@alchemy.run/fly 0.0.0 → 2.0.0-beta.84

package/lib/Certificate.js

@@ -0,0 +1,380 @@
+import * as machines from "@distilled.cloud/fly-io/machines";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Schedule from "effect/Schedule";
+import { listOwnedApps } from "./App.js";
+/**
+ * A Fly.Certificate covers a hostname on an {@link App}. Default
+ * `kind` is `"acme"` (Let's Encrypt). `"custom"` uploads a PEM.
+ *
+ * IPs and certificates attach to the App. A {@link Service} publishes
+ * ports. Fly's proxy terminates TLS on 443 once the certificate is
+ * `configured`.
+ *
+ * @see https://fly.io/docs/machines/api/certificates-resource/
+ *
+ * ### ACME certificates
+ * Request Let's Encrypt for a hostname. The Service does not change.
+ * Yield the certificate in the Stack. Point DNS at the App.
+ *
+ * **Example:** Let's Encrypt
+ * ```typescript
+ * export const Www = Fly.Certificate("Www", {
+ *   app: Site,
+ *   hostname: "www.example.com",
+ * });
+ * ```
+ *
+ * :::caution[Changing `hostname` replaces the Certificate]
+ * Hostname is the identity. The old hostname is deleted, then the new
+ * one is created.
+ * :::
+ *
+ * :::caution[Changing `app` or `kind` replaces the Certificate]
+ * The certificate is created on the new App or with the new issuer.
+ * :::
+ *
+ * ### DNS
+ * Point an A record at a `shared_v4` {@link IpAssignment} and an AAAA
+ * at `v6`. Plus whatever `dnsRequirements` lists for the ACME
+ * challenge. Alchemy re-checks via `checkAppCertificate` while
+ * `configured` is false.
+ *
+ * Observed attrs include `status`, `configured`, `acmeRequested`,
+ * `dnsRequirements`, and `validation`.
+ *
+ * **Example:** Yield next to a Service
+ * ```typescript
+ * export default Alchemy.Stack(
+ *   "MyApp",
+ *   { providers: Fly.providers(), state: Alchemy.localState() },
+ *   Effect.gen(function* () {
+ *     const api = yield* Api;
+ *     const ip = yield* PublicIp;
+ *     const v6 = yield* V6;
+ *     const www = yield* Www;
+ *     return {
+ *       url: api.url,
+ *       ip: ip.ip,
+ *       v6: v6.ip,
+ *       dns: www.dnsRequirements,
+ *     };
+ *   }),
+ * );
+ * ```
+ *
+ * ### Custom certificates
+ * `"custom"` uploads `fullchain` and `privateKey`. Wrap the key with
+ * `Redacted.make` so it never logs. Never stored in attributes.
+ * Updating the PEM re-uploads in place.
+ *
+ * **Example:** Upload a PEM
+ * ```typescript
+ * export const Www = Fly.Certificate("Www", {
+ *   app: Site,
+ *   hostname: "www.example.com",
+ *   kind: "custom",
+ *   fullchain: pem,
+ *   privateKey: Redacted.make(key),
+ * });
+ * ```
+ *
+ * @resource
+ * @product Certificate
+ */
+export const Certificate = Resource("Fly.Certificate");
+export class CertificateNotCreated extends Data.TaggedError("Fly.CertificateNotCreated") {
+}
+export class CertificateAppMissing extends Data.TaggedError("Fly.CertificateAppMissing") {
+}
+export class CertificateMaterialRequired extends Data.TaggedError("Fly.CertificateMaterialRequired") {
+}
+const appNameOf = (value) => {
+    if (value === null || typeof value !== "object")
+        return undefined;
+    const rec = value;
+    if (typeof rec.appName === "string" && rec.appName.length > 0) {
+        return rec.appName;
+    }
+    if (typeof rec.name === "string" && rec.name.length > 0) {
+        return rec.name;
+    }
+    return undefined;
+};
+const unwrapSecret = (value) => {
+    if (value === undefined)
+        return undefined;
+    return Redacted.isRedacted(value) ? Redacted.value(value) : value;
+};
+const normalizePem = (pem) => (pem ?? "").replace(/\r\n/g, "\n").trim();
+const desiredKind = (props) => props.kind ?? "acme";
+const kindOf = (source) => source === "custom" ? "custom" : "acme";
+const sourceOf = (detail) => {
+    const entries = detail.certificates ?? [];
+    if (entries.some((entry) => entry.source === "custom"))
+        return "custom";
+    if (entries.some((entry) => entry.source === "fly"))
+        return "fly";
+    return detail.acme_requested === true ? "fly" : "custom";
+};
+const sourceFromSummary = (summary) => summary.has_custom_certificate === true ? "custom" : "fly";
+const toDnsRequirements = (req) => {
+    if (req === undefined)
+        return undefined;
+    return {
+        a: req.a,
+        aaaa: req.aaaa,
+        acmeChallenge: req.acme_challenge === undefined
+            ? undefined
+            : {
+                name: req.acme_challenge.name,
+                target: req.acme_challenge.target,
+            },
+        cname: req.cname,
+        ownership: req.ownership === undefined
+            ? undefined
+            : {
+                appValue: req.ownership.app_value,
+                name: req.ownership.name,
+                orgValue: req.ownership.org_value,
+            },
+    };
+};
+const toValidation = (validation) => {
+    if (validation === undefined)
+        return undefined;
+    return {
+        alpnConfigured: validation.alpn_configured,
+        dnsConfigured: validation.dns_configured,
+        httpConfigured: validation.http_configured,
+        ownershipTxtConfigured: validation.ownership_txt_configured,
+    };
+};
+const toAttrs = (appName, detail, fallbackHostname) => ({
+    appName,
+    hostname: detail.hostname ?? fallbackHostname ?? "",
+    status: detail.status,
+    configured: detail.configured,
+    acmeRequested: detail.acme_requested,
+    dnsRequirements: toDnsRequirements(detail.dns_requirements),
+    validation: toValidation(detail.validation),
+    source: sourceOf(detail),
+});
+const toAttrsFromSummary = (appName, summary) => {
+    const hostname = summary.hostname;
+    if (hostname === undefined || hostname.length === 0)
+        return undefined;
+    return {
+        appName,
+        hostname,
+        status: summary.status,
+        configured: summary.configured,
+        acmeRequested: summary.acme_requested,
+        dnsRequirements: undefined,
+        validation: {
+            alpnConfigured: summary.acme_alpn_configured,
+            dnsConfigured: summary.acme_dns_configured,
+            httpConfigured: summary.acme_http_configured,
+            ownershipTxtConfigured: summary.ownership_txt_configured,
+        },
+        source: sourceFromSummary(summary),
+    };
+};
+const getByHostname = (appName, hostname) => machines
+    .getAppCertificate({ app_name: appName, hostname })
+    .pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+const listAppCertificates = (appName) => Effect.gen(function* () {
+    const all = [];
+    let cursor;
+    for (let i = 0; i < 8; i++) {
+        const page = yield* machines
+            .listAppCertificates({
+            app_name: appName,
+            cursor,
+            limit: 100,
+        })
+            .pipe(Effect.catchTag(["NotFound", "Forbidden"], () => Effect.succeed({
+            certificates: [],
+            next_cursor: undefined,
+        })));
+        all.push(...(page.certificates ?? []));
+        if (page.next_cursor === undefined || page.next_cursor.length === 0) {
+            break;
+        }
+        cursor = page.next_cursor;
+    }
+    return all;
+});
+const waitUntilGone = (appName, hostname) => getByHostname(appName, hostname).pipe(Effect.map((found) => found === undefined), Effect.repeat({
+    schedule: Schedule.spaced("1 second"),
+    until: (gone) => gone,
+    times: 8,
+}));
+const requireCustomMaterial = (hostname, fullchain, privateKey) => fullchain === undefined ||
+    fullchain.length === 0 ||
+    privateKey === undefined ||
+    privateKey.length === 0
+    ? new CertificateMaterialRequired({ hostname })
+    : undefined;
+const createAcme = (appName, hostname) => machines
+    .createAppAcmeCertificate({
+    app_name: appName,
+    hostname,
+})
+    .pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+const createCustom = (appName, hostname, fullchain, privateKey) => machines
+    .createAppCustomCertificate({
+    app_name: appName,
+    hostname,
+    fullchain,
+    private_key: privateKey,
+})
+    .pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+const replaceCustom = (appName, hostname, fullchain, privateKey) => Effect.gen(function* () {
+    yield* machines
+        .deleteAppCustomCertificate({
+        app_name: appName,
+        hostname,
+    })
+        .pipe(Effect.catchTag("NotFound", () => Effect.void));
+    yield* machines.createAppCustomCertificate({
+        app_name: appName,
+        hostname,
+        fullchain,
+        private_key: privateKey,
+    });
+});
+export const CertificateProvider = () => Provider.succeed(Certificate, {
+    stables: ["appName", "hostname", "source"],
+    nuke: { dependsOn: ["Fly.App"] },
+    diff: Effect.fn(function* ({ news, output }) {
+        if (news === undefined || !isResolved(news))
+            return undefined;
+        if (output === undefined)
+            return undefined;
+        const appName = appNameOf(news.app);
+        const appChanged = appName !== undefined && appName !== output.appName;
+        const hostnameChanged = news.hostname !== output.hostname;
+        const nextKind = desiredKind(news);
+        const kindChanged = nextKind !== kindOf(output.source);
+        if (appChanged || hostnameChanged || kindChanged) {
+            return {
+                action: "replace",
+                // Same hostname cannot exist twice — delete the old kind first.
+                deleteFirst: !hostnameChanged && !appChanged,
+            };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ olds, output }) {
+        const appName = output?.appName ?? appNameOf(olds?.app);
+        const hostname = output?.hostname ?? olds?.hostname;
+        if (appName === undefined || hostname === undefined)
+            return undefined;
+        const found = yield* getByHostname(appName, hostname);
+        if (found === undefined)
+            return undefined;
+        return toAttrs(appName, found, hostname);
+    }),
+    list: Effect.fn(function* () {
+        const apps = yield* listOwnedApps();
+        const rows = yield* Effect.forEach(apps, (app) => listAppCertificates(app.appName).pipe(Effect.map((certs) => certs.flatMap((item) => {
+            const attrs = toAttrsFromSummary(app.appName, item);
+            return attrs === undefined ? [] : [attrs];
+        }))), { concurrency: 8 });
+        return rows.flat();
+    }),
+    reconcile: Effect.fn(function* ({ news, olds, output }) {
+        const props = news ?? {};
+        const appName = appNameOf(props.app) ?? output?.appName;
+        const hostname = props.hostname ?? output?.hostname;
+        if (appName === undefined) {
+            return yield* new CertificateAppMissing({
+                hostname: hostname ?? "",
+            });
+        }
+        if (hostname === undefined || hostname.length === 0) {
+            return yield* new CertificateNotCreated({
+                appName,
+                hostname: "",
+            });
+        }
+        const kind = desiredKind(props);
+        // Observe by cached identity, then by desired hostname.
+        let current = output?.hostname !== undefined
+            ? yield* getByHostname(output.appName.length > 0 ? output.appName : appName, output.hostname)
+            : undefined;
+        if (current === undefined && (output?.hostname !== hostname || output?.appName !== appName)) {
+            current = yield* getByHostname(appName, hostname);
+        }
+        let createdThisPass = false;
+        if (current === undefined) {
+            if (kind === "custom") {
+                const fullchain = props.fullchain;
+                const privateKey = unwrapSecret(props.privateKey);
+                const missing = requireCustomMaterial(hostname, fullchain, privateKey);
+                if (missing !== undefined)
+                    return yield* missing;
+                const created = yield* createCustom(appName, hostname, fullchain, privateKey);
+                current = created ?? (yield* getByHostname(appName, hostname));
+            }
+            else {
+                const created = yield* createAcme(appName, hostname);
+                current = created ?? (yield* getByHostname(appName, hostname));
+            }
+            createdThisPass = true;
+        }
+        if (current === undefined) {
+            return yield* new CertificateNotCreated({ appName, hostname });
+        }
+        if (kind === "custom") {
+            const fullchain = props.fullchain;
+            const privateKey = unwrapSecret(props.privateKey);
+            const missing = requireCustomMaterial(hostname, fullchain, privateKey);
+            if (missing !== undefined)
+                return yield* missing;
+            const previousChain = olds?.fullchain;
+            const previousKey = unwrapSecret(olds?.privateKey);
+            const materialChanged = olds === undefined ||
+                normalizePem(fullchain) !== normalizePem(previousChain) ||
+                normalizePem(privateKey) !== normalizePem(previousKey);
+            if (!createdThisPass && materialChanged) {
+                const upserted = yield* createCustom(appName, hostname, fullchain, privateKey);
+                if (upserted === undefined) {
+                    yield* replaceCustom(appName, hostname, fullchain, privateKey);
+                }
+                current = upserted ?? (yield* getByHostname(appName, hostname)) ?? current;
+            }
+        }
+        else if (current.configured !== true) {
+            const checked = yield* machines
+                .checkAppCertificate({
+                app_name: appName,
+                hostname,
+            })
+                .pipe(Effect.catchTag(["NotFound", "BadRequest"], () => Effect.succeed(undefined)));
+            if (checked !== undefined) {
+                current = checked;
+            }
+        }
+        return toAttrs(appName, current, hostname);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        const appName = output.appName;
+        const hostname = output.hostname;
+        if (appName.length === 0 || hostname.length === 0)
+            return;
+        yield* machines
+            .deleteAppCertificate({
+            app_name: appName,
+            hostname,
+        })
+            .pipe(Effect.catchTag("NotFound", () => Effect.void));
+        yield* waitUntilGone(appName, hostname);
+    }),
+});
+//# sourceMappingURL=Certificate.js.map

package/lib/Certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Certificate.js","sourceRoot":"","sources":["../src/Certificate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAuFzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAc,iBAAiB,CAAC,CAAC;AAEpE,MAAM,OAAO,qBAAsB,SAAQ,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAGrF;CAAG;AAEL,MAAM,OAAO,qBAAsB,SAAQ,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAErF;CAAG;AAEL,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,iCAAiC,CAGjC;CAAG;AAIL,MAAM,SAAS,GAAG,CAAC,KAAc,EAAsB,EAAE;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,KAAqD,EACjC,EAAE;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,GAAuB,EAAU,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAEpG,MAAM,WAAW,GAAG,CAAC,KAAqC,EAAmB,EAAE,CAC7E,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC;AAEvB,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAmB,EAAE,CAC5D,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AAE1C,MAAM,QAAQ,GAAG,CAAC,MAAoB,EAAqB,EAAE;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAA2B,EAAqB,EAAE,CAC3E,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAE7D,MAAM,iBAAiB,GAAG,CACxB,GAAgC,EACQ,EAAE;IAC1C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO;QACL,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EACX,GAAG,CAAC,cAAc,KAAK,SAAS;YAC9B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI;gBAC7B,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM;aAClC;QACP,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EACP,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS;gBACjC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;gBACxB,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS;aAClC;KACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,UAAgD,EACR,EAAE;IAC1C,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO;QACL,cAAc,EAAE,UAAU,CAAC,eAAe;QAC1C,aAAa,EAAE,UAAU,CAAC,cAAc;QACxC,cAAc,EAAE,UAAU,CAAC,eAAe;QAC1C,sBAAsB,EAAE,UAAU,CAAC,wBAAwB;KAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACd,OAAe,EACf,MAAoB,EACpB,gBAAyB,EACE,EAAE,CAAC,CAAC;IAC/B,OAAO;IACP,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,gBAAgB,IAAI,EAAE;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,aAAa,EAAE,MAAM,CAAC,cAAc;IACpC,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC3D,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;IAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,OAAe,EACf,OAA2B,EACY,EAAE;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO;QACL,OAAO;QACP,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,OAAO,CAAC,cAAc;QACrC,eAAe,EAAE,SAAS;QAC1B,UAAU,EAAE;YACV,cAAc,EAAE,OAAO,CAAC,oBAAoB;YAC5C,aAAa,EAAE,OAAO,CAAC,mBAAmB;YAC1C,cAAc,EAAE,OAAO,CAAC,oBAAoB;YAC5C,sBAAsB,EAAE,OAAO,CAAC,wBAAwB;SACzD;QACD,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE,CAC1D,QAAQ;KACL,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAExE,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAE,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,IAAI,MAA0B,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ;aACzB,mBAAmB,CAAC;YACnB,QAAQ,EAAE,OAAO;YACjB,MAAM;YACN,KAAK,EAAE,GAAG;SACX,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,CAC9C,MAAM,CAAC,OAAO,CAAC;YACb,YAAY,EAAE,EAA0B;YACxC,WAAW,EAAE,SAAS;SACvB,CAAC,CACH,CACF,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM;QACR,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE,CAC1D,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,EAC1C,MAAM,CAAC,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IACrC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;IACrB,KAAK,EAAE,CAAC;CACT,CAAC,CACH,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,QAAgB,EAChB,SAA6B,EAC7B,UAA8B,EAC9B,EAAE,CACF,SAAS,KAAK,SAAS;IACvB,SAAS,CAAC,MAAM,KAAK,CAAC;IACtB,UAAU,KAAK,SAAS;IACxB,UAAU,CAAC,MAAM,KAAK,CAAC;IACrB,CAAC,CAAC,IAAI,2BAA2B,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE,CACvD,QAAQ;KACL,wBAAwB,CAAC;IACxB,QAAQ,EAAE,OAAO;IACjB,QAAQ;CACT,CAAC;KACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAExE,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,SAAiB,EAAE,UAAkB,EAAE,EAAE,CAChG,QAAQ;KACL,0BAA0B,CAAC;IAC1B,QAAQ,EAAE,OAAO;IACjB,QAAQ;IACR,SAAS;IACT,WAAW,EAAE,UAAU;CACxB,CAAC;KACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAExE,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,SAAiB,EAAE,UAAkB,EAAE,EAAE,CACjG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,QAAQ;SACZ,0BAA0B,CAAC;QAC1B,QAAQ,EAAE,OAAO;QACjB,QAAQ;KACT,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,KAAK,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACzC,QAAQ,EAAE,OAAO;QACjB,QAAQ;QACR,SAAS;QACT,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE;IAC5B,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC1C,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE;IAEhC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;QACvE,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,UAAU,IAAI,eAAe,IAAI,WAAW,EAAE,CAAC;YACjD,OAAO;gBACL,MAAM,EAAE,SAAkB;gBAC1B,gEAAgE;gBAChE,WAAW,EAAE,CAAC,eAAe,IAAI,CAAC,UAAU;aAC7C,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC;QACpD,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAChC,IAAI,EACJ,CAAC,GAAG,EAAE,EAAE,CACN,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACpD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,CACH,CACF,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,IAAK,EAAuB,CAAC;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,OAAO,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,EAAE,QAAQ,CAAC;QACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,OAAO;gBACP,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAEhC,wDAAwD;QACxD,IAAI,OAAO,GACT,MAAM,EAAE,QAAQ,KAAK,SAAS;YAC5B,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAClB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EACpD,MAAM,CAAC,QAAQ,CAChB;YACH,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,QAAQ,KAAK,QAAQ,IAAI,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;YAC5F,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAClC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClD,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBACvE,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;gBACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAU,EAAE,UAAW,CAAC,CAAC;gBAChF,OAAO,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACrD,OAAO,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACvE,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;YACjD,MAAM,aAAa,GAAG,IAAI,EAAE,SAAS,CAAC;YACtC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACnD,MAAM,eAAe,GACnB,IAAI,KAAK,SAAS;gBAClB,YAAY,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC;gBACvD,YAAY,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAU,EAAE,UAAW,CAAC,CAAC;gBACjF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAU,EAAE,UAAW,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,GAAG,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC;YAC7E,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC5B,mBAAmB,CAAC;gBACnB,QAAQ,EAAE,OAAO;gBACjB,QAAQ;aACT,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,GAAG,OAAO,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC1D,KAAK,CAAC,CAAC,QAAQ;aACZ,oBAAoB,CAAC;YACpB,QAAQ,EAAE,OAAO;YACjB,QAAQ;SACT,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/Checkpoint.d.ts

@@ -0,0 +1,55 @@
+import type { CheckpointInfo as FlyCheckpoint, CreateCheckpointError, GetCheckpointError, ListCheckpointsError, RestoreCheckpointError, StreamEvent } from "@distilled.cloud/fly-io/sprites";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { Sprite } from "./Sprite.ts";
+export interface CheckpointClient {
+    /**
+     * Create a checkpoint of the Sprite filesystem. Returns NDJSON
+     * progress events. The checkpoint id is in a `complete` event.
+     */
+    create: (options?: {
+        comment?: string;
+    }) => Effect.Effect<ReadonlyArray<StreamEvent>, CreateCheckpointError, RuntimeContext>;
+    /** List checkpoints on the Sprite. */
+    list: () => Effect.Effect<ReadonlyArray<FlyCheckpoint>, ListCheckpointsError, RuntimeContext>;
+    /** Get one checkpoint by id (`v1`, `v2`, …). */
+    get: (checkpointId: string) => Effect.Effect<FlyCheckpoint, GetCheckpointError, RuntimeContext>;
+    /**
+     * Restore the Sprite filesystem to a checkpoint. Destructive.
+     * Returns NDJSON progress events.
+     */
+    restore: (checkpointId: string) => Effect.Effect<ReadonlyArray<StreamEvent>, RestoreCheckpointError, RuntimeContext>;
+}
+/**
+ * Checkpoint and restore a {@link Sprite} filesystem.
+ *
+ *
+ * ### Create a checkpoint
+ * Bind the client in init. Provide {@link CheckpointHttp}.
+ *
+ * **Example:** Create
+ * ```typescript
+ * const checkpoint = yield* Fly.Checkpoint(Box);
+ * yield* checkpoint.create({ comment: "before deploy" });
+ * ```
+ *
+ * ### Restore
+ * Restore rewinds the filesystem. Running processes stop.
+ *
+ * **Example:** Restore v1
+ * ```typescript
+ * yield* checkpoint.restore("v1");
+ * ```
+ *
+ * :::caution[Restore is destructive]
+ * The Sprite disk goes back to that checkpoint. Later writes are gone.
+ * :::
+ *
+ * @binding
+ * @product Sprite
+ */
+export interface Checkpoint extends Binding.Service<Checkpoint, "Fly.Checkpoint", (sprite: Sprite) => Effect.Effect<CheckpointClient>> {
+}
+export declare const Checkpoint: Checkpoint;
+//# sourceMappingURL=Checkpoint.d.ts.map

package/lib/Checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Checkpoint.d.ts","sourceRoot":"","sources":["../src/Checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,IAAI,aAAa,EAC/B,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,EACZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,qBAAqB,EAAE,cAAc,CAAC,CAAC;IACvF,sCAAsC;IACtC,IAAI,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC;IAC9F,gDAAgD;IAChD,GAAG,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAChG;;;OAGG;IACH,OAAO,EAAE,CACP,YAAY,EAAE,MAAM,KACjB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,sBAAsB,EAAE,cAAc,CAAC,CAAC;CACxF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,UAAW,SAAQ,OAAO,CAAC,OAAO,CACjD,UAAU,EACV,gBAAgB,EAChB,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACpD;CAAG;AAEJ,eAAO,MAAM,UAAU,YAAgD,CAAC"}

package/lib/Checkpoint.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const Checkpoint = Binding.Service("Fly.Checkpoint");
+//# sourceMappingURL=Checkpoint.js.map

package/lib/Checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Checkpoint.js","sourceRoot":"","sources":["../src/Checkpoint.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA4D3C,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAa,gBAAgB,CAAC,CAAC"}

package/lib/CheckpointHttp.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import { Checkpoint } from "./Checkpoint.ts";
+/**
+ * HTTP implementation of {@link Checkpoint}. Provide it on the
+ * {@link Sprite}, {@link Service}, or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Sprite
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const checkpoint = yield* Fly.Checkpoint(Box);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.CheckpointHttp))
+ * ```
+ *
+ * @layer
+ * @product Sprite
+ * @provides Fly.Checkpoint
+ */
+export declare const CheckpointHttp: Layer.Layer<Checkpoint, never, never>;
+//# sourceMappingURL=CheckpointHttp.d.ts.map

package/lib/CheckpointHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CheckpointHttp.d.ts","sourceRoot":"","sources":["../src/CheckpointHttp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAyB,MAAM,iBAAiB,CAAC;AAIpE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc,uCAuC6D,CAAC"}

package/lib/CheckpointHttp.js

@@ -0,0 +1,53 @@
+import * as sprites from "@distilled.cloud/fly-io/sprites";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { Checkpoint } from "./Checkpoint.js";
+import { CredentialsFromAmbientOrEnv } from "./Credentials.js";
+import { makeHttpSpriteBinding } from "./SpriteHttp.js";
+/**
+ * HTTP implementation of {@link Checkpoint}. Provide it on the
+ * {@link Sprite}, {@link Service}, or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Sprite
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const checkpoint = yield* Fly.Checkpoint(Box);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.CheckpointHttp))
+ * ```
+ *
+ * @layer
+ * @product Sprite
+ * @provides Fly.Checkpoint
+ */
+export const CheckpointHttp = Layer.effect(Checkpoint, Effect.suspend(() => makeHttpSpriteBinding({
+    makeClient: (auth, spriteName) => ({
+        create: Effect.fn("Fly.Checkpoint.create")(function* (options) {
+            return yield* auth.authorize(sprites.createCheckpoint({
+                name: yield* spriteName,
+                comment: options?.comment,
+            }));
+        }),
+        list: Effect.fn("Fly.Checkpoint.list")(function* () {
+            return yield* auth.authorize(sprites.listCheckpoints({
+                name: yield* spriteName,
+            }));
+        }),
+        get: Effect.fn("Fly.Checkpoint.get")(function* (checkpointId) {
+            return yield* auth.authorize(sprites.getCheckpoint({
+                name: yield* spriteName,
+                checkpoint_id: checkpointId,
+            }));
+        }),
+        restore: Effect.fn("Fly.Checkpoint.restore")(function* (checkpointId) {
+            return yield* auth.authorize(sprites.restoreCheckpoint({
+                name: yield* spriteName,
+                checkpoint_id: checkpointId,
+            }));
+        }),
+    }),
+}))).pipe(Layer.provide(FetchHttpClient.layer), Layer.provide(CredentialsFromAmbientOrEnv));
+//# sourceMappingURL=CheckpointHttp.js.map

package/lib/CheckpointHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CheckpointHttp.js","sourceRoot":"","sources":["../src/CheckpointHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAyB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CACxC,UAAU,EACV,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,EAAoB,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO;YAC3D,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,OAAO,CAAC,gBAAgB,CAAC;gBACvB,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU;gBACvB,OAAO,EAAE,OAAO,EAAE,OAAO;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC;YAC9C,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,OAAO,CAAC,eAAe,CAAC;gBACtB,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU;aACxB,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY;YAC1D,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,OAAO,CAAC,aAAa,CAAC;gBACpB,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU;gBACvB,aAAa,EAAE,YAAY;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY;YAClE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,OAAO,CAAC,iBAAiB,CAAC;gBACxB,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU;gBACvB,aAAa,EAAE,YAAY;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;CACH,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC"}

package/lib/ConnectPostgres.d.ts

@@ -0,0 +1,58 @@
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type * as Redacted from "effect/Redacted";
+import type { Postgres } from "./Postgres.ts";
+/**
+ * Bind a {@link Postgres} cluster to a Fly {@link Service} and obtain
+ * the Effect-native connection strings for `Drizzle.Postgres` /
+ * `SQL.Postgres`. Alchemy transports the cluster's connection URIs
+ * automatically; callers do not configure connection-string env vars.
+ *
+ * `ConnectPostgres` is the Context tag, the type, and the callable —
+ * `yield* Fly.ConnectPostgres(Db)`. Provide {@link ConnectPostgresHttp}.
+ *
+ * **Example:** Bind Postgres in a Service
+ * ```typescript
+ * import * as Drizzle from "@alchemy.run/drizzle/Postgres";
+ *
+ * const conn = yield* Fly.ConnectPostgres(Db);
+ * const db = yield* Drizzle.Postgres(conn.connectionString);
+ *
+ * fetch: Effect.gen(function* () {
+ *   const rows = yield* db.select().from(users);
+ * });
+ * ```
+ *
+ * @binding
+ * @product Postgres
+ */
+export interface ConnectPostgres extends Binding.Service<ConnectPostgres, "Fly.ConnectPostgres", (postgres: Postgres) => Effect.Effect<ConnectPostgresClient>> {
+}
+export declare const ConnectPostgres: ConnectPostgres;
+export declare const connectEnvKeys: (postgres: Pick<Postgres, "LogicalId">) => {
+    pooled: string;
+    direct: string;
+};
+declare const PostgresUrlMissing_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.PostgresUrlMissing";
+} & Readonly<A>;
+export declare class PostgresUrlMissing extends PostgresUrlMissing_base<{
+    name: string;
+}> {
+}
+export interface ConnectPostgresClient {
+    /**
+     * Pooled PgBouncer connection string. Pass this to
+     * {@link Drizzle.Postgres} or `SQL.Postgres`.
+     */
+    connectionString: Effect.Effect<Redacted.Redacted<string>, PostgresUrlMissing, RuntimeContext>;
+    /**
+     * Direct (non-PgBouncer) connection string. Use this for session-scoped
+     * features (advisory locks, `LISTEN/NOTIFY`) when you are not going
+     * through the pooled URL.
+     */
+    directConnectionString: Effect.Effect<Redacted.Redacted<string>, PostgresUrlMissing, RuntimeContext>;
+}
+export {};
+//# sourceMappingURL=ConnectPostgres.d.ts.map

package/lib/ConnectPostgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectPostgres.d.ts","sourceRoot":"","sources":["../src/ConnectPostgres.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,OAAO,CACtD,eAAe,EACf,qBAAqB,EACrB,CAAC,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAC7D;CAAG;AAEJ,eAAO,MAAM,eAAe,iBAA0D,CAAC;AAEvF,eAAO,MAAM,cAAc,aAAc,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;IAGhE,MAAM;IACN,MAAM;CAET,CAAC;;;;AAEF,qBAAa,kBAAmB,SAAQ,wBAA2C;IACjF,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;CAAG;AAEL,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC/F;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,CAAC,MAAM,CACnC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EACzB,kBAAkB,EAClB,cAAc,CACf,CAAC;CACH"}

package/lib/ConnectPostgres.js

@@ -0,0 +1,13 @@
+import * as Binding from "alchemy/Binding";
+import * as Data from "effect/Data";
+export const ConnectPostgres = Binding.Service("Fly.ConnectPostgres");
+export const connectEnvKeys = (postgres) => {
+    const id = postgres.LogicalId.replaceAll(/[^a-zA-Z0-9]/g, "_").toUpperCase();
+    return {
+        pooled: `FLY_POSTGRES_${id}_POOLED`,
+        direct: `FLY_POSTGRES_${id}_DIRECT`,
+    };
+};
+export class PostgresUrlMissing extends Data.TaggedError("Fly.PostgresUrlMissing") {
+}
+//# sourceMappingURL=ConnectPostgres.js.map

package/lib/ConnectPostgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectPostgres.js","sourceRoot":"","sources":["../src/ConnectPostgres.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAE3C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAmCpC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAkB,qBAAqB,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAqC,EAAE,EAAE;IACtE,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,OAAO;QACL,MAAM,EAAE,gBAAgB,EAAE,SAAS;QACnC,MAAM,EAAE,gBAAgB,EAAE,SAAS;KACpC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAE/E;CAAG"}

package/lib/ConnectPostgresHttp.d.ts

@@ -0,0 +1,26 @@
+import * as Layer from "effect/Layer";
+import { ConnectPostgres } from "./ConnectPostgres.ts";
+/**
+ * Implementation of {@link ConnectPostgres}. Provide it on the
+ * {@link Service} Effect.
+ *
+ * Registers the cluster attachment for Fly's private network. Alchemy
+ * transports each cluster's connection URIs through resource Outputs,
+ * so callers do not configure connection-string environment variables.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Service
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const conn = yield* Fly.ConnectPostgres(Db);
+ *   const db = yield* Drizzle.Postgres(conn.connectionString);
+ * }).pipe(Effect.provide(Fly.ConnectPostgresHttp))
+ * ```
+ *
+ * @layer
+ * @product Postgres
+ * @provides Fly.ConnectPostgres
+ */
+export declare const ConnectPostgresHttp: Layer.Layer<ConnectPostgres, never, never>;
+//# sourceMappingURL=ConnectPostgresHttp.d.ts.map