@alienplatform/core 1.14.1 → 2.0.1

package/src/service-account.ts

@@ -1,117 +0,0 @@
-import {
-  type PermissionSet,
-  type ResourceType,
-  type ServiceAccount as ServiceAccountConfig,
-  ServiceAccountSchema,
-} from "./generated/index.js"
-import { Resource } from "./resource.js"
-
-export type {
-  ServiceAccount as ServiceAccountConfig,
-  ServiceAccountOutputs,
-  PermissionSet,
-} from "./generated/index.js"
-export {
-  ServiceAccountSchema as ServiceAccountConfigSchema,
-  ServiceAccountOutputsSchema,
-  PermissionSetSchema,
-} from "./generated/index.js"
-
-/**
- * Represents a non-human identity that can be assumed by compute services.
- *
- * Maps to:
- * - AWS: IAM Role
- * - GCP: Service Account
- * - Azure: User-assigned Managed Identity
- *
- * ServiceAccounts can be used to grant specific permissions to compute resources
- * and can be impersonated by other services for cross-account or cross-service access.
- *
- * @example
- * ```typescript
- * import { ServiceAccount, Worker } from "@alien/core"
- *
- * // Create a service account with stack-level permissions
- * const dataProcessorAccount = new ServiceAccount("data-processor")
- *   .build()
- *
- * // Link it to a function to use its identity
- * const processor = new Worker("processor")
- *   .code({ type: "image", image: "processor:latest" })
- *   .link(dataProcessorAccount)
- *   .build()
- * ```
- */
-export class ServiceAccount {
-  private _config: Partial<ServiceAccountConfig> = {
-    stackPermissionSets: [],
-  }
-
-  /**
-   * Creates a new ServiceAccount builder.
-   * @param id Identifier for the service account. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.
-   */
-  constructor(id: string) {
-    this._config.id = id
-  }
-
-  /**
-   * Returns a ResourceType representing any service account resource.
-   * Used for creating permission targets that apply to all service account resources.
-   * @returns The "service-account" resource type.
-   */
-  public static any(): ResourceType {
-    return "service-account"
-  }
-
-  /**
-   * Adds a stack-level permission set to the service account.
-   * Stack-level permissions apply to all resources in the stack.
-   *
-   * Note: Only inline permission set objects are supported. To use built-in permission sets,
-   * you need to resolve them first through the permission set registry or use permission profiles
-   * in your stack configuration.
-   *
-   * @example
-   * ```typescript
-   * import { ServiceAccount, type PermissionSet } from "@alien/core"
-   *
-   * const customPermissionSet: PermissionSet = {
-   *   id: "custom/my-perms",
-   *   description: "Custom permissions",
-   *   platforms: {
-   *     aws: [{ grant: { actions: ["s3:GetObject"] }, binding: { stack: { resources: ["*"] } } }]
-   *   }
-   * }
-   *
-   * const account = new ServiceAccount("custom-processor")
-   *   .stackPermissionSet(customPermissionSet)
-   *   .build()
-   * ```
-   *
-   * @param permissionSet The permission set object with platform-specific permissions
-   * @returns The ServiceAccount builder instance.
-   */
-  public stackPermissionSet(permissionSet: PermissionSet): this {
-    if (!this._config.stackPermissionSets) {
-      this._config.stackPermissionSets = []
-    }
-    this._config.stackPermissionSets.push(permissionSet)
-    return this
-  }
-
-  /**
-   * Builds and validates the service account configuration.
-   * @returns An immutable Resource representing the configured service account.
-   * @throws Error if the service account configuration is invalid.
-   */
-  public build(): Resource {
-    const config = ServiceAccountSchema.parse(this._config)
-
-    return new Resource({
-      type: "service-account",
-      ...config,
-    })
-  }
-}

package/src/stack.ts

@@ -1,133 +0,0 @@
-import {
-  type PermissionsConfig,
-  type Platform,
-  type ResourceEntry,
-  type ResourceLifecycle,
-  type Stack as StackConfig,
-  type StackInputDefinition,
-  StackSchema,
-} from "./generated/index.js"
-import { type StackInputCollection, getStackInputDefinitions } from "./input.js"
-import type { Resource } from "./resource.js"
-
-/**
- * Options for adding a resource to a stack.
- */
-export interface AddResourceOptions {
-  /**
-   * Enable remote bindings for this resource (BYOB use case).
-   * When true, binding params are synced to StackState for external access.
-   * Default: false (prevents sensitive data in synced state).
-   */
-  remoteAccess?: boolean
-}
-
-export type {
-  Stack as StackConfig,
-  StackState,
-  StackStatus,
-  StackResourceState,
-  ResourceStatus,
-  PermissionSet,
-  ManagementPermissions,
-  PermissionsConfig,
-  StackInputDefaultValue,
-  StackInputDefinition,
-  StackInputEnvironmentMapping,
-  StackInputEnvironmentVariableType,
-  StackInputKind,
-  StackInputProvider,
-  StackInputValidation,
-} from "./generated/index.js"
-export {
-  StackSchema,
-  StackStateSchema,
-  StackStatusSchema,
-  StackResourceStateSchema,
-  ResourceStatusSchema,
-} from "./generated/index.js"
-
-/**
- * Represents a collection of cloud resources that are managed together.
- * Stacks are the top-level organizational unit in an Alien application.
- */
-export class Stack {
-  private _config: Partial<StackConfig> = {
-    resources: {},
-    permissions: undefined,
-  }
-
-  /**
-   * Creates a new Stack builder.
-   * @param id Identifier for the stack. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 128 characters.
-   */
-  constructor(id: string) {
-    this._config.id = id
-  }
-
-  /**
-   * Adds a resource to the stack with a specified lifecycle.
-   * @param resource The resource to add (e.g., Worker, Storage).
-   * @param lifecycle The lifecycle state of the resource (e.g., Frozen, Live).
-   * @param options Optional configuration for the resource entry.
-   * @returns The Stack builder instance.
-   */
-  public add(resource: Resource, lifecycle: ResourceLifecycle, options?: AddResourceOptions): this {
-    const entry: ResourceEntry = {
-      config: resource.config,
-      lifecycle,
-      dependencies: [], // Additional dependencies beyond what the resource itself defines
-    }
-    if (options?.remoteAccess) {
-      entry.remoteAccess = true
-    }
-    this._config.resources![resource.config.id] = entry
-    return this
-  }
-
-  /**
-   * Declare which platforms this stack supports.
-   * When omitted, the stack supports all platforms.
-   */
-  public platforms(platforms: Platform[]): this {
-    this._config.supportedPlatforms = platforms
-    return this
-  }
-
-  /**
-   * Configure permissions for this stack.
-   * @param config Permission configuration
-   * @returns The Stack builder instance.
-   */
-  public permissions(config: PermissionsConfig): this {
-    this._config.permissions = config
-    return this
-  }
-
-  /**
-   * Configure values that must be provided before setup or deployment can proceed.
-   * @param inputs Stack input definitions created with alien.inputs({...}).
-   * @returns The Stack builder instance.
-   */
-  public inputs(inputs: StackInputCollection | readonly StackInputDefinition[]): this {
-    this._config.inputs = getStackInputDefinitions(inputs)
-    return this
-  }
-
-  /**
-   * Gets the stack ID without building/validating the stack.
-   * @returns The stack ID.
-   */
-  public get id(): string {
-    return this._config.id!
-  }
-
-  /**
-   * Builds and validates the stack configuration.
-   * @returns The complete and validated stack configuration.
-   * @throws Error if the stack configuration is invalid.
-   */
-  public build(): StackConfig {
-    return StackSchema.parse(this._config)
-  }
-}

package/src/storage.ts

@@ -1,84 +0,0 @@
-import {
-  type LifecycleRule,
-  type ResourceType,
-  type Storage as StorageConfig,
-  StorageSchema,
-} from "./generated/index.js"
-import { Resource } from "./resource.js"
-
-export type { LifecycleRule, StorageOutputs, Storage as StorageConfig } from "./generated/index.js"
-export { StorageSchema as StorageConfigSchema } from "./generated/index.js"
-
-/**
- * Represents an object storage bucket.
- */
-export class Storage {
-  private _config: Partial<StorageConfig> = {
-    publicRead: false,
-    versioning: false,
-    lifecycleRules: [],
-  }
-
-  /**
-   * Creates a new Storage builder.
-   * @param id ID of the storage bucket. For names with dots, each dot-separated label must be ≤ 63 characters.
-   */
-  constructor(id: string) {
-    this._config.id = id
-  }
-
-  /**
-   * Returns a ResourceType representing any storage resource.
-   * Used for creating permission targets that apply to all storage resources.
-   * @returns The "storage" resource type.
-   */
-  public static any(): ResourceType {
-    return "storage"
-  }
-
-  /**
-   * Allows public read access to objects without authentication.
-   * Default: `false`.
-   * @param value Whether to allow public read access.
-   * @returns The Storage builder instance.
-   */
-  public publicRead(value: boolean): this {
-    this._config.publicRead = value
-    return this
-  }
-
-  /**
-   * Enables object versioning.
-   * Default: `false`.
-   * @param value Whether to enable versioning.
-   * @returns The Storage builder instance.
-   */
-  public versioning(value: boolean): this {
-    this._config.versioning = value
-    return this
-  }
-
-  /**
-   * Defines lifecycle rules for automatic object management (e.g., expiration).
-   * @param rules An array of lifecycle rules.
-   * @returns The Storage builder instance.
-   */
-  public lifecycleRules(rules: LifecycleRule[]): this {
-    this._config.lifecycleRules = rules
-    return this
-  }
-
-  /**
-   * Builds and validates the storage configuration.
-   * @returns An immutable Resource representing the configured storage bucket.
-   * @throws Error if the storage configuration is invalid.
-   */
-  public build(): Resource {
-    const config = StorageSchema.parse(this._config)
-
-    return new Resource({
-      type: "storage",
-      ...config,
-    })
-  }
-}

package/src/tests/index.ts

@@ -1,6 +0,0 @@
-import { StackStateSchema } from "../stack.js"
-
-// Utility to get stack state in an Alien integration test
-export function getStackState() {
-  return StackStateSchema.parse(JSON.parse(process.env.ALIEN_STACK_STATE!))
-}

package/src/vault.ts

@@ -1,49 +0,0 @@
-import { type ResourceType, type Vault as VaultConfig, VaultSchema } from "./generated/index.js"
-import { Resource } from "./resource.js"
-
-export type { VaultOutputs, Vault as VaultConfig } from "./generated/index.js"
-export { VaultSchema as VaultConfigSchema } from "./generated/index.js"
-
-/**
- * Represents a secure vault for storing secrets.
- * This resource provides a platform-agnostic interface over cloud-native secret management services:
- * - AWS: AWS Secrets Manager with prefixed secret names
- * - GCP: Secret Manager with prefixed secret names
- * - Azure: Key Vault resource
- *
- * The vault acts as a namespace for secrets and controls access permissions for workers and services.
- */
-export class Vault {
-  private _config: Partial<VaultConfig> = {}
-
-  /**
-   * Creates a new Vault builder.
-   * @param id Identifier for the vault. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.
-   */
-  constructor(id: string) {
-    this._config.id = id
-  }
-
-  /**
-   * Returns a ResourceType representing any vault resource.
-   * Used for creating permission targets that apply to all vault resources.
-   * @returns The "vault" resource type.
-   */
-  public static any(): ResourceType {
-    return "vault"
-  }
-
-  /**
-   * Builds and validates the vault configuration.
-   * @returns An immutable Resource representing the configured vault.
-   * @throws Error if the vault configuration is invalid.
-   */
-  public build(): Resource {
-    const config = VaultSchema.parse(this._config)
-
-    return new Resource({
-      type: "vault",
-      ...config,
-    })
-  }
-}

package/src/worker.ts

@@ -1,251 +0,0 @@
-import {
-  type ReadinessProbe,
-  type ResourceType,
-  type WorkerCode,
-  type Worker as WorkerConfig,
-  type WorkerPublicEndpoint,
-  WorkerSchema,
-  type WorkerTrigger,
-} from "./generated/index.js"
-import { Resource } from "./resource.js"
-
-export type {
-  Worker as WorkerConfig,
-  WorkerOutputs,
-  WorkerPublicEndpoint,
-  WorkerTrigger,
-  ReadinessProbe,
-  HttpMethod,
-} from "./generated/index.js"
-export {
-  WorkerSchema as WorkerConfigSchema,
-  WorkerOutputsSchema,
-  WorkerPublicEndpointSchema,
-  WorkerTriggerSchema,
-  ReadinessProbeSchema,
-  HttpMethodSchema,
-} from "./generated/index.js"
-
-export interface WorkerPublicEndpointOptions {
-  hostLabel?: string
-  wildcardSubdomains?: boolean
-}
-
-/**
- * Represents a serverless worker that executes code in response to triggers or direct invocations.
- * Workers are the primary compute resource in serverless applications, designed to be stateless and ephemeral.
- */
-export class Worker {
-  private _config: Partial<WorkerConfig> = {
-    links: [],
-    triggers: [],
-    publicEndpoints: [],
-    environment: {},
-  }
-
-  /**
-   * Creates a new Worker builder.
-   * @param id Identifier for the worker. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.
-   */
-  constructor(id: string) {
-    this._config.id = id
-  }
-
-  /**
-   * Returns a ResourceType representing any worker resource.
-   * Used for creating permission targets that apply to all worker resources.
-   * @returns The "worker" resource type.
-   */
-  public static any(): ResourceType {
-    return "worker"
-  }
-
-  /**
-   * Sets the code for the worker, either a pre-built image or source code to be built.
-   * @param code The worker code configuration.
-   * @returns The Worker builder instance.
-   */
-  public code(code: WorkerCode): this {
-    this._config.code = code
-    return this
-  }
-
-  /**
-   * Sets the memory allocated to the worker in megabytes (MB).
-   * Constraints: 128‑32768 MB (platform-specific limits may apply).
-   * Default: 256 MB.
-   * @param mb The memory in MB.
-   * @returns The Worker builder instance.
-   */
-  public memoryMb(mb: number): this {
-    this._config.memoryMb = mb
-    return this
-  }
-
-  /**
-   * Sets the maximum execution time for the worker in seconds.
-   * Constraints: 1‑3600 seconds (platform-specific limits may apply).
-   * Default: 30 seconds.
-   * @param sec The timeout in seconds.
-   * @returns The Worker builder instance.
-   */
-  public timeoutSeconds(sec: number): this {
-    this._config.timeoutSeconds = sec
-    return this
-  }
-
-  /**
-   * Sets the maximum number of concurrent executions allowed for the worker.
-   * `null` means platform default applies.
-   * @param limit The concurrency limit, or `null` for platform default.
-   * @returns The Worker builder instance.
-   */
-  public concurrencyLimit(limit: number | undefined): this {
-    this._config.concurrencyLimit = limit
-    return this
-  }
-
-  /**
-   * Exposes a named public HTTP endpoint for the worker.
-   *
-   * If no public endpoint is declared, the worker is private and only reachable
-   * through triggers, commands, or provider invocation APIs.
-   */
-  public publicEndpoint(name: string, options: WorkerPublicEndpointOptions = {}): this {
-    if (!this._config.publicEndpoints) {
-      this._config.publicEndpoints = []
-    }
-    this._config.publicEndpoints.push({
-      name,
-      hostLabel: options.hostLabel,
-      wildcardSubdomains: options.wildcardSubdomains ?? false,
-    } satisfies WorkerPublicEndpoint)
-    return this
-  }
-
-  /**
-   * Sets key-value pairs as environment variables for the worker.
-   * @param env A map of environment variable names to their values.
-   * @returns The Worker builder instance.
-   */
-  public environment(env: Record<string, string>): this {
-    this._config.environment = env
-    return this
-  }
-
-  /**
-   * Links another resource (e.g., Storage, KV, Queue) to this worker.
-   * This makes the linked resource accessible to the worker, often by injecting
-   * environment variables or granting permissions.
-   * @param resource The resource to link.
-   * @returns The Worker builder instance.
-   */
-  public link(resource: Resource): this {
-    if (!this._config.links) {
-      this._config.links = []
-    }
-    this._config.links.push(resource.ref())
-    return this
-  }
-
-  /**
-   * Assigns a permission profile to this worker.
-   * The profile defines the permissions granted to this worker when interacting
-   * with other cloud resources.
-   * @param permissions The permission profile name.
-   * @returns The Worker builder instance.
-   */
-  public permissions(permissions: string): this {
-    this._config.permissions = permissions
-    return this
-  }
-
-  /**
-   * Configures a readiness probe for the worker.
-   * The probe will be executed after provisioning/update to verify the worker is ready.
-   * Only works with workers that declare a public endpoint.
-   *
-   * @example
-   * ```typescript
-   * const probe: ReadinessProbe = {
-   *   method: "GET",
-   *   path: "/health"
-   * };
-   *
-   * const func = new Worker("my-api")
-   *   .code({ type: "image", image: "my-api:latest" })
-   *   .publicEndpoint("api")
-   *   .readinessProbe(probe)
-   *   .build();
-   * ```
-   *
-   * @param probe The readiness probe configuration.
-   * @returns The Worker builder instance.
-   */
-  public readinessProbe(probe: ReadinessProbe): this {
-    this._config.readinessProbe = probe
-    return this
-  }
-
-  /**
-   * Enables or disables the Commands protocol for the worker.
-   * When enabled, the runtime polls the manager for pending commands and executes registered handlers.
-   * Default: false.
-   * @param enabled Whether to enable commands for this worker.
-   * @returns The Worker builder instance.
-   */
-  public commandsEnabled(enabled: boolean): this {
-    this._config.commandsEnabled = enabled
-    return this
-  }
-
-  /**
-   * Adds a trigger to the worker. Workers can have multiple triggers.
-   * Each trigger will independently invoke the worker when its conditions are met.
-   *
-   * @example
-   * ```typescript
-   * // Queue trigger
-   * const queueTrigger: WorkerTrigger = {
-   *   type: "queue",
-   *   queue: myQueue.ref()
-   * };
-   *
-   * // Schedule trigger
-   * const scheduleTrigg: WorkerTrigger = {
-   *   type: "schedule",
-   *   cron: "0 * * * *"
-   * };
-   *
-   * const func = new Worker("my-func")
-   *   .code({ type: "image", image: "my-image:latest" })
-   *   .trigger(queueTrigger)
-   *   .trigger(scheduleTrigger)
-   *   .build();
-   * ```
-   *
-   * @param trigger The trigger configuration.
-   * @returns The Worker builder instance.
-   */
-  public trigger(trigger: WorkerTrigger): this {
-    if (!this._config.triggers) {
-      this._config.triggers = []
-    }
-    this._config.triggers.push(trigger)
-    return this
-  }
-
-  /**
-   * Builds and validates the worker configuration.
-   * @returns An immutable Resource representing the configured worker.
-   * @throws Error if the worker configuration is invalid (e.g., missing code).
-   */
-  public build(): Resource {
-    const config = WorkerSchema.parse(this._config)
-
-    return new Resource({
-      type: "worker",
-      ...config,
-    })
-  }
-}

package/tsconfig.json

@@ -1,4 +0,0 @@
-{
-  "extends": "@alienplatform/typescript-config/base.json",
-  "exclude": ["node_modules", "kubb.config.ts"]
-}

package/tsdown.config.ts

@@ -1,10 +0,0 @@
-import { defineConfig } from "tsdown"
-
-export default defineConfig({
-  entry: ["src/index.ts", "src/tests/index.ts"],
-  dts: {
-    sourcemap: true,
-  },
-  hash: false,
-  ignoreWatch: ".turbo",
-})