@alchemy.run/fly 0.0.0 → 2.0.0-beta.84

package/lib/BindService.js

@@ -0,0 +1,222 @@
+import * as Binding from "alchemy/Binding";
+import { makeFetchRpcStub, RPC_PATH_PREFIX } from "alchemy/Rpc";
+import { CurrentRuntimeContext, sanitizeKey } from "alchemy/RuntimeContext";
+import { isYieldableEffectLike } from "alchemy/Util/effect";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as HttpClientRequest from "effect/http/HttpClientRequest";
+import * as Redacted from "effect/Redacted";
+import { RPC_TOKEN_HEADER } from "./rpc.js";
+/** The deployed caller has no address for the bound Service. */
+export class BoundServiceUnavailable extends Data.TaggedError("Fly.BoundServiceUnavailable") {
+    get message() {
+        return `No private address for Fly Service ${this.service}. It publishes no ports, or the caller was deployed before the binding existed.`;
+    }
+}
+const isFlyHost = (value) => typeof value === "object" &&
+    value !== null &&
+    (value.Type === "Fly.Service" ||
+        value.Type === "Fly.Machine");
+/** Logical id without yielding the Service (the runtime has no engine). */
+const logicalIdOf = (target) => {
+    const id = target !== null && (typeof target === "object" || typeof target === "function")
+        ? target.LogicalId
+        : undefined;
+    return typeof id === "string" ? id : "";
+};
+/** Machine env vars the caller's reconcile writes for a bound Service. */
+export const boundTargetEnvKeys = (id) => ({
+    appName: sanitizeKey(`FLY_BIND_${id}_APP`),
+    url: sanitizeKey(`FLY_BIND_${id}_URL`),
+    token: sanitizeKey(`FLY_BIND_${id}_TOKEN`),
+});
+/**
+ * Record the binding on the caller and transport the target's private
+ * address and caller token as Outputs. Returns runtime accessors for them.
+ */
+const bindTarget = Effect.fn(function* (target, port) {
+    const id = logicalIdOf(target);
+    const keys = boundTargetEnvKeys(id);
+    const ctx = yield* CurrentRuntimeContext;
+    if (!globalThis.__ALCHEMY_RUNTIME__) {
+        // Yielding registers the target and makes the caller depend on it.
+        const service = isYieldableEffectLike(target)
+            ? yield* target
+            : target;
+        // The binding carries the target's Outputs. Unlike props, binding
+        // data may stay unresolved between cycle peers, so two Services can
+        // bind each other; the caller's reconcile writes them onto its Machines.
+        const host = yield* Binding.Host;
+        if (isFlyHost(host)) {
+            yield* host.bind `${service}`({
+                target: {
+                    service: id,
+                    appName: service.appName,
+                    network: service.network,
+                    privateUrl: service.privateUrl,
+                    rpcToken: service.rpcToken,
+                    port,
+                    endpoints: service.endpoints,
+                },
+            });
+        }
+    }
+    // Captured at bind time: the host's runtime context reads the values
+    // transported onto the Machine.
+    const read = (key) => ctx === undefined ? Effect.succeed(undefined) : ctx.get(key);
+    const required = (key) => read(key).pipe(Effect.flatMap((value) => typeof value === "string" && value.length > 0
+        ? Effect.succeed(value)
+        : Effect.fail(new BoundServiceUnavailable({ service: id }))));
+    return {
+        appName: required(keys.appName),
+        url: required(keys.url),
+        token: read(keys.token).pipe(Effect.map((value) => Redacted.isRedacted(value)
+            ? String(Redacted.value(value))
+            : typeof value === "string"
+                ? value
+                : "")),
+    };
+});
+/** Resolve `path` (relative or placeholder-based) against `base`. */
+const withBase = (base, url) => {
+    const path = url.replace(/^https?:\/\/[^/]+/, "");
+    return `${base.replace(/\/$/, "")}${path.startsWith("/") ? path : `/${path}`}`;
+};
+/**
+ * Bind another {@link Service} and get a typed client for it. The client
+ * calls the Service's methods (everything its program returns besides
+ * `fetch` and `run`) and forwards `fetch` requests, over Fly's private
+ * network.
+ *
+ * Binding makes the caller deploy after the Service and hands it the
+ * Service's private address and caller token. Only callers that bind a
+ * Service receive its token, so other Services on the same network cannot
+ * call its methods. Every call must also carry Fly's signed `Fly-Src`
+ * header from the same organization, so the public internet cannot call
+ * them. Calls are plain HTTP inside Fly's WireGuard-encrypted network.
+ *
+ * ### Call a private Service
+ * **Example:** Methods on the target
+ * ```typescript
+ * export default class Users extends Fly.Service<Users>()(
+ *   "Users",
+ *   { main: import.meta.url, public: false },
+ *   Effect.gen(function* () {
+ *     return {
+ *       list: () => Effect.succeed(USERS),
+ *       get: (id: string) =>
+ *         Effect.succeed(USERS.find((user) => user.id === id)),
+ *     };
+ *   }),
+ * ) {}
+ * ```
+ *
+ * **Example:** Bind it and call a method
+ * ```typescript
+ * export default class Orders extends Fly.Service<Orders>()(
+ *   "Orders",
+ *   { main: import.meta.url, public: false },
+ *   Effect.gen(function* () {
+ *     const users = yield* Fly.bindService(Users);
+ *     return {
+ *       list: () =>
+ *         Effect.forEach(ORDERS, (order) =>
+ *           users
+ *             .get(order.userId)
+ *             .pipe(Effect.map((user) => ({ ...order, user }))),
+ *         ),
+ *     };
+ *   }),
+ * ) {}
+ * ```
+ *
+ * ### Stream and forward HTTP
+ * **Example:** A method that returns a Stream
+ * ```typescript
+ * const all = yield* users.streamAll().pipe(Stream.runCollect);
+ * ```
+ *
+ * **Example:** Send a request to the Service's `fetch`
+ * ```typescript
+ * const response = yield* users.fetch(HttpClientRequest.get("/users/u1"));
+ * ```
+ *
+ * ### Bind one port
+ * {@link bindEndpoint} targets one published port, such as an admin API
+ * or a raw TCP protocol. Deploy fails with `Fly.EndpointNotPublished`
+ * when the Service does not publish it.
+ *
+ * **Example:** An admin API on port 9000
+ * ```typescript
+ * const admin = yield* Fly.bindEndpoint(Users, { port: 9000 });
+ * const stats = yield* admin.client.get("/stats");
+ * const host = yield* admin.host; // "{appName}.flycast"
+ * ```
+ *
+ * ### Two Services that bind each other
+ * Declare each as a tag class with its method shape, and implement each
+ * in its own file as the default export of `.make`.
+ *
+ * **Example:** Ping and Pong
+ * ```typescript
+ * // src/services.ts
+ * export class Ping extends Fly.Service<Ping, Named>()("Ping") {}
+ * export class Pong extends Fly.Service<Pong, Named>()("Pong") {}
+ *
+ * // src/ping.ts
+ * export default Ping.make(
+ *   { main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const pong = yield* Fly.bindService(Pong);
+ *     return { name: () => Effect.succeed("ping") };
+ *   }),
+ * );
+ * ```
+ *
+ * ### Errors
+ * Each fails the caller's deploy before the caller is created:
+ * `Fly.ServiceUnreachable` when the caller and the Service are on
+ * different networks, `Fly.ServiceNotBindable` when the Service publishes
+ * no ports, and `Fly.EndpointNotPublished` for a port it does not publish.
+ *
+ * @binding
+ * @product Service
+ */
+export const bindService = (target) => Effect.gen(function* () {
+    const http = yield* HttpClient.HttpClient;
+    const bound = yield* bindTarget(target, undefined);
+    const send = (request, isRpc) => Effect.gen(function* () {
+        const base = yield* bound.url;
+        let next = HttpClientRequest.setUrl(request, withBase(base, request.url));
+        if (isRpc) {
+            next = HttpClientRequest.setHeader(next, RPC_TOKEN_HEADER, yield* bound.token);
+        }
+        return yield* http.execute(next);
+    });
+    return makeFetchRpcStub({
+        fetch: (request) => send(request, request.url.includes(RPC_PATH_PREFIX)),
+        base: {
+            fetch: (request) => send(request, false),
+        },
+    });
+});
+/**
+ * Bind one published port of another {@link Service}: an admin API on
+ * its own port, or a raw TCP protocol. Returns the port's private host,
+ * its URL when it serves plain HTTP, and an `HttpClient` whose relative
+ * requests go there. See {@link bindService}.
+ */
+export const bindEndpoint = (target, options) => Effect.gen(function* () {
+    const http = yield* HttpClient.HttpClient;
+    const bound = yield* bindTarget(target, options.port);
+    const host = bound.appName.pipe(Effect.map((app) => `${app}.flycast`));
+    const url = host.pipe(Effect.map((name) => options.port === 80 ? `http://${name}` : `http://${name}:${options.port}`));
+    return {
+        host,
+        port: options.port,
+        url,
+        client: HttpClient.mapRequestEffect(http, (request) => url.pipe(Effect.map((base) => HttpClientRequest.setUrl(request, withBase(base, request.url))))),
+    };
+});
+//# sourceMappingURL=BindService.js.map

package/lib/BindService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BindService.js","sourceRoot":"","sources":["../src/BindService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAY,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAuB,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,iBAAiB,MAAM,+BAA+B,CAAC;AAEnE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAG5C,gEAAgE;AAChE,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAAC,6BAA6B,CAEzF;IACA,IAAI,OAAO;QACT,OAAO,sCAAsC,IAAI,CAAC,OAAO,iFAAiF,CAAC;IAC7I,CAAC;CACF;AAmCD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAuD,EAAE,CACxF,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,CAAE,KAA2B,CAAC,IAAI,KAAK,aAAa;QACjD,KAA2B,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,GAAG,CAAC,MAAe,EAAU,EAAE;IAC9C,MAAM,EAAE,GACN,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,UAAU,CAAC;QAC7E,CAAC,CAAE,MAAkC,CAAC,SAAS;QAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC;IAC1C,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC;IACtC,KAAK,EAAE,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC;CAC3C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpC,MAAgE,EAChE,IAAwB;IAExB,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACpC,mEAAmE;QACnE,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC;YAC3C,CAAC,CAAC,KAAK,CAAC,CAAC,MAAkD;YAC3D,CAAC,CAAC,MAAM,CAAC;QACX,kEAAkE;QAClE,oEAAoE;QACpE,yEAAyE;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,OAAO,EAAE,CAAC;gBAC3B,MAAM,EAAE;oBACN,OAAO,EAAE,EAAE;oBACX,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,IAAI;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;iBACH;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,gCAAgC;IAChC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAC3B,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAU,GAAG,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACZ,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9D,CACF,CAAC;IACJ,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,CACT,CACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,EAAE;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AACjF,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAgE,EACS,EAAE,CAC3E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,OAA4C,EAAE,KAAc,EAAE,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC9B,IAAI,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACL,OAAO,gBAAgB,CAAuB;QAC5C,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjB,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAGlD;QACH,IAAI,EAAE;YACJ,KAAK,EAAE,CAAC,OAA4C,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;SAC9E;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAgE,EAChE,OAAyB,EAC0C,EAAE,CACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClB,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAC1E,CACF,CAAC;IACF,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,MAAM,EAAE,UAAU,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CACpD,GAAG,CAAC,IAAI,CACN,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CACrF,CACF;KACuB,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/lib/Bootstrap.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Resolve the bundled program (the runners registered via `host.run` /
+ * serve) and run it with a Node HTTP server bound to `PORT`, so the
+ * returned `{ fetch }` handler is actually served and `host.run` loops
+ * stay alive.
+ */
+export declare const bootstrap: (entrypoint: unknown) => Promise<void>;
+//# sourceMappingURL=Bootstrap.d.ts.map

package/lib/Bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.d.ts","sourceRoot":"","sources":["../src/Bootstrap.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,eAAO,MAAM,SAAS,eAAgB,OAAO,KAAG,OAAO,CAAC,IAAI,CAoC3D,CAAC"}

package/lib/Bootstrap.js

@@ -0,0 +1,41 @@
+/**
+ * Process bootstrap for `Fly.Service` and `Fly.Sprite` (a Node process
+ * serving the bundled program). The generated entry imports this module
+ * and the user's `main`, nothing else — see `alchemy/Runtime/Bootstrap` for why.
+ */
+import { NodeServices } from "@effect/platform-node";
+import { NodeHttpServer } from "alchemy/Http";
+import { reifyBoundConfigProvider } from "alchemy/Runtime";
+import { entrypointLayer, resolveProgram, runProcess, stackFromEnv, } from "alchemy/Runtime/Bootstrap";
+import { ManagedHttpShutdown } from "alchemy/Runtime/ManagedHttpShutdown";
+import * as ConfigProvider from "effect/ConfigProvider";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import * as Logger from "effect/Logger";
+import * as Option from "effect/Option";
+import * as Scope from "effect/Scope";
+/**
+ * Resolve the bundled program (the runners registered via `host.run` /
+ * serve) and run it with a Node HTTP server bound to `PORT`, so the
+ * returned `{ fetch }` handler is actually served and `host.run` loops
+ * stay alive.
+ */
+export const bootstrap = (entrypoint) => {
+    const platform = Layer.mergeAll(NodeServices.layer, FetchHttpClient.layer, Logger.layer([Logger.consolePretty()]));
+    const services = entrypointLayer(entrypoint).pipe(Layer.provideMerge(stackFromEnv), Layer.provideMerge(NodeHttpServer({ hostname: "0.0.0.0" })), Layer.provideMerge(platform), Layer.provideMerge(Layer.succeed(ConfigProvider.ConfigProvider, reifyBoundConfigProvider(ConfigProvider.fromEnv(), process.env))));
+    const program = Effect.gen(function* () {
+        const managed = yield* Effect.serviceOption(ManagedHttpShutdown);
+        if (Option.isNone(managed)) {
+            return yield* resolveProgram("program").pipe(Effect.provide(services), Effect.scoped);
+        }
+        // Initializer dependencies outlive both run finalizers and HTTP responses.
+        const context = yield* Layer.buildWithScope(services, managed.value.dependencies);
+        return yield* resolveProgram("program").pipe(Effect.provideContext(context), Scope.provide(managed.value.dependencies));
+    });
+    const timeout = process.env.ALCHEMY_FLY_SHUTDOWN_TIMEOUT_MS;
+    return runProcess("Fly service", program, {
+        managedHttpShutdownTimeoutMs: timeout === undefined ? undefined : /^\d+$/.test(timeout) ? Number(timeout) : NaN,
+    });
+};
+//# sourceMappingURL=Bootstrap.js.map

package/lib/Bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.js","sourceRoot":"","sources":["../src/Bootstrap.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,cAAc,EACd,UAAU,EACV,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,UAAmB,EAAiB,EAAE;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAC7B,YAAY,CAAC,KAAK,EAClB,eAAe,CAAC,KAAK,EACrB,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CACvC,CAAC;IAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAC/C,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAChC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAC3D,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,EAC5B,KAAK,CAAC,YAAY,CAChB,KAAK,CAAC,OAAO,CACX,cAAc,CAAC,cAAc,EAC7B,wBAAwB,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAChE,CACF,CACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC;QACD,2EAA2E;QAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,EAC9B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IAC5D,OAAO,UAAU,CAAC,aAAa,EAAE,OAAO,EAAE;QACxC,4BAA4B,EAC1B,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;KACpF,CAAC,CAAC;AACL,CAAC,CAAC"}

package/lib/Bucket.d.ts

@@ -0,0 +1,278 @@
+import type { AddOnsResponseEdgesItemNode } from "@distilled.cloud/fly-io/addons";
+import * as addons from "@distilled.cloud/fly-io/addons";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { TigrisCredentialsMissing } from "./Errors.ts";
+import type { Providers } from "./Providers.ts";
+/** Env-var names Tigris HTTP bindings write onto an App (same as `fly storage create`). */
+export declare const BUCKET_SECRET_NAMES: readonly ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_ENDPOINT_URL_S3", "AWS_REGION", "BUCKET_NAME"];
+export type BucketSecretName = (typeof BUCKET_SECRET_NAMES)[number];
+/**
+ * Shadow bucket used to migrate from another S3-compatible store.
+ * Every field is required when set.
+ */
+export interface BucketShadow {
+    /** Shadow-bucket access key id. */
+    accessKey: string;
+    /** Shadow-bucket secret. Wrap with `Redacted.make`. */
+    secretKey: Redacted.Redacted<string> | string;
+    /** Shadow-bucket region. */
+    region: string;
+    /** Shadow-bucket name. */
+    name: string;
+    /** Shadow-bucket S3 endpoint URL. */
+    endpoint: string;
+    /**
+     * Dual-write new objects back to the shadow bucket.
+     *
+     * @default false
+     */
+    writeThrough?: boolean;
+}
+export interface BucketProps {
+    /**
+     * Tigris bucket / add-on name. Globally unique, DNS-compatible
+     * (lowercase letters, digits, hyphens), must start with a letter,
+     * max 63 characters. If omitted, a unique name is generated from
+     * the stack, stage and logical ID. Changing it replaces the Bucket.
+     */
+    name?: string;
+    /**
+     * Organization slug. Defaults to the current token's org
+     * (`getCurrentToken`). Changing it replaces the Bucket.
+     */
+    orgSlug?: string;
+    /**
+     * Serve objects without credentials. Default is private.
+     *
+     * @default false
+     */
+    public?: boolean;
+    /**
+     * Custom domain for public website hosting. Maps to Tigris
+     * `options.website.domain_name`. Empty string when omitted
+     * (the Tigris API requires the field).
+     */
+    domainName?: string;
+    /**
+     * Tigris accelerate. Default is off.
+     *
+     * @default false
+     */
+    accelerate?: boolean;
+    /**
+     * Shadow bucket for zero-downtime migration from another
+     * S3-compatible store. Every nested field is required when set.
+     */
+    shadowBucket?: BucketShadow;
+}
+export type Bucket = Resource<"Fly.Bucket", BucketProps, {
+    /** Fly GraphQL add-on id. Identity of the Bucket. */
+    addOnId: string;
+    /** Physical Tigris add-on / bucket name. */
+    name: string;
+    /** Observed provisioning status (`ready`, …). */
+    status: string | undefined;
+    /** Organization slug. */
+    orgSlug: string | undefined;
+    /** Whether the bucket is public. */
+    public: boolean;
+    /** Custom website domain, if set. */
+    domainName: string | undefined;
+    /** Tigris accelerate. */
+    accelerate: boolean;
+    /** Tigris SSO dashboard URL, if the API returned one. */
+    ssoLink: string | undefined;
+    /** RFC3339 creation timestamp. */
+    createdAt: string | undefined;
+    /**
+     * `AWS_ACCESS_KEY_ID` from `createAddOn.environment`. Never logged.
+     */
+    accessKeyId: Redacted.Redacted<string> | undefined;
+    /**
+     * `AWS_SECRET_ACCESS_KEY` from `createAddOn.environment`. Never logged.
+     */
+    secretAccessKey: Redacted.Redacted<string> | undefined;
+    /**
+     * `AWS_ENDPOINT_URL_S3` from `createAddOn.environment`. Never logged.
+     */
+    endpoint: Redacted.Redacted<string> | undefined;
+    /**
+     * `AWS_REGION` from `createAddOn.environment`. Never logged.
+     */
+    region: Redacted.Redacted<string> | undefined;
+    /**
+     * `BUCKET_NAME` from `createAddOn.environment`. Never logged.
+     */
+    bucketName: Redacted.Redacted<string> | undefined;
+}, never, Providers>;
+/**
+ * A Fly.Bucket is Tigris S3-compatible object storage, billed through
+ * Fly. It is an org-scoped GraphQL add-on (`AddOnType` `tigris`).
+ *
+ * @see https://fly.io/docs/tigris/
+ *
+ * ### Create a Bucket
+ * Alchemy generates a unique name unless you pass one.
+ *
+ * **Example:** Generated name
+ * ```typescript
+ * const data = yield* Fly.Bucket("Data");
+ * ```
+ *
+ * ### A stable name
+ * Pass `name` when you need a stable Tigris bucket name.
+ *
+ * **Example:** Explicit name
+ * ```typescript
+ * const data = yield* Fly.Bucket("Data", {
+ *   name: "my-bucket",
+ * });
+ * ```
+ *
+ * :::caution[Changing `name` replaces the Bucket]
+ * Tigris cannot rename a bucket. Alchemy creates the new name, then
+ * deletes the old one.
+ * :::
+ *
+ * ### Organization
+ * Org defaults to the current token. Pass `orgSlug` to pin it.
+ *
+ * **Example:** Pin an org
+ * ```typescript
+ * const data = yield* Fly.Bucket("Data", {
+ *   orgSlug: "my-org",
+ * });
+ * ```
+ *
+ * :::caution[Changing `orgSlug` replaces the Bucket]
+ * The bucket is created in the new org. The old bucket is deleted.
+ * :::
+ *
+ * ### Public access
+ * Buckets are private by default. `public: true` serves objects
+ * without credentials.
+ *
+ * **Example:** Public bucket
+ * ```typescript
+ * const assets = yield* Fly.Bucket("Assets", {
+ *   public: true,
+ * });
+ * ```
+ *
+ * ### Custom domain
+ * `domainName` sets `website.domain_name` on the add-on. Point a
+ * CNAME at `{name}.t3.tigrisbucket.io`.
+ *
+ * **Example:** Custom domain
+ * ```typescript
+ * const assets = yield* Fly.Bucket("Assets", {
+ *   public: true,
+ *   domainName: "assets.example.com",
+ * });
+ * ```
+ *
+ * ### Put and get objects
+ * Tigris speaks the S3 API. Bind {@link PutObject} / {@link GetObject}
+ * (and the other S3 object ops) in Service init. Alchemy injects the
+ * Tigris endpoint and credentials; you never read `AWS_*` yourself.
+ *
+ * **Example:** Put an object from a Service
+ * ```typescript
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ *
+ * export default class Api extends Fly.Service<Api>()(
+ *   "Api",
+ *   { app: Site, main: import.meta.url, port: 3000 },
+ *   Effect.gen(function* () {
+ *     const putObject = yield* Fly.PutObject(Data);
+ *     const getObject = yield* Fly.GetObject(Data);
+ *
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         yield* putObject({
+ *           Key: "hello.txt",
+ *           Body: "hello",
+ *           ContentType: "text/plain",
+ *         });
+ *         const obj = yield* getObject({ Key: "hello.txt" });
+ *         return HttpServerResponse.json({ ok: obj.ETag !== undefined });
+ *       }),
+ *     };
+ *   }).pipe(Effect.provide([Fly.PutObjectHttp, Fly.GetObjectHttp])),
+ * ) {}
+ * ```
+ *
+ * ### Fly.Secret
+ * You can also set each key yourself with {@link Secret}.
+ *
+ * **Example:** Manual secrets
+ * ```typescript
+ * yield* Fly.Secret("BucketName", {
+ *   app: Site,
+ *   name: "BUCKET_NAME",
+ *   value: Data.bucketName,
+ * });
+ * ```
+ *
+ * @resource
+ * @product Bucket
+ */
+export declare const Bucket: import("alchemy/Resource").ResourceClass<Bucket>;
+declare const BucketNotCreated_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.BucketNotCreated";
+} & Readonly<A>;
+export declare class BucketNotCreated extends BucketNotCreated_base<{
+    name: string;
+}> {
+}
+declare const BucketOrgMissing_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.BucketOrgMissing";
+} & Readonly<A>;
+export declare class BucketOrgMissing extends BucketOrgMissing_base<{
+    orgSlug: string;
+}> {
+}
+declare const BucketProvisionFailed_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.BucketProvisionFailed";
+} & Readonly<A>;
+export declare class BucketProvisionFailed extends BucketProvisionFailed_base<{
+    name: string;
+    status: string | undefined;
+    errorMessage: string | undefined;
+}> {
+}
+export declare const listTigrisAddOns: () => Effect.Effect<AddOnsResponseEdgesItemNode[], addons.FlyIoOpError, addons.FlyIoOpContext>;
+export declare const BucketProvider: () => import("effect/Layer").Layer<Provider.Provider<Bucket>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | addons.FlyIoOpContext>;
+declare const BucketSecretVersionMissing_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.BucketSecretVersionMissing";
+} & Readonly<A>;
+declare class BucketSecretVersionMissing extends BucketSecretVersionMissing_base<{
+    appName: string;
+}> {
+}
+/**
+ * Write Tigris `AWS_*` / `BUCKET_NAME` secrets onto an App. Called from
+ * {@link Service} reconcile so the secrets exist before Machines boot.
+ *
+ * Looks up the add-on by id/name (retrying while Tigris is still
+ * provisioning) and also copies any already-evaluated `AWS_*` /
+ * `BUCKET_NAME` values from binding env — GraphQL `environment` is often
+ * empty after create. A missing add-on may use bound values only when the
+ * bucket name, credential pair, and S3 endpoint are complete. Partial values
+ * are never written. Region is optional, as in the Tigris bindings.
+ * Without an attachment, only an explicit `BUCKET_NAME` requests this mode;
+ * ordinary AWS region or credential settings do not imply a Bucket.
+ * Returns the highest accepted secret-version floor, or `undefined` when
+ * no Bucket was requested; this is not a vault snapshot.
+ */
+export declare const attachBucketSecrets: (appName: string, attached: readonly {
+    name: string;
+    id?: string;
+    /** Credentials from the bound Bucket's attributes. */
+    values?: Record<string, string>;
+}[], boundEnv?: Record<string, string> | undefined) => Effect.Effect<number | undefined, import("@distilled.cloud/fly-io").BadRequest | BucketSecretVersionMissing | import("@distilled.cloud/fly-io").Conflict | import("@distilled.cloud/fly-io").Forbidden | import("@distilled.cloud/fly-io").NotFound | TigrisCredentialsMissing | addons.FlyIoOpError, addons.FlyIoOpContext>;
+export {};
+//# sourceMappingURL=Bucket.d.ts.map

package/lib/Bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bucket.d.ts","sourceRoot":"","sources":["../src/Bucket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AAIzD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAI5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAI5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,2FAA2F;AAC3F,eAAO,MAAM,mBAAmB,YAC9B,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,aAAa,CACL,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC9C,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,MAAM,MAAM,GAAG,QAAQ,CAC3B,YAAY,EACZ,WAAW,EACX;IACE,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,yBAAyB;IACzB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,oCAAoC;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,qCAAqC;IACrC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,yBAAyB;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,yDAAyD;IACzD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,kCAAkC;IAClC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;OAEG;IACH,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACnD;;OAEG;IACH,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACvD;;OAEG;IACH,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAChD;;OAEG;IACH,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACnD,EACD,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GG;AACH,eAAO,MAAM,MAAM,kDAAiC,CAAC;;;;AAErD,qBAAa,gBAAiB,SAAQ,sBAAyC;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;CAAG;;;;AAEL,qBAAa,gBAAiB,SAAQ,sBAAyC;IAC7E,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;CAAG;;;;AAEL,qBAAa,qBAAsB,SAAQ,2BAA8C;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAAC;CAAG;AAmKL,eAAO,MAAM,gBAAgB,gGAiB3B,CAAC;AA0HH,eAAO,MAAM,cAAc,6JAgKvB,CAAC;;;;AAEL,cAAM,0BAA2B,SAAQ,gCAAmD;IAC1F,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;CAAG;AAsHL;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mBAAmB;UAGtB,MAAM;SACP,MAAM;IACX,sDAAsD;aAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;mXA8CjC,CAAC"}