@alchemy.run/modal 0.0.0 → 2.0.0-beta.87

package/lib/internal/Deploy.js

@@ -0,0 +1,230 @@
+import * as BuildPlan from "@alchemy.run/docker/BuildPlan";
+import * as app from "@distilled.cloud/modal/app";
+import * as mount from "@distilled.cloud/modal/mount";
+import * as workspace from "@distilled.cloud/modal/workspace";
+import { mountInstallLines } from "alchemy/Mount";
+import { sha256, sha256Object } from "alchemy/Util/sha256";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Semaphore from "effect/Semaphore";
+import { buildImage, ImageBuildOps } from "../ImageBuild.js";
+import { checkCommands, lowerPlan, MODAL_CAPABILITIES } from "../ImagePlan.js";
+import { checkModalMounts } from "../Mounts.js";
+import { ENTRYPOINT_PATH, ENTRYPOINT_SOURCE } from "./Entrypoint.js";
+/*
+ * Deploy-time plumbing shared by `Modal.Function` and `Modal.Server`: the
+ * Python layer and mounts every Modal Function container needs, and
+ * publishing a function into its App.
+ */
+/** Modal returned a response without a field the deploy needs. */
+export class ModalDeployUnexpectedResponse extends Data.TaggedError("Modal.DeployUnexpectedResponse") {
+}
+/**
+ * The Modal Python client whose container entrypoint runs the function.
+ * Modal publishes it as the global mount `modal-client-mount-<version>`.
+ */
+export const MODAL_CLIENT_VERSION = "1.6.3";
+/** Standalone Python builds Modal publishes as global mounts, by image builder version. */
+const PYTHON_STANDALONE = {
+    "2026.10": {
+        "3.11": ["20261021", "3.11.17"],
+        "3.12": ["20261021", "3.12.15"],
+        "3.13": ["20261021", "3.13.17"],
+        "3.14": ["20261021", "3.14.9"],
+    },
+    "2025.06": {
+        "3.11": ["20230826", "3.11.5"],
+        "3.12": ["20240107", "3.12.1"],
+        "3.13": ["20241008", "3.13.0"],
+        "3.14": ["20251205", "3.14.2"],
+    },
+};
+/** The Python version added to a base image without one. */
+export const DEFAULT_PYTHON = "3.12";
+/** Port the program listens on when the resource doesn't set one. */
+export const DEFAULT_PORT = 8000;
+const lookupMount = (deploymentName) => Effect.gen(function* () {
+    const { mountId } = yield* mount.mountGetOrCreate({
+        deploymentName,
+        namespace: "DEPLOYMENT_NAMESPACE_GLOBAL",
+        objectCreationType: "OBJECT_CREATION_TYPE_UNSPECIFIED",
+    });
+    if (!mountId) {
+        return yield* new ModalDeployUnexpectedResponse({
+            message: `Modal returned no id for mount ${deploymentName}`,
+        });
+    }
+    return mountId;
+});
+/** The mount holding Modal's Python client, which runs the container entrypoint. */
+export const clientMount = /*@__PURE__*/ lookupMount(`modal-client-mount-${MODAL_CLIENT_VERSION}`);
+/**
+ * The image builder version builds use: the resource's pin, else the
+ * workspace's setting.
+ */
+const builderVersionOf = Effect.fn(function* (pinned) {
+    if (pinned !== undefined)
+        return pinned;
+    const settings = yield* workspace.workspaceSettings({});
+    return settings.imageBuilderVersion ?? "2025.06";
+});
+/**
+ * Upload {@link ENTRYPOINT_SOURCE} as a mount owned by the app. Modal stores
+ * files by content hash, so redeploys reuse it.
+ */
+export const entrypointMount = Effect.fn(function* (appId) {
+    const bytes = new TextEncoder().encode(ENTRYPOINT_SOURCE);
+    const hash = yield* sha256(bytes);
+    const data = yield* Effect.sync(() => Buffer.from(bytes).toString("base64"));
+    for (let attempt = 0; attempt < 10; attempt++) {
+        const { exists } = yield* mount.mountPutFile({ sha256Hex: hash, data });
+        if (exists)
+            break;
+    }
+    const { mountId } = yield* mount.mountGetOrCreate({
+        objectCreationType: "OBJECT_CREATION_TYPE_ANONYMOUS_OWNED_BY_APP",
+        appId,
+        files: [
+            { filename: ENTRYPOINT_PATH, sha256Hex: hash, size: String(bytes.length), mode: 0o100644 },
+        ],
+    });
+    if (!mountId) {
+        return yield* new ModalDeployUnexpectedResponse({
+            message: "Modal returned no id for the entrypoint mount",
+        });
+    }
+    return mountId;
+});
+/**
+ * Plan a runtime's image with the shared BuildPlan: the bundled program on
+ * its base image, without the image's `ENTRYPOINT`/`CMD` (Modal starts the
+ * container with its own Python entrypoint, which then runs the program).
+ */
+export const planRuntimeImage = Effect.fn(function* (target, input, port, bootstrap, capabilities = []) {
+    yield* checkModalMounts(target, capabilities);
+    const plan = yield* BuildPlan.plan({ main: input.main, image: input.image, handler: input.handler, build: input.build }, {
+        capabilities: { ...MODAL_CAPABILITIES, target },
+        port,
+        bootstrap,
+        install: mountInstallLines(capabilities),
+    });
+    const extra = yield* checkCommands(input.commands ?? []);
+    const lowered = yield* lowerPlan(plan, extra);
+    const command = [...(BuildPlan.startCommand(plan) ?? [])];
+    // Lines after `FROM`, minus the start instruction, run on top of the Python layer.
+    const commands = lowered.commands
+        .slice(1)
+        .filter((line) => !/^\s*(ENTRYPOINT|CMD)\b/i.test(line));
+    const python = input.python === undefined ? DEFAULT_PYTHON : input.python;
+    const hash = yield* sha256Object({
+        plan: plan.hash,
+        extra,
+        python,
+        builder: input.builderVersion,
+        gpu: input.gpu,
+    });
+    return {
+        plan,
+        command,
+        hash,
+        warnings: plan.warnings,
+        spec: { ...lowered, commands: [...commands, "ENTRYPOINT []"] },
+        python,
+    };
+});
+/**
+ * Build a runtime's image: the base, a layer adding standalone Python
+ * (unless `python: false`), then the program.
+ */
+export const buildRuntimeImage = Effect.fn(function* (appId, planned, options) {
+    const builderVersion = yield* builderVersionOf(options.builderVersion);
+    const buildOps = yield* ImageBuildOps;
+    let baseImageId;
+    if (planned.python !== false) {
+        const table = builderVersion >= "2026.10" || builderVersion === "PREVIEW"
+            ? PYTHON_STANDALONE["2026.10"]
+            : PYTHON_STANDALONE["2025.06"];
+        const release = table[planned.python];
+        if (release === undefined) {
+            return yield* new ModalDeployUnexpectedResponse({
+                message: `Python ${planned.python} isn't available for image builder ${builderVersion}; use one of ${Object.keys(table).join(", ")}`,
+            });
+        }
+        const contextMountId = yield* lookupMount(`python-build-standalone.${release[0]}.${release[1]}-gnu`);
+        baseImageId = yield* buildImage(buildOps, appId, {
+            dockerTag: planned.plan.base,
+            commands: [
+                "COPY /python/. /usr/local",
+                "ENV TERMINFO_DIRS=/etc/terminfo:/lib/terminfo:/usr/share/terminfo:/usr/lib/terminfo",
+            ],
+            contextMountId,
+            registry: undefined,
+            builderVersion,
+        }, { note: options.note });
+    }
+    return yield* buildImage(buildOps, appId, {
+        ...planned.spec,
+        ...(baseImageId !== undefined ? { baseImageId } : { dockerTag: planned.plan.base }),
+        gpu: options.gpu,
+        builderVersion,
+    }, { note: options.note });
+});
+/** Serializes publishes per App: each publish replaces the App's whole function map. */
+const appLocks = /*@__PURE__*/ new Map();
+const lockFor = (appId) => {
+    let lock = appLocks.get(appId);
+    if (lock === undefined) {
+        lock = Semaphore.makeUnsafe(1);
+        appLocks.set(appId, lock);
+    }
+    return lock;
+};
+/**
+ * Publish the App with `tag` pointing at `created` (or removed, when
+ * `created` is `undefined`), keeping every other function and class the
+ * App serves. Modal deploys an App as a whole, so a publish carries the full
+ * map read back from the App's current layout.
+ *
+ * A class function (one with a `classId`) is published as Modal's clients
+ * publish `@app.cls`: its service function under `<tag>.*` and its class
+ * under `<tag>`, where its containers look the class up.
+ */
+/** The service function name of the class `tag`, as Modal's clients name it. */
+export const classTag = (tag) => `${tag}.*`;
+export const publishFunction = (target, tag, created) => Semaphore.withPermits(lockFor(target.appId), 1)(Effect.gen(function* () {
+    const { appLayout } = yield* app.appGetLayout({ appId: target.appId });
+    const functionIds = {};
+    for (const [key, value] of Object.entries(appLayout?.functionIds ?? {})) {
+        if (value !== undefined && key !== tag && key !== classTag(tag))
+            functionIds[key] = value;
+    }
+    if (created !== undefined) {
+        functionIds[created.classId ? classTag(tag) : tag] = created.functionId;
+    }
+    const classIds = {};
+    for (const [key, value] of Object.entries(appLayout?.classIds ?? {})) {
+        if (value !== undefined && key !== tag)
+            classIds[key] = value;
+    }
+    if (created?.classId)
+        classIds[tag] = created.classId;
+    const published = new Set(Object.values(functionIds));
+    const definitionIds = {};
+    for (const object of appLayout?.objects ?? []) {
+        const definitionId = object.functionHandleMetadata?.definitionId;
+        if (object.objectId && definitionId && published.has(object.objectId)) {
+            definitionIds[object.objectId] = definitionId;
+        }
+    }
+    if (created?.definitionId)
+        definitionIds[created.functionId] = created.definitionId;
+    return yield* app.publishApp({
+        appId: target.appId,
+        name: target.appName,
+        appState: "APP_STATE_DEPLOYED",
+        functionIds,
+        classIds,
+        definitionIds,
+    });
+}));
+//# sourceMappingURL=Deploy.js.map

package/lib/internal/Deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Deploy.js","sources":["../../src/internal/Deploy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAC;AAC3D,OAAO,KAAK,GAAG,MAAM,4BAA4B,CAAC;AAClD,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,SAAS,MAAM,kCAAkC,CAAC;AAE9D,OAAO,EAAwB,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAuB,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAErE;;;;GAIG;AAEH,kEAAkE;AAClE,MAAM,OAAO,6BAA8B,SAAQ,IAAI,CAAC,WAAW,CACjE,gCAAgC,CAGhC;CAAG;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C,2FAA2F;AAC3F,MAAM,iBAAiB,GAGnB;IACF,SAAS,EAAE;QACT,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;QAC/B,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;QAC/B,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;QAC/B,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;KAC/B;IACD,SAAS,EAAE;QACT,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC9B,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC9B,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC9B,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;KAC/B;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AAEjC,MAAM,WAAW,GAAG,CAAC,cAAsB,EAAE,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAChD,cAAc;QACd,SAAS,EAAE,6BAA6B;QACxC,kBAAkB,EAAE,kCAAkC;KACvD,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,6BAA6B,CAAC;YAC9C,OAAO,EAAE,kCAAkC,cAAc,EAAE;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC,CAAC;AAEL,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC,sBAAsB,oBAAoB,EAAE,CAAC,CAAC;AAEnG;;;GAGG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAA0B;IACtE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC,mBAAmB,IAAI,SAAS,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAa;IAC/D,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM;YAAE,MAAM;IACpB,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAChD,kBAAkB,EAAE,6CAA6C;QACjE,KAAK;QACL,KAAK,EAAE;YACL,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC3F;KACF,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,6BAA6B,CAAC;YAC9C,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC,CAAC;AAeH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjD,MAAc,EACd,KAAwB,EACxB,IAAY,EACZ,SAAuD,EACvD,YAAY,GAAmC,EAAE;IAEjD,KAAK,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAChC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EACpF;QACE,YAAY,EAAE,EAAE,GAAG,kBAAkB,EAAE,MAAM,EAAE;QAC/C,IAAI;QACJ,SAAS;QACT,OAAO,EAAE,iBAAiB,CAAC,YAAY,CAAC;KACzC,CACF,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,mFAAmF;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;SAC9B,KAAK,CAAC,CAAC,CAAC;SACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;QACL,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,cAAc;QAC7B,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC;IACH,OAAO;QACL,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,eAAe,CAAC,EAA2B;QACvF,MAAM;KACP,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAClD,KAAa,EACb,OAIC,EACD,OAIC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IACtC,IAAI,WAA+B,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,KAAK,GACT,cAAc,IAAI,SAAS,IAAI,cAAc,KAAK,SAAS;YACzD,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC;YAC9B,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,6BAA6B,CAAC;gBAC9C,OAAO,EAAE,UAAU,OAAO,CAAC,MAAM,sCAAsC,cAAc,gBAAgB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACrI,CAAC,CAAC;QACL,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,WAAW,CACvC,2BAA2B,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAC1D,CAAC;QACF,WAAW,GAAG,KAAK,CAAC,CAAC,UAAU,CAC7B,QAAQ,EACR,KAAK,EACL;YACE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YAC5B,QAAQ,EAAE;gBACR,2BAA2B;gBAC3B,qFAAqF;aACtF;YACD,cAAc;YACd,QAAQ,EAAE,SAAS;YACnB,cAAc;SACf,EACD,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACvB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,UAAU,CACtB,QAAQ,EACR,KAAK,EACL;QACE,GAAG,OAAO,CAAC,IAAI;QACf,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnF,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,cAAc;KACf,EACD,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACvB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,EAA+B,CAAC;AACtE,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;IAChC,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,gFAAgF;AAChF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC;AAEpD,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAAwE,EACxE,GAAW,EACX,OAMa,EACb,EAAE,CACF,SAAS,CAAC,WAAW,CACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EACrB,CAAC,CACF,CACC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,EAAE,OAAO;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,sBAAsB,EAAE,YAAY,CAAC;QACjE,IAAI,MAAM,CAAC,QAAQ,IAAI,YAAY,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,YAAY;QAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IACpF,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,OAAO;QACpB,QAAQ,EAAE,oBAAoB;QAC9B,WAAW;QACX,QAAQ;QACR,aAAa;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/internal/Entrypoint.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The Python module a `Modal.Function` or `Modal.Server` container imports.
+ *
+ * Modal boots every Function container with its Python entrypoint, which
+ * imports the function's module and looks the function up by name. This
+ * module is that function: it starts the bundled program (`ALCHEMY_COMMAND`,
+ * from the function's env secret) once per container and hands it work as
+ * HTTP on `PORT`:
+ *
+ * - `Rpc` (a class function) has one method per RPC method of the program
+ *   (`ALCHEMY_MODAL_RPC_METHODS`, from the function's env secret); a call is
+ *   sent to the program's `POST /__rpc__/<method>` with the positional
+ *   arguments as a JSON array and the caller's key (the
+ *   `__alchemy_rpc_key__` keyword argument) as `x-alchemy-rpc-key`, and
+ *   returns the JSON result (a value, or an
+ *   error envelope the caller fails with). A streamed result is read to its
+ *   end and returned as its list of values;
+ * - `call` and `schedule` forward each input as `POST /__modal/call` or
+ *   `POST /__modal/schedule` with a JSON body `{ "args": [...], "kwargs":
+ *   {...} }`, and return the JSON response (an async program's calls, and
+ *   schedule ticks);
+ * - `web` (a `WEBHOOK_TYPE_WEB_SERVER` function) starts the program, then
+ *   Modal proxies its `*.modal.run` URL to `PORT`;
+ * - `Server` (`is_server`) starts the program in `@modal.enter`, then Modal
+ *   routes the Server's URL to `PORT`.
+ *
+ * It's uploaded as a Mount (`/root/alchemy_modal.py`); the module name and
+ * its function names are part of every function definition, so changing
+ * them redeploys every function.
+ */
+export declare const ENTRYPOINT_MODULE = "alchemy_modal";
+export declare const ENTRYPOINT_PATH = "/root/alchemy_modal.py";
+/** Function implementations in {@link ENTRYPOINT_SOURCE}. */
+export declare const ENTRYPOINT: {
+    readonly call: "call";
+    readonly schedule: "schedule";
+    readonly web: "web";
+    readonly server: "Server";
+    readonly rpc: "Rpc";
+};
+/** Env var listing a program's RPC methods (a JSON array), set at plan. */
+export declare const RPC_METHODS_ENV = "ALCHEMY_MODAL_RPC_METHODS";
+/**
+ * Env var that turns on the program's `/__rpc__/*` routes. Set only where
+ * Modal authenticates every request: a class function's calls and a Server
+ * behind proxy auth. A public web endpoint never serves RPC.
+ */
+export declare const RPC_SERVE_ENV = "ALCHEMY_MODAL_SERVE_RPC";
+/** A streamed RPC result, as {@link ENTRYPOINT_SOURCE} returns it: its values in order. */
+export declare const RPC_STREAM_KEY = "~alchemy/modal/rpc-stream";
+export declare const ENTRYPOINT_SOURCE = "\"\"\"Alchemy's entrypoint for a JavaScript program on Modal (generated, do not edit).\"\"\"\n\nimport base64\nimport http.client\nimport json\nimport os\nimport socket\nimport subprocess\nimport threading\nimport time\n\nimport modal\n\n_PORT = int(os.environ.get(\"PORT\", \"8000\"))\n_lock = threading.Lock()\n_process = None\n\n\ndef _start():\n    global _process\n    with _lock:\n        if _process is None or _process.poll() is not None:\n            _process = subprocess.Popen(json.loads(os.environ[\"ALCHEMY_COMMAND\"]))\n        return _process\n\n\ndef _wait_until_listening(process, timeout=600.0):\n    deadline = time.monotonic() + timeout\n    while time.monotonic() < deadline:\n        if process.poll() is not None:\n            raise RuntimeError(f\"The program exited with code {process.returncode} before listening on port {_PORT}\")\n        try:\n            socket.create_connection((\"127.0.0.1\", _PORT), timeout=1).close()\n            return\n        except OSError:\n            time.sleep(0.05)\n    raise TimeoutError(f\"The program didn't listen on port {_PORT} within {timeout:.0f} seconds\")\n\n\ndef _json_default(value):\n    if isinstance(value, (bytes, bytearray, memoryview)):\n        return base64.b64encode(bytes(value)).decode(\"ascii\")\n    raise TypeError(f\"{type(value).__name__} isn't JSON-serializable\")\n\n\ndef _forward(path, args, kwargs):\n    _wait_until_listening(_start())\n    body = json.dumps({\"args\": list(args), \"kwargs\": kwargs}, default=_json_default).encode()\n    headers = {\"content-type\": \"application/json\"}\n    try:\n        call_id = modal.current_function_call_id()\n        if call_id:\n            headers[\"x-modal-function-call-id\"] = call_id\n    except Exception:\n        pass\n    connection = http.client.HTTPConnection(\"127.0.0.1\", _PORT)\n    try:\n        connection.request(\"POST\", path, body=body, headers=headers)\n        response = connection.getresponse()\n        data = response.read()\n    finally:\n        connection.close()\n    if response.status >= 400:\n        raise RuntimeError(f\"{path} returned {response.status}: {data.decode(errors='replace')}\")\n    if not data:\n        return None\n    if response.getheader(\"content-type\", \"\").startswith(\"application/json\"):\n        return json.loads(data)\n    return data.decode(errors=\"replace\")\n\n\ndef _post(path, body, headers=None):\n    _wait_until_listening(_start())\n    connection = http.client.HTTPConnection(\"127.0.0.1\", _PORT)\n    try:\n        connection.request(\"POST\", path, body=body, headers={\"content-type\": \"application/json\", **(headers or {})})\n        response = connection.getresponse()\n        return response, response.read()\n    finally:\n        connection.close()\n\n\ndef _rpc(name):\n    def method(self, *args, **kwargs):\n        key = kwargs.pop(\"__alchemy_rpc_key__\", None)\n        if kwargs:\n            raise TypeError(f\"RPC method {name} takes positional arguments only\")\n        body = json.dumps(list(args), default=_json_default).encode()\n        headers = {\"x-alchemy-rpc-key\": key} if isinstance(key, str) else {}\n        response, data = _post(\"/__rpc__/\" + name, body, headers)\n        if response.status >= 400:\n            raise RuntimeError(f\"RPC method {name} returned {response.status}: {data.decode(errors='replace')}\")\n        if response.getheader(\"x-alchemy-rpc-stream\") is not None:\n            lines = [json.loads(line) for line in data.decode().splitlines() if line]\n            return {\"~alchemy/modal/rpc-stream\": lines}\n        return json.loads(data) if data else None\n\n    method.__name__ = name\n    return modal.method()(method)\n\n\ndef _rpc_enter(self):\n    _wait_until_listening(_start())\n\n\nRpc = type(\n    \"Rpc\",\n    (),\n    {\n        \"start\": modal.enter()(_rpc_enter),\n        **{name: _rpc(name) for name in json.loads(os.environ.get(\"ALCHEMY_MODAL_RPC_METHODS\") or \"[]\")},\n    },\n)\n\n\ndef call(*args, **kwargs):\n    return _forward(\"/__modal/call\", args, kwargs)\n\n\ndef schedule(*args, **kwargs):\n    return _forward(\"/__modal/schedule\", args, kwargs)\n\n\ndef web():\n    _start()\n\n\nclass Server:\n    @modal.enter()\n    def start(self):\n        _wait_until_listening(_start())\n\n    @modal.exit()\n    def stop(self):\n        process = _process\n        if process is not None and process.poll() is None:\n            process.terminate()\n            try:\n                process.wait(timeout=20)\n            except subprocess.TimeoutExpired:\n                process.kill()\n";
+//# sourceMappingURL=Entrypoint.d.ts.map

package/lib/internal/Entrypoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Entrypoint.d.ts","sources":["../../src/internal/Entrypoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAEjD,eAAO,MAAM,eAAe,2BAAkC,CAAC;AAE/D,6DAA6D;AAC7D,eAAO,MAAM,UAAU;aACrB,IAAI,EAAE,MAAM;aACZ,QAAQ,EAAE,UAAU;aACpB,GAAG,EAAE,KAAK;aACV,MAAM,EAAE,QAAQ;aAChB,GAAG,EAAE,KAAK;CACF,CAAC;AAEX,2EAA2E;AAC3E,eAAO,MAAM,eAAe,8BAA8B,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,aAAa,4BAA4B,CAAC;AAEvD,2FAA2F;AAC3F,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAE1D,eAAO,MAAM,iBAAiB,ggJA6I7B,CAAC"}

package/lib/internal/Entrypoint.js

@@ -0,0 +1,193 @@
+/**
+ * The Python module a `Modal.Function` or `Modal.Server` container imports.
+ *
+ * Modal boots every Function container with its Python entrypoint, which
+ * imports the function's module and looks the function up by name. This
+ * module is that function: it starts the bundled program (`ALCHEMY_COMMAND`,
+ * from the function's env secret) once per container and hands it work as
+ * HTTP on `PORT`:
+ *
+ * - `Rpc` (a class function) has one method per RPC method of the program
+ *   (`ALCHEMY_MODAL_RPC_METHODS`, from the function's env secret); a call is
+ *   sent to the program's `POST /__rpc__/<method>` with the positional
+ *   arguments as a JSON array and the caller's key (the
+ *   `__alchemy_rpc_key__` keyword argument) as `x-alchemy-rpc-key`, and
+ *   returns the JSON result (a value, or an
+ *   error envelope the caller fails with). A streamed result is read to its
+ *   end and returned as its list of values;
+ * - `call` and `schedule` forward each input as `POST /__modal/call` or
+ *   `POST /__modal/schedule` with a JSON body `{ "args": [...], "kwargs":
+ *   {...} }`, and return the JSON response (an async program's calls, and
+ *   schedule ticks);
+ * - `web` (a `WEBHOOK_TYPE_WEB_SERVER` function) starts the program, then
+ *   Modal proxies its `*.modal.run` URL to `PORT`;
+ * - `Server` (`is_server`) starts the program in `@modal.enter`, then Modal
+ *   routes the Server's URL to `PORT`.
+ *
+ * It's uploaded as a Mount (`/root/alchemy_modal.py`); the module name and
+ * its function names are part of every function definition, so changing
+ * them redeploys every function.
+ */
+export const ENTRYPOINT_MODULE = "alchemy_modal";
+export const ENTRYPOINT_PATH = `/root/${ENTRYPOINT_MODULE}.py`;
+/** Function implementations in {@link ENTRYPOINT_SOURCE}. */
+export const ENTRYPOINT = {
+    call: "call",
+    schedule: "schedule",
+    web: "web",
+    server: "Server",
+    rpc: "Rpc",
+};
+/** Env var listing a program's RPC methods (a JSON array), set at plan. */
+export const RPC_METHODS_ENV = "ALCHEMY_MODAL_RPC_METHODS";
+/**
+ * Env var that turns on the program's `/__rpc__/*` routes. Set only where
+ * Modal authenticates every request: a class function's calls and a Server
+ * behind proxy auth. A public web endpoint never serves RPC.
+ */
+export const RPC_SERVE_ENV = "ALCHEMY_MODAL_SERVE_RPC";
+/** A streamed RPC result, as {@link ENTRYPOINT_SOURCE} returns it: its values in order. */
+export const RPC_STREAM_KEY = "~alchemy/modal/rpc-stream";
+export const ENTRYPOINT_SOURCE = `"""Alchemy's entrypoint for a JavaScript program on Modal (generated, do not edit)."""
+
+import base64
+import http.client
+import json
+import os
+import socket
+import subprocess
+import threading
+import time
+
+import modal
+
+_PORT = int(os.environ.get("PORT", "8000"))
+_lock = threading.Lock()
+_process = None
+
+
+def _start():
+    global _process
+    with _lock:
+        if _process is None or _process.poll() is not None:
+            _process = subprocess.Popen(json.loads(os.environ["ALCHEMY_COMMAND"]))
+        return _process
+
+
+def _wait_until_listening(process, timeout=600.0):
+    deadline = time.monotonic() + timeout
+    while time.monotonic() < deadline:
+        if process.poll() is not None:
+            raise RuntimeError(f"The program exited with code {process.returncode} before listening on port {_PORT}")
+        try:
+            socket.create_connection(("127.0.0.1", _PORT), timeout=1).close()
+            return
+        except OSError:
+            time.sleep(0.05)
+    raise TimeoutError(f"The program didn't listen on port {_PORT} within {timeout:.0f} seconds")
+
+
+def _json_default(value):
+    if isinstance(value, (bytes, bytearray, memoryview)):
+        return base64.b64encode(bytes(value)).decode("ascii")
+    raise TypeError(f"{type(value).__name__} isn't JSON-serializable")
+
+
+def _forward(path, args, kwargs):
+    _wait_until_listening(_start())
+    body = json.dumps({"args": list(args), "kwargs": kwargs}, default=_json_default).encode()
+    headers = {"content-type": "application/json"}
+    try:
+        call_id = modal.current_function_call_id()
+        if call_id:
+            headers["x-modal-function-call-id"] = call_id
+    except Exception:
+        pass
+    connection = http.client.HTTPConnection("127.0.0.1", _PORT)
+    try:
+        connection.request("POST", path, body=body, headers=headers)
+        response = connection.getresponse()
+        data = response.read()
+    finally:
+        connection.close()
+    if response.status >= 400:
+        raise RuntimeError(f"{path} returned {response.status}: {data.decode(errors='replace')}")
+    if not data:
+        return None
+    if response.getheader("content-type", "").startswith("application/json"):
+        return json.loads(data)
+    return data.decode(errors="replace")
+
+
+def _post(path, body, headers=None):
+    _wait_until_listening(_start())
+    connection = http.client.HTTPConnection("127.0.0.1", _PORT)
+    try:
+        connection.request("POST", path, body=body, headers={"content-type": "application/json", **(headers or {})})
+        response = connection.getresponse()
+        return response, response.read()
+    finally:
+        connection.close()
+
+
+def _rpc(name):
+    def method(self, *args, **kwargs):
+        key = kwargs.pop("__alchemy_rpc_key__", None)
+        if kwargs:
+            raise TypeError(f"RPC method {name} takes positional arguments only")
+        body = json.dumps(list(args), default=_json_default).encode()
+        headers = {"x-alchemy-rpc-key": key} if isinstance(key, str) else {}
+        response, data = _post("/__rpc__/" + name, body, headers)
+        if response.status >= 400:
+            raise RuntimeError(f"RPC method {name} returned {response.status}: {data.decode(errors='replace')}")
+        if response.getheader("x-alchemy-rpc-stream") is not None:
+            lines = [json.loads(line) for line in data.decode().splitlines() if line]
+            return {"~alchemy/modal/rpc-stream": lines}
+        return json.loads(data) if data else None
+
+    method.__name__ = name
+    return modal.method()(method)
+
+
+def _rpc_enter(self):
+    _wait_until_listening(_start())
+
+
+Rpc = type(
+    "Rpc",
+    (),
+    {
+        "start": modal.enter()(_rpc_enter),
+        **{name: _rpc(name) for name in json.loads(os.environ.get("ALCHEMY_MODAL_RPC_METHODS") or "[]")},
+    },
+)
+
+
+def call(*args, **kwargs):
+    return _forward("/__modal/call", args, kwargs)
+
+
+def schedule(*args, **kwargs):
+    return _forward("/__modal/schedule", args, kwargs)
+
+
+def web():
+    _start()
+
+
+class Server:
+    @modal.enter()
+    def start(self):
+        _wait_until_listening(_start())
+
+    @modal.exit()
+    def stop(self):
+        process = _process
+        if process is not None and process.poll() is None:
+            process.terminate()
+            try:
+                process.wait(timeout=20)
+            except subprocess.TimeoutExpired:
+                process.kill()
+`;
+//# sourceMappingURL=Entrypoint.js.map

package/lib/internal/Entrypoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Entrypoint.js","sources":["../../src/internal/Entrypoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEjD,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,iBAAiB,KAAK,CAAC;AAE/D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;CACF,CAAC;AAEX,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEvD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AAE1D,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6IhC,CAAC"}

package/lib/internal/Rpc.d.ts

@@ -0,0 +1,17 @@
+import { type HostRuntimeContext } from "alchemy/Runtime/Process";
+/** The RPC methods of a program's shape: every function besides `fetch` and `run`. */
+export declare const rpcMethodsOf: (shape: Record<string, unknown> | undefined) => {
+    [k: string]: unknown;
+};
+/** The method names a function's env records (see {@link RPC_METHODS_ENV}). */
+export declare const rpcMethodNamesOf: (env: Record<string, unknown> | undefined) => string[];
+/**
+ * The runtime context of a `Modal.Function` or `Modal.Server` program. At
+ * plan it records the program's RPC methods in its env, so the Function's
+ * definition can name them. At run time it serves them on `/__rpc__/*`
+ * next to `fetch`, but only where the provider set {@link RPC_SERVE_ENV}
+ * (where Modal authenticates every request), and only to callers holding a
+ * key a binding issued (see `RpcAuth.ts`).
+ */
+export declare const createModalRuntimeContext: (type: string) => (id: string) => HostRuntimeContext;
+//# sourceMappingURL=Rpc.d.ts.map

package/lib/internal/Rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Rpc.d.ts","sources":["../../src/internal/Rpc.ts"],"names":[],"mappings":"AAGA,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAK5F,sFAAsF;AACtF,eAAO,MAAM,YAAY,UAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;;CAKpE,CAAC;AAEJ,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,QAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAAG,MAAM,EASjF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,SAC7B,MAAM,UACR,MAAM,KAAG,kBAoBb,CAAC"}

package/lib/internal/Rpc.js

@@ -0,0 +1,49 @@
+import { safeHttpEffect } from "alchemy/Http";
+import * as Output from "alchemy/Output";
+import { serveRpc } from "alchemy/Rpc";
+import { createHostRuntimeContext } from "alchemy/Runtime/Process";
+import * as Effect from "effect/Effect";
+import { RPC_METHODS_ENV, RPC_SERVE_ENV } from "./Entrypoint.js";
+import { parseCallers, requireRpcCaller, RPC_CALLERS_ENV } from "./RpcAuth.js";
+/** The RPC methods of a program's shape: every function besides `fetch` and `run`. */
+export const rpcMethodsOf = (shape) => Object.fromEntries(Object.entries(shape ?? {}).filter(([key, value]) => key !== "fetch" && key !== "run" && typeof value === "function"));
+/** The method names a function's env records (see {@link RPC_METHODS_ENV}). */
+export const rpcMethodNamesOf = (env) => {
+    const value = env?.[RPC_METHODS_ENV];
+    if (typeof value !== "string")
+        return [];
+    try {
+        const names = JSON.parse(value);
+        return Array.isArray(names) ? names.filter((name) => typeof name === "string") : [];
+    }
+    catch {
+        return [];
+    }
+};
+/**
+ * The runtime context of a `Modal.Function` or `Modal.Server` program. At
+ * plan it records the program's RPC methods in its env, so the Function's
+ * definition can name them. At run time it serves them on `/__rpc__/*`
+ * next to `fetch`, but only where the provider set {@link RPC_SERVE_ENV}
+ * (where Modal authenticates every request), and only to callers holding a
+ * key a binding issued (see `RpcAuth.ts`).
+ */
+export const createModalRuntimeContext = (type) => (id) => {
+    const base = createHostRuntimeContext(type)(id);
+    const serveBase = base.serve;
+    const serve = (handler, options) => Effect.gen(function* () {
+        const methods = rpcMethodsOf(options?.shape);
+        const names = Object.keys(methods).sort();
+        if (!globalThis.__ALCHEMY_RUNTIME__ && names.length > 0) {
+            yield* base.set(RPC_METHODS_ENV, Output.literal(names));
+        }
+        const enabled = (yield* base.get(RPC_SERVE_ENV)) !== undefined;
+        if (!enabled || names.length === 0)
+            return yield* serveBase(handler, options);
+        const fallback = safeHttpEffect(handler);
+        const callers = parseCallers(yield* base.get(RPC_CALLERS_ENV));
+        return yield* serveBase(requireRpcCaller(callers, serveRpc(methods, fallback), fallback), options);
+    });
+    return Object.assign(base, { serve });
+};
+//# sourceMappingURL=Rpc.js.map

package/lib/internal/Rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Rpc.js","sources":["../../src/internal/Rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAA2B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/E,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAA0C,EAAE,EAAE,CACzE,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,UAAU,CAClF,CACF,CAAC;AAEJ,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAwC,EAAY,EAAE;IACrF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,CAAC,IAAY,EAAE,EAAE,CACjB,CAAC,EAAU,EAAsB,EAAE;IACjC,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAgC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC9D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,mBAAmB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAU,aAAa,CAAC,CAAC,KAAK,SAAS,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAU,eAAe,CAAC,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,EAChE,OAAO,CACR,CAAC;IACJ,CAAC,CAAoC,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC"}

package/lib/internal/RpcAuth.d.ts

@@ -0,0 +1,41 @@
+import * as Effect from "effect/Effect";
+import { HttpServerRequest } from "effect/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/http/HttpServerResponse";
+/** Env var on the target: the SHA-256 (hex) of each caller's key, as a JSON array. */
+export declare const RPC_CALLERS_ENV = "ALCHEMY_MODAL_RPC_CALLERS";
+/** Request header a Server's RPC call carries its key in. */
+export declare const RPC_KEY_HEADER = "x-alchemy-rpc-key";
+/** Keyword argument a Function's RPC call carries its key in (the entrypoint forwards it as {@link RPC_KEY_HEADER}). */
+export declare const RPC_KEY_KWARG = "__alchemy_rpc_key__";
+/** Env var on the caller holding its key for the target `targetId`. */
+export declare const rpcKeyEnv: (targetId: string) => string;
+/** What a caller's binding attaches to the target. */
+export interface RpcCallerBinding {
+    /** SHA-256 (hex) of the caller's key. */
+    readonly rpcCallers?: ReadonlyArray<string>;
+}
+/** SHA-256 of `text`, as hex. */
+export declare const sha256Hex: (text: string) => Effect.Effect<string, never, never>;
+/** The caller key hashes a target's bindings recorded, sorted. */
+export declare const rpcCallersOf: (bindings: ReadonlyArray<{
+    readonly data: RpcCallerBinding;
+}>) => string[];
+/**
+ * The caller half of an RPC binding. Yield it while the binding's layer is
+ * built; call the result with the target in the binding. At deploy it mints
+ * the key for this caller and target (`<host><target>RpcKey`), binds it into
+ * the host's env, and records its hash on the target. At run time it reads
+ * the key back, or `undefined` when the caller has none (a script).
+ */
+export declare const RpcCaller: Effect.Effect<(target: {
+    readonly LogicalId: string;
+}) => Effect.Effect<Effect.Effect<string | undefined, never, never>, never, never>, never, never>;
+/**
+ * Serve `rpc` only to callers whose key's hash is in {@link RPC_CALLERS_ENV};
+ * every other request goes to `fallback`. A call without a key, or with one
+ * no binding issued, gets `401`.
+ */
+export declare const requireRpcCaller: <A, E, R, A2, E2, R2>(callers: ReadonlySet<string>, rpc: Effect.Effect<A, E, R>, fallback: Effect.Effect<A2, E2, R2>) => Effect.Effect<A | A2 | HttpServerResponse.HttpServerResponse, E | E2, R | R2 | HttpServerRequest>;
+/** The caller key hashes in a target's env (see {@link RPC_CALLERS_ENV}). */
+export declare const parseCallers: (value: unknown) => ReadonlySet<string>;
+//# sourceMappingURL=RpcAuth.d.ts.map

package/lib/internal/RpcAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RpcAuth.d.ts","sources":["../../src/internal/RpcAuth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,kBAAkB,MAAM,gCAAgC,CAAC;AAYrE,sFAAsF;AACtF,eAAO,MAAM,eAAe,8BAA8B,CAAC;AAE3D,6DAA6D;AAC7D,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAElD,wHAAwH;AACxH,eAAO,MAAM,aAAa,wBAAwB,CAAC;AAEnD,uEAAuE;AACvE,eAAO,MAAM,SAAS,aAAc,MAAM,WAAqD,CAAC;AAEhG,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,iCAAiC;AACjC,eAAO,MAAM,SAAS,SAAU,MAAM,wCAKnC,CAAC;AAEJ,kEAAkE;AAClE,eAAO,MAAM,YAAY,aACb,aAAa,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC,KAC3D,MAAM,EAAuF,CAAC;AAOjG;;;;;;GAMG;AACH,eAAO,MAAM,SAAS;wBAGsC,MAAM;iGA8BhE,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,WACzC,WAAW,CAAC,MAAM,CAAC,OACvB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YACjB,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,sGAYjC,CAAC;AAEL,6EAA6E;AAC7E,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,WAAW,CAAC,MAAM,CAG/D,CAAC"}