from core’s VFS table: ram, github, gdrive, gdocs, gsheets, gslides, gcal, gmail, onedrive, sharepoint, box, airtable, linear, trello, langfuse, wandb, mem0, qdrant and dify. qdrant needs @qdrant/js-client-rest installed; without it the bundle still builds and the mount refuses. chroma loads its package by a name only known at run time, which an edge runtime cannot do.
• Network rules judge each request by host name: the isolate never sees the address a name reaches, so a denied_domains entry naming an address or a range is refused, and jwt mode’s block on cloud metadata addresses covers only a request made to the address itself.
• SSH, FUSE, policy and script files read by path, and runtimes or CLIs loaded by a source:Class reference are the Node server’s alone.