alchemy 0.43.5 → 0.44.1

package/src/cloudflare/wrangler.json.ts

@@ -47,6 +47,25 @@ export interface WranglerJsonProps {
     binding: string;
     directory: string;
   };
+
+  /**
+   * Transform hooks to modify generated configuration files
+   */
+  transform?: {
+    /**
+     * Hook to modify the wrangler.json object before it's written
+     *
+     * This function receives the generated wrangler.json spec and should return
+     * a modified version. It's applied as the final transformation before the
+     * file is written to disk.
+     *
+     * @param spec - The generated wrangler.json specification
+     * @returns The modified wrangler.json specification
+     */
+    wrangler?: (
+      spec: WranglerJsonSpec,
+    ) => WranglerJsonSpec | Promise<WranglerJsonSpec>;
+  };
 }
 
 /**
@@ -156,14 +175,19 @@ export const WranglerJson = Resource(
       spec.assets.directory = path.relative(dirname, spec.assets.directory);
     }
 
+    // Apply the wrangler configuration hook as the final transformation
+    const finalSpec = props.transform?.wrangler
+      ? await props.transform.wrangler(spec)
+      : spec;
+
     await fs.mkdir(dirname, { recursive: true });
-    await fs.writeFile(filePath, await formatJson(spec));
+    await fs.writeFile(filePath, await formatJson(finalSpec));
 
     // Return the resource
     return this({
       ...props,
       path: path.relative(cwd, filePath),
-      spec,
+      spec: finalSpec,
       createdAt: Date.now(),
       updatedAt: Date.now(),
     });
@@ -216,6 +240,7 @@ export interface WranglerJsonSpec {
    */
   ai?: {
     binding: string;
+    experimental_remote?: boolean;
   };
 
   /**
@@ -223,6 +248,7 @@ export interface WranglerJsonSpec {
    */
   browser?: {
     binding: string;
+    experimental_remote?: boolean;
   };
 
   /**
@@ -230,6 +256,7 @@ export interface WranglerJsonSpec {
    */
   images?: {
     binding: string;
+    experimental_remote?: boolean;
   };
 
   /**
@@ -242,6 +269,7 @@ export interface WranglerJsonSpec {
      * The ID of the KV namespace used during `wrangler dev`
      */
     preview_id?: string;
+    experimental_remote?: boolean;
   }[];
 
   /**
@@ -266,6 +294,7 @@ export interface WranglerJsonSpec {
      * The preview name of this R2 bucket at the edge.
      */
     preview_bucket_name?: string;
+    experimental_remote?: boolean;
   }[];
 
   /**
@@ -308,6 +337,7 @@ export interface WranglerJsonSpec {
   vectorize?: {
     binding: string;
     index_name: string;
+    experimental_remote?: boolean;
   }[];
 
   /**
@@ -327,6 +357,7 @@ export interface WranglerJsonSpec {
      * The ID of the D1 database used during `wrangler dev`
      */
     preview_database_id?: string;
+    experimental_remote?: boolean;
   }[];
 
   /**
@@ -398,6 +429,7 @@ export interface WranglerJsonSpec {
   dispatch_namespaces?: {
     binding: string;
     namespace: string;
+    experimental_remote?: boolean;
   }[];
 }
 
@@ -412,8 +444,12 @@ function processBindings(
   workerCwd: string,
 ): void {
   // Arrays to collect different binding types
-  const kvNamespaces: { binding: string; id: string; preview_id: string }[] =
-    [];
+  const kvNamespaces: {
+    binding: string;
+    id: string;
+    preview_id: string;
+    experimental_remote?: boolean;
+  }[] = [];
   const durableObjects: {
     name: string;
     class_name: string;
@@ -440,6 +476,7 @@ function processBindings(
     database_name: string;
     migrations_dir?: string;
     preview_database_id: string;
+    experimental_remote?: boolean;
   }[] = [];
   const queues: {
     producers: { queue: string; binding: string }[];
@@ -459,7 +496,11 @@ function processBindings(
   const new_sqlite_classes: string[] = [];
   const new_classes: string[] = [];
 
-  const vectorizeIndexes: { binding: string; index_name: string }[] = [];
+  const vectorizeIndexes: {
+    binding: string;
+    index_name: string;
+    experimental_remote?: boolean;
+  }[] = [];
   const analyticsEngineDatasets: { binding: string; dataset: string }[] = [];
   const hyperdrive: {
     binding: string;
@@ -475,6 +516,7 @@ function processBindings(
   const dispatchNamespaces: {
     binding: string;
     namespace: string;
+    experimental_remote?: boolean;
   }[] = [];
   const containers: {
     class_name: string;
@@ -527,6 +569,9 @@ function processBindings(
         binding: bindingName,
         id: id,
         preview_id: id,
+        ...("dev" in binding && binding.dev?.remote
+          ? { experimental_remote: true }
+          : {}),
       });
     } else if (
       typeof binding === "object" &&
@@ -550,6 +595,7 @@ function processBindings(
         binding: bindingName,
         bucket_name: binding.name,
         preview_bucket_name: binding.name,
+        ...(binding.dev?.remote ? { experimental_remote: true } : {}),
       });
     } else if (binding.type === "secret") {
       // Secret binding
@@ -573,6 +619,7 @@ function processBindings(
         database_name: binding.name,
         migrations_dir: binding.migrationsDir,
         preview_database_id: binding.id,
+        ...(binding.dev?.remote ? { experimental_remote: true } : {}),
       });
     } else if (binding.type === "queue") {
       queues.producers.push({
@@ -583,6 +630,8 @@ function processBindings(
       vectorizeIndexes.push({
         binding: bindingName,
         index_name: binding.name,
+        // https://developers.cloudflare.com/workers/development-testing/#recommended-remote-bindings
+        experimental_remote: true,
       });
     } else if (binding.type === "browser") {
       if (spec.browser) {
@@ -590,6 +639,8 @@ function processBindings(
       }
       spec.browser = {
         binding: bindingName,
+        // https://developers.cloudflare.com/workers/development-testing/#recommended-remote-bindings
+        experimental_remote: true,
       };
     } else if (binding.type === "ai") {
       if (spec.ai) {
@@ -597,6 +648,8 @@ function processBindings(
       }
       spec.ai = {
         binding: bindingName,
+        // https://developers.cloudflare.com/workers/development-testing/#recommended-remote-bindings
+        experimental_remote: true,
       };
     } else if (binding.type === "images") {
       if (spec.images) {
@@ -604,6 +657,8 @@ function processBindings(
       }
       spec.images = {
         binding: bindingName,
+        // https://developers.cloudflare.com/workers/development-testing/#recommended-remote-bindings
+        experimental_remote: true,
       };
     } else if (binding.type === "analytics_engine") {
       analyticsEngineDatasets.push({
@@ -648,6 +703,7 @@ function processBindings(
       dispatchNamespaces.push({
         binding: bindingName,
         namespace: binding.namespaceName,
+        experimental_remote: true,
       });
     } else if (binding.type === "secret_key") {
       // no-op

package/src/context.ts

@@ -46,6 +46,10 @@ export interface BaseContext<Out extends Resource> {
   id: ResourceID;
   fqn: ResourceFQN;
   scope: Scope;
+  /**
+   * Indicates whether this resource is being created as a replacement for another resource
+   */
+  isReplacement: boolean;
   get<T>(key: string): Promise<T | undefined>;
   set<T>(key: string, value: T): Promise<void>;
   delete<T>(key: string): Promise<T | undefined>;
@@ -88,6 +92,7 @@ export function context<
   state,
   replace,
   props,
+  isReplacement = false,
 }: {
   scope: Scope;
   phase: "create" | "update" | "delete";
@@ -98,6 +103,7 @@ export function context<
   props: Props;
   state: State<Kind, Props, Out>;
   replace: () => never;
+  isReplacement?: boolean;
 }): Context<Out> {
   type InternalSymbols =
     | typeof ResourceID
@@ -133,6 +139,7 @@ export function context<
     output: state.output,
     props,
     replace,
+    isReplacement,
     get: (key: string) => state.data[key],
     set: async (key: string, value: any) => {
       state.data[key] = value;

package/src/destroy.ts

@@ -119,6 +119,7 @@ export async function destroy<Type extends string>(
       seq: instance[ResourceSeq],
       props: options?.replace?.props ?? state.props,
       state,
+      isReplacement: false,
       replace: () => {
         throw new Error("Cannot replace a resource that is being deleted");
       },

package/src/docker/api.ts

@@ -1,4 +1,7 @@
+import { Buffer } from "node:buffer";
 import { spawn } from "node:child_process";
+import fs from "node:fs/promises";
+import path from "node:path";
 import { exec } from "../os/exec.ts";
 
 /**
@@ -9,6 +12,16 @@ export interface DockerApiOptions {
    * Custom path to Docker binary
    */
   dockerPath?: string;
+
+  /**
+   * Optional directory that will be used as the Docker CLI configuration
+   * directory (equivalent to setting the DOCKER_CONFIG environment variable).
+   *
+   * This makes authentication actions like `docker login` operate on an
+   * isolated credentials store which avoids race-conditions when multiple
+   * processes manipulate the default global config simultaneously.
+   */
+  configDir?: string;
 }
 
 type VolumeInfo = {
@@ -27,6 +40,8 @@ type VolumeInfo = {
 export class DockerApi {
   /** Path to Docker CLI */
   readonly dockerPath: string;
+  /** Directory to use for Docker CLI config */
+  readonly configDir?: string;
 
   /**
    * Create a new Docker API client
@@ -35,6 +50,7 @@ export class DockerApi {
    */
   constructor(options: DockerApiOptions = {}) {
     this.dockerPath = options.dockerPath || "docker";
+    this.configDir = options.configDir;
   }
 
   /**
@@ -44,11 +60,17 @@ export class DockerApi {
    * @returns Result of the command
    */
   async exec(args: string[]): Promise<{ stdout: string; stderr: string }> {
+    // If a custom config directory is provided, ensure all commands use it by
+    // setting the DOCKER_CONFIG env variable for the spawned process.
+    const env = this.configDir
+      ? { ...process.env, DOCKER_CONFIG: this.configDir }
+      : process.env;
+
     const command = `${this.dockerPath} ${args.join(" ")}`;
     const result = (await exec(command, {
       captureOutput: true,
       shell: true,
-      env: process.env,
+      env,
     })) as { stdout: string; stderr: string };
 
     return result;
@@ -377,6 +399,27 @@ export class DockerApi {
     username: string,
     password: string,
   ): Promise<void> {
+    // If we have a custom config directory, write credentials directly to
+    // config.json to avoid race conditions with the global credential store
+    if (this.configDir) {
+      const authConfigPath = path.join(this.configDir, "config.json");
+      const authToken = Buffer.from(`${username}:${password}`).toString(
+        "base64",
+      );
+
+      const configJson = {
+        auths: {
+          [registry]: {
+            auth: authToken,
+          },
+        },
+      };
+
+      await fs.writeFile(authConfigPath, JSON.stringify(configJson));
+      return;
+    }
+
+    // Fallback to original docker login behavior for backwards compatibility
     return new Promise((resolve, reject) => {
       const args = [
         "login",
@@ -429,6 +472,19 @@ export class DockerApi {
    * @param registry Registry URL
    */
   async logout(registry: string): Promise<void> {
+    // If we have a custom config directory, we can just remove the auth entry
+    // or delete the config file entirely since it's isolated
+    if (this.configDir) {
+      try {
+        const authConfigPath = path.join(this.configDir, "config.json");
+        await fs.unlink(authConfigPath);
+      } catch {
+        // Ignore errors - file might not exist or already be deleted
+      }
+      return;
+    }
+
+    // Fallback to original docker logout behavior
     try {
       await this.exec(["logout", registry]);
     } catch (error) {

package/src/docker/image.ts

@@ -1,4 +1,5 @@
 import fs from "node:fs/promises";
+import os from "node:os";
 import path from "node:path";
 import type { Context } from "../context.ts";
 import { Resource } from "../resource.ts";
@@ -31,7 +32,7 @@ export interface DockerBuildOptions {
   /**
    * Build arguments as key-value pairs
    */
-  buildArgs?: Record<string, string>;
+  args?: Record<string, string>;
 
   /**
    * Target build stage in multi-stage builds
@@ -134,8 +135,16 @@ export const Image = Resource(
     id: string,
     props: ImageProps,
   ): Promise<Image> {
-    // Initialize Docker API client
-    const api = new DockerApi();
+    // Create a temporary directory that will act as an isolated Docker config
+    // (credentials) directory. This prevents race-conditions when multiple
+    // concurrent tests perform `docker login` / `logout` by ensuring each
+    // Image operation has its own credential store.
+    const tempConfigDir = await fs.mkdtemp(
+      path.join(os.tmpdir(), "docker-config-"),
+    );
+
+    // Initialize Docker API client with the isolated config directory
+    const api = new DockerApi({ configDir: tempConfigDir });
 
     if (this.phase === "delete") {
       // No action needed for delete as Docker images aren't automatically removed
@@ -166,7 +175,7 @@ export const Image = Resource(
       await fs.access(dockerfile);
 
       // Prepare build options
-      const buildOptions: Record<string, string> = props.build?.buildArgs || {};
+      const buildOptions: Record<string, string> = props.build?.args || {};
 
       // Add platform if specified
       let buildArgs = ["build", "-t", imageRef];
@@ -223,7 +232,7 @@ export const Image = Resource(
           : `${registryHost}/${imageRef}`;
 
         try {
-          // Authenticate to registry
+          // Authenticate to registry using the isolated config directory
           await api.login(registryHost, username, password.unencrypted);
 
           // Tag local image with fully qualified name if necessary
@@ -251,7 +260,7 @@ export const Image = Resource(
           // Update the final image reference to point at the pushed image
           finalImageRef = targetImage;
         } finally {
-          // Always try to logout – failures are non-fatal
+          // Clean up credentials from the isolated config
           await api.logout(registryHost);
         }
       }

package/src/index.ts

@@ -1,5 +1,6 @@
 export type { AlchemyOptions, Phase } from "./alchemy.ts";
 export type * from "./context.ts";
+
 export * from "./resource.ts";
 export * from "./scope.ts";
 export * from "./secret.ts";