@alchemy.run/fly 0.0.0 → 2.0.0-beta.85

package/lib/GetSecret.d.ts

@@ -0,0 +1,44 @@
+import type { AppSecret, GetSecretError } from "@distilled.cloud/fly-io/machines";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { Secret } from "./Secret.ts";
+/**
+ * Fetch one Fly.io App secret. The App and name are fixed by
+ * `GetSecret(secret)`. Calls take no `app_name`.
+ *
+ *
+ * ### Read a secret
+ * Bind the client in init. Call it from `fetch` or an Action body.
+ * Provide {@link GetSecretHttp}. Alchemy transports the bound App name,
+ * secret name, and deployment's org token automatically. There is no
+ * need to configure `FLY_SECRET_*` environment variables.
+ *
+ * Fly only returns plaintext from a Machine in the same App. From a
+ * deploy-time Action you get metadata (name, digest, timestamps).
+ *
+ * **Example:** GetSecret
+ * ```typescript
+ * export default class Api extends Fly.Service<Api>()(
+ *   "Api",
+ *   { app: Site, main: import.meta.url, port: 3000 },
+ *   Effect.gen(function* () {
+ *     const get = yield* Fly.GetSecret(ApiToken);
+ *
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         const got = yield* get().pipe(Effect.orDie);
+ *         return HttpServerResponse.json({ name: got.name });
+ *       }),
+ *     };
+ *   }).pipe(Effect.provide(Fly.GetSecretHttp)),
+ * ) {}
+ * ```
+ *
+ * @binding
+ * @product Secret
+ */
+export interface GetSecret extends Binding.Service<GetSecret, "Fly.GetSecret", (secret: Secret) => Effect.Effect<() => Effect.Effect<AppSecret, GetSecretError, RuntimeContext>>> {
+}
+export declare const GetSecret: GetSecret;
+//# sourceMappingURL=GetSecret.d.ts.map

package/lib/GetSecret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetSecret.d.ts","sourceRoot":"","sources":["../src/GetSecret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,WAAW,SAAU,SAAQ,OAAO,CAAC,OAAO,CAChD,SAAS,EACT,eAAe,EACf,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAClG;CAAG;AAEJ,eAAO,MAAM,SAAS,WAA8C,CAAC"}

package/lib/GetSecret.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const GetSecret = Binding.Service("Fly.GetSecret");
+//# sourceMappingURL=GetSecret.js.map

package/lib/GetSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetSecret.js","sourceRoot":"","sources":["../src/GetSecret.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA8C3C,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAY,eAAe,CAAC,CAAC"}

package/lib/GetSecretHttp.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import { GetSecret } from "./GetSecret.ts";
+/**
+ * HTTP implementation of {@link GetSecret}. Provide it on the
+ * {@link Service} or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Service
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const get = yield* Fly.GetSecret(ApiToken);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.GetSecretHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret
+ * @provides Fly.GetSecret
+ */
+export declare const GetSecretHttp: Layer.Layer<GetSecret, never, never>;
+//# sourceMappingURL=GetSecretHttp.d.ts.map

package/lib/GetSecretHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetSecretHttp.d.ts","sourceRoot":"","sources":["../src/GetSecretHttp.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,sCA+B8D,CAAC"}

package/lib/GetSecretHttp.js

@@ -0,0 +1,50 @@
+import * as machines from "@distilled.cloud/fly-io/machines";
+import * as Config from "effect/Config";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+import { CredentialsFromAmbientOrEnv } from "./Credentials.js";
+import { GetSecret } from "./GetSecret.js";
+import { makeHttpSecretBinding } from "./SecretHttp.js";
+/**
+ * HTTP implementation of {@link GetSecret}. Provide it on the
+ * {@link Service} or Action Effect.
+ *
+ *
+ * ### Provide the layer
+ * **Example:** On a Service
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const get = yield* Fly.GetSecret(ApiToken);
+ *   // ...
+ * }).pipe(Effect.provide(Fly.GetSecretHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret
+ * @provides Fly.GetSecret
+ */
+export const GetSecretHttp = Layer.effect(GetSecret, Effect.suspend(() => makeHttpSecretBinding({
+    makeClient: (auth, appName, secretName) => Effect.fn("Fly.GetSecret")(function* () {
+        const name = yield* secretName;
+        if (globalThis.__ALCHEMY_RUNTIME__) {
+            // Fly injects App secrets as env vars on the Machine. Prefer
+            // that over getSecret — org tokens still cannot read plaintext
+            // from outside the App, and the env is already the source of
+            // truth once the secret exists.
+            const fromEnv = yield* Config.Redacted(name).pipe(Effect.map((value) => ({
+                name,
+                value: Redacted.value(value),
+            })), Effect.orElseSucceed(() => undefined));
+            if (fromEnv !== undefined)
+                return fromEnv;
+        }
+        return yield* auth.authorize(machines.getSecret({
+            app_name: yield* appName,
+            secret_name: name,
+            show_secrets: globalThis.__ALCHEMY_RUNTIME__ === true,
+        }));
+    }),
+}))).pipe(Layer.provide(FetchHttpClient.layer), Layer.provide(CredentialsFromAmbientOrEnv));
+//# sourceMappingURL=GetSecretHttp.js.map

package/lib/GetSecretHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetSecretHttp.js","sourceRoot":"","sources":["../src/GetSecretHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CACvC,SAAS,EACT,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,qBAAqB,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CACxC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;QAC/B,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACnC,6DAA6D;YAC7D,+DAA+D;YAC/D,6DAA6D;YAC7D,gCAAgC;YAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrB,IAAI;gBACJ,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC,EACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CACtC,CAAC;YACF,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,QAAQ,CAAC,SAAS,CAAC;YACjB,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO;YACxB,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,UAAU,CAAC,mBAAmB,KAAK,IAAI;SACtD,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;CACL,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC"}

package/lib/HeadObject.d.ts

@@ -0,0 +1,29 @@
+import type * as S3 from "@distilled.cloud/aws/s3";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { Bucket } from "./Bucket.ts";
+import type { TigrisCredentialsMissing } from "./Errors.ts";
+export interface HeadObjectRequest extends Omit<S3.HeadObjectRequest, "Bucket"> {
+}
+/**
+ * Runtime binding for Tigris `HeadObject` over the S3 API.
+ *
+ * Bind this operation to a {@link Bucket} in Service init. Provide
+ * {@link HeadObjectHttp}.
+ *
+ *
+ * ### Inspecting Objects
+ * **Example:** Check an Object's Metadata
+ * ```typescript
+ * const headObject = yield* Fly.HeadObject(Data);
+ * const head = yield* headObject({ Key: "hello.txt" });
+ * ```
+ *
+ * @binding
+ * @product Bucket
+ */
+export interface HeadObject extends Binding.Service<HeadObject, "Fly.HeadObject", (bucket: Bucket) => Effect.Effect<(request: HeadObjectRequest) => Effect.Effect<S3.HeadObjectOutput, S3.HeadObjectError | TigrisCredentialsMissing, RuntimeContext>>> {
+}
+export declare const HeadObject: HeadObject;
+//# sourceMappingURL=HeadObject.d.ts.map

package/lib/HeadObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HeadObject.d.ts","sourceRoot":"","sources":["../src/HeadObject.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAAC,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;CAAG;AAElF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,UAAW,SAAQ,OAAO,CAAC,OAAO,CACjD,UAAU,EACV,gBAAgB,EAChB,CACE,MAAM,EAAE,MAAM,KACX,MAAM,CAAC,MAAM,CAChB,CACE,OAAO,EAAE,iBAAiB,KACvB,MAAM,CAAC,MAAM,CAChB,EAAE,CAAC,gBAAgB,EACnB,EAAE,CAAC,eAAe,GAAG,wBAAwB,EAC7C,cAAc,CACf,CACF,CACF;CAAG;AAEJ,eAAO,MAAM,UAAU,YAAgD,CAAC"}

package/lib/HeadObject.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const HeadObject = Binding.Service("Fly.HeadObject");
+//# sourceMappingURL=HeadObject.js.map

package/lib/HeadObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HeadObject.js","sourceRoot":"","sources":["../src/HeadObject.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAyC3C,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAa,gBAAgB,CAAC,CAAC"}

package/lib/HeadObjectHttp.d.ts

@@ -0,0 +1,12 @@
+import * as Layer from "effect/Layer";
+import { HeadObject } from "./HeadObject.ts";
+/**
+ * HTTP implementation of {@link HeadObject}. Calls distilled S3
+ * `headObject` against the Tigris endpoint with the bucket's credentials.
+ *
+ * @layer
+ * @product Bucket
+ * @provides Fly.HeadObject
+ */
+export declare const HeadObjectHttp: Layer.Layer<HeadObject, never, never>;
+//# sourceMappingURL=HeadObjectHttp.d.ts.map

package/lib/HeadObjectHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HeadObjectHttp.d.ts","sourceRoot":"","sources":["../src/HeadObjectHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,uCAM1B,CAAC"}

package/lib/HeadObjectHttp.js

@@ -0,0 +1,17 @@
+import * as S3 from "@distilled.cloud/aws/s3";
+import * as Layer from "effect/Layer";
+import { makeTigrisS3Binding } from "./BucketBinding.js";
+import { HeadObject } from "./HeadObject.js";
+/**
+ * HTTP implementation of {@link HeadObject}. Calls distilled S3
+ * `headObject` against the Tigris endpoint with the bucket's credentials.
+ *
+ * @layer
+ * @product Bucket
+ * @provides Fly.HeadObject
+ */
+export const HeadObjectHttp = Layer.effect(HeadObject, makeTigrisS3Binding({
+    tag: "Fly.HeadObject",
+    operation: S3.headObject,
+}));
+//# sourceMappingURL=HeadObjectHttp.js.map

package/lib/HeadObjectHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HeadObjectHttp.js","sourceRoot":"","sources":["../src/HeadObjectHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CACxC,UAAU,EACV,mBAAmB,CAAC;IAClB,GAAG,EAAE,gBAAgB;IACrB,SAAS,EAAE,EAAE,CAAC,UAAU;CACzB,CAAC,CACH,CAAC"}

package/lib/IpAssignment.d.ts

@@ -0,0 +1,258 @@
+import * as machines from "@distilled.cloud/fly-io/machines";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import type { App } from "./App.ts";
+import type { Providers } from "./Providers.ts";
+/**
+ * A resource-valued prop: the resource itself, or an Effect that produces
+ * it (so `yield* App(...)` and `App(...)` both type-check).
+ */
+type Ref<T> = T | Effect.Effect<T, never, Providers>;
+/**
+ * Fly IP family allocated onto an App. Dedicated `v4` is billed and may
+ * be rejected when the org has no IPv4 quota. Prefer `v6` (free) or
+ * `shared_v4` (free) in tests. `private_v6` is a Flycast address: it is
+ * reachable only from the organization's private network.
+ */
+export type IpAssignmentType = "v4" | "v6" | "shared_v4" | "private_v6";
+export interface IpAssignmentProps {
+    /**
+     * Parent Fly App. Accepts a `Fly.App` resource or an Effect that
+     * produces one. Changing the App replaces the assignment.
+     */
+    app: Ref<App>;
+    /**
+     * Address family to allocate. `v6` is a dedicated IPv6 (free).
+     * `shared_v4` is a shared Anycast IPv4 (free). `v4` is a dedicated
+     * IPv4 (billed; may 400 when the org is over quota). `private_v6` is
+     * a Flycast IPv6 (free) that Fly's proxy serves only inside the
+     * private network. Changing type replaces the assignment.
+     */
+    type: IpAssignmentType;
+    /**
+     * Region for a dedicated address. Changing it replaces the assignment.
+     */
+    region?: string;
+    /**
+     * Private network a `private_v6` address is reachable from. Defaults
+     * to the organization's network. Create-only; changing it replaces.
+     */
+    network?: string;
+    /**
+     * Organization slug. Defaults to the current token's org. Not a
+     * replacement key.
+     */
+    orgSlug?: string;
+    /**
+     * Fly proxy service this address is bound to. Changing it replaces
+     * the assignment.
+     */
+    serviceName?: string;
+}
+export type IpAssignment = Resource<"Fly.IpAssignment", IpAssignmentProps, {
+    /** Physical Fly App name the address is assigned to. */
+    appName: string;
+    /** Allocated address. Identity of the assignment. */
+    ip: string;
+    /** Observed address family. */
+    type: IpAssignmentType;
+    /** Region for a dedicated address, if set. */
+    region: string | undefined;
+    /** Fly proxy service this address is bound to, if set. */
+    serviceName: string | undefined;
+    /** Whether the address is a shared Anycast IPv4. */
+    shared: boolean;
+    /**
+     * Named private network a `private_v6` address is reachable from.
+     * `undefined` for the organization's default network and for public
+     * addresses.
+     */
+    network: string | undefined;
+    /** RFC3339 creation timestamp, if the API returned one. */
+    createdAt: string | undefined;
+}, never, Providers>;
+declare const IpAssignmentResource: import("alchemy/Resource").ResourceClass<IpAssignment>;
+/**
+ * A Fly.IpAssignment is an address on an {@link App}. A {@link Service}
+ * publishes ports. Fly's proxy load-balances `{app}.fly.dev` across
+ * Machines that publish a proxy service.
+ *
+ * Identity is the allocated `ip`. There is no in-place update.
+ *
+ * @see https://fly.io/docs/networking/services/
+ *
+ * ### Shared IPv4
+ * `shared_v4` is a shared Anycast IPv4. It is free. This is what you
+ * want for fly.dev over IPv4. Yield it next to the Service.
+ *
+ * **Example:** Allocate shared_v4
+ * ```typescript
+ * export const PublicIp = Fly.IpAssignment("Shared", {
+ *   app: Site,
+ *   type: "shared_v4",
+ * });
+ * ```
+ *
+ * :::caution[Changing `type` or `app` replaces the assignment]
+ * A new address is allocated. The old one is released.
+ * :::
+ *
+ * ### Dedicated IPv6
+ * `v6` is a dedicated IPv6. It is free.
+ *
+ * **Example:** Allocate v6
+ * ```typescript
+ * export const V6 = Fly.IpAssignment("V6", {
+ *   app: Site,
+ *   type: "v6",
+ * });
+ * ```
+ *
+ * ### Dedicated IPv4
+ * `v4` is a billed dedicated IPv4. It may 400 if the org has no
+ * quota. Prefer `shared_v4` or `v6` in tests.
+ *
+ * **Example:** Allocate v4
+ * ```typescript
+ * export const Dedicated = Fly.IpAssignment("Dedicated", {
+ *   app: Site,
+ *   type: "v4",
+ * });
+ * ```
+ *
+ * ### Flycast (private IPv6)
+ * `private_v6` is a Flycast address. Fly's proxy serves it only inside
+ * the organization's private network, at `{app}.flycast`. It is free.
+ * Use it for a backend that another App calls and the internet must
+ * not reach. Requests still go through the proxy, so blue/green
+ * cordoning, `autostart`, and `autostop` keep working. Allocate no
+ * public address on the same App.
+ *
+ * **Example:** Allocate private_v6
+ * ```typescript
+ * export const Private = Fly.IpAssignment("Private", {
+ *   app: Backend,
+ *   type: "private_v6",
+ * });
+ * ```
+ *
+ * ### Region
+ * `region` pins a dedicated address. Shared Anycast ignores it. See
+ * [Regions](/fly/compute/regions) for the list of codes.
+ *
+ * **Example:** Dedicated IPv4 in iad
+ * ```typescript
+ * export const Dedicated = Fly.IpAssignment("Dedicated", {
+ *   app: Site,
+ *   type: "v4",
+ *   region: "iad",
+ * });
+ * ```
+ *
+ * :::caution[Changing `region` replaces the assignment]
+ * A new address is allocated in the new region.
+ * :::
+ *
+ * ### Service name
+ * `serviceName` binds the address to a Fly proxy service. Changing it
+ * replaces the assignment.
+ *
+ * **Example:** Bind to a named service
+ * ```typescript
+ * export const PublicIp = Fly.IpAssignment("Shared", {
+ *   app: Site,
+ *   type: "shared_v4",
+ *   serviceName: "http",
+ * });
+ * ```
+ *
+ * :::caution[Changing `serviceName` replaces the assignment]
+ * A new address is allocated bound to the new service.
+ * :::
+ *
+ * ### Isolated network
+ * `network` names the private network a `private_v6` address is
+ * reachable from. Create-only.
+ *
+ * **Example:** Custom network
+ * ```typescript
+ * export const Private = Fly.IpAssignment("Private", {
+ *   app: Backend,
+ *   type: "private_v6",
+ *   network: "tenant-a",
+ * });
+ * ```
+ *
+ * :::caution[Changing `network` replaces the assignment]
+ * A new address is allocated on the new network.
+ * :::
+ *
+ * ### Organization
+ * `orgSlug` defaults to the current token's org. It is not a
+ * replacement key.
+ *
+ * **Example:** Pin an org
+ * ```typescript
+ * export const PublicIp = Fly.IpAssignment("Shared", {
+ *   app: Site,
+ *   type: "shared_v4",
+ *   orgSlug: "my-org",
+ * });
+ * ```
+ *
+ * ### Yield with a Service
+ * Allocate the address on the same App as the Service. `api.url` is
+ * `https://{appName}.fly.dev`.
+ *
+ * **Example:** Stack outputs
+ * ```typescript
+ * export default Alchemy.Stack(
+ *   "MyApp",
+ *   { providers: Fly.providers(), state: Alchemy.localState() },
+ *   Effect.gen(function* () {
+ *     const api = yield* Api;
+ *     const ip = yield* PublicIp;
+ *     return { url: api.url, ip: ip.ip };
+ *   }),
+ * );
+ * ```
+ *
+ * @resource
+ * @product App
+ */
+export declare const IpAssignment: typeof IpAssignmentResource;
+declare const IpAssignmentNotCreated_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.IpAssignmentNotCreated";
+} & Readonly<A>;
+export declare class IpAssignmentNotCreated extends IpAssignmentNotCreated_base<{
+    appName: string;
+    type: IpAssignmentType;
+}> {
+}
+declare const IpAssignmentAppMissing_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Fly.IpAssignmentAppMissing";
+} & Readonly<A>;
+export declare class IpAssignmentAppMissing extends IpAssignmentAppMissing_base<{
+    type: IpAssignmentType;
+}> {
+}
+/** Whether the App has any address reachable from the internet. */
+export declare const hasPublicAddress: (appName: string) => Effect.Effect<boolean, machines.FlyIoOpError, machines.FlyIoOpContext>;
+/**
+ * Converge the addresses of an App a {@link Service} owns. Every owned App
+ * gets a Flycast address on its private network (the organization's
+ * default network when `network` is omitted). A public App also gets a
+ * shared IPv4 and an IPv6; a private one has every public address
+ * released. All three types are free.
+ */
+export declare const syncOwnedAppAddresses: (appName: string, isPublic: boolean, network?: string | undefined) => Effect.Effect<void, import("@distilled.cloud/fly-io").BadRequest | import("@distilled.cloud/fly-io").Forbidden | machines.NetworkNotFound | import("@distilled.cloud/fly-io").NotFound | machines.FlyIoOpError, machines.FlyIoOpContext>;
+/**
+ * Add a Flycast address on `network` to an App a {@link Service} shares,
+ * so bound callers can reach it. Only ever adds; the address is removed
+ * with the App.
+ */
+export declare const ensureFlycastAddress: (appName: string, network?: string | undefined) => Effect.Effect<void, import("@distilled.cloud/fly-io").BadRequest | import("@distilled.cloud/fly-io").Forbidden | machines.NetworkNotFound | import("@distilled.cloud/fly-io").NotFound | machines.FlyIoOpError, machines.FlyIoOpContext>;
+export declare const IpAssignmentProvider: () => import("effect/Layer").Layer<Provider.Provider<IpAssignment>, never, machines.FlyIoOpContext>;
+export {};
+//# sourceMappingURL=IpAssignment.d.ts.map

package/lib/IpAssignment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IpAssignment.d.ts","sourceRoot":"","sources":["../src/IpAssignment.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAC;AAE7D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,WAAW,GAAG,YAAY,CAAC;AAExE,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACd;;;;;;OAMG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG,QAAQ,CACjC,kBAAkB,EAClB,iBAAiB,EACjB;IACE,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,0DAA0D;IAC1D,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,oDAAoD;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,EACD,KAAK,EACL,SAAS,CACV,CAAC;AAcF,QAAA,MAAM,oBAAoB,wDAA6C,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmJG;AACH,eAAO,MAAM,YAAY,EAAE,OAAO,oBAIjC,CAAC;;;;AAEF,qBAAa,sBAAuB,SAAQ,4BAA+C;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAAC;CAAG;;;;AAEL,qBAAa,sBAAuB,SAAQ,4BAA+C;IACzF,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAAC;CAAG;AA+FL,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,YAAa,MAAM,2EAG7C,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,gTA+BhC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,6RAO/B,CAAC;AAEH,eAAO,MAAM,oBAAoB,qGAqG7B,CAAC"}