Summary

Add durable retries with safe defaults to the Code Mode runtime and expose framework-neutral execution through runtime.execute({ code }).

This is intended for consumers such as cloudflare-mcp, where a dynamic-worker pass may hit an explicit transient response (for example a 429) or time out after earlier connector calls have already succeeded. Retrying under the same execution ID allows those applied calls to replay from the durable log while only the failure boundary executes again.

What changed

• Add runtime.execute({ code }), sharing the same durable path as the AI SDK tool adapter.
• Add a smart default retry policy for RetryableError: three total attempts, honoring retryAfterMs or using bounded exponential backoff (500ms, 1s, up to 10s).
• Add CodemodeRetryOptions for customizing attempts, retry classification, and delay, plus retry: false to opt out.
• Add RetryableError, including optional retryAfterMs, as a structured connector retry signal.
• Preserve structured retry and timeout metadata across connector RPC, the dynamic-worker sandbox, and executor results.
• Add a durable per-execution attempt fence:
  • late calls from a superseded timed-out pass are inert;
  • late results cannot overwrite the retry's log entry;
  • executions created before this change lazily backfill their attempt row.
• Keep retry intent host-authoritative when generated code catches the local error marker, and block later effects in that failed pass.
• Add a retrying pass-end lifecycle status for per-pass cleanup.
• Document direct execution and retry safety.

Explicit RetryableErrors retry without configuration. Executor timeouts remain non-retryable by default and require application policy because a timed-out write can have an ambiguous remote outcome.

Verification

• pnpm --filter @cloudflare/codemode test
  • 296 unit tests
  • 43 real durable-runtime tests
  • 33 browser tests
• pnpm run build
  • 22 projects built successfully
• pnpm run check
  • package exports valid
  • formatting and lint clean
  • all 108 projects typecheck

The changeset is intentionally patch.