@alchemy.run/fly 0.0.0 → 2.0.0-beta.85

package/lib/DeploymentImages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeploymentImages.js","sourceRoot":"","sources":["../src/DeploymentImages.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,mBAAmB,IAAI,IAAI,EAAE,MAAM,eAAe,CAAC;AAE5D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAG5F,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAW,EAAE,CACzD,uDAAuD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEtE,MAAM,SAAS,GAAG,CAAC,IAAkC,EAAuB,EAAE,CAC5E,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAEzD,MAAM,KAAK,GAAG,CAAC,IAAkC,EAAW,EAAE,CAC5D,IAAI,CAAC,MAAM,GAAG,CAAC;IACf,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;IAC1D,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAAoC,EACH,EAAE;IACnC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC;IACtC,IAAI,CAAC,UAAU,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,IAAI,IAAI,EAAE;QAChB,KAAK,EAAE,KAAK,IAAI,EAAE;KACnB,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAkC,EAAsB,EAAE,CACvF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE5D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAuB,EAAmC,EAAE;IACzF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,IAA8C,EAC9C,KAA+C,EACtC,EAAE;IACX,MAAM,CAAC,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,oGAAoG;AACpG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAsC,EAAW,EAAE;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1F,OAAO,YAAY,CACjB,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAChD,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAC/B,CAAC;AACJ,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAwB,EACxB,IAAkC,EACJ,EAAE;IAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,IACE,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI;QACxC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM;QACpF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE7E,OAAO,SAAS,CAAC;IACnB,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,SAAS;YACZ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAK,CAAC;SACnC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC,CAAC"}

package/lib/DeploymentState.d.ts

@@ -0,0 +1,17 @@
+import type { FlyMachineConfig } from "@distilled.cloud/fly-io/machines";
+type DeploymentState = {
+    protocol: "legacy" | "1" | "2";
+} | {
+    protocol: "invalid";
+    reason: string;
+};
+/** Observation and reconciliation must agree before treating a Machine as legacy. */
+export declare const classifyDeploymentState: (machine: {
+    config?: FlyMachineConfig;
+}) => DeploymentState;
+/** A partial protocol-2 generation is valid only when every member agrees on its identity. */
+export declare const validProtocol2Generation: (group: readonly {
+    config?: FlyMachineConfig;
+}[]) => boolean;
+export {};
+//# sourceMappingURL=DeploymentState.d.ts.map

package/lib/DeploymentState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeploymentState.d.ts","sourceRoot":"","sources":["../src/DeploymentState.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAIzE,KAAK,eAAe,GAAG;IAAE,QAAQ,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG,qFAAqF;AACrF,eAAO,MAAM,uBAAuB,YAAa;IAC/C,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,KAAG,eAoCH,CAAC;AAiCF,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,UAC5B,SAAS;IAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAAE,EAAE,KAC9C,OAsBF,CAAC"}

package/lib/DeploymentState.js

@@ -0,0 +1,87 @@
+import { pinsFromConfig, sameImageSet, validObservedImageSet } from "./DeploymentImages.js";
+import { alchemyMetadataKeys as keys } from "./Metadata.js";
+/** Observation and reconciliation must agree before treating a Machine as legacy. */
+export const classifyDeploymentState = (machine) => {
+    const metadata = machine.config?.metadata;
+    const protocol = metadata?.[keys.protocol];
+    if (protocol !== undefined && protocol !== "1" && protocol !== "2")
+        return {
+            protocol: "invalid",
+            reason: `Unknown deployment protocol ${protocol}.`,
+        };
+    if (protocol !== "2" && metadata?.[keys.containerImageSet] !== undefined)
+        return {
+            protocol: "invalid",
+            reason: "Container image metadata requires deployment protocol 2.",
+        };
+    if (protocol === "2")
+        return validProtocol2RecoveryMetadata(machine)
+            ? { protocol }
+            : {
+                protocol: "invalid",
+                reason: "Invalid protocol-2 image set or recovery metadata.",
+            };
+    if (protocol === "1") {
+        const replica = metadata?.[keys.replica] ?? "";
+        if (!/^(0|[1-9]\d*)$/.test(replica) ||
+            !Number.isSafeInteger(Number(replica)) ||
+            !["candidate", "promoting", "validating", "active", "retiring"].includes(metadata?.[keys.phase] ?? ""))
+            return {
+                protocol: "invalid",
+                reason: "Invalid protocol-1 replica index or deployment phase.",
+            };
+        return { protocol };
+    }
+    return { protocol: "legacy" };
+};
+/** Required recovery fields for a complete protocol-2 generation member. */
+const validProtocol2RecoveryMetadata = (machine) => {
+    if (!validObservedImageSet(machine))
+        return false;
+    const recorded = machine.config?.metadata;
+    const countText = recorded?.[keys.count] ?? "";
+    const sequenceText = recorded?.[keys.sequence] ?? "";
+    const replicaText = recorded?.[keys.replica] ?? "";
+    const count = Number(countText);
+    const index = Number(replicaText);
+    const roles = (recorded?.[keys.roles] ?? "").split(",");
+    return (Boolean(recorded?.[keys.generation]?.trim()) &&
+        Boolean(recorded?.[keys.workload]?.trim()) &&
+        /^[1-9]\d*$/.test(countText) &&
+        Number.isSafeInteger(count) &&
+        /^[1-9]\d*$/.test(sequenceText) &&
+        Number.isSafeInteger(Number(sequenceText)) &&
+        /^(0|[1-9]\d*)$/.test(replicaText) &&
+        Number.isSafeInteger(index) &&
+        index < count &&
+        roles.length === count &&
+        roles.includes("run") &&
+        roles.every((role) => role === "run" || role === "idle") &&
+        recorded?.[keys.role] === roles[index] &&
+        ["candidate", "promoting", "validating", "active", "retiring"].includes(recorded?.[keys.phase] ?? "") &&
+        ["true", "false"].includes(recorded?.[keys.restored] ?? ""));
+};
+/** A partial protocol-2 generation is valid only when every member agrees on its identity. */
+export const validProtocol2Generation = (group) => {
+    const first = group[0]?.config?.metadata;
+    if (!first || group.length === 0)
+        return false;
+    const indices = new Set();
+    for (const machine of group) {
+        const metadata = machine.config?.metadata;
+        const replica = metadata?.[keys.replica];
+        if (!validProtocol2RecoveryMetadata(machine) ||
+            metadata?.[keys.generation] !== first[keys.generation] ||
+            metadata?.[keys.count] !== first[keys.count] ||
+            metadata?.[keys.sequence] !== first[keys.sequence] ||
+            metadata?.[keys.workload] !== first[keys.workload] ||
+            metadata?.[keys.roles] !== first[keys.roles] ||
+            replica === undefined ||
+            indices.has(replica) ||
+            !sameImageSet(pinsFromConfig(machine.config), pinsFromConfig(group[0]?.config)))
+            return false;
+        indices.add(replica);
+    }
+    return true;
+};
+//# sourceMappingURL=DeploymentState.js.map

package/lib/DeploymentState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeploymentState.js","sourceRoot":"","sources":["../src/DeploymentState.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAE,mBAAmB,IAAI,IAAI,EAAE,MAAM,eAAe,CAAC;AAI5D,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAEvC,EAAmB,EAAE;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1C,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG;QAChE,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,+BAA+B,QAAQ,GAAG;SACnD,CAAC;IACJ,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,SAAS;QACtE,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,0DAA0D;SACnE,CAAC;IACJ,IAAI,QAAQ,KAAK,GAAG;QAClB,OAAO,8BAA8B,CAAC,OAAO,CAAC;YAC5C,CAAC,CAAC,EAAE,QAAQ,EAAE;YACd,CAAC,CAAC;gBACE,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,oDAAoD;aAC7D,CAAC;IACR,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/C,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC/B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CACtE,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAC7B;YAED,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,uDAAuD;aAChE,CAAC;QACJ,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,8BAA8B,GAAG,CAAC,OAAsC,EAAW,EAAE;IACzF,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,CACL,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1C,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,GAAG,KAAK;QACb,KAAK,CAAC,MAAM,KAAK,KAAK;QACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;QACxD,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;QACtC,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CACrE,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAC7B;QACD,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,KAA+C,EACtC,EAAE;IACX,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IACE,CAAC,8BAA8B,CAAC,OAAO,CAAC;YACxC,QAAQ,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtD,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAC5C,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClD,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClD,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAC5C,OAAO,KAAK,SAAS;YACrB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACpB,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAE/E,OAAO,KAAK,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/lib/Encrypt.d.ts

@@ -0,0 +1,50 @@
+import type { EncryptSecretKeyError } from "@distilled.cloud/fly-io/machines";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { SecretKey } from "./SecretKey.ts";
+export interface EncryptRequest {
+    /** Bytes to encrypt. */
+    plaintext: Uint8Array | ArrayLike<number>;
+    /** Optional AEAD associated data. */
+    associatedData?: Uint8Array | ArrayLike<number>;
+}
+export interface EncryptResult {
+    ciphertext: Uint8Array;
+}
+/**
+ * Encrypt with a Fly {@link SecretKey} (`nacl_box`, `nacl_secretbox`,
+ * `xaes256gcm`, …). The App and key name are fixed by `Encrypt(key)`.
+ *
+ *
+ * ### Encrypt a payload
+ * Provide {@link EncryptHttp} on the Action or Service Effect. Fly
+ * crypto ops need a KMS token. Org API tokens are typed `Forbidden`.
+ *
+ * **Example:** Encrypt
+ * ```typescript
+ * const encrypt = yield* Fly.Encrypt(Box);
+ * const { ciphertext } = yield* encrypt({
+ *   plaintext: new TextEncoder().encode("attack at dawn"),
+ * });
+ * ```
+ *
+ * ### Associated data
+ * `associatedData` is optional AEAD associated data. {@link Decrypt}
+ * must pass the same bytes.
+ *
+ * **Example:** AEAD
+ * ```typescript
+ * const { ciphertext } = yield* encrypt({
+ *   plaintext: bytes,
+ *   associatedData: nonce,
+ * });
+ * ```
+ *
+ * @binding
+ * @product Secret Key
+ */
+export interface Encrypt extends Binding.Service<Encrypt, "Fly.Encrypt", (key: SecretKey) => Effect.Effect<(request: EncryptRequest) => Effect.Effect<EncryptResult, EncryptSecretKeyError, RuntimeContext>>> {
+}
+export declare const Encrypt: Encrypt;
+//# sourceMappingURL=Encrypt.d.ts.map

package/lib/Encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Encrypt.d.ts","sourceRoot":"","sources":["../src/Encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,wBAAwB;IACxB,SAAS,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1C,qCAAqC;IACrC,cAAc,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,WAAW,OAAQ,SAAQ,OAAO,CAAC,OAAO,CAC9C,OAAO,EACP,aAAa,EACb,CACE,GAAG,EAAE,SAAS,KACX,MAAM,CAAC,MAAM,CAChB,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,EAAE,cAAc,CAAC,CACjG,CACF;CAAG;AAEJ,eAAO,MAAM,OAAO,SAA0C,CAAC"}

package/lib/Encrypt.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const Encrypt = Binding.Service("Fly.Encrypt");
+//# sourceMappingURL=Encrypt.js.map

package/lib/Encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Encrypt.js","sourceRoot":"","sources":["../src/Encrypt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA0D3C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAU,aAAa,CAAC,CAAC"}

package/lib/EncryptHttp.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import { Encrypt } from "./Encrypt.ts";
+/**
+ * HTTP implementation of {@link Encrypt}. Provide it on the
+ * {@link Service} or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Service
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const encrypt = yield* Fly.Encrypt(Box);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.EncryptHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret Key
+ * @provides Fly.Encrypt
+ */
+export declare const EncryptHttp: Layer.Layer<Encrypt, never, never>;
+//# sourceMappingURL=EncryptHttp.d.ts.map

package/lib/EncryptHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptHttp.d.ts","sourceRoot":"","sources":["../src/EncryptHttp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAuB,MAAM,cAAc,CAAC;AAG5D;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,WAAW,oCAqBgE,CAAC"}

package/lib/EncryptHttp.js

@@ -0,0 +1,39 @@
+import * as machines from "@distilled.cloud/fly-io/machines";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { CredentialsFromAmbientOrEnv } from "./Credentials.js";
+import { Encrypt } from "./Encrypt.js";
+import { base64ToBytes, bytesToBase64, makeHttpSecretKeyBinding } from "./SecretKeyHttp.js";
+/**
+ * HTTP implementation of {@link Encrypt}. Provide it on the
+ * {@link Service} or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Service
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const encrypt = yield* Fly.Encrypt(Box);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.EncryptHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret Key
+ * @provides Fly.Encrypt
+ */
+export const EncryptHttp = Layer.effect(Encrypt, Effect.suspend(() => makeHttpSecretKeyBinding({
+    makeClient: (auth, appName, secretName) => Effect.fn("Fly.Encrypt")(function* (request) {
+        const res = yield* auth.authorize(machines.encryptSecretKey({
+            app_name: yield* appName,
+            secret_name: yield* secretName,
+            plaintext: bytesToBase64(request.plaintext),
+            associated_data: request.associatedData === undefined
+                ? undefined
+                : bytesToBase64(request.associatedData),
+        }));
+        return { ciphertext: base64ToBytes(res.ciphertext) };
+    }),
+}))).pipe(Layer.provide(FetchHttpClient.layer), Layer.provide(CredentialsFromAmbientOrEnv));
+//# sourceMappingURL=EncryptHttp.js.map

package/lib/EncryptHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptHttp.js","sourceRoot":"","sources":["../src/EncryptHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAuB,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE5F;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CACrC,OAAO,EACP,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,wBAAwB,CAAC;IACvB,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CACxC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAuB;QACzD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC/B,QAAQ,CAAC,gBAAgB,CAAC;YACxB,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO;YACxB,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU;YAC9B,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,eAAe,EACb,OAAO,CAAC,cAAc,KAAK,SAAS;gBAClC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;SAC5C,CAAC,CACH,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;IACvD,CAAC,CAAC;CACL,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC"}

package/lib/Environment.d.ts

@@ -0,0 +1,45 @@
+import type { Config } from "@distilled.cloud/fly-io";
+import { Credentials } from "@distilled.cloud/fly-io";
+import * as machines from "@distilled.cloud/fly-io/machines";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as Layer from "effect/Layer";
+declare const FlyOrgNotFound_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.OrgNotFound";
+} & Readonly<A>;
+export declare class FlyOrgNotFound extends FlyOrgNotFound_base<{
+    message: string;
+}> {
+}
+/**
+ * Fully-resolved Fly.io environment for a stack.
+ *
+ * `{ apiKey, apiBaseUrl }` comes from distilled `Credentials`. `orgSlug` is
+ * the current token's organization (`getCurrentToken` → `tokens[0].org_slug`),
+ * cached for the process. Resolve it inside lifecycle operations with
+ * `FlyEnvironment.current`.
+ */
+export type FlyEnvironmentShape = Config & {
+    readonly orgSlug: string;
+};
+declare const FlyEnvironment_base: Context.ServiceClass<FlyEnvironment, "Fly::Environment", Effect.Effect<FlyEnvironmentShape, never, never>>;
+export declare class FlyEnvironment extends FlyEnvironment_base {
+    static current: Effect.Effect<FlyEnvironmentShape, never, FlyEnvironment>;
+    readonly kind: "Environment";
+}
+/**
+ * Discover the current token's organization slug via `getCurrentToken`.
+ * Used by {@link fromCredentials} and by {@link Catalog.currentOrgSlug}.
+ */
+export declare const resolveOrgSlug: () => Effect.Effect<string, FlyOrgNotFound | machines.GetCurrentTokenError, machines.FlyIoOpContext>;
+/**
+ * Build a `FlyEnvironment` layer from the distilled `Credentials`
+ * service. Provide this after `Credentials.fromAuthProvider()`.
+ *
+ * `orgSlug` is resolved from `getCurrentToken` and cached so App.list /
+ * Catalog do not re-hit `/tokens/current` on every call.
+ */
+export declare const fromCredentials: () => Layer.Layer<FlyEnvironment, never, Credentials | HttpClient.HttpClient>;
+export {};
+//# sourceMappingURL=Environment.d.ts.map

package/lib/Environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Environment.d.ts","sourceRoot":"","sources":["../src/Environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;;;;AAEtC,qBAAa,cAAe,SAAQ,oBAAoC;IACtE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;CAAG;AAEL;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;;AAEF,qBAAa,cAAe,SAAQ,mBAGb;IACrB,MAAM,CAAC,OAAO,4DAAoC;IAClD,QAAQ,CAAC,IAAI,EAAG,aAAa,CAAU;CACxC;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,sGASzB,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,+EAyBzB,CAAC"}

package/lib/Environment.js

@@ -0,0 +1,43 @@
+import { Credentials } from "@distilled.cloud/fly-io";
+import * as machines from "@distilled.cloud/fly-io/machines";
+import * as Context from "effect/Context";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as Layer from "effect/Layer";
+export class FlyOrgNotFound extends Data.TaggedError("Fly.OrgNotFound") {
+}
+export class FlyEnvironment extends Context.Service()("Fly::Environment") {
+    static current = FlyEnvironment.use((env) => env);
+    kind = "Environment";
+}
+/**
+ * Discover the current token's organization slug via `getCurrentToken`.
+ * Used by {@link fromCredentials} and by {@link Catalog.currentOrgSlug}.
+ */
+export const resolveOrgSlug = Effect.fn(function* () {
+    const info = yield* machines.getCurrentToken({});
+    const orgSlug = info.tokens?.[0]?.org_slug;
+    if (orgSlug === undefined || orgSlug.length === 0) {
+        return yield* new FlyOrgNotFound({
+            message: "Fly current token did not include an organization slug.",
+        });
+    }
+    return orgSlug;
+});
+/**
+ * Build a `FlyEnvironment` layer from the distilled `Credentials`
+ * service. Provide this after `Credentials.fromAuthProvider()`.
+ *
+ * `orgSlug` is resolved from `getCurrentToken` and cached so App.list /
+ * Catalog do not re-hit `/tokens/current` on every call.
+ */
+export const fromCredentials = () => Layer.effect(FlyEnvironment, Effect.gen(function* () {
+    const creds = yield* Credentials;
+    const http = yield* HttpClient.HttpClient;
+    return yield* creds.pipe(Effect.flatMap((resolved) => resolveOrgSlug().pipe(Effect.provide(Layer.mergeAll(Layer.succeed(Credentials, creds), Layer.succeed(HttpClient.HttpClient, http))), Effect.map((orgSlug) => ({
+        ...resolved,
+        orgSlug,
+    })))), Effect.orDie, Effect.cached);
+}));
+//# sourceMappingURL=Environment.js.map

package/lib/Environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Environment.js","sourceRoot":"","sources":["../src/Environment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAEpE;CAAG;AAcL,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAGhD,CAAC,kBAAkB,CAAC;IACrB,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,GAAG,aAAsB,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC;YAC/B,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,KAAK,CAAC,MAAM,CACV,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC1C,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CACtB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,cAAc,EAAE,CAAC,IAAI,CACnB,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,QAAQ,CACZ,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,EACjC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAC3C,CACF,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvB,GAAG,QAAQ;QACX,OAAO;KACR,CAAC,CAAC,CACJ,CACF,EACD,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,MAAM,CACd,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Errors.d.ts

@@ -0,0 +1,18 @@
+declare const TigrisCredentialsMissing_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.TigrisCredentialsMissing";
+} & Readonly<A>;
+/**
+ * A {@link Bucket}'s Tigris credentials could not be resolved when a
+ * bound S3 operation ran.
+ *
+ * Tigris hands out the access key pair once, at add-on creation. If the
+ * Bucket attributes reaching the binding carry no key pair — an adopted
+ * bucket, or one whose create-only secrets were never persisted — the
+ * operation fails with this instead of signing an anonymous request.
+ */
+export declare class TigrisCredentialsMissing extends TigrisCredentialsMissing_base<{
+    resourceName: string;
+}> {
+}
+export {};
+//# sourceMappingURL=Errors.d.ts.map

package/lib/Errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Errors.d.ts","sourceRoot":"","sources":["../src/Errors.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,SAAQ,8BAAiD;IAC7F,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;CAAG"}

package/lib/Errors.js

@@ -0,0 +1,13 @@
+import * as Data from "effect/Data";
+/**
+ * A {@link Bucket}'s Tigris credentials could not be resolved when a
+ * bound S3 operation ran.
+ *
+ * Tigris hands out the access key pair once, at add-on creation. If the
+ * Bucket attributes reaching the binding carry no key pair — an adopted
+ * bucket, or one whose create-only secrets were never persisted — the
+ * operation fails with this instead of signing an anonymous request.
+ */
+export class TigrisCredentialsMissing extends Data.TaggedError("Fly.TigrisCredentialsMissing") {
+}
+//# sourceMappingURL=Errors.js.map

package/lib/Errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Errors.js","sourceRoot":"","sources":["../src/Errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAyB,SAAQ,IAAI,CAAC,WAAW,CAAC,8BAA8B,CAE3F;CAAG"}

package/lib/Exec.d.ts

@@ -0,0 +1,41 @@
+import type { ExecCommandError, ExecResult } from "@distilled.cloud/fly-io/sprites";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { Sprite } from "./Sprite.ts";
+export interface ExecRequest {
+    /** Command and args. */
+    cmd: string[];
+    /** Explicit path to the executable. */
+    path?: string;
+    /** Read stdin from {@link body}. */
+    stdin?: boolean;
+    /** Environment variables as `KEY=VALUE`. */
+    env?: string[];
+    /** Working directory. */
+    dir?: string;
+    /** Stdin bytes when {@link stdin} is true. */
+    body?: Uint8Array | string;
+}
+/**
+ * Run a command on a {@link Sprite} via `POST /sprites/{name}/exec`.
+ *
+ *
+ * ### Exec a command
+ * Bind the client in init. Provide {@link ExecHttp}. The Sprite name
+ * is fixed by `Exec(box)`. Alchemy transports that name and the
+ * deployment's org token to the caller automatically.
+ *
+ * **Example:** List files
+ * ```typescript
+ * const exec = yield* Fly.Exec(Box);
+ * const result = yield* exec({ cmd: ["ls", "-la"] });
+ * ```
+ *
+ * @binding
+ * @product Sprite
+ */
+export interface Exec extends Binding.Service<Exec, "Fly.Exec", (sprite: Sprite) => Effect.Effect<(request: ExecRequest) => Effect.Effect<ExecResult, ExecCommandError, RuntimeContext>>> {
+}
+export declare const Exec: Exec;
+//# sourceMappingURL=Exec.d.ts.map

package/lib/Exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Exec.d.ts","sourceRoot":"","sources":["../src/Exec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,wBAAwB;IACxB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,IAAK,SAAQ,OAAO,CAAC,OAAO,CAC3C,IAAI,EACJ,UAAU,EACV,CACE,MAAM,EAAE,MAAM,KACX,MAAM,CAAC,MAAM,CAChB,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,CAAC,CACtF,CACF;CAAG;AAEJ,eAAO,MAAM,IAAI,MAAoC,CAAC"}

package/lib/Exec.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const Exec = Binding.Service("Fly.Exec");
+//# sourceMappingURL=Exec.js.map

package/lib/Exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Exec.js","sourceRoot":"","sources":["../src/Exec.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAgD3C,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAO,UAAU,CAAC,CAAC"}

package/lib/ExecHttp.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import { Exec } from "./Exec.ts";
+/**
+ * HTTP implementation of {@link Exec}. Provide it on the
+ * {@link Sprite}, {@link Service}, or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Sprite
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const exec = yield* Fly.Exec(Box);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.ExecHttp))
+ * ```
+ *
+ * @layer
+ * @product Sprite
+ * @provides Fly.Exec
+ */
+export declare const ExecHttp: Layer.Layer<Exec, never, never>;
+//# sourceMappingURL=ExecHttp.d.ts.map

package/lib/ExecHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecHttp.d.ts","sourceRoot":"","sources":["../src/ExecHttp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAC;AAGnD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,QAAQ,iCAoBmE,CAAC"}

package/lib/ExecHttp.js

@@ -0,0 +1,39 @@
+import * as sprites from "@distilled.cloud/fly-io/sprites";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { CredentialsFromAmbientOrEnv } from "./Credentials.js";
+import { Exec } from "./Exec.js";
+import { makeHttpSpriteBinding } from "./SpriteHttp.js";
+/**
+ * HTTP implementation of {@link Exec}. Provide it on the
+ * {@link Sprite}, {@link Service}, or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Sprite
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const exec = yield* Fly.Exec(Box);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.ExecHttp))
+ * ```
+ *
+ * @layer
+ * @product Sprite
+ * @provides Fly.Exec
+ */
+export const ExecHttp = Layer.effect(Exec, Effect.suspend(() => makeHttpSpriteBinding({
+    makeClient: (auth, spriteName) => Effect.fn("Fly.Exec")(function* (request) {
+        return yield* auth.authorize(sprites.execCommand({
+            name: yield* spriteName,
+            cmd: request.cmd,
+            path: request.path,
+            stdin: request.stdin,
+            env: request.env,
+            dir: request.dir,
+            body: request.body,
+        }));
+    }),
+}))).pipe(Layer.provide(FetchHttpClient.layer), Layer.provide(CredentialsFromAmbientOrEnv));
+//# sourceMappingURL=ExecHttp.js.map

package/lib/ExecHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecHttp.js","sourceRoot":"","sources":["../src/ExecHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAClC,IAAI,EACJ,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAC/B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAoB;QACnD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,OAAO,CAAC,WAAW,CAAC;YAClB,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU;YACvB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;CACL,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC"}

package/lib/GetObject.d.ts

@@ -0,0 +1,34 @@
+import type * as S3 from "@distilled.cloud/aws/s3";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { Bucket } from "./Bucket.ts";
+import type { TigrisCredentialsMissing } from "./Errors.ts";
+export interface GetObjectRequest extends Omit<S3.GetObjectRequest, "Bucket"> {
+}
+/**
+ * Runtime binding for Tigris `GetObject` over the S3 API.
+ *
+ * Bind this operation to a {@link Bucket} in Service init. Provide
+ * {@link GetObjectHttp}.
+ *
+ *
+ * ### Reading Objects
+ * **Example:** Read an Object and Decode Its Body
+ * ```typescript
+ * const getObject = yield* Fly.GetObject(Data);
+ *
+ * const text = yield* getObject({ Key: "hello.txt" }).pipe(
+ *   Effect.flatMap((result) =>
+ *     Stream.mkString(Stream.decodeText(result.Body!)),
+ *   ),
+ * );
+ * ```
+ *
+ * @binding
+ * @product Bucket
+ */
+export interface GetObject extends Binding.Service<GetObject, "Fly.GetObject", (bucket: Bucket) => Effect.Effect<(request: GetObjectRequest) => Effect.Effect<S3.GetObjectOutput, S3.GetObjectError | TigrisCredentialsMissing, RuntimeContext>>> {
+}
+export declare const GetObject: GetObject;
+//# sourceMappingURL=GetObject.d.ts.map

package/lib/GetObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetObject.d.ts","sourceRoot":"","sources":["../src/GetObject.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC;CAAG;AAEhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,SAAU,SAAQ,OAAO,CAAC,OAAO,CAChD,SAAS,EACT,eAAe,EACf,CACE,MAAM,EAAE,MAAM,KACX,MAAM,CAAC,MAAM,CAChB,CACE,OAAO,EAAE,gBAAgB,KACtB,MAAM,CAAC,MAAM,CAChB,EAAE,CAAC,eAAe,EAClB,EAAE,CAAC,cAAc,GAAG,wBAAwB,EAC5C,cAAc,CACf,CACF,CACF;CAAG;AAEJ,eAAO,MAAM,SAAS,WAA8C,CAAC"}

package/lib/GetObject.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const GetObject = Binding.Service("Fly.GetObject");
+//# sourceMappingURL=GetObject.js.map

package/lib/GetObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetObject.js","sourceRoot":"","sources":["../src/GetObject.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA8C3C,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAY,eAAe,CAAC,CAAC"}

package/lib/GetObjectHttp.d.ts

@@ -0,0 +1,12 @@
+import * as Layer from "effect/Layer";
+import { GetObject } from "./GetObject.ts";
+/**
+ * HTTP implementation of {@link GetObject}. Calls distilled S3
+ * `getObject` against the Tigris endpoint with the bucket's credentials.
+ *
+ * @layer
+ * @product Bucket
+ * @provides Fly.GetObject
+ */
+export declare const GetObjectHttp: Layer.Layer<GetObject, never, never>;
+//# sourceMappingURL=GetObjectHttp.d.ts.map

package/lib/GetObjectHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetObjectHttp.d.ts","sourceRoot":"","sources":["../src/GetObjectHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,sCAMzB,CAAC"}

package/lib/GetObjectHttp.js

@@ -0,0 +1,17 @@
+import * as S3 from "@distilled.cloud/aws/s3";
+import * as Layer from "effect/Layer";
+import { makeTigrisS3Binding } from "./BucketBinding.js";
+import { GetObject } from "./GetObject.js";
+/**
+ * HTTP implementation of {@link GetObject}. Calls distilled S3
+ * `getObject` against the Tigris endpoint with the bucket's credentials.
+ *
+ * @layer
+ * @product Bucket
+ * @provides Fly.GetObject
+ */
+export const GetObjectHttp = Layer.effect(GetObject, makeTigrisS3Binding({
+    tag: "Fly.GetObject",
+    operation: S3.getObject,
+}));
+//# sourceMappingURL=GetObjectHttp.js.map

package/lib/GetObjectHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetObjectHttp.js","sourceRoot":"","sources":["../src/GetObjectHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CACvC,SAAS,EACT,mBAAmB,CAAC;IAClB,GAAG,EAAE,eAAe;IACpB,SAAS,EAAE,EAAE,CAAC,SAAS;CACxB,CAAC,CACH,CAAC"}