alchemy 2.0.0-beta.13 → 2.0.0-beta.14

package/lib/Cloudflare/StateStore/Api.d.ts

@@ -0,0 +1,62 @@
+import * as Cloudflare from "alchemy/Cloudflare";
+import * as Effect from "effect/Effect";
+export declare const STATE_STORE_SCRIPT_NAME: "alchemy-state-store";
+declare const _default: Effect.Effect<import("effect/Pipeable").Pipeable & import("../../Resource.ts").ResourceLike<"Cloudflare.Worker", Cloudflare.WorkerProps<any, Cloudflare.WorkerAssetsConfig | undefined>, {
+    workerId: string;
+    workerName: string;
+    logpush: boolean | undefined;
+    url: string | undefined;
+    tags: string[] | undefined;
+    durableObjectNamespaces: Record<string, string>;
+    accountId: string;
+    domains: {
+        hostname: string;
+        id: string;
+        zoneId: string;
+    }[];
+    hash?: {
+        assets: string | undefined;
+        bundle: string | undefined;
+        input: string | undefined;
+    };
+}, {
+    bindings?: Cloudflare.WorkerBinding[];
+    containers?: {
+        className: string;
+    }[];
+}, Cloudflare.Providers> & {
+    bind(sid: string, binding: import("../../Input.ts").Input<{
+        bindings?: Cloudflare.WorkerBinding[];
+        containers?: {
+            className: string;
+        }[];
+    }>): Effect.Effect<void>;
+    bind(template: TemplateStringsArray, ...args: any[]): (binding: import("../../Input.ts").Input<{
+        bindings?: Cloudflare.WorkerBinding[];
+        containers?: {
+            className: string;
+        }[];
+    }>) => Effect.Effect<void>;
+} & {
+    workerId: import("../../Output.ts").Output<string, never>;
+    workerName: import("../../Output.ts").Output<string, never>;
+    logpush: import("../../Output.ts").Output<boolean | undefined, never>;
+    url: import("../../Output.ts").Output<string | undefined, never>;
+    tags: import("../../Output.ts").Output<string[] | undefined, never>;
+    durableObjectNamespaces: import("../../Output.ts").Output<Record<string, string>, never>;
+    accountId: import("../../Output.ts").Output<string, never>;
+    domains: import("../../Output.ts").Output<{
+        hostname: string;
+        id: string;
+        zoneId: string;
+    }[], never>;
+    hash: import("../../Output.ts").Output<{
+        assets: string | undefined;
+        bundle: string | undefined;
+        input: string | undefined;
+    } | undefined, never>;
+} & import("../../Platform.ts").Rpc<{
+    fetch: Effect.Effect<Effect.Effect<import("effect/unstable/http/HttpServerResponse").HttpServerResponse, import("effect/unstable/http/HttpServerError").HttpServerError, import("effect/Scope").Scope | import("effect/unstable/http/HttpServerRequest").HttpServerRequest>, never, import("effect/FileSystem").FileSystem | import("effect/Scope").Scope | Cloudflare.WorkerEnvironment>;
+}>, never, Cloudflare.Providers>;
+export default _default;
+//# sourceMappingURL=Api.d.ts.map

package/lib/Cloudflare/StateStore/Api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Api.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/StateStore/Api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AAMjD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAYxC,eAAO,MAAM,uBAAuB,EAAG,qBAA8B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEtE,wBA6GE"}

package/lib/Cloudflare/StateStore/Api.js

@@ -0,0 +1,101 @@
+import * as Cloudflare from "alchemy/Cloudflare";
+import { BearerTokenValidator, StateApi, StateAuthLive, } from "alchemy/State/HttpStateApi";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Path from "effect/Path";
+import * as Etag from "effect/unstable/http/Etag";
+import * as HttpPlatform from "effect/unstable/http/HttpPlatform";
+import * as HttpRouter from "effect/unstable/http/HttpRouter";
+import * as HttpApiBuilder from "effect/unstable/httpapi/HttpApiBuilder";
+import * as HttpApiError from "effect/unstable/httpapi/HttpApiError";
+import crypto from "node:crypto";
+import Store from "./Store.js";
+import { AuthToken } from "./Token.js";
+export const STATE_STORE_SCRIPT_NAME = "alchemy-state-store";
+export default Cloudflare.Worker("Api", {
+    name: STATE_STORE_SCRIPT_NAME,
+    main: import.meta.path,
+    url: true,
+    compatibility: {
+        flags: ["nodejs_compat"],
+        date: "2026-03-17",
+    },
+}, Effect.gen(function* () {
+    const secret = yield* Cloudflare.Secret.bind(AuthToken);
+    const store = yield* Store;
+    const bearerTokenValidator = Layer.effect(BearerTokenValidator, secret.get().pipe(Effect.map((expected) => BearerTokenValidator.of({
+        validate: (token) => !!expected && timingSafeEqual(token, expected)
+            ? Effect.void
+            : Effect.fail(new HttpApiError.Unauthorized()),
+    })), Effect.orDie));
+    const stateApi = HttpApiBuilder.group(StateApi, "state", (handlers) => handlers
+        .handle("listStacks", () => store.getByName(Store.ROOT_DO_NAME).listStacks())
+        .handle("listStages", ({ params }) => store.getByName(params.stack).listStages())
+        .handle("listResources", ({ params }) => store.getByName(params.stack).listResources({ stage: params.stage }))
+        .handle("getState", ({ params }) => store
+        .getByName(params.stack)
+        .get({ stage: params.stage, fqn: decodeURIComponent(params.fqn) }))
+        .handle("setState", ({ params, payload }) => store
+        .getByName(params.stack)
+        .set({
+        stage: params.stage,
+        fqn: decodeURIComponent(params.fqn),
+        value: payload,
+    })
+        .pipe(Effect.tap(() => store
+        .getByName(Store.ROOT_DO_NAME)
+        .registerStack({ stack: params.stack }))))
+        .handle("deleteState", ({ params }) => 
+    // The DO method is `remove`, not `delete` — `delete` is
+    // reserved by Cloudflare's RPC stub proxy.
+    store
+        .getByName(params.stack)
+        .remove({
+        stage: params.stage,
+        fqn: decodeURIComponent(params.fqn),
+    })
+        .pipe(Effect.asVoid))
+        .handle("getReplacedResources", ({ params }) => store
+        .getByName(params.stack)
+        .getReplacedResources({ stage: params.stage }))
+        .handle("deleteStack", ({ params, query }) => store
+        .getByName(params.stack)
+        .deleteStack(query.stage === undefined ? {} : { stage: query.stage })
+        .pipe(Effect.flatMap(() => query.stage === undefined
+        ? store
+            .getByName(Store.ROOT_DO_NAME)
+            .unregisterStack({ stack: params.stack })
+        : Effect.void), Effect.asVoid)));
+    return {
+        fetch: HttpApiBuilder.layer(StateApi).pipe(Layer.provide(stateApi), Layer.provide(StateAuthLive), Layer.provide(bearerTokenValidator), 
+        // The state-store worker never serves files, so HttpPlatform's
+        // file-response surface is stubbed.
+        Layer.provide([Etag.layer, HttpPlatformStub, Path.layer]), HttpRouter.toHttpEffect),
+    };
+}).pipe(Effect.provide(Layer.mergeAll(Cloudflare.SecretBindingLive))));
+/**
+ * Stub `HttpPlatform` for the worker. The state-store API never
+ * issues file responses, so both surface methods die if invoked. Lets
+ * us avoid pulling in a `FileSystem` dependency that workers don't
+ * have.
+ */
+const HttpPlatformStub = Layer.succeed(HttpPlatform.HttpPlatform, {
+    fileResponse: () => Effect.die("HttpPlatform.fileResponse not supported"),
+    fileWebResponse: () => Effect.die("HttpPlatform.fileWebResponse not supported"),
+});
+/**
+ * Timing-safe string comparison using the Workers runtime's built-in
+ * `crypto.subtle.timingSafeEqual`.
+ *
+ * @see https://developers.cloudflare.com/workers/examples/protect-against-timing-attacks/
+ */
+const timingSafeEqual = (a, b) => {
+    const encoder = new TextEncoder();
+    const aBytes = encoder.encode(a);
+    const bBytes = encoder.encode(b);
+    if (aBytes.byteLength !== bBytes.byteLength)
+        return false;
+    // @ts-expect-error - TODO(sam)
+    return crypto.subtle.timingSafeEqual(aBytes, bBytes);
+};
+//# sourceMappingURL=Api.js.map

package/lib/Cloudflare/StateStore/Api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Api.js","sourceRoot":"","sources":["../../../src/Cloudflare/StateStore/Api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,QAAQ,EACR,aAAa,GACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAClD,OAAO,KAAK,YAAY,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,cAAc,MAAM,wCAAwC,CAAC;AACzE,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAC;AACrE,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAA8B,CAAC;AAEtE,eAAe,UAAU,CAAC,MAAM,CAC9B,KAAK,EACL;IACE,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;IACtB,GAAG,EAAE,IAAI;IACT,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,eAAe,CAAC;QACxB,IAAI,EAAE,YAAY;KACnB;CACF,EACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAE3B,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CACvC,oBAAoB,EACpB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CACf,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtB,oBAAoB,CAAC,EAAE,CAAC;QACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,CAAC,CAAC,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;YAC5C,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;KACnD,CAAC,CACH,EACD,MAAM,CAAC,KAAK,CACb,CACF,CAAC;IAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CACpE,QAAQ;SACL,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,CACzB,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CACjD;SACA,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACnC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAC3C;SACA,MAAM,CAAC,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACtC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CACrE;SACA,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACjC,KAAK;SACF,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;SACvB,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CACrE;SACA,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAC1C,KAAK;SACF,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;SACvB,GAAG,CAAC;QACH,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC;QACnC,KAAK,EAAE,OAAc;KACtB,CAAC;SACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,KAAK;SACF,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;SAC7B,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAC1C,CACF,CACJ;SACA,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;IACpC,wDAAwD;IACxD,2CAA2C;IAC3C,KAAK;SACF,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;SACvB,MAAM,CAAC;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC;KACpC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACvB;SACA,MAAM,CAAC,sBAAsB,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAC7C,KAAK;SACF,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;SACvB,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CACjD;SACA,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAC3C,KAAK;SACF,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;SACvB,WAAW,CACV,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CACxD;SACA,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,KAAK,CAAC,KAAK,KAAK,SAAS;QACvB,CAAC,CAAC,KAAK;aACF,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;aAC7B,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,EACD,MAAM,CAAC,MAAM,CACd,CACJ,CACJ,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC5B,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC;QACnC,+DAA+D;QAC/D,oCAAoC;QACpC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EACzD,UAAU,CAAC,YAAY,CACxB;KACF,CAAC;AACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CACtE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE;IAChE,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC;IACzE,eAAe,EAAE,GAAG,EAAE,CACpB,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC;CAC3D,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IACxD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC1D,+BAA+B;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC,CAAC"}

package/lib/Cloudflare/StateStore/State.d.ts

@@ -0,0 +1,39 @@
+import * as SecretsStore from "@distilled.cloud/cloudflare/secrets-store";
+import * as workers from "@distilled.cloud/cloudflare/workers";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import * as Config from "effect/Config";
+import { AuthError } from "../../Auth/AuthProvider.ts";
+import * as Cloudflare from "../../Cloudflare/Providers.ts";
+import * as CloudflareEnvironment from "../CloudflareEnvironment.ts";
+import { AlchemyContext } from "../../AlchemyContext.ts";
+import { State } from "../../State/State.ts";
+export declare const state: (props?: {
+    /**
+     * The name of the script to use for the state store.
+     * @default "alchemy-state-store"
+     */
+    workerName?: string;
+}) => Layer.Layer<State | Cloudflare.Credentials | CloudflareEnvironment.CloudflareEnvironment, never, AlchemyContext | import("effect/Path").Path | import("effect/FileSystem").FileSystem | HttpClient.HttpClient | import("../../Auth/AuthProvider.ts").AuthProviders>;
+/**
+ * Log in to a Cloudflare-deployed HTTP state-store.
+ *
+ * 1. Find the single account-wide Secrets Store.
+ * 2. Upload a short-lived edge-preview worker that binds the
+ *    auth-token secret and returns its value.
+ * 3. Derive the state-store worker URL from
+ *    {@link STATE_STORE_SCRIPT_NAME} and the account's workers.dev
+ *    subdomain.
+ * 4. Persist `{ url, token }` under the `http-state-store`
+ *    credentials file.
+ *
+ * Requirements are covered by the Cloudflare provider stack —
+ * `CloudflareEnvironment`, `Credentials`, `HttpClient`, and
+ * `FileSystem`.
+ */
+export declare const loginWithCloudflare: () => Effect.Effect<{
+    url: string;
+    authToken: string;
+}, Config.ConfigError | AuthError | import("@distilled.cloud/cloudflare").Unauthorized | import("@distilled.cloud/cloudflare").TooManyRequests | import("@distilled.cloud/cloudflare").InternalServerError | import("@distilled.cloud/cloudflare").BadGateway | import("@distilled.cloud/cloudflare").ServiceUnavailable | import("@distilled.cloud/cloudflare").GatewayTimeout | import("@distilled.cloud/cloudflare").CloudflareHttpError | import("@distilled.cloud/cloudflare").CloudflareParseError | import("@distilled.cloud/cloudflare").UnknownCloudflareError | workers.InvalidRoute | SecretsStore.InvalidAccountId, import("effect/FileSystem").FileSystem | HttpClient.HttpClient | Cloudflare.Credentials | CloudflareEnvironment.CloudflareEnvironment>;
+//# sourceMappingURL=State.d.ts.map

package/lib/Cloudflare/StateStore/State.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"State.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/StateStore/State.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,2CAA2C,CAAC;AAC1E,OAAO,KAAK,OAAO,MAAM,qCAAqC,CAAC;AAE/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAE9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAGvD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAO5D,OAAO,KAAK,qBAAqB,MAAM,6BAA6B,CAAC;AAGrE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,KAAK,EAAqB,MAAM,sBAAsB,CAAC;AAWhE,eAAO,MAAM,KAAK,GAAI,QAAQ;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,wQAuGE,CAAC;AAoCJ;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB;;;suBA6D7B,CAAC"}

package/lib/Cloudflare/StateStore/State.js

@@ -0,0 +1,217 @@
+import * as SecretsStore from "@distilled.cloud/cloudflare/secrets-store";
+import * as workers from "@distilled.cloud/cloudflare/workers";
+import * as Output from "alchemy/Output";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import * as Config from "effect/Config";
+import { AuthError } from "../../Auth/AuthProvider.js";
+import { readCredentials, writeCredentials } from "../../Auth/Credentials.js";
+import { ALCHEMY_PROFILE } from "../../Auth/Profile.js";
+import * as Cloudflare from "../../Cloudflare/Providers.js";
+import { deploy } from "../../Deploy.js";
+import * as Alchemy from "../../Stack.js";
+import { makeHttpStateStore, } from "../../State/HttpStateStore.js";
+import * as CloudflareEnvironment from "../CloudflareEnvironment.js";
+import * as Credentials from "../Credentials.js";
+import { AlchemyContext } from "../../AlchemyContext.js";
+import { makeLocalState } from "../../State/LocalState.js";
+import { State } from "../../State/State.js";
+import { syncState } from "../../State/Sync.js";
+import * as Clank from "../../Util/Clank.js";
+import { CloudflareAuth } from "../Auth/AuthProvider.js";
+import { EdgeSessionError, createEdgeSession } from "../EdgeSession.js";
+import Api, { STATE_STORE_SCRIPT_NAME } from "./Api.js";
+import { AuthTokenSecretName, TokenValue } from "./Token.js";
+/** Filename used for stored credentials under the profile directory. */
+const CREDENTIALS_FILE = "cloudflare-state-store";
+export const state = (props) => Layer.effect(State, Effect.gen(function* () {
+    const isCI = yield* Config.boolean("CI").pipe(Config.withDefault(false));
+    const alchemyContext = yield* AlchemyContext;
+    const profileName = yield* ALCHEMY_PROFILE;
+    const credentials = yield* readCredentials(profileName, CREDENTIALS_FILE);
+    const scriptName = props?.workerName ?? STATE_STORE_SCRIPT_NAME;
+    // TODO(sam): support upgrading state store, right now we only deploy once
+    if (credentials) {
+        // it's in the profile, let's go
+        const httpState = yield* makeHttpStateStore(credentials);
+        if (alchemyContext.updateStateStore) {
+            yield* deployStateStore(scriptName, httpState);
+        }
+        return httpState;
+    }
+    else {
+        // our profile does not contain a reference to the state store, let's try and resolve it
+        const { accountId } = yield* CloudflareEnvironment.CloudflareEnvironment;
+        const workerExists = yield* workers
+            .getScriptSetting({
+            accountId,
+            scriptName,
+        })
+            .pipe(Effect.map((setting) => setting !== undefined), Effect.catchTag("WorkerNotFound", () => Effect.succeed(false)));
+        if (workerExists) {
+            // it exists, so fetch the secret token
+            const credentials = yield* loginWithCloudflare();
+            if (!isCI) {
+                yield* writeCredentials(profileName, CREDENTIALS_FILE, credentials);
+            }
+            const httpState = yield* makeHttpStateStore(credentials);
+            if (alchemyContext.updateStateStore) {
+                yield* deployStateStore(scriptName, httpState);
+            }
+            return httpState;
+        }
+        else if (isCI) {
+            // TODO(sam): do we want to support bootstrapping the state store from CI?
+            // for now - just die here
+            return yield* Effect.die(new AuthError({
+                message: `State store not found for script ${scriptName}. Deploy the state store first.`,
+            }));
+        }
+        const shouldDeploy = yield* Clank.confirm({
+            message: "Cloudflare State Store not found. Do you want to deploy it?",
+        });
+        if (!shouldDeploy) {
+            return yield* Effect.die(new Clank.PromptCancelled());
+        }
+        const { url, authToken, localState } = yield* deployStateStore(scriptName);
+        const httpState = yield* makeHttpStateStore({ url, authToken });
+        yield* syncState(localState, httpState);
+        yield* writeCredentials(profileName, CREDENTIALS_FILE, {
+            url,
+            authToken,
+        });
+        yield* localState.deleteStack({
+            stack: "CloudflareStateStore",
+            stage: scriptName,
+        });
+        return httpState;
+    }
+}).pipe(Effect.orDie)).pipe(Layer.provideMerge(Credentials.fromAuthProvider()), Layer.provideMerge(CloudflareEnvironment.fromProfile()), Layer.provideMerge(CloudflareAuth), Layer.orDie);
+const deployStateStore = (scriptName, state) => Effect.gen(function* () {
+    const localState = state ?? (yield* makeLocalState());
+    // deploy it with local state (which we will then hoist into the Cloudflare state store)
+    const stateLayer = Layer.succeed(State, localState);
+    const { url, authToken } = yield* deploy({
+        // use the script name as the stage name (so the user can have multiple state stores)
+        stage: scriptName,
+        stack: Alchemy.Stack("CloudflareStateStore", {
+            providers: Cloudflare.providers(),
+            state: stateLayer,
+        }, Effect.gen(function* () {
+            const token = yield* TokenValue;
+            const api = yield* Api;
+            // Surface the bearer token so tests and clients can authenticate
+            // after deploy. The underlying value lives in the Cloudflare
+            // Secrets Store; this output carries the same generated string.
+            return {
+                url: api.url.as(),
+                authToken: token.text.pipe(Output.map(Redacted.value)),
+            };
+        })),
+    }).pipe(
+    // TODO(sam): we should not need to do this, but types do complain. fix deploy
+    Effect.provide(stateLayer));
+    return { url, authToken, localState };
+});
+/**
+ * Log in to a Cloudflare-deployed HTTP state-store.
+ *
+ * 1. Find the single account-wide Secrets Store.
+ * 2. Upload a short-lived edge-preview worker that binds the
+ *    auth-token secret and returns its value.
+ * 3. Derive the state-store worker URL from
+ *    {@link STATE_STORE_SCRIPT_NAME} and the account's workers.dev
+ *    subdomain.
+ * 4. Persist `{ url, token }` under the `http-state-store`
+ *    credentials file.
+ *
+ * Requirements are covered by the Cloudflare provider stack —
+ * `CloudflareEnvironment`, `Credentials`, `HttpClient`, and
+ * `FileSystem`.
+ */
+export const loginWithCloudflare = () => Effect.gen(function* () {
+    const isCI = yield* Config.boolean("CI").pipe(Config.withDefault(false));
+    const profileName = yield* ALCHEMY_PROFILE;
+    const { accountId } = yield* CloudflareEnvironment.CloudflareEnvironment;
+    // 1. Locate the single Secrets Store on the account.
+    const stores = yield* SecretsStore.listStores({ accountId });
+    const store = stores.result[0];
+    if (!store) {
+        return yield* Effect.fail(new AuthError({
+            message: "No Secrets Store found on this account. Deploy the state store first.",
+        }));
+    }
+    // 2. Fetch the auth-token value via an edge-preview worker.
+    const authToken = yield* readSecretViaEdge(store.id, AuthTokenSecretName);
+    // 3. Derive the deployed worker URL.
+    const { subdomain } = yield* workers.getSubdomain({ accountId });
+    const url = `https://${STATE_STORE_SCRIPT_NAME}.${subdomain}.workers.dev`;
+    if (!isCI) {
+        // 4. Persist credentials. The profile entry is managed by
+        //    `loadOrConfigure` when this is invoked through `configure`.
+        yield* writeCredentials(profileName, CREDENTIALS_FILE, {
+            url,
+            authToken: authToken.trim(),
+        }).pipe(Effect.mapError((e) => new AuthError({ message: "Failed to write credentials", cause: e })));
+        yield* Clank.success(`HTTP state store credentials saved for '${profileName}'.`);
+        yield* Clank.info(`  url:     ${url}`);
+    }
+    return {
+        url,
+        authToken: authToken.trim(),
+    };
+}).pipe(Effect.catchTag("EdgeSessionError", (e) => Effect.fail(new AuthError({
+    message: `Edge-preview secret read failed: ${e.message}`,
+    cause: e.cause,
+}))));
+/** Preview script name used by the edge-probe worker. */
+const PROBE_SCRIPT_NAME = "alchemy-state-store-probe";
+/**
+ * Tiny ES-module worker that reads `env.SECRET.get()` and echoes it
+ * back. Uploaded as an ephemeral edge-preview, called once, then
+ * discarded — see {@link readSecretViaEdge}.
+ */
+const SECRET_PROBE_SOURCE = `export default {
+  async fetch(_request, env) {
+    try {
+      const value = await env.SECRET.get();
+      return new Response(value ?? "", { status: 200, headers: { "content-type": "text/plain" } });
+    } catch (e) {
+      return new Response("Error: " + (e && e.message ? e.message : String(e)), { status: 500 });
+    }
+  },
+};`;
+/**
+ * Upload a tiny edge-preview worker that binds the given Secrets
+ * Store secret, call it once, and return the decoded value. The
+ * Cloudflare REST API deliberately hides secret values; only worker
+ * bindings can resolve them, so this is the out-of-band path.
+ */
+const readSecretViaEdge = (storeId, secretName) => Effect.gen(function* () {
+    const http = yield* HttpClient.HttpClient;
+    const file = new File([SECRET_PROBE_SOURCE], "worker.js", {
+        type: "application/javascript+module",
+    });
+    const session = yield* createEdgeSession({
+        scriptName: PROBE_SCRIPT_NAME,
+        files: [file],
+        bindings: [
+            { type: "secrets_store_secret", name: "SECRET", secretName, storeId },
+        ],
+    });
+    const response = yield* http.get(session.url, {
+        headers: session.headers,
+    });
+    if (response.status !== 200) {
+        const body = yield* response.text.pipe(Effect.catch(() => Effect.succeed("")));
+        return yield* Effect.fail(new EdgeSessionError({
+            message: `Secret probe returned ${response.status}: ${body.slice(0, 200)}`,
+        }));
+    }
+    return yield* response.text;
+}).pipe(Effect.mapError((cause) => cause instanceof EdgeSessionError
+    ? cause
+    : new EdgeSessionError({ message: "Failed to read secret", cause })));
+//# sourceMappingURL=State.js.map

package/lib/Cloudflare/StateStore/State.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"State.js","sourceRoot":"","sources":["../../../src/Cloudflare/StateStore/State.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,2CAA2C,CAAC;AAC1E,OAAO,KAAK,OAAO,MAAM,qCAAqC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAE9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,kBAAkB,GAEnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,qBAAqB,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAqB,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,GAAG,EAAE,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7D,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAElD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAMrB,EAAE,EAAE,CACH,KAAK,CAAC,MAAM,CACV,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CACxC,WAAW,EACX,gBAAgB,CACjB,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,UAAU,IAAI,uBAAuB,CAAC;IAEhE,0EAA0E;IAC1E,IAAI,WAAW,EAAE,CAAC;QAChB,gCAAgC;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAEzD,IAAI,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACpC,KAAK,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,wFAAwF;QACxF,MAAM,EAAE,SAAS,EAAE,GACjB,KAAK,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;QACrD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,OAAO;aAChC,gBAAgB,CAAC;YAChB,SAAS;YACT,UAAU;SACX,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,EAC9C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAC/D,CAAC;QAEJ,IAAI,YAAY,EAAE,CAAC;YACjB,uCAAuC;YACvC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,mBAAmB,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,gBAAgB,EAChB,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAEzD,IAAI,cAAc,CAAC,gBAAgB,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,0EAA0E;YAC1E,0BAA0B;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,SAAS,CAAC;gBACZ,OAAO,EAAE,oCAAoC,UAAU,iCAAiC;aACzF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACxC,OAAO,EACL,6DAA6D;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,GAClC,KAAK,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAEtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAExC,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,gBAAgB,EAChB;YACE,GAAG;YACH,SAAS;SACV,CACF,CAAC;QAEF,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;YAC5B,KAAK,EAAE,sBAAsB;YAC7B,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC,IAAI,CACJ,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAClD,KAAK,CAAC,YAAY,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC,EACvD,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,EAClC,KAAK,CAAC,KAAK,CACZ,CAAC;AAEJ,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,KAAoB,EAAE,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IACtD,wFAAwF;IACxF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QACvC,qFAAqF;QACrF,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,OAAO,CAAC,KAAK,CAClB,sBAAsB,EACtB;YACE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE;YACjC,KAAK,EAAE,UAAU;SAClB,EACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;YAChC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;YAEvB,iEAAiE;YACjE,6DAA6D;YAC7D,gEAAgE;YAChE,OAAO;gBACL,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAU;gBACzB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACvD,CAAC;QACJ,CAAC,CAAC,CACH;KACF,CAAC,CAAC,IAAI;IACL,8EAA8E;IAC9E,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IAC3C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;IAEzE,qDAAqD;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,SAAS,CAAC;YACZ,OAAO,EACL,uEAAuE;SAC1E,CAAC,CACH,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAE1E,qCAAqC;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,WAAW,uBAAuB,IAAI,SAAS,cAAc,CAAC;IAE1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,0DAA0D;QAC1D,iEAAiE;QACjE,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,gBAAgB,EAChB;YACE,GAAG;YACH,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;SAC5B,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CACtE,CACF,CAAC;QAEF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAClB,2CAA2C,WAAW,IAAI,CAC3D,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO;QACL,GAAG;QACH,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CACxC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;IACZ,OAAO,EAAE,oCAAoC,CAAC,CAAC,OAAO,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK;CACf,CAAC,CACH,CACF,CACF,CAAC;AAEJ,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,mBAAmB,GAAG;;;;;;;;;GASzB,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,UAAkB,EAAE,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE;QACxD,IAAI,EAAE,+BAA+B;KACtC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACvC,UAAU,EAAE,iBAAiB;QAC7B,KAAK,EAAE,CAAC,IAAI,CAAC;QACb,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE;SACtE;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACpC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACvC,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,gBAAgB,CAAC;YACnB,OAAO,EAAE,yBAAyB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SAC3E,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC9B,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,KAAK,YAAY,gBAAgB;IAC/B,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CACtE,CACF,CAAC"}

package/lib/Cloudflare/StateStore/Store.d.ts

@@ -0,0 +1,82 @@
+import * as Cloudflare from "alchemy/Cloudflare";
+import type { ReplacedResourceState, ResourceState } from "alchemy/State";
+import * as Effect from "effect/Effect";
+declare const Store_base: Effect.Effect<Cloudflare.DurableObjectNamespace<Store>, never, Cloudflare.Worker | Cloudflare.SecretBinding> & (new (_: never) => {
+    /**
+     * (Root DO only) List every stack name ever registered.
+     */
+    listStacks: () => Effect.Effect<string[], never, never>;
+    /**
+     * (Root DO only) Register a stack name. Idempotent — safe to
+     * call on every `set` to the corresponding stack DO.
+     */
+    registerStack: ({ stack }: {
+        stack: string;
+    }) => Effect.Effect<void, never, never>;
+    /**
+     * (Root DO only) Remove a stack name from the global index.
+     */
+    unregisterStack: ({ stack }: {
+        stack: string;
+    }) => Effect.Effect<boolean, never, never>;
+    /** (Stack DO only) List stages with at least one resource. */
+    listStages: () => Effect.Effect<string[], never, never>;
+    /** (Stack DO only) List every resource FQN in a stage. */
+    listResources: ({ stage }: {
+        stage: string;
+    }) => Effect.Effect<string[], never, never>;
+    /**
+     * (Stack DO only) Get a resource by (stage, fqn). Returns
+     * null if missing.
+     */
+    get: ({ stage, fqn }: {
+        stage: string;
+        fqn: string;
+    }) => Effect.Effect<ResourceState | undefined, never, never>;
+    /**
+     * (Stack DO only) Persist a resource. Returns the stored
+     * value unchanged.
+     */
+    set: ({ stage, fqn, value, }: {
+        stage: string;
+        fqn: string;
+        value: ResourceState;
+    }) => Effect.Effect<ResourceState, never, never>;
+    /**
+     * (Stack DO only) Delete a resource. Idempotent.
+     *
+     * Exposed as `remove` (not `delete`) because Cloudflare's
+     * Durable Object RPC stub reserves `delete` and refuses to
+     * proxy the call, surfacing as "RPC receiver does not
+     * implement the method 'delete'".
+     */
+    remove: ({ stage, fqn }: {
+        stage: string;
+        fqn: string;
+    }) => Effect.Effect<boolean, never, never>;
+    /**
+     * (Stack DO only) Delete every resource in this stack, or every
+     * resource in a single stage when specified.
+     */
+    deleteStack: ({ stage }?: {
+        stage?: string;
+    }) => Effect.Effect<void, never, never>;
+    /**
+     * (Stack DO only) Return every resource in a stage whose
+     * `status === "replaced"`. Each entry is decrypted so the
+     * `status` field can be inspected.
+     */
+    getReplacedResources: ({ stage }: {
+        stage: string;
+    }) => Effect.Effect<ReplacedResourceState[], never, never>;
+});
+export default class Store extends Store_base {
+    /**
+     * Well-known DO name whose sole job is to track the set of stacks
+     * that have ever had resources written. `listStacks` queries it;
+     * every `set` asks it to register the stack (idempotent).
+     */
+    static readonly ROOT_DO_NAME: "__root__";
+}
+export {};
+//# sourceMappingURL=Store.d.ts.map

package/lib/Cloudflare/StateStore/Store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Store.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/StateStore/Store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;IAiEhC;;OAEG;;IAYH;;;OAGG;+BACwB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAG5C;;OAEG;iCAC0B;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAK9C,8DAA8D;;IAiB9D,0DAA0D;+BAC/B;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAgB5C;;;OAGG;0BACmB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IASpD;;;OAGG;kCAKA;QACD,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,aAAa,CAAC;KACtB;IAUD;;;;;;;OAOG;6BACsB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IAGvD;;;OAGG;8BACsB;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAa3C;;;;OAIG;sCAC+B;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;;AAhM3D,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,UAkNlC;IACC;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAG,UAAU,CAAU;CACpD"}