@microagi/alchemy-gcp 0.2.1 → 0.3.0

package/lib/Run/Job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Job.d.ts","sourceRoot":"","sources":["../../src/Run/Job.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,6BAA6B,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAK7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAe,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAUvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC;;;OAGG;IACH,WAAW,CAAC,EACR,OAAO,GACP,MAAM,GACN,IAAI,GACJ,cAAc,GACd,WAAW,GACX,YAAY,CAAC;IACjB,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,GAAG,CAAC,mCAAmC,CAAC;IAC9D;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,EAAE,GAAG,CAAC,iCAAiC,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,2DAA2D;IAC3D,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,mCAAmC;IACnC,iBAAiB,EAAE,GAAG,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAC7D,iDAAiD;IACjD,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,gEAAgE;IAChE,sBAAsB,EAAE,GAAG,CAAC,kCAAkC,GAAG,SAAS,CAAC;IAC3E,oEAAoE;IACpE,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,mCAAmC;IACnC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,qBAAqB;IACrB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,0BAA0B;IAC1B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,GAAG,GAAG,QAAQ,CACxB,SAAS,EACT,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,GAAG,sCAA2B,CAAC;AAgG5C,eAAO,MAAM,WAAW,0NAgKrB,CAAC"}

package/lib/Run/Job.js

@@ -0,0 +1,199 @@
+import * as run from "@distilled.cloud/gcp/run-v2";
+import { Resource } from "alchemy";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved, somePropsAreDifferent } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import { diffTags } from "alchemy/Tags";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { gcpInternalLabels, hasAlchemyLabels } from "../Tags.js";
+import { makeSyncIam } from "./IamSync.js";
+import { makeAwaitOperation } from "./Operations.js";
+import { reshapeBadRequest, validateAnnotations, validateContainers, validateLabels, validateRunName, } from "./Validation.js";
+export const Job = Resource("GCP.Job");
+const fqName = (project, location, name) => `projects/${project}/locations/${location}/jobs/${name}`;
+const toJobBody = (news, desiredLabels) => ({
+    labels: desiredLabels,
+    ...(news.annotations ? { annotations: news.annotations } : {}),
+    ...(news.launchStage ? { launchStage: news.launchStage } : {}),
+    ...(news.binaryAuthorization
+        ? { binaryAuthorization: news.binaryAuthorization }
+        : {}),
+    ...(news.startExecutionToken
+        ? { startExecutionToken: news.startExecutionToken }
+        : {}),
+    ...(news.runExecutionToken
+        ? { runExecutionToken: news.runExecutionToken }
+        : {}),
+    template: news.template,
+});
+const toAttributes = (j, parent) => ({
+    name: parent.name,
+    uid: j.uid ?? "",
+    resourceName: j.name ?? fqName(parent.project, parent.location, parent.name),
+    project: parent.project,
+    location: parent.location,
+    generation: j.generation,
+    observedGeneration: j.observedGeneration,
+    terminalCondition: j.terminalCondition,
+    executionCount: j.executionCount,
+    latestCreatedExecution: j.latestCreatedExecution,
+    reconciling: j.reconciling,
+    etag: j.etag,
+    labels: { ...(j.labels ?? {}) },
+    createTime: j.createTime,
+    updateTime: j.updateTime,
+});
+/**
+ * Decide whether anything mutable on the Job changed since the last
+ * reconcile. Job's `patch` has no `updateMask` parameter — the server
+ * diffs the full body — so we just emit a single "changed / unchanged"
+ * verdict and re-send the whole body if it differs.
+ *
+ * Labels go through `diffTags` (consistent with every other GCP
+ * resource here); everything else is a `deepEqual` on the relevant
+ * field. The `template` deep-equal is the load-bearing check —
+ * Cloud Run injects server-side defaults into `template.template`
+ * (e.g. `maxRetries: 3` when omitted), so the observed template may
+ * have keys we never sent. Deep-equal on the OBSERVED side ⊆ NEWS
+ * side is too strict; we rely on the user re-sending equivalent
+ * inputs across reconciles so observed==news after the first patch.
+ */
+const jobMutated = (observed, news, desiredLabels) => {
+    const labelDiff = diffTags({ ...(observed.labels ?? {}) }, desiredLabels);
+    if (labelDiff.removed.length > 0 || labelDiff.upsert.length > 0)
+        return true;
+    if (!deepEqual(observed.annotations ?? {}, news.annotations ?? {}))
+        return true;
+    if (news.launchStage !== undefined && observed.launchStage !== news.launchStage) {
+        return true;
+    }
+    if (news.binaryAuthorization &&
+        !deepEqual(observed.binaryAuthorization, news.binaryAuthorization)) {
+        return true;
+    }
+    if (news.startExecutionToken !== undefined &&
+        observed.startExecutionToken !== news.startExecutionToken) {
+        return true;
+    }
+    if (news.runExecutionToken !== undefined &&
+        observed.runExecutionToken !== news.runExecutionToken) {
+        return true;
+    }
+    if (!deepEqual(observed.template, news.template))
+        return true;
+    return false;
+};
+export const JobProvider = () => Provider.effect(Job, Effect.gen(function* () {
+    const getJob = yield* run.getProjectsLocationsJobs;
+    const createJob = yield* run.createProjectsLocationsJobs;
+    const patchJob = yield* run.patchProjectsLocationsJobs;
+    const deleteJob = yield* run.deleteProjectsLocationsJobs;
+    const getOperation = yield* run.getProjectsLocationsOperations;
+    const getIamPolicy = yield* run.getIamPolicyProjectsLocationsJobs;
+    const setIamPolicy = yield* run.setIamPolicyProjectsLocationsJobs;
+    const awaitOperation = makeAwaitOperation(getOperation);
+    const syncIam = makeSyncIam({ getIamPolicy, setIamPolicy });
+    const observe = (project, location, name) => getJob({ name: fqName(project, location, name) }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)));
+    const syncMutable = Effect.fn(function* (args) {
+        if (!jobMutated(args.observed, args.news, args.desiredLabels))
+            return;
+        const bodyWithEtag = {
+            ...toJobBody(args.news, args.desiredLabels),
+            ...(args.observed.etag ? { etag: args.observed.etag } : {}),
+        };
+        const op = yield* patchJob({
+            name: args.name,
+            body: bodyWithEtag,
+        }).pipe(Effect.catchTag("BadRequest", reshapeBadRequest("Job", "patch")));
+        if (op.name)
+            yield* awaitOperation(op.name, args.session);
+    });
+    return {
+        stables: ["name", "uid", "resourceName", "project", "location"],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            if (somePropsAreDifferent(olds, news, [
+                "project",
+                "location",
+                "name",
+            ])) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, session, bindings }) {
+            const internalLabels = yield* gcpInternalLabels(id);
+            const desiredName = news.name ??
+                (yield* createPhysicalName({ id, maxLength: 49 })).toLowerCase();
+            yield* validateRunName("Job", desiredName);
+            yield* validateLabels(news.labels);
+            yield* validateAnnotations(news.annotations);
+            // Job container constraint lives one level deeper (inside the
+            // ExecutionTemplate's TaskTemplate).
+            yield* validateContainers("Job", news.template.template?.containers);
+            const parent = `projects/${news.project}/locations/${news.location}`;
+            const name = fqName(news.project, news.location, desiredName);
+            const desiredLabels = {
+                ...(news.labels ?? {}),
+                ...internalLabels,
+            };
+            let observed = yield* observe(news.project, news.location, desiredName);
+            if (!observed) {
+                const op = yield* createJob({
+                    parent,
+                    jobId: desiredName,
+                    body: toJobBody(news, desiredLabels),
+                }).pipe(Effect.retry({
+                    while: (e) => e?._tag === "Forbidden" &&
+                        /enabled this API recently|has not been used/i.test(e.message ?? ""),
+                    schedule: Schedule.spaced(Duration.seconds(15)).pipe(Schedule.both(Schedule.recurs(20)), Schedule.tapOutput(() => session.note("Waiting for Cloud Run API enablement to propagate…"))),
+                }), Effect.catchTag("Conflict", () => Effect.succeed(undefined)), Effect.catchTag("BadRequest", reshapeBadRequest("Job", "create")));
+                if (op?.name)
+                    yield* awaitOperation(op.name, session);
+                observed = yield* getJob({ name });
+            }
+            yield* syncMutable({
+                name,
+                observed,
+                news,
+                desiredLabels,
+                session,
+            });
+            yield* syncIam({ resource: name, bindings });
+            const final = yield* getJob({ name });
+            return toAttributes(final, {
+                project: news.project,
+                location: news.location,
+                name: desiredName,
+            });
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            const name = fqName(output.project, output.location, output.name);
+            yield* deleteJob({
+                name,
+                ...(output.etag ? { etag: output.etag } : {}),
+            }).pipe(Effect.flatMap((op) => op.name ? awaitOperation(op.name, session) : Effect.succeed(op)), Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        read: Effect.fn(function* ({ id, output, olds }) {
+            const project = output?.project ?? olds?.project;
+            const location = output?.location ?? olds?.location;
+            if (!project || !location)
+                return undefined;
+            const name = output?.name ??
+                olds?.name ??
+                (yield* createPhysicalName({ id, maxLength: 49 })).toLowerCase();
+            const observed = yield* observe(project, location, name);
+            if (!observed)
+                return undefined;
+            const attrs = toAttributes(observed, { project, location, name });
+            return (yield* hasAlchemyLabels(id, observed.labels))
+                ? attrs
+                : Unowned(attrs);
+        }),
+    };
+}));
+//# sourceMappingURL=Job.js.map

package/lib/Run/Job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Job.js","sourceRoot":"","sources":["../../src/Run/Job.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,6BAA6B,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,WAAW,EAA8B,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,eAAe,GAChB,MAAM,iBAAiB,CAAC;AA+KzB,MAAM,CAAC,MAAM,GAAG,GAAG,QAAQ,CAAM,SAAS,CAAC,CAAC;AAE5C,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE,CACjE,YAAY,OAAO,cAAc,QAAQ,SAAS,IAAI,EAAE,CAAC;AAE3D,MAAM,SAAS,GAAG,CAChB,IAAc,EACd,aAAqC,EACZ,EAAE,CAAC,CAAC;IAC7B,MAAM,EAAE,aAAa;IACrB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,GAAG,CAAC,IAAI,CAAC,mBAAmB;QAC1B,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE;QACnD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,IAAI,CAAC,mBAAmB;QAC1B,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE;QACnD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,IAAI,CAAC,iBAAiB;QACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;QAC/C,CAAC,CAAC,EAAE,CAAC;IACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;CACxB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CACnB,CAA0B,EAC1B,MAA2D,EAC5C,EAAE,CAAC,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,UAAU,EAAE,CAAC,CAAC,UAAU;IACxB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;IACxC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;IACtC,cAAc,EAAE,CAAC,CAAC,cAAc;IAChC,sBAAsB,EAAE,CAAC,CAAC,sBAAsB;IAChD,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,UAAU;IACxB,UAAU,EAAE,CAAC,CAAC,UAAU;CACzB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,GAAG,CACjB,QAAiC,EACjC,IAAc,EACd,aAAqC,EAC5B,EAAE;IACX,MAAM,SAAS,GAAG,QAAQ,CACxB,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAC9B,aAAa,CACd,CAAC;IACF,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,IAAI,CAAC,mBAAmB;QACxB,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,IAAI,CAAC,mBAAmB,KAAK,SAAS;QACtC,QAAQ,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,IAAI,CAAC,iBAAiB,KAAK,SAAS;QACpC,QAAQ,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB,EACrD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE,CAC9B,QAAQ,CAAC,MAAM,CACb,GAAG,EACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACvD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACzD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC;IAClE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC;IAClE,MAAM,cAAc,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;IAE5D,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE,CAClE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAAgD,CAAC,CACjE,EACD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAChC,MAAM,CAAC,OAAO,CAAC,SAAgD,CAAC,CACjE,CACF,CAAC;IAEJ,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAMxC;QACC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO;QACtE,MAAM,YAAY,GAA4B;YAC5C,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;QACF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CACjE,CAAC;QACF,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC;QAC/D,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,qBAAqB,CAAC,IAAgB,EAAE,IAAI,EAAE;gBAC5C,SAAS;gBACT,UAAU;gBACV,MAAM;aACP,CAAC,EACF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;YAC7D,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,WAAW,GACf,IAAI,CAAC,IAAI;gBACT,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAEnE,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3C,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7C,8DAA8D;YAC9D,qCAAqC;YACrC,KAAK,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,YAAY,IAAI,CAAC,OAAO,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC9D,MAAM,aAAa,GAA2B;gBAC5C,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtB,GAAG,cAAc;aAClB,CAAC;YAEF,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAExE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;oBAC1B,MAAM;oBACN,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC;iBACrC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;oBACX,KAAK,EAAE,CAAC,CAAsC,EAAE,EAAE,CAChD,CAAC,EAAE,IAAI,KAAK,WAAW;wBACvB,8CAA8C,CAAC,IAAI,CACjD,CAAC,CAAC,OAAO,IAAI,EAAE,CAChB;oBACH,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAClD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CACtB,OAAO,CAAC,IAAI,CACV,oDAAoD,CACrD,CACF,CACF;iBACF,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CACZ,SAAuD,CACxD,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAClE,CAAC;gBACF,IAAI,EAAE,EAAE,IAAI;oBAAE,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtD,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,KAAK,CAAC,CAAC,WAAW,CAAC;gBACjB,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,aAAa;gBACb,OAAO;aACR,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE7C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,OAAO,YAAY,CAAC,KAAK,EAAE;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAClE,KAAK,CAAC,CAAC,SAAS,CAAC;gBACf,IAAI;gBACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAChE,EACD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC;YACpD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC5C,MAAM,IAAI,GACR,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnD,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Run/Operations.d.ts

@@ -0,0 +1,47 @@
+import { ConfigError } from "@distilled.cloud/gcp";
+import * as run from "@distilled.cloud/gcp/run-v2";
+import type { ScopedPlanStatusSession } from "alchemy/Cli/Cli";
+import * as Effect from "effect/Effect";
+/**
+ * Resolved callable signature of `run.getProjectsLocationsOperations`.
+ *
+ * `run.getProjectsLocationsOperations` is itself an
+ * `Effect<callable, never, Credentials | HttpClient>`, so `Effect.Success`
+ * extracts the callable type — what you get back from
+ * `yield* run.getProjectsLocationsOperations`. Using a derived alias
+ * keeps the helper aligned with the SDK without us hand-writing the
+ * input/output/error union, which would drift if the patch set changes.
+ */
+type GetOperations = Effect.Success<typeof run.getProjectsLocationsOperations>;
+/**
+ * Build the Cloud Run long-running-operation polling helper.
+ *
+ * Cloud Run `Operation`s use the standard `GoogleLongrunningOperation`
+ * shape — doneness is `.done === true` (NOT `.status === "DONE"` like
+ * the GKE Container API). Verified at
+ * `vendor/distilled/packages/gcp/src/services/run-v2.ts:2880–2900`.
+ *
+ * Operation names returned by run-v2 (`createProjectsLocationsServices`,
+ * `patchProjectsLocationsServices`, `deleteProjectsLocationsServices`)
+ * are already fully qualified
+ * (`projects/{p}/locations/{l}/operations/{id}`), so callers pass them
+ * straight through to `getProjectsLocationsOperations` — no `qualifyOp`
+ * dance needed (unlike Container, which returns bare ids).
+ *
+ * Schedule: exponential 1s → 1.5× growth, capped per-poll at 10s via
+ * `Schedule.either`, then a hard count cap of 60 retries via
+ * `Schedule.both(Schedule.recurs(60))` → ~10 min wall ceiling. Cloud
+ * Run create/patch typically completes in seconds to a couple minutes,
+ * with the long pole being container image pulls.
+ *
+ * The helper is a factory — the caller resolves
+ * `run.getProjectsLocationsOperations` once at provider construction
+ * (see `Container/Operations.ts` for the same idiom) and passes the
+ * resulting callable here, so we never re-resolve services on each
+ * await.
+ */
+export declare const makeAwaitOperation: (getOperations: GetOperations) => (operationName: string, session: ScopedPlanStatusSession) => Effect.Effect<run.GoogleLongrunningOperation, ConfigError | run.GetProjectsLocationsOperationsError | {
+    _tag: "OperationPending";
+}, never>;
+export {};
+//# sourceMappingURL=Operations.d.ts.map

package/lib/Run/Operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Operations.d.ts","sourceRoot":"","sources":["../../src/Run/Operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,GAAG,MAAM,6BAA6B,CAAC;AACnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC;;;;;;;;;GASG;AACH,KAAK,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,8BAA8B,CAAC,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,kBAAkB,GAAI,eAAe,aAAa;;SA8B3D,CAAC"}

package/lib/Run/Operations.js

@@ -0,0 +1,46 @@
+import { ConfigError } from "@distilled.cloud/gcp";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+/**
+ * Build the Cloud Run long-running-operation polling helper.
+ *
+ * Cloud Run `Operation`s use the standard `GoogleLongrunningOperation`
+ * shape — doneness is `.done === true` (NOT `.status === "DONE"` like
+ * the GKE Container API). Verified at
+ * `vendor/distilled/packages/gcp/src/services/run-v2.ts:2880–2900`.
+ *
+ * Operation names returned by run-v2 (`createProjectsLocationsServices`,
+ * `patchProjectsLocationsServices`, `deleteProjectsLocationsServices`)
+ * are already fully qualified
+ * (`projects/{p}/locations/{l}/operations/{id}`), so callers pass them
+ * straight through to `getProjectsLocationsOperations` — no `qualifyOp`
+ * dance needed (unlike Container, which returns bare ids).
+ *
+ * Schedule: exponential 1s → 1.5× growth, capped per-poll at 10s via
+ * `Schedule.either`, then a hard count cap of 60 retries via
+ * `Schedule.both(Schedule.recurs(60))` → ~10 min wall ceiling. Cloud
+ * Run create/patch typically completes in seconds to a couple minutes,
+ * with the long pole being container image pulls.
+ *
+ * The helper is a factory — the caller resolves
+ * `run.getProjectsLocationsOperations` once at provider construction
+ * (see `Container/Operations.ts` for the same idiom) and passes the
+ * resulting callable here, so we never re-resolve services on each
+ * await.
+ */
+export const makeAwaitOperation = (getOperations) => Effect.fn(function* (operationName, session) {
+    const op = yield* getOperations({ name: operationName }).pipe(Effect.flatMap((current) => current.done === true
+        ? Effect.succeed(current)
+        : Effect.fail({ _tag: "OperationPending" })), Effect.retry({
+        while: (e) => e?._tag === "OperationPending",
+        schedule: Schedule.exponential(Duration.seconds(1), 1.5).pipe(Schedule.either(Schedule.spaced(Duration.seconds(10))), Schedule.both(Schedule.recurs(60)), Schedule.tapOutput(() => session.note(`Waiting for Cloud Run operation ${operationName}…`))),
+    }));
+    if (op.error) {
+        return yield* new ConfigError({
+            message: `Cloud Run operation ${operationName} failed: ${op.error.message ?? JSON.stringify(op.error)}`,
+        });
+    }
+    return op;
+});
+//# sourceMappingURL=Operations.js.map

package/lib/Run/Operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Operations.js","sourceRoot":"","sources":["../../src/Run/Operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAc5C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,aAA4B,EAAE,EAAE,CACjE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjB,aAAqB,EACrB,OAAgC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,OAAO,CAAC,IAAI,KAAK,IAAI;QACnB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAA2B,EAAE,CAAC,CACvD,EACD,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,kBAAkB;QAC/D,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAC3D,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EACtD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CACtB,OAAO,CAAC,IAAI,CAAC,mCAAmC,aAAa,GAAG,CAAC,CAClE,CACF;KACF,CAAC,CACH,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC;YAC5B,OAAO,EAAE,uBAAuB,aAAa,YAC3C,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAC7C,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC"}

package/lib/Run/Service.d.ts

@@ -0,0 +1,193 @@
+import * as run from "@distilled.cloud/gcp/run-v2";
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import type * as GCP from "../Providers.ts";
+import { type RunIamBindingContract } from "./IamSync.ts";
+/**
+ * A Cloud Run v2 Service — a managed serverless HTTP endpoint. Cloud
+ * Run pulls a container image, scales it from zero up to the
+ * configured maximum based on request rate, and fronts it with a
+ * Google-managed URL (`https://{service}-{hash}-{region}.run.app`).
+ * Per-Service IAM controls who can invoke it.
+ *
+ * **Resource model.** A Service holds a `template` (the desired
+ * `RevisionTemplate`) plus traffic routing. Every change to `template`
+ * server-side spawns a new immutable `Revision`; `traffic` (this resource)
+ * picks which Revisions receive request percentages. Revisions and
+ * Executions are side-effects and are NOT modeled by this resource —
+ * inspect them via `getProjectsLocationsServicesRevisions` if needed.
+ *
+ * **Lifecycle.** observe → ensure (create, retrying on the well-known
+ * "API not yet enabled" 403) → sync (patch with updateMask of changed
+ * top-level fields) → sync IAM bindings → return.
+ *
+ * **Replace triggers.** Only identity fields (project, location, name)
+ * force replacement. Everything else — image, env, scaling, traffic,
+ * ingress, IAM — is in-place via `patch`. New revisions are auto-created
+ * by Cloud Run on any `template.*` change.
+ *
+ * **Optimistic concurrency.** Patch and delete pass through the
+ * observed `etag` so concurrent edits (e.g. from `gcloud run services
+ * update`) surface as `Conflict` instead of silently overwriting.
+ *
+ * **Adoption.** Label-gated: a Service whose `labels` lack our
+ * `alchemy_*` keys is wrapped in `Unowned(attrs)` from `read`, forcing
+ * `--adopt` before takeover.
+ *
+ * **IAM.** Use {@link import("./IamMember.ts").serviceIamMember} to
+ * bind `(role, member)` grants — the provider unions all bindings and
+ * applies them via a single `setIamPolicy` round-trip, preserving
+ * foreign roles + members.
+ *
+ * @section Creating a Cloud Run Service
+ * @example Minimal "hello" service, public via IAM
+ * ```typescript
+ * const helloApi = yield* GCP.Service("HelloApi", {
+ *   project: project.projectId,
+ *   location: "europe-west4",
+ *   template: {
+ *     containers: [{ image: "gcr.io/cloudrun/hello" }],
+ *   },
+ * });
+ * yield* GCP.serviceIamMember(helloApi, "PublicInvoker", {
+ *   role: "roles/run.invoker",
+ *   member: "allUsers",
+ * });
+ * // helloApi.uri → https://hello-api-XXXXX-ew.a.run.app
+ * ```
+ *
+ * @example Internal-only service with explicit service account and scaling
+ * ```typescript
+ * const internal = yield* GCP.Service("Internal", {
+ *   project: project.projectId,
+ *   location: "europe-west4",
+ *   ingress: "INGRESS_TRAFFIC_INTERNAL_ONLY",
+ *   scaling: { minInstanceCount: 1, maxInstanceCount: 10 },
+ *   template: {
+ *     serviceAccount: sa.email,
+ *     containers: [{
+ *       image: "europe-west4-docker.pkg.dev/proj/repo/app:latest",
+ *       resources: { limits: { cpu: "1000m", memory: "512Mi" } },
+ *     }],
+ *   },
+ * });
+ * ```
+ */
+export type ServiceProps = {
+    /** GCP project ID hosting the Service. Immutable — replace if changed. */
+    project: string;
+    /**
+     * Cloud Run region (e.g. `europe-west4`). Cloud Run is a regional
+     * product — there are no zonal Services. Immutable — replace if changed.
+     */
+    location: string;
+    /**
+     * Service name. Defaults to `createPhysicalName({ id, lowercase: true,
+     * maxLength: 49 })`. Lowercase letters/digits/hyphens; must begin
+     * with a letter and not end with a hyphen; **fewer than 50 characters**.
+     * Immutable — replace if changed.
+     */
+    name?: string;
+    /**
+     * User-visible description (≤512 chars). Mutable via `patch`.
+     */
+    description?: string;
+    /**
+     * Resource labels. Alchemy internal labels (`alchemy_app`,
+     * `alchemy_stage`, `alchemy_id`) are merged on top automatically.
+     * Cloud Run rejects labels in `run.googleapis.com`,
+     * `cloud.googleapis.com`, `serving.knative.dev`, or
+     * `autoscaling.knative.dev` namespaces. Mutable via `patch`.
+     */
+    labels?: Record<string, string>;
+    /**
+     * Free-form annotations for external tools. Cloud Run rejects the
+     * same reserved namespaces as `labels`. Mutable via `patch`.
+     */
+    annotations?: Record<string, string>;
+    /**
+     * Launch stage. `BETA` (or higher) is required to use preview
+     * fields like GPU `nodeSelector` and Direct VPC `networkInterfaces`;
+     * leaving this unset defaults to `GA`, which silently rejects
+     * preview fields in the body. Mutable via `patch`.
+     */
+    launchStage?: "ALPHA" | "BETA" | "GA" | "EARLY_ACCESS" | "PRELAUNCH" | "DEPRECATED";
+    /** Ingress traffic policy. Mutable via `patch`. */
+    ingress?: "INGRESS_TRAFFIC_ALL" | "INGRESS_TRAFFIC_INTERNAL_ONLY" | "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER" | "INGRESS_TRAFFIC_NONE";
+    /**
+     * Disable the IAM permission check for invokers. When `true`, the
+     * Service is publicly reachable regardless of IAM policy — a
+     * deliberate footgun, surface it consciously. Prefer
+     * `serviceIamMember(svc, "Public", { role: "roles/run.invoker", member: "allUsers" })`
+     * for declarative public access. Mutable via `patch`.
+     */
+    invokerIamDisabled?: boolean;
+    /**
+     * Disable public resolution of the default `*.run.app` URI. When
+     * `true`, the service is reachable only via custom domains / load
+     * balancers. Mutable via `patch`.
+     */
+    defaultUriDisabled?: boolean;
+    /** Service-level scaling. Mutable via `patch`. */
+    scaling?: run.GoogleCloudRunV2ServiceScaling;
+    /**
+     * Traffic routing across Revisions. Defaults server-side to 100% to
+     * the latest `Ready` revision. Mutable via `patch`.
+     */
+    traffic?: ReadonlyArray<run.GoogleCloudRunV2TrafficTarget>;
+    /**
+     * Audiences encoded into the auth token, for cross-service auth.
+     * Mutable via `patch`.
+     */
+    customAudiences?: ReadonlyArray<string>;
+    /**
+     * Binary Authorization policy. Mutable via `patch`.
+     */
+    binaryAuthorization?: run.GoogleCloudRunV2BinaryAuthorization;
+    /**
+     * The Revision template — describes the desired Pod-equivalent.
+     * **Required at create.** Mutable via `patch`; any change spawns a
+     * new server-managed Revision.
+     */
+    template: run.GoogleCloudRunV2RevisionTemplate;
+};
+export type ServiceAttributes = {
+    /** Service name (bare, without the `projects/.../services/` prefix). */
+    name: string;
+    /** Server-assigned UID — stable across rename-less mutations. */
+    uid: string;
+    /** Fully-qualified resource name `projects/{p}/locations/{l}/services/{n}`. */
+    resourceName: string;
+    /** GCP project ID, threaded through from props. */
+    project: string;
+    /** Region, threaded through from props. */
+    location: string;
+    /** Primary serving URI (`https://…run.app`). */
+    uri: string;
+    /** All URIs serving traffic (default + any tagged ones). */
+    urls: ReadonlyArray<string>;
+    /** Monotonically increasing generation, bumped on every patch. */
+    generation: string | undefined;
+    /** The generation currently serving traffic. */
+    observedGeneration: string | undefined;
+    /** Name of the latest Ready revision. */
+    latestReadyRevision: string | undefined;
+    /** Name of the latest created revision. */
+    latestCreatedRevision: string | undefined;
+    /** Overall readiness condition. */
+    terminalCondition: run.GoogleCloudRunV2Condition | undefined;
+    /** Per-traffic-target serving status. */
+    trafficStatuses: ReadonlyArray<run.GoogleCloudRunV2TrafficTargetStatus>;
+    /** Optimistic-concurrency etag. */
+    etag: string | undefined;
+    /** Labels currently set, including internals. */
+    labels: Record<string, string>;
+    /** Creation time. */
+    createTime: string | undefined;
+    /** Last-modified time. */
+    updateTime: string | undefined;
+};
+export type Service = Resource<"GCP.Service", ServiceProps, ServiceAttributes, RunIamBindingContract, GCP.Providers>;
+export declare const Service: import("alchemy").ResourceClass<Service>;
+export declare const ServiceProvider: () => import("effect/Layer").Layer<Provider.Provider<Service>, never, import("effect/unstable/http/HttpClient").HttpClient | import("alchemy").Stage | import("alchemy").Stack | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=Service.d.ts.map

package/lib/Run/Service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Service.d.ts","sourceRoot":"","sources":["../../src/Run/Service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,6BAA6B,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAK7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAe,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAUvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC;;;;;OAKG;IACH,WAAW,CAAC,EACR,OAAO,GACP,MAAM,GACN,IAAI,GACJ,cAAc,GACd,WAAW,GACX,YAAY,CAAC;IACjB,mDAAmD;IACnD,OAAO,CAAC,EACJ,qBAAqB,GACrB,+BAA+B,GAC/B,wCAAwC,GACxC,sBAAsB,CAAC;IAC3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kDAAkD;IAClD,OAAO,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IAC7C;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3D;;;OAGG;IACH,eAAe,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC;;OAEG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,mCAAmC,CAAC;IAC9D;;;;OAIG;IACH,QAAQ,EAAE,GAAG,CAAC,gCAAgC,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,kEAAkE;IAClE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,gDAAgD;IAChD,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,yCAAyC;IACzC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,2CAA2C;IAC3C,qBAAqB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,mCAAmC;IACnC,iBAAiB,EAAE,GAAG,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAC7D,yCAAyC;IACzC,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACxE,mCAAmC;IACnC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,qBAAqB;IACrB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,0BAA0B;IAC1B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,QAAQ,CAC5B,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,OAAO,0CAAmC,CAAC;AAoDxD,eAAO,MAAM,eAAe,8NAsQzB,CAAC"}