@alchemy.run/archil 0.0.0 → 2.0.0-beta.86

package/lib/Disk.d.ts

@@ -0,0 +1,283 @@
+import * as archil from "@distilled.cloud/archil";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import type { Providers } from "./Providers.ts";
+/**
+ * Amazon S3 bucket behind a disk. Omit the keys when the bucket policy
+ * trusts Archil's role for the region (see `ArchilAWS.S3Disk`, which writes
+ * that policy for you).
+ */
+export interface S3DiskStorage {
+    type: "s3";
+    /** Bucket name. */
+    bucketName: string;
+    /** Prefix within the bucket the disk lives under, e.g. `"data/"`. */
+    bucketPrefix?: string;
+    /** Access key id. Omit for IAM-role access through the bucket policy. */
+    accessKeyId?: Redacted.Redacted<string>;
+    /** Secret access key. */
+    secretAccessKey?: Redacted.Redacted<string>;
+    /** Session token for temporary credentials. */
+    sessionToken?: Redacted.Redacted<string>;
+}
+/** Google Cloud Storage bucket behind a disk, through HMAC keys. */
+export interface GcsDiskStorage {
+    type: "gcs";
+    bucketName: string;
+    bucketPrefix?: string;
+    accessKeyId: Redacted.Redacted<string>;
+    secretAccessKey: Redacted.Redacted<string>;
+}
+/** Cloudflare R2 bucket behind a disk. */
+export interface R2DiskStorage {
+    type: "r2";
+    bucketName: string;
+    /** R2 S3 endpoint, `https://<account>.r2.cloudflarestorage.com`. */
+    bucketEndpoint: string;
+    bucketPrefix?: string;
+    accessKeyId: Redacted.Redacted<string>;
+    secretAccessKey: Redacted.Redacted<string>;
+}
+/** Any S3-compatible object store behind a disk. */
+export interface S3CompatibleDiskStorage {
+    type: "s3-compatible";
+    bucketName: string;
+    bucketEndpoint: string;
+    bucketPrefix?: string;
+    accessKeyId: Redacted.Redacted<string>;
+    secretAccessKey: Redacted.Redacted<string>;
+}
+/** Azure Blob Storage container behind a disk, through a service principal. */
+export interface AzureBlobDiskStorage {
+    type: "azure-blob";
+    storageAccount: string;
+    containerName: string;
+    bucketPrefix?: string;
+    tenantId: string;
+    clientId: string;
+    clientSecret: Redacted.Redacted<string>;
+}
+/** Where a disk's files live. Omit for Archil-managed storage. */
+export type DiskStorage = S3DiskStorage | GcsDiskStorage | R2DiskStorage | S3CompatibleDiskStorage | AzureBlobDiskStorage;
+export interface DiskProps {
+    /**
+     * Disk name, unique within your Archil account: letters, digits, `-` and
+     * `_`, at most 100 characters. If omitted, a unique name is generated
+     * from the stack, stage, and logical ID. Changing it replaces the disk.
+     */
+    name?: string;
+    /**
+     * Your own bucket to keep the disk's files in, as ordinary objects any
+     * S3 tool can read. Omit for Archil-managed storage. Changing it replaces
+     * the disk.
+     */
+    storage?: DiskStorage;
+    /**
+     * IPv4 addresses and CIDR ranges allowed to mount the disk. Empty or
+     * omitted allows any address.
+     */
+    allowedIps?: string[];
+    /**
+     * Whether sandboxes and serverless exec may mount the disk.
+     * @default true
+     */
+    allowSandboxMount?: boolean;
+}
+export interface DiskAttributes {
+    /** Disk id (`dsk-…`). */
+    diskId: string;
+    /** Disk name. */
+    name: string;
+    /** Archil organization that owns the disk. */
+    organization: string;
+    /** Archil region the disk lives in, e.g. `aws-us-east-1`. */
+    region: string;
+    /** Storage backend: `archil` for Archil-managed storage, else the bucket type. */
+    storageType: string;
+    /** Bucket name, for a disk on your own bucket. */
+    bucketName: string | undefined;
+    /** Bucket prefix, for a disk on your own bucket. */
+    bucketPrefix: string | undefined;
+    /**
+     * The session id Archil assumes your bucket's role with. Bucket policies
+     * can scope access to exactly this disk with
+     * `aws:PrincipalTag/archilSessionId`.
+     */
+    sessionId: string | undefined;
+    /** IPv4 addresses and CIDR ranges allowed to mount the disk. */
+    allowedIps: string[];
+    /** Whether sandboxes and serverless exec may mount the disk. */
+    allowSandboxMount: boolean;
+}
+export type Disk = Resource<"Archil.Disk", DiskProps, DiskAttributes, never, Providers, DiskLookup>;
+/**
+ * Props for {@link Disk.lookup}: find a disk this stack
+ * doesn't manage by its name.
+ */
+export interface DiskLookup {
+    /** Disk name. */
+    name: string;
+}
+/**
+ * An Archil disk: a durable filesystem that mounts in about 50 ms on any
+ * Linux machine, sandbox, or serverless exec, with hot data on SSD and the
+ * rest in object storage. Keep its files in Archil-managed storage, or in
+ * your own bucket as ordinary objects.
+ *
+ * Declare a disk at deploy time for the few long-lived ones an app shares,
+ * like a dataset or a seeded base you branch from. Disks that belong to one
+ * user, session, or task are created at run time with
+ * {@link CreateDisk}, which returns the same disk shape.
+ *
+ * Archil has no tags, so Alchemy owns a disk through its generated name.
+ * A disk with a fixed `name` that already exists is adopted only with
+ * `--adopt`.
+ *
+ * :::caution
+ * Changing `name` or `storage` replaces the disk, and destroying a disk on
+ * Archil-managed storage deletes its files. A disk on your own bucket
+ * leaves the objects in the bucket.
+ * :::
+ * @see https://docs.archil.com
+ *
+ * ### Creating a Disk
+ * **Example:** Archil-managed storage
+ * ```typescript
+ * export const Dataset = Archil.Disk("Dataset", {});
+ * ```
+ *
+ * **Example:** On your own S3 bucket, with no keys
+ * ```typescript
+ * export const Store = AWS.S3.Bucket("Store", {});
+ * export const Dataset = ArchilAWS.S3Disk("Dataset", { bucket: Store, prefix: "datasets/" });
+ * ```
+ *
+ * **Example:** On an R2 bucket
+ * ```typescript
+ * export const Dataset = Archil.Disk("Dataset", {
+ *   storage: {
+ *     type: "r2",
+ *     bucketName: "datasets",
+ *     bucketEndpoint: "https://<account>.r2.cloudflarestorage.com",
+ *     accessKeyId: Alchemy.Secret("R2_ACCESS_KEY_ID"),
+ *     secretAccessKey: Alchemy.Secret("R2_SECRET_ACCESS_KEY"),
+ *   },
+ * });
+ * ```
+ *
+ * ### Restricting Access
+ * **Example:** Only mount from known addresses
+ * ```typescript
+ * export const Dataset = Archil.Disk("Dataset", {
+ *   allowedIps: ["203.0.113.0/24"],
+ *   allowSandboxMount: false,
+ * });
+ * ```
+ *
+ * ### Binding to a Runtime
+ * Object bindings give each host its own S3 user on this disk (read-only
+ * for `ReadDisk`), so the host never holds an API key.
+ *
+ * **Example:** Read and write the disk from a program sandbox
+ * ```typescript
+ * export default class Api extends Archil.Sandbox<Api>()(
+ *   "Api",
+ *   { main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const files = yield* Archil.ReadWriteDisk(Dataset);
+ *     return {
+ *       fetch: Effect.map(files.getText("README.md"), (text) => HttpServerResponse.text(text)),
+ *     };
+ *   }).pipe(Effect.provide(Archil.ReadWriteDiskHttp)),
+ * ) {}
+ * ```
+ *
+ * **Example:** Mount it into a sandbox
+ * ```typescript
+ * export const Box = Archil.Sandbox("Box", {
+ *   mounts: [{ disk: Dataset, path: "/data", mode: "read-only" }],
+ * });
+ * ```
+ *
+ * **Example:** Mount it in a Cloudflare Container
+ * ```typescript
+ * const dataset = yield* Archil.MountDisk(Dataset, { path: "/data", mode: "read-only" });
+ * const path = yield* dataset.mount();
+ * ```
+ *
+ * ### Runtime Operations
+ * **Example:** Run commands and read files
+ * ```typescript
+ * const dataset = yield* Archil.ExecDisk(Dataset);
+ * const files = yield* Archil.ReadDisk(Dataset);
+ * const result = yield* dataset.exec("wc -l /mnt/archil/*.csv");
+ * const readme = yield* files.getText("README.md");
+ * ```
+ *
+ * **Example:** Upload a large file and share a link
+ * ```typescript
+ * const files = yield* Archil.ReadWriteDisk(Dataset);
+ * yield* files.upload("exports/2026-11.parquet", body);
+ * const url = yield* files.share("exports/2026-11.parquet", 3600);
+ * ```
+ *
+ * ### Branches and Checkpoints
+ * **Example:** Seed a base, then branch per session
+ * ```typescript
+ * export const Seed = Archil.Disk("Seed", {});
+ * export const SeedBase = Effect.gen(function* () {
+ *   const seed = yield* Seed;
+ *   return yield* Archil.Checkpoint("SeedBase", {
+ *     disk: seed.diskId,
+ *     name: "base",
+ *     run: ["git clone https://github.com/acme/app ."],
+ *   });
+ * });
+ * // runtime
+ * const seeds = yield* Archil.BranchDisk(Seed);
+ * const branch = yield* seeds.branch({ name: `session-${id}`, fromCheckpoint: "base" });
+ * ```
+ *
+ * ### Looking up an existing disk
+ * `Disk.lookup` references a disk Alchemy doesn't manage (created in
+ * the Archil console or by another stack). It is read during plan/deploy,
+ * never created, updated or deleted.
+ *
+ * **Example:** Branch an existing disk
+ * ```typescript
+ * const data = Archil.Disk.lookup({ name: "datasets" });
+ * const preview = yield* Archil.Branch("Preview", { disk: data.diskId });
+ * ```
+ *
+ * @resource
+ * @product Disk
+ */
+export declare const Disk: import("alchemy").ResourceClass<Disk>;
+/** The `mounts` entry Archil's create call takes for a storage backend. */
+export declare const toMountConfig: (storage: DiskStorage) => archil.MountConfig;
+/** Map a disk response (and its synced settings) to attributes. */
+export declare const toDiskAttributes: (disk: archil.DiskResponse, settings: {
+    allowedIps: string[];
+    allowSandboxMount: boolean;
+}) => DiskAttributes;
+/** Read a disk's mount-access settings. */
+export declare const readDiskSettings: (id: string) => Effect.Effect<{
+    allowedIps: archil.ApiResponseAllowedIpsDataAllowedIpsList;
+    allowSandboxMount: boolean;
+}, archil.ArchilParseError | archil.BadGateway | import("@distilled.cloud/core/errors").BadRequest | archil.ConfigError | import("@distilled.cloud/core/errors").Conflict | import("@distilled.cloud/core/errors").Forbidden | archil.GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | archil.InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | archil.Locked | import("@distilled.cloud/core/errors").NotFound | archil.NotFound | import("@distilled.cloud/core/sdk-error").SdkError | archil.ServiceUnavailable | archil.TooManyRequests | archil.Unauthorized | archil.UnknownArchilError | archil.UnprocessableEntity, archil.ArchilOpContext>;
+/** Converge a disk's mount-access settings to the desired ones. */
+export declare const syncDiskSettings: (id: string, desired: {
+    allowedIps?: string[];
+    allowSandboxMount?: boolean;
+}) => Effect.Effect<{
+    allowedIps: string[];
+    allowSandboxMount: boolean;
+}, archil.ArchilParseError | archil.BadGateway | import("@distilled.cloud/core/errors").BadRequest | archil.BadRequest | archil.ConfigError | import("@distilled.cloud/core/errors").Conflict | import("@distilled.cloud/core/errors").Forbidden | archil.GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | archil.InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | archil.Locked | import("@distilled.cloud/core/errors").NotFound | archil.NotFound | import("@distilled.cloud/core/sdk-error").SdkError | archil.ServiceUnavailable | archil.TooManyRequests | archil.Unauthorized | archil.UnknownArchilError | archil.UnprocessableEntity, archil.ArchilOpContext>;
+/** Ensure a disk with this name exists and is available (create-or-observe). */
+export declare const ensureDisk: (name: string, storage: DiskStorage | undefined, knownId?: string | undefined) => Effect.Effect<archil.DiskResponse, import("./index.ts").ArchilFailed | import("./index.ts").ArchilNotReady | archil.ArchilParseError | archil.BadGateway | import("@distilled.cloud/core/errors").BadRequest | archil.BadRequest | archil.ConfigError | import("@distilled.cloud/core/errors").Conflict | import("@distilled.cloud/core/errors").Forbidden | archil.Forbidden | archil.GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | archil.InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | archil.Locked | import("@distilled.cloud/core/errors").NotFound | archil.NotFound | import("@distilled.cloud/core/sdk-error").SdkError | archil.ServiceUnavailable | archil.TooManyRequests | archil.Unauthorized | archil.UnknownArchilError | archil.UnprocessableEntity, archil.ArchilOpContext>;
+/** Delete a disk and wait until it is gone. Deleting a missing disk succeeds. */
+export declare const deleteDisk: (id: string) => Effect.Effect<void, import("./index.ts").ArchilFailed | import("./index.ts").ArchilNotReady | archil.ArchilParseError | archil.BadGateway | import("@distilled.cloud/core/errors").BadRequest | archil.BadRequest | archil.ConfigError | import("@distilled.cloud/core/errors").Conflict | import("@distilled.cloud/core/errors").Forbidden | archil.GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | archil.InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | archil.Locked | import("@distilled.cloud/core/sdk-error").SdkError | archil.ServiceUnavailable | archil.TooManyRequests | archil.Unauthorized | archil.UnknownArchilError | archil.UnprocessableEntity, archil.ArchilOpContext>;
+export declare const DiskProvider: () => import("effect/Layer").Layer<Provider.Provider<Disk>, never, import("alchemy").Stack | import("alchemy").Stage | archil.ArchilOpContext>;
+//# sourceMappingURL=Disk.d.ts.map

package/lib/Disk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Disk.d.ts","sources":["../src/Disk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,yBAAyB,CAAC;AAGlD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAY5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,WAAW,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,yBAAyB;IACzB,eAAe,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,+CAA+C;IAC/C,YAAY,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,oDAAoD;AACpD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,YAAY,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,kEAAkE;AAClE,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,cAAc,GACd,aAAa,GACb,uBAAuB,GACvB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,oDAAoD;IACpD,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gEAAgE;IAChE,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAEpG;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqIG;AACH,eAAO,MAAM,IAAI,uCAAgC,CAAC;AAKlD,2EAA2E;AAC3E,eAAO,MAAM,aAAa,YAAa,WAAW,KAAG,MAAM,CAAC,WAsB3D,CAAC;AAeF,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,SACrB,MAAM,CAAC,YAAY,YACf;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,EAAE,OAAO,CAAA;CAAE,KAC7D,cAgBF,CAAC;AAEF,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB;;;4qBAS3B,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,gBAAgB;iBAEH,MAAM,EAAE;wBAAsB,OAAO;;;;gsBAY7D,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,UAAU,i5BAiBrB,CAAC;AAEH,iFAAiF;AACjF,eAAO,MAAM,UAAU,yuBAGrB,CAAC;AAEH,eAAO,MAAM,YAAY,gJA8DtB,CAAC"}

package/lib/Disk.js

@@ -0,0 +1,294 @@
+import * as archil from "@distilled.cloud/archil";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Stream from "effect/Stream";
+import { diskName, findDiskByName, getDisk, isAlchemyName, isRuntimeObjectName, waitForDisk, waitForDiskGone, listAllDisks, } from "./internal/archil.js";
+/**
+ * An Archil disk: a durable filesystem that mounts in about 50 ms on any
+ * Linux machine, sandbox, or serverless exec, with hot data on SSD and the
+ * rest in object storage. Keep its files in Archil-managed storage, or in
+ * your own bucket as ordinary objects.
+ *
+ * Declare a disk at deploy time for the few long-lived ones an app shares,
+ * like a dataset or a seeded base you branch from. Disks that belong to one
+ * user, session, or task are created at run time with
+ * {@link CreateDisk}, which returns the same disk shape.
+ *
+ * Archil has no tags, so Alchemy owns a disk through its generated name.
+ * A disk with a fixed `name` that already exists is adopted only with
+ * `--adopt`.
+ *
+ * :::caution
+ * Changing `name` or `storage` replaces the disk, and destroying a disk on
+ * Archil-managed storage deletes its files. A disk on your own bucket
+ * leaves the objects in the bucket.
+ * :::
+ * @see https://docs.archil.com
+ *
+ * ### Creating a Disk
+ * **Example:** Archil-managed storage
+ * ```typescript
+ * export const Dataset = Archil.Disk("Dataset", {});
+ * ```
+ *
+ * **Example:** On your own S3 bucket, with no keys
+ * ```typescript
+ * export const Store = AWS.S3.Bucket("Store", {});
+ * export const Dataset = ArchilAWS.S3Disk("Dataset", { bucket: Store, prefix: "datasets/" });
+ * ```
+ *
+ * **Example:** On an R2 bucket
+ * ```typescript
+ * export const Dataset = Archil.Disk("Dataset", {
+ *   storage: {
+ *     type: "r2",
+ *     bucketName: "datasets",
+ *     bucketEndpoint: "https://<account>.r2.cloudflarestorage.com",
+ *     accessKeyId: Alchemy.Secret("R2_ACCESS_KEY_ID"),
+ *     secretAccessKey: Alchemy.Secret("R2_SECRET_ACCESS_KEY"),
+ *   },
+ * });
+ * ```
+ *
+ * ### Restricting Access
+ * **Example:** Only mount from known addresses
+ * ```typescript
+ * export const Dataset = Archil.Disk("Dataset", {
+ *   allowedIps: ["203.0.113.0/24"],
+ *   allowSandboxMount: false,
+ * });
+ * ```
+ *
+ * ### Binding to a Runtime
+ * Object bindings give each host its own S3 user on this disk (read-only
+ * for `ReadDisk`), so the host never holds an API key.
+ *
+ * **Example:** Read and write the disk from a program sandbox
+ * ```typescript
+ * export default class Api extends Archil.Sandbox<Api>()(
+ *   "Api",
+ *   { main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const files = yield* Archil.ReadWriteDisk(Dataset);
+ *     return {
+ *       fetch: Effect.map(files.getText("README.md"), (text) => HttpServerResponse.text(text)),
+ *     };
+ *   }).pipe(Effect.provide(Archil.ReadWriteDiskHttp)),
+ * ) {}
+ * ```
+ *
+ * **Example:** Mount it into a sandbox
+ * ```typescript
+ * export const Box = Archil.Sandbox("Box", {
+ *   mounts: [{ disk: Dataset, path: "/data", mode: "read-only" }],
+ * });
+ * ```
+ *
+ * **Example:** Mount it in a Cloudflare Container
+ * ```typescript
+ * const dataset = yield* Archil.MountDisk(Dataset, { path: "/data", mode: "read-only" });
+ * const path = yield* dataset.mount();
+ * ```
+ *
+ * ### Runtime Operations
+ * **Example:** Run commands and read files
+ * ```typescript
+ * const dataset = yield* Archil.ExecDisk(Dataset);
+ * const files = yield* Archil.ReadDisk(Dataset);
+ * const result = yield* dataset.exec("wc -l /mnt/archil/*.csv");
+ * const readme = yield* files.getText("README.md");
+ * ```
+ *
+ * **Example:** Upload a large file and share a link
+ * ```typescript
+ * const files = yield* Archil.ReadWriteDisk(Dataset);
+ * yield* files.upload("exports/2026-11.parquet", body);
+ * const url = yield* files.share("exports/2026-11.parquet", 3600);
+ * ```
+ *
+ * ### Branches and Checkpoints
+ * **Example:** Seed a base, then branch per session
+ * ```typescript
+ * export const Seed = Archil.Disk("Seed", {});
+ * export const SeedBase = Effect.gen(function* () {
+ *   const seed = yield* Seed;
+ *   return yield* Archil.Checkpoint("SeedBase", {
+ *     disk: seed.diskId,
+ *     name: "base",
+ *     run: ["git clone https://github.com/acme/app ."],
+ *   });
+ * });
+ * // runtime
+ * const seeds = yield* Archil.BranchDisk(Seed);
+ * const branch = yield* seeds.branch({ name: `session-${id}`, fromCheckpoint: "base" });
+ * ```
+ *
+ * ### Looking up an existing disk
+ * `Disk.lookup` references a disk Alchemy doesn't manage (created in
+ * the Archil console or by another stack). It is read during plan/deploy,
+ * never created, updated or deleted.
+ *
+ * **Example:** Branch an existing disk
+ * ```typescript
+ * const data = Archil.Disk.lookup({ name: "datasets" });
+ * const preview = yield* Archil.Branch("Preview", { disk: data.diskId });
+ * ```
+ *
+ * @resource
+ * @product Disk
+ */
+export const Disk = Resource("Archil.Disk");
+const unwrap = (value) => value === undefined ? undefined : typeof value === "string" ? value : Redacted.value(value);
+/** The `mounts` entry Archil's create call takes for a storage backend. */
+export const toMountConfig = (storage) => {
+    switch (storage.type) {
+        case "s3":
+            return {
+                type: "s3",
+                bucketName: storage.bucketName,
+                bucketPrefix: storage.bucketPrefix,
+                accessKeyId: unwrap(storage.accessKeyId),
+                secretAccessKey: unwrap(storage.secretAccessKey),
+                sessionToken: unwrap(storage.sessionToken),
+            };
+        case "gcs":
+        case "r2":
+        case "s3-compatible":
+            return {
+                ...storage,
+                accessKeyId: unwrap(storage.accessKeyId),
+                secretAccessKey: unwrap(storage.secretAccessKey),
+            };
+        case "azure-blob":
+            return { ...storage, clientSecret: unwrap(storage.clientSecret) };
+    }
+};
+/** The comparable identity of a storage backend (no secrets). */
+const storageIdentity = (storage) => storage === undefined
+    ? undefined
+    : {
+        type: storage.type,
+        bucketName: "bucketName" in storage ? storage.bucketName : undefined,
+        bucketPrefix: storage.bucketPrefix,
+        bucketEndpoint: "bucketEndpoint" in storage ? storage.bucketEndpoint : undefined,
+        containerName: "containerName" in storage ? storage.containerName : undefined,
+        storageAccount: "storageAccount" in storage ? storage.storageAccount : undefined,
+    };
+/** Map a disk response (and its synced settings) to attributes. */
+export const toDiskAttributes = (disk, settings) => {
+    const first = disk.mounts?.[0];
+    // Archil-managed storage is an `s3` mount on Archil's own bucket.
+    const mount = first?.config?.bucketName?.startsWith("archil.prod.") ? undefined : first;
+    return {
+        diskId: disk.id,
+        name: disk.name,
+        organization: disk.organization,
+        region: disk.region,
+        storageType: mount?.type ?? "archil",
+        bucketName: mount?.config?.bucketName,
+        bucketPrefix: mount?.config?.bucketPrefix,
+        sessionId: mount?.config?.sessionId,
+        allowedIps: settings.allowedIps,
+        allowSandboxMount: settings.allowSandboxMount,
+    };
+};
+/** Read a disk's mount-access settings. */
+export const readDiskSettings = Effect.fn(function* (id) {
+    const [ips, mount] = yield* Effect.all([archil.getAllowedIps({ id }), archil.getSandboxMount({ id })], { concurrency: 2 });
+    return {
+        allowedIps: ips.data.allowedIps ?? [],
+        allowSandboxMount: mount.data.allowSandboxMount,
+    };
+});
+/** Converge a disk's mount-access settings to the desired ones. */
+export const syncDiskSettings = Effect.fn(function* (id, desired) {
+    const observed = yield* readDiskSettings(id);
+    const allowedIps = desired.allowedIps ?? [];
+    const allowSandboxMount = desired.allowSandboxMount ?? true;
+    if (!deepEqual([...observed.allowedIps].sort(), [...allowedIps].sort())) {
+        yield* archil.setAllowedIps({ id, allowedIps });
+    }
+    if (observed.allowSandboxMount !== allowSandboxMount) {
+        yield* archil.setSandboxMount({ id, allowSandboxMount });
+    }
+    return { allowedIps, allowSandboxMount };
+});
+/** Ensure a disk with this name exists and is available (create-or-observe). */
+export const ensureDisk = Effect.fn(function* (name, storage, knownId) {
+    const found = (knownId ? yield* getDisk(knownId) : undefined) ?? (yield* findDiskByName(name));
+    // A disk still being deleted (an earlier destroy) holds the name: let it go.
+    if (found?.status === "deleting")
+        yield* waitForDiskGone(found.id);
+    const observed = found?.status === "deleting" ? undefined : found;
+    if (observed)
+        return yield* waitForDisk(observed.id);
+    // Archil answers a create of an existing name with that disk's id, so a
+    // concurrent create of the same name needs no special case.
+    const { data } = yield* archil.createDisk({
+        name,
+        mounts: storage ? [toMountConfig(storage)] : undefined,
+    });
+    return yield* waitForDisk(data.diskId);
+});
+/** Delete a disk and wait until it is gone. Deleting a missing disk succeeds. */
+export const deleteDisk = Effect.fn(function* (id) {
+    yield* archil.deleteDisk({ id }).pipe(Effect.catchTag("NotFound", () => Effect.void));
+    yield* waitForDiskGone(id);
+});
+export const DiskProvider = () => Provider.effect(Disk, Effect.gen(function* () {
+    return {
+        stables: ["diskId", "name", "organization", "region", "storageType"],
+        list: Effect.fn(function* () {
+            const disks = yield* Stream.runCollect(listAllDisks());
+            return yield* Effect.forEach(disks.filter((disk) => (isAlchemyName(disk.name) || isRuntimeObjectName(disk.name)) &&
+                disk.status !== "deleted"), (disk) => readDiskSettings(disk.id).pipe(Effect.map((s) => toDiskAttributes(disk, s))), { concurrency: 4 });
+        }),
+        diff: Effect.fn(function* ({ id, olds, news, output }) {
+            if (!isResolved(news))
+                return undefined;
+            const name = output?.name ?? (yield* diskName(id, olds?.name));
+            if (news.name !== undefined && news.name !== name) {
+                return { action: "replace" };
+            }
+            if (!deepEqual(storageIdentity(news.storage), storageIdentity(olds?.storage))) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        lookup: Effect.fn(function* ({ name }) {
+            const disk = yield* findDiskByName(name);
+            return disk ? toDiskAttributes(disk, yield* readDiskSettings(disk.id)) : undefined;
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const name = output?.name ?? (yield* diskName(id, olds?.name));
+            const disk = (output ? yield* getDisk(output.diskId) : undefined) ?? (yield* findDiskByName(name));
+            if (!disk)
+                return undefined;
+            const attrs = toDiskAttributes(disk, yield* readDiskSettings(disk.id));
+            // A generated name carries this resource's instance suffix, so a
+            // disk with that name is ours even when state was lost. A fixed
+            // name may belong to anyone.
+            if (output === undefined && olds?.name !== undefined && !isAlchemyName(disk.name)) {
+                return Unowned(attrs);
+            }
+            return attrs;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            // Observe + ensure
+            const name = output?.name ?? (yield* diskName(id, news.name));
+            yield* session.note(`Ensuring disk ${name}...`);
+            const disk = yield* ensureDisk(name, news.storage, output?.diskId);
+            // Sync
+            const settings = yield* syncDiskSettings(disk.id, news);
+            return toDiskAttributes(disk, settings);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* deleteDisk(output.diskId);
+        }),
+    };
+}));
+//# sourceMappingURL=Disk.js.map

package/lib/Disk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Disk.js","sources":["../src/Disk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,QAAQ,EACR,cAAc,EACd,OAAO,EACP,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,sBAAsB,CAAC;AAsI9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAO,aAAa,CAAC,CAAC;AAElD,MAAM,MAAM,GAAG,CAAC,KAAqD,EAAE,EAAE,CACvE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAE9F,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAoB,EAAsB,EAAE;IACxE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,IAAI;YACP,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;gBACxC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;gBAChD,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;aACrB,CAAC;QAC1B,KAAK,KAAK,CAAC;QACX,KAAK,IAAI,CAAC;QACV,KAAK,eAAe;YAClB,OAAO;gBACL,GAAG,OAAO;gBACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;gBACxC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;aAC3B,CAAC;QAC1B,KAAK,YAAY;YACf,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAwB,CAAC;IAC5F,CAAC;AACH,CAAC,CAAC;AAEF,iEAAiE;AACjE,MAAM,eAAe,GAAG,CAAC,OAAgC,EAAE,EAAE,CAC3D,OAAO,KAAK,SAAS;IACnB,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,YAAY,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACpE,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc,EAAE,gBAAgB,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QAChF,aAAa,EAAE,eAAe,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC7E,cAAc,EAAE,gBAAgB,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;KACjF,CAAC;AAER,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAyB,EACzB,QAA8D,EAC9C,EAAE;IAClB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/B,kEAAkE;IAClE,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACxF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,KAAK,EAAE,IAAI,IAAI,QAAQ;QACpC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU;QACrC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY;QACzC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS;QACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC;AACJ,CAAC,CAAC;AAEF,2CAA2C;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;IAC7D,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACpC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAC9D,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;IACF,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;QACrC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB;KAChD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjD,EAAU,EACV,OAA+D;IAE/D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC5D,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;QACrD,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC3C,IAAY,EACZ,OAAgC,EAChC,OAAgB;IAEhB,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,6EAA6E;IAC7E,IAAI,KAAK,EAAE,MAAM,KAAK,UAAU;QAAE,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrD,wEAAwE;IACxE,4DAA4D;IAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,IAAI;QACJ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;IACvD,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,EAAE,CAC/B,QAAQ,CAAC,MAAM,CACb,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC;QACpE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAC1B,KAAK,CAAC,MAAM,CACV,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,KAAK,SAAS,CAC5B,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EACtF,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,IAAI,GACR,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvE,iEAAiE;YACjE,gEAAgE;YAChE,6BAA6B;YAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,mBAAmB;YACnB,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO;YACP,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxD,OAAO,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/DiskObjectsHttp.d.ts

@@ -0,0 +1,20 @@
+import * as Layer from "effect/Layer";
+import { ReadDisk } from "./ReadDisk.ts";
+import { ReadWriteDisk } from "./ReadWriteDisk.ts";
+import { WriteDisk } from "./WriteDisk.ts";
+/**
+ * {@link ReadDisk} over Archil's S3-compatible API, usable from any host.
+ * The host gets a read-only S3 user on the disk.
+ */
+export declare const ReadDiskHttp: Layer.Layer<ReadDisk, never, never>;
+/**
+ * {@link WriteDisk} over Archil's S3-compatible API, usable from any host.
+ * The host gets a read-write S3 user on the disk.
+ */
+export declare const WriteDiskHttp: Layer.Layer<WriteDisk, never, never>;
+/**
+ * {@link ReadWriteDisk} over Archil's S3-compatible API, usable from any
+ * host. The host gets a read-write S3 user on the disk.
+ */
+export declare const ReadWriteDiskHttp: Layer.Layer<ReadWriteDisk, never, never>;
+//# sourceMappingURL=DiskObjectsHttp.d.ts.map

package/lib/DiskObjectsHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiskObjectsHttp.d.ts","sources":["../src/DiskObjectsHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAItC,OAAO,EAAE,QAAQ,EAA2B,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAO3C;;;GAGG;AACH,eAAO,MAAM,YAAY,qCAUxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,sCAUzB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,0CAa7B,CAAC"}