@alchemy.run/modal 0.0.0 → 2.0.0-beta.86

package/lib/internal/RpcAuth.js

@@ -0,0 +1,100 @@
+import * as Binding from "alchemy/Binding";
+import * as Output from "alchemy/Output";
+import { Random } from "alchemy/Random";
+import { rpcMethodOf } from "alchemy/Rpc";
+import { CurrentRuntimeContext, sanitizeKey } from "alchemy/RuntimeContext";
+import * as Effect from "effect/Effect";
+import { HttpServerRequest } from "effect/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/http/HttpServerResponse";
+import * as Redacted from "effect/Redacted";
+/*
+ * Who may call a program's RPC methods. Every binding that calls them
+ * (`Modal.InvokeFunction`, `Modal.FetchServer`) gets its own random key: the
+ * caller keeps the key, the target keeps only its SHA-256, and each RPC call
+ * carries the key. A key opens one target for one caller, so a target can't
+ * replay what it receives to another target. Modal's own access control
+ * (proxy auth, environment roles) still applies underneath.
+ */
+/** Env var on the target: the SHA-256 (hex) of each caller's key, as a JSON array. */
+export const RPC_CALLERS_ENV = "ALCHEMY_MODAL_RPC_CALLERS";
+/** Request header a Server's RPC call carries its key in. */
+export const RPC_KEY_HEADER = "x-alchemy-rpc-key";
+/** Keyword argument a Function's RPC call carries its key in (the entrypoint forwards it as {@link RPC_KEY_HEADER}). */
+export const RPC_KEY_KWARG = "__alchemy_rpc_key__";
+/** Env var on the caller holding its key for the target `targetId`. */
+export const rpcKeyEnv = (targetId) => sanitizeKey(`ALCHEMY_MODAL_RPC_KEY_${targetId}`);
+/** SHA-256 of `text`, as hex. */
+export const sha256Hex = (text) => Effect.promise(() => crypto.subtle.digest("SHA-256", new TextEncoder().encode(text))).pipe(Effect.map((digest) => Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")));
+/** The caller key hashes a target's bindings recorded, sorted. */
+export const rpcCallersOf = (bindings) => [...new Set(bindings.flatMap((binding) => binding.data.rpcCallers ?? []))].sort();
+/**
+ * The caller half of an RPC binding. Yield it while the binding's layer is
+ * built; call the result with the target in the binding. At deploy it mints
+ * the key for this caller and target (`<host><target>RpcKey`), binds it into
+ * the host's env, and records its hash on the target. At run time it reads
+ * the key back, or `undefined` when the caller has none (a script).
+ */
+export const RpcCaller = Effect.gen(function* () {
+    // Deploy only: a host bundle never creates the key.
+    const Key = globalThis.__ALCHEMY_RUNTIME__ ? undefined : yield* Random;
+    return Effect.fn(function* (target) {
+        // The host binding the target, read per call: one binding layer serves
+        // every host in the Stack, so a host captured when the layer was built
+        // would be the first one to build it.
+        const runtime = yield* CurrentRuntimeContext;
+        const env = rpcKeyEnv(target.LogicalId);
+        if (!globalThis.__ALCHEMY_RUNTIME__ && Key !== undefined && runtime !== undefined) {
+            const host = yield* Binding.Host;
+            if (host !== undefined) {
+                const key = yield* Key(`${host.LogicalId}${target.LogicalId}RpcKey`, {});
+                yield* runtime.set(env, key.text);
+                yield* target.bind `Modal.RpcCaller(${host})`({
+                    rpcCallers: [
+                        key.text.pipe(Output.mapEffect((text) => text.pipe(Redacted.value, sha256Hex))),
+                    ],
+                });
+            }
+        }
+        return Effect.gen(function* () {
+            if (runtime === undefined)
+                return undefined;
+            const value = yield* runtime.get(env);
+            return value === undefined
+                ? undefined
+                : Redacted.isRedacted(value)
+                    ? Redacted.value(value)
+                    : value;
+        });
+    });
+});
+/**
+ * Serve `rpc` only to callers whose key's hash is in {@link RPC_CALLERS_ENV};
+ * every other request goes to `fallback`. A call without a key, or with one
+ * no binding issued, gets `401`.
+ */
+export const requireRpcCaller = (callers, rpc, fallback) => Effect.gen(function* () {
+    const request = yield* HttpServerRequest;
+    if (rpcMethodOf(request) === undefined)
+        return yield* fallback;
+    const key = request.headers[RPC_KEY_HEADER];
+    if (typeof key !== "string" || key.length === 0 || !callers.has(yield* sha256Hex(key))) {
+        return HttpServerResponse.text("Unauthorized: this caller has no binding to the program", {
+            status: 401,
+        });
+    }
+    return yield* rpc;
+});
+/** The caller key hashes in a target's env (see {@link RPC_CALLERS_ENV}). */
+export const parseCallers = (value) => {
+    const list = typeof value === "string" ? safeParse(value) : value;
+    return new Set(Array.isArray(list) ? list.filter((item) => typeof item === "string") : []);
+};
+const safeParse = (text) => {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+};
+//# sourceMappingURL=RpcAuth.js.map

package/lib/internal/RpcAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RpcAuth.js","sources":["../../src/internal/RpcAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,kBAAkB,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAE3D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAElD,wHAAwH;AACxH,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAEnD,uEAAuE;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,WAAW,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;AAQhG,iCAAiC;AACjC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACxC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACxF,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpB,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1F,CACF,CAAC;AAEJ,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,QAA4D,EAClD,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAOjG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3C,oDAAoD;IACpD,MAAM,GAAG,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACvE,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAsC;QAChE,uEAAuE;QACvE,uEAAuE;QACvE,sCAAsC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,mBAAmB,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACzE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClC,KAAK,CAAC,CAAE,MAAgC,CAAC,IAAI,CAAA,mBAAmB,IAAI,GAAG,CAAC;oBACtE,UAAU,EAAE;wBACV,GAAG,CAAC,IAAI,CAAC,IAAI,CACX,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAC5C;qBACvB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAqC,GAAG,CAAC,CAAC;YAC1E,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;oBAC1B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;oBACvB,CAAC,CAAC,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAA4B,EAC5B,GAA2B,EAC3B,QAAmC,EACnC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACzC,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,kBAAkB,CAAC,IAAI,CAAC,yDAAyD,EAAE;YACxF,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC;AACpB,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE;IAClE,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAW,EAAE;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC"}

package/lib/internal/Runtime.d.ts

@@ -0,0 +1,127 @@
+import * as classes from "@distilled.cloud/modal/classes";
+import * as functions from "@distilled.cloud/modal/functions";
+import * as secret from "@distilled.cloud/modal/secret";
+import type { Input } from "alchemy/Input";
+import { Stack } from "alchemy/Stack";
+import * as Effect from "effect/Effect";
+import type { ContainerProps } from "../Container.ts";
+import { type MountBindings } from "../Mounts.ts";
+import type { Providers } from "../Providers.ts";
+import { ModalDeployUnexpectedResponse } from "./Deploy.ts";
+import { type RpcCallerBinding } from "./RpcAuth.ts";
+/** What a runtime's bindings attach: mounts, and the keys of RPC callers. */
+type RuntimeBindings = ReadonlyArray<{
+    readonly data: {
+        readonly mounts?: MountBindings[number]["data"]["mounts"];
+    } & RpcCallerBinding;
+}>;
+/** Attributes shared by `Modal.Function` and `Modal.Server`. */
+export interface RuntimeAttributes {
+    /** Function ID (`fu-…`). */
+    functionId: string;
+    /** Name of the function in its App. */
+    name: string;
+    /** The App the function is deployed in. */
+    appId: string;
+    /** Name of that App. */
+    appName: string | undefined;
+    /** Environment of that App. */
+    environment: string | undefined;
+    /** The image with the bundled program (`im-…`). */
+    imageId: string;
+    /** The Modal Secret holding the program's env (bindings' credentials included). */
+    secretId: string;
+    /** Name of that secret. */
+    secretName: string;
+    /** Port the program listens on. */
+    port: number;
+    /** The command the entrypoint starts. */
+    command: string[];
+    /** Content hash of the bundle, image and function definition. */
+    hash: string;
+    /** The class (`cs-…`) of a function with RPC methods, which Modal runs as a class. */
+    classId?: string | undefined;
+}
+/** What differs between a Function and a Server. */
+export interface RuntimeKind<P extends ContainerProps> {
+    /** Resource type, e.g. `Modal.Function`. */
+    readonly type: string;
+    /** The Function fields specific to the kind (webhook, schedule, HTTP config, ...). */
+    readonly definition: (props: P, context: {
+        readonly port: number;
+        readonly startupTimeout: number;
+    }) => functions.Function;
+    /** The program's bootstrap for an Effect-native `main`. */
+    readonly bootstrap: (handler: string) => (importPath: string) => string;
+    /** Env the kind adds to the program's (e.g. turning RPC on). */
+    readonly env?: (props: P) => Record<string, string>;
+}
+/**
+ * `{ app: Coder, mounts: [{ volume: Data, path: "/data" }] }` at module scope
+ * holds Effects: yield them so the resources are registered and the props
+ * hold their resolved attributes at reconcile.
+ */
+export declare const resolveContainerProps: <P extends ContainerProps>(_id: string, props: P) => Effect.Effect<P, never, Providers>;
+/** The resolved app of the props. */
+export declare const appOf: (value: unknown) => {
+    appId: string;
+    appName: string | undefined;
+    environment: string | undefined;
+};
+/**
+ * The lifecycle shared by every Modal runtime: a function in an App whose
+ * container runs the bundled program behind Alchemy's Python entrypoint.
+ *
+ * 1. the program's env goes into a Modal Secret (values never enter the image);
+ * 2. the image is the base plus standalone Python plus the bundle, built by
+ *    Modal and reused while its inputs don't change;
+ * 3. `FunctionCreate` writes the definition (with the entrypoint and client
+ *    mounts), updating the existing function in place;
+ * 4. the App is republished with the function, keeping its other functions.
+ */
+export declare const runtimeLifecycle: <P extends ContainerProps>(kind: RuntimeKind<P>) => Effect.Effect<{
+    stables: Array<keyof RuntimeAttributes>;
+    diff: (args_0: {
+        id: string;
+        news: Input<P>;
+        output: RuntimeAttributes | undefined;
+        newBindings: Input<RuntimeBindings>;
+    }) => Effect.Effect<{
+        readonly action: "replace";
+    } | {
+        readonly action: "update";
+    } | undefined, import("@alchemy.run/docker/BuildHash").BuildHashInvalidProps | import("@alchemy.run/docker/BuildPlan").BuildPlanError | import("alchemy/Bundle/Bundle").BundleError | import("@alchemy.run/docker/DockerfileParser").DockerfileSyntaxError | import("../Mounts.ts").MountNotBound | import("alchemy/Mount").MountUnsupported | import("effect/PlatformError").PlatformError | import("@alchemy.run/docker/BuildPlan").UnsupportedDockerfile, import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
+    read: (args_0: {
+        output: RuntimeAttributes | undefined;
+    }) => Effect.Effect<RuntimeAttributes | undefined, classes.ModalOpError, classes.ModalOpContext>;
+    reconcile: (args_0: {
+        id: string;
+        news: P;
+        output: RuntimeAttributes | undefined;
+        session: {
+            note: (message: string) => Effect.Effect<void>;
+        };
+        bindings: RuntimeBindings;
+    }) => Effect.Effect<{
+        attributes: {
+            functionId: string;
+            name: string;
+            appId: string;
+            appName: string | undefined;
+            environment: string | undefined;
+            imageId: string;
+            secretId: string;
+            secretName: string;
+            port: number;
+            command: string[];
+            hash: string;
+            classId: string | undefined;
+        };
+        metadata: functions.FunctionHandleMetadata | undefined;
+    }, import("@distilled.cloud/modal/app").AppNotFound | import("@distilled.cloud/core/errors").BadGateway | import("../Blob.ts").BlobTransferFailed | import("@alchemy.run/docker/BuildHash").BuildHashInvalidProps | import("@alchemy.run/docker/BuildPlan").BuildPlanError | import("alchemy/Bundle/Bundle").BundleError | import("@distilled.cloud/core/config").ConfigError | import("@alchemy.run/docker/DockerfileParser").DockerfileSyntaxError | secret.EnvironmentNotFound | functions.FunctionNotFound | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/http/HttpClientError").HttpClientError | import("../ImageBuild.ts").ImageBuildFailed | import("../ImageBuild.ts").ImageBuildTimeout | import("../ImageBuild.ts").ImageBuildUnexpectedResponse | import("@distilled.cloud/modal/image").ImageNotFound | import("@distilled.cloud/core/errors").InternalServerError | import("@distilled.cloud/core/protocol-http").InvalidInput | ModalDeployUnexpectedResponse | import("@distilled.cloud/modal/Errors").ModalParseError | import("../Mounts.ts").MountNotBound | import("@distilled.cloud/modal/mount").MountNotFound | import("alchemy/Mount").MountUnsupported | import("effect/PlatformError").PlatformError | import("@distilled.cloud/core/sdk-error").SdkError | secret.SecretAlreadyExists | secret.SecretNotFound | import("../Secret.ts").SecretUnexpectedResponse | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/modal/Errors").UnknownModalError | import("@alchemy.run/docker/BuildPlan").UnsupportedDockerfile, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("alchemy/ResourceContext").ResourceContext | Stack | import("alchemy/Stage").Stage | classes.ModalOpContext>;
+    delete: (args_0: {
+        output: RuntimeAttributes;
+    }) => Effect.Effect<void, classes.ModalOpError, classes.ModalOpContext>;
+}, never, Stack>;
+export {};
+//# sourceMappingURL=Runtime.d.ts.map

package/lib/internal/Runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Runtime.d.ts","sources":["../../src/internal/Runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gCAAgC,CAAC;AAC1D,OAAO,KAAK,SAAS,MAAM,kCAAkC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,+BAA+B,CAAC;AAExD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,cAAc,EAAO,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAKL,KAAK,aAAa,EAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAML,6BAA6B,EAG9B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAmB,KAAK,gBAAgB,EAAgB,MAAM,cAAc,CAAC;AAEpF,6EAA6E;AAC7E,KAAK,eAAe,GAAG,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAA;KAAE,GAAG,gBAAgB,CAAC;CACjG,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,+BAA+B;IAC/B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,cAAc;IACnD,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,CAAC,EACR,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAAE,KAChE,SAAS,CAAC,QAAQ,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IACxE,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrD;AAKD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,cAAc,OAAO,MAAM,SAAS,CAAC,uCAYjF,CAAC;AAEL,qCAAqC;AACrC,eAAO,MAAM,KAAK,UAAW,OAAO;IAEzB,KAAK;IAAmB,OAAO;IAAY,WAAW;CAChE,CAAC;AAsEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,cAAc,QAAQ,WAAW,CAAC,CAAC,CAAC;aAgD7B,KAAK,CAAC,MAAM,iBAAiB,CAAC;;YAOpE,MAAM;cACJ,KAAK,CAAC,CAAC,CAAC;gBACN,iBAAiB,GAAG,SAAS;qBACxB,KAAK,CAAC,eAAe,CAAC;;yBAK0B,SAAS;;yBAG7B,QAAQ;;;gBAEF,iBAAiB,GAAG,SAAS;;;YAcxE,MAAM;cACJ,CAAC;gBACC,iBAAiB,GAAG,SAAS;iBAC5B;YAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;SAAE;kBACjD,eAAe;;;;;;;;;;;;;;;;;;;gBA+FwB,iBAAiB;;gBAatE,CAAC"}

package/lib/internal/Runtime.js

@@ -0,0 +1,246 @@
+import * as classes from "@distilled.cloud/modal/classes";
+import * as functions from "@distilled.cloud/modal/functions";
+import * as secret from "@distilled.cloud/modal/secret";
+import { isResolved } from "alchemy/Diff";
+import { Stack } from "alchemy/Stack";
+import { sha256Object } from "alchemy/Util/sha256";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { gpuConfig } from "../ImageBuild.js";
+import { envNameOf, objectName, seconds } from "../internal.js";
+import { boundCapabilities, boundMounts, modalMountsOf, } from "../Mounts.js";
+import { putSecret } from "../Secret.js";
+import { resolveDeclarations } from "./Declared.js";
+import { buildRuntimeImage, classTag, clientMount, DEFAULT_PORT, entrypointMount, ModalDeployUnexpectedResponse, planRuntimeImage, publishFunction, } from "./Deploy.js";
+import { ENTRYPOINT_MODULE } from "./Entrypoint.js";
+import { RPC_CALLERS_ENV, rpcCallersOf } from "./RpcAuth.js";
+const resolveRef = (value) => Effect.isEffect(value) ? value : Effect.succeed(value);
+/**
+ * `{ app: Coder, mounts: [{ volume: Data, path: "/data" }] }` at module scope
+ * holds Effects: yield them so the resources are registered and the props
+ * hold their resolved attributes at reconcile.
+ */
+export const resolveContainerProps = (_id, props) => Effect.gen(function* () {
+    if (globalThis.__ALCHEMY_RUNTIME__)
+        return props;
+    const app = yield* resolveRef(props.app);
+    const proxy = props.proxy === undefined ? undefined : yield* resolveRef(props.proxy);
+    const secrets = props.secrets === undefined ? undefined : yield* Effect.forEach(props.secrets, resolveRef);
+    const mounts = props.mounts === undefined
+        ? undefined
+        : (yield* resolveDeclarations(props.mounts));
+    return { ...props, app, proxy, secrets, mounts };
+});
+/** The resolved app of the props. */
+export const appOf = (value) => {
+    const rec = (value ?? {});
+    return { appId: rec.appId ?? "", appName: rec.name, environment: envNameOf(rec.environment) };
+};
+const idOf = (value, key) => typeof value === "object" && value !== null && key in value
+    ? value[key]
+    : undefined;
+/** An env value as a string, as the program's `process.env` sees it. */
+const envText = (value) => typeof value === "string"
+    ? value
+    : Redacted.isRedacted(value)
+        ? String(Redacted.value(value))
+        : JSON.stringify(value ?? null);
+/** The function definition fields every kind shares. */
+const baseDefinition = (props, context, mounts) => ({
+    moduleName: ENTRYPOINT_MODULE,
+    functionName: context.tag,
+    definitionType: "DEFINITION_TYPE_FILE",
+    functionType: "FUNCTION_TYPE_FUNCTION",
+    resources: {
+        milliCpu: props.cpu !== undefined ? Math.round(props.cpu * 1000) : undefined,
+        milliCpuMax: props.cpuLimit !== undefined ? Math.round(props.cpuLimit * 1000) : undefined,
+        memoryMb: props.memory,
+        memoryMbMax: props.memoryLimit,
+        gpuConfig: gpuConfig(props.gpu),
+        ephemeralDiskMb: props.ephemeralDisk,
+    },
+    volumeMounts: mounts.volumeMounts,
+    cloudBucketMounts: mounts.cloudBucketMounts,
+    proxyId: idOf(props.proxy, "proxyId"),
+    timeoutSecs: Math.round(context.timeout),
+    startupTimeoutSecs: Math.round(context.startupTimeout),
+    cloudProviderStr: props.cloud ?? "",
+    appName: context.appName ?? "",
+    schedulerPlacement: props.regions !== undefined || props.nonpreemptible
+        ? { regions: props.regions, nonpreemptible: props.nonpreemptible }
+        : undefined,
+    autoscalerSettings: {
+        minContainers: props.minContainers,
+        maxContainers: props.maxContainers,
+        bufferContainers: props.bufferContainers,
+        scaleupWindow: props.scaleupWindow,
+        scaledownWindow: props.scaledownWindow,
+    },
+    // Older mirrors of `autoscalerSettings` the Python client still sets.
+    warmPoolSize: props.minContainers ?? 0,
+    concurrencyLimit: props.maxContainers ?? 0,
+    ExperimentalBufferContainers: props.bufferContainers ?? 0,
+    taskIdleTimeoutSecs: props.scaledownWindow ?? 0,
+    checkpointingEnabled: props.enableMemorySnapshot,
+    blockNetwork: props.blockNetwork,
+    untrusted: props.restrictModalAccess,
+    i6pnEnabled: props.i6pn,
+    methodDefinitionsSet: true,
+    mountClientDependencies: true,
+    ExperimentalConcurrentCancellations: true,
+});
+/**
+ * The lifecycle shared by every Modal runtime: a function in an App whose
+ * container runs the bundled program behind Alchemy's Python entrypoint.
+ *
+ * 1. the program's env goes into a Modal Secret (values never enter the image);
+ * 2. the image is the base plus standalone Python plus the bundle, built by
+ *    Modal and reused while its inputs don't change;
+ * 3. `FunctionCreate` writes the definition (with the entrypoint and client
+ *    mounts), updating the existing function in place;
+ * 4. the App is republished with the function, keeping its other functions.
+ */
+export const runtimeLifecycle = (kind) => Effect.gen(function* () {
+    const stack = yield* Stack;
+    const prepare = Effect.fn(function* (id, news, bindings) {
+        const port = news.port ?? DEFAULT_PORT;
+        const tag = news.name ?? id;
+        const app = appOf(news.app);
+        const timeout = seconds(news.timeout) ?? 300;
+        const startupTimeout = seconds(news.startupTimeout) ?? timeout;
+        const image = yield* planRuntimeImage(kind.type, news, port, news.isExternal ? undefined : kind.bootstrap(news.handler ?? "default"), boundCapabilities(bindings));
+        // The props' mounts, then the ones `Modal.MountVolume` / `MountBucket` bound.
+        const mounts = yield* modalMountsOf([...(news.mounts ?? []), ...boundMounts(bindings)]);
+        const base = baseDefinition(news, { tag, appName: app.appName, timeout, startupTimeout }, mounts);
+        const specific = kind.definition(news, { port, startupTimeout });
+        const definition = {
+            ...base,
+            ...specific,
+            // A class's service function is named `<tag>.*`, as Modal's clients name it.
+            functionName: specific.isClass ? classTag(tag) : tag,
+            autoscalerSettings: { ...base.autoscalerSettings, ...specific.autoscalerSettings },
+        };
+        const secretIds = (news.secrets ?? []).flatMap((s) => idOf(s, "secretId") ?? []);
+        const env = {
+            ...Object.fromEntries(Object.entries(news.env ?? {}).map(([key, value]) => [key, envText(value)])),
+            ...kind.env?.(news),
+            // The callers whose keys open the program's RPC methods.
+            ...(rpcCallersOf(bindings).length > 0
+                ? { [RPC_CALLERS_ENV]: JSON.stringify(rpcCallersOf(bindings)) }
+                : {}),
+        };
+        const hash = yield* sha256Object({ image: image.hash, definition, secretIds, env });
+        return { port, tag, app, image, definition, secretIds, env, hash };
+    });
+    return {
+        stables: ["appId", "name", "secretName"],
+        diff: Effect.fn(function* ({ id, news, output, newBindings, }) {
+            if (!isResolved(news) || !isResolved(newBindings) || output === undefined) {
+                return undefined;
+            }
+            if (appOf(news.app).appId !== output.appId)
+                return { action: "replace" };
+            if ((news.name ?? id) !== output.name)
+                return { action: "replace" };
+            const { hash } = yield* prepare(id, news, newBindings);
+            return hash !== output.hash ? { action: "update" } : undefined;
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (output === undefined)
+                return undefined;
+            const found = yield* functions
+                .functionGetById({ functionId: output.functionId })
+                .pipe(Effect.catchTag("FunctionNotFound", () => Effect.undefined));
+            return found?.function ? output : undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session, bindings, }) {
+            const { port, tag, app, image, definition, secretIds, env: programEnv, hash, } = yield* prepare(id, news, bindings);
+            for (const warning of image.warnings)
+                yield* session.note(warning);
+            const secretName = output?.secretName ?? `${yield* objectName(id, undefined, 58)}-env`;
+            // Sync the program's env (bindings' credentials included) into the
+            // secret the function attaches; values never enter the image.
+            const env = {
+                ALCHEMY_STACK_NAME: stack.name,
+                ALCHEMY_STAGE: stack.stage,
+                ALCHEMY_PHASE: "runtime",
+                ALCHEMY_COMMAND: JSON.stringify(image.command),
+                HOST: "0.0.0.0",
+                PORT: String(port),
+            };
+            Object.assign(env, programEnv);
+            const stored = yield* putSecret(yield* secret.secretGetOrCreate, secretName, app.environment, env);
+            // Ensure the image: Modal reuses a cached build for the same inputs.
+            const imageId = output !== undefined && output.hash === hash && output.appId === app.appId
+                ? output.imageId
+                : yield* buildRuntimeImage(app.appId, image, {
+                    builderVersion: news.builderVersion,
+                    gpu: news.gpu,
+                    note: session.note,
+                });
+            const mountIds = [yield* clientMount, yield* entrypointMount(app.appId)];
+            yield* session.note(`Deploying ${kind.type} ${tag}...`);
+            const created = yield* functions.createFunction({
+                appId: app.appId,
+                function: {
+                    ...definition,
+                    imageId,
+                    mountIds,
+                    secretIds: [stored.secretId, ...secretIds],
+                },
+                existingFunctionId: output?.appId === app.appId ? output.functionId : undefined,
+            });
+            if (!created.functionId) {
+                return yield* new ModalDeployUnexpectedResponse({
+                    message: `Modal returned no id for function ${tag}`,
+                });
+            }
+            for (const warning of created.serverWarnings ?? []) {
+                if (warning.message)
+                    yield* session.note(warning.message);
+            }
+            // A class function needs its class: its containers hydrate it from
+            // the App layout, under the function's name.
+            const classId = definition.isClass
+                ? (yield* classes.createClass({
+                    appId: app.appId,
+                    existingClassId: output?.appId === app.appId ? output.classId : undefined,
+                    onlyClassFunction: true,
+                })).classId
+                : undefined;
+            yield* publishFunction(app, tag, {
+                functionId: created.functionId,
+                definitionId: created.handleMetadata?.definitionId,
+                classId,
+            });
+            return {
+                attributes: {
+                    functionId: created.functionId,
+                    name: tag,
+                    appId: app.appId,
+                    appName: app.appName,
+                    environment: app.environment,
+                    imageId,
+                    secretId: stored.secretId,
+                    secretName,
+                    port,
+                    command: image.command,
+                    hash,
+                    classId,
+                },
+                metadata: created.handleMetadata,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            // Republish the App without the function; stopping the App (its own
+            // resource) is what removes everything else.
+            yield* publishFunction(output, output.name, undefined).pipe(Effect.catchTag("AppNotFound", () => Effect.void));
+            yield* secret
+                .deleteSecret({ secretId: output.secretId })
+                .pipe(Effect.catchTag("SecretNotFound", () => Effect.void));
+            // The image stays: Modal content-addresses builds, so another
+            // function or sandbox may boot from the same image id.
+        }),
+    };
+});
+//# sourceMappingURL=Runtime.js.map

package/lib/internal/Runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Runtime.js","sources":["../../src/internal/Runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gCAAgC,CAAC;AAC1D,OAAO,KAAK,SAAS,MAAM,kCAAkC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,WAAW,EAIX,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,eAAe,EACf,6BAA6B,EAC7B,gBAAgB,EAChB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAyB,YAAY,EAAE,MAAM,cAAc,CAAC;AAkDpF,MAAM,UAAU,GAAG,CAAI,KAAa,EAAE,EAAE,CACtC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAA4C,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAA2B,GAAW,EAAE,KAAQ,EAAE,EAAE,CACvF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,UAAU,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrF,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7F,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,SAAS;QACxB,CAAC,CAAC,SAAS;QACX,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAa,CAAC;IAC9D,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC,CAAC,CAAC;AAEL,qCAAqC;AACrC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE;IACtC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAA6D,CAAC;IACtF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAChG,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,GAAW,EAAsB,EAAE,CAC/D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK;IACzD,CAAC,CAAG,KAAiC,CAAC,GAAG,CAAwB;IACjE,CAAC,CAAC,SAAS,CAAC;AAEhB,wEAAwE;AACxE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CACzC,OAAO,KAAK,KAAK,QAAQ;IACvB,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAEtC,wDAAwD;AACxD,MAAM,cAAc,GAAG,CACrB,KAAqB,EACrB,OAKC,EACD,MAAmB,EACC,EAAE,CAAC,CAAC;IACxB,UAAU,EAAE,iBAAiB;IAC7B,YAAY,EAAE,OAAO,CAAC,GAAG;IACzB,cAAc,EAAE,sBAAsB;IACtC,YAAY,EAAE,wBAAwB;IACtC,SAAS,EAAE;QACT,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5E,WAAW,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QACzF,QAAQ,EAAE,KAAK,CAAC,MAAM;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,eAAe,EAAE,KAAK,CAAC,aAAa;KACrC;IACD,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;IAC3C,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC;IACrC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;IACxC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;IACtD,gBAAgB,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;IACnC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;IAC9B,kBAAkB,EAChB,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc;QACjD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;QAClE,CAAC,CAAC,SAAS;IACf,kBAAkB,EAAE;QAClB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC;IACD,sEAAsE;IACtE,YAAY,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;IACtC,gBAAgB,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;IAC1C,4BAA4B,EAAE,KAAK,CAAC,gBAAgB,IAAI,CAAC;IACzD,mBAAmB,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC;IAC/C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;IAChD,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,SAAS,EAAE,KAAK,CAAC,mBAAmB;IACpC,WAAW,EAAE,KAAK,CAAC,IAAI;IACvB,oBAAoB,EAAE,IAAI;IAC1B,uBAAuB,EAAE,IAAI;IAC7B,mCAAmC,EAAE,IAAI;CAC1C,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAA2B,IAAoB,EAAE,EAAE,CACjF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAE3B,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU,EAAE,IAAO,EAAE,QAAyB;QACjF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;QAC7C,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACnC,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,IAAI,EACJ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,EACvE,iBAAiB,CAAC,QAAQ,CAAC,CAC5B,CAAC;QACF,8EAA8E;QAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,cAAc,CACzB,IAAI,EACJ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EACtD,MAAM,CACP,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACjE,MAAM,UAAU,GAAuB;YACrC,GAAG,IAAI;YACP,GAAG,QAAQ;YACX,6EAA6E;YAC7E,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG;YACpD,kBAAkB,EAAE,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,GAAG,QAAQ,CAAC,kBAAkB,EAAE;SACnF,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,GAAG,GAAG;YACV,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAC5E;YACD,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YACnB,yDAAyD;YACzD,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAmC;QAC1E,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACzB,EAAE,EACF,IAAI,EACJ,MAAM,EACN,WAAW,GAMZ;YACC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1E,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YAClF,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACvD,OAAO,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAA6C;YAC9E,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS;iBAC3B,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;iBAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACrE,OAAO,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9B,EAAE,EACF,IAAI,EACJ,MAAM,EACN,OAAO,EACP,QAAQ,GAOT;YACC,MAAM,EACJ,IAAI,EACJ,GAAG,EACH,GAAG,EACH,KAAK,EACL,UAAU,EACV,SAAS,EACT,GAAG,EAAE,UAAU,EACf,IAAI,GACL,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACvC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;gBAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC;YAEvF,mEAAmE;YACnE,8DAA8D;YAC9D,MAAM,GAAG,GAA2B;gBAClC,kBAAkB,EAAE,KAAK,CAAC,IAAI;gBAC9B,aAAa,EAAE,KAAK,CAAC,KAAK;gBAC1B,aAAa,EAAE,SAAS;gBACxB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC9C,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;aACnB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAC/B,UAAU,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CACJ,CAAC;YAEF,qEAAqE;YACrE,MAAM,OAAO,GACX,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;gBACxE,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE;oBACzC,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC,CAAC;YAET,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC;gBAC9C,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE;oBACR,GAAG,UAAU;oBACb,OAAO;oBACP,QAAQ;oBACR,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC;iBAC3C;gBACD,kBAAkB,EAAE,MAAM,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;aAChF,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC,CAAC,IAAI,6BAA6B,CAAC;oBAC9C,OAAO,EAAE,qCAAqC,GAAG,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;gBACnD,IAAI,OAAO,CAAC,OAAO;oBAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC5D,CAAC;YACD,mEAAmE;YACnE,6CAA6C;YAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO;gBAChC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,eAAe,EAAE,MAAM,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACzE,iBAAiB,EAAE,IAAI;iBACxB,CAAC,CAAC,CAAC,OAAO;gBACb,CAAC,CAAC,SAAS,CAAC;YACd,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC/B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,YAAY,EAAE,OAAO,CAAC,cAAc,EAAE,YAAY;gBAClD,OAAO;aACR,CAAC,CAAC;YACH,OAAO;gBACL,UAAU,EAAE;oBACV,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,IAAI,EAAE,GAAG;oBACT,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,OAAO;oBACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU;oBACV,IAAI;oBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI;oBACJ,OAAO;iBACoB;gBAC7B,QAAQ,EAAE,OAAO,CAAC,cAAc;aACjC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAiC;YACpE,oEAAoE;YACpE,6CAA6C;YAC7C,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAClD,CAAC;YACF,KAAK,CAAC,CAAC,MAAM;iBACV,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;iBAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,8DAA8D;YAC9D,uDAAuD;QACzD,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/lib/internal/Tags.d.ts

@@ -0,0 +1,19 @@
+import { type Tags } from "alchemy/Tags";
+import * as Effect from "effect/Effect";
+/**
+ * Modal tag keys and values must match `^[a-zA-Z0-9._-]{1,63}$`, so
+ * Alchemy's `alchemy::stack` / `alchemy::stage` / `alchemy::id` ownership
+ * tags are stored as `alchemy.stack` / `alchemy.stage` / `alchemy.id`, and
+ * their values are rewritten into that character set (`/` in a nested
+ * logical ID becomes `__`).
+ */
+export declare const ALCHEMY_TAG_PREFIX = "alchemy.";
+/** Alchemy's ownership tags in Modal's tag format. */
+export declare const createModalInternalTags: (id: string) => Effect.Effect<{
+    [k: string]: string;
+}, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage>;
+/** Whether observed Modal tags carry this resource's ownership tags. */
+export declare const hasModalAlchemyTags: (id: string, tags: Tags | undefined) => Effect.Effect<boolean, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage>;
+/** Whether observed Modal tags carry any Alchemy ownership tag. */
+export declare const isAlchemyTagged: (tags: Readonly<Record<string, string | undefined>> | undefined) => boolean;
+//# sourceMappingURL=Tags.d.ts.map

package/lib/internal/Tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Tags.d.ts","sources":["../../src/internal/Tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,IAAI,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAiB7C,sDAAsD;AACtD,eAAO,MAAM,uBAAuB;;wEAKlC,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,sIAE9B,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,eAAe,SACpB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,KAC7D,OAAoF,CAAC"}

package/lib/internal/Tags.js

@@ -0,0 +1,33 @@
+import { createInternalTags, hasTags } from "alchemy/Tags";
+import * as Effect from "effect/Effect";
+/**
+ * Modal tag keys and values must match `^[a-zA-Z0-9._-]{1,63}$`, so
+ * Alchemy's `alchemy::stack` / `alchemy::stage` / `alchemy::id` ownership
+ * tags are stored as `alchemy.stack` / `alchemy.stage` / `alchemy.id`, and
+ * their values are rewritten into that character set (`/` in a nested
+ * logical ID becomes `__`).
+ */
+export const ALCHEMY_TAG_PREFIX = "alchemy.";
+const INTERNAL_PREFIX = "alchemy::";
+const toModalKey = (key) => key.startsWith(INTERNAL_PREFIX)
+    ? `${ALCHEMY_TAG_PREFIX}${key.slice(INTERNAL_PREFIX.length)}`
+    : key;
+const toModalValue = (value) => {
+    const cleaned = value
+        .replaceAll("/", "__")
+        .replace(/[^A-Za-z0-9._-]/g, "-")
+        .slice(0, 63);
+    return cleaned.length > 0 ? cleaned : "-";
+};
+/** Alchemy's ownership tags in Modal's tag format. */
+export const createModalInternalTags = Effect.fn(function* (id) {
+    const tags = yield* createInternalTags(id);
+    return Object.fromEntries(Object.entries(tags).map(([key, value]) => [toModalKey(key), toModalValue(value)]));
+});
+/** Whether observed Modal tags carry this resource's ownership tags. */
+export const hasModalAlchemyTags = Effect.fn(function* (id, tags) {
+    return hasTags(yield* createModalInternalTags(id), tags);
+});
+/** Whether observed Modal tags carry any Alchemy ownership tag. */
+export const isAlchemyTagged = (tags) => Object.keys(tags ?? {}).some((key) => key.startsWith(ALCHEMY_TAG_PREFIX));
+//# sourceMappingURL=Tags.js.map

package/lib/internal/Tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Tags.js","sources":["../../src/internal/Tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAa,MAAM,cAAc,CAAC;AACtE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE7C,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE,CACzC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;IAC7B,CAAC,CAAC,GAAG,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE;IAC7D,CAAC,CAAC,GAAG,CAAC;AAEV,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE;IAC7C,MAAM,OAAO,GAAG,KAAK;SAClB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;SACrB,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC,CAAC;AAEF,sDAAsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CACnF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU,EAAE,IAAsB;IACxF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAA8D,EACrD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC"}

package/lib/internal/TcpConnect.d.ts

@@ -0,0 +1,12 @@
+import * as Effect from "effect/Effect";
+import * as Socket from "effect/socket/Socket";
+/**
+ * A TCP socket to `host:port`, over TLS when `tls` is set: `cloudflare:sockets`
+ * on workerd, Node's `net`/`tls` elsewhere. It connects when run.
+ */
+export declare const connectTcp: (options: {
+    readonly host: string;
+    readonly port: number;
+    readonly tls: boolean;
+}) => Effect.Effect<Socket.Socket>;
+//# sourceMappingURL=TcpConnect.d.ts.map

package/lib/internal/TcpConnect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TcpConnect.d.ts","sources":["../../src/internal/TcpConnect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAC;AA6D/C;;;GAGG;AACH,eAAO,MAAM,UAAU,YAAa;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAO5B,CAAC"}

package/lib/internal/TcpConnect.js

@@ -0,0 +1,46 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx, extraExtensions, ignoreCase) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        if (extraExtensions) {
+            for (var extension in extraExtensions) {
+                var suffix = path.slice(-extension.length);
+                if (suffix === extension || ignoreCase && suffix.toLowerCase() === extension.toLowerCase()) {
+                    var output = extraExtensions[extension];
+                    return output === extension ? path : path.slice(0, -extension.length) + output;
+                }
+            }
+        }
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import * as Effect from "effect/Effect";
+import * as Socket from "effect/socket/Socket";
+import { isWorkerd } from "./Transport.js";
+// Non-literal specifiers keep a bundler from pulling one runtime's sockets
+// into the other's bundle: workerd resolves `cloudflare:sockets` at runtime,
+// and Node resolves its built-ins.
+const CLOUDFLARE_SOCKETS = "cloudflare:sockets";
+const NODE_NET = "node:net";
+const NODE_TLS = "node:tls";
+const NODE_STREAM = "node:stream";
+const importModule = (specifier) => Effect.tryPromise({
+    try: () => import(__rewriteRelativeImportExtension(/* @vite-ignore */ specifier)),
+    catch: (cause) => Socket.SocketError.make({ reason: Socket.SocketOpenError.make({ kind: "Unknown", cause }) }),
+});
+const openCloudflare = (host, port, tls) => Effect.acquireRelease(Effect.map(importModule(CLOUDFLARE_SOCKETS), ({ connect }) => connect({ hostname: host, port }, { secureTransport: tls ? "on" : "off", allowHalfOpen: false })), (socket) => Effect.promise(() => socket.close().catch(() => undefined)));
+const openNode = (host, port, tls) => Effect.acquireRelease(Effect.gen(function* () {
+    const { Duplex } = yield* importModule(NODE_STREAM);
+    const { connect } = yield* importModule(tls ? NODE_TLS : NODE_NET);
+    const duplex = connect(tls ? { host, port, servername: host } : { host, port });
+    return { duplex, stream: Duplex.toWeb(duplex) };
+}), ({ duplex }) => Effect.sync(() => duplex.destroy())).pipe(Effect.map(({ stream }) => stream));
+/**
+ * A TCP socket to `host:port`, over TLS when `tls` is set: `cloudflare:sockets`
+ * on workerd, Node's `net`/`tls` elsewhere. It connects when run.
+ */
+export const connectTcp = (options) => Socket.fromTransformStream(Effect.suspend(() => isWorkerd()
+    ? openCloudflare(options.host, options.port, options.tls)
+    : openNode(options.host, options.port, options.tls)));
+//# sourceMappingURL=TcpConnect.js.map