alchemy-effect 0.2.0 → 0.4.0

package/src/aws/ec2/route-table.ts

@@ -0,0 +1,175 @@
+import type * as EC2 from "itty-aws/ec2";
+import type { Input } from "../../input.ts";
+import { Resource } from "../../resource.ts";
+import type { AccountID } from "../account.ts";
+import type { RegionID } from "../region.ts";
+import type { VpcId } from "./vpc.ts";
+
+export const RouteTable = Resource<{
+  <const ID extends string, const Props extends RouteTableProps>(
+    id: ID,
+    props: Props,
+  ): RouteTable<ID, Props>;
+}>("AWS.EC2.RouteTable");
+
+export interface RouteTable<
+  ID extends string = string,
+  Props extends RouteTableProps = RouteTableProps,
+> extends Resource<
+    "AWS.EC2.RouteTable",
+    ID,
+    Props,
+    RouteTableAttrs<Input.Resolve<Props>>,
+    RouteTable
+  > {}
+
+export type RouteTableId<ID extends string = string> = `rtb-${ID}`;
+export const RouteTableId = <ID extends string>(
+  id: ID,
+): ID & RouteTableId<ID> => `rtb-${id}` as ID & RouteTableId<ID>;
+
+export interface RouteTableProps {
+  /**
+   * The VPC to create the route table in.
+   * Required.
+   */
+  vpcId: Input<VpcId>;
+
+  /**
+   * Tags to assign to the route table.
+   * These will be merged with alchemy auto-tags (alchemy::app, alchemy::stage, alchemy::id).
+   */
+  tags?: Record<string, Input<string>>;
+}
+
+export interface RouteTableAttrs<Props extends RouteTableProps> {
+  /**
+   * The ID of the VPC the route table is in.
+   */
+  vpcId: Props["vpcId"];
+
+  /**
+   * The ID of the route table.
+   */
+  routeTableId: RouteTableId;
+
+  /**
+   * The Amazon Resource Name (ARN) of the route table.
+   */
+  routeTableArn: `arn:aws:ec2:${RegionID}:${AccountID}:route-table/${this["routeTableId"]}`;
+
+  /**
+   * The ID of the AWS account that owns the route table.
+   */
+  ownerId?: string;
+
+  /**
+   * The associations between the route table and subnets or gateways.
+   */
+  associations?: Array<{
+    /**
+     * Whether this is the main route table for the VPC.
+     */
+    main: boolean;
+    /**
+     * The ID of the association.
+     */
+    routeTableAssociationId?: string;
+    /**
+     * The ID of the route table.
+     */
+    routeTableId?: string;
+    /**
+     * The ID of the subnet (if the association is with a subnet).
+     */
+    subnetId?: string;
+    /**
+     * The ID of the gateway (if the association is with a gateway).
+     */
+    gatewayId?: string;
+    /**
+     * The state of the association.
+     */
+    associationState?: {
+      state: EC2.RouteTableAssociationStateCode;
+      statusMessage?: string;
+    };
+  }>;
+
+  /**
+   * The routes in the route table.
+   */
+  routes?: Array<{
+    /**
+     * The IPv4 CIDR block used for the destination match.
+     */
+    destinationCidrBlock?: string;
+    /**
+     * The IPv6 CIDR block used for the destination match.
+     */
+    destinationIpv6CidrBlock?: string;
+    /**
+     * The prefix of the AWS service.
+     */
+    destinationPrefixListId?: string;
+    /**
+     * The ID of the egress-only internet gateway.
+     */
+    egressOnlyInternetGatewayId?: string;
+    /**
+     * The ID of the gateway (internet gateway or virtual private gateway).
+     */
+    gatewayId?: string;
+    /**
+     * The ID of the NAT instance.
+     */
+    instanceId?: string;
+    /**
+     * The ID of AWS account that owns the NAT instance.
+     */
+    instanceOwnerId?: string;
+    /**
+     * The ID of the NAT gateway.
+     */
+    natGatewayId?: string;
+    /**
+     * The ID of the transit gateway.
+     */
+    transitGatewayId?: string;
+    /**
+     * The ID of the local gateway.
+     */
+    localGatewayId?: string;
+    /**
+     * The ID of the carrier gateway.
+     */
+    carrierGatewayId?: string;
+    /**
+     * The ID of the network interface.
+     */
+    networkInterfaceId?: string;
+    /**
+     * Describes how the route was created.
+     */
+    origin: EC2.RouteOrigin;
+    /**
+     * The state of the route.
+     */
+    state: EC2.RouteState;
+    /**
+     * The ID of the VPC peering connection.
+     */
+    vpcPeeringConnectionId?: string;
+    /**
+     * The Amazon Resource Name (ARN) of the core network.
+     */
+    coreNetworkArn?: string;
+  }>;
+
+  /**
+   * Any virtual private gateway (VGW) propagating routes.
+   */
+  propagatingVgws?: Array<{
+    gatewayId: string;
+  }>;
+}

package/src/aws/ec2/route.provider.ts

@@ -0,0 +1,213 @@
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+
+import type { EC2 } from "itty-aws/ec2";
+
+import { somePropsAreDifferent } from "../../diff.ts";
+import type { ProviderService } from "../../provider.ts";
+import { EC2Client } from "./client.ts";
+import { Route, type RouteAttrs, type RouteProps } from "./route.ts";
+
+export const routeProvider = () =>
+  Route.provider.effect(
+    Effect.gen(function* () {
+      const ec2 = yield* EC2Client;
+
+      return {
+        diff: Effect.fn(function* ({ news, olds }) {
+          // Route table change requires replacement
+          if (olds.routeTableId !== news.routeTableId) {
+            return { action: "replace" };
+          }
+
+          // Destination change requires replacement
+          if (
+            somePropsAreDifferent(olds, news, [
+              "destinationCidrBlock",
+              "destinationIpv6CidrBlock",
+              "destinationPrefixListId",
+            ])
+          ) {
+            return { action: "replace" };
+          }
+
+          // Target change can be done via ReplaceRoute (update)
+        }),
+
+        create: Effect.fn(function* ({ news, session }) {
+          // Call CreateRoute
+          yield* ec2
+            .createRoute({
+              RouteTableId: news.routeTableId,
+              DestinationCidrBlock: news.destinationCidrBlock,
+              DestinationIpv6CidrBlock: news.destinationIpv6CidrBlock,
+              DestinationPrefixListId: news.destinationPrefixListId,
+              GatewayId: news.gatewayId,
+              NatGatewayId: news.natGatewayId,
+              InstanceId: news.instanceId,
+              NetworkInterfaceId: news.networkInterfaceId,
+              VpcPeeringConnectionId: news.vpcPeeringConnectionId,
+              TransitGatewayId: news.transitGatewayId,
+              LocalGatewayId: news.localGatewayId,
+              CarrierGatewayId: news.carrierGatewayId,
+              EgressOnlyInternetGatewayId: news.egressOnlyInternetGatewayId,
+              CoreNetworkArn: news.coreNetworkArn,
+              VpcEndpointId: news.vpcEndpointId,
+              DryRun: false,
+            })
+            .pipe(
+              Effect.retry({
+                // Retry if route table is not yet available
+                while: (e) => e._tag === "InvalidRouteTableID.NotFound",
+                schedule: Schedule.exponential(100),
+              }),
+            );
+
+          const dest =
+            news.destinationCidrBlock ||
+            news.destinationIpv6CidrBlock ||
+            news.destinationPrefixListId ||
+            "unknown";
+          yield* session.note(`Route created: ${dest}`);
+
+          // Describe to get route details
+          const route = yield* describeRoute(ec2, news.routeTableId, news);
+
+          // Return attributes
+          return {
+            routeTableId: news.routeTableId,
+            destinationCidrBlock: news.destinationCidrBlock,
+            destinationIpv6CidrBlock: news.destinationIpv6CidrBlock,
+            destinationPrefixListId: news.destinationPrefixListId,
+            origin: route?.Origin ?? "CreateRoute",
+            state: route?.State ?? "active",
+            gatewayId: route?.GatewayId,
+            natGatewayId: route?.NatGatewayId,
+            instanceId: route?.InstanceId,
+            networkInterfaceId: route?.NetworkInterfaceId,
+            vpcPeeringConnectionId: route?.VpcPeeringConnectionId,
+            transitGatewayId: route?.TransitGatewayId,
+            localGatewayId: route?.LocalGatewayId,
+            carrierGatewayId: route?.CarrierGatewayId,
+            egressOnlyInternetGatewayId: route?.EgressOnlyInternetGatewayId,
+            coreNetworkArn: route?.CoreNetworkArn,
+          } satisfies RouteAttrs<RouteProps>;
+        }),
+
+        update: Effect.fn(function* ({ news, output, session }) {
+          // Use ReplaceRoute to update the target
+          yield* ec2
+            .replaceRoute({
+              RouteTableId: news.routeTableId,
+              DestinationCidrBlock: news.destinationCidrBlock,
+              DestinationIpv6CidrBlock: news.destinationIpv6CidrBlock,
+              DestinationPrefixListId: news.destinationPrefixListId,
+              GatewayId: news.gatewayId,
+              NatGatewayId: news.natGatewayId,
+              InstanceId: news.instanceId,
+              NetworkInterfaceId: news.networkInterfaceId,
+              VpcPeeringConnectionId: news.vpcPeeringConnectionId,
+              TransitGatewayId: news.transitGatewayId,
+              LocalGatewayId: news.localGatewayId,
+              CarrierGatewayId: news.carrierGatewayId,
+              EgressOnlyInternetGatewayId: news.egressOnlyInternetGatewayId,
+              CoreNetworkArn: news.coreNetworkArn,
+              DryRun: false,
+            })
+            .pipe(
+              Effect.tapError(Effect.log),
+              Effect.retry({
+                while: (e) => e._tag === "InvalidRouteTableID.NotFound",
+                schedule: Schedule.exponential(100),
+              }),
+            );
+
+          yield* session.note("Route target updated");
+
+          // Describe to get updated route details
+          const route = yield* describeRoute(ec2, news.routeTableId, news);
+
+          return {
+            ...output,
+            origin: route?.Origin ?? output.origin,
+            state: route?.State ?? output.state,
+            gatewayId: route?.GatewayId,
+            natGatewayId: route?.NatGatewayId,
+            instanceId: route?.InstanceId,
+            networkInterfaceId: route?.NetworkInterfaceId,
+            vpcPeeringConnectionId: route?.VpcPeeringConnectionId,
+            transitGatewayId: route?.TransitGatewayId,
+            localGatewayId: route?.LocalGatewayId,
+            carrierGatewayId: route?.CarrierGatewayId,
+            egressOnlyInternetGatewayId: route?.EgressOnlyInternetGatewayId,
+            coreNetworkArn: route?.CoreNetworkArn,
+          };
+        }),
+
+        delete: Effect.fn(function* ({ output, session }) {
+          const dest =
+            output.destinationCidrBlock ||
+            output.destinationIpv6CidrBlock ||
+            output.destinationPrefixListId ||
+            "unknown";
+
+          yield* session.note(`Deleting route: ${dest}`);
+
+          // Delete the route
+          yield* ec2
+            .deleteRoute({
+              RouteTableId: output.routeTableId,
+              DestinationCidrBlock: output.destinationCidrBlock,
+              DestinationIpv6CidrBlock: output.destinationIpv6CidrBlock,
+              DestinationPrefixListId: output.destinationPrefixListId,
+              DryRun: false,
+            })
+            .pipe(
+              Effect.tapError(Effect.logDebug),
+              Effect.catchTag("InvalidRoute.NotFound", () => Effect.void),
+              Effect.catchTag(
+                "InvalidRouteTableID.NotFound",
+                () => Effect.void,
+              ),
+            );
+
+          yield* session.note(`Route ${dest} deleted successfully`);
+        }),
+      } satisfies ProviderService<Route>;
+    }),
+  );
+
+/**
+ * Find a specific route in a route table
+ */
+const describeRoute = (ec2: EC2, routeTableId: string, props: RouteProps) =>
+  Effect.gen(function* () {
+    const result = yield* ec2
+      .describeRouteTables({ RouteTableIds: [routeTableId] })
+      .pipe(
+        Effect.catchTag("InvalidRouteTableID.NotFound", () =>
+          Effect.succeed({ RouteTables: [] }),
+        ),
+      );
+
+    const routeTable = result.RouteTables?.[0];
+    if (!routeTable) {
+      return undefined;
+    }
+
+    // Find the matching route
+    const route = routeTable.Routes?.find((r) => {
+      if (props.destinationCidrBlock) {
+        return r.DestinationCidrBlock === props.destinationCidrBlock;
+      }
+      if (props.destinationIpv6CidrBlock) {
+        return r.DestinationIpv6CidrBlock === props.destinationIpv6CidrBlock;
+      }
+      if (props.destinationPrefixListId) {
+        return r.DestinationPrefixListId === props.destinationPrefixListId;
+      }
+      return false;
+    });
+
+    return route;
+  });

package/src/aws/ec2/route.ts

@@ -0,0 +1,192 @@
+import type * as EC2 from "itty-aws/ec2";
+import type { Input } from "../../input.ts";
+import { Resource } from "../../resource.ts";
+import type { RouteTableId } from "./route-table.ts";
+
+export const Route = Resource<{
+  <const ID extends string, const Props extends RouteProps>(
+    id: ID,
+    props: Props,
+  ): Route<ID, Props>;
+}>("AWS.EC2.Route");
+
+export interface Route<
+  ID extends string = string,
+  Props extends RouteProps = RouteProps,
+> extends Resource<
+    "AWS.EC2.Route",
+    ID,
+    Props,
+    RouteAttrs<Input.Resolve<Props>>,
+    Route
+  > {}
+
+export interface RouteProps {
+  /**
+   * The ID of the route table where the route will be added.
+   * Required.
+   */
+  routeTableId: Input<RouteTableId>;
+
+  /**
+   * The IPv4 CIDR block used for the destination match.
+   * Either destinationCidrBlock, destinationIpv6CidrBlock, or destinationPrefixListId is required.
+   * @example "0.0.0.0/0"
+   */
+  destinationCidrBlock?: string;
+
+  /**
+   * The IPv6 CIDR block used for the destination match.
+   * Either destinationCidrBlock, destinationIpv6CidrBlock, or destinationPrefixListId is required.
+   * @example "::/0"
+   */
+  destinationIpv6CidrBlock?: string;
+
+  /**
+   * The ID of a prefix list used for the destination match.
+   * Either destinationCidrBlock, destinationIpv6CidrBlock, or destinationPrefixListId is required.
+   */
+  destinationPrefixListId?: string;
+
+  // ---- Target properties (exactly one required) ----
+
+  /**
+   * The ID of an internet gateway or virtual private gateway.
+   */
+  gatewayId?: Input<string>;
+
+  /**
+   * The ID of a NAT gateway.
+   */
+  natGatewayId?: Input<string>;
+
+  /**
+   * The ID of a NAT instance in your VPC.
+   * This operation fails unless exactly one network interface is attached.
+   */
+  instanceId?: Input<string>;
+
+  /**
+   * The ID of a network interface.
+   */
+  networkInterfaceId?: Input<string>;
+
+  /**
+   * The ID of a VPC peering connection.
+   */
+  vpcPeeringConnectionId?: Input<string>;
+
+  /**
+   * The ID of a transit gateway.
+   */
+  transitGatewayId?: Input<string>;
+
+  /**
+   * The ID of a local gateway.
+   */
+  localGatewayId?: Input<string>;
+
+  /**
+   * The ID of a carrier gateway.
+   * Use for Wavelength Zones only.
+   */
+  carrierGatewayId?: Input<string>;
+
+  /**
+   * The ID of an egress-only internet gateway.
+   * IPv6 traffic only.
+   */
+  egressOnlyInternetGatewayId?: Input<string>;
+
+  /**
+   * The Amazon Resource Name (ARN) of the core network.
+   */
+  coreNetworkArn?: Input<string>;
+
+  /**
+   * The ID of a VPC endpoint for Gateway Load Balancer.
+   */
+  vpcEndpointId?: Input<string>;
+}
+
+export interface RouteAttrs<Props extends RouteProps> {
+  /**
+   * The ID of the route table.
+   */
+  routeTableId: Props["routeTableId"];
+
+  /**
+   * The IPv4 CIDR block used for the destination match.
+   */
+  destinationCidrBlock?: Props["destinationCidrBlock"];
+
+  /**
+   * The IPv6 CIDR block used for the destination match.
+   */
+  destinationIpv6CidrBlock?: Props["destinationIpv6CidrBlock"];
+
+  /**
+   * The ID of a prefix list used for the destination match.
+   */
+  destinationPrefixListId?: Props["destinationPrefixListId"];
+
+  /**
+   * Describes how the route was created.
+   */
+  origin: EC2.RouteOrigin;
+
+  /**
+   * The state of the route.
+   */
+  state: EC2.RouteState;
+
+  /**
+   * The ID of the gateway (if applicable).
+   */
+  gatewayId?: string;
+
+  /**
+   * The ID of the NAT gateway (if applicable).
+   */
+  natGatewayId?: string;
+
+  /**
+   * The ID of the NAT instance (if applicable).
+   */
+  instanceId?: string;
+
+  /**
+   * The ID of the network interface (if applicable).
+   */
+  networkInterfaceId?: string;
+
+  /**
+   * The ID of the VPC peering connection (if applicable).
+   */
+  vpcPeeringConnectionId?: string;
+
+  /**
+   * The ID of the transit gateway (if applicable).
+   */
+  transitGatewayId?: string;
+
+  /**
+   * The ID of the local gateway (if applicable).
+   */
+  localGatewayId?: string;
+
+  /**
+   * The ID of the carrier gateway (if applicable).
+   */
+  carrierGatewayId?: string;
+
+  /**
+   * The ID of the egress-only internet gateway (if applicable).
+   */
+  egressOnlyInternetGatewayId?: string;
+
+  /**
+   * The Amazon Resource Name (ARN) of the core network (if applicable).
+   */
+  coreNetworkArn?: string;
+}