@alchemy.run/boat 0.0.0 → 2.0.0-beta.87

package/lib/internal/SavedSnapshot.js

@@ -0,0 +1,22 @@
+import * as boat from "@distilled.cloud/boat-dev/boat";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { SnapshotFailed } from "../Errors.js";
+/**
+ * How long to wait for a save. A save runs in the background, and a running
+ * sandbox takes a fresh capture first, which can take minutes.
+ */
+const SAVE_TIMEOUT = "10 minutes";
+const poll = { schedule: Schedule.spaced("5 seconds"), times: 120 };
+/** Polls until Boat reports the snapshot `ready` (succeeds) or `failed` (fails). */
+export const awaitSaved = (name) => boat.getSavedSnapshot({ name }).pipe(Effect.map((got) => got.snapshot), Effect.repeat({ ...poll, until: (snapshot) => snapshot.status !== "saving" }), Effect.flatMap((snapshot) => snapshot.status === "ready"
+    ? Effect.succeed(snapshot)
+    : new SnapshotFailed({
+        snapshot: name,
+        message: snapshot.status === "failed"
+            ? `Boat could not save snapshot ${name}: ${snapshot.error ?? "unknown error"}`
+            : `Boat snapshot ${name} was still saving after ${SAVE_TIMEOUT}`,
+    })));
+/** Retries a saved-snapshot write while an earlier save under the same name is running. */
+export const whileSaving = (effect) => effect.pipe(Effect.retry({ ...poll, while: (error) => error._tag === "SaveInProgress" }));
+//# sourceMappingURL=SavedSnapshot.js.map

package/lib/internal/SavedSnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SavedSnapshot.js","sources":["../../src/internal/SavedSnapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,gCAAgC,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C;;;GAGG;AACH,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAW,CAAC;AAE7E,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CACzC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EACjC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC,EAC7E,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ,CAAC,MAAM,KAAK,OAAO;IACzB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC1B,CAAC,CAAC,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,IAAI;QACd,OAAO,EACL,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,gCAAgC,IAAI,KAAK,QAAQ,CAAC,KAAK,IAAI,eAAe,EAAE;YAC9E,CAAC,CAAC,iBAAiB,IAAI,2BAA2B,YAAY,EAAE;KACrE,CAAC,CACP,CACF,CAAC;AAEJ,2FAA2F;AAC3F,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAA8B,EAC9B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC,CAAC,CAAC"}

package/lib/internal/WebhookDelivery.d.ts

@@ -0,0 +1,16 @@
+import { type RuntimeContext } from "alchemy/RuntimeContext";
+import * as Effect from "effect/Effect";
+import type { BoatAuth } from "../BoatBindings.ts";
+import type { SandboxEvent } from "../SandboxEvents.ts";
+/** How old a delivery's timestamp may be before it is refused. */
+export declare const MAX_AGE_SECONDS = 300;
+/** The largest delivery accepted. */
+export declare const MAX_BODY_BYTES: number;
+export interface Scope {
+    readonly auth: BoatAuth;
+    readonly owner: Effect.Effect<Readonly<Record<string, string>>>;
+}
+export declare const handleDelivery: <Req>(request: Request, secret: Effect.Effect<string | undefined>, types: ReadonlySet<string>, scope: Scope | undefined, process: (event: SandboxEvent) => Effect.Effect<void, never, Req>) => Effect.Effect<Response, never, Req | RuntimeContext>;
+/** The bound secret as a string: a `Redacted`, its serialized form, or a plain string. */
+export declare const asSecret: (raw: unknown) => string | undefined;
+//# sourceMappingURL=WebhookDelivery.d.ts.map

package/lib/internal/WebhookDelivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookDelivery.d.ts","sources":["../../src/internal/WebhookDelivery.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,kEAAkE;AAClE,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,qCAAqC;AACrC,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACjE;AAED,eAAO,MAAM,cAAc,GAAI,GAAG,WACvB,OAAO,UACR,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,SAClC,WAAW,CAAC,MAAM,CAAC,SACnB,KAAK,GAAG,SAAS,WACf,CAAC,KAAK,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAChE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,cAAc,CAyElD,CAAC;AAEL,0FAA0F;AAC1F,eAAO,MAAM,QAAQ,QAAS,OAAO,KAAG,MAAM,GAAG,SAUhD,CAAC"}

package/lib/internal/WebhookDelivery.js

@@ -0,0 +1,109 @@
+/**
+ * INTERNAL — handles one delivery of Boat's webhook on a host: checks the
+ * signature, the timestamp and the payload, then scopes and dispatches it.
+ */
+import * as boat from "@distilled.cloud/boat-dev/boat";
+import { isRedactedMarker } from "alchemy/RuntimeContext";
+import * as Clock from "effect/Clock";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { ALCHEMY_LABEL_PREFIX } from "./Ownership.js";
+/** How old a delivery's timestamp may be before it is refused. */
+export const MAX_AGE_SECONDS = 300;
+/** The largest delivery accepted. */
+export const MAX_BODY_BYTES = 1024 * 1024;
+export const handleDelivery = (request, secret, types, scope, process) => Effect.gen(function* () {
+    if (request.method !== "POST")
+        return new Response("method not allowed", { status: 405 });
+    // Boat's events are a few hundred bytes; refuse anything large before reading it.
+    if (Number(request.headers.get("content-length") ?? "0") > MAX_BODY_BYTES) {
+        return new Response("payload too large", { status: 413 });
+    }
+    const body = yield* Effect.tryPromise(() => request.arrayBuffer()).pipe(Effect.option);
+    if (body._tag === "None")
+        return new Response("unreadable body", { status: 400 });
+    if (body.value.byteLength > MAX_BODY_BYTES) {
+        return new Response("payload too large", { status: 413 });
+    }
+    // The signature covers the delivery id, the timestamp and the raw body
+    // bytes; a stale timestamp is refused, so a captured delivery can't be
+    // replayed later.
+    const delivery = request.headers.get("x-ascii-delivery") ?? "";
+    const timestamp = request.headers.get("x-ascii-timestamp") ?? "";
+    const signature = (request.headers.get("x-ascii-signature") ?? "").replace(/^v1=/, "");
+    const now = yield* Clock.currentTimeMillis;
+    const fresh = /^\d{1,12}$/.test(timestamp) &&
+        Math.abs(Number(now) / 1000 - Number(timestamp)) <= MAX_AGE_SECONDS;
+    const valid = delivery !== "" &&
+        fresh &&
+        (yield* verifySignature((yield* secret) ?? "", `${delivery}.${timestamp}.`, body.value, signature));
+    if (!valid)
+        return new Response("invalid signature", { status: 401 });
+    const parsed = yield* Effect.try(() => JSON.parse(new TextDecoder().decode(body.value))).pipe(Effect.orElseSucceed(() => undefined));
+    if (parsed === undefined ||
+        parsed.id !== delivery ||
+        typeof parsed.type !== "string" ||
+        typeof parsed.data?.sandbox?.id !== "string") {
+        return new Response("invalid payload", { status: 400 });
+    }
+    // An event this host didn't subscribe to: acknowledged, not handled.
+    if (!types.has(parsed.type))
+        return new Response(null, { status: 202 });
+    let event = {
+        ...parsed,
+        attempt: Number(request.headers.get("x-ascii-attempt") ?? "1") || 1,
+    };
+    if (scope !== undefined) {
+        const lookup = yield* labelsOf(scope.auth, parsed.data.sandbox.id);
+        // Boat couldn't be asked: answer 503 so it delivers again, rather than
+        // drop an event that may be ours.
+        if (lookup._tag === "Unavailable")
+            return new Response("try again", { status: 503 });
+        const labels = lookup._tag === "Found" ? lookup.labels : undefined;
+        const owner = yield* scope.owner;
+        const ours = labels !== undefined &&
+            ["stack", "stage"].every((key) => owner[`${ALCHEMY_LABEL_PREFIX}${key}`] !== undefined &&
+                labels[`${ALCHEMY_LABEL_PREFIX}${key}`] === owner[`${ALCHEMY_LABEL_PREFIX}${key}`]);
+        // Another stack's sandbox, or one already deleted: acknowledged, not handled.
+        if (!ours)
+            return new Response(null, { status: 202 });
+        event = { ...event, data: { ...event.data, sandbox: { ...event.data.sandbox, labels } } };
+    }
+    yield* process(event);
+    return new Response(null, { status: 202 });
+});
+/** The bound secret as a string: a `Redacted`, its serialized form, or a plain string. */
+export const asSecret = (raw) => {
+    if (raw === undefined || raw === null || raw === "")
+        return undefined;
+    if (Redacted.isRedacted(raw)) {
+        const value = Redacted.value(raw);
+        return typeof value === "string" && value.length > 0 ? value : undefined;
+    }
+    if (isRedactedMarker(raw) && typeof raw.value === "string") {
+        return raw.value.length > 0 ? raw.value : undefined;
+    }
+    return typeof raw === "string" ? raw : undefined;
+};
+/** A sandbox's labels; `Gone` when Boat no longer has it, `Unavailable` when Boat couldn't be asked. */
+const labelsOf = (auth, sandboxId) => auth.authorize(boat.getSandbox({ sandboxId })).pipe(Effect.map((got) => ({
+    _tag: "Found",
+    labels: Object.fromEntries(Object.entries(got.sandbox?.labels ?? {}).filter((entry) => typeof entry[1] === "string")),
+})), Effect.catchTag("NotFound", () => Effect.succeed({ _tag: "Gone" })), Effect.orElseSucceed(() => ({ _tag: "Unavailable" })));
+const fromHex = (hex) => Uint8Array.from(hex.match(/../g) ?? [], (byte) => Number.parseInt(byte, 16));
+/**
+ * Boat's signature: hex HMAC-SHA256 of `<delivery>.<timestamp>.` followed
+ * by the raw body bytes. Web Crypto checks it (in constant time), so it runs
+ * on Workers without `nodejs_compat`.
+ */
+const verifySignature = (secret, prefix, body, signature) => Effect.gen(function* () {
+    if (secret === "" || !/^[a-f0-9]{64}$/i.test(signature))
+        return false;
+    const head = new TextEncoder().encode(prefix);
+    const signed = new Uint8Array(head.byteLength + body.byteLength);
+    signed.set(head, 0);
+    signed.set(new Uint8Array(body), head.byteLength);
+    const valid = yield* Effect.tryPromise(() => crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["verify"])).pipe(Effect.flatMap((key) => Effect.tryPromise(() => crypto.subtle.verify("HMAC", key, fromHex(signature.toLowerCase()), signed))), Effect.orElseSucceed(() => false));
+    return valid;
+});
+//# sourceMappingURL=WebhookDelivery.js.map

package/lib/internal/WebhookDelivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookDelivery.js","sources":["../../src/internal/WebhookDelivery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,IAAI,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAuB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,qCAAqC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAO1C,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAgB,EAChB,MAAyC,EACzC,KAA0B,EAC1B,KAAwB,EACxB,OAAiE,EACX,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,kFAAkF;IAClF,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;QAC1E,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;QAC3C,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,kBAAkB;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC3C,MAAM,KAAK,GACT,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,eAAe,CAAC;IACtE,MAAM,KAAK,GACT,QAAQ,KAAK,EAAE;QACf,KAAK;QACL,CAAC,KAAK,CAAC,CAAC,eAAe,CACrB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACrB,GAAG,QAAQ,IAAI,SAAS,GAAG,EAC3B,IAAI,CAAC,KAAK,EACV,SAAS,CACV,CAAC,CAAC;IACL,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAkC,CACxF,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,EAAE,KAAK,QAAQ;QACtB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,QAAQ,EAC5C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,qEAAqE;IACrE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,IAAI,KAAK,GAAiB;QACxB,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;KACpE,CAAC;IAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnE,uEAAuE;QACvE,kCAAkC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;YACpB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,KAAK,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAAE,CAAC,KAAK,SAAS;gBACpD,MAAM,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAAE,CAAC,CACrF,CAAC;QACJ,8EAA8E;QAC9E,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL,0FAA0F;AAC1F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC,CAAC;AAOF,wGAAwG;AACxG,MAAM,QAAQ,GAAG,CACf,IAAc,EACd,SAAiB,EACkC,EAAE,CACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAe,EAAE,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF;CACF,CAAC,CAAC,EACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAChF,MAAM,CAAC,aAAa,CAAC,GAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CACnE,CAAC;AAEJ,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,eAAe,GAAG,CACtB,MAAc,EACd,MAAc,EACd,IAAiB,EACjB,SAAiB,EACO,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CACrB,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CACrB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAC5E,CACF,EACD,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAClC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alchemy.run/boat",
-  "version": "0.0.0",
+  "version": "2.0.0-beta.87",
   "description": "Boat sandboxes for Alchemy.",
   "keywords": [
     "alchemy",
@@ -9,12 +9,76 @@
     "infrastructure-as-code",
     "sandbox"
   ],
+  "homepage": "https://alchemy.run",
+  "bugs": {
+    "url": "https://github.com/alchemy-run/alchemy/issues"
+  },
   "license": "Apache-2.0",
   "author": "Sam Goodwin <sam@alchemy.run>",
-  "homepage": "https://alchemy.run",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/alchemy-run/alchemy.git",
     "directory": "packages/boat"
+  },
+  "files": [
+    "lib",
+    "src"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "bun": "./src/index.ts",
+      "worker": "./src/index.ts",
+      "default": "./lib/index.js"
+    },
+    "./Bootstrap": {
+      "types": "./src/Bootstrap.ts",
+      "bun": "./src/Bootstrap.ts",
+      "default": "./src/Bootstrap.ts"
+    },
+    "./internal/*": null,
+    "./*": {
+      "types": "./lib/*.d.ts",
+      "bun": "./src/*.ts",
+      "worker": "./src/*.ts",
+      "default": "./lib/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@distilled.cloud/boat-dev": "1.0.0-rc.20",
+    "@distilled.cloud/core": "1.0.0-rc.20",
+    "rolldown": "1.2.16"
+  },
+  "devDependencies": {
+    "@effect/platform-node": "^4.1.4",
+    "@types/bun": "1.4.3",
+    "alchemy": "2.0.0-beta.87",
+    "effect": "^4.1.4",
+    "typescript": "^7.1.0-dev.20261105.1"
+  },
+  "peerDependencies": {
+    "@effect/platform-node": "^4.1.4",
+    "alchemy": "2.0.0-beta.87",
+    "effect": "^4.1.4"
+  },
+  "peerDependenciesMeta": {
+    "@effect/platform-node": {
+      "optional": true
+    }
+  },
+  "alchemy": {
+    "contributes": [
+      "@alchemy.run/boat/Contributions"
+    ]
+  },
+  "scripts": {
+    "build": "pnpm -r --filter \"{.}...\" run build:package",
+    "build:package": "node scripts/build.ts"
   }
-}
+}

package/src/AiProxy.ts

@@ -0,0 +1,171 @@
+import * as boat from "@distilled.cloud/boat-dev/boat";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { sameOrg, stackOrg } from "./internal/Org.ts";
+import type { Providers } from "./Providers.ts";
+
+export interface AiProxyProps {
+  /**
+   * Whether the account's AI credentials proxy is on. While it is on, Boat
+   * bills the account $1 a day, and $1 per 1,000 proxied requests to the
+   * wallet each sandbox bills.
+   * @default true
+   */
+  enabled?: boolean;
+}
+
+export interface AiProxyAttributes {
+  /** The account the switch belongs to: you, or an organization. */
+  accountId: string;
+  /**
+   * The organization whose switch this is, as the stack's `org` named it;
+   * `undefined` for your own.
+   */
+  org: string | undefined;
+  /** Whether the proxy is on. */
+  enabled: boolean;
+  /** Where sandboxes send proxied requests. */
+  proxyUrl: string;
+  /**
+   * What the switch was before Alchemy first changed it. Destroying the
+   * resource puts it back.
+   */
+  initialEnabled: boolean;
+}
+
+export interface AiProxy extends Resource<
+  "Boat.AiProxy",
+  AiProxyProps,
+  AiProxyAttributes,
+  never,
+  Providers
+> {}
+
+/**
+ * The AI credentials proxy switch of a Boat account.
+ *
+ * With the proxy on, a sandbox gets placeholders in place of the keys of
+ * its credential profile, and the proxy's URL in place of each base URL.
+ * Boat swaps in the real key as a request passes through, so the key never
+ * enters the sandbox, and a copied placeholder stops working when the
+ * sandbox stops.
+ *
+ * :::caution
+ * The proxy is billed: $1 for each day it is on, and $1 per 1,000 proxied
+ * requests. It is one switch for a whole account, so turning it on changes
+ * every sandbox that uses one of the account's credential profiles, at its
+ * next start.
+ * :::
+ *
+ * The switch is yours, or an organization's. With an `org` on the stack
+ * (`Boat.providers({ org })`, or the profile's) it is the organization's,
+ * which only an owner can change. That is the same account that owns the
+ * stack's `Boat.CredentialProfile`s.
+ *
+ * The switch always exists, so nothing is created or deleted. Destroying
+ * the resource puts the switch back the way it was found.
+ *
+ * ### Turning the proxy on
+ * **Example:** Proxy the credentials of sandboxes you hand to users
+ * ```typescript
+ * export const MyProfile = Boat.CredentialProfile("MyProfile", {
+ *   anthropic: Config.Redacted("ANTHROPIC_API_KEY"),
+ * });
+ *
+ * export const Proxy = Boat.AiProxy("Proxy", { enabled: true });
+ *
+ * export const Tenants = Boat.Environment("Tenants", {
+ *   safeForThirdParties: true,
+ *   credentialProfile: MyProfile,
+ *   proxyAiCredentials: Proxy,
+ * });
+ * ```
+ *
+ * `proxyAiCredentials` takes the proxy itself, so the environment is updated
+ * after the switch, and proxies only while it is on. Boat rejects
+ * `proxyAiCredentials: true` while the proxy is off.
+ *
+ * ### Turning the proxy off
+ * **Example:** Keep it off
+ * ```typescript
+ * export const Proxy = Boat.AiProxy("Proxy", { enabled: false });
+ * ```
+ *
+ * @resource
+ * @product AI Proxy
+ */
+export const AiProxy = Resource<AiProxy>("Boat.AiProxy");
+
+/**
+ * The account a call addresses. Without an `org`, Boat answers for the
+ * active wallet, which may be an organization's, so your own switch is
+ * named explicitly.
+ */
+const account = (org: string | undefined) => ({ org: org ?? "personal" });
+
+export const AiProxyProvider = () =>
+  Provider.effect(
+    AiProxy,
+    Effect.gen(function* () {
+      return {
+        nuke: { singleton: true },
+        stables: ["accountId", "org", "initialEnabled"],
+        // Each account has its own switch.
+        diff: Effect.fn(function* ({ output }) {
+          if (output !== undefined && !sameOrg(output.org, yield* stackOrg)) {
+            return { action: "replace" } as const;
+          }
+        }),
+        // The switch always exists and belongs to nobody, so a cold read
+        // adopts it; what it shows then is what destroy restores.
+        read: Effect.fn(function* ({ output }) {
+          const org = output ? output.org : yield* stackOrg;
+          const observed = yield* boat.getAiProxy(account(org));
+          return {
+            accountId: observed.accountId,
+            org,
+            enabled: observed.enabled,
+            proxyUrl: observed.proxyUrl,
+            initialEnabled: output !== undefined ? output.initialEnabled : observed.enabled,
+          };
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+          const org = yield* stackOrg;
+          const desired = news.enabled ?? true;
+
+          // Observe.
+          const observed = yield* boat.getAiProxy(account(org));
+
+          // Capture what it was before the first change, for destroy.
+          const initialEnabled = output !== undefined ? output.initialEnabled : observed.enabled;
+
+          // Sync — only when it differs.
+          if (observed.enabled === desired) {
+            return {
+              accountId: observed.accountId,
+              org,
+              enabled: observed.enabled,
+              proxyUrl: observed.proxyUrl,
+              initialEnabled,
+            };
+          }
+          yield* session.note(`Turning the AI credentials proxy ${desired ? "on" : "off"}...`);
+          const updated = yield* boat.updateAiProxy({ ...account(org), enabled: desired });
+          return {
+            accountId: updated.accountId,
+            org,
+            enabled: updated.enabled,
+            proxyUrl: updated.proxyUrl,
+            initialEnabled,
+          };
+        }),
+        // Put the switch back the way it was found.
+        delete: Effect.fn(function* ({ output }) {
+          const observed = yield* boat.getAiProxy(account(output.org));
+          if (observed.enabled === output.initialEnabled) return;
+          yield* boat.updateAiProxy({ ...account(output.org), enabled: output.initialEnabled });
+        }),
+      };
+    }),
+  );