feat(repo): consolidate Cloudflare integration PRs

[agcty]

Summary

Consolidates the open alchemy-effect/cloudflare-tools integration PR work into one dogfood monorepo branch.

Included:

• alchemy-effect feat(cloudflare): support Vite dev bindings alchemy-run/alchemy-effect#622 / feat(cloudflare): consume distilled Vite manifests alchemy-run/alchemy-effect#615: Vite build manifest consumption, dev bindings fixtures/docs
• alchemy-effect feat(build): Build.Exec — run a command for its side effects, no artifact contract alchemy-run/alchemy-effect#600: Build.Exec
• alchemy-effect fix(core): resolve per-field Effect inputs in resource props alchemy-run/alchemy-effect#596: per-field Effect input resolution
• cloudflare-tools Discriminate on redacted alchemy-run/alchemy-effect#50 / chore: cloudflare vue example alchemy-run/alchemy-effect#47: distilled Vite build manifest/RSC support

Not duplicated:

• alchemy-effect feat(cloudflare/ai-gateway): AiGatewayProviderKey — Secret + ProviderConfig composition helper alchemy-run/alchemy-effect#586 and feat(cloudflare): add Turnstile widget resource alchemy-run/alchemy-effect#370 are already represented on dogfood main by newer AiGatewayProviderConfig and Turnstile Widget resources.

Monorepo adaptation:

• rewired new fixtures to @oddlynew/* packages and root catalog deps
• fixed inferred Nx typecheck for imported Alchemy fixtures
• kept the Cloudflare Vite dev server on the existing runtime context plus Vite asset plugin overrides
• made Build.Exec provider lifecycle requirements explicit and non-listable

Validation

• bun nx run-many -t build,typecheck --projects=@oddlynew/distilled-cloudflare-rolldown-plugin,@oddlynew/distilled-cloudflare-runtime,@oddlynew/distilled-cloudflare-vite-plugin,@oddlynew/alchemy --parallel=4
• bun nx run-many -t lint --projects=@oddlynew/distilled-cloudflare-rolldown-plugin,@oddlynew/distilled-cloudflare-runtime,@oddlynew/distilled-cloudflare-vite-plugin,@oddlynew/alchemy --parallel=4
• bun nx run-many -t typecheck --projects=@oddlynew/alchemy-fixture-tanstack-dev-bindings,@oddlynew/alchemy-fixture-react-router-rsc --parallel=2
• bun nx test @oddlynew/distilled-cloudflare-vite-plugin
• bun nx test @oddlynew/cloudflare-tools-fixture-react-rsc
• bun nx test @oddlynew/cloudflare-tools-fixture-react-router-rsc
• bun nx test @oddlynew/alchemy -- test/Build/Exec.test.ts test/Output.test.ts test/plan.test.ts test/apply.test.ts test/Diff.test.ts
• bun nx test @oddlynew/alchemy -- test/Cloudflare/Website/Vite.test.ts -t "ignores manifest-like"
• git diff --check
• pre-push hook: bun oxfmt, affected lint, affected typecheck, affected test

Live deploy-backed Alchemy Vite provider tests were not run locally; they need Cloudflare credentials/state and should run in the secret-backed environment.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: af43ae615c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Guard recursive cleanup against unsafe outDir

When a Vite project customizes a Worker environment's build.outDir to . or a path outside the project (for example ../dist/worker), this hook resolves that path and recursively deletes it before Vite's own output-directory safeguards run. That can wipe the source tree or arbitrary parent directories during vite build; please only remove output directories that are safe children of the intended build root and never the root itself.

Useful? React with 👍 / 👎.