alchemy 2.0.0-beta.62 → 2.0.0-beta.63

package/lib/Cloudflare/R2/ReadWriteBucketHttp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ReadWriteBucketHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/ReadWriteBucketHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAC;AAG9B;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;GAQ/B,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,UAC7B,SAAS,cACJ,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAClC,qBAIiC,CAAC"}
+{"version":3,"file":"ReadWriteBucketHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/ReadWriteBucketHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAyB,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAC;AAG9B;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;GAa/B,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,SAC9B,MAAM,cACA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAClC,qBAIiC,CAAC"}

package/lib/Cloudflare/R2/ReadWriteBucketHttp.js

@@ -1,5 +1,6 @@
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
+import { authorizeWith } from "../HttpClientUtils.js";
 import { makeHttpBucketBinding } from "./BucketHttp.js";
 import { makeReadR2HttpClient } from "./ReadBucketHttp.js";
 import { ReadWriteBucket, } from "./ReadWriteBucket.js";
@@ -11,11 +12,11 @@ import { makeWriteR2HttpClient } from "./WriteBucketHttp.js";
  */
 export const ReadWriteBucketHttp = Layer.effect(ReadWriteBucket, Effect.suspend(() => makeHttpBucketBinding({
     permissionGroups: ["Workers R2 Storage Read", "Workers R2 Storage Write"],
-    makeClient: makeReadWriteR2HttpClient,
+    makeClient: (token, bucketName, jurisdiction) => makeReadWriteR2HttpClient({ authorize: authorizeWith(token), accountId: token.accountId }, bucketName, jurisdiction),
 })));
 /** Build the HTTP-backed {@link ReadWrite} over a bound token + bucket. */
-export const makeReadWriteR2HttpClient = (token, bucketName, jurisdiction) => ({
-    ...makeReadR2HttpClient(token, bucketName, jurisdiction),
-    ...makeWriteR2HttpClient(token, bucketName, jurisdiction),
+export const makeReadWriteR2HttpClient = (auth, bucketName, jurisdiction) => ({
+    ...makeReadR2HttpClient(auth, bucketName, jurisdiction),
+    ...makeWriteR2HttpClient(auth, bucketName, jurisdiction),
 });
 //# sourceMappingURL=ReadWriteBucketHttp.js.map

package/lib/Cloudflare/R2/ReadWriteBucketHttp.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReadWriteBucketHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/ReadWriteBucketHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAkB,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,eAAe,GAEhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAC7C,eAAe,EACf,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,gBAAgB,EAAE,CAAC,yBAAyB,EAAE,0BAA0B,CAAC;IACzE,UAAU,EAAE,yBAAyB;CACtC,CAAC,CACH,CACF,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,KAAgB,EAChB,UAAiC,EACjC,YAAmC,EACZ,EAAE,CACzB,CAAC;IACC,GAAG,oBAAoB,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC;IACxD,GAAG,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC;CAC1D,CAAiC,CAAC"}
+{"version":3,"file":"ReadWriteBucketHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/ReadWriteBucketHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAe,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,eAAe,GAEhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAC7C,eAAe,EACf,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,gBAAgB,EAAE,CAAC,yBAAyB,EAAE,0BAA0B,CAAC;IACzE,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,CAC9C,yBAAyB,CACvB,EAAE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAC/D,UAAU,EACV,YAAY,CACb;CACJ,CAAC,CACH,CACF,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,IAAY,EACZ,UAAiC,EACjC,YAAmC,EACZ,EAAE,CACzB,CAAC;IACC,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;IACvD,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;CACzD,CAAiC,CAAC"}

package/lib/Cloudflare/R2/ReadWriteBucketLocal.d.ts

@@ -0,0 +1,30 @@
+import * as Layer from "effect/Layer";
+import { ReadWriteBucket } from "./ReadWriteBucket.ts";
+/**
+ * Local implementation of the {@link ReadWriteBucket} binding — reads and
+ * writes R2 objects over the Cloudflare HTTP API using the **current
+ * credentials** instead of a native Worker binding (`ReadWriteBucketBinding`)
+ * or a scoped API token (`ReadWriteBucketHttp`).
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) to use the same
+ * `head`/`get`/`list`/`put`/`delete` client you'd use inside a Worker.
+ * Multipart uploads are unsupported over the HTTP API (mirrors
+ * `ReadWriteBucketHttp`).
+ *
+ * @example Seeding then reading a bucket from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const r2 = yield* Cloudflare.R2.ReadWriteBucket(bucket);
+ *     return Effect.fn(function* () {
+ *       yield* r2.put("hello.txt", "Hello, World!");
+ *       const object = yield* r2.get("hello.txt");
+ *       return object ? yield* object.text() : null;
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.R2.ReadWriteBucketLocal)),
+ * );
+ * ```
+ */
+export declare const ReadWriteBucketLocal: Layer.Layer<ReadWriteBucket, never, import("../CloudflareEnvironment.ts").CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=ReadWriteBucketLocal.d.ts.map

package/lib/Cloudflare/R2/ReadWriteBucketLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadWriteBucketLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/ReadWriteBucketLocal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oBAAoB,6MAGhC,CAAC"}

package/lib/Cloudflare/R2/ReadWriteBucketLocal.js

@@ -0,0 +1,33 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { makeLocalBucketBinding } from "./BucketLocal.js";
+import { ReadWriteBucket } from "./ReadWriteBucket.js";
+import { makeReadWriteR2HttpClient } from "./ReadWriteBucketHttp.js";
+/**
+ * Local implementation of the {@link ReadWriteBucket} binding — reads and
+ * writes R2 objects over the Cloudflare HTTP API using the **current
+ * credentials** instead of a native Worker binding (`ReadWriteBucketBinding`)
+ * or a scoped API token (`ReadWriteBucketHttp`).
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) to use the same
+ * `head`/`get`/`list`/`put`/`delete` client you'd use inside a Worker.
+ * Multipart uploads are unsupported over the HTTP API (mirrors
+ * `ReadWriteBucketHttp`).
+ *
+ * @example Seeding then reading a bucket from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const r2 = yield* Cloudflare.R2.ReadWriteBucket(bucket);
+ *     return Effect.fn(function* () {
+ *       yield* r2.put("hello.txt", "Hello, World!");
+ *       const object = yield* r2.get("hello.txt");
+ *       return object ? yield* object.text() : null;
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.R2.ReadWriteBucketLocal)),
+ * );
+ * ```
+ */
+export const ReadWriteBucketLocal = Layer.effect(ReadWriteBucket, Effect.suspend(() => makeLocalBucketBinding(makeReadWriteR2HttpClient)));
+//# sourceMappingURL=ReadWriteBucketLocal.js.map

package/lib/Cloudflare/R2/ReadWriteBucketLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadWriteBucketLocal.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/ReadWriteBucketLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAC9C,eAAe,EACf,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,CAAC,CACxE,CAAC"}

package/lib/Cloudflare/R2/WriteBucketHttp.d.ts

@@ -1,6 +1,6 @@
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
-import { type HttpToken } from "./BucketHttp.ts";
+import { type R2Auth } from "./BucketHttp.ts";
 import { WriteBucket, type WriteBucketClient } from "./WriteBucket.ts";
 /**
  * HTTP-backed implementation of the {@link WriteBucket} binding.
@@ -12,5 +12,5 @@ export declare const WriteBucketHttp: Layer.Layer<WriteBucket, never, import("..
     LogicalId: string;
 }>>;
 /** Build the write half of the HTTP-backed {@link ReadWrite} client. */
-export declare const makeWriteR2HttpClient: (token: HttpToken, bucketName: Effect.Effect<string>, jurisdiction: Effect.Effect<string>) => WriteBucketClient;
+export declare const makeWriteR2HttpClient: (auth: R2Auth, bucketName: Effect.Effect<string>, jurisdiction: Effect.Effect<string>) => WriteBucketClient;
 //# sourceMappingURL=WriteBucketHttp.d.ts.map

package/lib/Cloudflare/R2/WriteBucketHttp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WriteBucketHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/WriteBucketHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;GAQ3B,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,UACzB,SAAS,cACJ,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAClC,iBA0GF,CAAC"}
+{"version":3,"file":"WriteBucketHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/WriteBucketHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,EAOL,KAAK,MAAM,EACZ,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;GAa3B,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,SAC1B,MAAM,cACA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAClC,iBA0GF,CAAC"}

package/lib/Cloudflare/R2/WriteBucketHttp.js

@@ -13,12 +13,12 @@ import { WriteBucket } from "./WriteBucket.js";
  */
 export const WriteBucketHttp = Layer.effect(WriteBucket, Effect.suspend(() => makeHttpBucketBinding({
     permissionGroups: ["Workers R2 Storage Write"],
-    makeClient: makeWriteR2HttpClient,
+    makeClient: (token, bucketName, jurisdiction) => makeWriteR2HttpClient({ authorize: authorizeWith(token), accountId: token.accountId }, bucketName, jurisdiction),
 })));
 /** Build the write half of the HTTP-backed {@link ReadWrite} client. */
-export const makeWriteR2HttpClient = (token, bucketName, jurisdiction) => {
-    const authorize = authorizeWith(token);
-    const scope = makeR2HttpScope(token, bucketName, jurisdiction);
+export const makeWriteR2HttpClient = (auth, bucketName, jurisdiction) => {
+    const authorize = auth.authorize;
+    const scope = makeR2HttpScope(auth.accountId, bucketName, jurisdiction);
     return {
         put: ((key, value, options) => scope.pipe(Effect.flatMap(({ accountId, bucketName, cfR2Jurisdiction }) => toBody(value).pipe(Effect.flatMap(({ body, contentLength }) => {
             const meta = readHttpMetadata(options);

package/lib/Cloudflare/R2/WriteBucketHttp.js.map

@@ -1 +1 @@
-{"version":3,"file":"WriteBucketHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/WriteBucketHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,MAAM,EACN,SAAS,GAEV,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAmB,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CACzC,WAAW,EACX,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,gBAAgB,EAAE,CAAC,0BAA0B,CAAC;IAC9C,UAAU,EAAE,qBAAqB;CAClC,CAAC,CACH,CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAgB,EAChB,UAAiC,EACjC,YAAmC,EAChB,EAAE;IACrB,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAE/D,OAAO;QACL,GAAG,EAAE,CAAC,CACJ,GAAW,EACX,KAOsC,EACtC,OAAoB,EACpB,EAAE,CACF,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAChB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,SAAS,CACd,EAAE,CAAC,SAAS,CAAC;gBACX,SAAS;gBACT,UAAU;gBACV,UAAU,EAAE,GAAG;gBACf,gBAAgB;gBAChB,IAAI;gBACJ,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,eAAe,EAAE,IAAI,EAAE,eAAe;gBACtC,kBAAkB,EAAE,IAAI,EAAE,kBAAkB;gBAC5C,eAAe,EAAE,IAAI,EAAE,eAAe;gBACtC,YAAY,EAAE,IAAI,EAAE,YAAY;gBAChC,aAAa,EACX,OAAO,EAAE,aAAa,IAAI,IAAI;oBAC5B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;oBAC/B,CAAC,CAAC,aAAa,IAAI,IAAI;wBACrB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;wBACvB,CAAC,CAAC,SAAS;gBACjB,gBAAgB,EACd,OACD,EAAE,YAAY;aAChB,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,UAAU,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;gBAC1B,IAAI,EAAE,aAAa;gBACnB,cAAc,EACZ,OAGD,EAAE,cAAc;gBACjB,YAAY,EACV,OACD,EAAE,YAAY;gBACf,QAAQ,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC,CACH,CACF,CAAC;QACJ,CAAC,CAAC,CACH,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3B,CAAQ;QACX,MAAM,EAAE,CAAC,IAAuB,EAAE,EAAE,CAClC,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC7D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACjB,CAAC,CAAC,SAAS,CACP,EAAE,CAAC,aAAa,CAAC;gBACf,SAAS;gBACT,UAAU;gBACV,gBAAgB;gBAChB,IAAI,EAAE,IAAI;aACX,CAAC,CACH;YACH,CAAC,CAAC,SAAS,CACP,EAAE,CAAC,YAAY,CAAC;gBACd,SAAS;gBACT,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,gBAAgB;aACjB,CAAC,CACH,CACN,EACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC1B,MAAM,CAAC,MAAM,CACd;QACH,qBAAqB,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,GAAG,CACR,IAAI,OAAO,CAAC;YACV,OAAO,EACL,2EAA2E;YAC7E,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC;SAChC,CAAC,CACH;QACH,qBAAqB,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,GAAG,CACR,IAAI,OAAO,CAAC;YACV,OAAO,EACL,2EAA2E;YAC7E,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC;SAChC,CAAC,CACH;KACJ,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"WriteBucketHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/WriteBucketHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,MAAM,EACN,SAAS,GAEV,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAmB,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CACzC,WAAW,EACX,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,gBAAgB,EAAE,CAAC,0BAA0B,CAAC;IAC9C,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,CAC9C,qBAAqB,CACnB,EAAE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAC/D,UAAU,EACV,YAAY,CACb;CACJ,CAAC,CACH,CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,IAAY,EACZ,UAAiC,EACjC,YAAmC,EAChB,EAAE;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAExE,OAAO;QACL,GAAG,EAAE,CAAC,CACJ,GAAW,EACX,KAOsC,EACtC,OAAoB,EACpB,EAAE,CACF,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAChB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,SAAS,CACd,EAAE,CAAC,SAAS,CAAC;gBACX,SAAS;gBACT,UAAU;gBACV,UAAU,EAAE,GAAG;gBACf,gBAAgB;gBAChB,IAAI;gBACJ,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,eAAe,EAAE,IAAI,EAAE,eAAe;gBACtC,kBAAkB,EAAE,IAAI,EAAE,kBAAkB;gBAC5C,eAAe,EAAE,IAAI,EAAE,eAAe;gBACtC,YAAY,EAAE,IAAI,EAAE,YAAY;gBAChC,aAAa,EACX,OAAO,EAAE,aAAa,IAAI,IAAI;oBAC5B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;oBAC/B,CAAC,CAAC,aAAa,IAAI,IAAI;wBACrB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;wBACvB,CAAC,CAAC,SAAS;gBACjB,gBAAgB,EACd,OACD,EAAE,YAAY;aAChB,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,UAAU,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;gBAC1B,IAAI,EAAE,aAAa;gBACnB,cAAc,EACZ,OAGD,EAAE,cAAc;gBACjB,YAAY,EACV,OACD,EAAE,YAAY;gBACf,QAAQ,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC,CACH,CACF,CAAC;QACJ,CAAC,CAAC,CACH,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3B,CAAQ;QACX,MAAM,EAAE,CAAC,IAAuB,EAAE,EAAE,CAClC,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC7D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACjB,CAAC,CAAC,SAAS,CACP,EAAE,CAAC,aAAa,CAAC;gBACf,SAAS;gBACT,UAAU;gBACV,gBAAgB;gBAChB,IAAI,EAAE,IAAI;aACX,CAAC,CACH;YACH,CAAC,CAAC,SAAS,CACP,EAAE,CAAC,YAAY,CAAC;gBACd,SAAS;gBACT,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,gBAAgB;aACjB,CAAC,CACH,CACN,EACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC1B,MAAM,CAAC,MAAM,CACd;QACH,qBAAqB,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,GAAG,CACR,IAAI,OAAO,CAAC;YACV,OAAO,EACL,2EAA2E;YAC7E,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC;SAChC,CAAC,CACH;QACH,qBAAqB,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,GAAG,CACR,IAAI,OAAO,CAAC;YACV,OAAO,EACL,2EAA2E;YAC7E,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC;SAChC,CAAC,CACH;KACJ,CAAC;AACJ,CAAC,CAAC"}

package/lib/Cloudflare/R2/WriteBucketLocal.d.ts

@@ -0,0 +1,27 @@
+import * as Layer from "effect/Layer";
+import { WriteBucket } from "./WriteBucket.ts";
+/**
+ * Local implementation of the {@link WriteBucket} binding — writes R2 objects
+ * over the Cloudflare HTTP API using the **current credentials** instead of a
+ * native Worker binding (`WriteBucketBinding`) or a scoped API token
+ * (`WriteBucketHttp`).
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) to write a bucket
+ * with the same `put`/`delete` client you'd use inside a Worker. Multipart
+ * uploads are unsupported over the HTTP API (mirrors `WriteBucketHttp`).
+ *
+ * @example Seeding a bucket from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const r2 = yield* Cloudflare.R2.WriteBucket(bucket);
+ *     return Effect.fn(function* () {
+ *       yield* r2.put("hello.txt", "Hello, World!");
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.R2.WriteBucketLocal)),
+ * );
+ * ```
+ */
+export declare const WriteBucketLocal: Layer.Layer<WriteBucket, never, import("../CloudflareEnvironment.ts").CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=WriteBucketLocal.d.ts.map

package/lib/Cloudflare/R2/WriteBucketLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WriteBucketLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/WriteBucketLocal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,gBAAgB,yMAG5B,CAAC"}

package/lib/Cloudflare/R2/WriteBucketLocal.js

@@ -0,0 +1,30 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { makeLocalBucketBinding } from "./BucketLocal.js";
+import { WriteBucket } from "./WriteBucket.js";
+import { makeWriteR2HttpClient } from "./WriteBucketHttp.js";
+/**
+ * Local implementation of the {@link WriteBucket} binding — writes R2 objects
+ * over the Cloudflare HTTP API using the **current credentials** instead of a
+ * native Worker binding (`WriteBucketBinding`) or a scoped API token
+ * (`WriteBucketHttp`).
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) to write a bucket
+ * with the same `put`/`delete` client you'd use inside a Worker. Multipart
+ * uploads are unsupported over the HTTP API (mirrors `WriteBucketHttp`).
+ *
+ * @example Seeding a bucket from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const r2 = yield* Cloudflare.R2.WriteBucket(bucket);
+ *     return Effect.fn(function* () {
+ *       yield* r2.put("hello.txt", "Hello, World!");
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.R2.WriteBucketLocal)),
+ * );
+ * ```
+ */
+export const WriteBucketLocal = Layer.effect(WriteBucket, Effect.suspend(() => makeLocalBucketBinding(makeWriteR2HttpClient)));
+//# sourceMappingURL=WriteBucketLocal.js.map

package/lib/Cloudflare/R2/WriteBucketLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WriteBucketLocal.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/WriteBucketLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAC1C,WAAW,EACX,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,CAAC,CACpE,CAAC"}

package/lib/Cloudflare/R2/index.d.ts

@@ -5,10 +5,13 @@ export * from "./DataCatalog.ts";
 export * from "./ReadBucket.ts";
 export * from "./ReadBucketBinding.ts";
 export * from "./ReadBucketHttp.ts";
+export * from "./ReadBucketLocal.ts";
 export * from "./ReadWriteBucket.ts";
 export * from "./ReadWriteBucketBinding.ts";
 export * from "./ReadWriteBucketHttp.ts";
+export * from "./ReadWriteBucketLocal.ts";
 export * from "./WriteBucket.ts";
 export * from "./WriteBucketBinding.ts";
 export * from "./WriteBucketHttp.ts";
+export * from "./WriteBucketLocal.ts";
 //# sourceMappingURL=index.d.ts.map

package/lib/Cloudflare/R2/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/R2/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/lib/Cloudflare/R2/index.js

@@ -5,10 +5,13 @@ export * from "./DataCatalog.js";
 export * from "./ReadBucket.js";
 export * from "./ReadBucketBinding.js";
 export * from "./ReadBucketHttp.js";
+export * from "./ReadBucketLocal.js";
 export * from "./ReadWriteBucket.js";
 export * from "./ReadWriteBucketBinding.js";
 export * from "./ReadWriteBucketHttp.js";
+export * from "./ReadWriteBucketLocal.js";
 export * from "./WriteBucket.js";
 export * from "./WriteBucketBinding.js";
 export * from "./WriteBucketHttp.js";
+export * from "./WriteBucketLocal.js";
 //# sourceMappingURL=index.js.map

package/lib/Cloudflare/R2/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Cloudflare/R2/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/lib/Cloudflare/StateStore/Api.d.ts

@@ -59,6 +59,7 @@ declare const _default: Effect.Effect<import("effect/Pipeable").Pipeable & impor
         assets: string | undefined;
         bundle: string | undefined;
         input: string | undefined;
+        additionalWorkspaces: string[] | undefined;
         metadata?: string | undefined;
     };
 }, {
@@ -111,6 +112,7 @@ declare const _default: Effect.Effect<import("effect/Pipeable").Pipeable & impor
         assets: string | undefined;
         bundle: string | undefined;
         input: string | undefined;
+        additionalWorkspaces: string[] | undefined;
         metadata?: string | undefined;
     } | undefined, never>;
 } & import("../Bridge.ts").Rpc<{

package/lib/Cloudflare/Tunnel/ReadTunnel.d.ts

@@ -4,7 +4,7 @@ import * as Binding from "../../Binding.ts";
 import type { Worker } from "../Workers/Worker.ts";
 import type { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
 import type { RuntimeContext } from "../../RuntimeContext.ts";
-import { type Token } from "./TunnelBinding.ts";
+import { type TunnelAuth } from "./TunnelBinding.ts";
 /**
  * Binding that lets a Worker read Cloudflare Tunnels at runtime.
  *
@@ -68,6 +68,6 @@ export interface ReadTunnelClient {
     /** Read the remotely-managed configuration (ingress rules) for a tunnel. */
     getConfiguration(tunnelId: string): Effect.Effect<GetTunnelCloudflaredConfigurationResponse, GetTunnelCloudflaredConfigurationError, RuntimeContext>;
 }
-/** Build the read-only client over a bound token. */
-export declare const readClient: (token: Token) => ReadTunnelClient;
+/** Build the read-only client over an injectable {@link TunnelAuth}. */
+export declare const readClient: (auth: TunnelAuth) => ReadTunnelClient;
 //# sourceMappingURL=ReadTunnel.d.ts.map

package/lib/Cloudflare/Tunnel/ReadTunnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ReadTunnel.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sCAAsC,EACtC,yCAAyC,EACzC,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC/B,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,UAAW,SAAQ,OAAO,CAAC,OAAO,CACjD,UAAU,EACV,8BAA8B,EAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAAC,CAC7E;CAAG;AAEJ,eAAO,MAAM,UAAU,YAEtB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,6BAA6B,EAC7B,WAAW,CACZ,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mCAAmC;IACnC,GAAG,CACD,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,4BAA4B,EAC5B,yBAAyB,EACzB,cAAc,CACf,CAAC;IACF,mCAAmC;IACnC,IAAI,CACF,OAAO,CAAC,EAAE,kBAAkB,GAC3B,MAAM,CAAC,MAAM,CACd,8BAA8B,EAC9B,2BAA2B,EAC3B,cAAc,CACf,CAAC;IACF,wDAAwD;IACxD,QAAQ,CACN,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,iCAAiC,EACjC,8BAA8B,EAC9B,cAAc,CACf,CAAC;IACF,4EAA4E;IAC5E,gBAAgB,CACd,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,yCAAyC,EACzC,sCAAsC,EACtC,cAAc,CACf,CAAC;CACH;AAED,qDAAqD;AACrD,eAAO,MAAM,UAAU,UAAW,KAAK,KAAG,gBA8BzC,CAAC"}
+{"version":3,"file":"ReadTunnel.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sCAAsC,EACtC,yCAAyC,EACzC,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC/B,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,UAAW,SAAQ,OAAO,CAAC,OAAO,CACjD,UAAU,EACV,8BAA8B,EAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAAC,CAC7E;CAAG;AAEJ,eAAO,MAAM,UAAU,YAEtB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,6BAA6B,EAC7B,WAAW,CACZ,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mCAAmC;IACnC,GAAG,CACD,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,4BAA4B,EAC5B,yBAAyB,EACzB,cAAc,CACf,CAAC;IACF,mCAAmC;IACnC,IAAI,CACF,OAAO,CAAC,EAAE,kBAAkB,GAC3B,MAAM,CAAC,MAAM,CACd,8BAA8B,EAC9B,2BAA2B,EAC3B,cAAc,CACf,CAAC;IACF,wDAAwD;IACxD,QAAQ,CACN,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,iCAAiC,EACjC,8BAA8B,EAC9B,cAAc,CACf,CAAC;IACF,4EAA4E;IAC5E,gBAAgB,CACd,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,yCAAyC,EACzC,sCAAsC,EACtC,cAAc,CACf,CAAC;CACH;AAED,wEAAwE;AACxE,eAAO,MAAM,UAAU,SAAU,UAAU,KAAG,gBA8B7C,CAAC"}

package/lib/Cloudflare/Tunnel/ReadTunnel.js

@@ -2,26 +2,25 @@ import * as zeroTrust from "@distilled.cloud/cloudflare/zero-trust";
 import * as Effect from "effect/Effect";
 import * as Binding from "../../Binding.js";
 import {} from "./TunnelBinding.js";
-import { authorizeWith } from "../HttpClientUtils.js";
 export const ReadTunnel = Binding.Service("Cloudflare.Tunnel.ReadTunnel");
-/** Build the read-only client over a bound token. */
-export const readClient = (token) => {
-    const authorize = authorizeWith(token);
+/** Build the read-only client over an injectable {@link TunnelAuth}. */
+export const readClient = (auth) => {
+    const { authorize } = auth;
     return {
         get: Effect.fn("Cloudflare.Tunnel.get")(function* (tunnelId) {
-            const accountId = yield* token.accountId;
+            const accountId = yield* auth.accountId;
             return yield* authorize(zeroTrust.getTunnelCloudflared({ accountId, tunnelId }));
         }),
         list: Effect.fn("Cloudflare.Tunnel.list")(function* (request) {
-            const accountId = yield* token.accountId;
+            const accountId = yield* auth.accountId;
             return yield* authorize(zeroTrust.listTunnelCloudflareds({ accountId, ...request }));
         }),
         getToken: Effect.fn("Cloudflare.Tunnel.getToken")(function* (tunnelId) {
-            const accountId = yield* token.accountId;
+            const accountId = yield* auth.accountId;
             return yield* authorize(zeroTrust.getTunnelCloudflaredToken({ accountId, tunnelId }));
         }),
         getConfiguration: Effect.fn("Cloudflare.Tunnel.getConfiguration")(function* (tunnelId) {
-            const accountId = yield* token.accountId;
+            const accountId = yield* auth.accountId;
             return yield* authorize(zeroTrust.getTunnelCloudflaredConfiguration({ accountId, tunnelId }));
         }),
     };

package/lib/Cloudflare/Tunnel/ReadTunnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReadTunnel.js","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadTunnel.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,SAAS,MAAM,wCAAwC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAI5C,OAAO,EAAc,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAoDtD,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CACvC,8BAA8B,CAC/B,CAAC;AA+CF,qDAAqD;AACrD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAY,EAAoB,EAAE;IAC3D,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ;YACzD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO;YAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ;YACnE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,yBAAyB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QACF,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAC/D,QAAQ,CAAC,EAAE,QAAQ;YACjB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,iCAAiC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CACrE,CAAC;QACJ,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"ReadTunnel.js","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadTunnel.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,SAAS,MAAM,wCAAwC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAI5C,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAoDrD,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CACvC,8BAA8B,CAC/B,CAAC;AA+CF,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAoB,EAAE;IAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ;YACzD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO;YAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ;YACnE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,yBAAyB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QACF,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAC/D,QAAQ,CAAC,EAAE,QAAQ;YACjB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,SAAS,CAAC,iCAAiC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CACrE,CAAC;QACJ,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC"}

package/lib/Cloudflare/Tunnel/ReadTunnelLocal.d.ts

@@ -0,0 +1,29 @@
+import * as Layer from "effect/Layer";
+import { ReadTunnel } from "./ReadTunnel.ts";
+/**
+ * Local implementation of the {@link ReadTunnel} binding — reads Cloudflare
+ * Tunnels over the cfd_tunnel HTTP API using the **current credentials**
+ * instead of a native Worker binding (`ReadTunnelBinding`) or a scoped API
+ * token. No `host.bind`, no minted token, no Worker host.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can read
+ * tunnels with the same `get`/`list`/`getToken`/`getConfiguration` client you'd
+ * use inside a Worker.
+ *
+ * @example Read a tunnel's connector token from an Action
+ * ```typescript
+ * const Inspect = Alchemy.Action(
+ *   "Inspect",
+ *   Effect.gen(function* () {
+ *     const tunnels = yield* Cloudflare.Tunnel.ReadTunnel();
+ *     const tunnelId = yield* tunnel.tunnelId;
+ *     return Effect.fn(function* () {
+ *       const t = yield* tunnels.get(yield* tunnelId);
+ *       return t.result?.name;
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.Tunnel.ReadTunnelLocal)),
+ * );
+ * ```
+ */
+export declare const ReadTunnelLocal: Layer.Layer<ReadTunnel, never, import("../CloudflareEnvironment.ts").CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=ReadTunnelLocal.d.ts.map

package/lib/Cloudflare/Tunnel/ReadTunnelLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadTunnelLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadTunnelLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAc,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGzD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,eAAe,wMAG3B,CAAC"}

package/lib/Cloudflare/Tunnel/ReadTunnelLocal.js

@@ -0,0 +1,30 @@
+import * as Layer from "effect/Layer";
+import { readClient, ReadTunnel } from "./ReadTunnel.js";
+import { makeLocalTunnelClient } from "./TunnelLocalBinding.js";
+/**
+ * Local implementation of the {@link ReadTunnel} binding — reads Cloudflare
+ * Tunnels over the cfd_tunnel HTTP API using the **current credentials**
+ * instead of a native Worker binding (`ReadTunnelBinding`) or a scoped API
+ * token. No `host.bind`, no minted token, no Worker host.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can read
+ * tunnels with the same `get`/`list`/`getToken`/`getConfiguration` client you'd
+ * use inside a Worker.
+ *
+ * @example Read a tunnel's connector token from an Action
+ * ```typescript
+ * const Inspect = Alchemy.Action(
+ *   "Inspect",
+ *   Effect.gen(function* () {
+ *     const tunnels = yield* Cloudflare.Tunnel.ReadTunnel();
+ *     const tunnelId = yield* tunnel.tunnelId;
+ *     return Effect.fn(function* () {
+ *       const t = yield* tunnels.get(yield* tunnelId);
+ *       return t.result?.name;
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.Tunnel.ReadTunnelLocal)),
+ * );
+ * ```
+ */
+export const ReadTunnelLocal = Layer.effect(ReadTunnel, makeLocalTunnelClient(readClient));
+//# sourceMappingURL=ReadTunnelLocal.js.map

package/lib/Cloudflare/Tunnel/ReadTunnelLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadTunnelLocal.js","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadTunnelLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CACzC,UAAU,EACV,qBAAqB,CAAC,UAAU,CAAC,CAClC,CAAC"}

package/lib/Cloudflare/Tunnel/ReadWriteTunnel.d.ts

@@ -2,7 +2,7 @@ import * as Effect from "effect/Effect";
 import * as Binding from "../../Binding.ts";
 import type { Worker } from "../Workers/Worker.ts";
 import type { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
-import { type Token } from "./TunnelBinding.ts";
+import { type TunnelAuth } from "./TunnelBinding.ts";
 import { type ReadTunnelClient } from "./ReadTunnel.ts";
 import { type WriteTunnelClient } from "./WriteTunnel.ts";
 /**
@@ -55,6 +55,6 @@ export declare const ReadWriteTunnel: ReadWriteTunnel;
 /** Combined read + write tunnel operations. */
 export interface ReadWriteTunnelClient extends ReadTunnelClient, WriteTunnelClient {
 }
-/** Build the combined read + write client over a bound token. */
-export declare const readWriteClient: (token: Token) => ReadWriteTunnelClient;
+/** Build the combined read + write client over an injectable {@link TunnelAuth}. */
+export declare const readWriteClient: (auth: TunnelAuth) => ReadWriteTunnelClient;
 //# sourceMappingURL=ReadWriteTunnel.d.ts.map

package/lib/Cloudflare/Tunnel/ReadWriteTunnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ReadWriteTunnel.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadWriteTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,OAAO,CACtD,eAAe,EACf,mCAAmC,EACnC,MAAM,MAAM,CAAC,MAAM,CACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,GAAG,qBAAqB,CAC/B,CACF;CAAG;AAEJ,eAAO,MAAM,eAAe,iBAE3B,CAAC;AAEF,+CAA+C;AAC/C,MAAM,WAAW,qBACf,SAAQ,gBAAgB,EAAE,iBAAiB;CAAG;AAEhD,iEAAiE;AACjE,eAAO,MAAM,eAAe,UAAW,KAAK,KAAG,qBAG7C,CAAC"}
+{"version":3,"file":"ReadWriteTunnel.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadWriteTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,OAAO,CACtD,eAAe,EACf,mCAAmC,EACnC,MAAM,MAAM,CAAC,MAAM,CACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,GAAG,qBAAqB,CAC/B,CACF;CAAG;AAEJ,eAAO,MAAM,eAAe,iBAE3B,CAAC;AAEF,+CAA+C;AAC/C,MAAM,WAAW,qBACf,SAAQ,gBAAgB,EAAE,iBAAiB;CAAG;AAEhD,oFAAoF;AACpF,eAAO,MAAM,eAAe,SAAU,UAAU,KAAG,qBAGjD,CAAC"}

package/lib/Cloudflare/Tunnel/ReadWriteTunnel.js

@@ -4,9 +4,9 @@ import {} from "./TunnelBinding.js";
 import { readClient } from "./ReadTunnel.js";
 import { writeClient } from "./WriteTunnel.js";
 export const ReadWriteTunnel = Binding.Service("Cloudflare.Tunnel.ReadWriteTunnel");
-/** Build the combined read + write client over a bound token. */
-export const readWriteClient = (token) => ({
-    ...readClient(token),
-    ...writeClient(token),
+/** Build the combined read + write client over an injectable {@link TunnelAuth}. */
+export const readWriteClient = (auth) => ({
+    ...readClient(auth),
+    ...writeClient(auth),
 });
 //# sourceMappingURL=ReadWriteTunnel.js.map

package/lib/Cloudflare/Tunnel/ReadWriteTunnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReadWriteTunnel.js","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadWriteTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAAc,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAyB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAwDvE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAC5C,mCAAmC,CACpC,CAAC;AAMF,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAY,EAAyB,EAAE,CAAC,CAAC;IACvE,GAAG,UAAU,CAAC,KAAK,CAAC;IACpB,GAAG,WAAW,CAAC,KAAK,CAAC;CACtB,CAAC,CAAC"}
+{"version":3,"file":"ReadWriteTunnel.js","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadWriteTunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAyB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAwDvE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAC5C,mCAAmC,CACpC,CAAC;AAMF,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAgB,EAAyB,EAAE,CAAC,CAAC;IAC3E,GAAG,UAAU,CAAC,IAAI,CAAC;IACnB,GAAG,WAAW,CAAC,IAAI,CAAC;CACrB,CAAC,CAAC"}

package/lib/Cloudflare/Tunnel/ReadWriteTunnelLocal.d.ts

@@ -0,0 +1,35 @@
+import * as Layer from "effect/Layer";
+import { ReadWriteTunnel } from "./ReadWriteTunnel.ts";
+/**
+ * Local implementation of the {@link ReadWriteTunnel} binding — performs the
+ * full cfd_tunnel CRUD surface over the HTTP API using the **current
+ * credentials** instead of a native Worker binding (`ReadWriteTunnelBinding`)
+ * or a scoped API token. No `host.bind`, no minted token, no Worker host.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can manage
+ * tunnels with the same combined read + write client you'd use inside a Worker.
+ *
+ * @example Configure a deployed tunnel from an Action
+ * ```typescript
+ * const Configure = Alchemy.Action(
+ *   "Configure",
+ *   Effect.gen(function* () {
+ *     const tunnels = yield* Cloudflare.Tunnel.ReadWriteTunnel();
+ *     const tunnelId = yield* tunnel.tunnelId;
+ *     return Effect.fn(function* () {
+ *       const id = yield* tunnelId;
+ *       yield* tunnels.putConfiguration(id, {
+ *         ingress: [
+ *           { hostname: "app.example.com", service: "http://localhost:3000" },
+ *           { service: "http_status:404" },
+ *         ],
+ *       });
+ *       const { config } = yield* tunnels.getConfiguration(id);
+ *       return config;
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.Tunnel.ReadWriteTunnelLocal)),
+ * );
+ * ```
+ */
+export declare const ReadWriteTunnelLocal: Layer.Layer<ReadWriteTunnel, never, import("../CloudflareEnvironment.ts").CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=ReadWriteTunnelLocal.d.ts.map

package/lib/Cloudflare/Tunnel/ReadWriteTunnelLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadWriteTunnelLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadWriteTunnelLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAmB,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oBAAoB,6MAGhC,CAAC"}

package/lib/Cloudflare/Tunnel/ReadWriteTunnelLocal.js

@@ -0,0 +1,36 @@
+import * as Layer from "effect/Layer";
+import { readWriteClient, ReadWriteTunnel } from "./ReadWriteTunnel.js";
+import { makeLocalTunnelClient } from "./TunnelLocalBinding.js";
+/**
+ * Local implementation of the {@link ReadWriteTunnel} binding — performs the
+ * full cfd_tunnel CRUD surface over the HTTP API using the **current
+ * credentials** instead of a native Worker binding (`ReadWriteTunnelBinding`)
+ * or a scoped API token. No `host.bind`, no minted token, no Worker host.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can manage
+ * tunnels with the same combined read + write client you'd use inside a Worker.
+ *
+ * @example Configure a deployed tunnel from an Action
+ * ```typescript
+ * const Configure = Alchemy.Action(
+ *   "Configure",
+ *   Effect.gen(function* () {
+ *     const tunnels = yield* Cloudflare.Tunnel.ReadWriteTunnel();
+ *     const tunnelId = yield* tunnel.tunnelId;
+ *     return Effect.fn(function* () {
+ *       const id = yield* tunnelId;
+ *       yield* tunnels.putConfiguration(id, {
+ *         ingress: [
+ *           { hostname: "app.example.com", service: "http://localhost:3000" },
+ *           { service: "http_status:404" },
+ *         ],
+ *       });
+ *       const { config } = yield* tunnels.getConfiguration(id);
+ *       return config;
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.Tunnel.ReadWriteTunnelLocal)),
+ * );
+ * ```
+ */
+export const ReadWriteTunnelLocal = Layer.effect(ReadWriteTunnel, makeLocalTunnelClient(readWriteClient));
+//# sourceMappingURL=ReadWriteTunnelLocal.js.map

package/lib/Cloudflare/Tunnel/ReadWriteTunnelLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadWriteTunnelLocal.js","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/ReadWriteTunnelLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAC9C,eAAe,EACf,qBAAqB,CAAC,eAAe,CAAC,CACvC,CAAC"}

package/lib/Cloudflare/Tunnel/TunnelBinding.d.ts

@@ -1,8 +1,11 @@
 import * as Effect from "effect/Effect";
 import type * as Redacted from "effect/Redacted";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import type { RuntimeContext } from "../../RuntimeContext.ts";
 import { AccountApiToken } from "../ApiToken/AccountApiToken.ts";
 import type { PermissionGroupRef } from "../ApiToken/Common.ts";
 import { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
+import type { Credentials } from "../Credentials.ts";
 import { Worker } from "../Workers/Worker.ts";
 /**
  * Shared runtime body for a tunnel binding. Mints a scoped
@@ -12,7 +15,20 @@ import { Worker } from "../Workers/Worker.ts";
  *
  * Pass the result to `Layer.effect(<Callable>, ...)`.
  */
-export declare const makeTunnelClient: <C>(sid: string, permissionGroups: PermissionGroupRef[], makeClient: (token: Token) => C) => Effect.Effect<() => Effect.Effect<C, never, Worker<any>>, never, CloudflareEnvironment>;
+export declare const makeTunnelClient: <C>(sid: string, permissionGroups: PermissionGroupRef[], makeClient: (auth: TunnelAuth) => C) => Effect.Effect<() => Effect.Effect<C, never, Worker<any>>, never, CloudflareEnvironment>;
+/**
+ * Injectable auth for the tunnel client builders. Both the scoped-token
+ * (`*Binding`) and current-credentials (`*Local`) variants supply an
+ * `authorize` (which provides `Credentials` + `HttpClient` to a raw SDK op)
+ * and an `accountId`, so the client builders are agnostic to how creds are
+ * obtained.
+ */
+export interface TunnelAuth {
+    authorize: <A, E>(eff: Effect.Effect<A, E, Credentials | HttpClient.HttpClient>) => Effect.Effect<A, E, RuntimeContext>;
+    accountId: Effect.Effect<string>;
+}
+/** Build a scoped-token {@link TunnelAuth} from a bound {@link Token}. */
+export declare const makeTunnelAuth: (token: Token) => TunnelAuth;
 /**
  * Runtime accessors for a tunnel binding's token, obtained by binding the
  * {@link AccountApiToken}'s outputs in the Worker's Init phase. Each accessor

package/lib/Cloudflare/Tunnel/TunnelBinding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TunnelBinding.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/TunnelBinding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,OAC3B,MAAM,oBACO,kBAAkB,EAAE,cAC1B,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,4FAyB7B,CAAC;AAEL;;;;GAIG;AACH,MAAM,WAAW,KAAK;IACpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,UAAW,eAAe;;;gBAKlD,CAAC"}
+{"version":3,"file":"TunnelBinding.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Tunnel/TunnelBinding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,OAC3B,MAAM,oBACO,kBAAkB,EAAE,cAC1B,CAAC,IAAI,EAAE,UAAU,KAAK,CAAC,4FAyBjC,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,KAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,0EAA0E;AAC1E,eAAO,MAAM,cAAc,UAAW,KAAK,KAAG,UAG5C,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,KAAK;IACpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,UAAW,eAAe;;;gBAKlD,CAAC"}