alchemy 2.0.0-beta.62 → 2.0.0-beta.63

package/lib/Cloudflare/Containers/ContainerPlatform.js

@@ -1,11 +1,10 @@
-import * as Config from "effect/Config";
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import * as Redacted from "effect/Redacted";
 import { HttpServer } from "../../Http.js";
 import * as Output from "../../Output.js";
 import { Platform } from "../../Platform.js";
 import { serveRpc } from "../../Rpc.js";
+import { packEnvValueKeepRedacted, unpackEnvValue, } from "../../RuntimeContext.js";
 import * as Server from "../../Server/index.js";
 import { fromCloudflareFetcher, toCloudflareFetcher } from "../Fetcher.js";
 import { DurableObject } from "../Workers/DurableObject.js";
@@ -44,40 +43,20 @@ export const ContainerPlatform = Platform("Cloudflare.Container", {
             env,
             set: (bindingId, output) => Effect.sync(() => {
                 const key = bindingId.replaceAll(/[^a-zA-Z0-9]/g, "_");
-                // Preserve `Redacted`-ness across the Output → env → Cloudflare
-                // boundary so the provider can deploy secrets through the
+                // `packEnvValueKeepRedacted` keeps the Redacted wrapper on the
+                // outside so the provider can deploy secrets through the
                 // Secrets Store (referenced via `secrets`) instead of leaking
-                // them as plain `environmentVariables`. The JSON payload carries
-                // a `{_tag: "Redacted", …}` marker so the runtime `get` accessor
-                // can rebuild the wrapper after Cloudflare hands the value back
-                // as a plain env-var string. Mirrors `makeWorkerRuntimeContext`.
-                env[key] = output.pipe(Output.map((value) => Redacted.isRedacted(value)
-                    ? Redacted.make(JSON.stringify({
-                        _tag: "Redacted",
-                        value: Redacted.value(value),
-                    }))
-                    : JSON.stringify(value)));
+                // them as plain `environmentVariables`, while the inner marker
+                // lets the runtime `get` accessor rebuild the wrapper after
+                // Cloudflare hands the value back as a plain env-var string.
+                // Mirrors `makeWorkerRuntimeContext`.
+                env[key] = output.pipe(Output.map(packEnvValueKeepRedacted));
                 return key;
             }),
-            get: (key) => Config.string(key).pipe(Effect.flatMap((value) => Effect.try({
-                try: () => {
-                    const parsed = JSON.parse(value);
-                    // The `set` path serializes Redacted values as
-                    // `{_tag: "Redacted", value: ...}`. After JSON.parse the
-                    // result is a plain object — detect the marker shape and
-                    // rebuild the Redacted wrapper. Plain values pass through.
-                    if (typeof parsed === "object" &&
-                        parsed !== null &&
-                        parsed._tag === "Redacted" &&
-                        "value" in parsed) {
-                        return Redacted.make(parsed.value);
-                    }
-                    return parsed;
-                },
-                catch: (error) => error,
-            })), Effect.catch((cause) => Effect.die(new Error(`Failed to get environment variable: ${key}`, {
-                cause,
-            })))),
+            get: (key) => 
+            // Read straight from `process.env` — see `unpackEnvValue` for why
+            // this must never resolve through `Config.string`.
+            Effect.sync(() => unpackEnvValue(process.env[key])),
             run: ((effect) => Effect.sync(() => {
                 runners.push(effect);
             })),

package/lib/Cloudflare/Containers/ContainerPlatform.js.map

@@ -1 +1 @@
-{"version":3,"file":"ContainerPlatform.js","sourceRoot":"","sources":["../../../src/Cloudflare/Containers/ContainerPlatform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAmB,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAY,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAOjD,MAAM,CAAC,MAAM,iBAAiB,GAM1B,QAAQ,CACV,sBAAsB,EACtB;IACE,oBAAoB,EAAE,CAAC,EAAU,EAAyB,EAAE;QAC1D,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAwB,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,CACZ,OAAwB,EACxB,OAA6C,EAC7C,EAAE,CACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,+DAA+D;YAC/D,kEAAkE;YAClE,oEAAoE;YACpE,iEAAiE;YACjE,mEAAmE;YACnE,wDAAwD;YACxD,MAAM,YAAY,GAAG,OAAO,EAAE,KAAK;gBACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;gBAClC,CAAC,CAAC,OAAO,CAAC;YACZ,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAClC,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,iDAAiD;gBACnD,CAAC;YACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE;YACb,EAAE;YACF,GAAG;YACH,GAAG,EAAE,CAAC,SAAiB,EAAE,MAAqB,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;gBACvD,gEAAgE;gBAChE,0DAA0D;gBAC1D,8DAA8D;gBAC9D,iEAAiE;gBACjE,iEAAiE;gBACjE,gEAAgE;gBAChE,iEAAiE;gBACjE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CACpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;oBACxB,CAAC,CAAC,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,SAAS,CAAC;wBACb,IAAI,EAAE,UAAU;wBAChB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;qBAC7B,CAAC,CACH;oBACH,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAC1B,CACF,CAAC;gBACF,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YACJ,GAAG,EAAE,CAAI,GAAW,EAAE,EAAE,CACtB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CACrB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,MAAM,CAAC,GAAG,CAAC;gBACT,GAAG,EAAE,GAAG,EAAE;oBACR,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC;oBACtC,+CAA+C;oBAC/C,yDAAyD;oBACzD,yDAAyD;oBACzD,2DAA2D;oBAC3D,IACE,OAAO,MAAM,KAAK,QAAQ;wBAC1B,MAAM,KAAK,IAAI;wBACd,MAA6B,CAAC,IAAI,KAAK,UAAU;wBAClD,OAAO,IAAI,MAAM,EACjB,CAAC;wBACD,OAAO,QAAQ,CAAC,IAAI,CACjB,MAA6B,CAAC,KAAK,CAChC,CAAC;oBACT,CAAC;oBACD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAc;aACjC,CAAC,CACH,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,GAAG,CACR,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,EAAE;gBACtD,KAAK;aACN,CAAC,CACH,CACF,CACF;YACH,GAAG,EAAE,CAAC,CAAC,MAAuC,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC,CAAC,CAA4C;YAChD,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,CAAC,GAAG,CACjB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClB,MAAM,CAAC,OAAO,CACZ,GAAG,CAAC,IAAI;gBACN,6DAA6D;gBAC7D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,MAAM,CAAC,MAAM,CAGd,CACF,CACF,EACD;oBACE,WAAW,EAAE,WAAW;iBACzB,CACF;aACF,CAAC,CAAC;SACqB,CAAC;IAC7B,CAAC;CACF,EACD;IACE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACvB,YAEgE;QAEhE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QAEvC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7C,CAAC,CAAC,KAAK,CAAC,CAAC,YAEN;YACH,CAAC,CAAC,YAAY,CAAC;QAEjB,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAA,GAAG,SAAS,EAAE,CAAC;YAClC,cAAc,EAAE;gBACd,WAAW,EAAE,SAAS,CAAC,WAAW;aACnC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC;QAEjC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACzC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SAChD,CAAC,CAAC;QAEH,8DAA8D;QAC9D,mCAAmC;QACnC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,SAAS,CAAC,SAAS;gBACvB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,OAAO,IAAI,KAAK,CAAC;gBAC7D,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CACxB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,qBAAqB,CAAC,KAAK,CAAC,SAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACzD;gBACH,oBAAoB,EAAE,CAAC,UAA2B,EAAE,EAAE,CACpD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,KAAK,CAAC,SAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAClD;gBACH,qBAAqB,EAAE,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE,CACxD,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,KAAK,CAAC,SAAU,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CACtD,CACF;gBACH,wBAAwB,EAAE,CAAC,OAAgB,EAAE,EAAE,CAC7C,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,KAAK,CAAC,SAAU,CAAC,wBAAwB,CAAC,OAAO,CAAC,CACnD,CACF;gBACH,OAAO,EAAE,GAAG,EAAE,CACZ,MAAM,CAAC,OAAO,CACZ,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CACtD;gBACH,KAAK,EAAE,CAAC,OAAiC,EAAE,EAAE,CAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aAC1C,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;CACH,CACF,CAAC"}
+{"version":3,"file":"ContainerPlatform.js","sourceRoot":"","sources":["../../../src/Cloudflare/Containers/ContainerPlatform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAmB,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAY,MAAM,cAAc,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAOjD,MAAM,CAAC,MAAM,iBAAiB,GAM1B,QAAQ,CACV,sBAAsB,EACtB;IACE,oBAAoB,EAAE,CAAC,EAAU,EAAyB,EAAE;QAC1D,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAwB,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,CACZ,OAAwB,EACxB,OAA6C,EAC7C,EAAE,CACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,+DAA+D;YAC/D,kEAAkE;YAClE,oEAAoE;YACpE,iEAAiE;YACjE,mEAAmE;YACnE,wDAAwD;YACxD,MAAM,YAAY,GAAG,OAAO,EAAE,KAAK;gBACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;gBAClC,CAAC,CAAC,OAAO,CAAC;YACZ,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAClC,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,iDAAiD;gBACnD,CAAC;YACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE;YACb,EAAE;YACF,GAAG;YACH,GAAG,EAAE,CAAC,SAAiB,EAAE,MAAqB,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;gBACvD,+DAA+D;gBAC/D,yDAAyD;gBACzD,8DAA8D;gBAC9D,+DAA+D;gBAC/D,4DAA4D;gBAC5D,6DAA6D;gBAC7D,sCAAsC;gBACtC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC7D,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YACJ,GAAG,EAAE,CAAI,GAAW,EAAE,EAAE;YACtB,kEAAkE;YAClE,mDAAmD;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAM,CAAC;YAC7D,GAAG,EAAE,CAAC,CAAC,MAAuC,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC,CAAC,CAA4C;YAChD,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,CAAC,GAAG,CACjB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClB,MAAM,CAAC,OAAO,CACZ,GAAG,CAAC,IAAI;gBACN,6DAA6D;gBAC7D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,MAAM,CAAC,MAAM,CAGd,CACF,CACF,EACD;oBACE,WAAW,EAAE,WAAW;iBACzB,CACF;aACF,CAAC,CAAC;SACqB,CAAC;IAC7B,CAAC;CACF,EACD;IACE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACvB,YAEgE;QAEhE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QAEvC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7C,CAAC,CAAC,KAAK,CAAC,CAAC,YAEN;YACH,CAAC,CAAC,YAAY,CAAC;QAEjB,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAA,GAAG,SAAS,EAAE,CAAC;YAClC,cAAc,EAAE;gBACd,WAAW,EAAE,SAAS,CAAC,WAAW;aACnC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC;QAEjC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACzC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SAChD,CAAC,CAAC;QAEH,8DAA8D;QAC9D,mCAAmC;QACnC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,SAAS,CAAC,SAAS;gBACvB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,OAAO,IAAI,KAAK,CAAC;gBAC7D,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CACxB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,qBAAqB,CAAC,KAAK,CAAC,SAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACzD;gBACH,oBAAoB,EAAE,CAAC,UAA2B,EAAE,EAAE,CACpD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,KAAK,CAAC,SAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAClD;gBACH,qBAAqB,EAAE,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE,CACxD,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,KAAK,CAAC,SAAU,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CACtD,CACF;gBACH,wBAAwB,EAAE,CAAC,OAAgB,EAAE,EAAE,CAC7C,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,KAAK,CAAC,SAAU,CAAC,wBAAwB,CAAC,OAAO,CAAC,CACnD,CACF;gBACH,OAAO,EAAE,GAAG,EAAE,CACZ,MAAM,CAAC,OAAO,CACZ,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CACtD;gBACH,KAAK,EAAE,CAAC,OAAiC,EAAE,EAAE,CAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aAC1C,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;CACH,CACF,CAAC"}

package/lib/Cloudflare/D1/QueryDatabaseHttpClient.d.ts

@@ -0,0 +1,24 @@
+import * as Effect from "effect/Effect";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import type { Credentials } from "../Credentials.ts";
+import { type QueryDatabaseClient } from "./QueryDatabase.ts";
+/**
+ * Injectable auth shared by the Local (current-credentials) impl and a future
+ * Http (scoped-token) impl. `authorize` discharges the
+ * `Credentials | HttpClient` requirement of a distilled op; `accountId` is the
+ * Cloudflare account the ops run against.
+ */
+export interface D1Auth {
+    authorize: <A, E>(eff: Effect.Effect<A, E, Credentials | HttpClient.HttpClient>) => Effect.Effect<A, E>;
+    accountId: string;
+}
+/**
+ * Build a {@link QueryDatabaseClient} over the D1 HTTP query API.
+ *
+ * `databaseId` is an Effect so the resolution stays deferred to each call —
+ * inside an Action it resolves through the apply-time RuntimeContext. The
+ * credentials are provided ONLY around the distilled op (via `auth.authorize`),
+ * never around the id accessor, matching the KV / Vectorize Local variants.
+ */
+export declare const makeHttpQueryDatabaseClient: (auth: D1Auth, databaseId: Effect.Effect<string>) => QueryDatabaseClient;
+//# sourceMappingURL=QueryDatabaseHttpClient.d.ts.map

package/lib/Cloudflare/D1/QueryDatabaseHttpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"QueryDatabaseHttpClient.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/D1/QueryDatabaseHttpClient.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAa5B;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,KAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,SAChC,MAAM,cACA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAChC,mBAeF,CAAC"}

package/lib/Cloudflare/D1/QueryDatabaseHttpClient.js

@@ -0,0 +1,106 @@
+import * as d1 from "@distilled.cloud/cloudflare/d1";
+import * as Effect from "effect/Effect";
+import { PreparedStatement, } from "./QueryDatabase.js";
+/**
+ * Build a {@link QueryDatabaseClient} over the D1 HTTP query API.
+ *
+ * `databaseId` is an Effect so the resolution stays deferred to each call —
+ * inside an Action it resolves through the apply-time RuntimeContext. The
+ * credentials are provided ONLY around the distilled op (via `auth.authorize`),
+ * never around the id accessor, matching the KV / Vectorize Local variants.
+ */
+export const makeHttpQueryDatabaseClient = (auth, databaseId) => {
+    const rawEff = Effect.map(databaseId, (id) => makeHttpD1Database(auth, id));
+    return {
+        raw: rawEff,
+        prepare: (query) => new PreparedStatement(query, [], rawEff),
+        exec: (query) => Effect.flatMap(rawEff, (raw) => Effect.promise(() => raw.exec(query))),
+        batch: (statements) => Effect.flatMap(rawEff, (raw) => Effect.promise(() => raw.batch(statements.map((s) => s._build(raw))))),
+    };
+};
+const runQuery = (auth, databaseId, body) => auth
+    .authorize(d1.queryDatabase({
+    accountId: auth.accountId,
+    databaseId,
+    ...body,
+}))
+    .pipe(Effect.runPromise);
+const toResult = (r) => ({
+    results: (r?.results ?? []),
+    success: r?.success ?? true,
+    meta: (r?.meta ?? {}),
+});
+/**
+ * Normalize a bound value the way the native D1 binding does before it reaches
+ * SQLite. Over the raw HTTP query API, unlike the Worker binding, values are
+ * bound verbatim — a JS `true` would arrive as the string `"true"`. Match the
+ * native semantics: booleans become integers (1/0) and binary becomes a byte
+ * array (BLOB). `null`, numbers, and strings pass through unchanged.
+ */
+const normalizeBind = (value) => {
+    if (typeof value === "boolean")
+        return value ? 1 : 0;
+    if (value instanceof ArrayBuffer) {
+        return Array.from(new Uint8Array(value));
+    }
+    if (ArrayBuffer.isView(value)) {
+        return Array.from(new Uint8Array(value.buffer, value.byteOffset, value.byteLength));
+    }
+    return value;
+};
+const makeHttpD1Database = (auth, databaseId) => {
+    const makeStatement = (query, binds) => {
+        const exec = async () => {
+            const res = await runQuery(auth, databaseId, {
+                sql: query,
+                params: binds.length ? binds.map(normalizeBind) : undefined,
+            });
+            return res.result[0];
+        };
+        return {
+            bind: (...values) => makeStatement(query, values),
+            first: (async (column) => {
+                const first = (await exec())?.results?.[0];
+                if (first == null)
+                    return null;
+                return column !== undefined ? (first[column] ?? null) : first;
+            }),
+            all: (async () => toResult(await exec())),
+            run: (async () => toResult(await exec())),
+            raw: (async (options) => {
+                const rows = ((await exec())?.results ?? []);
+                const arrays = rows.map((row) => Object.values(row));
+                if (options?.columnNames && rows[0]) {
+                    return [Object.keys(rows[0]), ...arrays];
+                }
+                return arrays;
+            }),
+            // Carry query + params so `batch` can reconstruct the request.
+            __query: query,
+            __params: binds,
+        };
+    };
+    return {
+        prepare: (query) => makeStatement(query, []),
+        exec: async (query) => {
+            const res = await runQuery(auth, databaseId, { sql: query });
+            const meta = res.result[res.result.length - 1]?.meta;
+            return {
+                count: res.result.length,
+                duration: meta?.duration ?? 0,
+            };
+        },
+        batch: async (statements) => {
+            const res = await runQuery(auth, databaseId, {
+                batch: statements.map((s) => ({
+                    sql: s.__query,
+                    params: s.__params.length
+                        ? s.__params.map(normalizeBind)
+                        : undefined,
+                })),
+            });
+            return res.result.map((r) => toResult(r));
+        },
+    };
+};
+//# sourceMappingURL=QueryDatabaseHttpClient.js.map

package/lib/Cloudflare/D1/QueryDatabaseHttpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QueryDatabaseHttpClient.js","sourceRoot":"","sources":["../../../src/Cloudflare/D1/QueryDatabaseHttpClient.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAEL,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AA0B5B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,IAAY,EACZ,UAAiC,EACZ,EAAE;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAE5E,OAAO;QACL,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC;QACpE,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE,CACtB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,EAAE,CAAc,UAA+B,EAAE,EAAE,CACtD,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAC7B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,GAAG,CAAC,KAAK,CAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CACnD,CACF;KAC0B,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CACf,IAAY,EACZ,UAAkB,EAClB,IAEoD,EACjB,EAAE,CACrC,IAAI;KACD,SAAS,CACR,EAAE,CAAC,aAAa,CAAC;IACf,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,UAAU;IACV,GAAI,IAAY;CACjB,CAAC,CACH;KACA,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAE7B,MAAM,QAAQ,GAAG,CACf,CAAyD,EACpC,EAAE,CACvB,CAAC;IACC,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAQ;IAClC,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI;IAC3B,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAQ;CAC7B,CAAwB,CAAC;AAE5B;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,CAAC,KAAc,EAAW,EAAE;IAChD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,UAAkB,EACE,EAAE;IACtB,MAAM,aAAa,GAAG,CACpB,KAAa,EACb,KAA6B,EACA,EAAE;QAC/B,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;gBAC3C,GAAG,EAAE,KAAK;gBACV,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;aAC5D,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,OAAO;YACL,IAAI,EAAE,CAAC,GAAG,MAAiB,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC;YAC5D,KAAK,EAAE,CAAC,KAAK,EAAE,MAAe,EAAE,EAAE;gBAChC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAE5B,CAAC;gBACd,IAAI,KAAK,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAC/B,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAChE,CAAC,CAAyC;YAC1C,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CACf,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAuC;YAC/D,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CACf,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAuC;YAC/D,GAAG,EAAE,CAAC,KAAK,EAAE,OAAmC,EAAE,EAAE;gBAClD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,IAAI,EAAE,CAGxC,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,IAAI,OAAO,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;gBAC3C,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC,CAAuC;YACxC,+DAA+D;YAC/D,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;SAC0B,CAAC;IAC9C,CAAC,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;QACpD,IAAI,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;YAC5B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;YACrD,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;gBACxB,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,CAAC;aACN,CAAC;QAC5B,CAAC;QACD,KAAK,EAAE,KAAK,EAAe,UAAyC,EAAE,EAAE;YACtE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;gBAC3C,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5B,GAAG,EAAG,CAAS,CAAC,OAAiB;oBACjC,MAAM,EAAI,CAAS,CAAC,QAAsB,CAAC,MAAM;wBAC/C,CAAC,CAAG,CAAS,CAAC,QAAsB,CAAC,GAAG,CAAC,aAAa,CAAC;wBACvD,CAAC,CAAC,SAAS;iBACd,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;KAC+B,CAAC;AACrC,CAAC,CAAC"}

package/lib/Cloudflare/D1/QueryDatabaseLocal.d.ts

@@ -0,0 +1,38 @@
+import * as Layer from "effect/Layer";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
+import type { Credentials } from "../Credentials.ts";
+import { QueryDatabase } from "./QueryDatabase.ts";
+/**
+ * Local implementation of the {@link QueryDatabase} binding — queries D1 over
+ * the Cloudflare HTTP API using the **current credentials** instead of a native
+ * Worker binding (`QueryDatabaseBinding`) or a scoped API token.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can talk to
+ * a D1 database with the same `prepare`/`exec`/`batch` client you'd use inside a
+ * Worker:
+ *
+ * @example Seeding a database from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const db = yield* Cloudflare.D1.QueryDatabase(database);
+ *     return Effect.fn(function* () {
+ *       yield* db.exec("CREATE TABLE IF NOT EXISTS users (id TEXT, name TEXT)");
+ *       yield* db
+ *         .prepare("INSERT INTO users (id, name) VALUES (?, ?)")
+ *         .bind("1", "Ada")
+ *         .run();
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.D1.QueryDatabaseLocal)),
+ * );
+ * ```
+ *
+ * The database id is resolved at apply time through the ambient
+ * {@link RuntimeContext} (in an Action, that's the resolve context the engine
+ * provides around the body), so `QueryDatabase(database)` works even though the
+ * database is created in the same deploy.
+ */
+export declare const QueryDatabaseLocal: Layer.Layer<QueryDatabase, never, CloudflareEnvironment | Credentials | HttpClient.HttpClient>;
+//# sourceMappingURL=QueryDatabaseLocal.d.ts.map

package/lib/Cloudflare/D1/QueryDatabaseLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"QueryDatabaseLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/D1/QueryDatabaseLocal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,kBAAkB,gGAsB9B,CAAC"}

package/lib/Cloudflare/D1/QueryDatabaseLocal.js

@@ -0,0 +1,54 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+import { QueryDatabase } from "./QueryDatabase.js";
+import { makeHttpQueryDatabaseClient, } from "./QueryDatabaseHttpClient.js";
+/**
+ * Local implementation of the {@link QueryDatabase} binding — queries D1 over
+ * the Cloudflare HTTP API using the **current credentials** instead of a native
+ * Worker binding (`QueryDatabaseBinding`) or a scoped API token.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can talk to
+ * a D1 database with the same `prepare`/`exec`/`batch` client you'd use inside a
+ * Worker:
+ *
+ * @example Seeding a database from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const db = yield* Cloudflare.D1.QueryDatabase(database);
+ *     return Effect.fn(function* () {
+ *       yield* db.exec("CREATE TABLE IF NOT EXISTS users (id TEXT, name TEXT)");
+ *       yield* db
+ *         .prepare("INSERT INTO users (id, name) VALUES (?, ?)")
+ *         .bind("1", "Ada")
+ *         .run();
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.D1.QueryDatabaseLocal)),
+ * );
+ * ```
+ *
+ * The database id is resolved at apply time through the ambient
+ * {@link RuntimeContext} (in an Action, that's the resolve context the engine
+ * provides around the body), so `QueryDatabase(database)` works even though the
+ * database is created in the same deploy.
+ */
+export const QueryDatabaseLocal = Layer.effect(QueryDatabase, Effect.gen(function* () {
+    // Account + credentials are ambient during stack-eval (the stack's
+    // providers layer). Capture the full context so the HTTP query ops run
+    // with the current credentials — no `host.bind`, no minted token.
+    const { accountId } = yield* yield* CloudflareEnvironment;
+    const context = yield* Effect.context();
+    const auth = {
+        authorize: (eff) => eff.pipe(Effect.provideContext(context)),
+        accountId,
+    };
+    return Effect.fn(function* (database) {
+        // Deferred accessor — resolves the databaseId against the tracker at
+        // apply time. No `host.bind`: the local variant registers no binding.
+        const databaseId = yield* database.databaseId;
+        return makeHttpQueryDatabaseClient(auth, databaseId);
+    });
+}));
+//# sourceMappingURL=QueryDatabaseLocal.js.map

package/lib/Cloudflare/D1/QueryDatabaseLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QueryDatabaseLocal.js","sourceRoot":"","sources":["../../../src/Cloudflare/D1/QueryDatabaseLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAEL,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAC5C,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,mEAAmE;IACnE,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAElC,CAAC;IACJ,MAAM,IAAI,GAAW;QACnB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5D,SAAS;KACV,CAAC;IAEF,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAkB;QAC5C,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9C,OAAO,2BAA2B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/Cloudflare/D1/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./Database.ts";
 export * from "./QueryDatabase.ts";
 export * from "./QueryDatabaseBinding.ts";
+export * from "./QueryDatabaseLocal.ts";
 //# sourceMappingURL=index.d.ts.map

package/lib/Cloudflare/D1/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/D1/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/D1/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC"}

package/lib/Cloudflare/D1/index.js

@@ -1,4 +1,5 @@
 export * from "./Database.js";
 export * from "./QueryDatabase.js";
 export * from "./QueryDatabaseBinding.js";
+export * from "./QueryDatabaseLocal.js";
 //# sourceMappingURL=index.js.map

package/lib/Cloudflare/D1/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Cloudflare/D1/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Cloudflare/D1/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC"}

package/lib/Cloudflare/DNS/DnsHttp.d.ts

@@ -1,7 +1,10 @@
 import * as Effect from "effect/Effect";
 import type * as Redacted from "effect/Redacted";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import type { RuntimeContext } from "../../RuntimeContext.ts";
 import { Self } from "../../Self.ts";
 import type { PermissionGroupRef } from "../ApiToken/Common.ts";
+import type { Credentials } from "../Credentials.ts";
 import type { Zone } from "../Zone/Zone.ts";
 /**
  * Shared scaffolding for the HTTP-backed DNS bindings.
@@ -18,11 +21,23 @@ import type { Zone } from "../Zone/Zone.ts";
  */
 export declare const makeHttpDnsBinding: <Client>(options: {
     permissionGroups: PermissionGroupRef[];
-    makeClient: (token: Token, zoneId: Effect.Effect<string>) => Client;
+    makeClient: (auth: DnsAuth, zoneId: Effect.Effect<string>) => Client;
 }) => Effect.Effect<(zone: Zone) => Effect.Effect<Client, never, never>, never, Self<{
     Type: string;
     LogicalId: string;
 }>>;
+/**
+ * Injectable auth for the DNS HTTP client builders. Both the scoped-token
+ * (`*Http`) and current-credentials (`*Local`) variants supply an `authorize`
+ * that provides `Credentials` + `HttpClient` to a raw SDK op, so the client
+ * builders are agnostic to how creds are obtained. DNS record ops are
+ * zone-scoped (the `zoneId` is passed alongside), so no `accountId` is needed.
+ */
+export interface DnsAuth {
+    authorize: <A, E>(eff: Effect.Effect<A, E, Credentials | HttpClient.HttpClient>) => Effect.Effect<A, E, RuntimeContext>;
+}
+/** Build a scoped-token {@link DnsAuth} from a bound {@link Token}. */
+export declare const makeDnsAuth: (token: Token) => DnsAuth;
 /**
  * Runtime accessor for a DNS binding's token, obtained by binding the
  * {@link AccountApiToken}'s `value` output in the Worker's Init phase. Reads the

package/lib/Cloudflare/DNS/DnsHttp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DnsHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/DnsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,WAAW;IAClD,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IACvC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;CACrE;;;GAgCG,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,WAAW,KAAK;IACpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;CACjD"}
+{"version":3,"file":"DnsHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/DnsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,WAAW;IAClD,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IACvC,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;CACtE;;;GAgCG,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,KAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;CAC1C;AAED,uEAAuE;AACvE,eAAO,MAAM,WAAW,UAAW,KAAK,KAAG,OAEzC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,KAAK;IACpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;CACjD"}

package/lib/Cloudflare/DNS/DnsHttp.js

@@ -2,6 +2,7 @@ import * as Effect from "effect/Effect";
 import * as Output from "../../Output.js";
 import { Self } from "../../Self.js";
 import { AccountApiToken } from "../ApiToken/AccountApiToken.js";
+import { authorizeWith } from "../HttpClientUtils.js";
 /**
  * Shared scaffolding for the HTTP-backed DNS bindings.
  *
@@ -37,7 +38,11 @@ export const makeHttpDnsBinding = (options) => Effect.gen(function* () {
             value: yield* token.value,
         };
         const zoneId = yield* zone.zoneId;
-        return options.makeClient(bound, zoneId);
+        return options.makeClient(makeDnsAuth(bound), zoneId);
     });
 });
+/** Build a scoped-token {@link DnsAuth} from a bound {@link Token}. */
+export const makeDnsAuth = (token) => ({
+    authorize: authorizeWith(token),
+});
 //# sourceMappingURL=DnsHttp.js.map

package/lib/Cloudflare/DNS/DnsHttp.js.map

@@ -1 +1 @@
-{"version":3,"file":"DnsHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/DnsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAIjE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAS,OAG1C,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;IAEzB,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACpC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC;gBAC5C,QAAQ,EAAE;oBACR;wBACE,MAAM,EAAE,OAAO;wBACf,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;wBAC1C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CACzB,MAAM,CAAC,OAAO,CACZ,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,WAAW,CAAA,mCAAmC,MAAM,EAAE,CAChE,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BACtB,CAAC,MAAM,CAAC,EAAE,GAAG;yBACd,CAAC,CAAC,CACJ;qBACF;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK;SACV,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"DnsHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/DnsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAS,OAG1C,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;IAEzB,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACpC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC;gBAC5C,QAAQ,EAAE;oBACR;wBACE,MAAM,EAAE,OAAO;wBACf,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;wBAC1C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CACzB,MAAM,CAAC,OAAO,CACZ,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,WAAW,CAAA,mCAAmC,MAAM,EAAE,CAChE,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BACtB,CAAC,MAAM,CAAC,EAAE,GAAG;yBACd,CAAC,CAAC,CACJ;qBACF;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK;SACV,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,OAAO,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAeL,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,CAAC;IACrD,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC;CAChC,CAAC,CAAC"}

package/lib/Cloudflare/DNS/DnsLocal.d.ts

@@ -0,0 +1,22 @@
+import * as Effect from "effect/Effect";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import type { Credentials } from "../Credentials.ts";
+import type { Zone } from "../Zone/Zone.ts";
+import type { DnsAuth } from "./DnsHttp.ts";
+/**
+ * Shared scaffolding for the `*Local` DNS services.
+ *
+ * Instead of minting a scoped {@link AccountApiToken} (the `*Http` path), it
+ * captures the ambient current-credentials context available during stack-eval
+ * and builds a {@link DnsAuth} that provides those credentials directly to the
+ * DNS HTTP ops. It then delegates to the same client builders the `*Http`
+ * variant uses. DNS is a zone-management capability with no native Worker
+ * binding, so there is no `*Binding` counterpart.
+ *
+ * NOT exported from `index.ts` — this is internal scaffolding shared by the
+ * three access-level Local layers.
+ */
+export declare const makeLocalDnsBinding: <Client>(options: {
+    makeClient: (auth: DnsAuth, zoneId: Effect.Effect<string>) => Client;
+}) => Effect.Effect<(zone: Zone) => Effect.Effect<Client, never, never>, never, Credentials | HttpClient.HttpClient>;
+//# sourceMappingURL=DnsLocal.d.ts.map

package/lib/Cloudflare/DNS/DnsLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DnsLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/DnsLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,WAAW;IACnD,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;CACtE,mHAmBG,CAAC"}

package/lib/Cloudflare/DNS/DnsLocal.js

@@ -0,0 +1,31 @@
+import * as Effect from "effect/Effect";
+/**
+ * Shared scaffolding for the `*Local` DNS services.
+ *
+ * Instead of minting a scoped {@link AccountApiToken} (the `*Http` path), it
+ * captures the ambient current-credentials context available during stack-eval
+ * and builds a {@link DnsAuth} that provides those credentials directly to the
+ * DNS HTTP ops. It then delegates to the same client builders the `*Http`
+ * variant uses. DNS is a zone-management capability with no native Worker
+ * binding, so there is no `*Binding` counterpart.
+ *
+ * NOT exported from `index.ts` — this is internal scaffolding shared by the
+ * three access-level Local layers.
+ */
+export const makeLocalDnsBinding = (options) => Effect.gen(function* () {
+    // Credentials are ambient during stack-eval (the stack's providers layer).
+    // Capture the full context so DNS HTTP ops can run with the current
+    // credentials — no `host.bind`, no minted token. DNS record ops are
+    // zone-scoped, so no accountId is needed.
+    const context = yield* Effect.context();
+    return Effect.fn(function* (zone) {
+        // Deferred accessor — resolves the zoneId against the tracker at apply
+        // time (in an Action, that's the engine's resolve context).
+        const zoneId = yield* zone.zoneId;
+        const auth = {
+            authorize: (eff) => eff.pipe(Effect.provideContext(context)),
+        };
+        return options.makeClient(auth, zoneId);
+    });
+});
+//# sourceMappingURL=DnsLocal.js.map

package/lib/Cloudflare/DNS/DnsLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DnsLocal.js","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/DnsLocal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAMxC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAS,OAE3C,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,2EAA2E;IAC3E,oEAAoE;IACpE,oEAAoE;IACpE,0CAA0C;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAElC,CAAC;IAEJ,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU;QACpC,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,MAAM,IAAI,GAAY;YACpB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;SAC7D,CAAC;QACF,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/lib/Cloudflare/DNS/ReadDnsHttp.d.ts

@@ -1,12 +1,12 @@
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
-import { type Token } from "./DnsHttp.ts";
+import { type DnsAuth } from "./DnsHttp.ts";
 import { ReadDns, type ReadDnsClient } from "./ReadDns.ts";
 /** Runtime layer for {@link ReadDns}. */
 export declare const ReadDnsHttp: Layer.Layer<ReadDns, never, import("../../Self.ts").Self<{
     Type: string;
     LogicalId: string;
 }>>;
-/** Build the read-only client over a bound token and zone id. */
-export declare const dnsReadClient: (token: Token, zoneId: Effect.Effect<string>) => ReadDnsClient;
+/** Build the read-only client over an injectable auth and zone id. */
+export declare const dnsReadClient: (auth: DnsAuth, zoneId: Effect.Effect<string>) => ReadDnsClient;
 //# sourceMappingURL=ReadDnsHttp.d.ts.map

package/lib/Cloudflare/DNS/ReadDnsHttp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ReadDnsHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/ReadDnsHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAsB,KAAK,KAAK,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3D,yCAAyC;AACzC,eAAO,MAAM,WAAW;;;GAQvB,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,aAAa,UACjB,KAAK,UACJ,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAC5B,aAkBF,CAAC"}
+{"version":3,"file":"ReadDnsHttp.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/ReadDnsHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,OAAO,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3D,yCAAyC;AACzC,eAAO,MAAM,WAAW;;;GAQvB,CAAC;AAEF,sEAAsE;AACtE,eAAO,MAAM,aAAa,SAClB,OAAO,UACL,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAC5B,aAkBF,CAAC"}

package/lib/Cloudflare/DNS/ReadDnsHttp.js

@@ -1,7 +1,6 @@
 import * as dns from "@distilled.cloud/cloudflare/dns";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
-import { authorizeWith } from "../HttpClientUtils.js";
 import { makeHttpDnsBinding } from "./DnsHttp.js";
 import { ReadDns } from "./ReadDns.js";
 /** Runtime layer for {@link ReadDns}. */
@@ -9,9 +8,9 @@ export const ReadDnsHttp = Layer.effect(ReadDns, Effect.suspend(() => makeHttpDn
     permissionGroups: ["DNS Read"],
     makeClient: dnsReadClient,
 })));
-/** Build the read-only client over a bound token and zone id. */
-export const dnsReadClient = (token, zoneId) => {
-    const authorize = authorizeWith(token);
+/** Build the read-only client over an injectable auth and zone id. */
+export const dnsReadClient = (auth, zoneId) => {
+    const authorize = auth.authorize;
     return {
         getDnsRecord: Effect.fn("Cloudflare.DNS.getDnsRecord")(function* (dnsRecordId) {
             return yield* authorize(dns.getRecord({ zoneId: yield* zoneId, dnsRecordId }));

package/lib/Cloudflare/DNS/ReadDnsHttp.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReadDnsHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/ReadDnsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,iCAAiC,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAc,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAsB,MAAM,cAAc,CAAC;AAE3D,yCAAyC;AACzC,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CACrC,OAAO,EACP,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,kBAAkB,CAAC;IACjB,gBAAgB,EAAE,CAAC,UAAU,CAAC;IAC9B,UAAU,EAAE,aAAa;CAC1B,CAAC,CACH,CACF,CAAC;AAEF,iEAAiE;AACjE,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,KAAY,EACZ,MAA6B,EACd,EAAE;IACjB,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CACpD,QAAQ,CAAC,EAAE,WAAW;YACpB,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CACtD,CAAC;QACJ,CAAC,CACF;QACD,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CACxD,QAAQ,CAAC,EAAE,OAAO;YAChB,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CACvD,CAAC;QACJ,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"ReadDnsHttp.js","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/ReadDnsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,iCAAiC,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAgB,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,OAAO,EAAsB,MAAM,cAAc,CAAC;AAE3D,yCAAyC;AACzC,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CACrC,OAAO,EACP,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,kBAAkB,CAAC;IACjB,gBAAgB,EAAE,CAAC,UAAU,CAAC;IAC9B,UAAU,EAAE,aAAa;CAC1B,CAAC,CACH,CACF,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,IAAa,EACb,MAA6B,EACd,EAAE;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CACpD,QAAQ,CAAC,EAAE,WAAW;YACpB,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CACtD,CAAC;QACJ,CAAC,CACF;QACD,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CACxD,QAAQ,CAAC,EAAE,OAAO;YAChB,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CACvD,CAAC;QACJ,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC"}

package/lib/Cloudflare/DNS/ReadDnsLocal.d.ts

@@ -0,0 +1,32 @@
+import * as Layer from "effect/Layer";
+import { ReadDns } from "./ReadDns.ts";
+/**
+ * Local implementation of the {@link ReadDns} binding — reads Cloudflare DNS
+ * records over the HTTP API using the **current credentials** instead of a
+ * scoped API token ({@link ReadDnsHttp}). DNS is a zone-management capability
+ * with no native Worker binding.
+ *
+ * Provide it on an {@link Action} (or any deploy-time Effect) so you can read a
+ * zone's DNS records with the same `getDnsRecord`/`listDnsRecords` client you'd
+ * use inside a Worker:
+ *
+ * @example Reading records from an Action
+ * ```typescript
+ * const Check = Alchemy.Action(
+ *   "Check",
+ *   Effect.gen(function* () {
+ *     const dns = yield* Cloudflare.DNS.ReadDns(zone);
+ *     return Effect.fn(function* () {
+ *       return yield* dns.listDnsRecords({ type: "TXT" });
+ *     });
+ *   }).pipe(Effect.provide(Cloudflare.DNS.ReadDnsLocal)),
+ * );
+ * ```
+ *
+ * The zone id is resolved at apply time through the ambient
+ * {@link RuntimeContext} (in an Action, that's the resolve context the engine
+ * provides around the body), so `ReadDns(zone)` works even though the zone may
+ * be created/adopted in the same deploy.
+ */
+export declare const ReadDnsLocal: Layer.Layer<ReadDns, never, import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=ReadDnsLocal.d.ts.map

package/lib/Cloudflare/DNS/ReadDnsLocal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadDnsLocal.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/DNS/ReadDnsLocal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,YAAY,uIAGxB,CAAC"}