@anvil-cloud/sdk 0.0.9 → 0.0.11

package/README.md

@@ -4,69 +4,80 @@
 
 Anvil wraps raw cloud resources into opinionated, production-ready components. No 200-line Terraform modules. No copy-pasting security configs. Just declare what you need and Anvil handles the rest.
 
+Built on [Pulumi](https://www.pulumi.com/).
+
 ## Install
 
 ```bash
 npm install @anvil-cloud/sdk
 ```
 
-## Quick start
+## Secure by default
 
-Create `anvil.config.ts` at your project root:
+Every Anvil component ships with defaults aligned to production from day one — public access blocked, encryption enforced, cost tags applied. The goal isn't to make compliance automatic, but to make it a platform you can actually build on.
 
-```typescript
-import { App } from '@anvil-cloud/sdk';
-import * as anvil from '@anvil-cloud/sdk';
+## The App class
+
+Every Anvil program starts with `new App()`. The `run` callback receives a `Context` with:
+
+- `ctx.stage` — current deployment stage (defaults to your OS username for dev isolation)
+- `ctx.project` — project name from `anvil.yaml`
+- `ctx.export(name, value)` — export stack outputs
+- `ctx.providers` — named cloud providers for multi-region / multi-account
+
+## Grants
+
+Grants are how Anvil wires permissions between resources. Instead of writing IAM policies by hand, you call `.grant()` on a resource and Anvil handles both the IAM role policy and the environment variable injection automatically.
+
+A Lambda reading from a Bucket:
 
+```typescript
 export default new App({
   run(ctx) {
     const bucket = new anvil.aws.Bucket('uploads', {
       dataClassification: 'sensitive',
     });
-    ctx.export('bucketName', bucket.bucketName);
-  },
-});
-```
 
-Deploy:
+    const fn = new anvil.aws.Lambda('processor', {
+      runtime: 'nodejs20.x',
+      handler: 'index.handler',
+      code: './src',
+    });
 
-```bash
-anvil deploy
+    // Grants the Lambda read access to the bucket and scopes down to specific bucket paths
+    // Anvil creates the IAM policy and injects UPLOADS_BUCKET_NAME
+    // into the Lambda's environment automatically.
+    //
+    bucket.grant(fn, { actions: ['read'], path: ['user/*'] });
+  },
+});
 ```
 
-That S3 bucket ships with public access blocked, encryption enabled, and versioning on — because that's how every bucket should start. You opt _in_ to risk, not out of it.
-
-## The App class
+What Anvil does under the hood:
 
-Every Anvil program starts with `new App()`. The `run` callback receives a `Context` with:
+- Creates an IAM `RolePolicy` scoped to the exact actions requested
+- Injects the resource identifier as an environment variable on the target (e.g. `UPLOADS_BUCKET_NAME`)
+- No manual ARN wiring, no forgotten permissions
 
-- `ctx.stage` — the current deployment stage (defaults to your OS username for dev isolation)
-- `ctx.project` — the project name from `anvil.yaml`
-- `ctx.export(name, value)` — export stack outputs
-- `ctx.providers` — named cloud providers for multi-region / multi-account
+## SvelteKit deployment
 
-## Multi-cloud
+Deploy a SvelteKit app to AWS with a single component. Anvil provisions S3, CloudFront, ACM, Lambda (via Lambda Web Adapter), and Route53 — with HTTPS and a custom domain out of the box:
 
 ```typescript
 export default new App({
   run(ctx) {
-    // AWS
-    const bucket = new anvil.aws.Bucket('data', {
-      dataClassification: 'sensitive',
+    const site = new anvil.aws.SvelteKitSite('web', {
+      domain: 'myapp.com',
     });
 
-    // GCP
-    const gcsBucket = new anvil.gcp.StorageBucket('backup', {
-      dataClassification: 'internal',
-      location: 'US',
-    });
+    ctx.export('url', site.url);
   },
 });
 ```
 
 ## Overrides
 
-Every component accepts a `transform` argument to override the underlying resource config:
+Every component accepts a `transform` argument to override the underlying resource config when you need to break from the defaults:
 
 ```typescript
 const bucket = new anvil.aws.Bucket('custom', {
@@ -77,12 +88,9 @@ const bucket = new anvil.aws.Bucket('custom', {
 });
 ```
 
-## How it works
-
-Anvil is built on [Pulumi](https://www.pulumi.com/). Each component wraps one or more cloud resources with secure defaults. The `App` class handles config, providers, and exports so you write infrastructure — not boilerplate.
-
 ## Links
 
+- [Docs](https://anvilcloud.dev)
 - [GitHub](https://github.com/DamienPace15/anvil)
 - [Python SDK](https://pypi.org/project/anvil-cloud/)
 - [Go SDK](https://pkg.go.dev/github.com/DamienPace15/anvil/sdk/go/anvil)

package/bin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anvil-cloud/sdk",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "scripts": {
     "build": "tsc && cp package.json bin/"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anvil-cloud/sdk",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "scripts": {
     "build": "tsc && cp package.json bin/"
   },