@alchemy.run/daytona 0.0.0 → 2.0.0-beta.86

package/lib/Region.d.ts

@@ -0,0 +1,78 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Redacted from "effect/Redacted";
+import type { Providers } from "./Providers.ts";
+export interface RegionProps {
+    /** Region name. If omitted, generated from the stack, stage and logical ID. Changing it replaces the region. */
+    name?: string;
+    /** URL of the region's sandbox proxy. */
+    proxyUrl?: string;
+    /** URL of the region's SSH gateway. */
+    sshGatewayUrl?: string;
+    /** URL of the region's snapshot manager (image registry). */
+    snapshotManagerUrl?: string;
+    /** OTLP endpoint the region's runners export to. */
+    otelEndpoint?: string;
+    /** S3 bucket for Dockerfile build contexts. */
+    buildContextBucket?: string;
+    /** Region of that bucket. */
+    buildContextBucketRegion?: string;
+    /** IAM role Daytona assumes to use the bucket. */
+    buildContextRoleArn?: string;
+    /**
+     * Bump a counter to rotate that credential on the next deploy.
+     */
+    rotate?: {
+        proxyApiKey?: number;
+        sshGatewayApiKey?: number;
+        snapshotManagerCredentials?: number;
+    };
+}
+export interface RegionAttributes {
+    /** Region ID; what runners, snapshots and sandboxes take. */
+    regionId: string;
+    /** Region name. */
+    name: string;
+    /** API key the region's proxy authenticates with. */
+    proxyApiKey: Redacted.Redacted<string> | undefined;
+    /** API key the region's SSH gateway authenticates with. */
+    sshGatewayApiKey: Redacted.Redacted<string> | undefined;
+    /** Snapshot manager user name. */
+    snapshotManagerUsername: string | undefined;
+    /** Snapshot manager password. */
+    snapshotManagerPassword: Redacted.Redacted<string> | undefined;
+    /** Rotation counters applied. */
+    rotated: {
+        proxyApiKey: number;
+        sshGatewayApiKey: number;
+        snapshotManagerCredentials: number;
+    };
+}
+export type Region = Resource<"Daytona.Region", RegionProps, RegionAttributes, never, Providers>;
+/**
+ * A custom region: your own compute (see {@link Runner}) registered with
+ * Daytona, so sandboxes run on machines you operate while Daytona runs
+ * the control plane. Needs an organization allowed to bring its own
+ * compute.
+ *
+ * Daytona shows the region's API keys only when they are created or
+ * rotated, so alchemy keeps them in state as `Redacted` values. Bump a
+ * `rotate` counter to rotate one.
+ * @see https://www.daytona.io/docs/en/regions/
+ *
+ * ### Bringing Your Own Compute
+ * **Example:** A region with its own proxy and SSH gateway
+ * ```typescript
+ * export const Home = Daytona.Region("Home", {
+ *   proxyUrl: "https://proxy.daytona.example.com",
+ *   sshGatewayUrl: "ssh.daytona.example.com:2222",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Region
+ */
+export declare const Region: import("alchemy/Resource").ResourceClass<Region>;
+export declare const RegionProvider: () => import("effect/Layer").Layer<Provider.Provider<Region>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | organizations.DaytonaOpContext>;
+//# sourceMappingURL=Region.d.ts.map

package/lib/Region.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Region.d.ts","sources":["../src/Region.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAGxE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,gHAAgH;IAChH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6BAA6B;IAC7B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kDAAkD;IAClD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,MAAM,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,0BAA0B,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnG;AAED,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACnD,2DAA2D;IAC3D,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACxD,kCAAkC;IAClC,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,iCAAiC;IACjC,uBAAuB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/D,iCAAiC;IACjC,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,0BAA0B,EAAE,MAAM,CAAA;KAAE,CAAC;CAChG;AAED,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAEjG;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,MAAM,kDAAqC,CAAC;AAiBzD,eAAO,MAAM,cAAc,sKAqIxB,CAAC"}

package/lib/Region.js

@@ -0,0 +1,169 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isOwnedName, resolveName } from "./internal/Names.js";
+/**
+ * A custom region: your own compute (see {@link Runner}) registered with
+ * Daytona, so sandboxes run on machines you operate while Daytona runs
+ * the control plane. Needs an organization allowed to bring its own
+ * compute.
+ *
+ * Daytona shows the region's API keys only when they are created or
+ * rotated, so alchemy keeps them in state as `Redacted` values. Bump a
+ * `rotate` counter to rotate one.
+ * @see https://www.daytona.io/docs/en/regions/
+ *
+ * ### Bringing Your Own Compute
+ * **Example:** A region with its own proxy and SSH gateway
+ * ```typescript
+ * export const Home = Daytona.Region("Home", {
+ *   proxyUrl: "https://proxy.daytona.example.com",
+ *   sshGatewayUrl: "ssh.daytona.example.com:2222",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Region
+ */
+export const Region = Resource("Daytona.Region");
+const redact = (value) => value === null || value === undefined
+    ? undefined
+    : Redacted.isRedacted(value)
+        ? value
+        : Redacted.make(value);
+const getById = (id) => organizations.getRegion({ id }).pipe(Effect.catchTag("RegionNotFound", () => Effect.undefined));
+const findByName = (name) => organizations
+    .listAvailableRegions({})
+    .pipe(Effect.map((all) => all.find((r) => r.name === name)));
+export const RegionProvider = () => Provider.effect(Region, Effect.succeed({
+    stables: ["regionId"],
+    list: Effect.fn(function* () {
+        const all = yield* organizations.listAvailableRegions({});
+        return all
+            .filter((r) => r.organizationId)
+            .map((r) => ({
+            regionId: r.id,
+            name: r.name,
+            proxyApiKey: undefined,
+            sshGatewayApiKey: undefined,
+            snapshotManagerUsername: undefined,
+            snapshotManagerPassword: undefined,
+            rotated: { proxyApiKey: 0, sshGatewayApiKey: 0, snapshotManagerCredentials: 0 },
+        }));
+    }),
+    diff: Effect.fn(function* ({ id, news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        const name = yield* resolveName(id, news.name, news.name === undefined ? output.name : undefined);
+        if (name !== output.name)
+            return { action: "replace", deleteFirst: true };
+    }),
+    read: Effect.fn(function* ({ id, olds, output }) {
+        const name = yield* resolveName(id, olds?.name, output?.name);
+        const found = (output ? yield* getById(output.regionId) : undefined) ?? (yield* findByName(name));
+        if (found === undefined)
+            return undefined;
+        const attrs = output ?? {
+            regionId: found.id,
+            name: found.name,
+            proxyApiKey: undefined,
+            sshGatewayApiKey: undefined,
+            snapshotManagerUsername: undefined,
+            snapshotManagerPassword: undefined,
+            rotated: { proxyApiKey: 0, sshGatewayApiKey: 0, snapshotManagerCredentials: 0 },
+        };
+        return (yield* isOwnedName(id, found.name, output !== undefined)) ? attrs : Unowned(attrs);
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const name = yield* resolveName(id, news.name, output?.name);
+        const settings = {
+            proxyUrl: news.proxyUrl ?? null,
+            sshGatewayUrl: news.sshGatewayUrl ?? null,
+            snapshotManagerUrl: news.snapshotManagerUrl ?? null,
+            otelEndpoint: news.otelEndpoint ?? null,
+            buildContextBucket: news.buildContextBucket ?? null,
+            buildContextBucketRegion: news.buildContextBucketRegion ?? null,
+            buildContextRoleArn: news.buildContextRoleArn ?? null,
+        };
+        // Observe
+        const current = (output ? yield* getById(output.regionId) : undefined) ?? (yield* findByName(name));
+        let attrs;
+        // Ensure
+        if (current === undefined) {
+            const created = yield* organizations.createRegion({ name, ...settings });
+            attrs = {
+                regionId: created.id,
+                name,
+                proxyApiKey: redact(created.proxyApiKey),
+                sshGatewayApiKey: redact(created.sshGatewayApiKey),
+                snapshotManagerUsername: created.snapshotManagerUsername ?? undefined,
+                snapshotManagerPassword: redact(created.snapshotManagerPassword),
+                rotated: {
+                    proxyApiKey: news.rotate?.proxyApiKey ?? 0,
+                    sshGatewayApiKey: news.rotate?.sshGatewayApiKey ?? 0,
+                    snapshotManagerCredentials: news.rotate?.snapshotManagerCredentials ?? 0,
+                },
+            };
+        }
+        else {
+            attrs = output ?? {
+                regionId: current.id,
+                name,
+                proxyApiKey: undefined,
+                sshGatewayApiKey: undefined,
+                snapshotManagerUsername: undefined,
+                snapshotManagerPassword: undefined,
+                rotated: { proxyApiKey: 0, sshGatewayApiKey: 0, snapshotManagerCredentials: 0 },
+            };
+            // Sync settings against the observed region.
+            const drift = Object.keys(settings).some((k) => (current[k] ?? null) !== settings[k]);
+            if (drift)
+                yield* organizations.updateRegion({ id: current.id, ...settings });
+        }
+        // Sync rotations.
+        const want = news.rotate ?? {};
+        if ((want.proxyApiKey ?? 0) !== attrs.rotated.proxyApiKey) {
+            const { apiKey } = yield* organizations.regenerateProxyApiKey({ id: attrs.regionId });
+            attrs = {
+                ...attrs,
+                proxyApiKey: redact(apiKey),
+                rotated: { ...attrs.rotated, proxyApiKey: want.proxyApiKey ?? 0 },
+            };
+        }
+        if ((want.sshGatewayApiKey ?? 0) !== attrs.rotated.sshGatewayApiKey) {
+            const { apiKey } = yield* organizations.regenerateSshGatewayApiKey({
+                id: attrs.regionId,
+            });
+            attrs = {
+                ...attrs,
+                sshGatewayApiKey: redact(apiKey),
+                rotated: { ...attrs.rotated, sshGatewayApiKey: want.sshGatewayApiKey ?? 0 },
+            };
+        }
+        if ((want.snapshotManagerCredentials ?? 0) !== attrs.rotated.snapshotManagerCredentials) {
+            const creds = yield* organizations.regenerateSnapshotManagerCredentials({
+                id: attrs.regionId,
+            });
+            attrs = {
+                ...attrs,
+                snapshotManagerUsername: creds.username,
+                snapshotManagerPassword: redact(creds.password),
+                rotated: {
+                    ...attrs.rotated,
+                    snapshotManagerCredentials: want.snapshotManagerCredentials ?? 0,
+                },
+            };
+        }
+        return attrs;
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* organizations
+            .deleteRegion({ id: output.regionId })
+            .pipe(Effect.catchTag("RegionNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=Region.js.map

package/lib/Region.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Region.js","sources":["../src/Region.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA6C/D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAS,gBAAgB,CAAC,CAAC;AAEzD,MAAM,MAAM,GAAG,CAAC,KAA4D,EAAE,EAAE,CAC9E,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;IACnC,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE7B,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAC7B,aAAa,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAElG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,aAAa;KACV,oBAAoB,CAAC,EAAE,CAAC;KACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,QAAQ,CAAC,MAAM,CACb,MAAM,EACN,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,UAAU,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,GAAG;aACP,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,QAAQ,EAAE,CAAC,CAAC,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,SAAS;YACtB,gBAAgB,EAAE,SAAS;YAC3B,uBAAuB,EAAE,SAAS;YAClC,uBAAuB,EAAE,SAAS;YAClC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,0BAA0B,EAAE,CAAC,EAAE;SAChF,CAAC,CAAC,CAAC;IACR,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAC7B,EAAE,EACF,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;QACF,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAW,CAAC;IACrF,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,KAAK,GACT,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAqB,MAAM,IAAI;YACxC,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,SAAS;YACtB,gBAAgB,EAAE,SAAS;YAC3B,uBAAuB,EAAE,SAAS;YAClC,uBAAuB,EAAE,SAAS;YAClC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,0BAA0B,EAAE,CAAC,EAAE;SAChF,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YACzC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI;YACnD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACvC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI;YACnD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB,IAAI,IAAI;YAC/D,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;SACtD,CAAC;QACF,UAAU;QACV,MAAM,OAAO,GACX,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,KAAuB,CAAC;QAC5B,SAAS;QACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YACzE,KAAK,GAAG;gBACN,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;gBACxC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAClD,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,IAAI,SAAS;gBACrE,uBAAuB,EAAE,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;gBAChE,OAAO,EAAE;oBACP,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC;oBAC1C,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,IAAI,CAAC;oBACpD,0BAA0B,EAAE,IAAI,CAAC,MAAM,EAAE,0BAA0B,IAAI,CAAC;iBACzE;aACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,MAAM,IAAI;gBAChB,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,IAAI;gBACJ,WAAW,EAAE,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,uBAAuB,EAAE,SAAS;gBAClC,uBAAuB,EAAE,SAAS;gBAClC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,0BAA0B,EAAE,CAAC,EAAE;aAChF,CAAC;YACF,6CAA6C;YAC7C,MAAM,KAAK,GAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAA+B,CAAC,IAAI,CACrE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAC5C,CAAC;YACF,IAAI,KAAK;gBAAE,KAAK,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,kBAAkB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC1D,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;gBAC3B,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE;aAClE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACpE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,0BAA0B,CAAC;gBACjE,EAAE,EAAE,KAAK,CAAC,QAAQ;aACnB,CAAC,CAAC;YACH,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;gBAChC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC,EAAE;aAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,oCAAoC,CAAC;gBACtE,EAAE,EAAE,KAAK,CAAC,QAAQ;aACnB,CAAC,CAAC;YACH,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,uBAAuB,EAAE,KAAK,CAAC,QAAQ;gBACvC,uBAAuB,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC/C,OAAO,EAAE;oBACP,GAAG,KAAK,CAAC,OAAO;oBAChB,0BAA0B,EAAE,IAAI,CAAC,0BAA0B,IAAI,CAAC;iBACjE;aACF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,aAAa;aACjB,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;aACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}

package/lib/Registry.d.ts

@@ -0,0 +1,84 @@
+import * as registries from "@distilled.cloud/daytona/docker_registry";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import type * as Redacted from "effect/Redacted";
+import type { Providers } from "./Providers.ts";
+export interface RegistryProps {
+    /**
+     * Registry name in Daytona. If omitted, a unique name is generated from
+     * the stack, stage and logical ID.
+     */
+    name?: string;
+    /** Registry host, e.g. `ghcr.io`, `docker.io` or an ECR host. */
+    url: string;
+    /** User name for the registry. */
+    username: string;
+    /** Password or access token for the registry. Updated in place. */
+    password: string | Redacted.Redacted<string>;
+    /** Project or namespace within the registry, if it has them. */
+    project?: string;
+    /** IAM role Daytona assumes for mTLS to the registry (ECR). */
+    mtlsRoleArn?: string;
+    /** Secrets Manager ARN holding the mTLS client certificate. */
+    mtlsSecretArn?: string;
+}
+export interface RegistryAttributes {
+    /** Registry ID. */
+    registryId: string;
+    /** Registry name. */
+    name: string;
+    /** Registry host. */
+    url: string;
+    /** User name. */
+    username: string;
+    /** Project or namespace. */
+    project: string;
+    /** `organization`, `internal`, … */
+    registryType: string;
+}
+export type Registry = Resource<"Daytona.Registry", RegistryProps, RegistryAttributes, never, Providers, RegistryLookup>;
+/**
+ * Props for {@link Registry.lookup}: find a container registry this
+ * stack doesn't manage by its name.
+ */
+export interface RegistryLookup {
+    /** Registry name. */
+    name: string;
+}
+/**
+ * Credentials for a private container registry, so Daytona can pull
+ * private images into a {@link Snapshot}. Daytona picks the registry whose
+ * `url` matches the image's host.
+ * @see https://www.daytona.io/docs/en/snapshots/#images-from-private-registries
+ *
+ * ### Pulling a Private Image
+ * **Example:** GitHub Container Registry
+ * ```typescript
+ * export const Ghcr = Daytona.Registry("Ghcr", {
+ *   url: "ghcr.io",
+ *   username: "alchemy-run",
+ *   password: Config.Redacted("GHCR_TOKEN"),
+ * });
+ *
+ * export const Base = Daytona.Snapshot("Base", {
+ *   image: "ghcr.io/alchemy-run/base:1.0.0",
+ *   registry: Ghcr,
+ * });
+ * ```
+ *
+ * ### Looking up an existing registry
+ * `Registry.lookup` references a registry Alchemy doesn't manage (created in
+ * the Daytona dashboard or by another stack). It is read during plan/deploy,
+ * never created, updated or deleted.
+ *
+ * **Example:** Reference an existing registry
+ * ```typescript
+ * const ghcr = Daytona.Registry.lookup({ name: "ghcr" });
+ * ```
+ *
+ * @resource
+ * @product Registry
+ */
+export declare const Registry: import("alchemy/Resource").ResourceClass<Registry>;
+export declare const RegistryProvider: () => import("effect/Layer").Layer<Provider.Provider<Registry>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | registries.DaytonaOpContext>;
+//# sourceMappingURL=Registry.d.ts.map

package/lib/Registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Registry.d.ts","sources":["../src/Registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,0CAA0C,CAAC;AAEvE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAC7B,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,KAAK,EACL,SAAS,EACT,cAAc,CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,QAAQ,oDAAyC,CAAC;AAiB/D,eAAO,MAAM,gBAAgB,qKAkD1B,CAAC"}

package/lib/Registry.js

@@ -0,0 +1,97 @@
+import * as registries from "@distilled.cloud/daytona/docker_registry";
+import { Unowned } from "alchemy/AdoptPolicy";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { isOwnedName, resolveName } from "./internal/Names.js";
+/**
+ * Credentials for a private container registry, so Daytona can pull
+ * private images into a {@link Snapshot}. Daytona picks the registry whose
+ * `url` matches the image's host.
+ * @see https://www.daytona.io/docs/en/snapshots/#images-from-private-registries
+ *
+ * ### Pulling a Private Image
+ * **Example:** GitHub Container Registry
+ * ```typescript
+ * export const Ghcr = Daytona.Registry("Ghcr", {
+ *   url: "ghcr.io",
+ *   username: "alchemy-run",
+ *   password: Config.Redacted("GHCR_TOKEN"),
+ * });
+ *
+ * export const Base = Daytona.Snapshot("Base", {
+ *   image: "ghcr.io/alchemy-run/base:1.0.0",
+ *   registry: Ghcr,
+ * });
+ * ```
+ *
+ * ### Looking up an existing registry
+ * `Registry.lookup` references a registry Alchemy doesn't manage (created in
+ * the Daytona dashboard or by another stack). It is read during plan/deploy,
+ * never created, updated or deleted.
+ *
+ * **Example:** Reference an existing registry
+ * ```typescript
+ * const ghcr = Daytona.Registry.lookup({ name: "ghcr" });
+ * ```
+ *
+ * @resource
+ * @product Registry
+ */
+export const Registry = Resource("Daytona.Registry");
+const toAttributes = (r) => ({
+    registryId: r.id,
+    name: r.name,
+    url: r.url,
+    username: r.username,
+    project: r.project,
+    registryType: r.registryType,
+});
+const getById = (id) => registries.getRegistry({ id }).pipe(Effect.catchTag("RegistryNotFound", () => Effect.undefined));
+const findByName = (name) => registries.listRegistries({}).pipe(Effect.map((all) => all.find((r) => r.name === name)));
+export const RegistryProvider = () => Provider.effect(Registry, Effect.succeed({
+    stables: ["registryId"],
+    list: Effect.fn(function* () {
+        const all = yield* registries.listRegistries({});
+        return all.filter((r) => r.registryType === "organization").map(toAttributes);
+    }),
+    lookup: Effect.fn(function* ({ name }) {
+        const found = yield* findByName(name);
+        return found === undefined ? undefined : toAttributes(found);
+    }),
+    read: Effect.fn(function* ({ id, olds, output }) {
+        const name = yield* resolveName(id, olds?.name, output?.name);
+        const found = (output ? yield* getById(output.registryId) : undefined) ?? (yield* findByName(name));
+        if (found === undefined)
+            return undefined;
+        const attrs = toAttributes(found);
+        return (yield* isOwnedName(id, found.name, output !== undefined)) ? attrs : Unowned(attrs);
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const name = yield* resolveName(id, news.name, output?.name);
+        // Observe
+        const current = (output ? yield* getById(output.registryId) : undefined) ?? (yield* findByName(name));
+        const desired = {
+            name,
+            url: news.url,
+            username: news.username,
+            password: news.password,
+            project: news.project,
+            mtlsRoleArn: news.mtlsRoleArn ?? null,
+            mtlsSecretArn: news.mtlsSecretArn ?? null,
+        };
+        // Ensure
+        if (current === undefined) {
+            return toAttributes(yield* registries.createRegistry(desired));
+        }
+        // Sync — the password can't be read back, so every reconcile
+        // writes the full registry (updateRegistry is a PATCH of all fields).
+        return toAttributes(yield* registries.updateRegistry({ id: current.id, ...desired }));
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* registries
+            .deleteRegistry({ id: output.registryId })
+            .pipe(Effect.catchTag("RegistryNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=Registry.js.map

package/lib/Registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Registry.js","sources":["../src/Registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,0CAA0C,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAwD/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAW,kBAAkB,CAAC,CAAC;AAE/D,MAAM,YAAY,GAAG,CAAC,CAA6B,EAAsB,EAAE,CAAC,CAAC;IAC3E,UAAU,EAAE,CAAC,CAAC,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,GAAG,EAAE,CAAC,CAAC,GAAG;IACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;IACpB,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,YAAY,EAAE,CAAC,CAAC,YAAY;CAC7B,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAC7B,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAEnG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,QAAQ,CAAC,MAAM,CACb,QAAQ,EACR,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,cAAc,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,KAAK,GACT,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,UAAU;QACV,MAAM,OAAO,GACX,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;SAC1C,CAAC;QACF,SAAS;QACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,6DAA6D;QAC7D,sEAAsE;QACtE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,UAAU;aACd,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;aACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}

package/lib/Runner.d.ts

@@ -0,0 +1,66 @@
+import * as runners from "@distilled.cloud/daytona/runners";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { type Ref } from "./internal/Ref.ts";
+import type { Providers } from "./Providers.ts";
+/** A region, by id. Accepts a `Daytona.Region` or `{ regionId }`. */
+export type RunnerRegion = {
+    readonly regionId: string;
+};
+export interface RunnerProps {
+    /** Runner name. If omitted, generated from the stack, stage and logical ID. Changing it replaces the runner. */
+    name?: string;
+    /** Region the runner serves. Changing it replaces the runner. */
+    region: Ref<RunnerRegion>;
+    /** Tags the scheduler matches sandboxes against. Changing them replaces the runner. */
+    tags?: string[];
+    /** Sandbox class the runner hosts. Changing it replaces the runner. */
+    sandboxClass?: runners.CreateRunnerSandboxClass;
+    /** Stop scheduling new sandboxes on it. Updated in place. @default false */
+    unschedulable?: boolean;
+    /** Drain it: no new sandboxes, and existing ones move off. Updated in place. @default false */
+    draining?: boolean;
+}
+export interface RunnerAttributes {
+    /** Runner ID. */
+    runnerId: string;
+    /** Runner name. */
+    name: string;
+    /** Region. */
+    region: string;
+    /** State. */
+    state: string;
+    /**
+     * The key the runner daemon authenticates with. Daytona shows it only at
+     * creation, so alchemy keeps it in state as a `Redacted` value.
+     */
+    apiKey: Redacted.Redacted<string>;
+}
+export type Runner = Resource<"Daytona.Runner", RunnerProps, RunnerAttributes, never, Providers>;
+/**
+ * A runner: a machine you operate that hosts sandboxes for a custom
+ * {@link Region}. Declaring it registers the runner and mints the API key
+ * its daemon uses; you then start the daemon on the machine with that key.
+ *
+ * ### Registering a Runner
+ * **Example:** A runner for a custom region
+ * ```typescript
+ * export const Box1 = Daytona.Runner("Box1", { region: Home });
+ * ```
+ *
+ * @resource
+ * @product Region
+ */
+export declare const Runner: import("alchemy/Resource").ResourceConstructor<Runner, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<Runner, never>, never, never> & {
+    Self: import("alchemy/Self").Self<Runner>;
+    Provider: Provider.Provider<Runner>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<Runner, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<RunnerProps>) => Effect.Effect<Runner, never, Providers>);
+export declare const RunnerProvider: () => import("effect/Layer").Layer<Provider.Provider<Runner>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | runners.DaytonaOpContext>;
+//# sourceMappingURL=Runner.d.ts.map

package/lib/Runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Runner.d.ts","sources":["../src/Runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,kCAAkC,CAAC;AAG5D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,qEAAqE;AACrE,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,gHAAgH;IAChH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1B,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,YAAY,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC;IAChD,4EAA4E;IAC5E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc;IACd,MAAM,EAAE,MAAM,CAAC;IACf,aAAa;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAEjG;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,MAAM;;;;;;;;iIAA2D,CAAC;AAO/E,eAAO,MAAM,cAAc,gKAgGxB,CAAC"}

package/lib/Runner.js

@@ -0,0 +1,116 @@
+import * as runners from "@distilled.cloud/daytona/runners";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { declarable } from "./internal/Declared.js";
+import { isOwnedName, resolveName } from "./internal/Names.js";
+import { resolved } from "./internal/Ref.js";
+/**
+ * A runner: a machine you operate that hosts sandboxes for a custom
+ * {@link Region}. Declaring it registers the runner and mints the API key
+ * its daemon uses; you then start the daemon on the machine with that key.
+ *
+ * ### Registering a Runner
+ * **Example:** A runner for a custom region
+ * ```typescript
+ * export const Box1 = Daytona.Runner("Box1", { region: Home });
+ * ```
+ *
+ * @resource
+ * @product Region
+ */
+export const Runner = declarable()(Resource("Daytona.Runner"));
+const regionId = (region) => Effect.succeed(resolved(region).regionId);
+const getById = (id) => runners.getRunner({ id }).pipe(Effect.catchTag("RunnerNotFound", () => Effect.undefined));
+export const RunnerProvider = () => Provider.effect(Runner, Effect.succeed({
+    stables: ["runnerId", "apiKey"],
+    nuke: { dependsOn: [] },
+    list: Effect.fn(function* () {
+        // Organizations without custom regions aren't served runners at all.
+        const all = yield* runners
+            .listRunners({})
+            .pipe(Effect.catchTag("RunnersUnavailable", () => Effect.succeed([])));
+        return all.map((r) => ({
+            runnerId: r.id,
+            name: r.name,
+            region: r.region,
+            state: r.state,
+            apiKey: Redacted.make(""),
+        }));
+    }),
+    diff: Effect.fn(function* ({ id, olds, news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        const name = yield* resolveName(id, news.name, news.name === undefined ? output.name : undefined);
+        if (name !== output.name ||
+            (yield* regionId(news.region)) !== output.region ||
+            !deepEqual(news.tags ?? [], olds?.tags ?? []) ||
+            news.sandboxClass !== olds?.sandboxClass) {
+            return { action: "replace", deleteFirst: name === output.name };
+        }
+    }),
+    read: Effect.fn(function* ({ id, olds, output }) {
+        const name = yield* resolveName(id, olds?.name, output?.name);
+        const found = (output ? yield* getById(output.runnerId) : undefined) ??
+            (yield* runners.listRunners({})).find((r) => r.name === name);
+        if (found === undefined)
+            return undefined;
+        const attrs = {
+            runnerId: found.id,
+            name: found.name,
+            region: found.region,
+            state: found.state,
+            apiKey: output?.apiKey ?? Redacted.make(""),
+        };
+        return (yield* isOwnedName(id, found.name, output !== undefined)) ? attrs : Unowned(attrs);
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const name = yield* resolveName(id, news.name, output?.name);
+        const region = yield* regionId(news.region);
+        // Observe
+        let current = output ? yield* getById(output.runnerId) : undefined;
+        let apiKey = output?.apiKey;
+        // Ensure
+        if (current === undefined) {
+            const created = yield* runners.createRunner({
+                regionId: region,
+                name,
+                tags: news.tags,
+                sandboxClass: news.sandboxClass,
+            });
+            apiKey = Redacted.isRedacted(created.apiKey)
+                ? created.apiKey
+                : Redacted.make(created.apiKey);
+            current = yield* runners.getRunner({ id: created.id });
+        }
+        // Sync scheduling flags.
+        if ((news.unschedulable ?? false) !== current.unschedulable) {
+            current = yield* runners.updateRunnerScheduling({
+                id: current.id,
+                unschedulable: news.unschedulable ?? false,
+            });
+        }
+        if ((news.draining ?? false) !== (current.draining ?? false)) {
+            current = yield* runners.updateRunnerDraining({
+                id: current.id,
+                draining: news.draining ?? false,
+            });
+        }
+        return {
+            runnerId: current.id,
+            name: current.name,
+            region: current.region,
+            state: current.state,
+            apiKey: apiKey ?? Redacted.make(""),
+        };
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* runners
+            .deleteRunner({ id: output.runnerId })
+            .pipe(Effect.catchTag("RunnerNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=Runner.js.map

package/lib/Runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Runner.js","sources":["../src/Runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAY,MAAM,mBAAmB,CAAC;AAuCvD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,EAAU,CAAC,QAAQ,CAAS,gBAAgB,CAAC,CAAC,CAAC;AAE/E,MAAM,QAAQ,GAAG,CAAC,MAA6B,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;AAE9F,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAC7B,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,QAAQ,CAAC,MAAM,CACb,MAAM,EACN,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACvB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,qEAAqE;QACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO;aACvB,WAAW,CAAC,EAAE,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,QAAQ,EAAE,CAAC,CAAC,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAC7B,EAAE,EACF,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;QACF,IACE,IAAI,KAAK,MAAM,CAAC,IAAI;YACpB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM;YAChD,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,YAAY,EACxC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,KAAK,MAAM,CAAC,IAAI,EAAW,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,KAAK,GACT,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5C,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,UAAU;QACV,IAAI,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;QAC5B,SAAS;QACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC1C,QAAQ,EAAE,MAAM;gBAChB,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5D,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;gBAC9C,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBAC5C,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,EAAE;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,OAAO;aACX,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;aACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}