@alchemy.run/modal 0.0.0 → 2.0.0-beta.86

package/lib/Mounts.js

@@ -0,0 +1,87 @@
+import { checkMountSupport, collectMountCapabilities } from "alchemy/Mount";
+import * as Output from "alchemy/Output";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+/** A mount entry referenced a resource that isn't bound into this runtime. */
+export class MountNotBound extends Data.TaggedError("Modal.MountNotBound") {
+}
+const BUCKET_TYPE = { s3: "S3", r2: "R2", gcp: "GCP" };
+/** Cloudflare R2's S3 endpoint for an account (and jurisdiction). */
+export const r2Endpoint = (accountId, jurisdiction) => `https://${accountId}${jurisdiction && jurisdiction !== "default" ? `.${jurisdiction}` : ""}.r2.cloudflarestorage.com`;
+const value = (input, path) => Output.isOutput(input)
+    ? Effect.fail(new MountNotBound({
+        path,
+        message: `The mount at ${path} references a declared resource; bind it with Modal.MountVolume or Modal.MountBucket`,
+    }))
+    : Effect.isEffect(input)
+        ? input
+        : Effect.succeed(input);
+const field = (record, key) => typeof record === "object" && record !== null
+    ? record[key]
+    : undefined;
+/**
+ * Modal's `volumeMounts` and `cloudBucketMounts` for mount entries whose
+ * resources are resolved: attributes at reconcile, handles or `Mount<Noun>`
+ * references at runtime.
+ */
+export const modalMountsOf = (mounts) => Effect.gen(function* () {
+    const volumeMounts = [];
+    const cloudBucketMounts = [];
+    for (const mount of mounts ?? []) {
+        if ("volume" in mount) {
+            const volumeId = yield* value(field(mount.volume, "volumeId"), mount.path);
+            volumeMounts.push({
+                mountPath: mount.path,
+                volumeId,
+                readOnly: mount.readOnly,
+                subPath: mount.subPath,
+                allowBackgroundCommits: true,
+            });
+            continue;
+        }
+        const bucket = mount.bucket;
+        const bucketName = typeof bucket === "string"
+            ? bucket
+            : yield* value(field(bucket, "bucketName"), mount.path);
+        const accountId = field(bucket, "accountId");
+        const isR2 = typeof accountId === "string";
+        const endpointUrl = mount.endpointUrl ??
+            (isR2
+                ? r2Endpoint(accountId, field(bucket, "jurisdiction"))
+                : yield* value(field(bucket, "endpointUrl"), mount.path));
+        const type = mount.type ?? field(bucket, "type") ?? (isR2 ? "r2" : undefined);
+        const secretId = mount.secret
+            ? yield* value(field(mount.secret, "secretId"), mount.path)
+            : undefined;
+        cloudBucketMounts.push({
+            mountPath: mount.path,
+            bucketName,
+            bucketType: type ? BUCKET_TYPE[type] : undefined,
+            bucketEndpointUrl: endpointUrl,
+            credentialsSecretId: secretId,
+            keyPrefix: mount.keyPrefix,
+            readOnly: mount.readOnly,
+            oidcAuthRoleArn: mount.oidcAuthRoleArn,
+        });
+    }
+    return { volumeMounts, cloudBucketMounts };
+});
+const isCapability = (entry) => "install" in entry && "id" in entry;
+/** The volume and bucket entries a host's bindings contributed, in binding order. */
+export const boundMounts = (bindings) => bindings.flatMap((binding) => (binding.data.mounts ?? []).filter((entry) => !isCapability(entry)));
+/** The mount clients other providers' bindings asked the host's image to install. */
+export const boundCapabilities = (bindings) => collectMountCapabilities(bindings.map((binding) => ({
+    data: { mounts: (binding.data.mounts ?? []).filter(isCapability) },
+})));
+/**
+ * What a Modal container provides to mount clients. Modal runs containers
+ * under gVisor without `CAP_SYS_ADMIN`: `/dev/fuse` exists, but `mount`
+ * fails with permission denied, for FUSE and NFS alike.
+ */
+export const MODAL_MOUNT_SUPPORT = { fuse: false, nfs: false };
+/** Fail when a mount client needs what a Modal container can't provide. */
+export const checkModalMounts = (host, capabilities) => {
+    const unsupported = checkMountSupport(host, capabilities, MODAL_MOUNT_SUPPORT, "Mount Modal volumes and cloud buckets with Modal.MountVolume and Modal.MountBucket instead.");
+    return unsupported === undefined ? Effect.void : Effect.fail(unsupported);
+};
+//# sourceMappingURL=Mounts.js.map

package/lib/Mounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Mounts.js","sources":["../src/Mounts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAwB,MAAM,eAAe,CAAC;AAClG,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AA2FxC,8EAA8E;AAC9E,MAAM,OAAO,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAGvE;CAAG;AAQL,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAW,CAAC;AAEhE,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,YAAqB,EAAU,EAAE,CAC7E,WAAW,SAAS,GAClB,YAAY,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EACpE,2BAA2B,CAAC;AAE9B,MAAM,KAAK,GAAG,CAAI,KAA0B,EAAE,IAAY,EAAE,EAAE,CAC5D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,aAAa,CAAC;QAChB,IAAI;QACJ,OAAO,EAAE,gBAAgB,IAAI,sFAAsF;KACpH,CAAC,CACH;IACH,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,CAAC,CAAE,KAA0B;QAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAU,CAAC,CAAC;AAEnC,MAAM,KAAK,GAAG,CAAC,MAAe,EAAE,GAAW,EAAW,EAAE,CACtD,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;IAC3C,CAAC,CAAE,MAAkC,CAAC,GAAG,CAAC;IAC1C,CAAC,CAAC,SAAS,CAAC;AAEhB;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAuD,EACZ,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,MAAM,iBAAiB,GAA+B,EAAE,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3F,YAAY,CAAC,IAAI,CAAC;gBAChB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,QAAQ;gBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,sBAAsB,EAAE,IAAI;aAC7B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,MAAM,UAAU,GACd,OAAO,MAAM,KAAK,QAAQ;YACxB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC;QAC3C,MAAM,WAAW,GACf,KAAK,CAAC,WAAW;YACjB,CAAC,IAAI;gBACH,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,CAAuB,CAAC;gBAC5E,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAA6B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAK,KAAK,CAAC,MAAM,EAAE,MAAM,CAAyB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;YAC3B,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAiB,EAAE,KAAK,CAAC,IAAI,CAAC;YAC3E,CAAC,CAAC,SAAS,CAAC;QACd,iBAAiB,CAAC,IAAI,CAAC;YACrB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,UAAU;YACV,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAChD,iBAAiB,EAAE,WAAW;YAC9B,mBAAmB,EAAE,QAAQ;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAC7C,CAAC,CAAC,CAAC;AAYL,MAAM,YAAY,GAAG,CAAC,KAA8B,EAA4B,EAAE,CAChF,SAAS,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC;AAEtC,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAuB,EAAwB,EAAE,CAC3E,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3B,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAkB,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CACpF,CAAC;AAEJ,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAuB,EAAkC,EAAE,CAC3F,wBAAwB,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzB,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;CACnE,CAAC,CAAC,CACJ,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAW,CAAC;AAExE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,YAA4C,EAAE,EAAE;IAC7F,MAAM,WAAW,GAAG,iBAAiB,CACnC,IAAI,EACJ,YAAY,EACZ,mBAAmB,EACnB,6FAA6F,CAC9F,CAAC;IACF,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC,CAAC"}

package/lib/PersistentSandbox.d.ts

@@ -0,0 +1,75 @@
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import type { Mount } from "./Mounts.ts";
+import type { Providers } from "./Providers.ts";
+import { type PersistentSandboxCreateOptions } from "./SandboxClient.ts";
+export interface PersistentSandboxProps extends Omit<PersistentSandboxCreateOptions, "mounts"> {
+    /**
+     * Volumes and cloud buckets mounted into every session:
+     * `[{ volume: Home, path: "/home/user" }]`. Changing them replaces the box.
+     */
+    mounts?: Mount[];
+    /** The App the box runs in (`Modal.App`). Changing it replaces the box. */
+    app: {
+        readonly appId: string;
+        readonly name?: string;
+        readonly environment?: unknown;
+    };
+}
+export interface PersistentSandboxAttributes {
+    /** Persistent sandbox ID; pass it (or this resource) to `sandboxes.persistent(...)`. */
+    persistentSandboxId: string;
+    /** The App the box runs in. */
+    appId: string;
+    /** Name of that App. */
+    appName: string | undefined;
+    /** Environment of that App. */
+    environment: string | undefined;
+}
+/**
+ * A Modal persistent sandbox: one box whose filesystem outlives its
+ * sessions. Each session is a regular sandbox that runs up to an hour and
+ * pauses after five idle minutes; the next `session()` resumes it from the
+ * last session's filesystem. Use it for a long-lived workspace, such as a
+ * shared dev box or an agent's home, that the Stack owns.
+ *
+ * Modal's persistent sandboxes are experimental: they don't take a name,
+ * GPUs, `env`, tags or memory snapshots yet. Changing any prop replaces the
+ * box (and its files).
+ *
+ * ### Creating a box
+ * **Example:** A dev box on a warm base image
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ * import { Coder, Warm } from "./Coder.ts";
+ *
+ * export const DevBox = Modal.PersistentSandbox("DevBox", { app: Coder, image: Warm, workdir: "/work" });
+ * ```
+ *
+ * ### Using it at runtime
+ * **Example:** Resume it from a Worker
+ * ```typescript
+ * // construction phase
+ * const sandboxes = yield* Modal.CreateSandbox(Coder);
+ * const devBoxId = yield* (yield* DevBox).persistentSandboxId;
+ * // in fetch:
+ * const session = yield* (yield* sandboxes.persistent(yield* devBoxId)).session();
+ * const result = yield* session.exec(["git", "status"]);
+ * ```
+ *
+ * @resource
+ * @product Sandbox
+ */
+export declare const PersistentSandbox: import("alchemy/Resource").ResourceConstructor<PersistentSandbox, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<PersistentSandbox, never>, never, never> & {
+    Self: import("alchemy/Self").Self<PersistentSandbox>;
+    Provider: Provider.Provider<PersistentSandbox>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<PersistentSandbox, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<PersistentSandboxProps>) => Effect.Effect<PersistentSandbox, never, Providers>);
+export type PersistentSandbox = Resource<"Modal.PersistentSandbox", PersistentSandboxProps, PersistentSandboxAttributes, never, Providers>;
+export declare const PersistentSandboxProvider: () => import("effect/Layer").Layer<Provider.Provider<PersistentSandbox>, never, import("@distilled.cloud/modal/Credentials").Credentials | import("effect/http/HttpClient").HttpClient>;
+//# sourceMappingURL=PersistentSandbox.d.ts.map

package/lib/PersistentSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersistentSandbox.d.ts","sources":["../src/PersistentSandbox.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAIL,KAAK,8BAA8B,EACpC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAAC,8BAA8B,EAAE,QAAQ,CAAC;IAC5F;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,2EAA2E;IAC3E,GAAG,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACzF;AAED,MAAM,WAAW,2BAA2B;IAC1C,wFAAwF;IACxF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,+BAA+B;IAC/B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;uJAE7B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CACtC,yBAAyB,EACzB,sBAAsB,EACtB,2BAA2B,EAC3B,KAAK,EACL,SAAS,CACV,CAAC;AAQF,eAAO,MAAM,yBAAyB,yLAoDnC,CAAC"}

package/lib/PersistentSandbox.js

@@ -0,0 +1,93 @@
+import * as persistent from "@distilled.cloud/modal/persistent";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { envNameOf } from "./internal.js";
+import { declarable } from "./internal/Declared.js";
+import { createPersistentSandbox, persistentSandboxHandle, SandboxOps, } from "./SandboxClient.js";
+/**
+ * A Modal persistent sandbox: one box whose filesystem outlives its
+ * sessions. Each session is a regular sandbox that runs up to an hour and
+ * pauses after five idle minutes; the next `session()` resumes it from the
+ * last session's filesystem. Use it for a long-lived workspace, such as a
+ * shared dev box or an agent's home, that the Stack owns.
+ *
+ * Modal's persistent sandboxes are experimental: they don't take a name,
+ * GPUs, `env`, tags or memory snapshots yet. Changing any prop replaces the
+ * box (and its files).
+ *
+ * ### Creating a box
+ * **Example:** A dev box on a warm base image
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ * import { Coder, Warm } from "./Coder.ts";
+ *
+ * export const DevBox = Modal.PersistentSandbox("DevBox", { app: Coder, image: Warm, workdir: "/work" });
+ * ```
+ *
+ * ### Using it at runtime
+ * **Example:** Resume it from a Worker
+ * ```typescript
+ * // construction phase
+ * const sandboxes = yield* Modal.CreateSandbox(Coder);
+ * const devBoxId = yield* (yield* DevBox).persistentSandboxId;
+ * // in fetch:
+ * const session = yield* (yield* sandboxes.persistent(yield* devBoxId)).session();
+ * const result = yield* session.exec(["git", "status"]);
+ * ```
+ *
+ * @resource
+ * @product Sandbox
+ */
+export const PersistentSandbox = declarable()(Resource("Modal.PersistentSandbox"));
+const appOf = (value) => ({
+    appId: value.appId,
+    appName: value.name,
+    environment: envNameOf(value.environment),
+});
+export const PersistentSandboxProvider = () => Provider.effect(PersistentSandbox, Effect.gen(function* () {
+    return {
+        stables: ["persistentSandboxId", "appId"],
+        diff: Effect.fn(function* ({ news, olds }) {
+            if (!isResolved(news) || olds === undefined)
+                return undefined;
+            // Modal can't change a persistent sandbox's definition.
+            return deepEqual(news, olds) ? undefined : { action: "replace" };
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (output === undefined)
+                return undefined;
+            const found = yield* persistent
+                .getPersistentSandbox({ persistentSandboxId: output.persistentSandboxId })
+                .pipe(Effect.catchTag("PersistentSandboxNotFound", () => Effect.undefined));
+            return found?.persistentSandboxId ? output : undefined;
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            const app = appOf(news.app);
+            // Observe: the box still exists.
+            if (output !== undefined) {
+                const found = yield* persistent
+                    .getPersistentSandbox({ persistentSandboxId: output.persistentSandboxId })
+                    .pipe(Effect.catchTag("PersistentSandboxNotFound", () => Effect.undefined));
+                if (found?.persistentSandboxId)
+                    return output;
+            }
+            // Ensure.
+            yield* session.note("Creating persistent sandbox...");
+            const { app: _app, ...options } = news;
+            // Resolved by the engine: every mount's resource is attributes by now.
+            const handle = yield* createPersistentSandbox(yield* SandboxOps, app, options);
+            return {
+                persistentSandboxId: handle.persistentSandboxId,
+                appId: app.appId,
+                appName: app.appName,
+                environment: app.environment,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* persistentSandboxHandle(yield* SandboxOps, output.persistentSandboxId, output).terminate();
+        }),
+    };
+}));
+//# sourceMappingURL=PersistentSandbox.js.map

package/lib/PersistentSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersistentSandbox.js","sources":["../src/PersistentSandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,UAAU,GAEX,MAAM,oBAAoB,CAAC;AAuB5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,EAAqB,CAC9D,QAAQ,CAAoB,yBAAyB,CAAC,CACvD,CAAC;AAUF,MAAM,KAAK,GAAG,CAAC,KAAoC,EAAE,EAAE,CAAC,CAAC;IACvD,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,OAAO,EAAE,KAAK,CAAC,IAAI;IACnB,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,WAAoB,CAAC;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,EAAE,CAC5C,QAAQ,CAAC,MAAM,CACb,iBAAiB,EACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QACzC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC9D,wDAAwD;YACxD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,SAAS,EAAY,CAAC;QAC9E,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU;iBAC5B,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC;iBACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9E,OAAO,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,iCAAiC;YACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU;qBAC5B,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC;qBACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9E,IAAI,KAAK,EAAE,mBAAmB;oBAAE,OAAO,MAAM,CAAC;YAChD,CAAC;YACD,UAAU;YACV,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;YACvC,uEAAuE;YACvE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAC3C,KAAK,CAAC,CAAC,UAAU,EACjB,GAAG,EACH,OAAyC,CAC1C,CAAC;YACF,OAAO;gBACL,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,uBAAuB,CAC5B,KAAK,CAAC,CAAC,UAAU,EACjB,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CACP,CAAC,SAAS,EAAE,CAAC;QAChB,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Providers.d.ts

@@ -0,0 +1,23 @@
+import * as Provider from "alchemy/Provider";
+import * as Layer from "effect/Layer";
+import * as Credentials from "./Credentials.ts";
+declare const Providers_base: Provider.ProviderCollection<Providers, "Modal">;
+/**
+ * Service tag bundling every Modal provider + auth + credentials. Use
+ * `Modal.providers()` to materialize the full layer.
+ */
+export declare class Providers extends Providers_base {
+}
+export type ProviderRequirements = Layer.Services<ReturnType<typeof providers>>;
+/**
+ * Every Modal resource provider, the Modal AuthProvider registration (so
+ * `alchemy profile edit` can configure it), and credential resolution.
+ *
+ * @example
+ * ```ts
+ * Alchemy.Stack("App", { providers: Modal.providers() }, ...)
+ * ```
+ */
+export declare const providers: () => Layer.Layer<Credentials.Credentials | import("alchemy/Auth/Credentials").CredentialsStore | import("effect/http/HttpClient").HttpClient | import("alchemy/Auth/Profile").ProfileStore | Providers, never, import("alchemy/Auth/Registry").AuthProviders | import("effect/process/ChildProcessSpawner").ChildProcessSpawner | import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/crypto/SecureRandom").SecureRandom | import("alchemy/Stack").Stack | import("alchemy/Stage").Stage>;
+export {};
+//# sourceMappingURL=Providers.d.ts.map

package/lib/Providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Providers.d.ts","sources":["../src/Providers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAG7C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;;AAmBhD;;;GAGG;AACH,qBAAa,SAAU,SAAQ,cAAiD;CAAG;AAEnF,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AAEhF;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,6fAuDnB,CAAC"}

package/lib/Providers.js

@@ -0,0 +1,64 @@
+import { CredentialsStoreLive } from "alchemy/Auth/Credentials";
+import { ProfileStoreLive } from "alchemy/Auth/Profile";
+import * as Provider from "alchemy/Provider";
+import { Random, RandomProvider } from "alchemy/Random";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { App, AppProvider } from "./App.js";
+import { ModalAuth } from "./AuthProvider.js";
+import * as Credentials from "./Credentials.js";
+import { Dict, DictProvider } from "./Dict.js";
+import { Domain, DomainProvider } from "./Domain.js";
+import { Endpoint, EndpointProvider } from "./Endpoint.js";
+import { Environment, EnvironmentProvider } from "./Environment.js";
+import { Function, FunctionProvider } from "./Function.js";
+import { FunctionAutoscaler, FunctionAutoscalerProvider } from "./FunctionAutoscaler.js";
+import { Image, ImageProvider } from "./Image.js";
+import { PersistentSandbox, PersistentSandboxProvider } from "./PersistentSandbox.js";
+import { Proxy, ProxyProvider } from "./Proxy.js";
+import { Queue, QueueProvider } from "./Queue.js";
+import { Sandbox, SandboxProvider } from "./Sandbox.js";
+import { Secret, SecretProvider } from "./Secret.js";
+import { Server, ServerProvider } from "./Server.js";
+import { ServiceUser, ServiceUserProvider } from "./ServiceUser.js";
+import { Volume, VolumeProvider } from "./Volume.js";
+import { WebhookToken, WebhookTokenProvider } from "./WebhookToken.js";
+import { WorkspaceSettings, WorkspaceSettingsProvider } from "./WorkspaceSettings.js";
+/**
+ * Service tag bundling every Modal provider + auth + credentials. Use
+ * `Modal.providers()` to materialize the full layer.
+ */
+export class Providers extends Provider.ProviderCollection()("Modal") {
+}
+/**
+ * Every Modal resource provider, the Modal AuthProvider registration (so
+ * `alchemy profile edit` can configure it), and credential resolution.
+ *
+ * @example
+ * ```ts
+ * Alchemy.Stack("App", { providers: Modal.providers() }, ...)
+ * ```
+ */
+export const providers = () => Layer.effect(Providers, Provider.collection([
+    App,
+    Dict,
+    Domain,
+    Endpoint,
+    Environment,
+    Function,
+    FunctionAutoscaler,
+    Image,
+    PersistentSandbox,
+    Proxy,
+    Queue,
+    // Each RPC binding mints its caller's key (`Modal.InvokeFunction`, `Modal.FetchServer`).
+    Random,
+    Sandbox,
+    Secret,
+    Server,
+    ServiceUser,
+    Volume,
+    WebhookToken,
+    WorkspaceSettings,
+])).pipe(Layer.provide(Layer.mergeAll(AppProvider(), DictProvider(), DomainProvider(), EndpointProvider(), EnvironmentProvider(), FunctionProvider(), FunctionAutoscalerProvider(), ImageProvider(), PersistentSandboxProvider(), ProxyProvider(), QueueProvider(), RandomProvider(), SandboxProvider(), SecretProvider(), ServerProvider(), ServiceUserProvider(), VolumeProvider(), WebhookTokenProvider(), WorkspaceSettingsProvider())), Layer.provideMerge(Credentials.fromAuthProvider()), Layer.provideMerge(FetchHttpClient.layer), Layer.provideMerge(ModalAuth), Layer.provideMerge(ProfileStoreLive), Layer.provideMerge(CredentialsStoreLive), Layer.orDie);
+//# sourceMappingURL=Providers.js.map

package/lib/Providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Providers.js","sources":["../src/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEtF;;;GAGG;AACH,MAAM,OAAO,SAAU,SAAQ,QAAQ,CAAC,kBAAkB,EAAa,CAAC,OAAO,CAAC;CAAG;AAInF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAC5B,KAAK,CAAC,MAAM,CACV,SAAS,EACT,QAAQ,CAAC,UAAU,CAAC;IAClB,GAAG;IACH,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,kBAAkB;IAClB,KAAK;IACL,iBAAiB;IACjB,KAAK;IACL,KAAK;IACL,yFAAyF;IACzF,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,WAAW;IACX,MAAM;IACN,YAAY;IACZ,iBAAiB;CAClB,CAAC,CACH,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CACX,KAAK,CAAC,QAAQ,CACZ,WAAW,EAAE,EACb,YAAY,EAAE,EACd,cAAc,EAAE,EAChB,gBAAgB,EAAE,EAClB,mBAAmB,EAAE,EACrB,gBAAgB,EAAE,EAClB,0BAA0B,EAAE,EAC5B,aAAa,EAAE,EACf,yBAAyB,EAAE,EAC3B,aAAa,EAAE,EACf,aAAa,EAAE,EACf,cAAc,EAAE,EAChB,eAAe,EAAE,EACjB,cAAc,EAAE,EAChB,cAAc,EAAE,EAChB,mBAAmB,EAAE,EACrB,cAAc,EAAE,EAChB,oBAAoB,EAAE,EACtB,yBAAyB,EAAE,CAC5B,CACF,EACD,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAClD,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,EACzC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,EAC7B,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,EACpC,KAAK,CAAC,YAAY,CAAC,oBAAoB,CAAC,EACxC,KAAK,CAAC,KAAK,CACZ,CAAC"}

package/lib/Proxy.d.ts

@@ -0,0 +1,94 @@
+import * as proxy from "@distilled.cloud/modal/proxy";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { type EnvironmentInput } from "./internal.ts";
+import type { Providers } from "./Providers.ts";
+declare const ProxyUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Modal.ProxyUnexpectedResponse";
+} & Readonly<A>;
+export declare class ProxyUnexpectedResponse extends ProxyUnexpectedResponse_base<{
+    readonly message: string;
+}> {
+}
+export interface ProxyProps {
+    /**
+     * Proxy name, unique per environment. If omitted, a unique name is
+     * generated from the stack, stage and logical ID. Changing it replaces the
+     * proxy.
+     */
+    name?: string;
+    /**
+     * Environment the proxy lives in. Changing it replaces the proxy.
+     * @default the workspace's default environment
+     */
+    environment?: EnvironmentInput;
+    /**
+     * Region the proxy's IPs come from (e.g. `us-east-1`). Changing it
+     * replaces the proxy.
+     */
+    region?: string;
+    /**
+     * Number of static egress IPs. Traffic through the proxy leaves from one
+     * of them.
+     * @default 1
+     */
+    ips?: number;
+}
+export interface ProxyAttributes {
+    /** Proxy ID (`pr-…`). */
+    proxyId: string;
+    /** Proxy name. */
+    name: string;
+    /** Environment name, or `undefined` for the workspace default. */
+    environment: string | undefined;
+    /** Region of the proxy's IPs. */
+    region: string | undefined;
+    /** The static egress IPs, for allowlists on the systems a sandbox calls. */
+    ips: string[];
+}
+/**
+ * A Modal Proxy: static egress IPs for Sandboxes and Functions. Traffic from
+ * a sandbox created with `proxy` leaves from these IPs, so a database or API
+ * can allowlist them.
+ *
+ * Proxies are a Modal Team plan feature. Modal proxies have no tags;
+ * ownership is inferred from Alchemy state.
+ *
+ * ### Creating a Proxy
+ * **Example:** One static IP
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Egress = Modal.Proxy("Egress", {});
+ * ```
+ *
+ * **Example:** Two IPs in a region
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Egress = Modal.Proxy("Egress", { region: "us-east-1", ips: 2 });
+ * ```
+ *
+ * ### Routing a Sandbox through it
+ * **Example:** Pass the proxy when creating a sandbox
+ * ```typescript
+ * const sandbox = yield* sandboxes.create({ proxy: egress });
+ * ```
+ *
+ * @resource
+ * @product Proxy
+ */
+export declare const Proxy: import("alchemy/Resource").ResourceConstructor<Proxy, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<Proxy, never>, never, never> & {
+    Self: import("alchemy/Self").Self<Proxy>;
+    Provider: Provider.Provider<Proxy>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<Proxy, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<ProxyProps>) => Effect.Effect<Proxy, never, Providers>);
+export type Proxy = Resource<"Modal.Proxy", ProxyProps, ProxyAttributes, never, Providers>;
+export declare const ProxyProvider: () => import("effect/Layer").Layer<Provider.Provider<Proxy>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | proxy.ModalOpContext>;
+export {};
+//# sourceMappingURL=Proxy.d.ts.map

package/lib/Proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Proxy.d.ts","sources":["../src/Proxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAGtD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,gBAAgB,EAKtB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;;;;AAEhD,qBAAa,uBAAwB,SAAQ,6BAAkD;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iCAAiC;IACjC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,4EAA4E;IAC5E,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,KAAK;;;;;;;;+HAAsD,CAAC;AAEzE,MAAM,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAU3F,eAAO,MAAM,aAAa,2JAuFvB,CAAC"}

package/lib/Proxy.js

@@ -0,0 +1,132 @@
+import * as proxy from "@distilled.cloud/modal/proxy";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { envNameOf, environmentOf, isGeneratedName, objectName, } from "./internal.js";
+import { declarable } from "./internal/Declared.js";
+export class ProxyUnexpectedResponse extends Data.TaggedError("Modal.ProxyUnexpectedResponse") {
+}
+/**
+ * A Modal Proxy: static egress IPs for Sandboxes and Functions. Traffic from
+ * a sandbox created with `proxy` leaves from these IPs, so a database or API
+ * can allowlist them.
+ *
+ * Proxies are a Modal Team plan feature. Modal proxies have no tags;
+ * ownership is inferred from Alchemy state.
+ *
+ * ### Creating a Proxy
+ * **Example:** One static IP
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Egress = Modal.Proxy("Egress", {});
+ * ```
+ *
+ * **Example:** Two IPs in a region
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Egress = Modal.Proxy("Egress", { region: "us-east-1", ips: 2 });
+ * ```
+ *
+ * ### Routing a Sandbox through it
+ * **Example:** Pass the proxy when creating a sandbox
+ * ```typescript
+ * const sandbox = yield* sandboxes.create({ proxy: egress });
+ * ```
+ *
+ * @resource
+ * @product Proxy
+ */
+export const Proxy = declarable()(Resource("Modal.Proxy"));
+const toAttrs = (p, env) => ({
+    proxyId: p.proxyId ?? "",
+    name: p.name ?? "",
+    environment: env,
+    region: p.region || undefined,
+    ips: (p.proxyIps ?? []).flatMap((ip) => (ip.proxyIp ? [ip.proxyIp] : [])),
+});
+export const ProxyProvider = () => Provider.effect(Proxy, Effect.gen(function* () {
+    const observe = Effect.fn(function* (name, env) {
+        const found = yield* proxy
+            .getProxy({ name, environmentName: environmentOf(env) })
+            .pipe(Effect.catchTag("ProxyNotFound", () => Effect.undefined));
+        return found?.proxy?.proxyId ? found.proxy : undefined;
+    });
+    return {
+        stables: ["proxyId", "name", "environment", "region"],
+        diff: Effect.fn(function* ({ id, news, olds, output }) {
+            if (!isResolved(news))
+                return undefined;
+            if (envNameOf(news.environment) !== envNameOf(olds?.environment))
+                return { action: "replace" };
+            if (news.region !== olds?.region)
+                return { action: "replace" };
+            const name = yield* objectName(id, news.name);
+            if (output !== undefined && name !== output.name)
+                return { action: "replace" };
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const name = output?.name ?? (yield* objectName(id, olds?.name));
+            const env = output?.environment ?? envNameOf(olds?.environment);
+            const found = yield* observe(name, env);
+            if (!found)
+                return undefined;
+            const attrs = toAttrs(found, env);
+            return output !== undefined || olds?.name === undefined ? attrs : Unowned(attrs);
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const name = output?.name ?? (yield* objectName(id, news.name));
+            // Observe
+            let current = yield* observe(name, envNameOf(news.environment));
+            // Ensure
+            if (!current) {
+                yield* session.note(`Creating proxy ${name}...`);
+                const created = yield* proxy
+                    .createProxy({
+                    name,
+                    environmentName: environmentOf(envNameOf(news.environment)),
+                    region: news.region,
+                })
+                    .pipe(Effect.map((response) => response.proxy), Effect.catchTag("ProxyAlreadyExists", () => observe(name, envNameOf(news.environment))));
+                if (!created?.proxyId) {
+                    return yield* new ProxyUnexpectedResponse({
+                        message: `Modal returned no proxy for ${name}`,
+                    });
+                }
+                current = created;
+            }
+            // Sync the IP count against the observed IPs.
+            const desired = news.ips ?? 1;
+            const observed = (current.proxyIps ?? []).flatMap((ip) => ip.proxyIp ? [ip.proxyIp] : []);
+            for (let i = observed.length; i < desired; i++) {
+                yield* session.note(`Adding an IP to proxy ${name}...`);
+                yield* proxy.proxyAddIp({ proxyId: current.proxyId });
+            }
+            for (const ip of observed.slice(desired)) {
+                yield* session.note(`Removing IP ${ip} from proxy ${name}...`);
+                yield* proxy
+                    .proxyRemoveIp({ proxyIp: ip })
+                    .pipe(Effect.catchTag("ProxyNotFound", () => Effect.void));
+            }
+            const final = (yield* observe(name, envNameOf(news.environment))) ?? current;
+            return toAttrs(final, envNameOf(news.environment));
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* proxy
+                .deleteProxy({ proxyId: output.proxyId })
+                .pipe(Effect.catchTag("ProxyNotFound", () => Effect.void));
+        }),
+        list: Effect.fn(function* () {
+            const { proxies } = yield* proxy.listProxy({});
+            return (proxies ?? [])
+                .filter((p) => p.proxyId && isGeneratedName(p.name))
+                .map((p) => toAttrs(p, p.environmentName || undefined));
+        }),
+    };
+}));
+//# sourceMappingURL=Proxy.js.map

package/lib/Proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Proxy.js","sources":["../src/Proxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAEL,SAAS,EACT,aAAa,EACb,eAAe,EACf,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAAC,+BAA+B,CAE3F;CAAG;AAwCL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,UAAU,EAAS,CAAC,QAAQ,CAAQ,aAAa,CAAC,CAAC,CAAC;AAIzE,MAAM,OAAO,GAAG,CAAC,CAAc,EAAE,GAAuB,EAAmB,EAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;IAClB,WAAW,EAAE,GAAG;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;IAC7B,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAChC,QAAQ,CAAC,MAAM,CACb,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY,EAAE,GAAuB;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK;aACvB,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;aACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC;gBAC9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxF,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,EAAE,WAAW,IAAI,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnF,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChE,UAAU;YACV,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAChE,SAAS;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAC;gBACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK;qBACzB,WAAW,CAAC;oBACX,IAAI;oBACJ,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC3D,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EACxC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAC3C,CACF,CAAC;gBACJ,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;oBACtB,OAAO,KAAK,CAAC,CAAC,IAAI,uBAAuB,CAAC;wBACxC,OAAO,EAAE,+BAA+B,IAAI,EAAE;qBAC/C,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,GAAG,OAAO,CAAC;YACpB,CAAC;YACD,8CAA8C;YAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACvD,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC;YACF,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC;gBACxD,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,IAAI,KAAK,CAAC,CAAC;gBAC/D,KAAK,CAAC,CAAC,KAAK;qBACT,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;qBAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;YAC7E,OAAO,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,KAAK;iBACT,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;iBACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACnD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}