@pithy-sh/core 0.10.0 → 0.11.0

package/dist/naming/resourceNames.d.ts

@@ -49,6 +49,8 @@ export interface ScopedNames {
     kv(binding: string): string;
     /** An R2 bucket. Cloudflare's 63 — the one namespace where that number was always right. */
     r2(binding: string): string;
+    /** A Queue. Cloudflare's 63, truncated with a stable hash like a bucket (#662). */
+    queue(binding: string): string;
     /** A Vectorize index. 64 bytes, refused rather than truncated: a renamed index has no vectors. */
     vectorizeIndex(index: string): string;
     /** A Secrets Store entry. No Cloudflare cap; Pithy's ceiling. */
@@ -56,22 +58,39 @@ export interface ScopedNames {
     /** A Cloudflare API token label. No Cloudflare cap; Pithy's ceiling. */
     apiToken(profile: string): string;
 }
+/**
+ * The names in one declared environment: everything a scope has, and the one name that exists per environment
+ * and never at `global`.
+ */
+export interface EnvironmentNames extends ScopedNames {
+    /**
+     * The Artifacts namespace — `<project>-<env>`, with no `<thing>` (#673). One per environment, so a feature's
+     * repos never sit beside production's and the per-namespace rate limit splits per environment. There is no
+     * global one, because a namespace shared across environments is exactly that mix.
+     */
+    artifactsNamespace(): string;
+}
 /** The names a feature environment provisions under, with the project already bound. */
 export interface FeatureNames {
-    /** A feature's D1, KV, or R2 resource — `<project>-f<issue>-<slug>-<binding>-<kind>`. */
+    /** A feature's D1, KV, R2 or Queue resource — `<project>-f<issue>-<slug>--<binding>-<kind>`. */
     resource(binding: string, kind: FeatureResourceKind): string;
     /**
      * A feature's Worker script — `<project>-f<issue>-<slug>-<app>`, from the `apps/<app>` directory and
      * never the deploy name, which already leads with the project (#587).
      */
     worker(app: string): string;
+    /**
+     * A feature's Artifacts namespace — `<project>-f<issue>-<slug>--artifacts` (#673). The tail is what makes it a
+     * feature name `isFeatureOwnedName` reads back, so teardown reaps this feature's repos and no sibling's.
+     */
+    artifactsNamespace(): string;
 }
 /** Everything a project can be asked to name. Created once, from the project, by {@link resourceNames}. */
 export interface ProjectNames {
     /** The kebabbed project name every name below leads with. */
     readonly project: string;
     /** The names in one environment. Throws if the environment is not one this scheme accepts. */
-    env(environment: string): ScopedNames;
+    env(environment: string): EnvironmentNames;
     /** The names shared by every environment — the `global` scope, without typing the word. */
     readonly global: ScopedNames;
     /** The names a feature environment provisions under. */

package/dist/naming/resourceNames.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resourceNames.d.ts","sourceRoot":"","sources":["../../src/naming/resourceNames.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,mBAAmB,EAA0C,MAAM,WAAW,CAAC;AAInH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,uFAAuF;IACvF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kFAAkF;IAClF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kGAAkG;IAClG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,iEAAiE;IACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAAC;IAC7D;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7B;AAED,2GAA2G;AAC3G,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC;IACtC,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,wDAAwD;IACxD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC;CACnE;AA8DD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAmB3D"}
+{"version":3,"file":"resourceNames.d.ts","sourceRoot":"","sources":["../../src/naming/resourceNames.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAIzB,MAAM,WAAW,CAAC;AAInB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,uFAAuF;IACvF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kFAAkF;IAClF,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,mFAAmF;IACnF,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,kGAAkG;IAClG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,iEAAiE;IACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,CAAC;CAC9B;AAED,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAAC;IAC7D;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B;;;OAGG;IACH,kBAAkB,IAAI,MAAM,CAAC;CAC9B;AAED,2GAA2G;AAC3G,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,wDAAwD;IACxD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC;CACnE;AA+ED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAuB3D"}

package/dist/naming/resourceNames.js

@@ -4,7 +4,7 @@ import { InternalError, ValidationError } from "../error/pithyError.js";
 import { GLOBAL_SCOPE, assertValidEnvironment } from "./environment.js";
 import { NAMESPACE_LIMITS } from "./limits.js";
 import { assertValidProjectName, kebab, resourceName } from "./resource.js";
-import { featureResourceName, featureWorkerName } from "./feature.js";
+import { featureArtifactsNamespace, featureResourceName, featureWorkerName } from "./feature.js";
 import { workflowHostName, workflowScriptName } from "../workflow/naming.js";
 //#region src/naming/resourceNames.ts
 /**
@@ -49,6 +49,19 @@ function scopedName(project, scope, thing, limit) {
 	});
 	return name;
 }
+/**
+* `<project>-<env>`, under the Artifacts namespace rule. The project and environment are both validated by now, and
+* the longest of each compose 34 characters, so the cap is a check rather than a truncation that ever happens.
+*/
+function artifactsNamespaceName(project, environment) {
+	const limit = NAMESPACE_LIMITS.artifactsNamespace;
+	const name = `${project}-${environment}`;
+	if (name.length > limit.maxLength || name.length < limit.minLength) throw new InternalError({
+		message: `"${name}" does not fit ${limit.label}, which takes ${limit.minLength} to ${limit.maxLength} characters.`,
+		action: "Shorten the project or environment name."
+	});
+	return name;
+}
 /** The getters for one scope. `global` and every environment share this, so nothing special-cases either. */
 function scopedNames(project, scope) {
 	return {
@@ -66,6 +79,7 @@ function scopedNames(project, scope) {
 		d1: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.d1),
 		kv: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.kv),
 		r2: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.r2),
+		queue: (binding) => scopedName(project, scope, binding, NAMESPACE_LIMITS.queue),
 		vectorizeIndex: (index) => scopedName(project, scope, index, NAMESPACE_LIMITS.vectorizeIndex),
 		secretEntry: (secret) => scopedName(project, scope, secret, NAMESPACE_LIMITS.secretEntry),
 		apiToken: (profile) => scopedName(project, scope, profile, NAMESPACE_LIMITS.apiToken)
@@ -85,7 +99,10 @@ function resourceNames(project) {
 		project: normalized,
 		env(environment) {
 			assertValidEnvironment(environment);
-			return scopedNames(normalized, environment);
+			return {
+				...scopedNames(normalized, environment),
+				artifactsNamespace: () => artifactsNamespaceName(normalized, environment)
+			};
 		},
 		global: scopedNames(normalized, GLOBAL_SCOPE),
 		feature(identity) {
@@ -95,7 +112,8 @@ function resourceNames(project) {
 			};
 			return {
 				resource: (binding, kind) => featureResourceName(full, binding, kind),
-				worker: (app) => featureWorkerName(full, app)
+				worker: (app) => featureWorkerName(full, app),
+				artifactsNamespace: () => featureArtifactsNamespace(full)
 			};
 		}
 	};

package/dist/seed/writeD1.d.ts

@@ -12,8 +12,14 @@ export interface SeedD1Options {
 export interface SeedD1Result {
     /** The table seeded. */
     table: string;
-    /** The number of rows validated (and, unless `dryRun`, written). */
+    /** The number of rows the fixture holds, every one validated. */
     rows: number;
+    /**
+     * The number of rows this call inserted. Under `INSERT OR IGNORE` a row whose key is already there is
+     * not, so a re-run writes none, and says so here rather than repeating `rows` (#764). Always `0` under
+     * `dryRun`.
+     */
+    written: number;
 }
 /**
  * Seed one D1 group, idempotently and non-destructively.

package/dist/seed/writeD1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"writeD1.d.ts","sourceRoot":"","sources":["../../src/seed/writeD1.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE1C,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;CACd;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,WAAW,CAE/B,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EACf,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,CAAC,CAAC,OAAO,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CA4BvB"}
+{"version":3,"file":"writeD1.d.ts","sourceRoot":"","sources":["../../src/seed/writeD1.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE1C,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,WAAW,CAE/B,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EACf,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,CAAC,CAAC,OAAO,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CA+BvB"}

package/dist/seed/writeD1.js

@@ -63,12 +63,18 @@ async function seedD1Group(db, group, schema, options = {}) {
 	});
 	if (options.dryRun || encoded.length === 0) return {
 		table: group.table,
-		rows: encoded.length
+		rows: encoded.length,
+		written: 0
 	};
-	for (const chunk of chunkRowsByBoundParameters(encoded, columnsPerRow(encoded))) await db.insertInto(group.table).orIgnore().values(chunk).execute();
+	let written = 0n;
+	for (const chunk of chunkRowsByBoundParameters(encoded, columnsPerRow(encoded))) {
+		const results = await db.insertInto(group.table).orIgnore().values(chunk).execute();
+		for (const result of results) written += result.numInsertedOrUpdatedRows ?? 0n;
+	}
 	return {
 		table: group.table,
-		rows: encoded.length
+		rows: encoded.length,
+		written: Number(written)
 	};
 }
 //#endregion

package/dist/seed/writeKv.d.ts

@@ -15,6 +15,8 @@ export interface SeedKvResult {
     store: string;
     /** The number of entries validated (and, unless `dryRun`, considered for writing). */
     entries: number;
+    /** The number of entries this call put. An existing key is left alone and not counted (#764). Always `0` under `dryRun`. */
+    written: number;
 }
 /**
  * Seed one KV group, idempotently and non-destructively.

package/dist/seed/writeKv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"writeKv.d.ts","sourceRoot":"","sources":["../../src/seed/writeKv.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE1C,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;CACjB;AA4CD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EAC/F,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EACvB,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC3B,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC1B,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAiBvB"}
+{"version":3,"file":"writeKv.d.ts","sourceRoot":"","sources":["../../src/seed/writeKv.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE1C,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,4HAA4H;IAC5H,OAAO,EAAE,MAAM,CAAC;CACjB;AA4CD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EAC/F,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EACvB,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC3B,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC1B,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAmBvB"}

package/dist/seed/writeKv.js

@@ -50,15 +50,19 @@ async function seedKvGroup(store, group, spec, options = {}) {
 	});
 	if (options.dryRun) return {
 		store: group.store,
-		entries: group.entries.length
+		entries: group.entries.length,
+		written: 0
 	};
+	let written = 0;
 	for (const entry of group.entries) {
 		if (await keyExists(store, entry.key)) continue;
 		await store.put(entry.key, entry.value, entry.metadata !== void 0 ? { metadata: entry.metadata } : {});
+		written += 1;
 	}
 	return {
 		store: group.store,
-		entries: group.entries.length
+		entries: group.entries.length,
+		written
 	};
 }
 //#endregion

package/dist/version.generated.d.ts

@@ -3,5 +3,5 @@
 /** This package's npm name — the join key against a release feed. */
 export declare const PACKAGE_NAME = "@pithy-sh/core";
 /** This package's version, stamped from its own package.json at generation time. */
-export declare const PACKAGE_VERSION = "0.10.0";
+export declare const PACKAGE_VERSION = "0.11.0";
 //# sourceMappingURL=version.generated.d.ts.map

package/dist/version.generated.js

@@ -4,6 +4,6 @@
 /** This package's npm name — the join key against a release feed. */
 const PACKAGE_NAME = "@pithy-sh/core";
 /** This package's version, stamped from its own package.json at generation time. */
-const PACKAGE_VERSION = "0.10.0";
+const PACKAGE_VERSION = "0.11.0";
 //#endregion
 export { PACKAGE_NAME, PACKAGE_VERSION };

package/dist/worker/serviceLoopback.d.ts

@@ -0,0 +1,36 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+/**
+ * **A service binding under `pithy dev`: the call reaches the local target on its pinned port (#617).**
+ *
+ * Deployed, `env.APP_B.fetch(request)` is a service binding: Cloudflare runs the call inside the runtime, into
+ * the script the binding names. Locally there is no such script. `wrangler dev` would look for one in its own
+ * cross-process registry — the one `pithy dev` never relies on — and a Worker started on its own with
+ * `pithy dev --app app-a` would find nothing there at all. What does exist is the target itself, on the port its
+ * feature pinned for it, and `pithy dev` knows that address before anything starts.
+ *
+ * So `pithy dev` publishes one var, {@link SERVICE_ORIGINS_VAR}: a JSON map from each service binding this
+ * Worker declares to its target's local origin. Under `dev`, and only there, each of those bindings is replaced
+ * with a stand-in whose `fetch` sends the same request to that origin. The call site is byte-identical either
+ * way. A target that is not running refuses the connection, so the call fails at once as
+ * `core/upstream_failed`, naming the binding and the address, rather than hanging on a registry lookup.
+ *
+ * **Only `dev`, and only what was published.** The var is written by `pithy dev` and by nothing else, and the
+ * gate reads `ENVIRONMENT` off the request env as the Workflow loopback does (`workflow/dispatch.ts`): a
+ * deployment that lost its `ENVIRONMENT` var never opens it.
+ */
+/** The var `pithy dev` publishes: each service binding's local target, as JSON. */
+export declare const SERVICE_ORIGINS_VAR = "PITHY_SERVICE_ORIGINS";
+/** The transport. The runtime's `fetch`, or a test's. */
+export type ServiceLoopbackFetch = (request: Request) => Promise<Response>;
+/** Options for {@link withLocalServices}. */
+export interface LocalServicesOptions {
+    /** The transport. Defaults to the runtime's `fetch`. */
+    fetch?: ServiceLoopbackFetch;
+}
+/**
+ * The env a request runs with: under `pithy dev`, each published service binding replaced with its local
+ * stand-in; anywhere else, the env unchanged — the same object, so nothing outside `dev` pays for this.
+ */
+export declare function withLocalServices(env: Record<string, unknown>, options?: LocalServicesOptions): Record<string, unknown>;
+//# sourceMappingURL=serviceLoopback.d.ts.map

package/dist/worker/serviceLoopback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serviceLoopback.d.ts","sourceRoot":"","sources":["../../src/worker/serviceLoopback.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAa3D,yDAAyD;AACzD,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAgC3E,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,wDAAwD;IACxD,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,OAAO,GAAE,oBAAyB,GACjC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB"}

package/dist/worker/serviceLoopback.js

@@ -0,0 +1,74 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+import { UpstreamError } from "../error/pithyError.js";
+import { commandName } from "../cli/command.js";
+import "./identity.js";
+import { z } from "zod";
+//#region src/worker/serviceLoopback.ts
+/**
+* **A service binding under `pithy dev`: the call reaches the local target on its pinned port (#617).**
+*
+* Deployed, `env.APP_B.fetch(request)` is a service binding: Cloudflare runs the call inside the runtime, into
+* the script the binding names. Locally there is no such script. `wrangler dev` would look for one in its own
+* cross-process registry — the one `pithy dev` never relies on — and a Worker started on its own with
+* `pithy dev --app app-a` would find nothing there at all. What does exist is the target itself, on the port its
+* feature pinned for it, and `pithy dev` knows that address before anything starts.
+*
+* So `pithy dev` publishes one var, {@link SERVICE_ORIGINS_VAR}: a JSON map from each service binding this
+* Worker declares to its target's local origin. Under `dev`, and only there, each of those bindings is replaced
+* with a stand-in whose `fetch` sends the same request to that origin. The call site is byte-identical either
+* way. A target that is not running refuses the connection, so the call fails at once as
+* `core/upstream_failed`, naming the binding and the address, rather than hanging on a registry lookup.
+*
+* **Only `dev`, and only what was published.** The var is written by `pithy dev` and by nothing else, and the
+* gate reads `ENVIRONMENT` off the request env as the Workflow loopback does (`workflow/dispatch.ts`): a
+* deployment that lost its `ENVIRONMENT` var never opens it.
+*/
+/** The var `pithy dev` publishes: each service binding's local target, as JSON. */
+const SERVICE_ORIGINS_VAR = "PITHY_SERVICE_ORIGINS";
+/** The one environment the stand-in is made in. */
+const LOCAL = "dev";
+/** What the var carries: binding name to an `http(s)` origin. */
+const ServiceOrigins = z.record(z.string().describe("A service binding's name in the Worker env."), z.url({ protocol: /^https?$/ }).describe("The local origin of the Worker it calls, as `pithy dev` pinned it.")).describe("Each service binding's local target, published by `pithy dev`.");
+/** A stand-in for one service binding: every request sent to `origin`, its path, method, headers and body kept. */
+function localService(binding, origin, send) {
+	const target = new URL(origin);
+	return { async fetch(input, init) {
+		const request = new Request(input, init);
+		const url = new URL(request.url);
+		url.protocol = target.protocol;
+		url.host = target.host;
+		try {
+			return await send(new Request(url, request));
+		} catch (cause) {
+			throw new UpstreamError({
+				message: `The Worker ${binding} calls is not answering.`,
+				action: `Check that it is running under ${commandName("dev")} at ${target.origin}.`,
+				detail: `${request.method} ${url.href} failed: ${String(cause)}`
+			}, { cause });
+		}
+	} };
+}
+/**
+* The env a request runs with: under `pithy dev`, each published service binding replaced with its local
+* stand-in; anywhere else, the env unchanged — the same object, so nothing outside `dev` pays for this.
+*/
+function withLocalServices(env, options = {}) {
+	if (env["ENVIRONMENT"] !== LOCAL) return env;
+	const published = env[SERVICE_ORIGINS_VAR];
+	if (typeof published !== "string") return env;
+	let parsed;
+	try {
+		parsed = JSON.parse(published);
+	} catch {
+		return env;
+	}
+	const origins = ServiceOrigins.safeParse(parsed);
+	if (!origins.success || Object.keys(origins.data).length === 0) return env;
+	const send = options.fetch ?? ((request) => fetch(request));
+	const local = { ...env };
+	for (const [binding, origin] of Object.entries(origins.data)) local[binding] = localService(binding, origin, send);
+	return local;
+}
+//#endregion
+export { SERVICE_ORIGINS_VAR, withLocalServices };

package/dist/workflow/faults.d.ts

@@ -102,6 +102,17 @@ export interface DurableStepLike extends WorkflowStepLike {
     /** Pause the instance for `durationMs`, then resume. */
     sleep(name: string, durationMs: number): Promise<void>;
 }
+/** What {@link classifiedSteps} hands back: a pausing runner, and a step that runs exactly once. */
+export interface ClassifiedSteps extends DurableStepLike {
+    /**
+     * Run a named step with **no retries**, still classified (pithy-sh/pithy#602).
+     *
+     * For a body that mutates somebody else's system — a provider roll — where a platform re-running the
+     * step after an eviction would do it twice. The classification still decides what the instance's
+     * failure says; it can no longer decide on a retry, because there is none to give.
+     */
+    once<T>(name: string, fn: () => Promise<T>): Promise<T>;
+}
 /**
  * The platform's terminal-error class — `NonRetryableError` from `cloudflare:workflows`, taken as a
  * parameter.
@@ -127,5 +138,5 @@ export interface TerminalErrorConstructor {
  * `runSendBatch`, `runAtRestKeyRotation`) takes this instead with no change: the classification is
  * declared once, at the entrypoint, and every step below it inherits the decision.
  */
-export declare function classifiedSteps(step: WorkflowStepLike, policy: WorkflowRetryPolicy, terminalError: TerminalErrorConstructor): DurableStepLike;
+export declare function classifiedSteps(step: WorkflowStepLike, policy: WorkflowRetryPolicy, terminalError: TerminalErrorConstructor): ClassifiedSteps;
 //# sourceMappingURL=faults.d.ts.map

package/dist/workflow/faults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"faults.d.ts","sourceRoot":"","sources":["../../src/workflow/faults.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,2FAA2F;AAC3F,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,UAAU,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,iHAAiH;IACjH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7C;AAED,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,WAAW,EAAE,wBAAwB,CAAC;IACtC,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAsDD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,GAAG,aAAa,CA0BhG;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+FAA+F;IAC/F,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD;;;OAGG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,wDAAwD;IACxD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,mBAAmB,EAC3B,aAAa,EAAE,wBAAwB,GACtC,eAAe,CAqDjB"}
+{"version":3,"file":"faults.d.ts","sourceRoot":"","sources":["../../src/workflow/faults.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,2FAA2F;AAC3F,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,UAAU,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,iHAAiH;IACjH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7C;AAED,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,WAAW,EAAE,wBAAwB,CAAC;IACtC,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAsDD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,GAAG,aAAa,CA0BhG;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+FAA+F;IAC/F,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD;;;OAGG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,wDAAwD;IACxD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAWD,oGAAoG;AACpG,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD;;;;;;OAMG;IACH,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,mBAAmB,EAC3B,aAAa,EAAE,wBAAwB,GACtC,eAAe,CA2DjB"}

package/dist/workflow/faults.js

@@ -91,23 +91,30 @@ function classifyWorkflowFault(error, policy) {
 * declared once, at the entrypoint, and every step below it inherits the decision.
 */
 function classifiedSteps(step, policy, terminalError) {
+	const classify = (fn) => async () => {
+		try {
+			return await fn();
+		} catch (error) {
+			const fault = classifyWorkflowFault(error, policy);
+			if (fault.disposition === "retry") throw error;
+			const terminal = new terminalError(encodeWorkflowStepMessage({
+				code: fault.code,
+				message: messageOf(error),
+				action: pithyActionOf(error)
+			}));
+			terminal.cause = error;
+			throw terminal;
+		}
+	};
 	const runner = {
 		do(name, fn) {
-			return step.do(name, async () => {
-				try {
-					return await fn();
-				} catch (error) {
-					const fault = classifyWorkflowFault(error, policy);
-					if (fault.disposition === "retry") throw error;
-					const terminal = new terminalError(encodeWorkflowStepMessage({
-						code: fault.code,
-						message: messageOf(error),
-						action: pithyActionOf(error)
-					}));
-					terminal.cause = error;
-					throw terminal;
-				}
-			});
+			return step.do(name, classify(fn));
+		},
+		once(name, fn) {
+			return step.do(name, { retries: {
+				limit: 0,
+				delay: 0
+			} }, classify(fn));
 		},
 		/**
 		* Forwarded, and deliberately unclassified. A pause raises no fault of the capability's — the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pithy-sh/core",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -26,7 +26,7 @@
   },
   "scripts": {
     "build": "tsdown && tsc -p tsconfig.build.json && bun ../../tooling/build/src/stampDeclarations.ts",
-    "typecheck": "tsc -p tsconfig.json",
+    "typecheck": "bun check -p tsconfig.json",
     "test": "vitest run",
     "test:node": "vitest run --project=node",
     "test:workers": "vitest run --project=workers",