@alchemy.run/modal 0.0.0 → 2.0.0-beta.86

package/lib/Image.js

@@ -0,0 +1,203 @@
+import * as BuildPlan from "@alchemy.run/docker/BuildPlan";
+import * as image from "@distilled.cloud/modal/image";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import { sha256Object } from "alchemy/Util/sha256";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { buildImage, ImageBuildOps } from "./ImageBuild.js";
+import { checkCommands, lowerPlan, MODAL_CAPABILITIES } from "./ImagePlan.js";
+import { declarable } from "./internal/Declared.js";
+import { createSandbox, SandboxOps } from "./SandboxClient.js";
+/** A `run` command of a warm-base image exited non-zero. */
+export class ImageSetupFailed extends Data.TaggedError("Modal.ImageSetupFailed") {
+}
+/**
+ * A Modal Image: a container image built by Modal's own builder (not
+ * Docker), from a registry image, a Dockerfile, or another Modal Image plus
+ * commands. Sandboxes boot from it.
+ *
+ * With `run`, the image becomes a warm base: Alchemy boots a sandbox from the
+ * built image, runs the commands, snapshots its filesystem, and terminates
+ * it. Sandboxes created from the result start with the repo cloned and
+ * dependencies installed. Runtime snapshots (`sandbox.snapshotFilesystem()`)
+ * are images too and work anywhere an image does.
+ *
+ * Modal builds remotely: deploying needs no local Docker.
+ *
+ * ### Building an Image
+ * **Example:** From a registry image with extra packages
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Coder = Modal.App("Coder", {});
+ * export const Node = Modal.Image("Node", {
+ *   app: Coder,
+ *   image: "node:22-bookworm",
+ *   commands: ["RUN apt-get update && apt-get install -y git ripgrep"],
+ * });
+ * ```
+ *
+ * **Example:** From an inline Dockerfile
+ * ```typescript
+ * import * as Dockerfile from "@alchemy.run/docker/Dockerfile";
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Coder = Modal.App("Coder", {});
+ * export const Python = Modal.Image("Python", {
+ *   app: Coder,
+ *   dockerfile: Dockerfile.inline`
+ *     FROM python:3.12-slim
+ *     RUN pip install pandas
+ *   `,
+ * });
+ * ```
+ *
+ * ### A warm base to fork from
+ * **Example:** Clone and install once, start every sandbox from it
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Coder = Modal.App("Coder", {});
+ * export const Node = Modal.Image("Node", { app: Coder, image: "node:22-bookworm" });
+ * export const Warm = Modal.Image("Warm", {
+ *   app: Coder,
+ *   from: Node,
+ *   run: [
+ *     "git clone https://github.com/alchemy-run/alchemy /work",
+ *     "cd /work && corepack enable && pnpm install",
+ *   ],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Image
+ */
+export const Image = declarable()(Resource("Modal.Image"));
+const idOf = (value, key) => typeof value === "object" && value !== null && key in value
+    ? value[key]
+    : undefined;
+/** The build spec for an Image's props (Dockerfile lowered, context collected). */
+/**
+ * Plan an Image's build with the shared {@link BuildPlan}: its environment
+ * (`image`, `dockerfile`/`context`, or a Modal base via `from`) checked
+ * against what Modal's builder runs, then the `commands` appended.
+ */
+const planOf = Effect.fn(function* (news) {
+    const fromId = idOf(news.from, "imageId");
+    const source = fromId !== undefined
+        ? { dockerfile: { content: "FROM base\n" } }
+        : news.dockerfile !== undefined || news.context !== undefined
+            ? { dockerfile: news.dockerfile, context: news.context }
+            : { image: news.image ?? "debian:bookworm-slim" };
+    const plan = yield* BuildPlan.plan(source, { capabilities: MODAL_CAPABILITIES });
+    const extra = yield* checkCommands(news.commands ?? []);
+    const lowered = yield* lowerPlan(plan, extra);
+    const spec = {
+        ...lowered,
+        // `FROM base` names the Modal image passed as a base image.
+        ...(fromId !== undefined ? { baseImageId: fromId, commands: lowered.commands.slice(1) } : {}),
+        secretIds: (news.secrets ?? []).flatMap((s) => idOf(s, "secretId") ?? []),
+        registry: news.registry
+            ? { authType: news.registry.type, secretId: idOf(news.registry.secret, "secretId") ?? "" }
+            : undefined,
+        gpu: news.gpu,
+        builderVersion: news.builderVersion,
+    };
+    const hash = yield* sha256Object({
+        plan: plan.hash,
+        from: fromId,
+        extra,
+        secrets: spec.secretIds,
+        registry: spec.registry,
+        gpu: spec.gpu,
+        builder: spec.builderVersion,
+        // `tag` and `run` happen after the build; part of the hash so a change re-runs reconcile.
+        tag: news.tag,
+        run: news.run,
+    });
+    return { spec, hash, warnings: plan.warnings };
+});
+export const ImageProvider = () => Provider.effect(Image, Effect.gen(function* () {
+    return {
+        stables: [],
+        diff: Effect.fn(function* ({ news, output }) {
+            if (!isResolved(news) || output === undefined)
+                return undefined;
+            // A changed build input (including files under `context`) is a new image.
+            const { hash } = yield* planOf(news);
+            return hash !== output.hash ? { action: "update" } : undefined;
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (output === undefined)
+                return undefined;
+            const found = yield* image
+                .imageFromId({ imageId: output.imageId })
+                .pipe(Effect.catchTag("ImageNotFound", () => Effect.undefined));
+            return found?.imageId ? output : undefined;
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            const appId = idOf(news.app, "appId") ?? "";
+            const { spec, hash, warnings } = yield* planOf(news);
+            for (const warning of warnings)
+                yield* session.note(warning);
+            // Observe: an image built from the same inputs still exists.
+            if (output !== undefined && output.hash === hash && output.appId === appId) {
+                const found = yield* image
+                    .imageFromId({ imageId: output.imageId })
+                    .pipe(Effect.catchTag("ImageNotFound", () => Effect.undefined));
+                if (found?.imageId)
+                    return output;
+            }
+            // Ensure: Modal content-addresses builds, so this is a no-op for
+            // inputs it has built before.
+            let imageId = yield* buildImage(yield* ImageBuildOps, appId, spec, {
+                note: session.note,
+            });
+            // Warm base: run setup in a sandbox and snapshot its filesystem.
+            if (news.run && news.run.length > 0) {
+                yield* session.note(`Running setup for image ${imageId}...`);
+                const box = yield* createSandbox(yield* SandboxOps, { appId }, {
+                    image: { imageId },
+                    secrets: spec.secretIds?.map((secretId) => ({ secretId })),
+                    timeout: "1 hour",
+                });
+                const snapshot = yield* Effect.gen(function* () {
+                    for (const command of news.run ?? []) {
+                        const result = yield* box.exec(["sh", "-lc", command]);
+                        if (result.exitCode !== 0) {
+                            return yield* new ImageSetupFailed({
+                                command,
+                                exitCode: result.exitCode,
+                                message: `\`${command}\` exited ${result.exitCode}: ${result.stderr.slice(-2000)}`,
+                            });
+                        }
+                    }
+                    return yield* box.snapshotFilesystem("5 minutes");
+                }).pipe(Effect.ensuring(Effect.ignore(box.terminate())));
+                imageId = snapshot.imageId;
+            }
+            if (news.tag !== undefined) {
+                yield* image.publishImage({
+                    imageId,
+                    tag: news.tag,
+                    environmentName: idOf(news.app, "environment") ?? "",
+                });
+            }
+            return {
+                imageId,
+                appId,
+                appName: idOf(news.app, "name"),
+                environment: idOf(news.app, "environment"),
+                hash,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* image
+                .deleteImage({ imageId: output.imageId })
+                .pipe(Effect.catchTag("ImageNotFound", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=Image.js.map

package/lib/Image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Image.js","sources":["../src/Image.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAC;AAE3D,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAuB,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE/D,4DAA4D;AAC5D,MAAM,OAAO,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAI7E;CAAG;AA+DL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,UAAU,EAAS,CAAC,QAAQ,CAAQ,aAAa,CAAC,CAAC,CAAC;AAIzE,MAAM,IAAI,GAAG,CAAmB,KAAc,EAAE,GAAM,EAAsB,EAAE,CAC5E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK;IACzD,CAAC,CAAG,KAA4B,CAAC,GAAG,CAAwB;IAC5D,CAAC,CAAC,SAAS,CAAC;AAEhB,mFAAmF;AACnF;;;;GAIG;AACH,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAgB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE;QAC5C,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAC3D,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACxD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,sBAAsB,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAmB;QAC3B,GAAG,OAAO;QACV,4DAA4D;QAC5D,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE;YAC1F,CAAC,CAAC,SAAS;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,MAAM;QACZ,KAAK;QACL,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,cAAc;QAC5B,0FAA0F;QAC1F,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAChC,QAAQ,CAAC,MAAM,CACb,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChE,0EAA0E;YAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK;iBACvB,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,OAAO,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7D,6DAA6D;YAC7D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK;qBACvB,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;qBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAClE,IAAI,KAAK,EAAE,OAAO;oBAAE,OAAO,MAAM,CAAC;YACpC,CAAC;YACD,iEAAiE;YACjE,8BAA8B;YAC9B,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;gBACjE,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,iEAAiE;YACjE,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,OAAO,KAAK,CAAC,CAAC;gBAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAC9B,KAAK,CAAC,CAAC,UAAU,EACjB,EAAE,KAAK,EAAE,EACT;oBACE,KAAK,EAAE,EAAE,OAAO,EAAE;oBAClB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC1D,OAAO,EAAE,QAAQ;iBAClB,CACF,CAAC;gBACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;wBACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;wBACvD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;4BAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC;gCACjC,OAAO;gCACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;gCACzB,OAAO,EAAE,KAAK,OAAO,aAAa,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE;6BACnF,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBACD,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACpD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC7B,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;oBACxB,OAAO;oBACP,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,OAAO;gBACP,KAAK;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;gBAC1C,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,KAAK;iBACT,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/ImageBuild.d.ts

@@ -0,0 +1,108 @@
+import * as image from "@distilled.cloud/modal/image";
+import * as mount from "@distilled.cloud/modal/mount";
+import * as Effect from "effect/Effect";
+declare const ImageBuildFailed_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Modal.ImageBuildFailed";
+} & Readonly<A>;
+/** Modal's builder finished the image build with a failure. */
+export declare class ImageBuildFailed extends ImageBuildFailed_base<{
+    readonly imageId: string;
+    readonly status: string;
+    readonly message: string;
+    /** The last lines the build printed. */
+    readonly logs: string;
+}> {
+}
+declare const ImageBuildTimeout_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Modal.ImageBuildTimeout";
+} & Readonly<A>;
+/** The build didn't finish within its time budget. */
+export declare class ImageBuildTimeout extends ImageBuildTimeout_base<{
+    readonly imageId: string;
+    readonly message: string;
+}> {
+}
+/** What an image is built from, after Dockerfile lowering. */
+export interface ImageBuildSpec {
+    /** A registry image to start from (`FROM <ref>`). */
+    readonly dockerTag?: string;
+    /** A Modal image to start from. */
+    readonly baseImageId?: string;
+    /**
+     * Dockerfile commands. With `dockerTag`/`baseImageId` they follow the
+     * generated `FROM`; otherwise they are a whole Dockerfile.
+     */
+    readonly commands: ReadonlyArray<string>;
+    /**
+     * Files the commands `COPY`, by context-relative path. They are uploaded
+     * as a mount owned by the app, so their size isn't limited by Modal's
+     * 2 MB cap on an image definition.
+     */
+    readonly contextFiles?: ReadonlyArray<{
+        readonly filename: string;
+        readonly data: Uint8Array;
+        /** Permission bits. @default 0o644 */
+        readonly mode?: number;
+    }>;
+    /**
+     * A mount whose files the commands `COPY` (e.g. Modal's standalone
+     * Python). Not combined with {@link contextFiles}.
+     */
+    readonly contextMountId?: string;
+    /** Build arguments (`ARG` values). */
+    readonly buildArgs?: Readonly<Record<string, string>>;
+    /** Secrets (ids) the build steps see as environment variables. */
+    readonly secretIds?: ReadonlyArray<string>;
+    /** Credentials to pull a private base image. */
+    readonly registry?: {
+        readonly authType: "aws" | "gcp" | "static";
+        readonly secretId: string;
+    };
+    /** Run the build on a GPU (`"A10G"`, `"H100"`, ...). */
+    readonly gpu?: string;
+    readonly builderVersion?: string;
+    readonly forceBuild?: boolean;
+}
+/** A `"A100-80GB:2"`-style GPU spec as Modal's `GPUConfig`. */
+export declare const gpuConfig: (gpu: string | undefined) => image.GPUConfig | undefined;
+/** The operations a build needs, resolved by `ModalBindings.withCredentials` (or at deploy). */
+export declare const ImageBuildOps: Effect.Effect<{
+    readonly getOrCreate: (input: image.ImageGetOrCreateRequest) => Effect.Effect<image.ImageGetOrCreateResponse, image.ModalOpError, never>;
+    readonly joinStreaming: import("@distilled.cloud/core/api").StreamingCall<image.ImageJoinStreamingRequest, image.ImageJoinStreamingStream, image.ImageJoinStreamingError, never, image.ImageJoinStreamingResponse>;
+    readonly putFile: (input: mount.MountPutFileRequest) => Effect.Effect<mount.MountPutFileResponse, image.ModalOpError, never>;
+    readonly getOrCreateMount: (input: mount.MountGetOrCreateRequest) => Effect.Effect<mount.MountGetOrCreateResponse, mount.MountGetOrCreateError, never>;
+    readonly blobs: {
+        readonly create: (input: import("@distilled.cloud/modal/blob").CreateBlobRequest) => Effect.Effect<import("@distilled.cloud/modal/blob").CreateBlobResponse, image.ModalOpError, never>;
+        readonly get: (input: import("@distilled.cloud/modal/blob").GetBlobRequest) => Effect.Effect<import("@distilled.cloud/modal/blob").GetBlobResponse, image.ModalOpError, never>;
+        readonly http: import("effect/http/HttpClient").HttpClient;
+    };
+}, never, import("./internal.ts").OperationServices>;
+export type ImageBuildOps = Effect.Success<typeof ImageBuildOps>;
+declare const ImageBuildUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Modal.ImageBuildUnexpectedResponse";
+} & Readonly<A>;
+/** Modal returned a response without a field the build needs. */
+export declare class ImageBuildUnexpectedResponse extends ImageBuildUnexpectedResponse_base<{
+    readonly message: string;
+}> {
+}
+/**
+ * Build (or reuse) an image with Modal's builder and wait until it is ready.
+ * Modal content-addresses images, so the same spec returns the same image
+ * without rebuilding. Fails with {@link ImageBuildFailed} on a failed build.
+ */
+export declare const buildImage: (ops: {
+    readonly getOrCreate: (input: image.ImageGetOrCreateRequest) => Effect.Effect<image.ImageGetOrCreateResponse, image.ModalOpError, never>;
+    readonly joinStreaming: import("@distilled.cloud/core/api").StreamingCall<image.ImageJoinStreamingRequest, image.ImageJoinStreamingStream, image.ImageJoinStreamingError, never, image.ImageJoinStreamingResponse>;
+    readonly putFile: (input: mount.MountPutFileRequest) => Effect.Effect<mount.MountPutFileResponse, image.ModalOpError, never>;
+    readonly getOrCreateMount: (input: mount.MountGetOrCreateRequest) => Effect.Effect<mount.MountGetOrCreateResponse, mount.MountGetOrCreateError, never>;
+    readonly blobs: {
+        readonly create: (input: import("@distilled.cloud/modal/blob").CreateBlobRequest) => Effect.Effect<import("@distilled.cloud/modal/blob").CreateBlobResponse, image.ModalOpError, never>;
+        readonly get: (input: import("@distilled.cloud/modal/blob").GetBlobRequest) => Effect.Effect<import("@distilled.cloud/modal/blob").GetBlobResponse, image.ModalOpError, never>;
+        readonly http: import("effect/http/HttpClient").HttpClient;
+    };
+}, appId: string, spec: ImageBuildSpec, options?: {
+    readonly note?: (message: string) => Effect.Effect<void>;
+} | undefined) => Effect.Effect<string, import("@distilled.cloud/core/errors").BadGateway | import("./Blob.ts").BlobTransferFailed | import("@distilled.cloud/core/config").ConfigError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | ImageBuildFailed | ImageBuildTimeout | ImageBuildUnexpectedResponse | image.ImageNotFound | import("@distilled.cloud/core/errors").InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | import("@distilled.cloud/modal/Errors").ModalParseError | mount.MountNotFound | import("@distilled.cloud/core/sdk-error").SdkError | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/modal/Errors").UnknownModalError, never>;
+export {};
+//# sourceMappingURL=ImageBuild.d.ts.map

package/lib/ImageBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImageBuild.d.ts","sources":["../src/ImageBuild.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAEtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AAIxC,+DAA+D;AAC/D,qBAAa,gBAAiB,SAAQ,sBAA2C;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;CAAG;;;;AAEL,sDAAsD;AACtD,qBAAa,iBAAkB,SAAQ,uBAA4C;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,sCAAsC;QACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,sCAAsC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC;QAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,wDAAwD;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAQD,+DAA+D;AAC/D,eAAO,MAAM,SAAS,QAAS,MAAM,GAAG,SAAS,KAAG,KAAK,CAAC,SAAS,GAAG,SAIrE,CAAC;AAEF,gGAAgG;AAChG,eAAO,MAAM,aAAa;;;;;;;;;;oDAMxB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,aAAa,CAAC,CAAC;;;;AAEjE,iEAAiE;AACjE,qBAAa,4BAA6B,SAAQ,kCAEhD;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAqDL;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;oBAIM,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;i3BAuEnE,CAAC"}

package/lib/ImageBuild.js

@@ -0,0 +1,157 @@
+import { createHash } from "node:crypto";
+import * as image from "@distilled.cloud/modal/image";
+import * as mount from "@distilled.cloud/modal/mount";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { BlobOps, MAX_INLINE_BYTES, uploadBlob } from "./Blob.js";
+import { operations } from "./internal.js";
+/** Modal's builder finished the image build with a failure. */
+export class ImageBuildFailed extends Data.TaggedError("Modal.ImageBuildFailed") {
+}
+/** The build didn't finish within its time budget. */
+export class ImageBuildTimeout extends Data.TaggedError("Modal.ImageBuildTimeout") {
+}
+const AUTH_TYPE = {
+    aws: "REGISTRY_AUTH_TYPE_AWS",
+    gcp: "REGISTRY_AUTH_TYPE_GCP",
+    static: "REGISTRY_AUTH_TYPE_STATIC_CREDS",
+};
+/** A `"A100-80GB:2"`-style GPU spec as Modal's `GPUConfig`. */
+export const gpuConfig = (gpu) => {
+    if (gpu === undefined)
+        return undefined;
+    const [type, count] = gpu.split(":");
+    return { gpuType: type.toUpperCase(), count: count ? Number(count) : 1 };
+};
+/** The operations a build needs, resolved by `ModalBindings.withCredentials` (or at deploy). */
+export const ImageBuildOps = operations({
+    getOrCreate: image.imageGetOrCreate,
+    joinStreaming: image.imageJoinStreaming,
+    putFile: mount.mountPutFile,
+    getOrCreateMount: mount.mountGetOrCreate,
+    blobs: BlobOps,
+});
+/** Modal returned a response without a field the build needs. */
+export class ImageBuildUnexpectedResponse extends Data.TaggedError("Modal.ImageBuildUnexpectedResponse") {
+}
+/**
+ * Upload build context files as a mount owned by the app, the way Modal's
+ * clients send `COPY` sources. Modal stores files by content hash, so
+ * unchanged files are not sent again.
+ */
+const contextMount = Effect.fn(function* (ops, appId, files) {
+    const entries = [];
+    for (const file of files) {
+        const sha256Hex = yield* Effect.sync(() => createHash("sha256").update(file.data).digest("hex"));
+        const known = yield* ops.putFile({ sha256Hex });
+        if (!known.exists) {
+            const upload = file.data.length > MAX_INLINE_BYTES
+                ? { dataBlobId: yield* uploadBlob(ops.blobs, file.data) }
+                : { data: yield* Effect.sync(() => Buffer.from(file.data).toString("base64")) };
+            const put = yield* ops.putFile({ sha256Hex, ...upload });
+            if (!put.exists) {
+                return yield* new ImageBuildUnexpectedResponse({
+                    message: `Modal didn't store build context file ${file.filename}`,
+                });
+            }
+        }
+        entries.push({
+            filename: `/${file.filename.replace(/^\/+/, "")}`,
+            sha256Hex,
+            size: String(file.data.length),
+            mode: 0o100000 | ((file.mode ?? 0o644) & 0o7777),
+        });
+    }
+    const { mountId } = yield* ops.getOrCreateMount({
+        objectCreationType: "OBJECT_CREATION_TYPE_ANONYMOUS_OWNED_BY_APP",
+        appId,
+        files: entries,
+    });
+    if (!mountId) {
+        return yield* new ImageBuildUnexpectedResponse({
+            message: "Modal returned no id for the build context mount",
+        });
+    }
+    return mountId;
+});
+const FINISHED = (status) => status !== undefined && status !== "GENERIC_STATUS_UNSPECIFIED";
+/**
+ * Build (or reuse) an image with Modal's builder and wait until it is ready.
+ * Modal content-addresses images, so the same spec returns the same image
+ * without rebuilding. Fails with {@link ImageBuildFailed} on a failed build.
+ */
+export const buildImage = Effect.fn(function* (ops, appId, spec, options = {}) {
+    const from = spec.baseImageId
+        ? { baseImages: [{ imageId: spec.baseImageId, dockerTag: "base" }], first: ["FROM base"] }
+        : spec.dockerTag
+            ? { baseImages: [], first: [`FROM ${spec.dockerTag}`] }
+            : { baseImages: [], first: [] };
+    const contextMountId = spec.contextFiles !== undefined && spec.contextFiles.length > 0
+        ? yield* contextMount(ops, appId, spec.contextFiles)
+        : spec.contextMountId;
+    const created = yield* ops.getOrCreate({
+        appId,
+        image: {
+            baseImages: from.baseImages,
+            dockerfileCommands: [...from.first, ...spec.commands],
+            contextMountId,
+            secretIds: spec.secretIds ? [...spec.secretIds] : undefined,
+            imageRegistryConfig: spec.registry
+                ? { registryAuthType: AUTH_TYPE[spec.registry.authType], secretId: spec.registry.secretId }
+                : undefined,
+            gpuConfig: gpuConfig(spec.gpu),
+            buildArgs: spec.buildArgs ? { ...spec.buildArgs } : undefined,
+        },
+        builderVersion: spec.builderVersion,
+        forceBuild: spec.forceBuild,
+    });
+    const imageId = created.imageId;
+    if (!imageId) {
+        return yield* new ImageBuildFailed({
+            imageId: "",
+            status: "GENERIC_STATUS_UNSPECIFIED",
+            message: "Modal returned no image id",
+            logs: "",
+        });
+    }
+    let result = created.result;
+    let lastEntryId;
+    const logs = [];
+    // Each join call streams build logs for up to ~55 s; a build may take many.
+    for (let attempt = 0; !FINISHED(result?.status) && attempt < 60; attempt++) {
+        if (attempt === 0 && options.note)
+            yield* options.note(`Building image ${imageId}...`);
+        const { items } = yield* ops.joinStreaming({
+            imageId,
+            timeout: 55,
+            lastEntryId,
+            includeLogsForFinished: true,
+        });
+        for (const item of items) {
+            if (item.entryId)
+                lastEntryId = item.entryId;
+            for (const log of item.taskLogs ?? []) {
+                if (log.data)
+                    logs.push(log.data);
+            }
+            if (FINISHED(item.result?.status))
+                result = item.result;
+        }
+    }
+    if (!FINISHED(result?.status)) {
+        return yield* new ImageBuildTimeout({
+            imageId,
+            message: `Modal image ${imageId} was still building after 55 minutes`,
+        });
+    }
+    if (result?.status !== "GENERIC_STATUS_SUCCESS") {
+        return yield* new ImageBuildFailed({
+            imageId,
+            status: result?.status ?? "GENERIC_STATUS_UNSPECIFIED",
+            message: result?.exception || `Modal image build ${imageId} ended with ${result?.status}`,
+            logs: logs.join("").split("\n").slice(-40).join("\n"),
+        });
+    }
+    return imageId;
+});
+//# sourceMappingURL=ImageBuild.js.map

package/lib/ImageBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImageBuild.js","sources":["../src/ImageBuild.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,+DAA+D;AAC/D,MAAM,OAAO,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAM7E;CAAG;AAEL,sDAAsD;AACtD,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAG/E;CAAG;AA4CL,MAAM,SAAS,GAAG;IAChB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,wBAAwB;IAC7B,MAAM,EAAE,iCAAiC;CACjC,CAAC;AAEX,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAuB,EAA+B,EAAE;IAChF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,EAAE,OAAO,EAAE,IAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC,CAAC;AAEF,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;IACtC,WAAW,EAAE,KAAK,CAAC,gBAAgB;IACnC,aAAa,EAAE,KAAK,CAAC,kBAAkB;IACvC,OAAO,EAAE,KAAK,CAAC,YAAY;IAC3B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;IACxC,KAAK,EAAE,OAAO;CACf,CAAC,CAAC;AAIH,iEAAiE;AACjE,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,oCAAoC,CAGpC;CAAG;AAEL;;;;GAIG;AACH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtC,GAAkB,EAClB,KAAa,EACb,KAAkD;IAElD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACrD,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,MAAM,GACV,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB;gBACjC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACpF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,yCAAyC,IAAI,CAAC,QAAQ,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;YACjD,SAAS;YACT,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9C,kBAAkB,EAAE,6CAA6C;QACjE,KAAK;QACL,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;YAC7C,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,MAA0B,EAAE,EAAE,CAC9C,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,4BAA4B,CAAC;AAElE;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC3C,GAAkB,EAClB,KAAa,EACb,IAAoB,EACpB,OAAO,GAAiE,EAAE;IAE1E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW;QAC3B,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE;QAC1F,CAAC,CAAC,IAAI,CAAC,SAAS;YACd,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE;YACvD,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC;IAChD,MAAM,cAAc,GAClB,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,KAAK;QACL,KAAK,EAAE;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,mBAAmB,EAAE,IAAI,CAAC,QAAQ;gBAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBAC3F,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC9D;QACD,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC;YACjC,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,IAAI,WAA+B,CAAC;IACpC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC3E,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,KAAK,CAAC,CAAC;QACvF,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YACzC,OAAO;YACP,OAAO,EAAE,EAAE;YACX,WAAW;YACX,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO;gBAAE,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,GAAG,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,OAAO;YACP,OAAO,EAAE,eAAe,OAAO,sCAAsC;SACtE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,EAAE,MAAM,KAAK,wBAAwB,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC;YACjC,OAAO;YACP,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,4BAA4B;YACtD,OAAO,EAAE,MAAM,EAAE,SAAS,IAAI,qBAAqB,OAAO,eAAe,MAAM,EAAE,MAAM,EAAE;YACzF,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC,CAAC"}

package/lib/ImagePlan.d.ts

@@ -0,0 +1,31 @@
+import * as BuildPlan from "@alchemy.run/docker/BuildPlan";
+import * as DockerfileParser from "@alchemy.run/docker/DockerfileParser";
+import * as Effect from "effect/Effect";
+/**
+ * What Modal's image builder runs. It isn't Docker: it ignores `USER`
+ * (containers run as root), doesn't implement `EXPOSE`, `HEALTHCHECK`,
+ * `LABEL`, `ONBUILD`, `STOPSIGNAL` or `VOLUME`, has no BuildKit mounts, and
+ * builds `linux/amd64` images. A Dockerfile outside this fails at plan with
+ * the offending lines.
+ */
+export declare const MODAL_CAPABILITIES: BuildPlan.Capabilities;
+/**
+ * Lower a {@link BuildPlan.BuildPlan} to Modal's build inputs: the plan's
+ * Dockerfile as commands, every context file it reads, and its build args.
+ * `extra` lines (already checked) follow the plan's instructions.
+ */
+export declare const lowerPlan: (plan: BuildPlan.BuildPlan, extra?: readonly string[] | undefined) => Effect.Effect<{
+    commands: string[];
+    contextFiles: {
+        filename: string;
+        data: Uint8Array<ArrayBufferLike>;
+        mode: number;
+    }[];
+    buildArgs: Readonly<Record<string, string>>;
+}, import("effect/PlatformError").PlatformError, import("effect/FileSystem").FileSystem>;
+/**
+ * Parse and check Dockerfile lines appended to a plan (`commands`), the way
+ * {@link BuildPlan.plan} checks the Dockerfile itself.
+ */
+export declare const checkCommands: (commands: readonly string[]) => Effect.Effect<string[], DockerfileParser.DockerfileSyntaxError | BuildPlan.UnsupportedDockerfile, never>;
+//# sourceMappingURL=ImagePlan.d.ts.map

package/lib/ImagePlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImagePlan.d.ts","sources":["../src/ImagePlan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAC;AAC3D,OAAO,KAAK,gBAAgB,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AASxC;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,CAAC,YAe1C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;wFAgBpB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,aAAa,2IAexB,CAAC"}

package/lib/ImagePlan.js

@@ -0,0 +1,70 @@
+import * as BuildPlan from "@alchemy.run/docker/BuildPlan";
+import * as DockerfileParser from "@alchemy.run/docker/DockerfileParser";
+import * as Effect from "effect/Effect";
+/*
+ * Deploy-time image planning. Kept out of ImageBuild.ts because
+ * `@alchemy.run/docker/BuildPlan` imports the bundler, which must never
+ * reach a runtime bundle.
+ */
+/**
+ * What Modal's image builder runs. It isn't Docker: it ignores `USER`
+ * (containers run as root), doesn't implement `EXPOSE`, `HEALTHCHECK`,
+ * `LABEL`, `ONBUILD`, `STOPSIGNAL` or `VOLUME`, has no BuildKit mounts, and
+ * builds `linux/amd64` images. A Dockerfile outside this fails at plan with
+ * the offending lines.
+ */
+export const MODAL_CAPABILITIES = {
+    target: "Modal.Image",
+    multiStage: false,
+    heredocs: false,
+    runMounts: false,
+    platforms: ["linux/amd64"],
+    instructions: {
+        USER: "ignored",
+        EXPOSE: "unsupported",
+        HEALTHCHECK: "unsupported",
+        LABEL: "unsupported",
+        ONBUILD: "unsupported",
+        STOPSIGNAL: "unsupported",
+        VOLUME: "unsupported",
+    },
+};
+/**
+ * Lower a {@link BuildPlan.BuildPlan} to Modal's build inputs: the plan's
+ * Dockerfile as commands, every context file it reads, and its build args.
+ * `extra` lines (already checked) follow the plan's instructions.
+ */
+export const lowerPlan = Effect.fn(function* (plan, extra = []) {
+    const contextFiles = yield* Effect.forEach(plan.files, (file) => Effect.map(BuildPlan.readContextFile(file), (data) => ({
+        filename: file.path,
+        data,
+        mode: file.mode,
+    })));
+    return {
+        commands: [...BuildPlan.renderLines(plan), ...extra],
+        contextFiles,
+        buildArgs: plan.args,
+    };
+});
+/**
+ * Parse and check Dockerfile lines appended to a plan (`commands`), the way
+ * {@link BuildPlan.plan} checks the Dockerfile itself.
+ */
+export const checkCommands = Effect.fn(function* (commands) {
+    if (commands.length === 0)
+        return [];
+    const parsed = yield* DockerfileParser.parse(`FROM scratch\n${commands.join("\n")}\n`);
+    const { violations } = BuildPlan.check(parsed, MODAL_CAPABILITIES, "linux/amd64");
+    if (violations.length > 0) {
+        return yield* new BuildPlan.UnsupportedDockerfile({
+            target: MODAL_CAPABILITIES.target,
+            violations,
+            message: [
+                `${MODAL_CAPABILITIES.target} cannot build these commands:`,
+                ...violations.map((v) => `  ${v.instruction}: ${v.reason}`),
+            ].join("\n"),
+        });
+    }
+    return DockerfileParser.renderLines(parsed).slice(1);
+});
+//# sourceMappingURL=ImagePlan.js.map

package/lib/ImagePlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImagePlan.js","sources":["../src/ImagePlan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAC;AAC3D,OAAO,KAAK,gBAAgB,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,MAAM,EAAE,aAAa;IACrB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,YAAY,EAAE;QACZ,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,aAAa;QAC1B,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,aAAa;QACzB,MAAM,EAAE,aAAa;KACtB;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC1C,IAAyB,EACzB,KAAK,GAA0B,EAAE;IAEjC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAC9D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC,CACJ,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QACpD,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,IAAI;KACI,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAA+B;IAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAc,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAClF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,qBAAqB,CAAC;YAChD,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,UAAU;YACV,OAAO,EAAE;gBACP,GAAG,kBAAkB,CAAC,MAAM,+BAA+B;gBAC3D,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;aAC5D,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC"}

package/lib/InferEnv.d.ts

@@ -0,0 +1,26 @@
+import type * as Effect from "effect/Effect";
+/**
+ * The `process.env` an async `Modal.Sandbox` program sees: one string per
+ * `env` entry of the declaration.
+ *
+ * @example
+ * ```ts
+ * // alchemy.run.ts
+ * export const Agent = Modal.Sandbox("Agent", { main: "./src/agent.ts", app: Coder, env: { GREETING: "hi" } });
+ * export type AgentEnv = Modal.InferEnv<typeof Agent>;
+ *
+ * // src/agent.ts
+ * import type { AgentEnv } from "../alchemy.run.ts";
+ * const env = process.env as unknown as AgentEnv;
+ * ```
+ */
+export type InferEnv<F> = F extends Effect.Effect<infer A, infer _E, infer _R> ? InferEnv<A> : F extends {
+    readonly Props: {
+        readonly env?: infer E;
+    };
+} ? InferEnvRecord<Exclude<E, undefined>> : InferEnvRecord<F>;
+type InferEnvRecord<E> = {
+    readonly [K in keyof E]: string;
+};
+export {};
+//# sourceMappingURL=InferEnv.d.ts.map

package/lib/InferEnv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InferEnv.d.ts","sources":["../src/InferEnv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,QAAQ,CAAC,CAAC,IACpB,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,GAChD,QAAQ,CAAC,CAAC,CAAC,GACX,CAAC,SAAS;IAAE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;KAAE,CAAA;CAAE,GACtD,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GACrC,cAAc,CAAC,CAAC,CAAC,CAAC;AAE1B,KAAK,cAAc,CAAC,CAAC,IAAI;IACvB,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM;CAChC,CAAC"}

package/lib/InferEnv.js

@@ -0,0 +1 @@
+//# sourceMappingURL=InferEnv.js.map

package/lib/InferEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InferEnv.js","sources":["../src/InferEnv.ts"],"names":[],"mappings":""}