@alchemy.run/fly 0.0.0-stage → 2.0.0-beta.84

package/lib/IpAssignment.js

@@ -0,0 +1,376 @@
+import * as machines from "@distilled.cloud/fly-io/machines";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { listOwnedApps } from "./App.js";
+const resolveIpAssignmentProps = (props) => Effect.gen(function* () {
+    const resolved = Effect.isEffect(props) ? yield* props : props;
+    if (globalThis.__ALCHEMY_RUNTIME__)
+        return resolved;
+    const app = Effect.isEffect(resolved.app)
+        ? yield* resolved.app
+        : resolved.app;
+    return { ...resolved, app };
+});
+const IpAssignmentResource = Resource("Fly.IpAssignment");
+/**
+ * A Fly.IpAssignment is an address on an {@link App}. A {@link Service}
+ * publishes ports. Fly's proxy load-balances `{app}.fly.dev` across
+ * Machines that publish a proxy service.
+ *
+ * Identity is the allocated `ip`. There is no in-place update.
+ *
+ * @see https://fly.io/docs/networking/services/
+ *
+ * ### Shared IPv4
+ * `shared_v4` is a shared Anycast IPv4. It is free. This is what you
+ * want for fly.dev over IPv4. Yield it next to the Service.
+ *
+ * **Example:** Allocate shared_v4
+ * ```typescript
+ * export const PublicIp = Fly.IpAssignment("Shared", {
+ *   app: Site,
+ *   type: "shared_v4",
+ * });
+ * ```
+ *
+ * :::caution[Changing `type` or `app` replaces the assignment]
+ * A new address is allocated. The old one is released.
+ * :::
+ *
+ * ### Dedicated IPv6
+ * `v6` is a dedicated IPv6. It is free.
+ *
+ * **Example:** Allocate v6
+ * ```typescript
+ * export const V6 = Fly.IpAssignment("V6", {
+ *   app: Site,
+ *   type: "v6",
+ * });
+ * ```
+ *
+ * ### Dedicated IPv4
+ * `v4` is a billed dedicated IPv4. It may 400 if the org has no
+ * quota. Prefer `shared_v4` or `v6` in tests.
+ *
+ * **Example:** Allocate v4
+ * ```typescript
+ * export const Dedicated = Fly.IpAssignment("Dedicated", {
+ *   app: Site,
+ *   type: "v4",
+ * });
+ * ```
+ *
+ * ### Flycast (private IPv6)
+ * `private_v6` is a Flycast address. Fly's proxy serves it only inside
+ * the organization's private network, at `{app}.flycast`. It is free.
+ * Use it for a backend that another App calls and the internet must
+ * not reach. Requests still go through the proxy, so blue/green
+ * cordoning, `autostart`, and `autostop` keep working. Allocate no
+ * public address on the same App.
+ *
+ * **Example:** Allocate private_v6
+ * ```typescript
+ * export const Private = Fly.IpAssignment("Private", {
+ *   app: Backend,
+ *   type: "private_v6",
+ * });
+ * ```
+ *
+ * ### Region
+ * `region` pins a dedicated address. Shared Anycast ignores it. See
+ * [Regions](/fly/compute/regions) for the list of codes.
+ *
+ * **Example:** Dedicated IPv4 in iad
+ * ```typescript
+ * export const Dedicated = Fly.IpAssignment("Dedicated", {
+ *   app: Site,
+ *   type: "v4",
+ *   region: "iad",
+ * });
+ * ```
+ *
+ * :::caution[Changing `region` replaces the assignment]
+ * A new address is allocated in the new region.
+ * :::
+ *
+ * ### Service name
+ * `serviceName` binds the address to a Fly proxy service. Changing it
+ * replaces the assignment.
+ *
+ * **Example:** Bind to a named service
+ * ```typescript
+ * export const PublicIp = Fly.IpAssignment("Shared", {
+ *   app: Site,
+ *   type: "shared_v4",
+ *   serviceName: "http",
+ * });
+ * ```
+ *
+ * :::caution[Changing `serviceName` replaces the assignment]
+ * A new address is allocated bound to the new service.
+ * :::
+ *
+ * ### Isolated network
+ * `network` names the private network a `private_v6` address is
+ * reachable from. Create-only.
+ *
+ * **Example:** Custom network
+ * ```typescript
+ * export const Private = Fly.IpAssignment("Private", {
+ *   app: Backend,
+ *   type: "private_v6",
+ *   network: "tenant-a",
+ * });
+ * ```
+ *
+ * :::caution[Changing `network` replaces the assignment]
+ * A new address is allocated on the new network.
+ * :::
+ *
+ * ### Organization
+ * `orgSlug` defaults to the current token's org. It is not a
+ * replacement key.
+ *
+ * **Example:** Pin an org
+ * ```typescript
+ * export const PublicIp = Fly.IpAssignment("Shared", {
+ *   app: Site,
+ *   type: "shared_v4",
+ *   orgSlug: "my-org",
+ * });
+ * ```
+ *
+ * ### Yield with a Service
+ * Allocate the address on the same App as the Service. `api.url` is
+ * `https://{appName}.fly.dev`.
+ *
+ * **Example:** Stack outputs
+ * ```typescript
+ * export default Alchemy.Stack(
+ *   "MyApp",
+ *   { providers: Fly.providers(), state: Alchemy.localState() },
+ *   Effect.gen(function* () {
+ *     const api = yield* Api;
+ *     const ip = yield* PublicIp;
+ *     return { url: api.url, ip: ip.ip };
+ *   }),
+ * );
+ * ```
+ *
+ * @resource
+ * @product App
+ */
+export const IpAssignment = Object.assign((id, props) => IpAssignmentResource(id, resolveIpAssignmentProps(props)), IpAssignmentResource);
+export class IpAssignmentNotCreated extends Data.TaggedError("Fly.IpAssignmentNotCreated") {
+}
+export class IpAssignmentAppMissing extends Data.TaggedError("Fly.IpAssignmentAppMissing") {
+}
+const appNameOf = (value) => {
+    if (value === null || typeof value !== "object")
+        return undefined;
+    const rec = value;
+    if (typeof rec.appName === "string" && rec.appName.length > 0) {
+        return rec.appName;
+    }
+    if (typeof rec.name === "string" && rec.name.length > 0) {
+        return rec.name;
+    }
+    return undefined;
+};
+const asType = (value) => value === "v4" || value === "v6" || value === "shared_v4" || value === "private_v6"
+    ? value
+    : undefined;
+/**
+ * Fly omits `type` from IP assignment responses. Only Flycast addresses carry
+ * a `network` (its name is empty for the organization's default network).
+ */
+const isFlycast = (assignment) => assignment.network !== undefined && assignment.network !== null;
+const networkOf = (assignment) => assignment.network?.name || undefined;
+const inferType = (assignment, fallback) => {
+    const wire = asType(assignment.type);
+    if (wire !== undefined)
+        return wire;
+    if (assignment.shared === true)
+        return "shared_v4";
+    if (isFlycast(assignment))
+        return "private_v6";
+    const ip = assignment.ip ?? "";
+    if (ip.includes(":"))
+        return "v6";
+    if (fallback !== undefined)
+        return fallback;
+    return ip.length > 0 ? "v4" : (fallback ?? "v4");
+};
+const toAttrs = (appName, assignment, fallbackType) => {
+    const type = inferType(assignment, fallbackType);
+    return {
+        appName,
+        ip: assignment.ip ?? "",
+        type,
+        region: assignment.region,
+        serviceName: assignment.service_name,
+        shared: type === "shared_v4" || assignment.shared === true,
+        network: networkOf(assignment),
+        createdAt: assignment.created_at,
+    };
+};
+const matchesDesired = (assignment, news) => {
+    if (inferType(assignment, news.type) !== news.type)
+        return false;
+    if (news.type === "private_v6" && networkOf(assignment) !== news.network)
+        return false;
+    if (news.region !== undefined && assignment.region !== news.region) {
+        return false;
+    }
+    if (news.serviceName !== undefined && assignment.service_name !== news.serviceName) {
+        return false;
+    }
+    return true;
+};
+const listAssignments = (appName) => machines.listAppIPAssignments({ app_name: appName }).pipe(Effect.map((res) => res.ips ?? []), Effect.catchTag(["NotFound", "Forbidden"], () => Effect.succeed([])));
+const findByIp = (appName, ip) => listAssignments(appName).pipe(Effect.map((ips) => ips.find((item) => item.ip === ip)));
+const findMatching = (appName, news) => listAssignments(appName).pipe(Effect.map((ips) => ips.find((item) => matchesDesired(item, news))));
+const waitUntilGone = (appName, ip) => findByIp(appName, ip).pipe(Effect.map((found) => found === undefined), Effect.repeat({ schedule: Schedule.spaced("1 second"), until: (gone) => gone, times: 8 }));
+/** Whether the App has any address reachable from the internet. */
+export const hasPublicAddress = (appName) => listAssignments(appName).pipe(Effect.map((ips) => ips.some((item) => inferType(item) !== "private_v6")));
+/**
+ * Converge the addresses of an App a {@link Service} owns. Every owned App
+ * gets a Flycast address on its private network (the organization's
+ * default network when `network` is omitted). A public App also gets a
+ * shared IPv4 and an IPv6; a private one has every public address
+ * released. All three types are free.
+ */
+export const syncOwnedAppAddresses = Effect.fn(function* (appName, isPublic, network) {
+    const observed = yield* listAssignments(appName);
+    const isDesiredFlycast = (item) => inferType(item) === "private_v6" && networkOf(item) === network;
+    if (!observed.some(isDesiredFlycast)) {
+        yield* machines
+            .createAppIPAssignment({ app_name: appName, type: "private_v6", network })
+            .pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+    }
+    if (isPublic) {
+        for (const type of ["shared_v4", "v6"]) {
+            if (observed.some((item) => inferType(item) === type))
+                continue;
+            yield* machines
+                .createAppIPAssignment({ app_name: appName, type })
+                .pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+        }
+    }
+    // Release public addresses of a private Service and Flycast addresses
+    // on any other network.
+    for (const item of observed) {
+        if (item.ip === undefined || isDesiredFlycast(item))
+            continue;
+        if (isPublic && inferType(item) !== "private_v6")
+            continue;
+        yield* machines
+            .deleteAppIPAssignment({ app_name: appName, ip: item.ip })
+            .pipe(Effect.catchTag("NotFound", () => Effect.void));
+        yield* waitUntilGone(appName, item.ip);
+    }
+});
+/**
+ * Add a Flycast address on `network` to an App a {@link Service} shares,
+ * so bound callers can reach it. Only ever adds; the address is removed
+ * with the App.
+ */
+export const ensureFlycastAddress = Effect.fn(function* (appName, network) {
+    const observed = yield* listAssignments(appName);
+    if (observed.some((item) => inferType(item) === "private_v6" && networkOf(item) === network))
+        return;
+    yield* machines
+        .createAppIPAssignment({ app_name: appName, type: "private_v6", network })
+        .pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+});
+export const IpAssignmentProvider = () => Provider.succeed(IpAssignment, {
+    stables: ["ip", "appName", "type", "region"],
+    nuke: { dependsOn: ["Fly.App"] },
+    diff: Effect.fn(function* ({ news, olds, output }) {
+        if (news === undefined || !isResolved(news))
+            return undefined;
+        if (output === undefined)
+            return undefined;
+        const appName = appNameOf(news.app);
+        const appChanged = appName !== undefined && appName !== output.appName;
+        const typeChanged = news.type !== output.type;
+        const regionChanged = news.region !== undefined && news.region !== output.region;
+        const serviceChanged = news.serviceName !== undefined && news.serviceName !== output.serviceName;
+        const networkChanged = news.network !== (olds !== undefined ? olds.network : output.network);
+        if (appChanged || typeChanged || regionChanged || serviceChanged || networkChanged) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ olds, output }) {
+        const appName = output?.appName ?? appNameOf(olds?.app);
+        if (appName === undefined)
+            return undefined;
+        const found = output?.ip !== undefined && output.ip.length > 0
+            ? yield* findByIp(appName, output.ip)
+            : olds !== undefined
+                ? yield* findMatching(appName, olds)
+                : undefined;
+        if (found === undefined || found.ip === undefined)
+            return undefined;
+        return toAttrs(appName, found, output?.type ?? olds?.type);
+    }),
+    list: Effect.fn(function* () {
+        const apps = yield* listOwnedApps();
+        const rows = yield* Effect.forEach(apps, (app) => listAssignments(app.appName).pipe(Effect.map((ips) => ips
+            .filter((item) => item.ip !== undefined && item.ip.length > 0)
+            .map((item) => toAttrs(app.appName, item)))), { concurrency: 8 });
+        return rows.flat();
+    }),
+    reconcile: Effect.fn(function* ({ news, output }) {
+        const props = news ?? {};
+        const appName = appNameOf(props.app) ?? output?.appName;
+        if (appName === undefined) {
+            return yield* new IpAssignmentAppMissing({ type: props.type });
+        }
+        // Observe by cached ip, then by desired type/region/service.
+        let current = output?.ip !== undefined && output.ip.length > 0
+            ? yield* findByIp(appName, output.ip)
+            : undefined;
+        if (current === undefined) {
+            current = yield* findMatching(appName, props);
+        }
+        if (current === undefined) {
+            const created = yield* machines
+                .createAppIPAssignment({
+                app_name: appName,
+                type: props.type,
+                region: props.region,
+                network: props.network,
+                org_slug: props.orgSlug,
+                service_name: props.serviceName,
+            })
+                .pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+            if (created !== undefined && created.ip !== undefined) {
+                current = created;
+            }
+            else {
+                current = yield* findMatching(appName, props);
+            }
+        }
+        if (current === undefined || current.ip === undefined) {
+            return yield* new IpAssignmentNotCreated({ appName, type: props.type });
+        }
+        return toAttrs(appName, current, props.type);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        const appName = output.appName;
+        const ip = output.ip;
+        if (appName.length === 0 || ip.length === 0)
+            return;
+        yield* machines
+            .deleteAppIPAssignment({ app_name: appName, ip })
+            .pipe(Effect.catchTag("NotFound", () => Effect.void));
+        yield* waitUntilGone(appName, ip);
+    }),
+});
+//# sourceMappingURL=IpAssignment.js.map

package/lib/IpAssignment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IpAssignment.js","sourceRoot":"","sources":["../src/IpAssignment.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAkFzC,MAAM,wBAAwB,GAAG,CAC/B,KAA6E,EACzB,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,IAAI,UAAU,CAAC,mBAAmB;QAAE,OAAO,QAAQ,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAA2C;QAC7D,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;IACjB,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEL,MAAM,oBAAoB,GAAG,QAAQ,CAAe,kBAAkB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmJG;AACH,MAAM,CAAC,MAAM,YAAY,GAAgC,MAAM,CAAC,MAAM,CACpE,CAAC,EAAU,EAAE,KAA6E,EAAE,EAAE,CAC5F,oBAAoB,CAAC,EAAE,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAC3D,oBAAoB,CACrB,CAAC;AAEF,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAGvF;CAAG;AAEL,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAEvF;CAAG;AAEL,MAAM,SAAS,GAAG,CAAC,KAAc,EAAsB,EAAE;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAgC,EAAE,CACzE,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY;IACjF,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,SAAS,CAAC;AAEhB;;;GAGG;AACH,MAAM,SAAS,GAAG,CAAC,UAA2B,EAAE,EAAE,CAChD,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC;AAElE,MAAM,SAAS,GAAG,CAAC,UAA2B,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC;AAEzF,MAAM,SAAS,GAAG,CAAC,UAA2B,EAAE,QAA2B,EAAoB,EAAE;IAC/F,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACnD,IAAI,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,YAAY,CAAC;IAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACd,OAAe,EACf,UAA2B,EAC3B,YAA+B,EACH,EAAE;IAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACjD,OAAO;QACL,OAAO;QACP,EAAE,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE;QACvB,IAAI;QACJ,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,WAAW,EAAE,UAAU,CAAC,YAAY;QACpC,MAAM,EAAE,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;QAC1D,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC;QAC9B,SAAS,EAAE,UAAU,CAAC,UAAU;KACjC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,UAA2B,EAC3B,IAA4E,EACnE,EAAE;IACX,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,EAAE,CAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAClC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAuB,CAAC,CAAC,CAC1F,CAAC;AAEJ,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAU,EAAE,EAAE,CAC/C,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAEzF,MAAM,YAAY,GAAG,CACnB,OAAe,EACf,IAA4E,EAC5E,EAAE,CACF,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CACpE,CAAC;AAEJ,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAU,EAAE,EAAE,CACpD,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CACxB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,EAC1C,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC1F,CAAC;AAEJ,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,EAAE,CAClD,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAC1E,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtD,OAAe,EACf,QAAiB,EACjB,OAAgB;IAEhB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,CAAC,IAAqB,EAAE,EAAE,CACjD,SAAS,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC;IAClE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,CAAC,QAAQ;aACZ,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;aACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAU,EAAE,CAAC;YAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;gBAAE,SAAS;YAChE,KAAK,CAAC,CAAC,QAAQ;iBACZ,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;iBAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,wBAAwB;IACxB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9D,IAAI,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,YAAY;YAAE,SAAS;QAC3D,KAAK,CAAC,CAAC,QAAQ;aACZ,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAe,EAAE,OAAgB;IACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC;QAC1F,OAAO;IACT,KAAK,CAAC,CAAC,QAAQ;SACZ,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;SACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,EAAE,CACvC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE;IAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC5C,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE;IAEhC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;QAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QACjF,MAAM,cAAc,GAClB,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;QAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7F,IAAI,UAAU,IAAI,WAAW,IAAI,aAAa,IAAI,cAAc,IAAI,cAAc,EAAE,CAAC;YACnF,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,KAAK,GACT,MAAM,EAAE,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;gBACpC,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACpE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAChC,IAAI,EACJ,CAAC,GAAG,EAAE,EAAE,CACN,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjB,GAAG;aACA,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;aAC7D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAC7C,CACF,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9C,MAAM,KAAK,GAAG,IAAI,IAAK,EAAwB,CAAC;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,OAAO,CAAC;QACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,6DAA6D;QAC7D,IAAI,OAAO,GACT,MAAM,EAAE,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC5B,qBAAqB,CAAC;gBACrB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,YAAY,EAAE,KAAK,CAAC,WAAW;aAChC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACtD,OAAO,GAAG,OAAO,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC,CAAC,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpD,KAAK,CAAC,CAAC,QAAQ;aACZ,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;aAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/ListObjectsV2.d.ts

@@ -0,0 +1,29 @@
+import type * as S3 from "@distilled.cloud/aws/s3";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { Bucket } from "./Bucket.ts";
+import type { TigrisCredentialsMissing } from "./Errors.ts";
+export interface ListObjectsV2Request extends Omit<S3.ListObjectsV2Request, "Bucket"> {
+}
+/**
+ * Runtime binding for Tigris `ListObjectsV2` over the S3 API.
+ *
+ * Bind this operation to a {@link Bucket} in Service init. Provide
+ * {@link ListObjectsV2Http}.
+ *
+ *
+ * ### Listing Objects
+ * **Example:** List Objects Under a Prefix
+ * ```typescript
+ * const listObjects = yield* Fly.ListObjectsV2(Data);
+ * const result = yield* listObjects({ Prefix: "jobs/", MaxKeys: 100 });
+ * ```
+ *
+ * @binding
+ * @product Bucket
+ */
+export interface ListObjectsV2 extends Binding.Service<ListObjectsV2, "Fly.ListObjectsV2", (bucket: Bucket) => Effect.Effect<(request?: ListObjectsV2Request) => Effect.Effect<S3.ListObjectsV2Output, S3.ListObjectsV2Error | TigrisCredentialsMissing, RuntimeContext>>> {
+}
+export declare const ListObjectsV2: ListObjectsV2;
+//# sourceMappingURL=ListObjectsV2.d.ts.map

package/lib/ListObjectsV2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListObjectsV2.d.ts","sourceRoot":"","sources":["../src/ListObjectsV2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,QAAQ,CAAC;CAAG;AAExF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO,CAAC,OAAO,CACpD,aAAa,EACb,mBAAmB,EACnB,CACE,MAAM,EAAE,MAAM,KACX,MAAM,CAAC,MAAM,CAChB,CACE,OAAO,CAAC,EAAE,oBAAoB,KAC3B,MAAM,CAAC,MAAM,CAChB,EAAE,CAAC,mBAAmB,EACtB,EAAE,CAAC,kBAAkB,GAAG,wBAAwB,EAChD,cAAc,CACf,CACF,CACF;CAAG;AAEJ,eAAO,MAAM,aAAa,eAAsD,CAAC"}

package/lib/ListObjectsV2.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const ListObjectsV2 = Binding.Service("Fly.ListObjectsV2");
+//# sourceMappingURL=ListObjectsV2.js.map

package/lib/ListObjectsV2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListObjectsV2.js","sourceRoot":"","sources":["../src/ListObjectsV2.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAyC3C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAgB,mBAAmB,CAAC,CAAC"}

package/lib/ListObjectsV2Http.d.ts

@@ -0,0 +1,12 @@
+import * as Layer from "effect/Layer";
+import { ListObjectsV2 } from "./ListObjectsV2.ts";
+/**
+ * HTTP implementation of {@link ListObjectsV2}. Calls distilled S3
+ * `listObjectsV2` against the Tigris endpoint with the bucket's credentials.
+ *
+ * @layer
+ * @product Bucket
+ * @provides Fly.ListObjectsV2
+ */
+export declare const ListObjectsV2Http: Layer.Layer<ListObjectsV2, never, never>;
+//# sourceMappingURL=ListObjectsV2Http.d.ts.map

package/lib/ListObjectsV2Http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListObjectsV2Http.d.ts","sourceRoot":"","sources":["../src/ListObjectsV2Http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,0CAM7B,CAAC"}

package/lib/ListObjectsV2Http.js

@@ -0,0 +1,17 @@
+import * as S3 from "@distilled.cloud/aws/s3";
+import * as Layer from "effect/Layer";
+import { makeTigrisS3Binding } from "./BucketBinding.js";
+import { ListObjectsV2 } from "./ListObjectsV2.js";
+/**
+ * HTTP implementation of {@link ListObjectsV2}. Calls distilled S3
+ * `listObjectsV2` against the Tigris endpoint with the bucket's credentials.
+ *
+ * @layer
+ * @product Bucket
+ * @provides Fly.ListObjectsV2
+ */
+export const ListObjectsV2Http = Layer.effect(ListObjectsV2, makeTigrisS3Binding({
+    tag: "Fly.ListObjectsV2",
+    operation: S3.listObjectsV2,
+}));
+//# sourceMappingURL=ListObjectsV2Http.js.map

package/lib/ListObjectsV2Http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListObjectsV2Http.js","sourceRoot":"","sources":["../src/ListObjectsV2Http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAC3C,aAAa,EACb,mBAAmB,CAAC;IAClB,GAAG,EAAE,mBAAmB;IACxB,SAAS,EAAE,EAAE,CAAC,aAAa;CAC5B,CAAC,CACH,CAAC"}

package/lib/ListSecrets.d.ts

@@ -0,0 +1,53 @@
+import type { AppSecrets, ListSecretsError } from "@distilled.cloud/fly-io/machines";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { App } from "./App.ts";
+/**
+ * List Fly.io App secrets. Scoped to an {@link App}. Fly's list API
+ * is `GET /apps/{app}/secrets`, not a single Secret.
+ *
+ *
+ * ### List this App
+ * The App is fixed by `ListSecrets(app)`. Calls take no `app_name`.
+ * Provide {@link ListSecretsHttp}.
+ *
+ * Plaintext is only returned from inside a Machine in the same App.
+ * From a deploy-time Action you get metadata (name, digest,
+ * timestamps).
+ *
+ * **Example:** ListSecrets
+ * ```typescript
+ * const list = yield* Fly.ListSecrets(Site);
+ * const { secrets } = yield* list();
+ * ```
+ *
+ * ### List another App
+ * From an Action, the org `FLY_API_TOKEN` can list any App in the
+ * org. `ListSecrets(other)` is how you reach across Apps.
+ *
+ * From a Machine, deploy tokens are per-App. Mixing Apps on one host
+ * shares one `FLY_API_TOKEN` and is not supported.
+ *
+ * **Example:** Cross-app from an Action
+ * ```typescript
+ * const Seed = Alchemy.Action(
+ *   "Seed",
+ *   Effect.gen(function* () {
+ *     const list = yield* Fly.ListSecrets(Other);
+ *
+ *     return Effect.fn(function* () {
+ *       const { secrets } = yield* list();
+ *       return secrets;
+ *     });
+ *   }).pipe(Effect.provide(Fly.ListSecretsHttp)),
+ * );
+ * ```
+ *
+ * @binding
+ * @product Secret
+ */
+export interface ListSecrets extends Binding.Service<ListSecrets, "Fly.ListSecrets", (app: App) => Effect.Effect<() => Effect.Effect<AppSecrets, ListSecretsError, RuntimeContext>>> {
+}
+export declare const ListSecrets: ListSecrets;
+//# sourceMappingURL=ListSecrets.d.ts.map

package/lib/ListSecrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListSecrets.d.ts","sourceRoot":"","sources":["../src/ListSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO,CAAC,OAAO,CAClD,WAAW,EACX,iBAAiB,EACjB,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAC/F;CAAG;AAEJ,eAAO,MAAM,WAAW,aAAkD,CAAC"}

package/lib/ListSecrets.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const ListSecrets = Binding.Service("Fly.ListSecrets");
+//# sourceMappingURL=ListSecrets.js.map

package/lib/ListSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListSecrets.js","sourceRoot":"","sources":["../src/ListSecrets.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAuD3C,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAc,iBAAiB,CAAC,CAAC"}

package/lib/ListSecretsHttp.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import { ListSecrets } from "./ListSecrets.ts";
+/**
+ * HTTP implementation of {@link ListSecrets}. Provide it on the
+ * {@link Service} or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On an Action
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const list = yield* Fly.ListSecrets(Site);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.ListSecretsHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret
+ * @provides Fly.ListSecrets
+ */
+export declare const ListSecretsHttp: Layer.Layer<ListSecrets, never, never>;
+//# sourceMappingURL=ListSecretsHttp.d.ts.map

package/lib/ListSecretsHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListSecretsHttp.d.ts","sourceRoot":"","sources":["../src/ListSecretsHttp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,eAAe,wCAgB4D,CAAC"}

package/lib/ListSecretsHttp.js

@@ -0,0 +1,35 @@
+import * as machines from "@distilled.cloud/fly-io/machines";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { CredentialsFromAmbientOrEnv } from "./Credentials.js";
+import { ListSecrets } from "./ListSecrets.js";
+import { makeHttpAppBinding } from "./SecretHttp.js";
+/**
+ * HTTP implementation of {@link ListSecrets}. Provide it on the
+ * {@link Service} or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On an Action
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const list = yield* Fly.ListSecrets(Site);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.ListSecretsHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret
+ * @provides Fly.ListSecrets
+ */
+export const ListSecretsHttp = Layer.effect(ListSecrets, Effect.suspend(() => makeHttpAppBinding({
+    makeClient: (auth, appName) => Effect.fn("Fly.ListSecrets")(function* () {
+        return yield* auth.authorize(machines.listSecrets({
+            app_name: yield* appName,
+            // Names are enough for the binding; plaintext is env-injected.
+            show_secrets: false,
+        }));
+    }),
+}))).pipe(Layer.provide(FetchHttpClient.layer), Layer.provide(CredentialsFromAmbientOrEnv));
+//# sourceMappingURL=ListSecretsHttp.js.map

package/lib/ListSecretsHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListSecretsHttp.js","sourceRoot":"","sources":["../src/ListSecretsHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CACzC,WAAW,EACX,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,kBAAkB,CAAC;IACjB,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAC5B,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,QAAQ,CAAC,WAAW,CAAC;YACnB,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO;YACxB,+DAA+D;YAC/D,YAAY,EAAE,KAAK;SACpB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;CACL,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC"}