@alchemy.run/modal 0.0.0 → 2.0.0-beta.87

package/lib/ServiceUser.js

@@ -0,0 +1,210 @@
+import * as environment from "@distilled.cloud/modal/environment";
+import * as service from "@distilled.cloud/modal/service";
+import * as workspace from "@distilled.cloud/modal/workspace";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { envNameOf, objectName, seconds } from "./internal.js";
+import { declarable } from "./internal/Declared.js";
+export class ServiceUserUnexpectedResponse extends Data.TaggedError("Modal.ServiceUserUnexpectedResponse") {
+}
+/**
+ * The workspace's plan has no service users (Modal's Starter plan). Bindings
+ * create one per host; `Modal.DeployerHostIdentity` binds the deployer's token
+ * instead.
+ */
+export class ServiceUsersNotAvailable extends Data.TaggedError("Modal.ServiceUsersNotAvailable") {
+}
+/**
+ * A Modal service user: a workspace identity with its own token pair, for
+ * CI or another system. A scoped user acts only in the environments you
+ * grant it, as a `viewer` or a `contributor`.
+ *
+ * Modal shows a service user's token secret once, at creation, so a user
+ * deleted outside Alchemy is recreated with a new token on the next deploy,
+ * and an existing user can't be adopted.
+ *
+ * ### Creating a service user
+ * **Example:** CI that deploys to one environment
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Staging = Modal.Environment("Staging", {});
+ * export const Deployer = Modal.ServiceUser("Deployer", {
+ *   environments: [{ environment: Staging, role: "contributor" }],
+ * });
+ * ```
+ *
+ * **Example:** A short-lived, read-only token
+ * ```typescript
+ * export const Auditor = Modal.ServiceUser("Auditor", {
+ *   environments: [{ environment: "main", role: "viewer" }],
+ *   expiresIn: "7 days",
+ * });
+ * ```
+ *
+ * ### Using its token
+ * **Example:** Hand the pair to a Worker that calls Modal as the user
+ * ```typescript
+ * import * as Cloudflare from "@alchemy.run/cloudflare";
+ * import * as Effect from "effect/Effect";
+ *
+ * export const Ci = Effect.gen(function* () {
+ *   const deployer = yield* Deployer;
+ *   return yield* Cloudflare.Worker("Ci", {
+ *     main: "./src/ci.ts",
+ *     env: { MODAL_TOKEN_ID: deployer.tokenId, MODAL_TOKEN_SECRET: deployer.tokenSecret },
+ *   });
+ * });
+ * ```
+ *
+ * @resource
+ * @product Workspace
+ */
+export const ServiceUser = declarable()(Resource("Modal.ServiceUser"));
+const ROLE = {
+    viewer: "ENVIRONMENT_ROLE_VIEWER",
+    contributor: "ENVIRONMENT_ROLE_CONTRIBUTOR",
+};
+const roleOf = (role) => role === ROLE.viewer ? "viewer" : role === ROLE.contributor ? "contributor" : undefined;
+/**
+ * The roles the props and the bindings ask for, by environment name; the
+ * workspace default environment resolves to its name. A `contributor` grant
+ * beats a `viewer` grant for the same environment.
+ */
+const desiredRoles = Effect.fn(function* (props, bindings) {
+    const entries = [
+        ...(props.environments ?? []).map((entry) => ({
+            environment: envNameOf(entry.environment),
+            role: entry.role,
+        })),
+        ...bindings
+            .filter((binding) => binding.action !== "delete")
+            .flatMap((binding) => binding.data?.environments ?? []),
+    ];
+    let defaultName;
+    const roles = {};
+    for (const entry of entries) {
+        let name = entry.environment;
+        if (!name) {
+            defaultName ??= (yield* workspace.workspaceSettings({})).defaultEnvironmentName ?? "main";
+            name = defaultName;
+        }
+        if (roles[name] !== "contributor")
+            roles[name] = entry.role;
+    }
+    return roles;
+});
+export const ServiceUserProvider = () => Provider.effect(ServiceUser, Effect.gen(function* () {
+    const observe = Effect.fn(function* (name) {
+        const found = yield* service
+            .serviceUserInfo({ serviceUserName: name })
+            .pipe(Effect.catchTag("ServiceUserNotFound", () => Effect.undefined));
+        return found?.serviceUser?.serviceUserId ? found.serviceUser : undefined;
+    });
+    return {
+        stables: ["serviceUserId", "name", "tokenId", "tokenSecret"],
+        diff: Effect.fn(function* ({ id, news, olds, output }) {
+            if (!isResolved(news) || output === undefined)
+                return undefined;
+            if ((yield* objectName(id, news.name)) !== output.name)
+                return { action: "replace" };
+            if ((news.scoped ?? true) !== output.scoped)
+                return { action: "replace" };
+            if (seconds(news.expiresIn) !== seconds(olds?.expiresIn))
+                return { action: "replace" };
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (output === undefined)
+                return undefined;
+            const found = yield* observe(output.name);
+            return found?.serviceUserId === output.serviceUserId ? output : undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session, bindings }) {
+            const name = output?.name ?? (yield* objectName(id, news.name));
+            const scoped = news.scoped ?? true;
+            // Observe: the user we created still exists (its secret lives only in state).
+            let current = yield* observe(name);
+            let token = current !== undefined &&
+                output !== undefined &&
+                current.serviceUserId === output.serviceUserId
+                ? { tokenId: output.tokenId, tokenSecret: output.tokenSecret }
+                : undefined;
+            // Ensure: a user we can't read the secret of is replaced by a fresh one.
+            if (token === undefined) {
+                if (current?.serviceUserId) {
+                    yield* service
+                        .deleteServiceUser({ serviceUserId: current.serviceUserId })
+                        .pipe(Effect.catchTag("ServiceUserNotFound", () => Effect.void));
+                }
+                yield* session.note(`Creating service user ${name}...`);
+                const created = yield* service
+                    .createServiceUser({
+                    name,
+                    scoped,
+                    expiresInSeconds: seconds(news.expiresIn),
+                })
+                    .pipe(Effect.catchTag("ServiceUsersNotAvailable", (e) => Effect.fail(new ServiceUsersNotAvailable({
+                    message: `${e.message ?? "Service users are not available on this plan."} Modal bindings give each host its own service user; on this plan, add Modal.DeployerHostIdentity to the Stack's providers to bind your own token into hosts instead.`,
+                }))));
+                if (!created.serviceUserId || !created.tokenId || !created.tokenSecret) {
+                    return yield* new ServiceUserUnexpectedResponse({
+                        message: `Modal returned no token for service user ${name}`,
+                    });
+                }
+                token = {
+                    tokenId: created.tokenId,
+                    tokenSecret: Redacted.isRedacted(created.tokenSecret)
+                        ? created.tokenSecret
+                        : Redacted.make(created.tokenSecret),
+                };
+                current = (yield* observe(name)) ?? { serviceUserId: created.serviceUserId, name };
+            }
+            const user = current ?? {};
+            const serviceUserId = user.serviceUserId ?? "";
+            // Sync roles against the observed ones; a dropped environment loses access.
+            const observed = {};
+            for (const entry of user.environmentRoles ?? []) {
+                if (entry.environmentName)
+                    observed[entry.environmentName] = roleOf(entry.role);
+            }
+            const desired = scoped ? yield* desiredRoles(news, bindings) : {};
+            for (const [env, role] of Object.entries(desired)) {
+                if (observed[env] === role)
+                    continue;
+                yield* environment.setEnvironmentRole({
+                    environmentName: env,
+                    serviceUserId,
+                    role: ROLE[role],
+                });
+            }
+            for (const env of Object.keys(observed)) {
+                if (env in desired || observed[env] === undefined)
+                    continue;
+                yield* environment.setEnvironmentRole({
+                    environmentName: env,
+                    serviceUserId,
+                    role: "ENVIRONMENT_ROLE_NO_ACCESS",
+                });
+            }
+            return {
+                serviceUserId,
+                name,
+                tokenId: token.tokenId,
+                tokenSecret: token.tokenSecret,
+                scoped,
+                environments: desired,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* service
+                .deleteServiceUser({ serviceUserId: output.serviceUserId })
+                .pipe(Effect.catchTag("ServiceUserNotFound", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=ServiceUser.js.map

package/lib/ServiceUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceUser.js","sources":["../src/ServiceUser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,WAAW,MAAM,oCAAoC,CAAC;AAClE,OAAO,KAAK,OAAO,MAAM,gCAAgC,CAAC;AAC1D,OAAO,KAAK,SAAS,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAwB,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAyB,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAIpD,MAAM,OAAO,6BAA8B,SAAQ,IAAI,CAAC,WAAW,CACjE,qCAAqC,CAGrC;CAAG;AAEL;;;;GAIG;AACH,MAAM,OAAO,wBAAyB,SAAQ,IAAI,CAAC,WAAW,CAAC,gCAAgC,CAE7F;CAAG;AA+CL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,EAAe,CAAC,QAAQ,CAAc,mBAAmB,CAAC,CAAC,CAAC;AAqBjG,MAAM,IAAI,GAAG;IACX,MAAM,EAAE,yBAAyB;IACjC,WAAW,EAAE,8BAA8B;CACnC,CAAC;AAEX,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAE,EAAE,CAC1C,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AAE1F;;;;GAIG;AACH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtC,KAAuB,EACvB,QAAgE;IAEhE,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5C,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;YACzC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,GAAG,QAAQ;aACR,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,OAA+B,CAAC,MAAM,KAAK,QAAQ,CAAC;aACzE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;KAC1D,CAAC;IACF,IAAI,WAA+B,CAAC;IACpC,MAAM,KAAK,GAA6C,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,IAAI,MAAM,CAAC;YAC1F,IAAI,GAAG,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,QAAQ,CAAC,MAAM,CACb,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO;aACzB,eAAe,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;aAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5D,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI;gBACpD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACnF,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;gBACtD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,KAAK,EAAE,aAAa,KAAK,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE;YACrE,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;YACnC,8EAA8E;YAC9E,IAAI,OAAO,GAA6C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,KAAK,GACP,OAAO,KAAK,SAAS;gBACrB,MAAM,KAAK,SAAS;gBACpB,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;gBAC5C,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC9D,CAAC,CAAC,SAAS,CAAC;YAChB,yEAAyE;YACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;oBAC3B,KAAK,CAAC,CAAC,OAAO;yBACX,iBAAiB,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;yBAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrE,CAAC;gBACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO;qBAC3B,iBAAiB,CAAC;oBACjB,IAAI;oBACJ,MAAM;oBACN,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;iBAC1C,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CACT,IAAI,wBAAwB,CAAC;oBAC3B,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,+CAA+C,uKAAuK;iBAChP,CAAC,CACH,CACF,CACF,CAAC;gBACJ,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBACvE,OAAO,KAAK,CAAC,CAAC,IAAI,6BAA6B,CAAC;wBAC9C,OAAO,EAAE,4CAA4C,IAAI,EAAE;qBAC5D,CAAC,CAAC;gBACL,CAAC;gBACD,KAAK,GAAG;oBACN,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC;wBACnD,CAAC,CAAC,OAAO,CAAC,WAAW;wBACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;iBACvC,CAAC;gBACF,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAiC,OAAO,IAAI,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;YAC/C,4EAA4E;YAC5E,MAAM,QAAQ,GAAuC,EAAE,CAAC;YACxD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAChD,IAAI,KAAK,CAAC,eAAe;oBAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI;oBAAE,SAAS;gBACrC,KAAK,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC;oBACpC,eAAe,EAAE,GAAG;oBACpB,aAAa;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxC,IAAI,GAAG,IAAI,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC5D,KAAK,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC;oBACpC,eAAe,EAAE,GAAG;oBACpB,aAAa;oBACb,IAAI,EAAE,4BAA4B;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,aAAa;gBACb,IAAI;gBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM;gBACN,YAAY,EAAE,OAAO;aACtB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,OAAO;iBACX,iBAAiB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;iBAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Volume.d.ts

@@ -0,0 +1,170 @@
+import * as volume from "@distilled.cloud/modal/volume";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { type EnvironmentInput } from "./internal.ts";
+import type { Providers } from "./Providers.ts";
+declare const VolumeUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Modal.VolumeUnexpectedResponse";
+} & Readonly<A>;
+export declare class VolumeUnexpectedResponse extends VolumeUnexpectedResponse_base<{
+    readonly message: string;
+}> {
+}
+export interface VolumeProps {
+    /**
+     * Volume name, unique per environment. If omitted, a unique name is
+     * generated from the stack, stage and logical ID. Changing it renames the
+     * volume in place.
+     */
+    name?: string;
+    /**
+     * Environment the volume lives in. Changing it replaces the volume.
+     * @default the workspace's default environment
+     */
+    environment?: EnvironmentInput;
+    /**
+     * Volume filesystem version. `2` supports many concurrent writers and
+     * files of any count; `1` is Modal's original format. Changing it
+     * replaces the volume.
+     * @default 2
+     */
+    version?: 1 | 2;
+}
+export interface VolumeAttributes {
+    /** Volume ID (`vo-…`). */
+    volumeId: string;
+    /** Volume name. */
+    name: string;
+    /** Environment name, or `undefined` for the workspace default. */
+    environment: string | undefined;
+    /** Volume filesystem version. */
+    version: 1 | 2;
+}
+/**
+ * A Modal Volume: a persistent, shared filesystem that Sandboxes and
+ * Functions mount at a path. Writes from one container become visible to
+ * others after a commit (Sandboxes commit when they exit).
+ *
+ * Declare a Volume here for data every deployment shares, such as a model
+ * cache or a dataset. For one volume per user or session, create them at
+ * runtime with {@link CreateVolume}; to read and write files from a Worker or
+ * Lambda without a sandbox, bind {@link ReadWriteVolume}.
+ *
+ * Modal volumes have no tags. Ownership is inferred from Alchemy state: a
+ * volume found under an explicit `name` without prior state is reported as
+ * unowned.
+ *
+ * ### Creating a Volume
+ * **Example:** A volume with a generated name
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Cache = Modal.Volume("Cache", {});
+ * ```
+ *
+ * **Example:** A named volume in an environment
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Agents = Modal.Environment("Agents", {});
+ * export const Models = Modal.Volume("Models", { name: "model-weights", environment: Agents });
+ * ```
+ *
+ * ### Mounting in a Sandbox
+ * **Example:** Mount at `/cache`
+ * ```typescript
+ * // construction phase
+ * const cache = yield* Modal.MountVolume(Cache, { path: "/cache" });
+ * const sandboxes = yield* Modal.CreateSandbox(Coder);
+ * // per request
+ * const sandbox = yield* sandboxes.create({ mounts: [cache] });
+ * ```
+ *
+ * ### Reading files from a Worker
+ * **Example:** Bind file access
+ * ```typescript
+ * import * as Cloudflare from "@alchemy.run/cloudflare";
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import { Cache } from "./Storage.ts";
+ *
+ * export default class Api extends Cloudflare.Worker<Api>()(
+ *   "Api",
+ *   { main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const cache = yield* Modal.ReadWriteVolume(Cache);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         yield* cache.writeFile("/hello.txt", "hello");
+ *         const text = yield* cache.readFileString("/hello.txt");
+ *         return HttpServerResponse.text(text);
+ *       }).pipe(Effect.orDie),
+ *     };
+ *   }).pipe(Effect.provide(Modal.ReadWriteVolumeHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Looking up an existing volume
+ * `Volume.lookup` references a volume Alchemy doesn't manage (created with
+ * the Modal CLI or by another stack). It is read during plan/deploy, never
+ * created, updated or deleted.
+ *
+ * **Example:** Reference an existing volume
+ * ```typescript
+ * const weights = Modal.Volume.lookup({ name: "model-weights" });
+ * ```
+ *
+ * @resource
+ * @product Volume
+ */
+export declare const Volume: import("alchemy/Resource").ResourceConstructor<Volume, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<Volume, never>, never, never> & {
+    Self: import("alchemy/Self").Self<Volume>;
+    Provider: Provider.Provider<Volume>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<Volume, never, never>;
+} & {
+    lookup(props: {
+        name: import("alchemy/Input").Input<string>;
+        environment?: import("alchemy/Input").Input<string | undefined>;
+    }): Volume;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<VolumeProps>) => Effect.Effect<Volume, never, Providers>);
+export type Volume = Resource<"Modal.Volume", VolumeProps, VolumeAttributes, never, Providers, VolumeLookup>;
+/**
+ * Props for {@link Volume.lookup}: find a volume this stack
+ * doesn't manage by its name.
+ */
+export interface VolumeLookup {
+    /** Volume name. */
+    name: string;
+    /**
+     * Modal environment the object lives in.
+     * @default the workspace's default environment
+     */
+    environment?: string;
+}
+/** A volume by name, or `undefined` when missing. */
+export declare const lookupVolume: (getOrCreate: (input: volume.VolumeGetOrCreateRequest) => Effect.Effect<volume.VolumeGetOrCreateResponse, volume.VolumeGetOrCreateError, never>, name: string, env: string | undefined) => Effect.Effect<{
+    volumeId: string;
+    name: string;
+    environment: string | undefined;
+    version: 1 | 2;
+} | undefined, volume.EnvironmentNotFound | volume.VolumeAlreadyExists | volume.ModalOpError, never>;
+/**
+ * Get a volume by name, creating it when missing: the one implementation
+ * behind {@link Volume}'s reconcile and the runtime {@link CreateVolume}
+ * client.
+ */
+export declare const ensureVolume: (getOrCreate: (input: volume.VolumeGetOrCreateRequest) => Effect.Effect<volume.VolumeGetOrCreateResponse, volume.VolumeGetOrCreateError, never>, name: string, env: string | undefined, version?: 1 | 2 | undefined) => Effect.Effect<{
+    volumeId: string;
+    name: string;
+    environment: string | undefined;
+    version: 1 | 2;
+}, VolumeUnexpectedResponse | volume.VolumeGetOrCreateError, never>;
+export declare const VolumeProvider: () => import("effect/Layer").Layer<Provider.Provider<Volume>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | volume.ModalOpContext>;
+export {};
+//# sourceMappingURL=Volume.d.ts.map

package/lib/Volume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Volume.d.ts","sources":["../src/Volume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,+BAA+B,CAAC;AAGxD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,gBAAgB,EAOtB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;;;;AAGhD,qBAAa,wBAAyB,SAAQ,8BAAmD;IAC/F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iCAAiC;IACjC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;iIAAyD,CAAC;AAE7E,MAAM,MAAM,MAAM,GAAG,QAAQ,CAC3B,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,KAAK,EACL,SAAS,EACT,YAAY,CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAQD,qDAAqD;AACrD,eAAO,MAAM,YAAY;;;;;oGAiBvB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;mEAuBvB,CAAC;AAEH,eAAO,MAAM,cAAc,6JAwGxB,CAAC"}

package/lib/Volume.js

@@ -0,0 +1,220 @@
+import * as volume from "@distilled.cloud/modal/volume";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { envNameOf, environmentNames, environmentOf, isGeneratedName, listAll, objectName, } from "./internal.js";
+import { declarable } from "./internal/Declared.js";
+import { isRuntimeName } from "./RuntimeOwner.js";
+export class VolumeUnexpectedResponse extends Data.TaggedError("Modal.VolumeUnexpectedResponse") {
+}
+/**
+ * A Modal Volume: a persistent, shared filesystem that Sandboxes and
+ * Functions mount at a path. Writes from one container become visible to
+ * others after a commit (Sandboxes commit when they exit).
+ *
+ * Declare a Volume here for data every deployment shares, such as a model
+ * cache or a dataset. For one volume per user or session, create them at
+ * runtime with {@link CreateVolume}; to read and write files from a Worker or
+ * Lambda without a sandbox, bind {@link ReadWriteVolume}.
+ *
+ * Modal volumes have no tags. Ownership is inferred from Alchemy state: a
+ * volume found under an explicit `name` without prior state is reported as
+ * unowned.
+ *
+ * ### Creating a Volume
+ * **Example:** A volume with a generated name
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Cache = Modal.Volume("Cache", {});
+ * ```
+ *
+ * **Example:** A named volume in an environment
+ * ```typescript
+ * import * as Modal from "@alchemy.run/modal";
+ *
+ * export const Agents = Modal.Environment("Agents", {});
+ * export const Models = Modal.Volume("Models", { name: "model-weights", environment: Agents });
+ * ```
+ *
+ * ### Mounting in a Sandbox
+ * **Example:** Mount at `/cache`
+ * ```typescript
+ * // construction phase
+ * const cache = yield* Modal.MountVolume(Cache, { path: "/cache" });
+ * const sandboxes = yield* Modal.CreateSandbox(Coder);
+ * // per request
+ * const sandbox = yield* sandboxes.create({ mounts: [cache] });
+ * ```
+ *
+ * ### Reading files from a Worker
+ * **Example:** Bind file access
+ * ```typescript
+ * import * as Cloudflare from "@alchemy.run/cloudflare";
+ * import * as Modal from "@alchemy.run/modal";
+ * import * as Effect from "effect/Effect";
+ * import * as HttpServerResponse from "effect/http/HttpServerResponse";
+ * import { Cache } from "./Storage.ts";
+ *
+ * export default class Api extends Cloudflare.Worker<Api>()(
+ *   "Api",
+ *   { main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const cache = yield* Modal.ReadWriteVolume(Cache);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         yield* cache.writeFile("/hello.txt", "hello");
+ *         const text = yield* cache.readFileString("/hello.txt");
+ *         return HttpServerResponse.text(text);
+ *       }).pipe(Effect.orDie),
+ *     };
+ *   }).pipe(Effect.provide(Modal.ReadWriteVolumeHttp)),
+ * ) {}
+ * ```
+ *
+ * ### Looking up an existing volume
+ * `Volume.lookup` references a volume Alchemy doesn't manage (created with
+ * the Modal CLI or by another stack). It is read during plan/deploy, never
+ * created, updated or deleted.
+ *
+ * **Example:** Reference an existing volume
+ * ```typescript
+ * const weights = Modal.Volume.lookup({ name: "model-weights" });
+ * ```
+ *
+ * @resource
+ * @product Volume
+ */
+export const Volume = declarable()(Resource("Modal.Volume"));
+const versionToWire = (version) => version === 1 ? "VOLUME_FS_VERSION_V1" : "VOLUME_FS_VERSION_V2";
+const versionFromWire = (version) => version === "VOLUME_FS_VERSION_V1" ? 1 : 2;
+/** A volume by name, or `undefined` when missing. */
+export const lookupVolume = Effect.fn(function* (getOrCreate, name, env) {
+    const found = yield* getOrCreate({
+        deploymentName: name,
+        environmentName: environmentOf(env),
+        objectCreationType: "OBJECT_CREATION_TYPE_UNSPECIFIED",
+    }).pipe(Effect.catchTag("VolumeNotFound", () => Effect.undefined));
+    if (!found?.volumeId)
+        return undefined;
+    return {
+        volumeId: found.volumeId,
+        name,
+        environment: env,
+        version: versionFromWire(found.version ?? found.metadata?.version),
+    };
+});
+/**
+ * Get a volume by name, creating it when missing: the one implementation
+ * behind {@link Volume}'s reconcile and the runtime {@link CreateVolume}
+ * client.
+ */
+export const ensureVolume = Effect.fn(function* (getOrCreate, name, env, version) {
+    const created = yield* getOrCreate({
+        deploymentName: name,
+        environmentName: environmentOf(env),
+        objectCreationType: "OBJECT_CREATION_TYPE_CREATE_IF_MISSING",
+        version: versionToWire(version),
+    });
+    if (!created.volumeId) {
+        return yield* new VolumeUnexpectedResponse({
+            message: `Modal returned no id for volume ${name}`,
+        });
+    }
+    return {
+        volumeId: created.volumeId,
+        name: created.metadata?.name ?? name,
+        environment: env,
+        version: versionFromWire(created.version ?? created.metadata?.version),
+    };
+});
+export const VolumeProvider = () => Provider.effect(Volume, Effect.gen(function* () {
+    const observe = Effect.fn(function* (volumeId, name, env) {
+        if (volumeId !== undefined) {
+            const byId = yield* volume
+                .volumeGetById({ volumeId })
+                .pipe(Effect.catchTag("VolumeNotFound", () => Effect.undefined));
+            if (byId?.volumeId) {
+                return {
+                    volumeId: byId.volumeId,
+                    name: byId.metadata?.name ?? name,
+                    environment: env,
+                    version: versionFromWire(byId.metadata?.version),
+                };
+            }
+        }
+        return yield* lookupVolume(yield* volume.volumeGetOrCreate, name, env);
+    });
+    return {
+        stables: ["volumeId", "environment", "version"],
+        diff: Effect.fn(function* ({ news, olds }) {
+            if (!isResolved(news))
+                return undefined;
+            if (envNameOf(news.environment) !== envNameOf(olds?.environment))
+                return { action: "replace" };
+            if ((news.version ?? 2) !== (olds?.version ?? 2))
+                return { action: "replace" };
+            return undefined;
+        }),
+        lookup: Effect.fn(function* ({ name, environment }) {
+            return yield* observe(undefined, name, environment);
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const name = output?.name ?? (yield* objectName(id, olds?.name));
+            const observed = yield* observe(output?.volumeId, name, envNameOf(olds?.environment));
+            if (!observed)
+                return undefined;
+            return output !== undefined || olds?.name === undefined ? observed : Unowned(observed);
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const name = yield* objectName(id, news.name);
+            // Observe: the volume we created (by id) or one with the name.
+            let current = yield* observe(output?.volumeId, output?.name ?? name, envNameOf(news.environment));
+            // Ensure
+            if (!current) {
+                yield* session.note(`Creating volume ${name}...`);
+                current = yield* ensureVolume(yield* volume.volumeGetOrCreate, name, envNameOf(news.environment), news.version);
+            }
+            // Sync the name: a renamed volume keeps its id and files.
+            if (current.name !== name) {
+                yield* session.note(`Renaming volume ${current.name} to ${name}...`);
+                yield* volume.renameVolume({ volumeId: current.volumeId, name });
+                current = { ...current, name };
+            }
+            return current;
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* volume
+                .deleteVolume({
+                volumeId: output.volumeId,
+                environmentName: environmentOf(output.environment),
+            })
+                .pipe(Effect.catchTag("VolumeNotFound", () => Effect.void));
+        }),
+        list: Effect.fn(function* () {
+            const envs = yield* environmentNames;
+            const all = [];
+            for (const env of envs) {
+                const items = yield* listAll((pagination) => volume
+                    .listVolume({ environmentName: env, pagination })
+                    .pipe(Effect.map((response) => response.items ?? [])), (item) => item.createdAt);
+                for (const item of items) {
+                    const name = item.label ?? item.metadata?.name;
+                    if (!item.volumeId || !(isGeneratedName(name) || isRuntimeName(name)))
+                        continue;
+                    all.push({
+                        volumeId: item.volumeId,
+                        name: name ?? "",
+                        environment: env,
+                        version: versionFromWire(item.metadata?.version),
+                    });
+                }
+            }
+            return all;
+        }),
+    };
+}));
+//# sourceMappingURL=Volume.js.map

package/lib/Volume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Volume.js","sources":["../src/Volume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAEL,SAAS,EACT,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,OAAO,EACP,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,OAAO,wBAAyB,SAAQ,IAAI,CAAC,WAAW,CAAC,gCAAgC,CAE7F;CAAG;AAkCL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,EAAU,CAAC,QAAQ,CAAS,cAAc,CAAC,CAAC,CAAC;AAyB7E,MAAM,aAAa,GAAG,CAAC,OAA0B,EAA0B,EAAE,CAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAElE,MAAM,eAAe,GAAG,CAAC,OAA2B,EAAS,EAAE,CAC7D,OAAO,KAAK,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7C,qDAAqD;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC7C,WAA4D,EAC5D,IAAY,EACZ,GAAuB;IAEvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;QAC/B,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC;QACnC,kBAAkB,EAAE,kCAAkC;KACvD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI;QACJ,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC;KACxC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC7C,WAA4D,EAC5D,IAAY,EACZ,GAAuB,EACvB,OAAe;IAEf,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;QACjC,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC;QACnC,kBAAkB,EAAE,wCAAwC;QAC5D,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,CAAC,IAAI,wBAAwB,CAAC;YACzC,OAAO,EAAE,mCAAmC,IAAI,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;QACpC,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC5C,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,QAAQ,CAAC,MAAM,CACb,MAAM,EACN,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjC,QAA4B,EAC5B,IAAY,EACZ,GAAuB;QAEvB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM;iBACvB,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC;iBAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACnE,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;oBACjC,WAAW,EAAE,GAAG;oBAChB,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;iBACtB,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC;QAC/C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC;gBAC9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxF,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAChD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzF,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,+DAA+D;YAC/D,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAC1B,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,IAAI,IAAI,IAAI,EACpB,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAC5B,CAAC;YACF,SAAS;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,IAAI,KAAK,CAAC,CAAC;gBAClD,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAC3B,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAC/B,IAAI,EACJ,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAC3B,IAAI,CAAC,OAAO,CACb,CAAC;YACJ,CAAC;YACD,0DAA0D;YAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC;gBACrE,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,MAAM;iBACV,YAAY,CAAC;gBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;aACnD,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;YACrC,MAAM,GAAG,GAAuB,EAAE,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAC1B,CAAC,UAAU,EAAE,EAAE,CACb,MAAM;qBACH,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;qBAChD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EACzD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CACzB,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;oBAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;wBAAE,SAAS;oBAChF,GAAG,CAAC,IAAI,CAAC;wBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,IAAI,EAAE,IAAI,IAAI,EAAE;wBAChB,WAAW,EAAE,GAAG;wBAChB,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;qBACjD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}