@knpkv/alchemy-console 0.1.0 → 0.2.0

package/dist/server/Launch.d.ts

@@ -0,0 +1,7 @@
+import { type BrowserLaunch, BrowserLaunchOutputError } from "@knpkv/browser-pairing/launch";
+import { Effect, Stdio } from "effect";
+import { Catalog } from "./Catalog.js";
+import { type ControlOptions } from "./ControlSocket.js";
+/** The launch helper owns printing/opening; the catalog and server lifetime stay with this foreground process. */
+export declare const runConsole: (options: ControlOptions, launch: BrowserLaunch, printOnly: boolean) => Effect.Effect<void, import("effect/PlatformError").BadArgument | BrowserLaunchOutputError | import("@knpkv/browser-pairing").BrowserPairingError | import("./ControlSocket.js").ControlError | import("@knpkv/browser-pairing").CredentialCookieError | import("effect/PlatformError").PlatformError | import("effect/http/HttpServerError").ServeError | import("@knpkv/browser-pairing/owner-session").UnsafeLoopbackAddressError, import("@knpkv/browser-pairing/launch").BrowserOpener | Catalog | import("effect/Crypto").Crypto | import("effect/FileSystem").FileSystem | import("effect/Path").Path | Stdio.Stdio>;
+//# sourceMappingURL=Launch.d.ts.map

package/dist/server/Launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Launch.d.ts","sourceRoot":"","sources":["../../src/server/Launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,wBAAwB,EAAe,MAAM,+BAA+B,CAAA;AAEzG,OAAO,EAAE,MAAM,EAAS,KAAK,EAAU,MAAM,QAAQ,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,oBAAoB,CAAA;AAGzE,kHAAkH;AAClH,eAAO,MAAM,UAAU,oqBAqBrB,CAAA"}

package/dist/server/Launch.js

@@ -0,0 +1,17 @@
+import { BrowserLaunchOutputError, openOrServe } from "@knpkv/browser-pairing/launch";
+import { serveWithBootstrapUrl } from "@knpkv/browser-pairing/owner-session";
+import { Effect, Layer, Stdio, Stream } from "effect";
+import { Catalog } from "./Catalog.js";
+import { requestLoginUrl } from "./ControlSocket.js";
+import { makeServer } from "./Server.js";
+/** The launch helper owns printing/opening; the catalog and server lifetime stay with this foreground process. */
+export const runConsole = Effect.fn("AlchemyConsole.runConsole")(function* (options, launch, printOnly) {
+    const catalog = yield* Catalog;
+    const serve = (onReady) => serveWithBootstrapUrl((ready) => makeServer(options, ready).pipe(Layer.provide(Layer.succeed(Catalog, catalog))), onReady);
+    if (printOnly) {
+        const stdio = yield* Stdio.Stdio;
+        return yield* serve((url) => Stream.make(`${url}\n`).pipe(Stream.run(stdio.stdout({ endOnDone: false })), Effect.mapError(() => new BrowserLaunchOutputError({}))));
+    }
+    return yield* openOrServe({ login: requestLoginUrl(options), serve, launch });
+});
+//# sourceMappingURL=Launch.js.map

package/dist/server/Launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Launch.js","sourceRoot":"","sources":["../../src/server/Launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,wBAAwB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AACzG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAuB,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,kHAAkH;AAClH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EACxE,OAAuB,EACvB,MAAqB,EACrB,SAAkB;IAElB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAA;IAC9B,MAAM,KAAK,GAAG,CAAC,OAAuE,EAAE,EAAE,CACxF,qBAAqB,CACnB,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAC1F,OAAO,CACR,CAAA;IACH,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;QAChC,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,CAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,EAC9C,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC,CACxD,CACF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;AAC/E,CAAC,CAAC,CAAA"}

package/dist/server/OwnerSession.d.ts

@@ -0,0 +1,9 @@
+import * as OwnerSession from "@knpkv/browser-pairing/owner-session";
+import { Effect, Layer } from "effect";
+import { OwnerAuth } from "../api.js";
+/** Fresh process session. Codes are minted only after the authenticated HTTP listener has built. */
+export declare const makeOwnerSession: (port: number) => Effect.Effect<OwnerSession.OwnerSessionService, import("@knpkv/browser-pairing").BrowserPairingError | import("@knpkv/browser-pairing").CredentialCookieError | OwnerSession.UnsafeLoopbackAddressError, import("effect/Crypto").Crypto>;
+/** Credential-bearing URL. Stdout and browser launch are its only announcement boundaries. */
+export declare const mintBootstrapUrl: (session: OwnerSession.OwnerSessionService) => Effect.Effect<string, import("@knpkv/browser-pairing").BrowserPairingError, never>;
+export declare const ownerAuthLayer: Layer.Layer<OwnerAuth, never, OwnerSession.OwnerSession>;
+//# sourceMappingURL=OwnerSession.d.ts.map

package/dist/server/OwnerSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnerSession.d.ts","sourceRoot":"","sources":["../../src/server/OwnerSession.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAEtC,OAAO,EAAa,SAAS,EAAgB,MAAM,WAAW,CAAA;AAE9D,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,SAAU,MAAM,6OAQzC,CAAA;AAEJ,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,YAAa,YAAY,CAAC,mBAAmB,uFAGvE,CAAA;AAEH,eAAO,MAAM,cAAc,0DAe1B,CAAA"}

package/dist/server/OwnerSession.js

@@ -0,0 +1,27 @@
+import * as OwnerSession from "@knpkv/browser-pairing/owner-session";
+import { Effect, Layer } from "effect";
+import { HttpServerRequest } from "effect/http";
+import { Forbidden, OwnerAuth, Unauthorized } from "../api.js";
+/** Fresh process session. Codes are minted only after the authenticated HTTP listener has built. */
+export const makeOwnerSession = (port) => OwnerSession.make({
+    product: "alchemy-console",
+    cookieName: `alchemy_console_owner_${port}`,
+    writes: "none",
+    freshUrlHint: "run `alchemy-console login` for a fresh URL",
+    authorityOrigin: OwnerSession.loopbackOrigin("127.0.0.1", port),
+    browserOrigin: OwnerSession.loopbackOrigin("127.0.0.1", port)
+});
+/** Credential-bearing URL. Stdout and browser launch are its only announcement boundaries. */
+export const mintBootstrapUrl = (session) => session.mintBootstrapCode.pipe(Effect.map((code) => OwnerSession.bootstrapUrl(session.browserOrigin, code)));
+export const ownerAuthLayer = Layer.effect(OwnerAuth, Effect.gen(function* () {
+    const session = yield* OwnerSession.OwnerSession;
+    return OwnerAuth.of(Effect.fn("AlchemyConsole.authorizeOwner")(function* (httpEffect) {
+        const request = yield* HttpServerRequest.HttpServerRequest;
+        yield* session.authorizeHttp(request.cookies[session.cookieName] ?? "").pipe(Effect.catchTags({
+            OwnerSessionUnauthorizedError: () => Effect.fail(new Unauthorized({})),
+            OwnerSessionForbiddenError: () => Effect.fail(new Forbidden({}))
+        }));
+        return yield* httpEffect;
+    }));
+}));
+//# sourceMappingURL=OwnerSession.js.map

package/dist/server/OwnerSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnerSession.js","sourceRoot":"","sources":["../../src/server/OwnerSession.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAE9D,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,EAAE,CAC/C,YAAY,CAAC,IAAI,CAAC;IAChB,OAAO,EAAE,iBAAiB;IAC1B,UAAU,EAAE,yBAAyB,IAAI,EAAE;IAC3C,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,6CAA6C;IAC3D,eAAe,EAAE,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC;IAC/D,aAAa,EAAE,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC;CAC9D,CAAC,CAAA;AAEJ,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAyC,EAAE,EAAE,CAC5E,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAC7E,CAAA;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CACxC,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY,CAAA;IAChD,OAAO,SAAS,CAAC,EAAE,CACjB,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAC,UAAU;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;QAC1D,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAC5F,6BAA6B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;YACtE,0BAA0B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;SACjE,CAAC,CAAC,CAAA;QACH,OAAO,KAAK,CAAC,CAAC,UAAU,CAAA;IAC1B,CAAC,CAAC,CACH,CAAA;AACH,CAAC,CAAC,CACH,CAAA"}

package/dist/server/Server.d.ts

@@ -0,0 +1,6 @@
+import * as OwnerSession from "@knpkv/browser-pairing/owner-session";
+import { Deferred, Layer } from "effect";
+import { type ControlOptions } from "./ControlSocket.js";
+/** Catalog and platform services are supplied by the executable. This layer owns both listeners. */
+export declare const makeServer: (options: ControlOptions, ready: Deferred.Deferred<string>) => Layer.Layer<never, import("effect/PlatformError").BadArgument | import("@knpkv/browser-pairing").BrowserPairingError | import("./ControlSocket.js").ControlError | import("@knpkv/browser-pairing").CredentialCookieError | import("effect/PlatformError").PlatformError | import("effect/http/HttpServerError").ServeError | OwnerSession.UnsafeLoopbackAddressError, import("./Catalog.ts").Catalog | import("effect/Crypto").Crypto | import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
+//# sourceMappingURL=Server.d.ts.map

package/dist/server/Server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.d.ts","sourceRoot":"","sources":["../../src/server/Server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAA;AAGhD,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,oBAAoB,CAAA;AAIvE,oGAAoG;AACpG,eAAO,MAAM,UAAU,YAAa,cAAc,SAAS,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,kfAuBwB,CAAA"}

package/dist/server/Server.js

@@ -0,0 +1,22 @@
+import { NodeHttpServer } from "@effect/platform-node";
+import * as OwnerSession from "@knpkv/browser-pairing/owner-session";
+import { Deferred, Effect, Layer } from "effect";
+import { Etag, HttpPlatform, HttpRouter, HttpServer } from "effect/http";
+import { createServer } from "node:http";
+import { controlSocket } from "./ControlSocket.js";
+import { application } from "./HttpApplication.js";
+import { makeOwnerSession, mintBootstrapUrl } from "./OwnerSession.js";
+/** Catalog and platform services are supplied by the executable. This layer owns both listeners. */
+export const makeServer = (options, ready) => Layer.unwrap(Effect.gen(function* () {
+    const server = yield* HttpServer.HttpServer;
+    if (server.address._tag === "UnixPathAddress")
+        return yield* Effect.die("Alchemy console requires a TCP listener");
+    const port = server.address.port;
+    const session = yield* makeOwnerSession(port);
+    const listening = yield* Deferred.make();
+    const control = Layer.effectDiscard(controlSocket({ ...options, port }, session, Deferred.await(listening)));
+    return HttpRouter.serve(application, { disableLogger: true, disableListenLog: true }).pipe(Layer.provide(Layer.succeed(OwnerSession.OwnerSession, session)), Layer.provide(HttpPlatform.layer), Layer.provide(Etag.layer), 
+    // The control socket can mint only after the HTTP routes are built and listening.
+    Layer.tap(() => Layer.build(control)), Layer.tap(() => mintBootstrapUrl(session).pipe(Effect.tap(() => Deferred.succeed(listening, undefined)), Effect.flatMap((url) => Deferred.succeed(ready, url)))));
+})).pipe(Layer.provide(NodeHttpServer.layerServer(createServer, { host: "127.0.0.1", port: options.port })));
+//# sourceMappingURL=Server.js.map

package/dist/server/Server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.js","sourceRoot":"","sources":["../../src/server/Server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAuB,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEtE,oGAAoG;AACpG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAuB,EAAE,KAAgC,EAAE,EAAE,CACtF,KAAK,CAAC,MAAM,CACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC3C,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAA;IAClH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAA;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAQ,CAAA;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC5G,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACxF,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,EAChE,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EACjC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,kFAAkF;IAClF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EACrC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CACb,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EACxD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CACtD,CACF,CACF,CAAA;AACH,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA"}

package/dist/server/Sources.d.ts

@@ -0,0 +1,12 @@
+import { FileSystem, Layer, Path } from "effect";
+import { HttpClient } from "effect/http";
+import { SsoCredentials } from "../sso-credentials.js";
+import { StackSource } from "./Catalog.js";
+/** Runtime configuration contains server-private paths. It is never an API response. */
+export interface SourceOptions {
+    readonly root: string;
+    readonly awsConfigFile: string;
+}
+/** Reads only when the authenticated catalog is requested; each project/profile/bucket reports its own failure. */
+export declare const sourceLayer: (options: SourceOptions) => Layer.Layer<StackSource, never, FileSystem.FileSystem | HttpClient.HttpClient | Path.Path | SsoCredentials>;
+//# sourceMappingURL=Sources.d.ts.map

package/dist/server/Sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sources.d.ts","sourceRoot":"","sources":["../../src/server/Sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAQxC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,EAAwB,WAAW,EAAE,MAAM,cAAc,CAAA;AAEhE,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,mHAAmH;AACnH,eAAO,MAAM,WAAW,YAAa,aAAa,gHAgH/C,CAAA"}

package/dist/server/Sources.js

@@ -0,0 +1,118 @@
+import { Effect, FileSystem, Layer, Path } from "effect";
+import { HttpClient } from "effect/http";
+import { CatalogReadError } from "../api.js";
+import { discoverProjects } from "../discovery.js";
+import { readLocalState } from "../local-state.js";
+import { discoverSsoProfiles } from "../profiles.js";
+import { makeS3Reader } from "../s3-live.js";
+import { S3Reader } from "../s3-reader.js";
+import { discoverS3Buckets, discoverS3Stacks, readS3State } from "../s3-state.js";
+import { SsoCredentials } from "../sso-credentials.js";
+import { readAlchemyVersion } from "../version.js";
+import { StackSource } from "./Catalog.js";
+/** Reads only when the authenticated catalog is requested; each project/profile/bucket reports its own failure. */
+export const sourceLayer = (options) => Layer.effect(StackSource, Effect.gen(function* () {
+    const fs = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    // Capture the source adapter's services once; read closures need no transport/request context.
+    const client = yield* HttpClient.HttpClient;
+    const sso = yield* SsoCredentials;
+    const local = (effect) => effect.pipe(Effect.provideService(FileSystem.FileSystem, fs), Effect.provideService(Path.Path, path));
+    const discover = Effect.fn("AlchemyConsole.discoverSources")(function* () {
+        const stacks = [];
+        const issues = [];
+        const projects = yield* Effect.result(local(discoverProjects(options.root)));
+        if (projects._tag === "Failure")
+            issues.push({ source: "local", reason: projects.failure.reason });
+        else {
+            if (projects.success.length > 1000)
+                return yield* new CatalogReadError({ reason: "limit" });
+            for (const project of projects.success) {
+                const found = yield* Effect.result(local(Effect.gen(function* () {
+                    const version = yield* readAlchemyVersion(project.directory, options.root);
+                    // A source with no resource state need not use one of the supported local encodings.
+                    if (!(yield* fs.exists(path.join(project.directory, ".alchemy", "state"))))
+                        return [];
+                    const state = yield* readLocalState(project.directory, version);
+                    return state.stacks.map((stack) => ({
+                        key: JSON.stringify(["local", project.directory, stack.app, stack.stage]),
+                        summary: {
+                            app: stack.app,
+                            stage: stack.stage,
+                            backend: "local",
+                            alchemyVersion: version,
+                            lastDeploy: stack.lastDeploy,
+                            resourceCount: stack.resources.length
+                        },
+                        read: local(readLocalState(project.directory, version)).pipe(Effect.mapError((error) => new CatalogReadError({ reason: error.reason })), Effect.flatMap((fresh) => {
+                            const current = fresh.stacks.find((item) => item.app === stack.app && item.stage === stack.stage);
+                            return current === undefined ?
+                                Effect.fail(new CatalogReadError({ reason: "not-found" })) :
+                                Effect.succeed(current);
+                        }))
+                    }));
+                })).pipe(Effect.mapError((error) => new CatalogReadError({
+                    reason: error._tag === "PlatformError" ? "io" : error.reason
+                }))));
+                if (found._tag === "Failure")
+                    issues.push({ source: "local", reason: found.failure.reason });
+                else
+                    for (const stack of found.success)
+                        stacks.push(stack);
+                if (stacks.length > 1000 || issues.length > 1000)
+                    return yield* new CatalogReadError({ reason: "limit" });
+            }
+        }
+        const profiles = yield* Effect.result(local(discoverSsoProfiles(options.awsConfigFile)));
+        if (profiles._tag === "Failure")
+            issues.push({ source: "s3", reason: profiles.failure.reason });
+        else {
+            if (profiles.success.length > 100)
+                return yield* new CatalogReadError({ reason: "limit" });
+            for (const profile of profiles.success) {
+                const reader = yield* makeS3Reader(profile).pipe(Effect.provideService(HttpClient.HttpClient, client), Effect.provideService(SsoCredentials, sso));
+                const buckets = yield* Effect.result(discoverS3Buckets().pipe(Effect.provideService(S3Reader, reader)));
+                if (buckets._tag === "Failure") {
+                    issues.push({ source: "s3", reason: buckets.failure.reason });
+                    continue;
+                }
+                if (buckets.success.length > 1000)
+                    return yield* new CatalogReadError({ reason: "limit" });
+                for (const bucket of buckets.success) {
+                    const found = yield* Effect.result(discoverS3Stacks(bucket).pipe(Effect.provideService(S3Reader, reader)));
+                    if (found._tag === "Failure")
+                        issues.push({ source: "s3", reason: found.failure.reason });
+                    else {
+                        for (const stack of found.success) {
+                            stacks.push({
+                                key: JSON.stringify([
+                                    "s3",
+                                    profile.name,
+                                    profile.account,
+                                    bucket.name,
+                                    stack.prefix,
+                                    stack.app,
+                                    stack.stage
+                                ]),
+                                summary: {
+                                    app: stack.app,
+                                    stage: stack.stage,
+                                    backend: "s3",
+                                    alchemyVersion: null,
+                                    lastDeploy: null,
+                                    resourceCount: null
+                                },
+                                read: readS3State(stack).pipe(Effect.provideService(S3Reader, reader), Effect.mapError((error) => new CatalogReadError({ reason: error.reason })))
+                            });
+                        }
+                    }
+                    if (stacks.length > 1000 || issues.length > 1000)
+                        return yield* new CatalogReadError({ reason: "limit" });
+                }
+            }
+        }
+        return { stacks, issues };
+    });
+    return StackSource.of({ discover: discover() });
+}));
+//# sourceMappingURL=Sources.js.map

package/dist/server/Sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sources.js","sourceRoot":"","sources":["../../src/server/Sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAuB,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAwB,WAAW,EAAE,MAAM,cAAc,CAAA;AAQhE,mHAAmH;AACnH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAE,EAAE,CACpD,KAAK,CAAC,MAAM,CACV,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,+FAA+F;IAC/F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAA;IACjC,MAAM,KAAK,GAAG,CAAO,MAA8D,EAAE,EAAE,CACrF,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAChD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CACvC,CAAA;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC;QACpE,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,MAAM,MAAM,GAA0B,EAAE,CAAA;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;aAC7F,CAAC;YACJ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YAC3F,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAChC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACxB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;oBAC1E,qFAAqF;oBACrF,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;wBAAE,OAAO,EAAE,CAAA;oBACrF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;oBAC/D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC;wBACnD,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;wBACzE,OAAO,EAAE;4BACP,GAAG,EAAE,KAAK,CAAC,GAAG;4BACd,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,OAAO,EAAE,OAAO;4BAChB,cAAc,EAAE,OAAO;4BACvB,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;yBACtC;wBACD,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;4BACvB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAA;4BACjG,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC;gCAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;gCAC5D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;wBAC3B,CAAC,CAAC,CACH;qBACF,CAAC,CAAC,CAAA;gBACL,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,gBAAgB,CAAC;oBACnB,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;iBAC7D,CAAC,CACH,CAAC,CACH,CAAA;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;;oBACvF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO;wBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;oBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YAC3G,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QACxF,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;aAC1F,CAAC;YACJ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1F,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EACpD,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,CAAC,CAC3C,CAAA;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;gBACvG,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;oBAC7D,SAAQ;gBACV,CAAC;gBACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI;oBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;oBAC1G,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;yBACpF,CAAC;wBACJ,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;4BAClC,MAAM,CAAC,IAAI,CAAC;gCACV,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;oCAClB,IAAI;oCACJ,OAAO,CAAC,IAAI;oCACZ,OAAO,CAAC,OAAO;oCACf,MAAM,CAAC,IAAI;oCACX,KAAK,CAAC,MAAM;oCACZ,KAAK,CAAC,GAAG;oCACT,KAAK,CAAC,KAAK;iCACZ,CAAC;gCACF,OAAO,EAAE;oCACP,GAAG,EAAE,KAAK,CAAC,GAAG;oCACd,KAAK,EAAE,KAAK,CAAC,KAAK;oCAClB,OAAO,EAAE,IAAI;oCACb,cAAc,EAAE,IAAI;oCACpB,UAAU,EAAE,IAAI;oCAChB,aAAa,EAAE,IAAI;iCACpB;gCACD,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,EACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAC3E;6BACF,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;oBACD,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;wBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC3G,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC3B,CAAC,CAAC,CAAA;IACF,OAAO,WAAW,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;AACjD,CAAC,CAAC,CACH,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knpkv/alchemy-console",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Read-only discovery and state readers for local Alchemy stacks",
   "license": "MIT",
   "repository": {
@@ -12,10 +12,17 @@
   "sideEffects": false,
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "bin": {
+    "alchemy-console": "./dist/main.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./api": {
+      "types": "./dist/api.d.ts",
+      "import": "./dist/api.js"
     }
   },
   "files": [
@@ -29,24 +36,28 @@
     "effect": "4.0.0"
   },
   "devDependencies": {
-    "@effect/platform-node": "4.0.0",
     "@effect/vitest": "4.0.0",
+    "@playwright/test": "1.63.0",
     "@types/node": "^26.6.4",
     "effect": "4.0.0",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "vitest": "^5.0.3"
+    "vitest": "^5.0.3",
+    "vite": "^8.3.2"
   },
   "dependencies": {
     "@aws-sdk/credential-provider-sso": "^3.973.16",
+    "@effect/platform-node": "4.0.0",
     "@distilled.cloud/aws": "^1.0.0-rc.13",
     "jsonc-parser": "^3.3.1",
     "yaml": "^2.9.1",
-    "@knpkv/bounded-io": "^0.2.0"
+    "@knpkv/bounded-io": "^0.2.0",
+    "@knpkv/browser-pairing": "^0.5.0"
   },
   "scripts": {
-    "build": "tsc -b tsconfig.build.json --force",
+    "build": "tsc -b tsconfig.build.json --force && vite build",
     "check": "tsc -b tsconfig.json && tsc -p test/tsconfig.json --noEmit",
     "lint": "eslint src test",
-    "test": "vitest run"
+    "test": "vitest run",
+    "test:browser": "pnpm --filter '@knpkv/alchemy-console^...' build && pnpm build && playwright test"
   }
 }