@alchemy.run/e2b 0.0.0-stage → 2.0.0-beta.86

package/lib/internal/VolumeHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VolumeHttp.d.ts","sources":["../../src/internal/VolumeHttp.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAO/D,eAAO,MAAM,eAAe,SACpB,OAAO,cACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAChC,qBA4DF,CAAC"}

package/lib/internal/VolumeHttp.js

@@ -0,0 +1,46 @@
+/**
+ * The volume-content client over E2B's HTTP API.
+ *
+ * Volume content is authenticated with the volume's own token, which the
+ * control plane returns from `getVolume` (team key). The token is fetched
+ * once per volume on first use and kept for the life of the runtime; a failed
+ * lookup is not cached, so the next call retries it.
+ */
+import { volumeConnectionFor } from "@distilled.cloud/e2b";
+import * as volumeContent from "@distilled.cloud/e2b/volume_content";
+import * as volumes from "@distilled.cloud/e2b/volumes";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+const decoder = new TextDecoder();
+export const makeVolumeFiles = (auth, volumeIdOf) => {
+    let cached;
+    /** The volume-token connection, looked up once. */
+    const connection = Effect.suspend(() => cached !== undefined
+        ? Effect.succeed(cached)
+        : Effect.flatMap(volumeIdOf, (volumeId) => auth.authorize(volumes.getVolume({ volumeID: volumeId })).pipe(Effect.map((volume) => {
+            cached = {
+                volumeId,
+                layer: Layer.mergeAll(volumeConnectionFor(volume), FetchHttpClient.layer),
+            };
+            return cached;
+        }))));
+    /** Runs a volume-content call, given the volume id, with the volume's token. */
+    const inVolume = (call) => Effect.flatMap(connection, ({ volumeId, layer }) => call(volumeId).pipe(Effect.provide(layer)));
+    return {
+        read: (path) => inVolume((volumeID) => volumeContent.readVolumeFile({ volumeID, path })),
+        readText: (path) => inVolume((volumeID) => volumeContent.readVolumeFile({ volumeID, path })).pipe(Effect.map((bytes) => decoder.decode(bytes))),
+        list: (path, options) => inVolume((volumeID) => volumeContent.listVolumeDir({
+            volumeID,
+            path,
+            ...(options?.depth === undefined ? {} : { depth: options.depth }),
+        })),
+        stat: (path) => inVolume((volumeID) => volumeContent.statVolumePath({ volumeID, path })),
+        exists: (path) => inVolume((volumeID) => volumeContent.statVolumePath({ volumeID, path })).pipe(Effect.as(true), Effect.catchTag("NotFound", () => Effect.succeed(false))),
+        write: (path, data, options) => inVolume((volumeID) => volumeContent.writeVolumeFile({ volumeID, path, body: data, force: true, ...options })),
+        makeDir: (path, options) => inVolume((volumeID) => volumeContent.makeVolumeDir({ volumeID, path, force: true, ...options })),
+        chmod: (path, options) => inVolume((volumeID) => volumeContent.updateVolumePath({ volumeID, path, ...options })),
+        remove: (path) => inVolume((volumeID) => volumeContent.removeVolumePath({ volumeID, path })).pipe(Effect.asVoid, Effect.catchTag("NotFound", () => Effect.void)),
+    };
+};
+//# sourceMappingURL=VolumeHttp.js.map

package/lib/internal/VolumeHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VolumeHttp.js","sources":["../../src/internal/VolumeHttp.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,aAAa,MAAM,qCAAqC,CAAC;AACrE,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAE/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAItC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAKlC,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAa,EACb,UAAiC,EACV,EAAE;IACzB,IAAI,MAA8E,CAAC;IACnF,mDAAmD;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CACrC,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACpB,MAAM,GAAG;gBACP,QAAQ;gBACR,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC;aAC1E,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CACH,CACF,CACN,CAAC;IACF,gFAAgF;IAChF,MAAM,QAAQ,GAAG,CACf,IAA2E,EAC3E,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAElG,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC7C;QACH,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACtB,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpB,aAAa,CAAC,aAAa,CAAC;YAC1B,QAAQ;YACR,IAAI;YACJ,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAClE,CAAC,CACH;QACH,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EACf,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACzD;QACH,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC7B,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpB,aAAa,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CACvF;QACH,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACzB,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpB,aAAa,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CACzE;QACH,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACvB,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACxF,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAC7E,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C;KACJ,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,81 @@
 {
   "name": "@alchemy.run/e2b",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "2.0.0-beta.86",
+  "description": "E2B sandboxes, templates, snapshots, volumes and secrets for Alchemy.",
+  "keywords": [
+    "agents",
+    "alchemy",
+    "e2b",
+    "effect",
+    "firecracker",
+    "infrastructure-as-code",
+    "sandbox"
+  ],
+  "homepage": "https://alchemy.run",
+  "bugs": {
+    "url": "https://github.com/alchemy-run/alchemy/issues"
+  },
+  "license": "Apache-2.0",
+  "author": "Sam Goodwin <sam@alchemy.run>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/alchemy-run/alchemy.git",
+    "directory": "packages/e2b"
+  },
+  "files": [
+    "lib",
+    "src"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "bun": "./src/index.ts",
+      "worker": "./src/index.ts",
+      "default": "./lib/index.js"
+    },
+    "./internal/*": null,
+    "./*": {
+      "types": "./lib/*.d.ts",
+      "bun": "./src/*.ts",
+      "worker": "./src/*.ts",
+      "default": "./lib/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@alchemy.run/docker": "2.0.0-beta.86",
+    "@distilled.cloud/core": "1.0.0-rc.19",
+    "@distilled.cloud/e2b": "1.0.0-rc.19"
+  },
+  "devDependencies": {
+    "@effect/platform-bun": "^4.1.4",
+    "@types/bun": "1.4.3",
+    "alchemy": "2.0.0-beta.86",
+    "effect": "^4.1.4",
+    "typescript": "^7.1.0-dev.20261105.1"
+  },
+  "peerDependencies": {
+    "@effect/platform-bun": "^4.1.4",
+    "alchemy": "2.0.0-beta.86",
+    "effect": "^4.1.4"
+  },
+  "peerDependenciesMeta": {
+    "@effect/platform-bun": {
+      "optional": true
+    }
+  },
+  "alchemy": {
+    "contributes": [
+      "@alchemy.run/e2b/Contributions"
+    ]
+  },
+  "scripts": {
+    "build": "pnpm -r --filter \"{.}...\" run build:package",
+    "build:package": "node scripts/build.ts"
+  }
 }

package/src/ApiKey.ts

@@ -0,0 +1,148 @@
+import * as apiKeys from "@distilled.cloud/e2b/api_keys";
+import { Unowned } from "alchemy/AdoptPolicy";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { E2BUnexpectedResponse } from "./Errors.ts";
+import { e2bName, isGeneratedName } from "./internal/Ownership.ts";
+import type { Providers } from "./Providers.ts";
+
+export interface ApiKeyProps {
+  /**
+   * Key name. If omitted, a unique name is generated from the stack, stage
+   * and logical ID. Renamed in place.
+   */
+  name?: string;
+}
+
+export interface ApiKeyAttributes {
+  /** E2B's API key id. */
+  apiKeyId: string;
+  name: string;
+  /** The key, sent as `X-API-Key`. Only shown once by E2B; Alchemy keeps it in state. */
+  key: Redacted.Redacted<string>;
+  /** The key's masked form, as the dashboard shows it. */
+  mask: string;
+}
+
+export interface ApiKey extends Resource<
+  "E2B.ApiKey",
+  ApiKeyProps,
+  ApiKeyAttributes,
+  never,
+  Providers
+> {}
+
+/**
+ * An E2B team API key.
+ *
+ * E2B keys are not scoped: every key reaches every sandbox, template, volume
+ * and secret in the team. Mint a separate key per app or CI system so you
+ * can revoke one without the others.
+ *
+ * E2B mints API keys only with a personal access token: set `accessToken`
+ * in the E2B profile, or `E2B_ACCESS_TOKEN` in CI. The team defaults to the
+ * token's default team. E2B shows the key once, at creation; Alchemy keeps it
+ * in state as a `Redacted` value. A key whose value was lost is replaced.
+ *
+ * ### Creating an API key
+ * **Example:** A key for CI
+ * ```typescript
+ * export const Ci = E2B.ApiKey("Ci", {});
+ * ```
+ *
+ * **Example:** Pass the key to a Worker as a secret
+ * ```typescript
+ * const ci = yield* Ci;
+ * yield* GitHub.Secret("E2B_API_KEY", { repository: "my-org/app", value: ci.key });
+ * ```
+ *
+ * @resource
+ * @product API key
+ */
+export const ApiKey = Resource<ApiKey>("E2B.ApiKey");
+
+const maskOf = (mask: apiKeys.IdentifierMaskingDetails) =>
+  `${mask.prefix}${mask.maskedValuePrefix}…${mask.maskedValueSuffix}`;
+
+const findById = (apiKeyId: string) =>
+  apiKeys.listApiKeys({}).pipe(Effect.map((all) => all.find((key) => key.id === apiKeyId)));
+
+const redact = (value: string | Redacted.Redacted<string>) =>
+  Redacted.isRedacted(value) ? value : Redacted.make(value);
+
+export const ApiKeyProvider = () =>
+  Provider.effect(
+    ApiKey,
+    Effect.gen(function* () {
+      return {
+        stables: ["apiKeyId", "key"],
+        read: Effect.fn(function* ({ olds, output }) {
+          // E2B never returns a key's value after creation: without the
+          // stored value there is nothing to adopt, so a key is only ours
+          // through state.
+          if (output === undefined) return undefined;
+          const key = yield* findById(output.apiKeyId);
+          if (key === undefined) return undefined;
+          const attrs = { ...output, name: key.name, mask: maskOf(key.mask) };
+          return olds !== undefined || isGeneratedName(key.name) ? attrs : Unowned(attrs);
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+          const name = news.name ?? output?.name ?? (yield* e2bName(id, undefined));
+
+          // Observe — E2B shows a key's value only at creation, so the only
+          // usable key is one whose value is in state.
+          const held =
+            output === undefined
+              ? undefined
+              : { stored: output, observed: yield* findById(output.apiKeyId) };
+
+          // Ensure
+          if (held?.observed === undefined) {
+            yield* session.note(`Creating API key ${name}...`);
+            const created = yield* apiKeys.createApiKey({ name });
+            return {
+              apiKeyId: created.id,
+              name: created.name,
+              key: redact(created.key),
+              mask: maskOf(created.mask),
+            };
+          }
+
+          const { stored, observed } = held;
+
+          // Sync — the name is the only mutable aspect.
+          if (observed.name !== name) {
+            yield* apiKeys.updateApiKey({ apiKeyID: observed.id, name });
+            const renamed = yield* findById(observed.id);
+            if (renamed === undefined) {
+              return yield* new E2BUnexpectedResponse({
+                message: `E2B API key ${name} vanished after rename`,
+              });
+            }
+            return { ...stored, name: renamed.name, mask: maskOf(renamed.mask) };
+          }
+          return { ...stored, name: observed.name, mask: maskOf(observed.mask) };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+          yield* apiKeys
+            .deleteApiKey({ apiKeyID: output.apiKeyId })
+            .pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        // For nuke. E2B never returns a key's value, so listed keys carry an
+        // empty one; delete needs only the id.
+        list: Effect.fn(function* () {
+          const all = yield* apiKeys.listApiKeys({});
+          return all
+            .filter((key) => isGeneratedName(key.name))
+            .map((key) => ({
+              apiKeyId: key.id,
+              name: key.name,
+              key: Redacted.make(""),
+              mask: maskOf(key.mask),
+            }));
+        }),
+      };
+    }),
+  );