@alchemy.run/modal 0.0.0 → 2.0.0-beta.86

package/lib/Sandbox.d.ts

@@ -0,0 +1,215 @@
+import * as image from "@distilled.cloud/modal/image";
+import type * as Bundle from "alchemy/Bundle/Bundle";
+import { Platform, type Main, type PlatformProps } from "alchemy/Platform";
+import * as Provider from "alchemy/Provider";
+import type { Resource } from "alchemy/Resource";
+import { type HostRuntimeContext, type ServerHost } from "alchemy/Runtime/Process";
+import { Stack } from "alchemy/Stack";
+import * as Effect from "effect/Effect";
+import type { App } from "./App.ts";
+import { type ModalMounts, type Mount, type MountContract } from "./Mounts.ts";
+import type { Providers } from "./Providers.ts";
+type Ref<T> = T | Effect.Effect<T, never, Providers>;
+export interface SandboxProps extends PlatformProps {
+    /**
+     * Module entrypoint, bundled and baked into the sandbox image. Typically
+     * `import.meta.url`. A change to the bundle builds a new image.
+     */
+    main: string;
+    /** The App sandboxes run in. */
+    app: Ref<App>;
+    /**
+     * Base image the bundle runs on. It needs Bun on the `PATH`.
+     * @default "oven/bun:1"
+     */
+    image?: string;
+    /** Dockerfile lines run on the base before the bundle is added. */
+    commands?: string[];
+    /**
+     * Port the program's `fetch` handler listens on, opened as an encrypted
+     * tunnel on every sandbox.
+     * @default 8080
+     */
+    port?: number;
+    /**
+     * Named export to load from `main`.
+     * @default "default"
+     */
+    handler?: string;
+    /**
+     * Extra environment variables for the program. Stored, with the
+     * bindings' env, in a Modal Secret attached to every sandbox.
+     */
+    env?: Record<string, any>;
+    /** Bundler options. */
+    build?: Bundle.BundleConfig;
+    /**
+     * Volumes and cloud buckets mounted into every sandbox:
+     * `[{ volume: Data, path: "/data" }]`. `Modal.MountVolume` and
+     * `Modal.MountBucket` in the program add more.
+     */
+    mounts?: Mount[];
+}
+export interface SandboxAttributes {
+    /** The image with the bundled program (`im-…`). */
+    imageId: string;
+    /** The App sandboxes run in. */
+    appId: string;
+    /** Name of the App. */
+    appName: string | undefined;
+    /** Environment of the App. */
+    environment: string | undefined;
+    /** The Modal Secret holding the program's env (bindings' credentials included). */
+    secretId: string;
+    /** Name of that secret. */
+    secretName: string;
+    /** Port the program listens on. */
+    port: number;
+    /** The command each sandbox runs. */
+    command: string[];
+    /** Modal's volume and bucket mounts every sandbox gets (props and bindings). */
+    mounts: ModalMounts;
+    /** Content hash of the bundle and image inputs. */
+    hash: string;
+}
+export type Sandbox = Resource<"Modal.Sandbox", SandboxProps, SandboxAttributes, {
+    env?: Record<string, any>;
+    mounts?: MountContract;
+}, Providers>;
+export type SandboxServices = ServerHost;
+export type SandboxShape = Main<SandboxServices>;
+export type SandboxRuntimeContext = HostRuntimeContext;
+/**
+ * An Effect program that runs in Modal sandboxes. Alchemy bundles `main`,
+ * builds it into an image on Modal's builder (no Docker), and stores its
+ * env, including the credentials its bindings need, in a Modal Secret.
+ * `Modal.CreateSandbox(Agent)` then boots sandboxes that run the program and
+ * serve its `fetch` handler; `sandbox.getTcpPort()` reaches it.
+ *
+ * Each sandbox is an isolated instance: give one to every user, session or
+ * task, and terminate it when the work is done. A sandbox lives at most 24
+ * hours. Bindings work inside it like on any host, so the program can read a
+ * Modal Volume or a Cloudflare R2 bucket.
+ *
+ * ### Effect program
+ * **Example:** An agent that answers over HTTP
+ * ```typescript
+ * // src/Agent.ts
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import { Coder } from "./Coder.ts";
+ *
+ * export default class Agent extends Modal.Sandbox<Agent>()(
+ *   "Agent",
+ *   { main: import.meta.url, app: Coder },
+ *   Effect.gen(function* () {
+ *     return {
+ *       fetch: Effect.succeed(HttpServerResponse.text("ready")),
+ *     };
+ *   }),
+ * ) {}
+ * ```
+ *
+ * ### Async program
+ * **Example:** A plain HTTP server, no Effect (it runs on Bun)
+ * ```typescript
+ * // src/Agent.ts
+ * import * as Modal from "@alchemy.run/modal";
+ * import { Coder } from "./Coder.ts";
+ *
+ * export const Agent = Modal.Sandbox("Agent", {
+ *   main: "./src/agent-server.ts",
+ *   app: Coder,
+ *   env: { GREETING: "hello" },
+ * });
+ * export type AgentEnv = Modal.InferEnv<typeof Agent>;
+ * ```
+ *
+ * ```typescript
+ * // src/agent-server.ts
+ * import { createServer } from "node:http";
+ * import type { AgentEnv } from "./Agent.ts";
+ *
+ * const env = process.env as unknown as AgentEnv;
+ *
+ * createServer((_request, response) => response.end(env.GREETING)).listen(Number(process.env.PORT));
+ * ```
+ *
+ * ### Starting instances
+ * **Example:** One sandbox per request from a Worker
+ * ```typescript
+ * // src/Api.ts
+ * import * as Cloudflare from "@alchemy.run/cloudflare";
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpClientRequest from "effect/http/HttpClientRequest";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import Agent from "./Agent.ts";
+ *
+ * export default class Api extends Cloudflare.Worker<Api>()(
+ *   "Api",
+ *   { main: import.meta.url, compatibility: { flags: ["nodejs_compat"] } },
+ *   Effect.gen(function* () {
+ *     const agents = yield* Modal.CreateSandbox(Agent);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         const agent = yield* agents.create({ timeout: "10 minutes" });
+ *         const port = yield* agent.getTcpPort();
+ *         const response = yield* port.fetch(HttpClientRequest.get("/"));
+ *         const text = yield* response.text;
+ *         yield* agent.terminate();
+ *         return HttpServerResponse.text(text);
+ *       }).pipe(Effect.orDie),
+ *     };
+ *   }).pipe(Effect.provide(Modal.CreateSandboxHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Bindings inside the sandbox
+ * **Example:** Read a Modal Volume from the program
+ * ```typescript
+ * // src/Agent.ts
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import { Coder, Models } from "./Coder.ts";
+ *
+ * export default class Agent extends Modal.Sandbox<Agent>()(
+ *   "Agent",
+ *   { main: import.meta.url, app: Coder },
+ *   Effect.gen(function* () {
+ *     const models = yield* Modal.ReadVolume(Models);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         const files = yield* models.listFiles("/");
+ *         return yield* HttpServerResponse.json(files);
+ *       }).pipe(Effect.orDie),
+ *     };
+ *   }).pipe(Effect.provide(Modal.ReadVolumeHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Configuration
+ * **Example:** A GPU-ready base and a custom port
+ * ```typescript
+ * export default class Trainer extends Modal.Sandbox<Trainer>()(
+ *   "Trainer",
+ *   {
+ *     main: import.meta.url,
+ *     app: Coder,
+ *     image: "nvidia/cuda:12.4.1-runtime-ubuntu22.04",
+ *     commands: ["RUN apt-get update && apt-get install -y curl unzip && curl -fsSL https://bun.sh/install | bash && ln -s /root/.bun/bin/bun /usr/local/bin/bun"],
+ *     port: 3000,
+ *   },
+ *   program,
+ * ) {}
+ * ```
+ *
+ * @resource
+ * @product Sandbox
+ */
+export declare const Sandbox: Platform<Sandbox, SandboxServices, SandboxShape, SandboxRuntimeContext>;
+export declare const SandboxProvider: () => import("effect/Layer").Layer<Provider.Provider<Sandbox>, never, import("effect/FileSystem").FileSystem | import("effect/Path").Path | Stack | import("alchemy/Stage").Stage | image.ModalOpContext>;
+export {};
+//# sourceMappingURL=Sandbox.d.ts.map

package/lib/Sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.d.ts","sources":["../src/Sandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAEtD,OAAO,KAAK,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAGrD,OAAO,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAKpC,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,KAAK,EAEV,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKhD,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAErD,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACd;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC;IAC5B;;;;OAIG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,8BAA8B;IAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gFAAgF;IAChF,MAAM,EAAE,WAAW,CAAC;IACpB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,OAAO,GAAG,QAAQ,CAC5B,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,CAAA;CAAE,EACrD,SAAS,CACV,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC;AACzC,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;AACjD,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiIG;AACH,eAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,qBAAqB,CAiBxF,CAAC;AAyBL,eAAO,MAAM,eAAe,2MAiHzB,CAAC"}

package/lib/Sandbox.js

@@ -0,0 +1,278 @@
+import * as BuildPlan from "@alchemy.run/docker/BuildPlan";
+import * as image from "@distilled.cloud/modal/image";
+import * as secret from "@distilled.cloud/modal/secret";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import { mountInstallLines } from "alchemy/Mount";
+import { Platform } from "alchemy/Platform";
+import * as Provider from "alchemy/Provider";
+import { createHostRuntimeContext, } from "alchemy/Runtime/Process";
+import { Stack } from "alchemy/Stack";
+import { sha256Object } from "alchemy/Util/sha256";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { buildImage, ImageBuildOps } from "./ImageBuild.js";
+import { checkCommands, lowerPlan, MODAL_CAPABILITIES } from "./ImagePlan.js";
+import { envNameOf, objectName } from "./internal.js";
+import { resolveDeclarations } from "./internal/Declared.js";
+import { boundCapabilities, boundMounts, checkModalMounts, modalMountsOf, } from "./Mounts.js";
+import { putSecret } from "./Secret.js";
+const DEFAULT_PORT = 8080;
+/**
+ * An Effect program that runs in Modal sandboxes. Alchemy bundles `main`,
+ * builds it into an image on Modal's builder (no Docker), and stores its
+ * env, including the credentials its bindings need, in a Modal Secret.
+ * `Modal.CreateSandbox(Agent)` then boots sandboxes that run the program and
+ * serve its `fetch` handler; `sandbox.getTcpPort()` reaches it.
+ *
+ * Each sandbox is an isolated instance: give one to every user, session or
+ * task, and terminate it when the work is done. A sandbox lives at most 24
+ * hours. Bindings work inside it like on any host, so the program can read a
+ * Modal Volume or a Cloudflare R2 bucket.
+ *
+ * ### Effect program
+ * **Example:** An agent that answers over HTTP
+ * ```typescript
+ * // src/Agent.ts
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import { Coder } from "./Coder.ts";
+ *
+ * export default class Agent extends Modal.Sandbox<Agent>()(
+ *   "Agent",
+ *   { main: import.meta.url, app: Coder },
+ *   Effect.gen(function* () {
+ *     return {
+ *       fetch: Effect.succeed(HttpServerResponse.text("ready")),
+ *     };
+ *   }),
+ * ) {}
+ * ```
+ *
+ * ### Async program
+ * **Example:** A plain HTTP server, no Effect (it runs on Bun)
+ * ```typescript
+ * // src/Agent.ts
+ * import * as Modal from "@alchemy.run/modal";
+ * import { Coder } from "./Coder.ts";
+ *
+ * export const Agent = Modal.Sandbox("Agent", {
+ *   main: "./src/agent-server.ts",
+ *   app: Coder,
+ *   env: { GREETING: "hello" },
+ * });
+ * export type AgentEnv = Modal.InferEnv<typeof Agent>;
+ * ```
+ *
+ * ```typescript
+ * // src/agent-server.ts
+ * import { createServer } from "node:http";
+ * import type { AgentEnv } from "./Agent.ts";
+ *
+ * const env = process.env as unknown as AgentEnv;
+ *
+ * createServer((_request, response) => response.end(env.GREETING)).listen(Number(process.env.PORT));
+ * ```
+ *
+ * ### Starting instances
+ * **Example:** One sandbox per request from a Worker
+ * ```typescript
+ * // src/Api.ts
+ * import * as Cloudflare from "@alchemy.run/cloudflare";
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpClientRequest from "effect/http/HttpClientRequest";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import Agent from "./Agent.ts";
+ *
+ * export default class Api extends Cloudflare.Worker<Api>()(
+ *   "Api",
+ *   { main: import.meta.url, compatibility: { flags: ["nodejs_compat"] } },
+ *   Effect.gen(function* () {
+ *     const agents = yield* Modal.CreateSandbox(Agent);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         const agent = yield* agents.create({ timeout: "10 minutes" });
+ *         const port = yield* agent.getTcpPort();
+ *         const response = yield* port.fetch(HttpClientRequest.get("/"));
+ *         const text = yield* response.text;
+ *         yield* agent.terminate();
+ *         return HttpServerResponse.text(text);
+ *       }).pipe(Effect.orDie),
+ *     };
+ *   }).pipe(Effect.provide(Modal.CreateSandboxHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Bindings inside the sandbox
+ * **Example:** Read a Modal Volume from the program
+ * ```typescript
+ * // src/Agent.ts
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import { Coder, Models } from "./Coder.ts";
+ *
+ * export default class Agent extends Modal.Sandbox<Agent>()(
+ *   "Agent",
+ *   { main: import.meta.url, app: Coder },
+ *   Effect.gen(function* () {
+ *     const models = yield* Modal.ReadVolume(Models);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         const files = yield* models.listFiles("/");
+ *         return yield* HttpServerResponse.json(files);
+ *       }).pipe(Effect.orDie),
+ *     };
+ *   }).pipe(Effect.provide(Modal.ReadVolumeHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Configuration
+ * **Example:** A GPU-ready base and a custom port
+ * ```typescript
+ * export default class Trainer extends Modal.Sandbox<Trainer>()(
+ *   "Trainer",
+ *   {
+ *     main: import.meta.url,
+ *     app: Coder,
+ *     image: "nvidia/cuda:12.4.1-runtime-ubuntu22.04",
+ *     commands: ["RUN apt-get update && apt-get install -y curl unzip && curl -fsSL https://bun.sh/install | bash && ln -s /root/.bun/bin/bun /usr/local/bin/bun"],
+ *     port: 3000,
+ *   },
+ *   program,
+ * ) {}
+ * ```
+ *
+ * @resource
+ * @product Sandbox
+ */
+export const Sandbox = Platform("Modal.Sandbox", {
+    createRuntimeContext: createHostRuntimeContext("Modal.Sandbox"),
+    // `{ app: Coder }` at module scope is an Effect: yield it so the App is
+    // registered and `news.app` is resolved attributes at reconcile.
+    transformProps: (_id, props) => Effect.gen(function* () {
+        if (globalThis.__ALCHEMY_RUNTIME__)
+            return props;
+        const app = Effect.isEffect(props.app)
+            ? yield* props.app
+            : props.app;
+        const mounts = props.mounts === undefined
+            ? undefined
+            : (yield* resolveDeclarations(props.mounts));
+        return { ...props, app, mounts };
+    }),
+});
+const bootstrapEntry = (handler) => (importPath) => `
+import { bootstrap } from "@alchemy.run/modal/Bootstrap";
+import { ${handler} as entrypoint } from ${JSON.stringify(importPath)};
+
+await bootstrap(entrypoint);
+`;
+const appOf = (value) => {
+    const rec = (value ?? {});
+    return { appId: rec.appId ?? "", appName: rec.name, environment: envNameOf(rec.environment) };
+};
+/** An env value as a string, as the program's `process.env` sees it. */
+const envText = (value) => typeof value === "string"
+    ? value
+    : Redacted.isRedacted(value)
+        ? String(Redacted.value(value))
+        : JSON.stringify(value ?? null);
+export const SandboxProvider = () => Provider.effect(Sandbox, Effect.gen(function* () {
+    const stack = yield* Stack;
+    /** Plan the program's image (bundle + bootstrap) with the shared BuildPlan. */
+    const prepare = Effect.fn(function* (news, port, bindings) {
+        // Other providers' mount clients go into the image; Modal can't
+        // provide FUSE or NFS, so those that need it fail here.
+        const capabilities = boundCapabilities(bindings);
+        yield* checkModalMounts("Modal.Sandbox", capabilities);
+        const plan = yield* BuildPlan.plan({
+            main: news.main,
+            image: news.image,
+            handler: news.handler,
+            build: news.build,
+        }, {
+            capabilities: { ...MODAL_CAPABILITIES, target: "Modal.Sandbox" },
+            port,
+            bootstrap: news.isExternal ? undefined : bootstrapEntry(news.handler ?? "default"),
+            install: mountInstallLines(capabilities),
+        });
+        const extra = yield* checkCommands(news.commands ?? []);
+        const spec = yield* lowerPlan(plan, extra);
+        const hash = yield* sha256Object({ plan: plan.hash, extra });
+        const command = BuildPlan.startCommand(plan) ?? [];
+        return { spec, hash, command: [...command] };
+    });
+    return {
+        stables: ["appId", "secretName"],
+        diff: Effect.fn(function* ({ news, output, newBindings }) {
+            if (!isResolved(news) || !isResolved(newBindings) || output === undefined) {
+                return undefined;
+            }
+            if (appOf(news.app).appId !== output.appId)
+                return { action: "replace" };
+            const { hash } = yield* prepare(news, news.port ?? DEFAULT_PORT, newBindings);
+            if (hash !== output.hash)
+                return { action: "update" };
+            const mounts = yield* modalMountsOf([
+                ...(news.mounts ?? []),
+                ...boundMounts(newBindings),
+            ]);
+            return deepEqual(mounts, output.mounts) ? undefined : { action: "update" };
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (output === undefined)
+                return undefined;
+            const found = yield* image
+                .imageFromId({ imageId: output.imageId })
+                .pipe(Effect.catchTag("ImageNotFound", () => Effect.undefined));
+            return found?.imageId ? output : undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session, bindings }) {
+            const app = appOf(news.app);
+            // The props' mounts, then the ones `Modal.MountVolume` / `MountBucket` bound.
+            const mounts = yield* modalMountsOf([...(news.mounts ?? []), ...boundMounts(bindings)]);
+            const port = news.port ?? DEFAULT_PORT;
+            const secretName = output?.secretName ?? `${yield* objectName(id, undefined, 58)}-env`;
+            // Sync the program's env (bindings' credentials included) into a
+            // secret every sandbox attaches; values never enter the image.
+            const env = {
+                ALCHEMY_STACK_NAME: stack.name,
+                ALCHEMY_STAGE: stack.stage,
+                ALCHEMY_PHASE: "runtime",
+                HOST: "0.0.0.0",
+                PORT: String(port),
+            };
+            for (const [key, value] of Object.entries(news.env ?? {}))
+                env[key] = envText(value);
+            const stored = yield* putSecret(yield* secret.secretGetOrCreate, secretName, app.environment, env);
+            // Ensure the image: Modal reuses a cached build for the same inputs.
+            const { spec, hash, command } = yield* prepare(news, port, bindings);
+            const imageId = output !== undefined && output.hash === hash && output.appId === app.appId
+                ? output.imageId
+                : yield* buildImage(yield* ImageBuildOps, app.appId, spec, { note: session.note });
+            return {
+                imageId,
+                appId: app.appId,
+                appName: app.appName,
+                environment: app.environment,
+                secretId: stored.secretId,
+                secretName,
+                port,
+                command,
+                mounts,
+                hash,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* secret
+                .deleteSecret({ secretId: output.secretId })
+                .pipe(Effect.catchTag("SecretNotFound", () => Effect.void));
+            yield* image
+                .deleteImage({ imageId: output.imageId })
+                .pipe(Effect.catchTag("ImageNotFound", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=Sandbox.js.map

package/lib/Sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.js","sources":["../src/Sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAC;AAC3D,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,+BAA+B,CAAC;AAExD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAiC,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EACL,wBAAwB,GAGzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAKhB,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,YAAY,GAAG,IAAI,CAAC;AAgF1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiIG;AACH,MAAM,CAAC,MAAM,OAAO,GAClB,QAAQ,CAAC,eAAe,EAAE;IACxB,oBAAoB,EAAE,wBAAwB,CAAC,eAAe,CAAC;IAC/D,wEAAwE;IACxE,iEAAiE;IACjE,cAAc,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,UAAU,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;YACpC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAA2C;YAC1D,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACd,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,SAAS;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAa,CAAC;QAC9D,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC,CAAC;CACL,CAAC,CAAC;AAEL,MAAM,cAAc,GAClB,CAAC,OAAe,EAAE,EAAE,CACpB,CAAC,UAAkB,EAAU,EAAE,CAC7B;;WAEO,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;;CAGpE,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE;IAC/B,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAA6D,CAAC;IACtF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAChG,CAAC,CAAC;AAEF,wEAAwE;AACxE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CACzC,OAAO,KAAK,KAAK,QAAQ;IACvB,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,MAAM,CACb,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAE3B,+EAA+E;IAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjC,IAAkB,EAClB,IAAY,EACZ,QAAuB;QAEvB,gEAAgE;QAChE,wDAAwD;QACxD,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjD,KAAK,CAAC,CAAC,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAChC;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,EACD;YACE,YAAY,EAAE,EAAE,GAAG,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE;YAChE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;YAClF,OAAO,EAAE,iBAAiB,CAAC,YAAY,CAAC;SACzC,CACF,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE;YACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1E,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YAClF,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9E,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;YAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtB,GAAG,WAAW,CAAC,WAAW,CAAC;aAC5B,CAAC,CAAC;YACH,OAAO,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAY,CAAC;QACxF,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK;iBACvB,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,OAAO,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,8EAA8E;YAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC;YACvC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC;YAEvF,iEAAiE;YACjE,+DAA+D;YAC/D,MAAM,GAAG,GAA2B;gBAClC,kBAAkB,EAAE,KAAK,CAAC,IAAI;gBAC9B,aAAa,EAAE,KAAK,CAAC,KAAK;gBAC1B,aAAa,EAAE,SAAS;gBACxB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;aACnB,CAAC;YACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACrF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAC/B,UAAU,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CACJ,CAAC;YAEF,qEAAqE;YACrE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrE,MAAM,OAAO,GACX,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;gBACxE,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAEvF,OAAO;gBACL,OAAO;gBACP,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU;gBACV,IAAI;gBACJ,OAAO;gBACP,MAAM;gBACN,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,MAAM;iBACV,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;iBAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,KAAK,CAAC,CAAC,KAAK;iBACT,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}