@alchemy.run/boat 0.0.0 → 2.0.0-beta.86

package/lib/internal/SandboxHandle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxHandle.js","sources":["../../src/internal/SandboxHandle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,IAAI,MAAM,gCAAgC,CAAC;AAEvD,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,iBAAiB,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAepF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,QAAQ,GAAG,CAAC,IAAyB,EAAE,EAAE;IAC7C,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,+CAA+C;AAC/C,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAEvE,gEAAgE;AAChE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,QAAgC,EAAE,EAAE,CACxD,QAAQ,KAAK,KAAK;IAChB,CAAC,CAAC,IAAI;IACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAE5F,iDAAiD;AACjD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,cAAc,GAAG,CAAC,OAAuB,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CACN,mBAAmB,EACnB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CACpF,CAAC;AAEJ;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CACf,OAAgB,EAChB,OAGC,EACD,EAAE;IACF,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;SACxD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IACzD,OAAO,OAAO,EAAE,KAAK,KAAK,SAAS;QACjC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,aAAa,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,oBAAoB,IAAI,KAAK,CAAC;AAC/E,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAOhB,EAAa,EAAE,CAAC,CAAC;IAChB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;IACtE,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,UAAU,EAAE,KAAK,CAAC,UAAU;CAC7B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CACrC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EACjC,MAAM,CAAC,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;IACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;IACjD,KAAK,EAAE,EAAE;CACV,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ,CAAC,MAAM,KAAK,OAAO;IACzB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC1B,CAAC,CAAC,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,IAAI;QACd,OAAO,EACL,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,gCAAgC,IAAI,KAAK,QAAQ,CAAC,KAAK,IAAI,eAAe,EAAE;YAC9E,CAAC,CAAC,iBAAiB,IAAI,oCAAoC;KAChE,CAAC,CACP,CACF,CAAC;AAEJ;;;GAGG;AACH,MAAM,cAAc,GAAG,CACrB,IAAc,EACd,WAAyD,EACtC,EAAE;IACrB,MAAM,SAAS,GAAG,CAChB,IAAoE,EAC/B,EAAE,CACvC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,OAA2C,EAAE,EAAE,CAChF,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,gBAAgB,CAAC;QACpB,SAAS;QACT,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,YAAY,EAAE,OAAO,CAAC,MAAM;KAC7B,CAAC,CACH,CAAC;IAEJ,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,IAAwC,EAAW,EAAE;QAC3F,iFAAiF;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAC5B,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAC9B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK;YAChC,IAAI,KAAK,CAAC,IAAI;gBAAE,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,MAAM,GAAoB,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;gBACxD,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;aACzD,CAAC;YACF,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;YAC3D,OAAO;gBACL,MAAM;gBACN,QAAQ;oBACN,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;oBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;aACxE,CAAC;QACb,CAAC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,MAAM,CAAC;YACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YACrC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO;SACrC,CAAC,EACF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAc,EAAE,CAAC,CAAC;YACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC,CACJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC;YACrB,SAAS;YACT,MAAM;YACN,IAAI,EAAE,GAAG,EAAE,CACT,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1F,IAAI;SACL,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAA+B;QACxC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1F,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAC/C;QACH,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CACxF,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CACnC;QACH,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACpB,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC7E,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAC5F,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAClD;QACH,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3F,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAClF,MAAM,CAAC,MAAM,CACd;QACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACtF,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EACf,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAC7D;QACH,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CACrC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,QAAQ,CAAC;YACZ,SAAS;YACT,MAAM;YACN,WAAW;YACX,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;SAC9E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;KACxB,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,CAAC,OAAgB,EAAE,OAAqB,EAAE,EAAE,CAChD,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,qBAAqB,CAAC;YACzB,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;YACnC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;SACzD,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CACZ,CAAC,QAAQ,EAAoE,EAAE;YAC7E,IAAI,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC,EAAE,CAAC;gBAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,sBAAsB,CAAC;oBACzB,OAAO,EAAE,4CAA4C;iBACtD,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,YAAY,CAAC;oBACf,OAAO,EAAE,sDAAsD;oBAC/D,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAa;gBAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC,CACF,CACF;QACH,KAAK,EAAE,CAAC,OAAgB,EAAE,OAAsB,EAAE,EAAE,CAClD,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,qBAAqB,CAAC;YACzB,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;YACnC,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC5D,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,WAAW,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;YAC/D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CACpF,CACN,CACF;QACH,SAAS,EAAE;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CACpB,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,WAAW,CAAC,SAAS,EAAE;gBACrB,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,CAAC;gBACrC,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,CAAC;aACtC,CAAC,CACH,CACF;SACJ;QACD,KAAK;QACL,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAC5B,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,QAAQ,CAAC;YACZ,SAAS;YACT,IAAI;YACJ,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;SAC9E,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,GAAG,KAAK,SAAS;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAC,CAClF;YACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC;gBACpC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3B,yDAAyD;gBACzD,0DAA0D;gBAC1D,6DAA6D;gBAC7D,yDAAyD;gBACzD,qCAAqC;gBACrC,MAAM,IAAI,GAAG,CAAC,OAA4C,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;oBAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;oBACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAC1B,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EACrE,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,EACtC,KAAK,KAAK,SAAS;wBACjB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;wBACd,CAAC,CAAC,iBAAiB,CAAC,SAAS,CACzB,QAAQ,EACR,CAAC,MAAM,EAAE,cAAc,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;6BAC5C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC;6BACnD,IAAI,CAAC,IAAI,CAAC,CACd,CACN,CACF,CAAC;gBACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAiB,CAAC;YAC7E,CAAC,CAAC,CACP,CACF;QACH,QAAQ,EAAE,GAAG,EAAE,CACb,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,GAAG,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAClF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAChC,CACF;QACH,IAAI,EAAE,GAAG,EAAE,CACT,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D;QACH,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAClB,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,aAAa,CAAC;YACjB,SAAS;YACT,GAAG,CAAC,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;SACpF,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACxB,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,MAAM,CACd;QACH,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,IAAI,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CACtF;KACJ,CAAC;AACJ,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAAc,EACd,IAAkB,EAClB,WAAmF,EACtE,EAAE,CAAC,CAAC;IACjB,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,SAAS,EAAE,IAAI,CAAC,EAAE;IAClB,IAAI;IACJ,sEAAsE;IACtE,IAAI,EAAE,CAAC,WAAW,GAAG,EAAE,EAAE,EAAE;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3C,IAAI,CAAC,SAAS,CACZ,IAAI,CAAC,WAAW,CAAC;YACf,GAAG,OAAO;YACV,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE;SACxC,CAAC,CACH,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YACrD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC/E,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CACzE,CACF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CACX,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C;CACJ,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAc,EACd,WAAyD,EACvC,EAAE,CAAC,CAAC;IACtB,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC;IACpC,SAAS,EAAE,WAAW;CACvB,CAAC,CAAC"}

package/lib/internal/WebhookDelivery.d.ts

@@ -0,0 +1,16 @@
+import { type RuntimeContext } from "alchemy/RuntimeContext";
+import * as Effect from "effect/Effect";
+import type { BoatAuth } from "../BoatBindings.ts";
+import type { SandboxEvent } from "../SandboxEvents.ts";
+/** How old a delivery's timestamp may be before it is refused. */
+export declare const MAX_AGE_SECONDS = 300;
+/** The largest delivery accepted. */
+export declare const MAX_BODY_BYTES: number;
+export interface Scope {
+    readonly auth: BoatAuth;
+    readonly owner: Effect.Effect<Readonly<Record<string, string>>>;
+}
+export declare const handleDelivery: <Req>(request: Request, secret: Effect.Effect<string | undefined>, types: ReadonlySet<string>, scope: Scope | undefined, process: (event: SandboxEvent) => Effect.Effect<void, never, Req>) => Effect.Effect<Response, never, Req | RuntimeContext>;
+/** The bound secret as a string: a `Redacted`, its serialized form, or a plain string. */
+export declare const asSecret: (raw: unknown) => string | undefined;
+//# sourceMappingURL=WebhookDelivery.d.ts.map

package/lib/internal/WebhookDelivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookDelivery.d.ts","sources":["../../src/internal/WebhookDelivery.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,kEAAkE;AAClE,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,qCAAqC;AACrC,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACjE;AAED,eAAO,MAAM,cAAc,GAAI,GAAG,WACvB,OAAO,UACR,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,SAClC,WAAW,CAAC,MAAM,CAAC,SACnB,KAAK,GAAG,SAAS,WACf,CAAC,KAAK,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAChE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,cAAc,CAyElD,CAAC;AAEL,0FAA0F;AAC1F,eAAO,MAAM,QAAQ,QAAS,OAAO,KAAG,MAAM,GAAG,SAUhD,CAAC"}

package/lib/internal/WebhookDelivery.js

@@ -0,0 +1,109 @@
+/**
+ * INTERNAL — handles one delivery of Boat's webhook on a host: checks the
+ * signature, the timestamp and the payload, then scopes and dispatches it.
+ */
+import * as boat from "@distilled.cloud/boat-dev/boat";
+import { isRedactedMarker } from "alchemy/RuntimeContext";
+import * as Clock from "effect/Clock";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { ALCHEMY_LABEL_PREFIX } from "./Ownership.js";
+/** How old a delivery's timestamp may be before it is refused. */
+export const MAX_AGE_SECONDS = 300;
+/** The largest delivery accepted. */
+export const MAX_BODY_BYTES = 1024 * 1024;
+export const handleDelivery = (request, secret, types, scope, process) => Effect.gen(function* () {
+    if (request.method !== "POST")
+        return new Response("method not allowed", { status: 405 });
+    // Boat's events are a few hundred bytes; refuse anything large before reading it.
+    if (Number(request.headers.get("content-length") ?? "0") > MAX_BODY_BYTES) {
+        return new Response("payload too large", { status: 413 });
+    }
+    const body = yield* Effect.tryPromise(() => request.arrayBuffer()).pipe(Effect.option);
+    if (body._tag === "None")
+        return new Response("unreadable body", { status: 400 });
+    if (body.value.byteLength > MAX_BODY_BYTES) {
+        return new Response("payload too large", { status: 413 });
+    }
+    // The signature covers the delivery id, the timestamp and the raw body
+    // bytes; a stale timestamp is refused, so a captured delivery can't be
+    // replayed later.
+    const delivery = request.headers.get("x-ascii-delivery") ?? "";
+    const timestamp = request.headers.get("x-ascii-timestamp") ?? "";
+    const signature = (request.headers.get("x-ascii-signature") ?? "").replace(/^v1=/, "");
+    const now = yield* Clock.currentTimeMillis;
+    const fresh = /^\d{1,12}$/.test(timestamp) &&
+        Math.abs(Number(now) / 1000 - Number(timestamp)) <= MAX_AGE_SECONDS;
+    const valid = delivery !== "" &&
+        fresh &&
+        (yield* verifySignature((yield* secret) ?? "", `${delivery}.${timestamp}.`, body.value, signature));
+    if (!valid)
+        return new Response("invalid signature", { status: 401 });
+    const parsed = yield* Effect.try(() => JSON.parse(new TextDecoder().decode(body.value))).pipe(Effect.orElseSucceed(() => undefined));
+    if (parsed === undefined ||
+        parsed.id !== delivery ||
+        typeof parsed.type !== "string" ||
+        typeof parsed.data?.sandbox?.id !== "string") {
+        return new Response("invalid payload", { status: 400 });
+    }
+    // An event this host didn't subscribe to: acknowledged, not handled.
+    if (!types.has(parsed.type))
+        return new Response(null, { status: 202 });
+    let event = {
+        ...parsed,
+        attempt: Number(request.headers.get("x-ascii-attempt") ?? "1") || 1,
+    };
+    if (scope !== undefined) {
+        const lookup = yield* labelsOf(scope.auth, parsed.data.sandbox.id);
+        // Boat couldn't be asked: answer 503 so it delivers again, rather than
+        // drop an event that may be ours.
+        if (lookup._tag === "Unavailable")
+            return new Response("try again", { status: 503 });
+        const labels = lookup._tag === "Found" ? lookup.labels : undefined;
+        const owner = yield* scope.owner;
+        const ours = labels !== undefined &&
+            ["stack", "stage"].every((key) => owner[`${ALCHEMY_LABEL_PREFIX}${key}`] !== undefined &&
+                labels[`${ALCHEMY_LABEL_PREFIX}${key}`] === owner[`${ALCHEMY_LABEL_PREFIX}${key}`]);
+        // Another stack's sandbox, or one already deleted: acknowledged, not handled.
+        if (!ours)
+            return new Response(null, { status: 202 });
+        event = { ...event, data: { ...event.data, sandbox: { ...event.data.sandbox, labels } } };
+    }
+    yield* process(event);
+    return new Response(null, { status: 202 });
+});
+/** The bound secret as a string: a `Redacted`, its serialized form, or a plain string. */
+export const asSecret = (raw) => {
+    if (raw === undefined || raw === null || raw === "")
+        return undefined;
+    if (Redacted.isRedacted(raw)) {
+        const value = Redacted.value(raw);
+        return typeof value === "string" && value.length > 0 ? value : undefined;
+    }
+    if (isRedactedMarker(raw) && typeof raw.value === "string") {
+        return raw.value.length > 0 ? raw.value : undefined;
+    }
+    return typeof raw === "string" ? raw : undefined;
+};
+/** A sandbox's labels; `Gone` when Boat no longer has it, `Unavailable` when Boat couldn't be asked. */
+const labelsOf = (auth, sandboxId) => auth.authorize(boat.getSandbox({ sandboxId })).pipe(Effect.map((got) => ({
+    _tag: "Found",
+    labels: Object.fromEntries(Object.entries(got.sandbox?.labels ?? {}).filter((entry) => typeof entry[1] === "string")),
+})), Effect.catchTag("NotFound", () => Effect.succeed({ _tag: "Gone" })), Effect.orElseSucceed(() => ({ _tag: "Unavailable" })));
+const fromHex = (hex) => Uint8Array.from(hex.match(/../g) ?? [], (byte) => Number.parseInt(byte, 16));
+/**
+ * Boat's signature: hex HMAC-SHA256 of `<delivery>.<timestamp>.` followed
+ * by the raw body bytes. Web Crypto checks it (in constant time), so it runs
+ * on Workers without `nodejs_compat`.
+ */
+const verifySignature = (secret, prefix, body, signature) => Effect.gen(function* () {
+    if (secret === "" || !/^[a-f0-9]{64}$/i.test(signature))
+        return false;
+    const head = new TextEncoder().encode(prefix);
+    const signed = new Uint8Array(head.byteLength + body.byteLength);
+    signed.set(head, 0);
+    signed.set(new Uint8Array(body), head.byteLength);
+    const valid = yield* Effect.tryPromise(() => crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["verify"])).pipe(Effect.flatMap((key) => Effect.tryPromise(() => crypto.subtle.verify("HMAC", key, fromHex(signature.toLowerCase()), signed))), Effect.orElseSucceed(() => false));
+    return valid;
+});
+//# sourceMappingURL=WebhookDelivery.js.map

package/lib/internal/WebhookDelivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookDelivery.js","sources":["../../src/internal/WebhookDelivery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,IAAI,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAuB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,qCAAqC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAO1C,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAgB,EAChB,MAAyC,EACzC,KAA0B,EAC1B,KAAwB,EACxB,OAAiE,EACX,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,kFAAkF;IAClF,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;QAC1E,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;QAC3C,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,kBAAkB;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC3C,MAAM,KAAK,GACT,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,eAAe,CAAC;IACtE,MAAM,KAAK,GACT,QAAQ,KAAK,EAAE;QACf,KAAK;QACL,CAAC,KAAK,CAAC,CAAC,eAAe,CACrB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACrB,GAAG,QAAQ,IAAI,SAAS,GAAG,EAC3B,IAAI,CAAC,KAAK,EACV,SAAS,CACV,CAAC,CAAC;IACL,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAkC,CACxF,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,EAAE,KAAK,QAAQ;QACtB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,QAAQ,EAC5C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,qEAAqE;IACrE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,IAAI,KAAK,GAAiB;QACxB,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;KACpE,CAAC;IAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnE,uEAAuE;QACvE,kCAAkC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;YACpB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,KAAK,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAAE,CAAC,KAAK,SAAS;gBACpD,MAAM,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAAE,CAAC,CACrF,CAAC;QACJ,8EAA8E;QAC9E,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL,0FAA0F;AAC1F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC,CAAC;AAOF,wGAAwG;AACxG,MAAM,QAAQ,GAAG,CACf,IAAc,EACd,SAAiB,EACkC,EAAE,CACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAe,EAAE,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF;CACF,CAAC,CAAC,EACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAChF,MAAM,CAAC,aAAa,CAAC,GAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CACnE,CAAC;AAEJ,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,eAAe,GAAG,CACtB,MAAc,EACd,MAAc,EACd,IAAiB,EACjB,SAAiB,EACO,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CACrB,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CACrB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAC5E,CACF,EACD,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAClC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alchemy.run/boat",
-  "version": "0.0.0",
+  "version": "2.0.0-beta.86",
   "description": "Boat sandboxes for Alchemy.",
   "keywords": [
     "alchemy",
@@ -9,12 +9,76 @@
     "infrastructure-as-code",
     "sandbox"
   ],
+  "homepage": "https://alchemy.run",
+  "bugs": {
+    "url": "https://github.com/alchemy-run/alchemy/issues"
+  },
   "license": "Apache-2.0",
   "author": "Sam Goodwin <sam@alchemy.run>",
-  "homepage": "https://alchemy.run",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/alchemy-run/alchemy.git",
     "directory": "packages/boat"
+  },
+  "files": [
+    "lib",
+    "src"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "bun": "./src/index.ts",
+      "worker": "./src/index.ts",
+      "default": "./lib/index.js"
+    },
+    "./Bootstrap": {
+      "types": "./src/Bootstrap.ts",
+      "bun": "./src/Bootstrap.ts",
+      "default": "./src/Bootstrap.ts"
+    },
+    "./internal/*": null,
+    "./*": {
+      "types": "./lib/*.d.ts",
+      "bun": "./src/*.ts",
+      "worker": "./src/*.ts",
+      "default": "./lib/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@distilled.cloud/boat-dev": "1.0.0-rc.19",
+    "@distilled.cloud/core": "1.0.0-rc.19",
+    "rolldown": "1.2.16"
+  },
+  "devDependencies": {
+    "@effect/platform-node": "^4.1.4",
+    "@types/bun": "1.4.3",
+    "alchemy": "2.0.0-beta.86",
+    "effect": "^4.1.4",
+    "typescript": "^7.1.0-dev.20261105.1"
+  },
+  "peerDependencies": {
+    "@effect/platform-node": "^4.1.4",
+    "alchemy": "2.0.0-beta.86",
+    "effect": "^4.1.4"
+  },
+  "peerDependenciesMeta": {
+    "@effect/platform-node": {
+      "optional": true
+    }
+  },
+  "alchemy": {
+    "contributes": [
+      "@alchemy.run/boat/Contributions"
+    ]
+  },
+  "scripts": {
+    "build": "pnpm -r --filter \"{.}...\" run build:package",
+    "build:package": "node scripts/build.ts"
   }
-}
+}

package/src/AiProxy.ts

@@ -0,0 +1,171 @@
+import * as boat from "@distilled.cloud/boat-dev/boat";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { sameOrg, stackOrg } from "./internal/Org.ts";
+import type { Providers } from "./Providers.ts";
+
+export interface AiProxyProps {
+  /**
+   * Whether the account's AI credentials proxy is on. While it is on, Boat
+   * bills the account $1 a day, and $1 per 1,000 proxied requests to the
+   * wallet each sandbox bills.
+   * @default true
+   */
+  enabled?: boolean;
+}
+
+export interface AiProxyAttributes {
+  /** The account the switch belongs to: you, or an organization. */
+  accountId: string;
+  /**
+   * The organization whose switch this is, as the stack's `org` named it;
+   * `undefined` for your own.
+   */
+  org: string | undefined;
+  /** Whether the proxy is on. */
+  enabled: boolean;
+  /** Where sandboxes send proxied requests. */
+  proxyUrl: string;
+  /**
+   * What the switch was before Alchemy first changed it. Destroying the
+   * resource puts it back.
+   */
+  initialEnabled: boolean;
+}
+
+export interface AiProxy extends Resource<
+  "Boat.AiProxy",
+  AiProxyProps,
+  AiProxyAttributes,
+  never,
+  Providers
+> {}
+
+/**
+ * The AI credentials proxy switch of a Boat account.
+ *
+ * With the proxy on, a sandbox gets placeholders in place of the keys of
+ * its credential profile, and the proxy's URL in place of each base URL.
+ * Boat swaps in the real key as a request passes through, so the key never
+ * enters the sandbox, and a copied placeholder stops working when the
+ * sandbox stops.
+ *
+ * :::caution
+ * The proxy is billed: $1 for each day it is on, and $1 per 1,000 proxied
+ * requests. It is one switch for a whole account, so turning it on changes
+ * every sandbox that uses one of the account's credential profiles, at its
+ * next start.
+ * :::
+ *
+ * The switch is yours, or an organization's. With an `org` on the stack
+ * (`Boat.providers({ org })`, or the profile's) it is the organization's,
+ * which only an owner can change. That is the same account that owns the
+ * stack's `Boat.CredentialProfile`s.
+ *
+ * The switch always exists, so nothing is created or deleted. Destroying
+ * the resource puts the switch back the way it was found.
+ *
+ * ### Turning the proxy on
+ * **Example:** Proxy the credentials of sandboxes you hand to users
+ * ```typescript
+ * export const MyProfile = Boat.CredentialProfile("MyProfile", {
+ *   anthropic: Config.Redacted("ANTHROPIC_API_KEY"),
+ * });
+ *
+ * export const Proxy = Boat.AiProxy("Proxy", { enabled: true });
+ *
+ * export const Tenants = Boat.Environment("Tenants", {
+ *   safeForThirdParties: true,
+ *   credentialProfile: MyProfile,
+ *   proxyAiCredentials: Proxy,
+ * });
+ * ```
+ *
+ * `proxyAiCredentials` takes the proxy itself, so the environment is updated
+ * after the switch, and proxies only while it is on. Boat rejects
+ * `proxyAiCredentials: true` while the proxy is off.
+ *
+ * ### Turning the proxy off
+ * **Example:** Keep it off
+ * ```typescript
+ * export const Proxy = Boat.AiProxy("Proxy", { enabled: false });
+ * ```
+ *
+ * @resource
+ * @product AI Proxy
+ */
+export const AiProxy = Resource<AiProxy>("Boat.AiProxy");
+
+/**
+ * The account a call addresses. Without an `org`, Boat answers for the
+ * active wallet, which may be an organization's, so your own switch is
+ * named explicitly.
+ */
+const account = (org: string | undefined) => ({ org: org ?? "personal" });
+
+export const AiProxyProvider = () =>
+  Provider.effect(
+    AiProxy,
+    Effect.gen(function* () {
+      return {
+        nuke: { singleton: true },
+        stables: ["accountId", "org", "initialEnabled"],
+        // Each account has its own switch.
+        diff: Effect.fn(function* ({ output }) {
+          if (output !== undefined && !sameOrg(output.org, yield* stackOrg)) {
+            return { action: "replace" } as const;
+          }
+        }),
+        // The switch always exists and belongs to nobody, so a cold read
+        // adopts it; what it shows then is what destroy restores.
+        read: Effect.fn(function* ({ output }) {
+          const org = output ? output.org : yield* stackOrg;
+          const observed = yield* boat.getAiProxy(account(org));
+          return {
+            accountId: observed.accountId,
+            org,
+            enabled: observed.enabled,
+            proxyUrl: observed.proxyUrl,
+            initialEnabled: output !== undefined ? output.initialEnabled : observed.enabled,
+          };
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+          const org = yield* stackOrg;
+          const desired = news.enabled ?? true;
+
+          // Observe.
+          const observed = yield* boat.getAiProxy(account(org));
+
+          // Capture what it was before the first change, for destroy.
+          const initialEnabled = output !== undefined ? output.initialEnabled : observed.enabled;
+
+          // Sync — only when it differs.
+          if (observed.enabled === desired) {
+            return {
+              accountId: observed.accountId,
+              org,
+              enabled: observed.enabled,
+              proxyUrl: observed.proxyUrl,
+              initialEnabled,
+            };
+          }
+          yield* session.note(`Turning the AI credentials proxy ${desired ? "on" : "off"}...`);
+          const updated = yield* boat.updateAiProxy({ ...account(org), enabled: desired });
+          return {
+            accountId: updated.accountId,
+            org,
+            enabled: updated.enabled,
+            proxyUrl: updated.proxyUrl,
+            initialEnabled,
+          };
+        }),
+        // Put the switch back the way it was found.
+        delete: Effect.fn(function* ({ output }) {
+          const observed = yield* boat.getAiProxy(account(output.org));
+          if (observed.enabled === output.initialEnabled) return;
+          yield* boat.updateAiProxy({ ...account(output.org), enabled: output.initialEnabled });
+        }),
+      };
+    }),
+  );