@alchemy.run/daytona 0.0.0-stage → 2.0.0-beta.86

package/lib/CreateSandboxHttp.js

@@ -0,0 +1,65 @@
+import * as sandboxes from "@distilled.cloud/daytona/sandbox";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { CreateSandbox } from "./CreateSandbox.js";
+import { makeAccess, makeOwnerLabels, withOwnerLabels } from "./DaytonaBindings.js";
+import { definedLabels } from "./internal/Labels.js";
+import { waitForState } from "./internal/Wait.js";
+import { volumeIdOf } from "./MountVolume.js";
+import { makeSandboxClient } from "./SandboxClient.js";
+/** {@link CreateSandbox} over Daytona's HTTP API; works on any host. */
+export const CreateSandboxHttp = Layer.effect(CreateSandbox, Effect.gen(function* () {
+    const access = yield* makeAccess;
+    return Effect.fn(function* (base) {
+        const purpose = `${base?.LogicalId ?? ""}Sandboxes`;
+        const { authorize, organizationId } = yield* access(purpose, [
+            "write:sandboxes",
+            "delete:sandboxes",
+        ]);
+        const ownerLabels = yield* makeOwnerLabels;
+        const baseName = base ? yield* base.name : undefined;
+        const handle = (s) => Effect.succeed(makeSandboxClient(s, organizationId, authorize));
+        const client = {
+            create: (input) => authorize(Effect.gen(function* () {
+                const labels = withOwnerLabels(input?.labels ? definedLabels(input.labels) : undefined, yield* ownerLabels);
+                const snapshot = input?.snapshot ?? (baseName ? yield* baseName : undefined);
+                const { mounts, ...request } = input ?? {};
+                const volumes = mounts
+                    ? yield* Effect.forEach(mounts, (m) => Effect.map(volumeIdOf(m.volume), (volumeId) => ({
+                        volumeId,
+                        mountPath: m.path,
+                        subpath: m.subpath,
+                    })))
+                    : undefined;
+                const created = yield* sandboxes.createSandbox({
+                    ...request,
+                    snapshot,
+                    labels,
+                    volumes,
+                });
+                return yield* waitForState({
+                    kind: "sandbox",
+                    id: created.id,
+                    observe: sandboxes.getSandbox({ sandboxIdOrName: created.id }),
+                    want: ["started"],
+                    fail: ["error", "build_failed", "destroyed"],
+                    reason: (s) => s.errorReason,
+                    budget: "5 minutes",
+                });
+            })).pipe(Effect.flatMap(handle)),
+            get: (idOrName) => authorize(sandboxes.getSandbox({ sandboxIdOrName: idOrName }).pipe(Effect.map((s) => s.state === "destroyed" || s.state === "destroying" ? undefined : s), Effect.catchTag("SandboxNotFound", () => Effect.undefined))).pipe(Effect.flatMap((s) => (s ? handle(s) : Effect.undefined))),
+            list: (input) => authorize(Effect.gen(function* () {
+                const snapshots = input?.snapshots ?? (baseName ? [yield* baseName] : undefined);
+                const page = yield* sandboxes.listSandboxes({
+                    ...input,
+                    snapshots,
+                    labels: input?.labels ? JSON.stringify(input.labels) : undefined,
+                });
+                return page.items;
+            })),
+            delete: (idOrName) => authorize(sandboxes.deleteSandbox({ sandboxIdOrName: idOrName }).pipe(Effect.asVoid, Effect.catchTag("SandboxNotFound", () => Effect.void))),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=CreateSandboxHttp.js.map

package/lib/CreateSandboxHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandboxHttp.js","sources":["../src/CreateSandboxHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,kCAAkC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,aAAa,EAA4B,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAC3C,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAe;QACzC,MAAM,OAAO,GAAG,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,WAAW,CAAC;QACpD,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE;YAC3D,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAErD,MAAM,MAAM,GAAG,CAAC,CAAqB,EAAE,EAAE,CACvC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;QAElE,MAAM,MAAM,GAAwB;YAClC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,MAAM,GAAG,eAAe,CAC5B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EACvD,KAAK,CAAC,CAAC,WAAW,CACnB,CAAC;gBACF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC7E,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,MAAM;oBACpB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;wBAC9C,QAAQ;wBACR,SAAS,EAAE,CAAC,CAAC,IAAI;wBACjB,OAAO,EAAE,CAAC,CAAC,OAAO;qBACnB,CAAC,CAAC,CACJ;oBACH,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;oBAC7C,GAAG,OAAO;oBACV,QAAQ;oBACR,MAAM;oBACN,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;oBAC9D,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC;oBAC5C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;oBAC5B,MAAM,EAAE,WAAW;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAChB,SAAS,CACP,SAAS,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CACpE,EACD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3D,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACnE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACjF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;oBAC1C,GAAG,KAAK;oBACR,SAAS;oBACT,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjE,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,CACH;YACH,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnB,SAAS,CACP,SAAS,CAAC,aAAa,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACtD,CACF;SACJ,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/CreateSecret.d.ts

@@ -0,0 +1,56 @@
+import type * as secrets from "@distilled.cloud/daytona/secret";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type * as Redacted from "effect/Redacted";
+import type { SecretAttributes } from "./Secret.ts";
+export interface CreateSecretClient {
+    /**
+     * Create the secret, or write a new value (and description and hosts)
+     * to the one with this name. Returns the same attributes as
+     * `Daytona.Secret`; pass `placeholder` into a sandbox's env or the
+     * secret's `name` in `secrets`.
+     */
+    put(input: {
+        readonly name: string;
+        readonly value: string | Redacted.Redacted<string>;
+        readonly description?: string;
+        readonly hosts?: string[];
+    }): Effect.Effect<SecretAttributes, secrets.CreateSecretError | secrets.UpdateSecretError | secrets.ListSecretsPaginatedError, RuntimeContext>;
+    /** The secret with this name, or `undefined`. Values are never returned. */
+    get(name: string): Effect.Effect<SecretAttributes | undefined, secrets.ListSecretsPaginatedError, RuntimeContext>;
+    /** Every secret in the organization. */
+    list(): Effect.Effect<SecretAttributes[], secrets.ListSecretsPaginatedError, RuntimeContext>;
+    /** Delete the secret with this name. Deleting a missing one succeeds. */
+    delete(name: string): Effect.Effect<void, secrets.DeleteSecretError | secrets.ListSecretsPaginatedError, RuntimeContext>;
+}
+/**
+ * Store secrets in Daytona at runtime: a credential per user, injected
+ * into that user's sandboxes without the sandbox (or an agent in it)
+ * ever seeing the value. Daytona swaps the placeholder for the value only
+ * on requests to the secret's `hosts`.
+ *
+ * The host gets its own Daytona API key with `manage:secrets`. Secrets
+ * have no labels, so each one it creates carries `stack/stage/id` in its
+ * description. They are not deleted when the stack is destroyed: list them
+ * (`list()`) and match the description to clean them up.
+ *
+ * ### A Credential per User
+ * **Example:** The user's GitHub token, only sent to GitHub's API
+ * ```typescript
+ * const secrets = yield* Daytona.CreateSecret();
+ * const github = yield* secrets.put({
+ *   name: `github-${user}`,
+ *   value: token,
+ *   hosts: ["api.github.com"],
+ * });
+ * const sandbox = yield* sandboxes.create({ secrets: [{ GITHUB_TOKEN: github.name }] });
+ * ```
+ *
+ * @binding
+ * @product Secret
+ */
+export interface CreateSecret extends Binding.Service<CreateSecret, "Daytona.CreateSecret", () => Effect.Effect<CreateSecretClient>> {
+}
+export declare const CreateSecret: CreateSecret;
+//# sourceMappingURL=CreateSecret.d.ts.map

package/lib/CreateSecret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecret.d.ts","sources":["../src/CreateSecret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,GAAG,CAAC,KAAK,EAAE;QACT,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,GAAG,MAAM,CAAC,MAAM,CACf,gBAAgB,EAChB,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,EACzF,cAAc,CACf,CAAC;IACF,4EAA4E;IAC5E,GAAG,CACD,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,EAAE,OAAO,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;IAClG,wCAAwC;IACxC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;IAC7F,yEAAyE;IACzE,MAAM,CACJ,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,CACd,IAAI,EACJ,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,EAC7D,cAAc,CACf,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,YAAa,SAAQ,OAAO,CAAC,OAAO,CACnD,YAAY,EACZ,sBAAsB,EACtB,MAAM,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CACxC;CAAG;AAEJ,eAAO,MAAM,YAAY,cAAwD,CAAC"}

package/lib/CreateSecret.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const CreateSecret = Binding.Service("Daytona.CreateSecret");
+//# sourceMappingURL=CreateSecret.js.map

package/lib/CreateSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecret.js","sources":["../src/CreateSecret.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAuE3C,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAe,sBAAsB,CAAC,CAAC"}

package/lib/CreateSecretHttp.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { CreateSecret } from "./CreateSecret.ts";
+/** {@link CreateSecret} over Daytona's HTTP API; works on any host. */
+export declare const CreateSecretHttp: Layer.Layer<CreateSecret, never, never>;
+//# sourceMappingURL=CreateSecretHttp.d.ts.map

package/lib/CreateSecretHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecretHttp.d.ts","sources":["../src/CreateSecretHttp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,YAAY,EAA2B,MAAM,mBAAmB,CAAC;AAI1E,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,yCAgD5B,CAAC"}

package/lib/CreateSecretHttp.js

@@ -0,0 +1,39 @@
+import * as secrets from "@distilled.cloud/daytona/secret";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+import { CreateSecret } from "./CreateSecret.js";
+import { makeAccess, makeOwnerLabels, ownerDescription } from "./DaytonaBindings.js";
+import { ensureSecret, findSecretByName, toSecretAttributes } from "./Secret.js";
+/** {@link CreateSecret} over Daytona's HTTP API; works on any host. */
+export const CreateSecretHttp = Layer.effect(CreateSecret, Effect.gen(function* () {
+    const access = yield* makeAccess;
+    return Effect.fn(function* () {
+        const { authorize } = yield* access("Secrets", ["manage:secrets"]);
+        // Secrets have no labels, so the owner goes in the description.
+        const marker = Effect.map(yield* makeOwnerLabels, ownerDescription);
+        const client = {
+            put: (input) => authorize(Effect.gen(function* () {
+                const mark = yield* marker;
+                return yield* ensureSecret({
+                    name: input.name,
+                    value: input.value,
+                    description: input.description ? `${input.description} (${mark})` : mark,
+                    hosts: input.hosts,
+                });
+            })),
+            get: (name) => authorize(findSecretByName(name).pipe(Effect.map((s) => (s ? toSecretAttributes(s, "") : undefined)))),
+            list: () => authorize(secrets.listSecretsPaginated.items({}).pipe(Stream.runCollect, Effect.map((all) => Array.from(all, (s) => toSecretAttributes(s, ""))))),
+            delete: (name) => authorize(Effect.gen(function* () {
+                const found = yield* findSecretByName(name);
+                if (found === undefined)
+                    return;
+                yield* secrets
+                    .deleteSecret({ secretId: found.id })
+                    .pipe(Effect.catchTag("SecretNotFound", () => Effect.void));
+            })),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=CreateSecretHttp.js.map

package/lib/CreateSecretHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecretHttp.js","sources":["../src/CreateSecretHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAA2B,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjF,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAC1C,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACxB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACnE,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAuB;YACjC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACb,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI;oBACxE,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC,CAAC,CACH;YACH,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,SAAS,CACP,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAC/D,CACF;YACH,IAAI,EAAE,GAAG,EAAE,CACT,SAAS,CACP,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACvE,CACF;YACH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO;gBAChC,KAAK,CAAC,CAAC,OAAO;qBACX,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;qBACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,CACH;SACJ,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/CreateSnapshot.d.ts

@@ -0,0 +1,80 @@
+import type { UnsupportedDockerfile } from "@alchemy.run/docker/BuildPlan";
+import type { DockerfileSyntaxError } from "@alchemy.run/docker/DockerfileParser";
+import type * as sandboxes from "@distilled.cloud/daytona/sandbox";
+import type * as snapshots from "@distilled.cloud/daytona/snapshots";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { NameOutsidePrefix } from "./CreateVolume.ts";
+import type { ProcessError } from "./internal/Errors.ts";
+import type { StateFailed, StateTimeout } from "./internal/Wait.ts";
+import type { ResolvedSnapshotSource, SnapshotAttributes, SnapshotContextUnsupported, SnapshotImageTagInvalid, SnapshotRunFailed } from "./Snapshot.ts";
+/** `create` input: a name and one source, as `Daytona.Snapshot` takes them (Dockerfile as content). */
+export interface CreateSnapshotInput extends Omit<ResolvedSnapshotSource, "contextHashes"> {
+    readonly name: string;
+}
+export interface CreateSnapshotClient {
+    /**
+     * Build a snapshot and wait until it is active: pull `image`, build
+     * `dockerfile` on Daytona, or start a sandbox from `from`, `run` the
+     * commands and capture it. Returns the same attributes as
+     * `Daytona.Snapshot`.
+     */
+    create(input: CreateSnapshotInput): Effect.Effect<SnapshotAttributes, snapshots.CreateSnapshotError | snapshots.GetSnapshotError | snapshots.ActivateSnapshotError | sandboxes.CreateSandboxError | sandboxes.GetSandboxError | sandboxes.CreateSandboxSnapshotError | ProcessError | SnapshotRunFailed | SnapshotImageTagInvalid | SnapshotContextUnsupported | UnsupportedDockerfile | DockerfileSyntaxError | StateTimeout | StateFailed | NameOutsidePrefix, RuntimeContext>;
+    /** The snapshot with this id or name, or `undefined`. */
+    get(idOrName: string): Effect.Effect<SnapshotAttributes | undefined, snapshots.GetSnapshotError, RuntimeContext>;
+    /** Snapshots matching Daytona's list filters. */
+    list(input?: Omit<snapshots.GetAllSnapshotsRequest, "xDaytonaOrganizationID" | "page">): Effect.Effect<SnapshotAttributes[], snapshots.GetAllSnapshotsError, RuntimeContext>;
+    /** Make a deactivated snapshot usable again and wait until it is active. */
+    activate(idOrName: string): Effect.Effect<SnapshotAttributes, snapshots.GetSnapshotError | snapshots.ActivateSnapshotError | StateTimeout | StateFailed, RuntimeContext>;
+    /** Deactivate a snapshot; sandboxes can't be created from it until it is activated. */
+    deactivate(idOrName: string): Effect.Effect<void, snapshots.DeactivateSnapshotError, RuntimeContext>;
+    /** A URL streaming the snapshot's build logs. */
+    buildLogsUrl(idOrName: string): Effect.Effect<snapshots.Url, snapshots.GetSnapshotBuildLogsUrlError, RuntimeContext>;
+    /** Delete a snapshot and wait until it is gone. Deleting a missing one succeeds. */
+    delete(idOrName: string): Effect.Effect<void, snapshots.RemoveSnapshotError | snapshots.GetSnapshotError | StateTimeout, RuntimeContext>;
+}
+/**
+ * Options for {@link CreateSnapshot}. Snapshots have only a name, no labels
+ * or description, so a `prefix` is how you find the ones a binding
+ * created: the binding refuses names that don't start with it.
+ */
+export interface CreateSnapshotOptions {
+    /** Every name the binding creates must start with this. */
+    readonly prefix?: string;
+}
+/**
+ * Build Daytona snapshots at runtime: a warm base per repository, built
+ * when it's first needed, that later sandboxes start from. To capture a
+ * sandbox you already have, use `sandbox.createSandboxSnapshot` on its
+ * handle.
+ *
+ * The host gets its own Daytona API key with `write:snapshots`,
+ * `delete:snapshots` and, for `from` builds, `write:sandboxes` and
+ * `delete:sandboxes`. Snapshots have only a name, so the `prefix` you give
+ * is how you find the ones it created. They are not deleted when the stack
+ * is destroyed: `list()` and delete the names with your prefix to clean
+ * them up.
+ *
+ * ### A Warm Base per Repository
+ * **Example:** Build it on first use, then start sandboxes from it
+ * ```typescript
+ * const images = yield* Daytona.CreateSnapshot({ prefix: "repo-" });
+ * const name = `repo-${owner}-${repo}`;
+ * const base =
+ *   (yield* images.get(name)) ??
+ *   (yield* images.create({
+ *     name,
+ *     from: "daytonaio/sandbox:0.4.3",
+ *     run: [`git clone https://github.com/${owner}/${repo} /home/daytona/repo`, "cd /home/daytona/repo && npm ci"],
+ *   }));
+ * const sandbox = yield* sandboxes.create({ snapshot: base.name });
+ * ```
+ *
+ * @binding
+ * @product Snapshot
+ */
+export interface CreateSnapshot extends Binding.Service<CreateSnapshot, "Daytona.CreateSnapshot", (options?: CreateSnapshotOptions) => Effect.Effect<CreateSnapshotClient>> {
+}
+export declare const CreateSnapshot: CreateSnapshot;
+//# sourceMappingURL=CreateSnapshot.d.ts.map

package/lib/CreateSnapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshot.d.ts","sources":["../src/CreateSnapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,KAAK,KAAK,SAAS,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,KAAK,SAAS,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EAClB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,eAAe,CAAC;AAEvB,uGAAuG;AACvG,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,sBAAsB,EAAE,eAAe,CAAC;IACxF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,MAAM,CACJ,KAAK,EAAE,mBAAmB,GACzB,MAAM,CAAC,MAAM,CACd,kBAAkB,EAChB,SAAS,CAAC,mBAAmB,GAC7B,SAAS,CAAC,gBAAgB,GAC1B,SAAS,CAAC,qBAAqB,GAC/B,SAAS,CAAC,kBAAkB,GAC5B,SAAS,CAAC,eAAe,GACzB,SAAS,CAAC,0BAA0B,GACpC,YAAY,GACZ,iBAAiB,GACjB,uBAAuB,GACvB,0BAA0B,GAC1B,qBAAqB,GACrB,qBAAqB,GACrB,YAAY,GACZ,WAAW,GACX,iBAAiB,EACnB,cAAc,CACf,CAAC;IACF,yDAAyD;IACzD,GAAG,CACD,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,EAAE,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC7F,iDAAiD;IACjD,IAAI,CACF,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,wBAAwB,GAAG,MAAM,CAAC,GAChF,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IACvF,4EAA4E;IAC5E,QAAQ,CACN,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,kBAAkB,EAClB,SAAS,CAAC,gBAAgB,GAAG,SAAS,CAAC,qBAAqB,GAAG,YAAY,GAAG,WAAW,EACzF,cAAc,CACf,CAAC;IACF,uFAAuF;IACvF,UAAU,CACR,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;IAC1E,iDAAiD;IACjD,YAAY,CACV,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC;IACxF,oFAAoF;IACpF,MAAM,CACJ,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,IAAI,EACJ,SAAS,CAAC,mBAAmB,GAAG,SAAS,CAAC,gBAAgB,GAAG,YAAY,EACzE,cAAc,CACf,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,WAAW,cAAe,SAAQ,OAAO,CAAC,OAAO,CACrD,cAAc,EACd,wBAAwB,EACxB,CAAC,OAAO,CAAC,EAAE,qBAAqB,KAAK,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CACzE;CAAG;AAEJ,eAAO,MAAM,cAAc,gBAA4D,CAAC"}

package/lib/CreateSnapshot.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const CreateSnapshot = Binding.Service("Daytona.CreateSnapshot");
+//# sourceMappingURL=CreateSnapshot.js.map

package/lib/CreateSnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshot.js","sources":["../src/CreateSnapshot.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAgI3C,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAiB,wBAAwB,CAAC,CAAC"}

package/lib/CreateSnapshotHttp.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { CreateSnapshot } from "./CreateSnapshot.ts";
+/** {@link CreateSnapshot} over Daytona's HTTP API; works on any host. */
+export declare const CreateSnapshotHttp: Layer.Layer<CreateSnapshot, never, never>;
+//# sourceMappingURL=CreateSnapshotHttp.d.ts.map

package/lib/CreateSnapshotHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshotHttp.d.ts","sources":["../src/CreateSnapshotHttp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EACL,cAAc,EAGf,MAAM,qBAAqB,CAAC;AAY7B,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,2CAuD9B,CAAC"}

package/lib/CreateSnapshotHttp.js

@@ -0,0 +1,47 @@
+import * as snapshots from "@distilled.cloud/daytona/snapshots";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+import { CreateSnapshot, } from "./CreateSnapshot.js";
+import { NameOutsidePrefix } from "./CreateVolume.js";
+import { makeAccess, makeOwnerLabels } from "./DaytonaBindings.js";
+import { buildSnapshot, checkRuntimeDockerfile, deleteSnapshot, getSnapshot, toSnapshotAttributes, waitForSnapshot, } from "./Snapshot.js";
+/** {@link CreateSnapshot} over Daytona's HTTP API; works on any host. */
+export const CreateSnapshotHttp = Layer.effect(CreateSnapshot, Effect.gen(function* () {
+    const access = yield* makeAccess;
+    return Effect.fn(function* (options) {
+        const { authorize } = yield* access("Snapshots", [
+            "write:snapshots",
+            "delete:snapshots",
+            "write:sandboxes",
+            "delete:sandboxes",
+        ]);
+        // A snapshot has only a name: `prefix` scopes it. The owner labels go
+        // on the sandbox a warm base is captured from.
+        const labels = yield* makeOwnerLabels;
+        const prefix = options?.prefix;
+        const client = {
+            create: ({ name, ...source }) => prefix !== undefined && !name.startsWith(prefix)
+                ? Effect.fail(new NameOutsidePrefix({ objectName: name, prefix }))
+                : authorize(Effect.gen(function* () {
+                    if (source.dockerfile !== undefined)
+                        yield* checkRuntimeDockerfile(source.dockerfile);
+                    const built = yield* buildSnapshot({
+                        name,
+                        source,
+                        labels: yield* labels,
+                        note: () => Effect.void,
+                    });
+                    return toSnapshotAttributes(built, "");
+                })),
+            get: (idOrName) => authorize(getSnapshot(idOrName).pipe(Effect.map((s) => (s ? toSnapshotAttributes(s, "") : undefined)))),
+            list: (input) => authorize(snapshots.getAllSnapshots.items({ ...input }).pipe(Stream.runCollect, Effect.map((all) => Array.from(all, (s) => toSnapshotAttributes(s, ""))))),
+            activate: (idOrName) => authorize(waitForSnapshot(idOrName).pipe(Effect.map((s) => toSnapshotAttributes(s, "")))),
+            deactivate: (idOrName) => authorize(snapshots.deactivateSnapshot({ id: idOrName }).pipe(Effect.asVoid)),
+            buildLogsUrl: (idOrName) => authorize(snapshots.getSnapshotBuildLogsUrl({ id: idOrName })),
+            delete: (idOrName) => authorize(deleteSnapshot(idOrName)),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=CreateSnapshotHttp.js.map

package/lib/CreateSnapshotHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshotHttp.js","sources":["../src/CreateSnapshotHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oCAAoC,CAAC;AAChE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,cAAc,GAGf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,eAAe,GAChB,MAAM,eAAe,CAAC;AAEvB,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAC5C,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAA+B;QACzD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/C,iBAAiB;YACjB,kBAAkB;YAClB,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,CAAC;QACH,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,MAAM,GAAyB;YACnC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAC9B,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC9C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClE,CAAC,CAAC,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAClB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;wBACjC,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;wBACjC,IAAI;wBACJ,MAAM;wBACN,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM;wBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;qBACxB,CAAC,CAAC;oBACH,OAAO,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzC,CAAC,CAAC,CACH;YACP,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAChB,SAAS,CACP,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CACjE,CACF;YACH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,SAAS,CACP,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACzE,CACF;YACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CACrB,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3F,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvB,SAAS,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/E,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1F,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;SAC1D,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/CreateVolume.d.ts

@@ -0,0 +1,81 @@
+import type * as volumes from "@distilled.cloud/daytona/volumes";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { StateFailed, StateTimeout } from "./internal/Wait.ts";
+import type { VolumeAttributes } from "./Volume.ts";
+declare const NameOutsidePrefix_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Daytona.NameOutsidePrefix";
+} & Readonly<A>;
+/** A name outside the binding's `prefix`. */
+export declare class NameOutsidePrefix extends NameOutsidePrefix_base<{
+    readonly objectName: string;
+    readonly prefix: string;
+}> {
+    get message(): string;
+}
+export interface CreateVolumeClient {
+    /**
+     * The volume named `name`, created (and waited on until ready) if it
+     * doesn't exist. Returns the same attributes as `Daytona.Volume`.
+     */
+    getOrCreate(input: {
+        readonly name: string;
+    }): Effect.Effect<VolumeAttributes, volumes.CreateVolumeError | volumes.GetVolumeByNameError | volumes.GetVolumeError | StateTimeout | StateFailed | NameOutsidePrefix, RuntimeContext>;
+    /** The volume with this name, or `undefined`. */
+    get(name: string): Effect.Effect<VolumeAttributes | undefined, volumes.GetVolumeByNameError, RuntimeContext>;
+    /** Every volume in the organization. */
+    list(): Effect.Effect<VolumeAttributes[], volumes.ListVolumesError, RuntimeContext>;
+    /**
+     * Delete a volume. Returns once Daytona has accepted the delete; it
+     * removes the volume in the background. Fails with `VolumeInUse` while a
+     * sandbox mounts it: Daytona releases a volume about a minute after the
+     * sandbox that wrote to it is deleted, so retry later. Deleting a missing
+     * one succeeds.
+     */
+    delete(volumeId: string): Effect.Effect<void, volumes.DeleteVolumeError | volumes.GetVolumeError | StateTimeout, RuntimeContext>;
+}
+/**
+ * Options for {@link CreateVolume}. Volumes have only a name, no labels or
+ * description, so a `prefix` is how you find the ones a binding created:
+ * the binding refuses names that don't start with it.
+ */
+export interface CreateVolumeOptions {
+    /** Every name the binding creates or gets must start with this. */
+    readonly prefix?: string;
+}
+/**
+ * Create, find and delete Daytona volumes at runtime: a volume per user,
+ * per project or per session, mounted into the sandboxes you create.
+ *
+ * The host gets its own Daytona API key with `read:volumes`,
+ * `write:volumes` and `delete:volumes`. Volumes have only a name, so the
+ * `prefix` you give is how you find the ones it created. They are not
+ * deleted when the stack is destroyed: `list()` and delete the names with
+ * your prefix to clean them up.
+ *
+ * ### Volume per User
+ * **Example:** Mount the user's volume as their home directory
+ * ```typescript
+ * const volumes = yield* Daytona.CreateVolume({ prefix: "user-" });
+ * const sandboxes = yield* Daytona.CreateSandbox(Base);
+ * return {
+ *   fetch: Effect.gen(function* () {
+ *     const home = yield* volumes.getOrCreate({ name: `user-${user}` });
+ *     const sandbox = yield* sandboxes.create({
+ *       mounts: [{ volume: home, path: "/home/daytona/work" }],
+ *     });
+ *     const ls = yield* sandbox.exec("ls /home/daytona/work");
+ *     return yield* HttpServerResponse.json(ls);
+ *   }),
+ * };
+ * ```
+ *
+ * @binding
+ * @product Volume
+ */
+export interface CreateVolume extends Binding.Service<CreateVolume, "Daytona.CreateVolume", (options?: CreateVolumeOptions) => Effect.Effect<CreateVolumeClient>> {
+}
+export declare const CreateVolume: CreateVolume;
+export {};
+//# sourceMappingURL=CreateVolume.d.ts.map

package/lib/CreateVolume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateVolume.d.ts","sources":["../src/CreateVolume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,OAAO,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;;;;AAEpD,6CAA6C;AAC7C,qBAAa,iBAAkB,SAAQ,uBAA8C;IACnF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;IACA,IAAa,OAAO,WAEnB;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,GAAG,MAAM,CAAC,MAAM,CACf,gBAAgB,EACd,OAAO,CAAC,iBAAiB,GACzB,OAAO,CAAC,oBAAoB,GAC5B,OAAO,CAAC,cAAc,GACtB,YAAY,GACZ,WAAW,GACX,iBAAiB,EACnB,cAAc,CACf,CAAC;IACF,iDAAiD;IACjD,GAAG,CACD,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,EAAE,OAAO,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IAC7F,wCAAwC;IACxC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACpF;;;;;;OAMG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CACd,IAAI,EACJ,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,cAAc,GAAG,YAAY,EACjE,cAAc,CACf,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,YAAa,SAAQ,OAAO,CAAC,OAAO,CACnD,YAAY,EACZ,sBAAsB,EACtB,CAAC,OAAO,CAAC,EAAE,mBAAmB,KAAK,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CACrE;CAAG;AAEJ,eAAO,MAAM,YAAY,cAAwD,CAAC"}

package/lib/CreateVolume.js

@@ -0,0 +1,10 @@
+import * as Binding from "alchemy/Binding";
+import * as Data from "effect/Data";
+/** A name outside the binding's `prefix`. */
+export class NameOutsidePrefix extends Data.TaggedError("Daytona.NameOutsidePrefix") {
+    get message() {
+        return `${this.objectName} must start with ${this.prefix}: the binding only manages names with that prefix`;
+    }
+}
+export const CreateVolume = Binding.Service("Daytona.CreateVolume");
+//# sourceMappingURL=CreateVolume.js.map

package/lib/CreateVolume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateVolume.js","sources":["../src/CreateVolume.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAE3C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAKpC,6CAA6C;AAC7C,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAGjF;IACA,IAAa,OAAO;QAClB,OAAO,GAAG,IAAI,CAAC,UAAU,oBAAoB,IAAI,CAAC,MAAM,mDAAmD,CAAC;IAC9G,CAAC;CACF;AAuFD,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAe,sBAAsB,CAAC,CAAC"}

package/lib/CreateVolumeHttp.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { CreateVolume } from "./CreateVolume.ts";
+/** {@link CreateVolume} over Daytona's HTTP API; works on any host. */
+export declare const CreateVolumeHttp: Layer.Layer<CreateVolume, never, never>;
+//# sourceMappingURL=CreateVolumeHttp.d.ts.map

package/lib/CreateVolumeHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateVolumeHttp.d.ts","sources":["../src/CreateVolumeHttp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,YAAY,EAIb,MAAM,mBAAmB,CAAC;AAI3B,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,yCAoC5B,CAAC"}

package/lib/CreateVolumeHttp.js

@@ -0,0 +1,31 @@
+import * as volumes from "@distilled.cloud/daytona/volumes";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { CreateVolume, NameOutsidePrefix, } from "./CreateVolume.js";
+import { makeAccess } from "./DaytonaBindings.js";
+import { deleteVolumeById, ensureVolume, getVolumeByName, toVolumeAttributes } from "./Volume.js";
+/** {@link CreateVolume} over Daytona's HTTP API; works on any host. */
+export const CreateVolumeHttp = Layer.effect(CreateVolume, Effect.gen(function* () {
+    const access = yield* makeAccess;
+    return Effect.fn(function* (options) {
+        const { authorize } = yield* access("Volumes", [
+            "read:volumes",
+            "write:volumes",
+            "delete:volumes",
+        ]);
+        // A volume has only a name: `prefix` scopes it.
+        const prefix = options?.prefix;
+        const client = {
+            getOrCreate: ({ name }) => prefix !== undefined && !name.startsWith(prefix)
+                ? Effect.fail(new NameOutsidePrefix({ objectName: name, prefix }))
+                : authorize(ensureVolume(name).pipe(Effect.map(toVolumeAttributes))),
+            get: (name) => authorize(getVolumeByName(name).pipe(Effect.map((v) => (v ? toVolumeAttributes(v) : undefined)))),
+            list: () => authorize(volumes
+                .listVolumes({})
+                .pipe(Effect.map((all) => all.filter((v) => v.state !== "deleted").map(toVolumeAttributes)))),
+            delete: (volumeId) => authorize(deleteVolumeById(volumeId, { wait: false })),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=CreateVolumeHttp.js.map

package/lib/CreateVolumeHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateVolumeHttp.js","sources":["../src/CreateVolumeHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,kCAAkC,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,YAAY,EACZ,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAElG,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAC1C,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAA6B;QACvD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;YAC7C,cAAc;YACd,eAAe;YACf,gBAAgB;SACjB,CAAC,CAAC;QACH,gDAAgD;QAChD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,MAAM,GAAuB;YACjC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACxB,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC9C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACxE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,SAAS,CACP,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACvF;YACH,IAAI,EAAE,GAAG,EAAE,CACT,SAAS,CACP,OAAO;iBACJ,WAAW,CAAC,EAAE,CAAC;iBACf,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CACjE,CACF,CACJ;YACH,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SAC7E,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/Credentials.d.ts

@@ -0,0 +1,9 @@
+import { Credentials } from "@distilled.cloud/daytona/Credentials";
+import * as Layer from "effect/Layer";
+export { Credentials, CredentialsFromEnv, DEFAULT_ANALYTICS_BASE_URL, DEFAULT_API_BASE_URL, DEFAULT_TOOLBOX_BASE_URL, } from "@distilled.cloud/daytona/Credentials";
+/**
+ * A `Credentials` layer that resolves Daytona credentials through the
+ * Alchemy AuthProvider for the current profile.
+ */
+export declare const fromAuthProvider: () => Layer.Layer<Credentials, never, import("alchemy/Auth/Registry").AuthProviders | import("alchemy/Auth/Profile").ProfileStore>;
+//# sourceMappingURL=Credentials.d.ts.map

package/lib/Credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credentials.d.ts","sources":["../src/Credentials.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAGZ,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,oIAc1B,CAAC"}

package/lib/Credentials.js

@@ -0,0 +1,18 @@
+import { ConfigError } from "@distilled.cloud/core/errors";
+import { Credentials, DEFAULT_ANALYTICS_BASE_URL, DEFAULT_TOOLBOX_BASE_URL, } from "@distilled.cloud/daytona/Credentials";
+import { lazyCredentials } from "alchemy/Auth/Resolve";
+import * as Layer from "effect/Layer";
+import { DAYTONA_AUTH_PROVIDER_NAME } from "./AuthProvider.js";
+export { Credentials, CredentialsFromEnv, DEFAULT_ANALYTICS_BASE_URL, DEFAULT_API_BASE_URL, DEFAULT_TOOLBOX_BASE_URL, } from "@distilled.cloud/daytona/Credentials";
+/**
+ * A `Credentials` layer that resolves Daytona credentials through the
+ * Alchemy AuthProvider for the current profile.
+ */
+export const fromAuthProvider = () => Layer.effect(Credentials, lazyCredentials()(DAYTONA_AUTH_PROVIDER_NAME, (creds) => ({
+    apiKey: creds.token,
+    apiBaseUrl: creds.apiBaseUrl,
+    analyticsBaseUrl: DEFAULT_ANALYTICS_BASE_URL,
+    toolboxBaseUrl: DEFAULT_TOOLBOX_BASE_URL,
+    organizationId: creds.organizationId,
+}), { expiresAt: (creds) => creds.expires }));
+//# sourceMappingURL=Credentials.js.map

package/lib/Credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credentials.js","sources":["../src/Credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAmC,MAAM,mBAAmB,CAAC;AAEhG,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,KAAK,CAAC,MAAM,CACV,WAAW,EACX,eAAe,EAA2C,CACxD,0BAA0B,EAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,MAAM,EAAE,KAAK,CAAC,KAAK;IACnB,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,gBAAgB,EAAE,0BAA0B;IAC5C,cAAc,EAAE,wBAAwB;IACxC,cAAc,EAAE,KAAK,CAAC,cAAc;CACrC,CAAC,EACF,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CACxC,CACF,CAAC"}

package/lib/DaytonaBindings.d.ts

@@ -0,0 +1,51 @@
+import { Credentials } from "@distilled.cloud/daytona/Credentials";
+import * as Output from "alchemy/Output";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import * as Effect from "effect/Effect";
+import type * as HttpClient from "effect/http/HttpClient";
+/**
+ * How a Daytona binding reaches the API from any host.
+ *
+ * Daytona authorizes with API keys whose permissions are checked per kind
+ * of object, so each binding mints its own {@link ApiKey} for its host at
+ * deploy, with only the permissions it needs, and the host reads the key
+ * back at runtime through `RuntimeContext`. The deployer's key never
+ * leaves the deploying machine, and the host works on any runtime
+ * (Cloudflare Workers, Lambda, containers) because the key travels as a
+ * plain secret, not a cloud identity.
+ */
+export interface DaytonaAccess {
+    /**
+     * Run Daytona operations with the host's minted key. Provides
+     * `Credentials` and an `HttpClient`; the result requires only
+     * `RuntimeContext`.
+     */
+    readonly authorize: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Credentials | HttpClient.HttpClient> | RuntimeContext>;
+    /** The organization the key acts on. */
+    readonly organizationId: Effect.Effect<string, never, RuntimeContext>;
+}
+/**
+ * Resolve once, when a binding's layer is built: returns a function that
+ * mints (at deploy) and reads back (at runtime) an API key for the current
+ * host, named after the host and `purpose`, with `permissions`.
+ */
+export declare const makeAccess: Effect.Effect<(purpose: string, permissions: import("@distilled.cloud/daytona/api_keys").CreateApiKeyRequestPermissionsItem[]) => Effect.Effect<{
+    authorize: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Credentials | HttpClient.HttpClient>>;
+    organizationId: Output.Accessor<string>;
+}, never, never>, never, never>;
+/**
+ * The labels a runtime binding puts on what it creates: the host's
+ * `alchemy::stack`, `alchemy::stage` and `alchemy::id`, as Daytona label
+ * keys (`alchemy.stack`, `alchemy.stage`, `alchemy.id`; Daytona doesn't
+ * accept `::` in a key). Computed at deploy from the host's identity and
+ * bound into the host, so the runtime reads them back rather than
+ * computing them.
+ */
+export declare const makeOwnerLabels: Effect.Effect<Effect.Effect<Record<string, string>, never, RuntimeContext>, never, never>;
+/** The owner labels as a description, for objects that only have one. */
+export declare const ownerDescription: (labels: Record<string, string>) => string;
+/** User labels with the owner labels on top: a user label never overwrites `alchemy.*`. */
+export declare const withOwnerLabels: (user: Record<string, string> | undefined, owner: Record<string, string>) => {
+    [x: string]: string;
+};
+//# sourceMappingURL=DaytonaBindings.d.ts.map

package/lib/DaytonaBindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DaytonaBindings.d.ts","sources":["../src/DaytonaBindings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EAGZ,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAK1D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,CAAC;IAC3F,wCAAwC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;CACvE;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU;gBAQA,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;;+BAuB5D,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,2FAW1B,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,WAAY,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WACkB,CAAC;AAElF,2FAA2F;AAC3F,eAAO,MAAM,eAAe,SACpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,SACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;CAI7B,CAAC"}