@samebase/alchemy-convex 0.8.0 → 0.10.0

package/README.md

@@ -91,6 +91,55 @@ Effect.gen(function* () {
 State always holds `rootDir`, `"."` included, so a reader of the state finds the app directory of
 each deployment.
 
+### Resources associated with an installed component
+
+Keep the component's native Alchemy resource declarations. Connect their namespace to the installed
+component name in the consuming app's stack. The name comes from the app's `convex.config.ts`:
+`app.use(mail, { name: "mail" })` installs the component as `"mail"`.
+
+```ts
+import { bindComponent } from "@samebase/alchemy-convex";
+import * as Effect from "effect/Effect";
+
+// `production` is this app's Convex.Deployment. EmailInbox creates its resources under "Mail".
+Effect.gen(function* () {
+  const inbox = yield* EmailInbox("Mail", {
+    convexSiteUrl: production.siteUrl,
+    zone,
+    sendingDomain,
+  });
+  yield* bindComponent({
+    deployment: production,
+    component: "mail",
+    namespace: inbox.worker.Namespace,
+  });
+});
+```
+
+The deployment's Alchemy state row stores this entry in its native `bindings` array:
+
+```json
+{
+  "sid": "convex.component:[\"Mail\"]",
+  "data": { "type": "component", "path": "mail", "namespace": ["Mail"] }
+}
+```
+
+Readers inspect each binding's `data`. The deployment attributes identify the Convex deployment;
+the row's stack and stage identify the Alchemy scope. The live repository reader includes the
+binding through its existing resource JSON. No extra resource list, state table, or subscription
+is needed.
+
+Use actual namespace ancestry when grouping resources. A slash in a resource's logical ID is not a
+namespace boundary. For a nested install, join the installed names with slashes, such as
+`"workspace/mail"`. An undefined namespace means the stack root. Each namespace can be assigned to
+one component per deployment; a component can have multiple namespaces. A more specific child
+namespace takes precedence when displaying resources.
+
+The connection is declared metadata. It does not check that the component is installed, push code,
+set environment values, or change resource deletion policies. Removing the call removes the binding
+on the next apply.
+
 ## Credentials
 
 Credentials are a layer, never props, so they do not go into Alchemy state. `Convex.providers()`
@@ -135,11 +184,20 @@ is set must be the slug of that team, checked against its projects, and a token
 fails the run. The Convex CLI login needs the slug or the id. The first run of a team creates
 the project `alchemy-state` and pushes the store functions to its
 production deployment with the Convex CLI of the app; a later version of this package pushes a
-newer store when it finds an older one, and never an older one over a newer one. Each run makes a
+newer store when it finds an older one. A store that is newer than the package fails the run with
+both versions, so the repositories of a team upgrade the package together. Each run makes a
 deploy key of that deployment that can only run the store's internal functions, and deletes it at
 the end. Rows are in the tables `resources` and `outputs` in the dashboard, under the stack name.
 The store has no lock: run one deploy of a stage at a time, such as with a CI concurrency group.
-The names of the store functions are a wire contract: never renamed or removed.
+The store and its readers (Samebase) are released and upgraded together.
+
+Store version 3 supports native subscriptions. A trusted server checks repository access, then
+calls internal `reader:authorize({ repository, subject })` with a deployment credential. It gives
+the returned token to a separate `ConvexClient` connected to the state deployment. The client
+subscribes to `reader:repository({})`; the verified token selects the repository. The token has a
+five-minute lifetime and permits redacted reads only. The server checks access again on renewal.
+The store uses its own native signing key and JWKS, so no extra signing secret is required.
+See [the reader contract](docs/design/convex-state.md#repository-subscriptions-090).
 
 ### What the output records about a run
 

package/lib/index.d.ts

@@ -1,14 +1,16 @@
-import * as Context from "effect/Context";
+import { Stack } from "alchemy/Stack";
 import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import * as Context from "effect/Context";
 import * as Layer from "effect/Layer";
 import * as Redacted from "effect/Redacted";
-import * as Schema from "effect/Schema";
 import { Resource } from "alchemy";
 import * as Provider from "alchemy/Provider";
 import * as ChildProcessSpawner from "effect/process/ChildProcessSpawner";
 import { createDeploymentClient, createManagementClient } from "@convex-dev/platform";
 import "effect/Scope";
 import { State, StateStoreError } from "alchemy/State";
+import { NamespaceNode } from "alchemy/Namespace";
 import { InputProps } from "alchemy/Input";
 import { components } from "@convex-dev/platform/managementApi";
 //#region src/Credentials.d.ts
@@ -250,7 +252,7 @@ interface DeploymentAttributes extends DeploymentTarget {
   /** The names of the `env` variables that this resource set on the deployment, sorted. */
   readonly envNames: readonly string[];
 }
-export type Deployment = Resource<"Convex.Deployment", DeploymentProps, DeploymentAttributes, never, Providers>;
+export type Deployment = Resource<"Convex.Deployment", DeploymentProps, DeploymentAttributes, ComponentBinding, Providers>;
 /** The props of a `Convex.Deployment` call: Alchemy inputs, with `rootDir` a plain string. */
 type DeploymentInput = DeploymentProps extends (infer P) ? P extends DeploymentProps ? InputProps<P, "rootDir"> : never : never;
 declare const AbsoluteRootDir_base: Schema.Class<AbsoluteRootDir, Schema.TaggedStruct<"AbsoluteRootDir", {
@@ -310,6 +312,26 @@ export declare class AmbiguousDeployment extends AmbiguousDeployment_base {
   get message(): string;
 }
 //#endregion
+//#region src/Component.d.ts
+/** A component's resources occupy this namespace in the deployment's Alchemy stack and stage. */
+interface ComponentBinding {
+  readonly type: "component";
+  readonly path: string;
+  readonly namespace: readonly string[];
+}
+/**
+ * Associate a native namespace with an installed component. `component` is the
+ * installed name from the app's `convex.config.ts`; a nested install joins the
+ * names with slashes, such as `"workspace/mail"`. An undefined namespace
+ * associates the stack root. This records display metadata; it does not install
+ * the component, set its environment, or change removal policies.
+ */
+export declare const bindComponent: (options: {
+  deployment: Deployment;
+  component: string;
+  namespace: NamespaceNode | undefined;
+}) => Effect.Effect<undefined, never, Stack>;
+//#endregion
 //#region src/Project.d.ts
 /** Region names the Management API accepts, from the generated schema. */
 type DeploymentRegion = components["schemas"]["RegionName"];
@@ -448,5 +470,5 @@ export declare const state: (options?: {
   readonly team?: string | number;
 }) => Layer.Layer<State, never, ChildProcessSpawner.ChildProcessSpawner>;
 //#endregion
-export type { DeploymentAttributes, DeploymentInput, DeploymentProps, DeploymentRegion, EnvValue, ProjectAttributes, ProjectProps, RunRecord, Source };
+export type { ComponentBinding, DeploymentAttributes, DeploymentInput, DeploymentProps, DeploymentRegion, EnvValue, ProjectAttributes, ProjectProps, RunRecord, Source };
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/Credentials.ts","../src/ManagementApi.ts","../src/Providers.ts","../src/Push.ts","../src/Deployment.ts","../src/Project.ts","../src/RunRecord.ts","../src/State.ts"],"mappings":";;;;;;;;;;;;;;UA6BiB;;WAEN,aAAa,SAAS;;WAEtB;;UAGM;;WAEN,aAAa,OAAO,OAAO;;WAE3B,gBAAgB,OAAO;;WAEvB,WAAW,OAAO,OAAO,SAAS;;;qBAGhC,oBAAoB;;qBAKpB;;qBAGA;;;;qBAOA,yBAAyB;;;;;;;;;qBAiCzB,kBAAiB,MAAM,MAAM;;qBA0B7B,aAAc;WAChB,cAAc,SAAS;WACvB,YAAY,SAAS;MAC5B,MAAM,MAAM;;;KC3GJ,mBAAmB,kBAAkB;KACrC,mBAAmB,kBAAkB;;UAGhC,YAAY;WAClB,OAAO;WACP;WACA,UAAU;;;;;;;;;;;;;qBAQR,uBAAuB;UAuBnB;;WAEN,UAAU,GACjB,mBACA,MAAM,QAAQ,qBAAqB,QAAQ,YAAY,QACpD,OAAO,OAAO,GAAG;;WAEb,cACP,mBACA,MAAM,QAAQ,qBAAqB,QAAQ,0BACxC,OAAO,aAAa;;WAEhB,oBAAoB,GAC3B,mBACA,6BACA,WAAW,SAAS,kBACpB,MAAM,QAAQ,qBAAqB,QAAQ,YAAY,QACpD,OAAO,OAAO,GAAG;;;;;;;;WAQb,gBACP,sCACG,OAAO,eAAe;;;;;;;;WAQlB,oBAAoB,mBAAmB,OAAO;;;;;WAK9C,YAAY,OAAO,SAAS,qBAAqB;;;qBAM/C,sBAAsB;;;;qBC1FtB,kBAAkB;;;;;;qBAOlB,YAAa,cAAa,MAAM,MAAM,iBAA2B,MAAA,MAAA,8CAAA,mCAAA,oDAAA;;;;KC+BlE,oBAAoB,SAAS;;;;;;KAO7B;;WAIG;;;;;;;;WAQA;;;;;;;WAOA;;;;;;qBAkCF,0BAA0B;MAIxB;;;;;;;qBAMF,0BAA0B;MAOxB;;;;;;;;;qBAMF,uBAAuB;MAMrB;;;;;;;qBAQF,2BAA2B;MAIzB;;;;;;;qBAMF,oCAAoC;MAIlC;;;;;;qBAMF,kCAAkC;MAIhC;;;qBAuCF,oBACX;EACG;EAAa;;;;UC5HR;;WAEC;aAAoB;;;;;;;;WAOpB;;;;;;WAMA,SAAS;;WAET,MAAM,SAAS,eAAe;;KAG7B,mBACP;;WAEU;MAEV;;WAEU;;;;;WAKA;;;UAIL;WACC;WACA,MAAM;;WAEN;;WAEA;;WAEA;;WAEA;;WAEA;;UAGM,6BAA6B;;WAEnC;;WAEA;;YAGC,aAAa,8BAEvB,iBACA,6BAEA;;KAQU,kBAAkB,+BAA8B,KACxD,UAAU,kBACR,WAAW;;;;;qBAWJ,wBAAwB;MAGtB;;;;;;;;;;;;qBAeF,cAAU,YACV,OAAS,oBAAe,OAAA,OAAA,mBAAA;;;;;;EAYvB,MAAA,YAAM;IAAc;IAAgB;QAAgB,OAAA,OAAA;;;;;;;;;;qBAMrD,iCAAiC;MAU/B;;;;;;qBAMF,qCAAqC;MAInC;;;;;;;;;qBAMF,4BAA4B;MAS1B;;;;;KC7MH,mBAAmB;KAEnB;;WAGG;;WAEA;;WAEA,mBAAmB;;WAEnB;;;WAIA;;WAEA;;UAGE;WACN;WACA;WACA;WACA;WACA;WACA;;YAGC,UAAU,2BAA2B,cAAc,0BAA0B;qBAC5E,2BAAO,cAAA;;;;;;;qBAGP,0BAA0B;MAIxB;;;;;;;;;;;;qBASF,gCAAgC;MAS9B;;;;;;;;qBAOF,yBAAyB;MAKvB;;;;;;qBAMF,+BAA+B;MAI7B;;;;;;;qBAMF,wBAAwB;MAItB;;;;;qBC5GF;;UAMI;WACN;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;WACA;;WAEA;;;;;qBAGE,uBAAuB;MAGrB;;;UAME;WACN;WACA,KAAK,SAAS;;;;;;;;qBAuIZ,YAAa,OAAO,mBAAiB,OAAO,OAAO,WAAW;;;;;;;qBAgB9D,gBAAiB,iBAAiB,QAAQ;;;;qBCxH1C;;;;;;;;;qBAyWA,QACX;WAAoB;MACnB,MAAM,MAAM,cAAc,oBAAoB"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/Credentials.ts","../src/ManagementApi.ts","../src/Providers.ts","../src/Push.ts","../src/Deployment.ts","../src/Component.ts","../src/Project.ts","../src/RunRecord.ts","../src/State.ts"],"mappings":";;;;;;;;;;;;;;;;UA6BiB;;WAEN,aAAa,SAAS;;WAEtB;;UAGM;;WAEN,aAAa,OAAO,OAAO;;WAE3B,gBAAgB,OAAO;;WAEvB,WAAW,OAAO,OAAO,SAAS;;;qBAGhC,oBAAoB;;qBAKpB;;qBAGA;;;;qBAOA,yBAAyB;;;;;;;;;qBAiCzB,kBAAiB,MAAM,MAAM;;qBA0B7B,aAAc;WAChB,cAAc,SAAS;WACvB,YAAY,SAAS;MAC5B,MAAM,MAAM;;;KC3GJ,mBAAmB,kBAAkB;KACrC,mBAAmB,kBAAkB;;UAGhC,YAAY;WAClB,OAAO;WACP;WACA,UAAU;;;;;;;;;;;;;qBAQR,uBAAuB;UAuBnB;;WAEN,UAAU,GACjB,mBACA,MAAM,QAAQ,qBAAqB,QAAQ,YAAY,QACpD,OAAO,OAAO,GAAG;;WAEb,cACP,mBACA,MAAM,QAAQ,qBAAqB,QAAQ,0BACxC,OAAO,aAAa;;WAEhB,oBAAoB,GAC3B,mBACA,6BACA,WAAW,SAAS,kBACpB,MAAM,QAAQ,qBAAqB,QAAQ,YAAY,QACpD,OAAO,OAAO,GAAG;;;;;;;;WAQb,gBACP,sCACG,OAAO,eAAe;;;;;;;;WAQlB,oBAAoB,mBAAmB,OAAO;;;;;WAK9C,YAAY,OAAO,SAAS,qBAAqB;;;qBAM/C,sBAAsB;;;;qBC1FtB,kBAAkB;;;;;;qBAOlB,YAAa,cAAa,MAAM,MAAM,iBAA2B,MAAA,MAAA,8CAAA,mCAAA,oDAAA;;;;KC+BlE,oBAAoB,SAAS;;;;;;KAO7B;;WAIG;;;;;;;;WAQA;;;;;;;WAOA;;;;;;qBAkCF,0BAA0B;MAIxB;;;;;;;qBAMF,0BAA0B;MAOxB;;;;;;;;;qBAMF,uBAAuB;MAMrB;;;;;;;qBAQF,2BAA2B;MAIzB;;;;;;;qBAMF,oCAAoC;MAIlC;;;;;;qBAMF,kCAAkC;MAIhC;;;qBAuCF,oBACX;EACG;EAAa;;;;UC3HR;;WAEC;aAAoB;;;;;;;;WAOpB;;;;;;WAMA,SAAS;;WAET,MAAM,SAAS,eAAe;;KAG7B,mBACP;;WAEU;MAEV;;WAEU;;;;;WAKA;;;UAIL;WACC;WACA,MAAM;;WAEN;;WAEA;;WAEA;;WAEA;;WAEA;;UAGM,6BAA6B;;WAEnC;;WAEA;;YAGC,aAAa,8BAEvB,iBACA,sBACA,kBACA;;KAQU,kBAAkB,+BAA8B,KACxD,UAAU,kBACR,WAAW;;;;;qBAWJ,wBAAwB;MAGtB;;;;;;;;;;;;qBAeF,cAAU,YACV,OAAS,oBAAe,OAAA,OAAA,mBAAA;;;;;;EAYvB,MAAA,YAAM;IAAc;IAAgB;QAAgB,OAAA,OAAA;;;;;;;;;;qBAMrD,iCAAiC;MAU/B;;;;;;qBAMF,qCAAqC;MAInC;;;;;;;;;qBAMF,4BAA4B;MAS1B;;;;;UC1OE;WACN;WACA;WACA;;;;;;;;;qBAUE,gBAAiB;EAC5B,YAAY;EACZ;EACA,WAAW;MACZ,OAAA,yBAAA;;;;KCWW,mBAAmB;KAEnB;;WAGG;;WAEA;;WAEA,mBAAmB;;WAEnB;;;WAIA;;WAEA;;UAGE;WACN;WACA;WACA;WACA;WACA;WACA;;YAGC,UAAU,2BAA2B,cAAc,0BAA0B;qBAC5E,2BAAO,cAAA;;;;;;;qBAGP,0BAA0B;MAIxB;;;;;;;;;;;;qBASF,gCAAgC;MAS9B;;;;;;;;qBAOF,yBAAyB;MAKvB;;;;;;qBAMF,+BAA+B;MAI7B;;;;;;;qBAMF,wBAAwB;MAItB;;;;;qBC5GF;;UAMI;WACN;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;WACA;;WAEA;;;;;qBAGE,uBAAuB;MAGrB;;;UAME;WACN;WACA,KAAK,SAAS;;;;;;;;qBAuIZ,YAAa,OAAO,mBAAiB,OAAO,OAAO,WAAW;;;;;;;qBAgB9D,gBAAiB,iBAAiB,QAAQ;;;;qBCzH1C;;;;;;;;;qBA+WA,QACX;WAAoB;MACnB,MAAM,MAAM,cAAc,oBAAoB"}

package/lib/index.js

@@ -1,22 +1,23 @@
 import { createRequire } from "node:module";
+import { toPath } from "alchemy/FQN";
+import { Stack } from "alchemy/Stack";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
 import { access, mkdtemp, readFile, realpath, rm, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import { dirname, join, posix, relative, resolve, sep, win32 } from "node:path";
 import * as Config from "effect/Config";
 import * as Context from "effect/Context";
-import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
 import * as Option from "effect/Option";
 import * as Redacted from "effect/Redacted";
 import * as Result from "effect/Result";
-import * as Schema from "effect/Schema";
 import { Resource } from "alchemy";
 import { AdoptPolicy, OwnedBySomeoneElse, Unowned } from "alchemy/AdoptPolicy";
-import { isResolved } from "alchemy/Diff";
+import { diffBindings, isResolved } from "alchemy/Diff";
 import * as Provider from "alchemy/Provider";
 import * as ChildProcessSpawner from "effect/process/ChildProcessSpawner";
 import { AlchemyContext } from "alchemy/AlchemyContext";
-import { Stack } from "alchemy/Stack";
 import { createDeploymentClient, createManagementClient } from "@convex-dev/platform";
 import * as Schedule from "effect/Schedule";
 import { createHash } from "node:crypto";
@@ -29,6 +30,31 @@ import { execFile } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import * as Scope from "effect/Scope";
 import { STATE_STORE_VERSION, State, StateStoreError, encodeState, reviveState } from "alchemy/State";
+//#region src/Component.ts
+/**
+* Associate a native namespace with an installed component. `component` is the
+* installed name from the app's `convex.config.ts`; a nested install joins the
+* names with slashes, such as `"workspace/mail"`. An undefined namespace
+* associates the stack root. This records display metadata; it does not install
+* the component, set its environment, or change removal policies.
+*/
+const bindComponent = (options) => Effect.gen(function* () {
+	if (options.component === "") return yield* Effect.die(/* @__PURE__ */ new Error("The component name is empty."));
+	const namespace = toPath(options.namespace);
+	const sid = `convex.component:${JSON.stringify(namespace)}`;
+	const previous = (yield* Stack).bindings[options.deployment.FQN]?.find((binding) => binding.sid === sid);
+	if (previous !== void 0) {
+		const existing = Schema.decodeUnknownSync(Schema.Struct({ path: Schema.String }))(previous.data);
+		if (existing.path !== options.component) return yield* Effect.die(/* @__PURE__ */ new Error(`Alchemy namespace ${JSON.stringify(namespace)} is already bound to ${existing.path}.`));
+		return;
+	}
+	yield* options.deployment.bind(sid, {
+		type: "component",
+		path: options.component,
+		namespace
+	});
+});
+//#endregion
 //#region src/Credentials.ts
 var Credentials = class extends Context.Service()("@samebase/alchemy-convex/Credentials") {};
 /** Environment variable for the access token, read by {@link fromConfig}. */
@@ -898,15 +924,34 @@ const DeploymentProvider = () => Provider.effect(DeploymentResource, Effect.gen(
 			"type",
 			"previewName"
 		],
-		diff: Effect.fn(function* ({ news, olds, output }) {
+		diff: Effect.fn(function* ({ news, olds, output, oldBindings, newBindings }) {
 			if (!isResolved(news) || output === void 0) return void 0;
 			yield* checkIdentity(output, news);
+			if (!isResolved(newBindings)) return void 0;
 			const rootDir = news.rootDir ?? ".";
 			if (news.source !== void 0) yield* checkSource(rootDir, news.source);
 			if (olds.rootDir !== rootDir) return { action: "update" };
 			const access = yield* accessFor(addressOf(news), changesEnv(news, output));
-			if ((yield* live(access, output))?.name !== output.name) return { action: "update" };
-			return (yield* wantedHash(news, rootDir, output.name)) === output.hash ? { action: "noop" } : { action: "update" };
+			const current = yield* live(access, output);
+			if (current?.name !== output.name) return { action: "update" };
+			if ((yield* wantedHash(news, rootDir, output.name)) !== output.hash) return { action: "update" };
+			if (diffBindings(oldBindings, newBindings).every((binding) => binding.action === "noop")) return { action: "noop" };
+			return {
+				action: "update",
+				stables: [
+					"hash",
+					"envNames",
+					...[
+						"projectId",
+						"type",
+						"previewName",
+						"name",
+						"reference",
+						"url",
+						"siteUrl"
+					].filter((key) => current[key] === output[key])
+				]
+			};
 		}),
 		read: Effect.fn(function* ({ olds, output }) {
 			if (output !== void 0) {
@@ -1555,8 +1600,18 @@ const makeFunctionApi = (url, key) => ({ call: (path, args) => post(`${url}/api/
 /** The value of a reply, or the Convex message, which names the function and the cause, such as a missing key action. */
 const valueOf = (reply) => reply.status === "success" ? Effect.succeed(reply.value) : Effect.fail(failure(reply.errorMessage.trim()));
 /** The functions of the store with Alchemy's encoding: the JSON text of encodeState. */
-const remoteOf = (api) => {
+const remoteOf = (api, record) => {
 	const run = (name, args) => api.call(`state:${name}`, args).pipe(Effect.flatMap(valueOf));
+	const write = (name, args) => Effect.gen(function* () {
+		const currentRun = record === void 0 ? void 0 : {
+			...record,
+			recordedAt: new Date(yield* Clock.currentTimeMillis).toISOString()
+		};
+		return yield* run(name, {
+			...args,
+			run: currentRun
+		});
+	});
 	const strings = (name, args) => run(name, args).pipe(Effect.flatMap(decode(Schema.Array(Schema.String), name)));
 	const optional = (name, args) => run(name, args).pipe(Effect.flatMap(decode(Schema.NullOr(Schema.String), name)));
 	const encode = (value) => JSON.stringify(encodeState(value));
@@ -1580,13 +1635,13 @@ const remoteOf = (api) => {
 			stack: r.stack,
 			stage: r.stage
 		}).pipe(Effect.map((text) => text === null ? void 0 : JSON.parse(text, reviveState))),
-		set: (r) => run("set", {
+		set: (r) => write("set", {
 			stack: r.stack,
 			stage: r.stage,
 			fqn: r.fqn,
 			value: encode(r.value)
 		}),
-		delete: (r) => run("remove", {
+		delete: (r) => write("remove", {
 			stack: r.stack,
 			stage: r.stage,
 			fqn: r.fqn
@@ -1595,7 +1650,7 @@ const remoteOf = (api) => {
 			stack: r.stack,
 			stage: r.stage
 		}),
-		setOutput: (r) => run("setOutput", {
+		setOutput: (r) => write("setOutput", {
 			stack: r.stack,
 			stage: r.stage,
 			value: encode(r.value)
@@ -1618,7 +1673,7 @@ const storeDirectory = () => join(dirname(fileURLToPath(import.meta.url)), "..",
 */
 const pushStore = (options, deployment) => Effect.gen(function* () {
 	const cli = yield* installedCli(join(options.store, ".."));
-	yield* Effect.logInfo(`Convex state: pushing the store version 2 to ${deployment.name}`);
+	yield* Effect.logInfo(`Convex state: pushing the store version 3 to ${deployment.name}`);
 	yield* withPushKey(options.api, deployment.name, PUSH_KEY_ACTIONS, (key) => push(options.spawner, key, {
 		deployment: deployment.name,
 		url: deployment.deploymentUrl,
@@ -1681,17 +1736,17 @@ const makeConvexState = (options) => Effect.gen(function* () {
 		current = next;
 		return next.call(path, args);
 	})))) };
-	const version = yield* storeVersion(functions);
-	if (version === void 0 || version < 2) {
+	let version = yield* storeVersion(functions);
+	if (version === void 0 || version < 3) {
 		if (version === void 0 && deployment.lastDeployTime) return yield* failure(`project ${STORE_PROJECT_NAME} (${project.id}) of team ${team} has code that is not the state store, and Convex.state does not push over it. Rename that project in the Convex dashboard.`);
-		const now = yield* storeVersion(functions);
-		if (now === void 0 || now < 2) {
+		version = yield* storeVersion(functions);
+		if (version === void 0 || version < 3) {
 			yield* pushStore(options, deployment);
-			const pushed = yield* storeVersion(functions);
-			if (pushed === void 0 || pushed < 2) return yield* failure(`${deployment.name} answers store version ${pushed ?? "none"} after the push of version 2.`);
+			version = yield* storeVersion(functions);
 		}
-	} else if (version > 2) yield* Effect.logInfo(`Convex state: the store of team ${team} is version ${version}, newer than version 2 of this package, and it stays.`);
-	const remote = remoteOf(functions);
+	}
+	if (version !== 3) return yield* failure(`${deployment.name} answers store version ${version ?? "none"}, and this package needs store version 3.`);
+	const remote = remoteOf(functions, options.run);
 	/** The stack's output plus the record, when the run has one and the output has a place for it. */
 	const documentOf = (request) => Effect.gen(function* () {
 		const { run } = options;
@@ -1759,6 +1814,6 @@ const state = (options = {}) => Layer.effect(State, Effect.gen(function* () {
 	}).pipe(Effect.provideContext(context), Effect.orDie));
 }));
 //#endregion
-export { ACCESS_TOKEN_ENV, AbsoluteRootDir, AmbiguousDeployment, AmbiguousProject, CodePushFailed, ConvexApiError, ConvexAppNotFound, ConvexCliNotFound, CreatedProjectNotFound, Credentials, CredentialsError, DEPLOY_KEY_ENV, Deployment, DeploymentIdentityChange, EnvironmentNeedsDeployKey, ManagementApi, ProductionDeploymentNotFound, Project, ProjectDeploymentChange, ProjectNotFound, ProjectTeamChange, Providers, PushTargetMismatch, RUN_RECORD_KEY, RunRecordError, STORE_PROJECT_NAME, VariablesOwnedBySomeoneElse, fromConfig, fromValues, parseDeployOutput, providers, runRecord, state, withRunRecord };
+export { ACCESS_TOKEN_ENV, AbsoluteRootDir, AmbiguousDeployment, AmbiguousProject, CodePushFailed, ConvexApiError, ConvexAppNotFound, ConvexCliNotFound, CreatedProjectNotFound, Credentials, CredentialsError, DEPLOY_KEY_ENV, Deployment, DeploymentIdentityChange, EnvironmentNeedsDeployKey, ManagementApi, ProductionDeploymentNotFound, Project, ProjectDeploymentChange, ProjectNotFound, ProjectTeamChange, Providers, PushTargetMismatch, RUN_RECORD_KEY, RunRecordError, STORE_PROJECT_NAME, VariablesOwnedBySomeoneElse, bindComponent, fromConfig, fromValues, parseDeployOutput, providers, runRecord, state, withRunRecord };
 
 //# sourceMappingURL=index.js.map