@alchemy.run/archil 0.0.0 → 2.0.0-beta.86

package/lib/DiskObjectsHttp.js

@@ -0,0 +1,51 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { DiskKeyAccess } from "./ArchilBindings.js";
+import { makeReadDiskClient, makeWriteDiskClient, presignedShare } from "./Clients.js";
+import { ReadDisk } from "./ReadDisk.js";
+import { ReadWriteDisk } from "./ReadWriteDisk.js";
+import { WriteDisk } from "./WriteDisk.js";
+const diskRef = Effect.fn(function* (disk, options) {
+    const diskId = yield* disk.diskId;
+    return Effect.map(diskId, (id) => ({ disk: id, branch: options?.branch }));
+});
+/**
+ * {@link ReadDisk} over Archil's S3-compatible API, usable from any host.
+ * The host gets a read-only S3 user on the disk.
+ */
+export const ReadDiskHttp = Layer.effect(ReadDisk, Effect.gen(function* () {
+    const keys = yield* DiskKeyAccess;
+    return Effect.fn(function* (disk, options) {
+        const ref = yield* diskRef(disk, options);
+        const run = yield* keys(disk, "read");
+        return makeReadDiskClient(ref, run, presignedShare(run));
+    });
+}));
+/**
+ * {@link WriteDisk} over Archil's S3-compatible API, usable from any host.
+ * The host gets a read-write S3 user on the disk.
+ */
+export const WriteDiskHttp = Layer.effect(WriteDisk, Effect.gen(function* () {
+    const keys = yield* DiskKeyAccess;
+    return Effect.fn(function* (disk, options) {
+        const ref = yield* diskRef(disk, options);
+        const run = yield* keys(disk, "write");
+        return makeWriteDiskClient(ref, run);
+    });
+}));
+/**
+ * {@link ReadWriteDisk} over Archil's S3-compatible API, usable from any
+ * host. The host gets a read-write S3 user on the disk.
+ */
+export const ReadWriteDiskHttp = Layer.effect(ReadWriteDisk, Effect.gen(function* () {
+    const keys = yield* DiskKeyAccess;
+    return Effect.fn(function* (disk, options) {
+        const ref = yield* diskRef(disk, options);
+        const run = yield* keys(disk, "write");
+        return {
+            ...makeReadDiskClient(ref, run, presignedShare(run)),
+            ...makeWriteDiskClient(ref, run),
+        };
+    });
+}));
+//# sourceMappingURL=DiskObjectsHttp.js.map

package/lib/DiskObjectsHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiskObjectsHttp.js","sources":["../src/DiskObjectsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEvF,OAAO,EAAE,QAAQ,EAA2B,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU,EAAE,OAAuC;IACtF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAClC,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CACtC,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAClC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU,EAAE,OAA4B;QAClE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CACvC,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAClC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU,EAAE,OAA4B;QAClE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAC3C,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAClC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU,EAAE,OAA4B;QAClE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO;YACL,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;YACpD,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC;SACjC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/DiskUser.d.ts

@@ -0,0 +1,189 @@
+import * as archil from "@distilled.cloud/archil";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import type { Providers } from "./Providers.ts";
+declare const DiskUserUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Archil.DiskUserUnexpectedResponse";
+} & Readonly<A>;
+export declare class DiskUserUnexpectedResponse extends DiskUserUnexpectedResponse_base<{
+    readonly message: string;
+}> {
+}
+export interface DiskUserProps {
+    /** Id of the disk the user can mount (e.g. `disk.diskId`). Changing it replaces the user. */
+    disk: string;
+    /**
+     * Name shown in the console. If omitted, a unique name is generated from
+     * the stack, stage, and logical ID. Changing it replaces the user.
+     */
+    nickname?: string;
+    /**
+     * An AWS IAM role or user ARN that mounts with its own AWS identity
+     * instead of a token, e.g. an ECS task role. Changing it replaces the user.
+     */
+    principal?: string;
+    /**
+     * `token` mounts with a disk token; `s3` gets an access key pair for the
+     * disk's S3-compatible API instead. Ignored when `principal` is set (an
+     * `awssts` user). Changing it replaces the user.
+     * @default "token"
+     */
+    type?: "token" | "s3";
+    /**
+     * Mounts made with this user reject writes (`EROFS`); an `s3` user can
+     * only `GET` and `HEAD`. Changing it replaces the user.
+     * @default false
+     */
+    readOnly?: boolean;
+    /**
+     * When the user stops working, as an RFC 3339 timestamp in the future
+     * (at most 365 days away). Requests signed with an expired `s3` key,
+     * presigned URLs included, are rejected. Changing it replaces the user.
+     */
+    expiresAt?: string;
+    /**
+     * The user works for one mount only; later mounts with it are rejected.
+     * Not available for `s3` users. Changing it replaces the user.
+     * @default false
+     */
+    oneUse?: boolean;
+}
+export interface DiskUserAttributes {
+    /** Id of the disk. */
+    diskId: string;
+    /** `token`, `s3` for an access key pair, or `awssts` for an IAM principal. */
+    type: "token" | "awssts" | "s3";
+    /** Archil's identifier for the user, used to revoke it. */
+    identifier: string;
+    /** Name shown in the console. */
+    nickname: string;
+    /** The IAM ARN, for an `awssts` user. */
+    principal: string | undefined;
+    /**
+     * The disk token, for a `token` user. Pass it to `archil mount` as
+     * `ARCHIL_MOUNT_TOKEN`. It works only for this disk.
+     */
+    token: Redacted.Redacted<string> | undefined;
+    /** The S3 access key id, for an `s3` user. */
+    accessKeyId: string | undefined;
+    /**
+     * The S3 secret access key, for an `s3` user. Sign requests to the disk's
+     * S3-compatible API with it; it works only for this disk.
+     */
+    secretAccessKey: Redacted.Redacted<string> | undefined;
+    /** Whether the user is read-only. */
+    readOnly: boolean;
+    /** When the user expires, if it does. */
+    expiresAt: string | undefined;
+    /** Whether the user works for one mount only. */
+    oneUse: boolean;
+}
+export type DiskUser = Resource<"Archil.DiskUser", DiskUserProps, DiskUserAttributes, never, Providers>;
+/**
+ * Access to one disk. A token user gets a disk token for `archil mount`; an
+ * `s3` user gets an access key pair for the disk's S3-compatible API; an
+ * IAM user lets an AWS principal mount with its own identity, so no secret
+ * exists at all. Archil checks each one itself, so a host holding a disk
+ * user can't reach any other disk. `readOnly`, `expiresAt` and `oneUse`
+ * narrow it further.
+ *
+ * Archil only shows a token or secret key once, when it's created, so
+ * Alchemy stores it in state as a `Redacted` value. Destroying the user
+ * revokes it. `Archil.MountDisk(disk)` and the object bindings
+ * (`Archil.ReadDisk`, `Archil.WriteDisk`, `Archil.ReadWriteDisk`) create
+ * one per host for you.
+ *
+ * :::caution
+ * Archil can't change a user, so changing any prop replaces it: the old
+ * token or key stops working once the new one exists.
+ * :::
+ * @see https://docs.archil.com/concepts/sharing-disks
+ *
+ * ### Creating a Disk User
+ * **Example:** A token for one machine
+ * ```typescript
+ * const user = yield* Archil.DiskUser("Indexer", { disk: dataset.diskId });
+ * // ARCHIL_MOUNT_TOKEN=<user.token> archil mount <disk> /mnt/data --region aws-us-east-1
+ * ```
+ *
+ * **Example:** An ECS task role that mounts with its own identity
+ * ```typescript
+ * const user = yield* Archil.DiskUser("Workers", {
+ *   disk: dataset.diskId,
+ *   principal: taskRole.roleArn,
+ * });
+ * ```
+ *
+ * **Example:** A read-only token that expires
+ * ```typescript
+ * const user = yield* Archil.DiskUser("Viewer", {
+ *   disk: dataset.diskId,
+ *   readOnly: true,
+ *   expiresAt: "2027-01-01T00:00:00Z",
+ * });
+ * ```
+ *
+ * ### S3 Keys
+ * **Example:** A read-only access key pair for one disk
+ * ```typescript
+ * const reader = yield* Archil.DiskUser("Reader", {
+ *   disk: dataset.diskId,
+ *   type: "s3",
+ *   readOnly: true,
+ * });
+ * // reader.accessKeyId, reader.secretAccessKey sign requests to
+ * // https://s3.green.us-east-1.aws.prod.archil.com/<disk id>/<key>
+ * ```
+ *
+ * @resource
+ * @product Disk
+ */
+export declare const DiskUser: import("alchemy").ResourceClass<DiskUser>;
+/**
+ * The authorized user on a disk with this identifier, nickname or principal.
+ *
+ * For a few seconds after a user is added, some `getDisk` reads still list
+ * the disk without it (removals show at once). So a listed user exists, but
+ * a user we created (`match.identifier`) counts as missing only after reads
+ * across that window all miss it.
+ */
+export declare const findDiskUser: (diskId: string, match: {
+    nickname?: string;
+    principal?: string;
+    identifier?: string;
+}) => Effect.Effect<archil.AuthorizedUser | undefined, archil.GetDiskError, archil.ArchilOpContext>;
+/** What a disk user is created with. */
+export interface DiskUserSpec {
+    readonly nickname: string;
+    readonly principal?: string;
+    readonly type?: "token" | "s3";
+    readonly readOnly?: boolean;
+    readonly expiresAt?: string;
+    readonly oneUse?: boolean;
+}
+/** Add a token, S3, or IAM user to a disk. */
+export declare const addDiskUser: (diskId: string, user: DiskUserSpec) => Effect.Effect<{
+    diskId: string;
+    type: "awssts" | "s3" | "token";
+    identifier: string;
+    nickname: string;
+    principal: string | undefined;
+    token: Redacted.Redacted<string> | undefined;
+    accessKeyId: string | undefined;
+    secretAccessKey: Redacted.Redacted<string> | undefined;
+    readOnly: boolean;
+    expiresAt: string | undefined;
+    oneUse: boolean;
+}, DiskUserUnexpectedResponse | archil.AddDiskUserError, archil.ArchilOpContext>;
+/** Revoke a disk user. Revoking a missing user (or one on a deleted disk) succeeds. */
+export declare const removeDiskUser: (attrs: {
+    diskId: string;
+    type: "token" | "awssts" | "s3";
+    identifier: string;
+    principal?: string;
+}) => Effect.Effect<void, archil.ArchilParseError | archil.BadGateway | import("@distilled.cloud/core/errors").BadRequest | archil.BadRequest | archil.ConfigError | import("@distilled.cloud/core/errors").Conflict | import("@distilled.cloud/core/errors").Forbidden | archil.GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | archil.InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | archil.Locked | import("@distilled.cloud/core/sdk-error").SdkError | archil.ServiceUnavailable | archil.TooManyRequests | archil.Unauthorized | archil.UnknownArchilError | archil.UnprocessableEntity, archil.ArchilOpContext>;
+export declare const DiskUserProvider: () => import("effect/Layer").Layer<Provider.Provider<DiskUser>, never, import("alchemy").Stack | import("alchemy").Stage | archil.ArchilOpContext>;
+export {};
+//# sourceMappingURL=DiskUser.d.ts.map

package/lib/DiskUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiskUser.d.ts","sources":["../src/DiskUser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,yBAAyB,CAAC;AAGlD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;;;;AAEhD,qBAAa,0BAA2B,SAAQ,gCAE9C;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,aAAa;IAC5B,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;IAChC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,8CAA8C;IAC9C,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;;OAGG;IACH,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACvD,qCAAqC;IACrC,QAAQ,EAAE,OAAO,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAC7B,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,eAAO,MAAM,QAAQ,2CAAwC,CAAC;AAmB9D;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;eAEH,MAAM;gBAAc,MAAM;iBAAe,MAAM;mGAWnE,CAAC;AAEH,wCAAwC;AACxC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAQD,8CAA8C;AAC9C,eAAO,MAAM,WAAW;;;;;;;;;;;;gFAoCtB,CAAC;AAEH,uFAAuF;AACvF,eAAO,MAAM,cAAc;YACjB,MAAM;UACR,OAAO,GAAG,QAAQ,GAAG,IAAI;gBACnB,MAAM;gBACN,MAAM;mpBAUlB,CAAC;AAEH,eAAO,MAAM,gBAAgB,oJAmG1B,CAAC"}

package/lib/DiskUser.js

@@ -0,0 +1,243 @@
+import * as archil from "@distilled.cloud/archil";
+import { isResolved } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Schedule from "effect/Schedule";
+export class DiskUserUnexpectedResponse extends Data.TaggedError("Archil.DiskUserUnexpectedResponse") {
+}
+/**
+ * Access to one disk. A token user gets a disk token for `archil mount`; an
+ * `s3` user gets an access key pair for the disk's S3-compatible API; an
+ * IAM user lets an AWS principal mount with its own identity, so no secret
+ * exists at all. Archil checks each one itself, so a host holding a disk
+ * user can't reach any other disk. `readOnly`, `expiresAt` and `oneUse`
+ * narrow it further.
+ *
+ * Archil only shows a token or secret key once, when it's created, so
+ * Alchemy stores it in state as a `Redacted` value. Destroying the user
+ * revokes it. `Archil.MountDisk(disk)` and the object bindings
+ * (`Archil.ReadDisk`, `Archil.WriteDisk`, `Archil.ReadWriteDisk`) create
+ * one per host for you.
+ *
+ * :::caution
+ * Archil can't change a user, so changing any prop replaces it: the old
+ * token or key stops working once the new one exists.
+ * :::
+ * @see https://docs.archil.com/concepts/sharing-disks
+ *
+ * ### Creating a Disk User
+ * **Example:** A token for one machine
+ * ```typescript
+ * const user = yield* Archil.DiskUser("Indexer", { disk: dataset.diskId });
+ * // ARCHIL_MOUNT_TOKEN=<user.token> archil mount <disk> /mnt/data --region aws-us-east-1
+ * ```
+ *
+ * **Example:** An ECS task role that mounts with its own identity
+ * ```typescript
+ * const user = yield* Archil.DiskUser("Workers", {
+ *   disk: dataset.diskId,
+ *   principal: taskRole.roleArn,
+ * });
+ * ```
+ *
+ * **Example:** A read-only token that expires
+ * ```typescript
+ * const user = yield* Archil.DiskUser("Viewer", {
+ *   disk: dataset.diskId,
+ *   readOnly: true,
+ *   expiresAt: "2027-01-01T00:00:00Z",
+ * });
+ * ```
+ *
+ * ### S3 Keys
+ * **Example:** A read-only access key pair for one disk
+ * ```typescript
+ * const reader = yield* Archil.DiskUser("Reader", {
+ *   disk: dataset.diskId,
+ *   type: "s3",
+ *   readOnly: true,
+ * });
+ * // reader.accessKeyId, reader.secretAccessKey sign requests to
+ * // https://s3.green.us-east-1.aws.prod.archil.com/<disk id>/<key>
+ * ```
+ *
+ * @resource
+ * @product Disk
+ */
+export const DiskUser = Resource("Archil.DiskUser");
+const userNickname = (id, nickname) => nickname ? Effect.succeed(nickname) : createPhysicalName({ id, maxLength: 64, delimiter: "-" });
+const lookupDiskUser = Effect.fn(function* (diskId, match) {
+    const { data } = yield* archil.getDisk({ id: diskId });
+    return (data.authorizedUsers ?? []).find((user) => match.identifier !== undefined
+        ? user.identifier === match.identifier
+        : match.principal !== undefined
+            ? user.principal === match.principal
+            : user.nickname === match.nickname);
+});
+/**
+ * The authorized user on a disk with this identifier, nickname or principal.
+ *
+ * For a few seconds after a user is added, some `getDisk` reads still list
+ * the disk without it (removals show at once). So a listed user exists, but
+ * a user we created (`match.identifier`) counts as missing only after reads
+ * across that window all miss it.
+ */
+export const findDiskUser = Effect.fn(function* (diskId, match) {
+    const first = yield* lookupDiskUser(diskId, match);
+    if (first || match.identifier === undefined)
+        return first;
+    return yield* lookupDiskUser(diskId, match).pipe(Effect.repeat({
+        schedule: Schedule.spaced("500 millis"),
+        until: (user) => user !== undefined,
+        times: 14,
+    }));
+});
+const userType = (user) => user.principal !== undefined ? "awssts" : (user.type ?? "token");
+const redacted = (value) => value === undefined ? undefined : typeof value === "string" ? Redacted.make(value) : value;
+/** Add a token, S3, or IAM user to a disk. */
+export const addDiskUser = Effect.fn(function* (diskId, user) {
+    const type = userType(user);
+    const limits = { readOnly: user.readOnly, expiresAt: user.expiresAt };
+    const { data } = yield* archil.addDiskUser({
+        id: diskId,
+        body: type === "awssts"
+            ? { type, principal: user.principal, ...limits, oneUse: user.oneUse }
+            : type === "s3"
+                ? { type, nickname: user.nickname, ...limits }
+                : { type, nickname: user.nickname, ...limits, oneUse: user.oneUse },
+    });
+    const missing = type === "token"
+        ? !data.token || !data.identifier
+        : type === "s3"
+            ? !data.s3AccessKeyId || !data.s3SecretKey
+            : false;
+    if (missing) {
+        return yield* new DiskUserUnexpectedResponse({
+            message: `Archil returned no ${type === "s3" ? "S3 keys" : "token"} for disk user ${user.nickname} on ${diskId}`,
+        });
+    }
+    return {
+        diskId,
+        type,
+        identifier: data.identifier ?? data.s3AccessKeyId ?? user.principal ?? "",
+        nickname: data.nickname ?? user.nickname,
+        principal: user.principal,
+        token: redacted(data.token),
+        accessKeyId: data.s3AccessKeyId,
+        secretAccessKey: redacted(data.s3SecretKey),
+        readOnly: data.readOnly ?? user.readOnly ?? false,
+        expiresAt: data.expiresAt ?? user.expiresAt,
+        oneUse: data.oneUse ?? user.oneUse ?? false,
+    };
+});
+/** Revoke a disk user. Revoking a missing user (or one on a deleted disk) succeeds. */
+export const removeDiskUser = Effect.fn(function* (attrs) {
+    yield* archil
+        .removeDiskUser({
+        id: attrs.diskId,
+        userType: attrs.type,
+        identifier: attrs.type === "awssts" ? undefined : attrs.identifier,
+        principal: attrs.type === "awssts" ? attrs.principal : undefined,
+    })
+        .pipe(Effect.catchTag("NotFound", () => Effect.void));
+});
+export const DiskUserProvider = () => Provider.effect(DiskUser, Effect.gen(function* () {
+    return {
+        stables: [
+            "diskId",
+            "type",
+            "identifier",
+            "nickname",
+            "principal",
+            "token",
+            "accessKeyId",
+            "secretAccessKey",
+            "readOnly",
+            "expiresAt",
+            "oneUse",
+        ],
+        diff: Effect.fn(function* ({ id, olds, news, output }) {
+            if (!isResolved(news))
+                return undefined;
+            const nickname = output?.nickname ?? (yield* userNickname(id, olds?.nickname));
+            if (news.disk !== (output?.diskId ?? olds?.disk) ||
+                (news.nickname !== undefined && news.nickname !== nickname) ||
+                news.principal !== (output?.principal ?? olds?.principal) ||
+                userType(news) !== (output?.type ?? (olds ? userType(olds) : userType(news))) ||
+                (news.readOnly ?? false) !== (output?.readOnly ?? olds?.readOnly ?? false) ||
+                news.expiresAt !== (output?.expiresAt ?? olds?.expiresAt) ||
+                (news.oneUse ?? false) !== (output?.oneUse ?? olds?.oneUse ?? false)) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (!output && !olds)
+                return undefined;
+            const diskId = output?.diskId ?? olds.disk;
+            const nickname = output?.nickname ?? (yield* userNickname(id, olds?.nickname));
+            const observed = yield* findDiskUser(diskId, {
+                identifier: output?.identifier,
+                principal: output?.principal ?? olds?.principal,
+                nickname,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.undefined));
+            if (!observed)
+                return undefined;
+            return (output ?? {
+                diskId,
+                type: observed.type ?? "token",
+                identifier: observed.identifier ?? observed.principal ?? "",
+                nickname: observed.nickname ?? nickname,
+                principal: observed.principal,
+                // Secrets are only shown at creation; reconcile re-creates.
+                token: undefined,
+                accessKeyId: observed.s3AccessKeyId,
+                secretAccessKey: undefined,
+                readOnly: observed.readOnly ?? false,
+                expiresAt: observed.expiresAt,
+                oneUse: observed.oneUse ?? false,
+            });
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const nickname = output?.nickname ?? (yield* userNickname(id, news.nickname));
+            // Observe
+            const observed = yield* findDiskUser(news.disk, {
+                identifier: output?.identifier,
+                principal: news.principal,
+                nickname,
+            });
+            const type = userType(news);
+            const hasSecret = type === "awssts" ||
+                (type === "s3" ? output?.secretAccessKey !== undefined : output?.token !== undefined);
+            if (observed && output && hasSecret)
+                return output;
+            // Ensure — a user we hold no secret for (a lost create, or an
+            // adoption) is revoked and created again.
+            if (observed) {
+                yield* session.note(`Re-creating disk user ${nickname}...`);
+                yield* removeDiskUser({
+                    diskId: news.disk,
+                    type: observed.type ?? "token",
+                    identifier: observed.identifier ?? "",
+                    principal: observed.principal,
+                });
+            }
+            return yield* addDiskUser(news.disk, {
+                nickname,
+                principal: news.principal,
+                type: news.type,
+                readOnly: news.readOnly,
+                expiresAt: news.expiresAt,
+                oneUse: news.oneUse,
+            });
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* removeDiskUser(output);
+        }),
+    };
+}));
+//# sourceMappingURL=DiskUser.js.map

package/lib/DiskUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiskUser.js","sources":["../src/DiskUser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAC9D,mCAAmC,CAGnC;CAAG;AAiFL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAW,iBAAiB,CAAC,CAAC;AAE9D,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,QAA4B,EAAE,EAAE,CAChE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAElG,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACxC,MAAc,EACd,KAAqE;IAErE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,KAAK,CAAC,UAAU,KAAK,SAAS;QAC5B,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACtC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACpC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CACvC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC7C,MAAc,EACd,KAAqE;IAErE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,MAAM,CAAC;QACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;QACvC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS;QACnC,KAAK,EAAE,EAAE;KACV,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAYH,MAAM,QAAQ,GAAG,CAAC,IAA8C,EAAE,EAAE,CAClE,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;AAE9E,MAAM,QAAQ,GAAG,CAAC,KAAqD,EAAE,EAAE,CACzE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAE7F,8CAA8C;AAC9C,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAc,EAAE,IAAkB;IAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACtE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACzC,EAAE,EAAE,MAAM;QACV,IAAI,EACF,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YACtE,CAAC,CAAC,IAAI,KAAK,IAAI;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE;gBAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;KAC1E,CAAC,CAAC;IACH,MAAM,OAAO,GACX,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU;QACjC,CAAC,CAAC,IAAI,KAAK,IAAI;YACb,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,WAAW;YAC1C,CAAC,CAAC,KAAK,CAAC;IACd,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;YAC3C,OAAO,EAAE,sBAAsB,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,kBAAkB,IAAI,CAAC,QAAQ,OAAO,MAAM,EAAE;SACjH,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,MAAM;QACN,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE;QACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QACxC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,aAAa;QAC/B,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK;QACjD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;QAC3C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;KACf,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAKlD;IACC,KAAK,CAAC,CAAC,MAAM;SACV,cAAc,CAAC;QACd,EAAE,EAAE,KAAK,CAAC,MAAM;QAChB,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;QAClE,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,QAAQ,CAAC,MAAM,CACb,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE;YACP,QAAQ;YACR,MAAM;YACN,YAAY;YACZ,UAAU;YACV,WAAW;YACX,OAAO;YACP,aAAa;YACb,iBAAiB;YACjB,UAAU;YACV,WAAW;YACX,QAAQ;SACT;QACD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC/E,IACE,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,IAAI,CAAC;gBAC5C,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;gBAC3D,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;gBACzD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7E,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC;gBAC1E,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;gBACzD,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,EACpE,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,IAAK,CAAC,IAAI,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;gBAC3C,UAAU,EAAE,MAAM,EAAE,UAAU;gBAC9B,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS;gBAC/C,QAAQ;aACT,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,OAAO,CACL,MAAM,IAAI;gBACR,MAAM;gBACN,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,OAAO;gBAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,SAAS,IAAI,EAAE;gBAC3D,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,QAAQ;gBACvC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,4DAA4D;gBAC5D,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,QAAQ,CAAC,aAAa;gBACnC,eAAe,EAAE,SAAS;gBAC1B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;gBACpC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,KAAK;aACjC,CACF,CAAC;QACJ,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9E,UAAU;YACV,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC9C,UAAU,EAAE,MAAM,EAAE,UAAU;gBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ;aACT,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,SAAS,GACb,IAAI,KAAK,QAAQ;gBACjB,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC;YACxF,IAAI,QAAQ,IAAI,MAAM,IAAI,SAAS;gBAAE,OAAO,MAAM,CAAC;YACnD,8DAA8D;YAC9D,0CAA0C;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,QAAQ,KAAK,CAAC,CAAC;gBAC5D,KAAK,CAAC,CAAC,cAAc,CAAC;oBACpB,MAAM,EAAE,IAAI,CAAC,IAAI;oBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,OAAO;oBAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;oBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE;gBACnC,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/ExecDisk.d.ts

@@ -0,0 +1,57 @@
+import * as Binding from "alchemy/Binding";
+import type * as Effect from "effect/Effect";
+import type { DiskDelegationsClient, ExecDiskClient } from "./Clients.ts";
+import type { Disk } from "./Disk.ts";
+export type { DiskDelegationsClient, ExecDiskClient, ExecResult, GrepOptions } from "./Clients.ts";
+/**
+ * Run serverless commands against one disk, and search it, from a Worker,
+ * Lambda, or any other host. Each `exec` boots a fresh microVM with the
+ * disk mounted at `/mnt/archil`, runs the command to completion (up to five
+ * minutes), and shuts down, so you pay only for the call. Files the command
+ * writes stay on the disk.
+ *
+ * The host calls Archil with the API key you deploy with: Archil only
+ * creates API keys from the console and can't scope them to one disk.
+ *
+ * ### Running Commands
+ * **Example:** Count rows in a dataset from a Worker
+ * ```typescript
+ * export default class Api extends Cloudflare.Worker<Api>()(
+ *   "Api",
+ *   { main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const dataset = yield* Archil.ExecDisk(Dataset);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         const result = yield* dataset.exec("wc -l /mnt/archil/*.csv");
+ *         return HttpServerResponse.text(result.stdout);
+ *       }),
+ *     };
+ *   }).pipe(Effect.provide(Archil.ExecDiskHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Searching
+ * **Example:** Grep the whole disk in constant time
+ * ```typescript
+ * const hits = yield* dataset.grep({ pattern: "TODO", directory: "src", recursive: true });
+ * ```
+ *
+ * ### Recovering From a Crashed Mount
+ * A mounted client holds write delegations on the paths it writes. When it
+ * crashes without unmounting, reclaim them so other clients can write.
+ *
+ * **Example:** Revoke orphaned delegations
+ * ```typescript
+ * for (const d of yield* dataset.delegations()) {
+ *   if (d.isOrphaned) yield* dataset.revokeDelegation(d);
+ * }
+ * ```
+ *
+ * @binding
+ * @product Disk
+ */
+export interface ExecDisk extends Binding.Service<ExecDisk, "Archil.ExecDisk", (disk: Disk) => Effect.Effect<ExecDiskClient & DiskDelegationsClient>> {
+}
+export declare const ExecDisk: ExecDisk;
+//# sourceMappingURL=ExecDisk.d.ts.map

package/lib/ExecDisk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecDisk.d.ts","sources":["../src/ExecDisk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtC,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,WAAW,QAAS,SAAQ,OAAO,CAAC,OAAO,CAC/C,QAAQ,EACR,iBAAiB,EACjB,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,qBAAqB,CAAC,CACtE;CAAG;AAEJ,eAAO,MAAM,QAAQ,UAA+C,CAAC"}

package/lib/ExecDisk.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const ExecDisk = Binding.Service("Archil.ExecDisk");
+//# sourceMappingURL=ExecDisk.js.map

package/lib/ExecDisk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecDisk.js","sources":["../src/ExecDisk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA6D3C,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAW,iBAAiB,CAAC,CAAC"}

package/lib/ExecDiskHttp.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { ExecDisk } from "./ExecDisk.ts";
+/** {@link ExecDisk} over Archil's HTTP API, usable from any host. */
+export declare const ExecDiskHttp: Layer.Layer<ExecDisk, never, never>;
+//# sourceMappingURL=ExecDiskHttp.d.ts.map

package/lib/ExecDiskHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecDiskHttp.d.ts","sources":["../src/ExecDiskHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAItC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,qEAAqE;AACrE,eAAO,MAAM,YAAY,qCAgBxB,CAAC"}

package/lib/ExecDiskHttp.js

@@ -0,0 +1,18 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { ApiAccess } from "./ArchilBindings.js";
+import { makeDiskDelegationsClient, makeExecDiskClient } from "./Clients.js";
+import { ExecDisk } from "./ExecDisk.js";
+/** {@link ExecDisk} over Archil's HTTP API, usable from any host. */
+export const ExecDiskHttp = Layer.effect(ExecDisk, Effect.gen(function* () {
+    const access = yield* ApiAccess;
+    return Effect.fn(function* (disk) {
+        const authorize = yield* access();
+        const diskId = yield* disk.diskId;
+        return {
+            ...makeExecDiskClient(diskId, authorize),
+            ...makeDiskDelegationsClient(Effect.map(diskId, (id) => ({ disk: id })), authorize),
+        };
+    });
+}));
+//# sourceMappingURL=ExecDiskHttp.js.map

package/lib/ExecDiskHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecDiskHttp.js","sources":["../src/ExecDiskHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE7E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CACtC,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAChC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAU;QACpC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,OAAO;YACL,GAAG,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC;YACxC,GAAG,yBAAyB,CAC1B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAC1C,SAAS,CACV;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}