@microagi/alchemy-gcp 0.1.2

package/lib/Compute/Network.d.ts

@@ -0,0 +1,114 @@
+import { Resource } from "alchemy";
+import * as Output from "alchemy/Output";
+import * as Provider from "alchemy/Provider";
+import type * as GCP from "../Providers.ts";
+/**
+ * Fully-qualified VPC reference in **project-number** form:
+ * `projects/{projectNumber}/global/networks/{name}`.
+ *
+ * Several GCP service-producer APIs (servicenetworking PSA,
+ * Parallelstore) require this exact shape — the *project number*, not
+ * project ID — because they resolve peerings against numeric ids that
+ * are stable across project renames. Compose with `networkRef`:
+ *
+ * ```typescript
+ * const ref = networkRef(project.projectNumber, vpc.name);
+ * // typed as Output<NetworkRef>, accepted by GCP.PsaConnection /
+ * // GCP.ParallelstoreInstance via the Resource constructor's
+ * // InputProps widening.
+ * ```
+ *
+ * `Project.projectNumber` is typed as `` `${number}` `` precisely so
+ * this template literal type composes without a runtime coercion at
+ * the call site.
+ */
+export type NetworkRef = `projects/${number}/global/networks/${string}`;
+/**
+ * Build a project-number-form `NetworkRef`. Lifted through `Output`
+ * so it composes with `Project.projectNumber` (an `Output<\`${number}\`>`)
+ * and `Network.name` (an `Output<string>`) coming from other resource
+ * constructors. The `` `${number}` `` argument type prevents
+ * accidentally passing `Project.projectId` here — TS rejects strings
+ * that don't match the numeric shape.
+ *
+ * Plain literal arguments still work: `networkRef("415104041262", "main")`
+ * is wrapped via `Output.asOutput` and resolves immediately at apply
+ * time.
+ */
+export declare const networkRef: (projectNumber: `${number}` | Output.Output<`${number}`>, networkName: string | Output.Output<string>) => Output.Output<NetworkRef>;
+/**
+ * A VPC Network in custom-mode (`autoCreateSubnetworks=false`). Auto-mode
+ * networks are intentionally not exposed — every cluster/parallelstore
+ * deployment in this provider expects explicit subnets in known regions.
+ *
+ * Compute Networks have no `labels` field, so adoption gating uses an
+ * alchemy marker embedded in the `description` field instead (see
+ * `gcpAlchemyDescription`). Network `description` is set at create time
+ * and is treated as immutable — the marker survives for the resource's
+ * lifetime.
+ *
+ * @section Creating a VPC
+ * @example Custom-mode VPC for a Shared VPC host
+ * ```typescript
+ * const vpc = yield* GCP.Network("ResearchVpc", {
+ *   project: hostProject.projectId,
+ *   routingMode: "GLOBAL",
+ * });
+ * ```
+ */
+export type NetworkProps = {
+    /** GCP project ID hosting the network. Immutable — replace if changed. */
+    project: string;
+    /**
+     * Network name. Defaults to `createPhysicalName({ id, lowercase: true,
+     * maxLength: 63 })`. Must match `[a-z]([-a-z0-9]*[a-z0-9])?`.
+     * Immutable — replace if changed.
+     */
+    name?: string;
+    /**
+     * User-visible description. Stored in the resource's `description`
+     * field after the alchemy ownership marker prefix. Treated as
+     * immutable by GCP after create — changes here do NOT replace.
+     */
+    description?: string;
+    /**
+     * `auto` mode: GCP allocates one subnet per region with predetermined
+     * CIDRs. `custom` mode (default): you create subnetworks explicitly
+     * via `GCP.Subnetwork`. Immutable — switching modes requires replace.
+     */
+    autoCreateSubnetworks?: boolean;
+    /**
+     * Network-wide routing config. Cloud Routers in REGIONAL mode advertise
+     * only same-region subnets; GLOBAL mode advertises across regions.
+     * Mutable via `patchNetworks` (the only field GCP allows mutating
+     * post-create on a VPC).
+     */
+    routingMode?: "REGIONAL" | "GLOBAL";
+    /**
+     * MTU in bytes. Range 1300-8896. Defaults to 1460. Common values:
+     * 1500 (internet default), 8896 (jumbo frames). Immutable — replace.
+     */
+    mtu?: number;
+};
+export type NetworkAttributes = {
+    /** Network name. */
+    name: string;
+    /** GCP project ID, threaded through from props for delete/read. */
+    project: string;
+    /** Server-defined URL for the resource. */
+    selfLink: string;
+    /** Server-assigned numeric id. */
+    id: string;
+    /** User-visible description (with the alchemy marker stripped off). */
+    description: string | undefined;
+    /** Custom (false) vs auto (true) subnet mode. */
+    autoCreateSubnetworks: boolean;
+    /** Active routing mode. */
+    routingMode: string | undefined;
+    /** Active MTU in bytes. */
+    mtu: number | undefined;
+};
+export type Network = Resource<"GCP.Network", NetworkProps, NetworkAttributes, never, GCP.Providers>;
+export declare const Network: import("alchemy").ResourceClass<Network>;
+export declare const NetworkProvider: () => import("effect/Layer").Layer<Provider.Provider<Network>, never, import("effect/unstable/http/HttpClient").HttpClient | import("alchemy").Stage | import("alchemy").Stack | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=Network.d.ts.map

package/lib/Compute/Network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Network.d.ts","sourceRoot":"","sources":["../../src/Compute/Network.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAO7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAG5C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,UAAU,GAAG,YAAY,MAAM,oBAAoB,MAAM,EAAE,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU,GACrB,eAAe,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,EACvD,aAAa,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAC1C,MAAM,CAAC,MAAM,CAAC,UAAU,CASxB,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACpC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iDAAiD;IACjD,qBAAqB,EAAE,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,2BAA2B;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,QAAQ,CAC5B,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,OAAO,0CAAmC,CAAC;AAgBxD,eAAO,MAAM,eAAe,8NA+IzB,CAAC"}

package/lib/Compute/Network.js

@@ -0,0 +1,145 @@
+import * as compute from "@distilled.cloud/gcp/compute-v1";
+import { Resource } from "alchemy";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { isResolved, somePropsAreDifferent } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Output from "alchemy/Output";
+import * as Provider from "alchemy/Provider";
+import * as Effect from "effect/Effect";
+import { descriptionHasAlchemyMarker, gcpAlchemyDescription, stripAlchemyMarker, } from "../Tags.js";
+import { makeAwaitGlobalOperation } from "./Operations.js";
+/**
+ * Build a project-number-form `NetworkRef`. Lifted through `Output`
+ * so it composes with `Project.projectNumber` (an `Output<\`${number}\`>`)
+ * and `Network.name` (an `Output<string>`) coming from other resource
+ * constructors. The `` `${number}` `` argument type prevents
+ * accidentally passing `Project.projectId` here — TS rejects strings
+ * that don't match the numeric shape.
+ *
+ * Plain literal arguments still work: `networkRef("415104041262", "main")`
+ * is wrapped via `Output.asOutput` and resolves immediately at apply
+ * time.
+ */
+export const networkRef = (projectNumber, networkName) => Output.all(Output.asOutput(projectNumber), Output.asOutput(networkName)).pipe(Output.map(([num, name]) => `projects/${num}/global/networks/${name}`));
+export const Network = Resource("GCP.Network");
+const toNetworkAttributes = (n, parent) => ({
+    name: n.name ?? "",
+    project: parent.project,
+    selfLink: n.selfLink ?? "",
+    id: n.id ?? "",
+    description: stripAlchemyMarker(n.description),
+    autoCreateSubnetworks: n.autoCreateSubnetworks ?? false,
+    routingMode: n.routingConfig?.routingMode,
+    mtu: n.mtu,
+});
+export const NetworkProvider = () => Provider.effect(Network, Effect.gen(function* () {
+    const getNetworks = yield* compute.getNetworks;
+    const insertNetworks = yield* compute.insertNetworks;
+    const patchNetworks = yield* compute.patchNetworks;
+    const deleteNetworks = yield* compute.deleteNetworks;
+    const getGlobalOperations = yield* compute.getGlobalOperations;
+    const awaitOp = makeAwaitGlobalOperation(getGlobalOperations);
+    const observe = (project, name) => getNetworks({ project, network: name }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)));
+    const syncRoutingMode = Effect.fn(function* (args) {
+        if (!args.desired)
+            return;
+        if (args.observed.routingConfig?.routingMode === args.desired)
+            return;
+        const op = yield* patchNetworks({
+            project: args.project,
+            network: args.name,
+            body: { routingConfig: { routingMode: args.desired } },
+        });
+        if (op.name)
+            yield* awaitOp(args.project, op.name, args.session);
+    });
+    return {
+        stables: ["name", "project", "selfLink", "id"],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            if (somePropsAreDifferent(olds, news, [
+                "project",
+                "name",
+                "autoCreateSubnetworks",
+                "mtu",
+            ])) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, session }) {
+            const desiredName = news.name ??
+                (yield* createPhysicalName({ id, maxLength: 63 })).toLowerCase();
+            const desiredDescription = yield* gcpAlchemyDescription(id, news.description);
+            // 1. Observe — collapse 403 to "missing" alongside 404.
+            let observed = yield* observe(news.project, desiredName);
+            // 2. Ensure — create if missing. `autoCreateSubnetworks`
+            //    defaults to *true* on the GCP side (auto-mode VPC), but
+            //    we default to false because every consumer in this
+            //    provider creates explicit subnets. `Conflict` covers
+            //    concurrent creates and state-persistence races.
+            if (!observed) {
+                const body = {
+                    name: desiredName,
+                    description: desiredDescription,
+                    autoCreateSubnetworks: news.autoCreateSubnetworks ?? false,
+                    ...(news.mtu !== undefined ? { mtu: news.mtu } : {}),
+                    ...(news.routingMode
+                        ? { routingConfig: { routingMode: news.routingMode } }
+                        : {}),
+                };
+                const op = yield* insertNetworks({
+                    project: news.project,
+                    body,
+                }).pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+                if (op?.name)
+                    yield* awaitOp(news.project, op.name, session);
+                observed = yield* getNetworks({
+                    project: news.project,
+                    network: desiredName,
+                });
+            }
+            // 3. Sync — only routing config can be mutated post-create.
+            //    Description, MTU, autoCreateSubnetworks are all locked.
+            yield* syncRoutingMode({
+                project: news.project,
+                name: desiredName,
+                observed,
+                desired: news.routingMode,
+                session,
+            });
+            const final = yield* getNetworks({
+                project: news.project,
+                network: desiredName,
+            });
+            return toNetworkAttributes(final, { project: news.project });
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            yield* deleteNetworks({
+                project: output.project,
+                network: output.name,
+            }).pipe(Effect.flatMap((op) => op.name
+                ? awaitOp(output.project, op.name, session)
+                : Effect.succeed(op)), Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        read: Effect.fn(function* ({ id, output, olds }) {
+            const project = output?.project ?? olds?.project;
+            if (!project)
+                return undefined;
+            const name = output?.name ??
+                olds?.name ??
+                (yield* createPhysicalName({ id, maxLength: 63 })).toLowerCase();
+            const observed = yield* observe(project, name);
+            if (!observed)
+                return undefined;
+            const attrs = toNetworkAttributes(observed, { project });
+            // Adoption gate via the description marker — networks have no
+            // labels field (verified against compute-v1 SDK Network type).
+            return (yield* descriptionHasAlchemyMarker(id, observed.description))
+                ? attrs
+                : Unowned(attrs);
+        }),
+    };
+}));
+//# sourceMappingURL=Network.js.map

package/lib/Compute/Network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Network.js","sourceRoot":"","sources":["../../src/Compute/Network.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAwB3D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,aAAuD,EACvD,WAA2C,EAChB,EAAE,CAC7B,MAAM,CAAC,GAAG,CACR,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC9B,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC7B,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CACR,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CACd,YAAY,GAAG,oBAAoB,IAAI,EAAgB,CAC1D,CACF,CAAC;AAmFJ,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAU,aAAa,CAAC,CAAC;AAExD,MAAM,mBAAmB,GAAG,CAC1B,CAAkB,EAClB,MAA2B,EACR,EAAE,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;IAClB,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;IAC1B,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE;IACd,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;IAC9C,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,IAAI,KAAK;IACvD,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,WAAW;IACzC,GAAG,EAAE,CAAC,CAAC,GAAG;CACX,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,MAAM,CACb,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACnD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC/D,MAAM,OAAO,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE,CAChD,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAAwC,CAAC,CACzD,EACD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAChC,MAAM,CAAC,OAAO,CAAC,SAAwC,CAAC,CACzD,CACF,CAAC;IAEJ,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAM5C;QACC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO;QACtE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;SACvD,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC;QAC9C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,qBAAqB,CAAC,IAAoB,EAAE,IAAI,EAAE;gBAChD,SAAS;gBACT,MAAM;gBACN,uBAAuB;gBACvB,KAAK;aACN,CAAC,EACF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACnD,MAAM,WAAW,GACf,IAAI,CAAC,IAAI;gBACT,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,qBAAqB,CACrD,EAAE,EACF,IAAI,CAAC,WAAW,CACjB,CAAC;YAEF,wDAAwD;YACxD,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAEzD,yDAAyD;YACzD,6DAA6D;YAC7D,wDAAwD;YACxD,0DAA0D;YAC1D,qDAAqD;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,GAAoB;oBAC5B,IAAI,EAAE,WAAW;oBACjB,WAAW,EAAE,kBAAkB;oBAC/B,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,IAAI,KAAK;oBAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,IAAI,CAAC,WAAW;wBAClB,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE;wBACtD,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBACF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;oBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,IAAI;iBACL,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAA0C,CAAC,CAC3D,CACF,CAAC;gBACF,IAAI,EAAE,EAAE,IAAI;oBAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7D,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;oBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,WAAW;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,4DAA4D;YAC5D,6DAA6D;YAC7D,KAAK,CAAC,CAAC,eAAe,CAAC;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,WAAW;gBACjB,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,WAAW;gBACzB,OAAO;aACR,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;gBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,WAAW;aACrB,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,KAAK,CAAC,CAAC,cAAc,CAAC;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,IAAI;aACrB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE,CAAC,IAAI;gBACL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CACvB,EACD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,MAAM,IAAI,GACR,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,8DAA8D;YAC9D,+DAA+D;YAC/D,OAAO,CAAC,KAAK,CAAC,CAAC,2BAA2B,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACnE,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Compute/Operations.d.ts

@@ -0,0 +1,34 @@
+import { ConfigError } from "@distilled.cloud/gcp";
+import * as compute from "@distilled.cloud/gcp/compute-v1";
+import type { ScopedPlanStatusSession } from "alchemy/Cli/Cli";
+import * as Effect from "effect/Effect";
+/**
+ * Resolved callable signatures for the compute LRO getters. We hold both
+ * — global resources (networks, addresses with `addressType=INTERNAL`
+ * `purpose=VPC_PEERING`) emit Operations under
+ * `projects/{p}/global/operations/{op}`, while regional resources
+ * (subnetworks) emit Operations under
+ * `projects/{p}/regions/{r}/operations/{op}`. The `Operation.name`
+ * returned by the create/update/delete calls is a *bare* id (e.g.
+ * `operation-1700000000000-...`); callers thread back project (and
+ * region) at the await site.
+ */
+type GetGlobalOperations = Effect.Success<typeof compute.getGlobalOperations>;
+type GetRegionOperations = Effect.Success<typeof compute.getRegionOperations>;
+/**
+ * Build a poller for compute global operations
+ * (`projects/{p}/global/operations/{op}`). Same exponential-then-spaced
+ * schedule as the GKE poller.
+ */
+export declare const makeAwaitGlobalOperation: (getGlobalOperations: GetGlobalOperations) => (project: string, operationName: string, session: ScopedPlanStatusSession) => Effect.Effect<compute.Operation, ConfigError | compute.GetGlobalOperationsError | {
+    _tag: "OperationPending";
+}, never>;
+/**
+ * Build a poller for compute regional operations
+ * (`projects/{p}/regions/{r}/operations/{op}`).
+ */
+export declare const makeAwaitRegionOperation: (getRegionOperations: GetRegionOperations) => (project: string, region: string, operationName: string, session: ScopedPlanStatusSession) => Effect.Effect<compute.Operation, ConfigError | compute.GetRegionOperationsError | {
+    _tag: "OperationPending";
+}, never>;
+export {};
+//# sourceMappingURL=Operations.d.ts.map

package/lib/Compute/Operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Operations.d.ts","sourceRoot":"","sources":["../../src/Compute/Operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC;;;;;;;;;;GAUG;AACH,KAAK,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC9E,KAAK,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAwB9E;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,qBAAqB,mBAAmB;;SAwB7E,CAAC;AAEL;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,qBAAqB,mBAAmB;;SA6B7E,CAAC"}

package/lib/Compute/Operations.js

@@ -0,0 +1,62 @@
+import { ConfigError } from "@distilled.cloud/gcp";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+const formatOperationError = (op) => {
+    const errors = op.error?.errors ?? [];
+    if (errors.length === 0)
+        return JSON.stringify(op.error ?? {});
+    return errors
+        .map((e) => `${e.code ?? "?"}${e.location ? ` @ ${e.location}` : ""}: ${e.message ?? "?"}`)
+        .join("; ");
+};
+const isDone = (op) => op.status === "DONE";
+const pollSchedule = (label, session) => Schedule.exponential(Duration.seconds(2), 1.5).pipe(Schedule.either(Schedule.spaced(Duration.seconds(15))), 
+// 80 × ≤15s ≈ 20 min — long enough for a network create (~1 min),
+// a parallelstore-adjacent global op, or a 10-minute parallelstore
+// delete (longest LRO observed in this provider's surface).
+Schedule.both(Schedule.recurs(80)), Schedule.tapOutput(() => session.note(`Waiting for Compute operation ${label}…`)));
+/**
+ * Build a poller for compute global operations
+ * (`projects/{p}/global/operations/{op}`). Same exponential-then-spaced
+ * schedule as the GKE poller.
+ */
+export const makeAwaitGlobalOperation = (getGlobalOperations) => Effect.fn(function* (project, operationName, session) {
+    const label = `${project}/global/${operationName}`;
+    const op = yield* getGlobalOperations({ project, operation: operationName }).pipe(Effect.flatMap((current) => isDone(current)
+        ? Effect.succeed(current)
+        : Effect.fail({ _tag: "OperationPending" })), Effect.retry({
+        while: (e) => e?._tag === "OperationPending",
+        schedule: pollSchedule(label, session),
+    }));
+    if (op.error) {
+        return yield* new ConfigError({
+            message: `Compute global operation ${operationName} failed: ${formatOperationError(op)}`,
+        });
+    }
+    return op;
+});
+/**
+ * Build a poller for compute regional operations
+ * (`projects/{p}/regions/{r}/operations/{op}`).
+ */
+export const makeAwaitRegionOperation = (getRegionOperations) => Effect.fn(function* (project, region, operationName, session) {
+    const label = `${project}/${region}/${operationName}`;
+    const op = yield* getRegionOperations({
+        project,
+        region,
+        operation: operationName,
+    }).pipe(Effect.flatMap((current) => isDone(current)
+        ? Effect.succeed(current)
+        : Effect.fail({ _tag: "OperationPending" })), Effect.retry({
+        while: (e) => e?._tag === "OperationPending",
+        schedule: pollSchedule(label, session),
+    }));
+    if (op.error) {
+        return yield* new ConfigError({
+            message: `Compute region operation ${operationName} failed: ${formatOperationError(op)}`,
+        });
+    }
+    return op;
+});
+//# sourceMappingURL=Operations.js.map

package/lib/Compute/Operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Operations.js","sourceRoot":"","sources":["../../src/Compute/Operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAgB5C,MAAM,oBAAoB,GAAG,CAAC,EAAqB,EAAU,EAAE;IAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;SAC1F,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,EAAqB,EAAW,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;AAExE,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE,CACvE,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CACjD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,kEAAkE;AAClE,mEAAmE;AACnE,4DAA4D;AAC5D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CACtB,OAAO,CAAC,IAAI,CAAC,iCAAiC,KAAK,GAAG,CAAC,CACxD,CACF,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,mBAAwC,EAAE,EAAE,CACnF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjB,OAAe,EACf,aAAqB,EACrB,OAAgC;IAEhC,MAAM,KAAK,GAAG,GAAG,OAAO,WAAW,aAAa,EAAE,CAAC;IACnD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,MAAM,CAAC,OAAO,CAAC;QACb,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAA2B,EAAE,CAAC,CACvD,EACD,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,kBAAkB;QAC/D,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;KACvC,CAAC,CACH,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC;YAC5B,OAAO,EAAE,4BAA4B,aAAa,YAAY,oBAAoB,CAAC,EAAE,CAAC,EAAE;SACzF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,mBAAwC,EAAE,EAAE,CACnF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjB,OAAe,EACf,MAAc,EACd,aAAqB,EACrB,OAAgC;IAEhC,MAAM,KAAK,GAAG,GAAG,OAAO,IAAI,MAAM,IAAI,aAAa,EAAE,CAAC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;QACpC,OAAO;QACP,MAAM;QACN,SAAS,EAAE,aAAa;KACzB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,MAAM,CAAC,OAAO,CAAC;QACb,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAA2B,EAAE,CAAC,CACvD,EACD,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,kBAAkB;QAC/D,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;KACvC,CAAC,CACH,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC;YAC5B,OAAO,EAAE,4BAA4B,aAAa,YAAY,oBAAoB,CAAC,EAAE,CAAC,EAAE;SACzF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC"}

package/lib/Compute/SharedVpcHost.d.ts

@@ -0,0 +1,44 @@
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import type * as GCP from "../Providers.ts";
+/**
+ * Mark a GCP project as a Shared VPC **host**. Service projects can
+ * then attach to this host via `GCP.SharedVpcServiceProject` and use
+ * its VPC for clusters, VMs, etc.
+ *
+ * Identity: `(project)` — there's at most one host-status flag per
+ * project, so the resource is keyed by project ID alone. State is
+ * binary (host or not host), so there's no ownership concept; `read`
+ * returns plain attrs whenever the project's
+ * `xpnProjectStatus === "HOST"`.
+ *
+ * The `compute.googleapis.com` API must be enabled on the project
+ * before this resource succeeds — wire `project` through an
+ * `ApiEnable("compute.googleapis.com")` output to make alchemy
+ * sequence this resource after the API enable.
+ *
+ * @example
+ * ```typescript
+ * const computeApi = yield* GCP.ApiEnable("HostComputeApi", {
+ *   project: hostProject.projectId,
+ *   service: "compute.googleapis.com",
+ * });
+ * const host = yield* GCP.SharedVpcHost("ResearchHost", {
+ *   project: computeApi.project,
+ * });
+ * ```
+ */
+export type SharedVpcHostProps = {
+    /** GCP project ID to mark as a Shared VPC host. Immutable — replace. */
+    project: string;
+};
+export type SharedVpcHostAttributes = {
+    /** Project ID. */
+    project: string;
+    /** `"HOST"` once the enable completes. */
+    xpnProjectStatus: string;
+};
+export type SharedVpcHost = Resource<"GCP.SharedVpcHost", SharedVpcHostProps, SharedVpcHostAttributes, never, GCP.Providers>;
+export declare const SharedVpcHost: import("alchemy").ResourceClass<SharedVpcHost>;
+export declare const SharedVpcHostProvider: () => import("effect/Layer").Layer<Provider.Provider<SharedVpcHost>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=SharedVpcHost.d.ts.map

package/lib/Compute/SharedVpcHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharedVpcHost.d.ts","sourceRoot":"","sources":["../../src/Compute/SharedVpcHost.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAG5C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,QAAQ,CAClC,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,aAAa,gDAA+C,CAAC;AAE1E,eAAO,MAAM,qBAAqB,gLAoF/B,CAAC"}

package/lib/Compute/SharedVpcHost.js

@@ -0,0 +1,71 @@
+import * as compute from "@distilled.cloud/gcp/compute-v1";
+import { Resource } from "alchemy";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import * as Effect from "effect/Effect";
+import { makeAwaitGlobalOperation } from "./Operations.js";
+export const SharedVpcHost = Resource("GCP.SharedVpcHost");
+export const SharedVpcHostProvider = () => Provider.effect(SharedVpcHost, Effect.gen(function* () {
+    const getProjects = yield* compute.getProjects;
+    const enableXpnHostProjects = yield* compute.enableXpnHostProjects;
+    const disableXpnHostProjects = yield* compute.disableXpnHostProjects;
+    const getGlobalOperations = yield* compute.getGlobalOperations;
+    const awaitOp = makeAwaitGlobalOperation(getGlobalOperations);
+    const observe = (project) => getProjects({ project }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)));
+    return {
+        stables: ["project"],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            if (olds.project !== undefined && olds.project !== news.project) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        reconcile: Effect.fn(function* ({ news, session }) {
+            const observed = yield* observe(news.project);
+            if (observed?.xpnProjectStatus === "HOST") {
+                return { project: news.project, xpnProjectStatus: "HOST" };
+            }
+            // `enableXpnHost` is idempotent on the GCP side when the
+            // project is already a host (returns a no-op operation), but
+            // we still tolerate `Conflict` defensively to cover the
+            // narrow window where state-persistence races with another
+            // reconciler.
+            const op = yield* enableXpnHostProjects({
+                project: news.project,
+            }).pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+            if (op?.name)
+                yield* awaitOp(news.project, op.name, session);
+            return { project: news.project, xpnProjectStatus: "HOST" };
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            yield* disableXpnHostProjects({ project: output.project }).pipe(Effect.flatMap((op) => op.name
+                ? awaitOp(output.project, op.name, session)
+                : Effect.succeed(op)), Effect.catchTag("NotFound", () => Effect.void), 
+            // `BadRequest` is returned when:
+            //   1. The project isn't a host (idempotent disable — fine).
+            //   2. Service projects are still attached. The user has
+            //      to detach them first; surface that error so they
+            //      can act. Only swallow case 1.
+            Effect.catchTag("BadRequest", (e) => /not.*host|not.*xpn|UNSPECIFIED_XPN_PROJECT_STATUS/i.test(e.message ?? "")
+                ? Effect.void
+                : Effect.fail(e)));
+        }),
+        read: Effect.fn(function* ({ output, olds }) {
+            const project = output?.project ?? olds?.project;
+            if (!project)
+                return undefined;
+            const observed = yield* observe(project);
+            if (!observed)
+                return undefined;
+            if (observed.xpnProjectStatus !== "HOST")
+                return undefined;
+            // No labels-based ownership: host status is project-scoped
+            // state. Any host project we can see we treat as adopted —
+            // mirrors `ApiEnable`'s stance.
+            return { project, xpnProjectStatus: "HOST" };
+        }),
+    };
+}));
+//# sourceMappingURL=SharedVpcHost.js.map

package/lib/Compute/SharedVpcHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharedVpcHost.js","sourceRoot":"","sources":["../../src/Compute/SharedVpcHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAgD3D,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAgB,mBAAmB,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACxC,QAAQ,CAAC,MAAM,CACb,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/C,MAAM,qBAAqB,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACnE,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACrE,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC/D,MAAM,OAAO,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAClC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAAwC,CAAC,CACzD,EACD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAChC,MAAM,CAAC,OAAO,CAAC,SAAwC,CAAC,CACzD,CACF,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,QAAQ,EAAE,gBAAgB,KAAK,MAAM,EAAE,CAAC;gBAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAC7D,CAAC;YACD,yDAAyD;YACzD,6DAA6D;YAC7D,wDAAwD;YACxD,2DAA2D;YAC3D,cAAc;YACd,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAA0C,CAAC,CAC3D,CACF,CAAC;YACF,IAAI,EAAE,EAAE,IAAI;gBAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC7D,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE,CAAC,IAAI;gBACL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CACvB,EACD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9C,iCAAiC;YACjC,6DAA6D;YAC7D,yDAAyD;YACzD,wDAAwD;YACxD,qCAAqC;YACrC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAClC,oDAAoD,CAAC,IAAI,CACvD,CAAC,CAAC,OAAO,IAAI,EAAE,CAChB;gBACC,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CACnB,CACF,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACzC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,IAAI,QAAQ,CAAC,gBAAgB,KAAK,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC3D,2DAA2D;YAC3D,2DAA2D;YAC3D,gCAAgC;YAChC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC/C,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Compute/SharedVpcServiceProject.d.ts

@@ -0,0 +1,46 @@
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import type * as GCP from "../Providers.ts";
+/**
+ * Attach a service project to a Shared VPC **host**. Once attached,
+ * resources in the service project (clusters, VMs) can use VPCs and
+ * subnets owned by the host project.
+ *
+ * Identity: `(hostProject, serviceProject)`. Both are immutable —
+ * changing either replaces. Read uses
+ * `compute.projects.getXpnHost({ project: serviceProject })`, which
+ * returns the host the service project is attached to (or 4xx if
+ * unattached). When the returned host name matches `hostProject`, the
+ * attachment is present.
+ *
+ * The host project must already be enabled (`GCP.SharedVpcHost`), and
+ * the IAM principal running the deploy needs `compute.xpnAdmin` at the
+ * organisation or folder level — that role is what authorises both
+ * sides of the attach (the host, owned by infra; the service project,
+ * owned by the team consuming the VPC).
+ *
+ * @example
+ * ```typescript
+ * const host = yield* GCP.SharedVpcHost("ResearchHost", { project: hostProject.projectId });
+ * yield* GCP.SharedVpcServiceProject("AttachGkeProj", {
+ *   hostProject: host.project,
+ *   serviceProject: gkeProject.projectId,
+ * });
+ * ```
+ */
+export type SharedVpcServiceProjectProps = {
+    /** Shared VPC host project ID. Immutable — replace. */
+    hostProject: string;
+    /** Service project ID to attach. Immutable — replace. */
+    serviceProject: string;
+};
+export type SharedVpcServiceProjectAttributes = {
+    /** Host project ID. */
+    hostProject: string;
+    /** Service project ID. */
+    serviceProject: string;
+};
+export type SharedVpcServiceProject = Resource<"GCP.SharedVpcServiceProject", SharedVpcServiceProjectProps, SharedVpcServiceProjectAttributes, never, GCP.Providers>;
+export declare const SharedVpcServiceProject: import("alchemy").ResourceClass<SharedVpcServiceProject>;
+export declare const SharedVpcServiceProjectProvider: () => import("effect/Layer").Layer<Provider.Provider<SharedVpcServiceProject>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=SharedVpcServiceProject.d.ts.map

package/lib/Compute/SharedVpcServiceProject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharedVpcServiceProject.d.ts","sourceRoot":"","sources":["../../src/Compute/SharedVpcServiceProject.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAGnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAG5C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAC5C,6BAA6B,EAC7B,4BAA4B,EAC5B,iCAAiC,EACjC,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,uBAAuB,0DAEnC,CAAC;AAEF,eAAO,MAAM,+BAA+B,0LA2HzC,CAAC"}