@anvil-cloud/sdk 0.0.4 → 0.0.6

package/README.md

@@ -2,58 +2,90 @@
 
 **Cloud infrastructure that's secure by default — not by accident.**
 
-Anvil wraps raw cloud resources into opinionated, production-ready components. No 200-line Terraform modules. No copy-pasting security configs from Stack Overflow. Just declare what you need and Anvil handles the rest.
+Anvil wraps raw cloud resources into opinionated, production-ready components. No 200-line Terraform modules. No copy-pasting security configs. Just declare what you need and Anvil handles the rest.
 
-```typescript
-import * as anvil from '@anvil-cloud/sdk';
+## Install
 
-const bucket = new anvil.aws.Bucket('uploads', {
-  versioning: true,
-});
+```bash
+npm install @anvil-cloud/sdk
 ```
 
-That S3 bucket ships with public access blocked, encryption enabled, and ACLs disabled — because that's how every bucket should start. You opt _in_ to risk, not out of it.
+## Quick start
 
-## Multi-cloud
+Create `anvil.config.ts` at your project root:
 
-Anvil supports any cloud provider. AWS and GCP are available today, with more coming soon.
+```typescript
+import { App } from '@anvil-cloud/sdk';
+import * as anvil from '@anvil-cloud/sdk';
 
-## Quick start
+export default new App({
+  run(ctx) {
+    const bucket = new anvil.aws.Bucket('uploads', {
+      dataClassification: 'sensitive',
+    });
+    ctx.export('bucketName', bucket.bucketName);
+  },
+});
+```
 
-**1. Install the CLI**
+Deploy:
 
 ```bash
-brew install anvil-cloud/tap/anvil
+anvil deploy
 ```
 
-**2. Install the SDK**
+That S3 bucket ships with public access blocked, encryption enabled, and versioning on — because that's how every bucket should start. You opt _in_ to risk, not out of it.
 
-```bash
-npm install @anvil-cloud/sdk
-```
+## The App class
 
-**3. Write infrastructure**
+Every Anvil program starts with `new App()`. The `run` callback receives a `Context` with:
 
-```typescript
-// index.ts
-import * as anvil from '@anvil-cloud/sdk';
+- `ctx.stage` — the current deployment stage (defaults to your OS username for dev isolation)
+- `ctx.project` — the project name from `anvil.yaml`
+- `ctx.export(name, value)` — export stack outputs
+- `ctx.providers` — named cloud providers for multi-region / multi-account
 
-const bucket = new anvil.aws.Bucket('uploads');
+## Multi-cloud
+
+```typescript
+export default new App({
+  run(ctx) {
+    // AWS
+    const bucket = new anvil.aws.Bucket('data', {
+      dataClassification: 'sensitive',
+    });
+
+    // GCP
+    const gcsBucket = new anvil.gcp.StorageBucket('backup', {
+      dataClassification: 'internal',
+      location: 'US',
+    });
+  },
+});
 ```
 
-**4. Deploy**
+## Overrides
 
-```bash
-anvil deploy
+Every component accepts a `transform` argument to override the underlying resource config:
+
+```typescript
+const bucket = new anvil.aws.Bucket('custom', {
+  dataClassification: 'non-sensitive',
+  transform: {
+    bucket: { forceDestroy: true, tags: { env: 'dev' } },
+  },
+});
 ```
 
 ## How it works
 
-Anvil is built on top of [Pulumi](https://www.pulumi.com/). Each component wraps one or more raw cloud resources with secure defaults baked in. You write TypeScript, Anvil handles the wiring.
+Anvil is built on [Pulumi](https://www.pulumi.com/). Each component wraps one or more cloud resources with secure defaults. The `App` class handles config, providers, and exports so you write infrastructure — not boilerplate.
 
 ## Links
 
-- [GitHub](https://github.com/anvil-cloud/anvil)
+- [GitHub](https://github.com/DamienPace15/anvil)
+- [Python SDK](https://pypi.org/project/anvil-cloud/)
+- [Go SDK](https://pkg.go.dev/github.com/DamienPace15/anvil/sdk/go/anvil)
 
 ## License
 

package/app.ts

@@ -0,0 +1,285 @@
+import * as pulumi from '@pulumi/pulumi';
+import * as aws from '@pulumi/aws';
+import * as gcp from '@pulumi/gcp';
+
+// ── Types ──────────────────────────────────────────────────
+
+/**
+ * Context passed to the App's run callback.
+ * This is the user's only interface to Anvil runtime information.
+ */
+export interface Context {
+  /** The current deployment stage (e.g. "dev", "staging", "prod", or OS username). */
+  readonly stage: string;
+
+  /** The project name from anvil.yaml. */
+  readonly project: string;
+
+  /** Named providers, keyed by their config name (e.g. "aws", "aws.us", "gcp.eu"). */
+  readonly providers: Record<string, pulumi.ProviderResource>;
+
+  /** Export a stack output value without importing Pulumi. */
+  export(name: string, value: pulumi.Input<any>): void;
+}
+
+/** AWS provider configuration. */
+export interface AwsProviderConfig {
+  region?: string;
+  profile?: string;
+  assumeRole?: {
+    roleArn: string;
+    sessionName?: string;
+    externalId?: string;
+  };
+}
+
+/** GCP provider configuration. */
+export interface GcpProviderConfig {
+  project?: string;
+  region?: string;
+  zone?: string;
+  credentials?: string;
+}
+
+/** Default options applied to all resources. */
+export interface DefaultsConfig {
+  /**
+   * Tags merged into every taggable resource via the cloud provider's
+   * native defaultTags (AWS) or defaultLabels (GCP).
+   *
+   * `stage` and `project` are auto-injected. User tags override auto-injected ones.
+   * Per-resource tags override default tags.
+   */
+  tags?: Record<string, string>;
+}
+
+/**
+ * Configuration for the App class.
+ */
+export interface AppConfig {
+  /** The infrastructure definition callback. Required. */
+  run: (ctx: Context) => void;
+
+  /** Default resource options applied to all resources. */
+  defaults?: DefaultsConfig;
+
+  /**
+   * Named provider configurations.
+   * Keys follow the pattern "cloud" or "cloud.name":
+   *   "aws"    → default AWS provider
+   *   "aws.us" → named AWS provider for US region
+   *   "gcp"    → default GCP provider
+   *   "gcp.eu" → named GCP provider for EU
+   */
+  providers?: Record<string, AwsProviderConfig | GcpProviderConfig>;
+
+  /**
+   * Called before the infrastructure program runs.
+   * @future Not yet implemented — reserved for forward compatibility.
+   */
+  beforeDeploy?: (ctx: Context) => void;
+
+  /**
+   * Called after the infrastructure program completes successfully.
+   * @future CLI-side hook — not yet implemented.
+   */
+  afterDeploy?: (ctx: Context) => void;
+
+  /**
+   * Called if the infrastructure program throws an error.
+   * @future CLI-side hook — not yet implemented.
+   */
+  onError?: (ctx: Context, error: Error) => void;
+}
+
+// ── Helpers ────────────────────────────────────────────────
+
+/**
+ * Determine which cloud a provider key belongs to.
+ * "aws" → "aws", "aws.us" → "aws", "gcp.eu" → "gcp"
+ */
+function getCloud(key: string): string {
+  const dot = key.indexOf('.');
+  return dot === -1 ? key : key.substring(0, dot);
+}
+
+// ── App ────────────────────────────────────────────────────
+
+/**
+ * App is the entry point for an Anvil infrastructure program.
+ *
+ * It wraps Pulumi's runtime so users never import `@pulumi/pulumi` directly.
+ * The constructor reads stage/project from Pulumi config, creates providers
+ * with default tags, and invokes the user's `run` callback with a Context.
+ *
+ * @example
+ * ```typescript
+ * import { App } from "@anvil-cloud/sdk";
+ * import * as anvil from "@anvil-cloud/sdk";
+ *
+ * export default new App({
+ *   defaults: {
+ *     tags: { team: "platform" },
+ *   },
+ *   providers: {
+ *     "aws": { region: "ap-southeast-2" },
+ *     "aws.us": { region: "us-east-1" },
+ *   },
+ *   run(ctx) {
+ *     const bucket = new anvil.aws.Bucket("my-data", {
+ *       dataClassification: "sensitive",
+ *     });
+ *     ctx.export("bucketName", bucket.bucketName);
+ *   },
+ * });
+ * ```
+ */
+export class App {
+  /** Stack outputs collected via ctx.export(). */
+  [key: string]: any;
+
+  constructor(config: AppConfig) {
+    // ── Read config from Pulumi ────────────────────────
+    const anvilConfig = new pulumi.Config('anvil');
+    const stage = anvilConfig.require('stage');
+    const project = pulumi.getProject();
+
+    // ── Build default tags ─────────────────────────────
+    const autoTags: Record<string, string> = { stage, project };
+    const userTags = config.defaults?.tags ?? {};
+    const mergedTags: Record<string, string> = { ...autoTags, ...userTags };
+
+    // ── Create providers ───────────────────────────────
+    const providers: Record<string, pulumi.ProviderResource> = {};
+    const defaultProviders: Record<string, pulumi.ProviderResource> = {};
+
+    if (config.providers) {
+      for (const [key, providerConfig] of Object.entries(config.providers)) {
+        const cloud = getCloud(key);
+        const isDefault = !key.includes('.');
+        const providerName = `anvil-provider-${key}`;
+
+        let provider: pulumi.ProviderResource;
+
+        switch (cloud) {
+          case 'aws': {
+            const awsConfig = providerConfig as AwsProviderConfig;
+            const awsArgs: Record<string, any> = {
+              defaultTags: { tags: mergedTags },
+            };
+
+            if (awsConfig.region) awsArgs.region = awsConfig.region;
+            if (awsConfig.profile) awsArgs.profile = awsConfig.profile;
+            if (awsConfig.assumeRole) {
+              awsArgs.assumeRoles = [
+                {
+                  roleArn: awsConfig.assumeRole.roleArn,
+                  sessionName: awsConfig.assumeRole.sessionName,
+                  externalId: awsConfig.assumeRole.externalId,
+                },
+              ];
+            }
+
+            provider = new aws.Provider(providerName, awsArgs);
+            break;
+          }
+
+          case 'gcp': {
+            const gcpConfig = providerConfig as GcpProviderConfig;
+            const gcpArgs: Record<string, any> = {
+              defaultLabels: mergedTags,
+            };
+
+            if (gcpConfig.project) gcpArgs.project = gcpConfig.project;
+            if (gcpConfig.region) gcpArgs.region = gcpConfig.region;
+            if (gcpConfig.zone) gcpArgs.zone = gcpConfig.zone;
+            if (gcpConfig.credentials)
+              gcpArgs.credentials = gcpConfig.credentials;
+
+            provider = new gcp.Provider(providerName, gcpArgs);
+            break;
+          }
+
+          default:
+            throw new Error(
+              `Unknown cloud provider "${cloud}" in providers config key "${key}".\n` +
+                `  Supported prefixes: "aws", "gcp".`
+            );
+        }
+
+        providers[key] = provider;
+        if (isDefault) {
+          defaultProviders[cloud] = provider;
+        }
+      }
+    }
+
+    // If no providers configured but defaults.tags is set,
+    // create implicit default providers to carry the tags.
+    if (!config.providers && config.defaults?.tags) {
+      const awsProvider = new aws.Provider('anvil-provider-aws', {
+        defaultTags: { tags: mergedTags },
+      });
+      providers['aws'] = awsProvider;
+      defaultProviders['aws'] = awsProvider;
+
+      const gcpProvider = new gcp.Provider('anvil-provider-gcp', {
+        defaultLabels: mergedTags,
+      });
+      providers['gcp'] = gcpProvider;
+      defaultProviders['gcp'] = gcpProvider;
+    }
+
+    // ── Register default provider injection ────────────
+    if (Object.keys(defaultProviders).length > 0) {
+      pulumi.runtime.registerStackTransformation(
+        (
+          args: pulumi.ResourceTransformationArgs
+        ): pulumi.ResourceTransformationResult | undefined => {
+          const typeParts = args.type.split(':');
+          let cloud: string | undefined;
+
+          if (typeParts[0] === 'anvil' && typeParts.length >= 3) {
+            cloud = typeParts[1];
+          } else if (typeParts.length >= 2) {
+            cloud = typeParts[0];
+          }
+
+          if (cloud && defaultProviders[cloud] && !args.opts.provider) {
+            return {
+              props: args.props,
+              opts: pulumi.mergeOptions(args.opts, {
+                provider: defaultProviders[cloud],
+              }),
+            };
+          }
+
+          return undefined;
+        }
+      );
+    }
+
+    // ── Collect exports reference ──────────────────────
+    // We store exports on the App instance itself.
+    // Since the entry point does `export default new App(...)`,
+    // Pulumi picks up all enumerable properties as stack outputs.
+    const self = this;
+
+    // ── Create Context ─────────────────────────────────
+    const ctx: Context = {
+      stage,
+      project,
+      providers,
+      export(name: string, value: pulumi.Input<any>) {
+        self[name] = value;
+      },
+    };
+
+    // ── Execute ────────────────────────────────────────
+    try {
+      config.run(ctx);
+    } catch (error) {
+      throw error;
+    }
+  }
+}

package/bin/app.d.ts

@@ -0,0 +1,110 @@
+import * as pulumi from '@pulumi/pulumi';
+/**
+ * Context passed to the App's run callback.
+ * This is the user's only interface to Anvil runtime information.
+ */
+export interface Context {
+    /** The current deployment stage (e.g. "dev", "staging", "prod", or OS username). */
+    readonly stage: string;
+    /** The project name from anvil.yaml. */
+    readonly project: string;
+    /** Named providers, keyed by their config name (e.g. "aws", "aws.us", "gcp.eu"). */
+    readonly providers: Record<string, pulumi.ProviderResource>;
+    /** Export a stack output value without importing Pulumi. */
+    export(name: string, value: pulumi.Input<any>): void;
+}
+/** AWS provider configuration. */
+export interface AwsProviderConfig {
+    region?: string;
+    profile?: string;
+    assumeRole?: {
+        roleArn: string;
+        sessionName?: string;
+        externalId?: string;
+    };
+}
+/** GCP provider configuration. */
+export interface GcpProviderConfig {
+    project?: string;
+    region?: string;
+    zone?: string;
+    credentials?: string;
+}
+/** Default options applied to all resources. */
+export interface DefaultsConfig {
+    /**
+     * Tags merged into every taggable resource via the cloud provider's
+     * native defaultTags (AWS) or defaultLabels (GCP).
+     *
+     * `stage` and `project` are auto-injected. User tags override auto-injected ones.
+     * Per-resource tags override default tags.
+     */
+    tags?: Record<string, string>;
+}
+/**
+ * Configuration for the App class.
+ */
+export interface AppConfig {
+    /** The infrastructure definition callback. Required. */
+    run: (ctx: Context) => void;
+    /** Default resource options applied to all resources. */
+    defaults?: DefaultsConfig;
+    /**
+     * Named provider configurations.
+     * Keys follow the pattern "cloud" or "cloud.name":
+     *   "aws"    → default AWS provider
+     *   "aws.us" → named AWS provider for US region
+     *   "gcp"    → default GCP provider
+     *   "gcp.eu" → named GCP provider for EU
+     */
+    providers?: Record<string, AwsProviderConfig | GcpProviderConfig>;
+    /**
+     * Called before the infrastructure program runs.
+     * @future Not yet implemented — reserved for forward compatibility.
+     */
+    beforeDeploy?: (ctx: Context) => void;
+    /**
+     * Called after the infrastructure program completes successfully.
+     * @future CLI-side hook — not yet implemented.
+     */
+    afterDeploy?: (ctx: Context) => void;
+    /**
+     * Called if the infrastructure program throws an error.
+     * @future CLI-side hook — not yet implemented.
+     */
+    onError?: (ctx: Context, error: Error) => void;
+}
+/**
+ * App is the entry point for an Anvil infrastructure program.
+ *
+ * It wraps Pulumi's runtime so users never import `@pulumi/pulumi` directly.
+ * The constructor reads stage/project from Pulumi config, creates providers
+ * with default tags, and invokes the user's `run` callback with a Context.
+ *
+ * @example
+ * ```typescript
+ * import { App } from "@anvil-cloud/sdk";
+ * import * as anvil from "@anvil-cloud/sdk";
+ *
+ * export default new App({
+ *   defaults: {
+ *     tags: { team: "platform" },
+ *   },
+ *   providers: {
+ *     "aws": { region: "ap-southeast-2" },
+ *     "aws.us": { region: "us-east-1" },
+ *   },
+ *   run(ctx) {
+ *     const bucket = new anvil.aws.Bucket("my-data", {
+ *       dataClassification: "sensitive",
+ *     });
+ *     ctx.export("bucketName", bucket.bucketName);
+ *   },
+ * });
+ * ```
+ */
+export declare class App {
+    /** Stack outputs collected via ctx.export(). */
+    [key: string]: any;
+    constructor(config: AppConfig);
+}

package/bin/app.js

@@ -0,0 +1,173 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.App = void 0;
+const pulumi = require("@pulumi/pulumi");
+const aws = require("@pulumi/aws");
+const gcp = require("@pulumi/gcp");
+// ── Helpers ────────────────────────────────────────────────
+/**
+ * Determine which cloud a provider key belongs to.
+ * "aws" → "aws", "aws.us" → "aws", "gcp.eu" → "gcp"
+ */
+function getCloud(key) {
+    const dot = key.indexOf('.');
+    return dot === -1 ? key : key.substring(0, dot);
+}
+// ── App ────────────────────────────────────────────────────
+/**
+ * App is the entry point for an Anvil infrastructure program.
+ *
+ * It wraps Pulumi's runtime so users never import `@pulumi/pulumi` directly.
+ * The constructor reads stage/project from Pulumi config, creates providers
+ * with default tags, and invokes the user's `run` callback with a Context.
+ *
+ * @example
+ * ```typescript
+ * import { App } from "@anvil-cloud/sdk";
+ * import * as anvil from "@anvil-cloud/sdk";
+ *
+ * export default new App({
+ *   defaults: {
+ *     tags: { team: "platform" },
+ *   },
+ *   providers: {
+ *     "aws": { region: "ap-southeast-2" },
+ *     "aws.us": { region: "us-east-1" },
+ *   },
+ *   run(ctx) {
+ *     const bucket = new anvil.aws.Bucket("my-data", {
+ *       dataClassification: "sensitive",
+ *     });
+ *     ctx.export("bucketName", bucket.bucketName);
+ *   },
+ * });
+ * ```
+ */
+class App {
+    constructor(config) {
+        // ── Read config from Pulumi ────────────────────────
+        const anvilConfig = new pulumi.Config('anvil');
+        const stage = anvilConfig.require('stage');
+        const project = pulumi.getProject();
+        // ── Build default tags ─────────────────────────────
+        const autoTags = { stage, project };
+        const userTags = config.defaults?.tags ?? {};
+        const mergedTags = { ...autoTags, ...userTags };
+        // ── Create providers ───────────────────────────────
+        const providers = {};
+        const defaultProviders = {};
+        if (config.providers) {
+            for (const [key, providerConfig] of Object.entries(config.providers)) {
+                const cloud = getCloud(key);
+                const isDefault = !key.includes('.');
+                const providerName = `anvil-provider-${key}`;
+                let provider;
+                switch (cloud) {
+                    case 'aws': {
+                        const awsConfig = providerConfig;
+                        const awsArgs = {
+                            defaultTags: { tags: mergedTags },
+                        };
+                        if (awsConfig.region)
+                            awsArgs.region = awsConfig.region;
+                        if (awsConfig.profile)
+                            awsArgs.profile = awsConfig.profile;
+                        if (awsConfig.assumeRole) {
+                            awsArgs.assumeRoles = [
+                                {
+                                    roleArn: awsConfig.assumeRole.roleArn,
+                                    sessionName: awsConfig.assumeRole.sessionName,
+                                    externalId: awsConfig.assumeRole.externalId,
+                                },
+                            ];
+                        }
+                        provider = new aws.Provider(providerName, awsArgs);
+                        break;
+                    }
+                    case 'gcp': {
+                        const gcpConfig = providerConfig;
+                        const gcpArgs = {
+                            defaultLabels: mergedTags,
+                        };
+                        if (gcpConfig.project)
+                            gcpArgs.project = gcpConfig.project;
+                        if (gcpConfig.region)
+                            gcpArgs.region = gcpConfig.region;
+                        if (gcpConfig.zone)
+                            gcpArgs.zone = gcpConfig.zone;
+                        if (gcpConfig.credentials)
+                            gcpArgs.credentials = gcpConfig.credentials;
+                        provider = new gcp.Provider(providerName, gcpArgs);
+                        break;
+                    }
+                    default:
+                        throw new Error(`Unknown cloud provider "${cloud}" in providers config key "${key}".\n` +
+                            `  Supported prefixes: "aws", "gcp".`);
+                }
+                providers[key] = provider;
+                if (isDefault) {
+                    defaultProviders[cloud] = provider;
+                }
+            }
+        }
+        // If no providers configured but defaults.tags is set,
+        // create implicit default providers to carry the tags.
+        if (!config.providers && config.defaults?.tags) {
+            const awsProvider = new aws.Provider('anvil-provider-aws', {
+                defaultTags: { tags: mergedTags },
+            });
+            providers['aws'] = awsProvider;
+            defaultProviders['aws'] = awsProvider;
+            const gcpProvider = new gcp.Provider('anvil-provider-gcp', {
+                defaultLabels: mergedTags,
+            });
+            providers['gcp'] = gcpProvider;
+            defaultProviders['gcp'] = gcpProvider;
+        }
+        // ── Register default provider injection ────────────
+        if (Object.keys(defaultProviders).length > 0) {
+            pulumi.runtime.registerStackTransformation((args) => {
+                const typeParts = args.type.split(':');
+                let cloud;
+                if (typeParts[0] === 'anvil' && typeParts.length >= 3) {
+                    cloud = typeParts[1];
+                }
+                else if (typeParts.length >= 2) {
+                    cloud = typeParts[0];
+                }
+                if (cloud && defaultProviders[cloud] && !args.opts.provider) {
+                    return {
+                        props: args.props,
+                        opts: pulumi.mergeOptions(args.opts, {
+                            provider: defaultProviders[cloud],
+                        }),
+                    };
+                }
+                return undefined;
+            });
+        }
+        // ── Collect exports reference ──────────────────────
+        // We store exports on the App instance itself.
+        // Since the entry point does `export default new App(...)`,
+        // Pulumi picks up all enumerable properties as stack outputs.
+        const self = this;
+        // ── Create Context ─────────────────────────────────
+        const ctx = {
+            stage,
+            project,
+            providers,
+            export(name, value) {
+                self[name] = value;
+            },
+        };
+        // ── Execute ────────────────────────────────────────
+        try {
+            config.run(ctx);
+        }
+        catch (error) {
+            throw error;
+        }
+    }
+}
+exports.App = App;
+//# sourceMappingURL=app.js.map

package/bin/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../app.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,mCAAmC;AACnC,mCAAmC;AA4FnC,8DAA8D;AAE9D;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,8DAA8D;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,GAAG;IAId,YAAY,MAAiB;QAC3B,sDAAsD;QACtD,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,sDAAsD;QACtD,MAAM,QAAQ,GAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;QAC7C,MAAM,UAAU,GAA2B,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;QAExE,sDAAsD;QACtD,MAAM,SAAS,GAA4C,EAAE,CAAC;QAC9D,MAAM,gBAAgB,GAA4C,EAAE,CAAC;QAErE,IAAI,MAAM,CAAC,SAAS,EAAE;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;gBACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,YAAY,GAAG,kBAAkB,GAAG,EAAE,CAAC;gBAE7C,IAAI,QAAiC,CAAC;gBAEtC,QAAQ,KAAK,EAAE;oBACb,KAAK,KAAK,CAAC,CAAC;wBACV,MAAM,SAAS,GAAG,cAAmC,CAAC;wBACtD,MAAM,OAAO,GAAwB;4BACnC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;yBAClC,CAAC;wBAEF,IAAI,SAAS,CAAC,MAAM;4BAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;wBACxD,IAAI,SAAS,CAAC,OAAO;4BAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;wBAC3D,IAAI,SAAS,CAAC,UAAU,EAAE;4BACxB,OAAO,CAAC,WAAW,GAAG;gCACpB;oCACE,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;oCACrC,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW;oCAC7C,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU;iCAC5C;6BACF,CAAC;yBACH;wBAED,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;wBACnD,MAAM;qBACP;oBAED,KAAK,KAAK,CAAC,CAAC;wBACV,MAAM,SAAS,GAAG,cAAmC,CAAC;wBACtD,MAAM,OAAO,GAAwB;4BACnC,aAAa,EAAE,UAAU;yBAC1B,CAAC;wBAEF,IAAI,SAAS,CAAC,OAAO;4BAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;wBAC3D,IAAI,SAAS,CAAC,MAAM;4BAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;wBACxD,IAAI,SAAS,CAAC,IAAI;4BAAE,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;wBAClD,IAAI,SAAS,CAAC,WAAW;4BACvB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;wBAE9C,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;wBACnD,MAAM;qBACP;oBAED;wBACE,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,8BAA8B,GAAG,MAAM;4BACrE,qCAAqC,CACxC,CAAC;iBACL;gBAED,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBAC1B,IAAI,SAAS,EAAE;oBACb,gBAAgB,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;iBACpC;aACF;SACF;QAED,uDAAuD;QACvD,uDAAuD;QACvD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,oBAAoB,EAAE;gBACzD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;aAClC,CAAC,CAAC;YACH,SAAS,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YAC/B,gBAAgB,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,oBAAoB,EAAE;gBACzD,aAAa,EAAE,UAAU;aAC1B,CAAC,CAAC;YACH,SAAS,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YAC/B,gBAAgB,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;SACvC;QAED,sDAAsD;QACtD,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;YAC5C,MAAM,CAAC,OAAO,CAAC,2BAA2B,CACxC,CACE,IAAuC,EACU,EAAE;gBACnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,KAAyB,CAAC;gBAE9B,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE;oBACrD,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;iBACtB;qBAAM,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE;oBAChC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;iBACtB;gBAED,IAAI,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;oBAC3D,OAAO;wBACL,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE;4BACnC,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC;yBAClC,CAAC;qBACH,CAAC;iBACH;gBAED,OAAO,SAAS,CAAC;YACnB,CAAC,CACF,CAAC;SACH;QAED,sDAAsD;QACtD,+CAA+C;QAC/C,4DAA4D;QAC5D,8DAA8D;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,sDAAsD;QACtD,MAAM,GAAG,GAAY;YACnB,KAAK;YACL,OAAO;YACP,SAAS;YACT,MAAM,CAAC,IAAY,EAAE,KAAwB;gBAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACrB,CAAC;SACF,CAAC;QAEF,sDAAsD;QACtD,IAAI;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACjB;QAAC,OAAO,KAAK,EAAE;YACd,MAAM,KAAK,CAAC;SACb;IACH,CAAC;CACF;AApJD,kBAoJC"}

package/bin/block.d.ts

@@ -0,0 +1,53 @@
+import * as pulumi from '@pulumi/pulumi';
+/**
+ * Block is an optional organisational grouping for Anvil resources.
+ *
+ * Resources created inside a Block constructor are automatically parented
+ * to the Block via Pulumi's built-in auto-parenting. Blocks can expose
+ * public properties (outputs) for cross-Block references.
+ *
+ * `stage` and `project` are automatically available via `this.stage` and
+ * `this.project` — read from the same Pulumi config that App sets.
+ *
+ * Tagging is automatic — the App's provider injection applies `defaultTags`
+ * to all resources, including those inside Blocks.
+ *
+ * Blocks are purely optional — flat top-level resources work identically.
+ *
+ * @example
+ * ```ts
+ * import * as anvil from "@anvil-cloud/sdk";
+ *
+ * class RulesEngine extends anvil.Block {
+ *   public readonly bucketName: pulumi.Output<string>;
+ *
+ *   constructor(name: string, opts?: pulumi.ComponentResourceOptions) {
+ *     super(name, {}, opts);
+ *
+ *     const bucket = new anvil.aws.Bucket("events", {
+ *       dataClassification: "internal",
+ *       transform: {
+ *         bucket: { bucket: `rules-${this.stage}-events` },
+ *       },
+ *     });
+ *   }
+ * }
+ * ```
+ */
+export interface BlockArgs {
+    [key: string]: any;
+}
+export declare class Block extends pulumi.ComponentResource {
+    /** The current deployment stage (e.g. "dev", "staging", "prod", or OS username). */
+    readonly stage: string;
+    /** The project name from anvil.yaml. */
+    readonly project: string;
+    /**
+     * Creates a new Block.
+     *
+     * @param name  The unique name of this Block within the stack.
+     * @param args  Optional arguments (passed through for subclass use).
+     * @param opts  Standard Pulumi ComponentResourceOptions (aliases, providers, etc.).
+     */
+    constructor(name: string, args?: BlockArgs, opts?: pulumi.ComponentResourceOptions);
+}

package/bin/block.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Block = void 0;
+const pulumi = require("@pulumi/pulumi");
+class Block extends pulumi.ComponentResource {
+    /**
+     * Creates a new Block.
+     *
+     * @param name  The unique name of this Block within the stack.
+     * @param args  Optional arguments (passed through for subclass use).
+     * @param opts  Standard Pulumi ComponentResourceOptions (aliases, providers, etc.).
+     */
+    constructor(name, args, opts) {
+        const typeName = new.target?.name ?? name;
+        super(`anvil:block:${typeName}`, name, args ?? {}, opts);
+        const anvilConfig = new pulumi.Config('anvil');
+        this.stage = anvilConfig.require('stage');
+        this.project = pulumi.getProject();
+    }
+}
+exports.Block = Block;
+//# sourceMappingURL=block.js.map

package/bin/block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.js","sourceRoot":"","sources":["../block.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AA0CzC,MAAa,KAAM,SAAQ,MAAM,CAAC,iBAAiB;IAOjD;;;;;;OAMG;IACH,YACE,IAAY,EACZ,IAAgB,EAChB,IAAsC;QAEtC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;QAC1C,KAAK,CAAC,eAAe,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAEzD,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC;CACF;AA1BD,sBA0BC"}

package/bin/index.d.ts

@@ -5,3 +5,5 @@ import * as aws from "./aws";
 import * as gcp from "./gcp";
 import * as types from "./types";
 export { aws, gcp, types, };
+export { App, AppConfig, Context, AwsProviderConfig, GcpProviderConfig, DefaultsConfig } from "./app";
+export { Block, BlockArgs } from "./block";

package/bin/index.js

@@ -2,7 +2,7 @@
 // *** WARNING: this file was generated by pulumi-language-nodejs. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.types = exports.gcp = exports.aws = exports.Provider = void 0;
+exports.Block = exports.App = exports.types = exports.gcp = exports.aws = exports.Provider = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 exports.Provider = null;
@@ -23,4 +23,10 @@ pulumi.runtime.registerResourcePackage("anvil", {
         return new exports.Provider(name, undefined, { urn });
     },
 });
+// Hand-written App class
+var app_1 = require("./app");
+Object.defineProperty(exports, "App", { enumerable: true, get: function () { return app_1.App; } });
+// Hand-written Block class
+var block_1 = require("./block");
+Object.defineProperty(exports, "Block", { enumerable: true, get: function () { return block_1.Block; } });
 //# sourceMappingURL=index.js.map

package/bin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAK5B,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC1E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAGvE,sBAAsB;AACtB,6BAA6B;AAKzB,kBAAG;AAJP,6BAA6B;AAKzB,kBAAG;AAJP,iCAAiC;AAK7B,sBAAK;AAET,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,iBAAiB,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAA2B,EAAE;QACpF,IAAI,IAAI,KAAK,wBAAwB,EAAE;YACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACpD;QACD,OAAO,IAAI,gBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACJ,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAK5B,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC1E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAGvE,sBAAsB;AACtB,6BAA6B;AAKzB,kBAAG;AAJP,6BAA6B;AAKzB,kBAAG;AAJP,iCAAiC;AAK7B,sBAAK;AAET,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,iBAAiB,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAA2B,EAAE;QACpF,IAAI,IAAI,KAAK,wBAAwB,EAAE;YACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACpD;QACD,OAAO,IAAI,gBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACJ,CAAC,CAAC;AAEH,yBAAyB;AACzB,6BAAsG;AAA7F,0FAAA,GAAG,OAAA;AAEZ,2BAA2B;AAC3B,iCAA2C;AAAlC,8FAAA,KAAK,OAAA"}

package/bin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anvil-cloud/sdk",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "scripts": {
     "build": "tsc && cp package.json bin/"
   },

package/block.ts

@@ -0,0 +1,69 @@
+import * as pulumi from '@pulumi/pulumi';
+
+/**
+ * Block is an optional organisational grouping for Anvil resources.
+ *
+ * Resources created inside a Block constructor are automatically parented
+ * to the Block via Pulumi's built-in auto-parenting. Blocks can expose
+ * public properties (outputs) for cross-Block references.
+ *
+ * `stage` and `project` are automatically available via `this.stage` and
+ * `this.project` — read from the same Pulumi config that App sets.
+ *
+ * Tagging is automatic — the App's provider injection applies `defaultTags`
+ * to all resources, including those inside Blocks.
+ *
+ * Blocks are purely optional — flat top-level resources work identically.
+ *
+ * @example
+ * ```ts
+ * import * as anvil from "@anvil-cloud/sdk";
+ *
+ * class RulesEngine extends anvil.Block {
+ *   public readonly bucketName: pulumi.Output<string>;
+ *
+ *   constructor(name: string, opts?: pulumi.ComponentResourceOptions) {
+ *     super(name, {}, opts);
+ *
+ *     const bucket = new anvil.aws.Bucket("events", {
+ *       dataClassification: "internal",
+ *       transform: {
+ *         bucket: { bucket: `rules-${this.stage}-events` },
+ *       },
+ *     });
+ *   }
+ * }
+ * ```
+ */
+
+export interface BlockArgs {
+  [key: string]: any;
+}
+
+export class Block extends pulumi.ComponentResource {
+  /** The current deployment stage (e.g. "dev", "staging", "prod", or OS username). */
+  public readonly stage: string;
+
+  /** The project name from anvil.yaml. */
+  public readonly project: string;
+
+  /**
+   * Creates a new Block.
+   *
+   * @param name  The unique name of this Block within the stack.
+   * @param args  Optional arguments (passed through for subclass use).
+   * @param opts  Standard Pulumi ComponentResourceOptions (aliases, providers, etc.).
+   */
+  constructor(
+    name: string,
+    args?: BlockArgs,
+    opts?: pulumi.ComponentResourceOptions
+  ) {
+    const typeName = new.target?.name ?? name;
+    super(`anvil:block:${typeName}`, name, args ?? {}, opts);
+
+    const anvilConfig = new pulumi.Config('anvil');
+    this.stage = anvilConfig.require('stage');
+    this.project = pulumi.getProject();
+  }
+}

package/index.ts

@@ -30,3 +30,9 @@ pulumi.runtime.registerResourcePackage("anvil", {
         return new Provider(name, <any>undefined, { urn });
     },
 });
+
+// Hand-written App class
+export { App, AppConfig, Context, AwsProviderConfig, GcpProviderConfig, DefaultsConfig } from "./app";
+
+// Hand-written Block class
+export { Block, BlockArgs } from "./block";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anvil-cloud/sdk",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "scripts": {
     "build": "tsc && cp package.json bin/"
   },