alchemy 2.0.0-beta.1 → 2.0.0-beta.12

package/src/AWS/Providers.ts

@@ -1,12 +1,10 @@
-import * as Effect from "effect/Effect";
-import { pipe } from "effect/Function";
 import * as Layer from "effect/Layer";
-import { CommandProvider } from "../Build/Command.ts";
-import type { Provider } from "../Provider.ts";
-import { RandomProvider } from "../Random.ts";
-import * as Account from "./Account.ts";
+import { Command, CommandProvider } from "../Build/Command.ts";
+import * as Provider from "../Provider.ts";
+import { Random, RandomProvider } from "../Random.ts";
 import * as ACM from "./ACM/index.ts";
 import * as Assets from "./Assets.ts";
+import { AwsAuth } from "./AuthProvider.ts";
 import * as AutoScaling from "./AutoScaling/index.ts";
 import * as CloudFront from "./CloudFront/index.ts";
 import * as CloudWatch from "./CloudWatch/index.ts";
@@ -34,446 +32,494 @@ import * as Scheduler from "./Scheduler/index.ts";
 import * as SecretsManager from "./SecretsManager/index.ts";
 import * as SNS from "./SNS/index.ts";
 import * as SQS from "./SQS/index.ts";
-import { loadDefaultStageConfig, StageConfig } from "./StageConfig.ts";
+import { Default as DefaultEnvironment } from "./Environment.ts";
 import * as Website from "./Website/index.ts";
 
-export type Providers = Extract<
-  Layer.Success<ReturnType<typeof providers>>,
-  Provider<any>
->;
+export class Providers extends Provider.ProviderCollection<Providers>()(
+  "AWS",
+) {}
 
-/**
- * AWS providers with optional Assets layer for S3-based code deployment.
- * If the assets bucket exists (created via `alchemy-effect bootstrap`),
- * Lambda functions will use S3 for code deployment instead of inline ZipFile.
- */
 export const providers = () =>
-  pipe(
-    resources(),
-    Layer.provideMerge(bindings()),
-    Layer.provideMerge(Assets.AssetsProvider()),
-    Layer.provideMerge(Account.fromStageConfig()),
-    Layer.provideMerge(Region.fromStageConfig()),
-    Layer.provideMerge(Credentials.fromStageConfig()),
-    Layer.provideMerge(Endpoint.fromStageConfig()),
-    Layer.provideMerge(stageConfig()),
+  Layer.effect(
+    Providers,
+    Provider.collection([
+      Command,
+      Random,
+      ACM.Certificate,
+      AutoScaling.AutoScalingGroup,
+      AutoScaling.LaunchTemplate,
+      AutoScaling.ScalingPolicy,
+      CloudFront.Distribution,
+      CloudFront.Function,
+      CloudFront.Invalidation,
+      CloudFront.KeyValueStore,
+      CloudFront.KvEntries,
+      CloudFront.KvRoutesUpdate,
+      CloudFront.OriginAccessControl,
+      CloudWatch.Alarm,
+      CloudWatch.AlarmMuteRule,
+      CloudWatch.AnomalyDetector,
+      CloudWatch.CompositeAlarm,
+      CloudWatch.Dashboard,
+      CloudWatch.DescribeAlarmContributorsPolicy,
+      CloudWatch.DescribeAlarmHistoryPolicy,
+      CloudWatch.DescribeAlarmsForMetricPolicy,
+      CloudWatch.DescribeAlarmsPolicy,
+      CloudWatch.DescribeAnomalyDetectorsPolicy,
+      CloudWatch.DescribeInsightRulesPolicy,
+      CloudWatch.DisableAlarmActionsPolicy,
+      CloudWatch.DisableInsightRulesPolicy,
+      CloudWatch.EnableAlarmActionsPolicy,
+      CloudWatch.GetAlarmMuteRulePolicy,
+      CloudWatch.GetDashboardPolicy,
+      CloudWatch.GetInsightRuleReportPolicy,
+      CloudWatch.GetMetricDataPolicy,
+      CloudWatch.GetMetricStatisticsPolicy,
+      CloudWatch.GetMetricStreamPolicy,
+      CloudWatch.GetMetricWidgetImagePolicy,
+      CloudWatch.InsightRule,
+      CloudWatch.ListAlarmMuteRulesPolicy,
+      CloudWatch.ListDashboardsPolicy,
+      CloudWatch.ListManagedInsightRulesPolicy,
+      CloudWatch.ListMetricsPolicy,
+      CloudWatch.ListMetricStreamsPolicy,
+      CloudWatch.ListTagsForResourcePolicy,
+      CloudWatch.MetricStream,
+      CloudWatch.PutMetricDataPolicy,
+      CloudWatch.SetAlarmStatePolicy,
+      DynamoDB.BatchExecuteStatementPolicy,
+      DynamoDB.BatchGetItemPolicy,
+      DynamoDB.BatchWriteItemPolicy,
+      DynamoDB.DeleteItemPolicy,
+      DynamoDB.DescribeTablePolicy,
+      DynamoDB.DescribeTimeToLivePolicy,
+      DynamoDB.ExecuteStatementPolicy,
+      DynamoDB.ExecuteTransactionPolicy,
+      DynamoDB.GetItemPolicy,
+      DynamoDB.ListTablesPolicy,
+      DynamoDB.ListTagsOfResourcePolicy,
+      DynamoDB.PutItemPolicy,
+      DynamoDB.QueryPolicy,
+      DynamoDB.RestoreTableToPointInTimePolicy,
+      DynamoDB.ScanPolicy,
+      DynamoDB.Table,
+      DynamoDB.TransactGetItemsPolicy,
+      DynamoDB.TransactWriteItemsPolicy,
+      DynamoDB.UpdateItemPolicy,
+      DynamoDB.UpdateTimeToLivePolicy,
+      EC2.EgressOnlyInternetGateway,
+      EC2.EIP,
+      EC2.Instance,
+      EC2.InternetGateway,
+      EC2.NatGateway,
+      EC2.NetworkAcl,
+      EC2.NetworkAclAssociation,
+      EC2.NetworkAclEntry,
+      EC2.Route,
+      EC2.RouteTable,
+      EC2.RouteTableAssociation,
+      EC2.SecurityGroup,
+      EC2.SecurityGroupRule,
+      EC2.Subnet,
+      EC2.Vpc,
+      EC2.VpcEndpoint,
+      ECR.Repository,
+      ECS.Cluster,
+      ECS.DescribeTasksPolicy,
+      ECS.ListTasksPolicy,
+      ECS.RunTaskPolicy,
+      ECS.Service,
+      ECS.StopTaskPolicy,
+      ECS.Task,
+      EKS.AccessEntry,
+      EKS.Addon,
+      EKS.Cluster,
+      EKS.PodIdentityAssociation,
+      ELBv2.Listener,
+      ELBv2.LoadBalancer,
+      ELBv2.TargetGroup,
+      EventBridge.DescribeEventBusPolicy,
+      EventBridge.DescribeRulePolicy,
+      EventBridge.EventBus,
+      EventBridge.ListEventBusesPolicy,
+      EventBridge.ListRulesPolicy,
+      EventBridge.ListTargetsByRulePolicy,
+      EventBridge.Permission,
+      EventBridge.PutEventsPolicy,
+      EventBridge.Rule,
+      EventBridge.TestEventPatternPolicy,
+      EventBridge.ToLambdaPolicy,
+      EventBridge.ToQueuePolicy,
+      IAM.AccessKey,
+      IAM.AccountAlias,
+      IAM.AccountPasswordPolicy,
+      IAM.Group,
+      IAM.GroupMembership,
+      IAM.InstanceProfile,
+      IAM.LoginProfile,
+      IAM.OpenIDConnectProvider,
+      IAM.Policy,
+      IAM.Role,
+      IAM.SAMLProvider,
+      IAM.ServerCertificate,
+      IAM.ServiceSpecificCredential,
+      IAM.SigningCertificate,
+      IAM.SSHPublicKey,
+      IAM.User,
+      IAM.VirtualMFADevice,
+      IdentityCenter.AccountAssignment,
+      IdentityCenter.Group,
+      IdentityCenter.Instance,
+      IdentityCenter.PermissionSet,
+      Kinesis.DescribeAccountSettingsPolicy,
+      Kinesis.DescribeLimitsPolicy,
+      Kinesis.DescribeStreamConsumerPolicy,
+      Kinesis.DescribeStreamPolicy,
+      Kinesis.DescribeStreamSummaryPolicy,
+      Kinesis.GetRecordsPolicy,
+      Kinesis.GetResourcePolicyPolicy,
+      Kinesis.GetShardIteratorPolicy,
+      Kinesis.ListShardsPolicy,
+      Kinesis.ListStreamConsumersPolicy,
+      Kinesis.ListStreamsPolicy,
+      Kinesis.ListTagsForResourcePolicy,
+      Kinesis.PutRecordPolicy,
+      Kinesis.PutRecordsPolicy,
+      Kinesis.Stream,
+      Kinesis.StreamConsumer,
+      Kinesis.StreamSinkPolicy,
+      Kinesis.SubscribeToShardPolicy,
+      Lambda.BucketEventSourcePolicy,
+      Lambda.EventSourcePolicy,
+      Lambda.EventSourceMapping,
+      Lambda.Function,
+      Lambda.InvokeFunctionPolicy,
+      Lambda.Permission,
+      Lambda.QueueEventSourcePolicy,
+      Lambda.StreamEventSourcePolicy,
+      Lambda.TableEventSourcePolicy,
+      Lambda.TopicEventSourcePolicy,
+      Logs.LogGroup,
+      Organizations.Account,
+      Organizations.DelegatedAdministrator,
+      Organizations.Organization,
+      Organizations.OrganizationalUnit,
+      Organizations.OrganizationResourcePolicy,
+      Organizations.Policy,
+      Organizations.PolicyAttachment,
+      Organizations.Root,
+      Organizations.RootPolicyType,
+      Organizations.TrustedServiceAccess,
+      RDS.ConnectPolicy,
+      RDS.DBCluster,
+      RDS.DBClusterEndpoint,
+      RDS.DBClusterParameterGroup,
+      RDS.DBInstance,
+      RDS.DBParameterGroup,
+      RDS.DBProxy,
+      RDS.DBProxyEndpoint,
+      RDS.DBProxyTargetGroup,
+      RDS.DBSubnetGroup,
+      RDSData.BatchExecuteStatementPolicy,
+      RDSData.BeginTransactionPolicy,
+      RDSData.CommitTransactionPolicy,
+      RDSData.ExecuteSqlPolicy,
+      RDSData.ExecuteStatementPolicy,
+      RDSData.RollbackTransactionPolicy,
+      Route53.Record,
+      S3.AbortMultipartUploadPolicy,
+      S3.Bucket,
+      S3.CompleteMultipartUploadPolicy,
+      S3.CreateMultipartUploadPolicy,
+      S3.DeleteObjectPolicy,
+      S3.GetObjectPolicy,
+      S3.HeadObjectPolicy,
+      S3.ListObjectsV2Policy,
+      S3.PutObjectPolicy,
+      S3.CopyObjectPolicy,
+      S3.UploadPartPolicy,
+      Scheduler.Schedule,
+      Scheduler.ScheduleGroup,
+      SecretsManager.DescribeSecretPolicy,
+      SecretsManager.GetRandomPasswordPolicy,
+      SecretsManager.GetSecretValuePolicy,
+      SecretsManager.ListSecretsPolicy,
+      SecretsManager.PutSecretValuePolicy,
+      SecretsManager.Secret,
+      SNS.AddPermissionPolicy,
+      SNS.ConfirmSubscriptionPolicy,
+      SNS.GetDataProtectionPolicyPolicy,
+      SNS.GetSubscriptionAttributesPolicy,
+      SNS.GetTopicAttributesPolicy,
+      SNS.ListSubscriptionsByTopicPolicy,
+      SNS.ListSubscriptionsPolicy,
+      SNS.ListTagsForResourcePolicy,
+      SNS.ListTopicsPolicy,
+      SNS.PublishBatchPolicy,
+      SNS.PublishPolicy,
+      SNS.PutDataProtectionPolicyPolicy,
+      SNS.RemovePermissionPolicy,
+      SNS.SetSubscriptionAttributesPolicy,
+      SNS.SetTopicAttributesPolicy,
+      SNS.Subscription,
+      SNS.TagResourcePolicy,
+      SNS.Topic,
+      SNS.TopicSinkPolicy,
+      SNS.UntagResourcePolicy,
+      SQS.DeleteMessagePolicy,
+      SQS.DeleteMessageBatchPolicy,
+      SQS.Queue,
+      SQS.QueueSinkPolicy,
+      SQS.ReceiveMessagePolicy,
+      SQS.SendMessageBatchPolicy,
+      SQS.SendMessagePolicy,
+      Website.AssetDeployment,
+    ]),
+  ).pipe(
+    Layer.provide(
+      Layer.mergeAll(
+        ACM.CertificateProvider(),
+        AutoScaling.AutoScalingGroupProvider(),
+        AutoScaling.LaunchTemplateProvider(),
+        AutoScaling.ScalingPolicyProvider(),
+        CloudFront.DistributionProvider(),
+        CloudFront.FunctionProvider(),
+        CloudFront.InvalidationProvider(),
+        CloudFront.KeyValueStoreProvider(),
+        CloudFront.KvEntriesProvider(),
+        CloudFront.KvRoutesUpdateProvider(),
+        CloudFront.OriginAccessControlProvider(),
+        CloudWatch.AlarmMuteRuleProvider(),
+        CloudWatch.AlarmProvider(),
+        CloudWatch.AnomalyDetectorProvider(),
+        CloudWatch.CompositeAlarmProvider(),
+        CloudWatch.DashboardProvider(),
+        CloudWatch.DescribeAlarmContributorsPolicyLive,
+        CloudWatch.DescribeAlarmHistoryPolicyLive,
+        CloudWatch.DescribeAlarmsForMetricPolicyLive,
+        CloudWatch.DescribeAlarmsPolicyLive,
+        CloudWatch.DescribeAnomalyDetectorsPolicyLive,
+        CloudWatch.DescribeInsightRulesPolicyLive,
+        CloudWatch.DisableAlarmActionsPolicyLive,
+        CloudWatch.DisableInsightRulesPolicyLive,
+        CloudWatch.EnableAlarmActionsPolicyLive,
+        CloudWatch.GetAlarmMuteRulePolicyLive,
+        CloudWatch.GetDashboardPolicyLive,
+        CloudWatch.GetInsightRuleReportPolicyLive,
+        CloudWatch.GetMetricDataPolicyLive,
+        CloudWatch.GetMetricStatisticsPolicyLive,
+        CloudWatch.GetMetricStreamPolicyLive,
+        CloudWatch.GetMetricWidgetImagePolicyLive,
+        CloudWatch.InsightRuleProvider(),
+        CloudWatch.ListAlarmMuteRulesPolicyLive,
+        CloudWatch.ListDashboardsPolicyLive,
+        CloudWatch.ListManagedInsightRulesPolicyLive,
+        CloudWatch.ListMetricsPolicyLive,
+        CloudWatch.ListMetricStreamsPolicyLive,
+        CloudWatch.ListTagsForResourcePolicyLive,
+        CloudWatch.MetricStreamProvider(),
+        CloudWatch.PutMetricDataPolicyLive,
+        CloudWatch.SetAlarmStatePolicyLive,
+        DynamoDB.BatchExecuteStatementPolicyLive,
+        DynamoDB.BatchGetItemPolicyLive,
+        DynamoDB.BatchWriteItemPolicyLive,
+        DynamoDB.DeleteItemPolicyLive,
+        DynamoDB.DescribeTablePolicyLive,
+        DynamoDB.DescribeTimeToLivePolicyLive,
+        DynamoDB.ExecuteStatementPolicyLive,
+        DynamoDB.ExecuteTransactionPolicyLive,
+        DynamoDB.GetItemPolicyLive,
+        DynamoDB.ListTablesPolicyLive,
+        DynamoDB.ListTagsOfResourcePolicyLive,
+        DynamoDB.PutItemPolicyLive,
+        DynamoDB.QueryPolicyLive,
+        DynamoDB.RestoreTableToPointInTimePolicyLive,
+        DynamoDB.ScanPolicyLive,
+        DynamoDB.TableProvider(),
+        DynamoDB.TransactGetItemsPolicyLive,
+        DynamoDB.TransactWriteItemsPolicyLive,
+        DynamoDB.UpdateItemPolicyLive,
+        DynamoDB.UpdateTimeToLivePolicyLive,
+        EC2.EgressOnlyInternetGatewayProvider(),
+        EC2.EIPProvider(),
+        EC2.InstanceProvider(),
+        EC2.InternetGatewayProvider(),
+        EC2.NatGatewayProvider(),
+        EC2.NetworkAclAssociationProvider(),
+        EC2.NetworkAclEntryProvider(),
+        EC2.NetworkAclProvider(),
+        EC2.RouteProvider(),
+        EC2.RouteTableAssociationProvider(),
+        EC2.RouteTableProvider(),
+        EC2.SecurityGroupProvider(),
+        EC2.SecurityGroupRuleProvider(),
+        EC2.SubnetProvider(),
+        EC2.VpcEndpointProvider(),
+        EC2.VpcProvider(),
+        ECR.RepositoryProvider(),
+        ECS.ClusterProvider(),
+        ECS.DescribeTasksPolicyLive,
+        ECS.ListTasksPolicyLive,
+        ECS.RunTaskPolicyLive,
+        ECS.ServiceProvider(),
+        ECS.StopTaskPolicyLive,
+        ECS.TaskProvider(),
+        EKS.AccessEntryProvider(),
+        EKS.AddonProvider(),
+        EKS.ClusterProvider(),
+        EKS.PodIdentityAssociationProvider(),
+        ELBv2.ListenerProvider(),
+        ELBv2.LoadBalancerProvider(),
+        ELBv2.TargetGroupProvider(),
+        EventBridge.DescribeEventBusPolicyLive,
+        EventBridge.DescribeRulePolicyLive,
+        EventBridge.EventBusProvider(),
+        EventBridge.ListEventBusesPolicyLive,
+        EventBridge.ListRulesPolicyLive,
+        EventBridge.ListTargetsByRulePolicyLive,
+        EventBridge.PermissionProvider(),
+        EventBridge.PutEventsPolicyLive,
+        EventBridge.RuleProvider(),
+        EventBridge.TestEventPatternPolicyLive,
+        EventBridge.ToLambdaPolicyLive,
+        EventBridge.ToQueuePolicyLive,
+        IAM.AccessKeyProvider(),
+        IAM.AccountAliasProvider(),
+        IAM.AccountPasswordPolicyProvider(),
+        IAM.GroupMembershipProvider(),
+        IAM.GroupProvider(),
+        IAM.InstanceProfileProvider(),
+        IAM.LoginProfileProvider(),
+        IAM.OpenIDConnectProviderProvider(),
+        IAM.PolicyProvider(),
+        IAM.RoleProvider(),
+        IAM.SAMLProviderProvider(),
+        IAM.ServerCertificateProvider(),
+        IAM.ServiceSpecificCredentialProvider(),
+        IAM.SigningCertificateProvider(),
+        IAM.SSHPublicKeyProvider(),
+        IAM.UserProvider(),
+        IAM.VirtualMFADeviceProvider(),
+        IdentityCenter.AccountAssignmentProvider(),
+        IdentityCenter.GroupProvider(),
+        IdentityCenter.InstanceProvider(),
+        IdentityCenter.PermissionSetProvider(),
+        Kinesis.DescribeAccountSettingsPolicyLive,
+        Kinesis.DescribeLimitsPolicyLive,
+        Kinesis.DescribeStreamConsumerPolicyLive,
+        Kinesis.DescribeStreamPolicyLive,
+        Kinesis.DescribeStreamSummaryPolicyLive,
+        Kinesis.GetRecordsPolicyLive,
+        Kinesis.GetResourcePolicyPolicyLive,
+        Kinesis.GetShardIteratorPolicyLive,
+        Kinesis.ListShardsPolicyLive,
+        Kinesis.ListStreamConsumersPolicyLive,
+        Kinesis.ListStreamsPolicyLive,
+        Kinesis.ListTagsForResourcePolicyLive,
+        Kinesis.PutRecordPolicyLive,
+        Kinesis.PutRecordsPolicyLive,
+        Kinesis.StreamConsumerProvider(),
+        Kinesis.StreamProvider(),
+        Kinesis.StreamSinkPolicyLive,
+        Kinesis.SubscribeToShardPolicyLive,
+        Lambda.BucketEventSourcePolicyLive,
+        Lambda.EventSourceMappingProvider(),
+        Lambda.EventSourcePolicyLive,
+        Lambda.FunctionProvider(),
+        Lambda.InvokeFunctionPolicyLive,
+        Lambda.PermissionProvider(),
+        Lambda.QueueEventSourcePolicyLive,
+        Lambda.StreamEventSourcePolicyLive,
+        Lambda.TableEventSourcePolicyLive,
+        Lambda.TopicEventSourcePolicyLive,
+        Logs.LogGroupProvider(),
+        Organizations.AccountProvider(),
+        Organizations.DelegatedAdministratorProvider(),
+        Organizations.OrganizationalUnitProvider(),
+        Organizations.OrganizationProvider(),
+        Organizations.OrganizationResourcePolicyProvider(),
+        Organizations.PolicyAttachmentProvider(),
+        Organizations.PolicyProvider(),
+        Organizations.RootPolicyTypeProvider(),
+        Organizations.RootProvider(),
+        Organizations.TrustedServiceAccessProvider(),
+        RDS.ConnectPolicyLive,
+        RDS.DBClusterEndpointProvider(),
+        RDS.DBClusterParameterGroupProvider(),
+        RDS.DBClusterProvider(),
+        RDS.DBInstanceProvider(),
+        RDS.DBParameterGroupProvider(),
+        RDS.DBProxyEndpointProvider(),
+        RDS.DBProxyProvider(),
+        RDS.DBProxyTargetGroupProvider(),
+        RDS.DBSubnetGroupProvider(),
+        RDSData.BatchExecuteStatementPolicyLive,
+        RDSData.BeginTransactionPolicyLive,
+        RDSData.CommitTransactionPolicyLive,
+        RDSData.ExecuteSqlPolicyLive,
+        RDSData.ExecuteStatementPolicyLive,
+        RDSData.RollbackTransactionPolicyLive,
+        Route53.RecordProvider(),
+        S3.AbortMultipartUploadPolicyLive,
+        S3.BucketProvider(),
+        S3.CompleteMultipartUploadPolicyLive,
+        S3.CopyObjectPolicyLive,
+        S3.CreateMultipartUploadPolicyLive,
+        S3.DeleteObjectPolicyLive,
+        S3.GetObjectPolicyLive,
+        S3.HeadObjectPolicyLive,
+        S3.ListObjectsV2PolicyLive,
+        S3.PutObjectPolicyLive,
+        S3.UploadPartPolicyLive,
+        Scheduler.ScheduleGroupProvider(),
+        Scheduler.ScheduleProvider(),
+        SecretsManager.DescribeSecretPolicyLive,
+        SecretsManager.GetRandomPasswordPolicyLive,
+        SecretsManager.GetSecretValuePolicyLive,
+        SecretsManager.ListSecretsPolicyLive,
+        SecretsManager.PutSecretValuePolicyLive,
+        SecretsManager.SecretProvider(),
+        SNS.AddPermissionPolicyLive,
+        SNS.ConfirmSubscriptionPolicyLive,
+        SNS.GetDataProtectionPolicyPolicyLive,
+        SNS.GetSubscriptionAttributesPolicyLive,
+        SNS.GetTopicAttributesPolicyLive,
+        SNS.ListSubscriptionsByTopicPolicyLive,
+        SNS.ListSubscriptionsPolicyLive,
+        SNS.ListTagsForResourcePolicyLive,
+        SNS.ListTopicsPolicyLive,
+        SNS.PublishBatchPolicyLive,
+        SNS.PublishPolicyLive,
+        SNS.PutDataProtectionPolicyPolicyLive,
+        SNS.RemovePermissionPolicyLive,
+        SNS.SetSubscriptionAttributesPolicyLive,
+        SNS.SetTopicAttributesPolicyLive,
+        SNS.SubscriptionProvider(),
+        SNS.TagResourcePolicyLive,
+        SNS.TopicProvider(),
+        SNS.TopicSinkPolicyLive,
+        SNS.UntagResourcePolicyLive,
+        SQS.DeleteMessageBatchPolicyLive,
+        SQS.DeleteMessagePolicyLive,
+        SQS.QueueProvider(),
+        SQS.QueueSinkPolicyLive,
+        SQS.ReceiveMessagePolicyLive,
+        SQS.SendMessageBatchPolicyLive,
+        SQS.SendMessagePolicyLive,
+        Website.AssetDeploymentProvider(),
+      ),
+    ),
+    Layer.provideMerge(
+      Layer.mergeAll(
+        CommandProvider(),
+        RandomProvider(),
+        Assets.AssetsProvider(),
+      ),
+    ),
+    Layer.provideMerge(Region.fromEnvironment),
+    Layer.provideMerge(Credentials.fromEnvironment),
+    Layer.provideMerge(Endpoint.fromEnvironment),
+    Layer.provideMerge(DefaultEnvironment),
+    Layer.provideMerge(AwsAuth),
     Layer.orDie,
   );
-
-export const stageConfig = () =>
-  Layer.effect(StageConfig, Effect.suspend(loadDefaultStageConfig));
-
-/**
- * Minimal AWS credential and account context without registering any resource
- * providers.
- */
-export const credentials = () =>
-  pipe(
-    Account.fromStageConfig(),
-    Layer.provideMerge(Region.fromStageConfig()),
-    Layer.provideMerge(Credentials.fromStageConfig()),
-    Layer.provideMerge(Endpoint.fromStageConfig()),
-    Layer.provideMerge(stageConfig()),
-  );
-
-/**
- * All AWS resource providers.
- *
- * This layer registers the lifecycle providers that can create, read, update,
- * and delete AWS resources during plan and deploy.
- */
-export const resources = () =>
-  Layer.mergeAll(
-    buildProviders(),
-    acmProviders(),
-    autoScalingProviders(),
-    cloudFrontProviders(),
-    cloudWatchProviders(),
-    dynamoDbProviders(),
-    ec2Providers(),
-    ecrProviders(),
-    ecsProviders(),
-    eksProviders(),
-    elbv2Providers(),
-    eventBridgeProviders(),
-    iamProviders(),
-    identityCenterProviders(),
-    kinesisProviders(),
-    lambdaProviders(),
-    logsProviders(),
-    organizationsProviders(),
-    rdsProviders(),
-    route53Providers(),
-    s3Providers(),
-    schedulerProviders(),
-    secretsManagerProviders(),
-    snsProviders(),
-    sqsProviders(),
-    websiteProviders(),
-  );
-
-export const buildProviders = () =>
-  Layer.mergeAll(CommandProvider(), RandomProvider());
-
-export const acmProviders = () => Layer.mergeAll(ACM.CertificateProvider());
-
-export const autoScalingProviders = () =>
-  Layer.mergeAll(
-    AutoScaling.AutoScalingGroupProvider(),
-    AutoScaling.LaunchTemplateProvider(),
-    AutoScaling.ScalingPolicyProvider(),
-  );
-
-export const cloudFrontProviders = () =>
-  Layer.mergeAll(
-    CloudFront.DistributionProvider(),
-    CloudFront.FunctionProvider(),
-    CloudFront.InvalidationProvider(),
-    CloudFront.KeyValueStoreProvider(),
-    CloudFront.KvEntriesProvider(),
-    CloudFront.KvRoutesUpdateProvider(),
-    CloudFront.OriginAccessControlProvider(),
-  );
-
-export const cloudWatchProviders = () =>
-  Layer.mergeAll(
-    CloudWatch.AlarmMuteRuleProvider(),
-    CloudWatch.AlarmProvider(),
-    CloudWatch.AnomalyDetectorProvider(),
-    CloudWatch.CompositeAlarmProvider(),
-    CloudWatch.DashboardProvider(),
-    CloudWatch.InsightRuleProvider(),
-    CloudWatch.MetricStreamProvider(),
-  );
-
-export const dynamoDbProviders = () => Layer.mergeAll(DynamoDB.TableProvider());
-
-export const ec2Providers = () =>
-  Layer.mergeAll(
-    EC2.EgressOnlyInternetGatewayProvider(),
-    EC2.EIPProvider(),
-    EC2.InstanceProvider(),
-    EC2.InternetGatewayProvider(),
-    EC2.NatGatewayProvider(),
-    EC2.NetworkAclAssociationProvider(),
-    EC2.NetworkAclEntryProvider(),
-    EC2.NetworkAclProvider(),
-    EC2.RouteProvider(),
-    EC2.RouteTableAssociationProvider(),
-    EC2.RouteTableProvider(),
-    EC2.SecurityGroupProvider(),
-    EC2.SecurityGroupRuleProvider(),
-    EC2.SubnetProvider(),
-    EC2.VpcEndpointProvider(),
-    EC2.VpcProvider(),
-  );
-
-export const ecrProviders = () => Layer.mergeAll(ECR.RepositoryProvider());
-
-export const ecsProviders = () =>
-  Layer.mergeAll(
-    ECS.ClusterProvider(),
-    ECS.ServiceProvider(),
-    ECS.TaskProvider(),
-  );
-
-export const eksProviders = () =>
-  Layer.mergeAll(
-    EKS.AccessEntryProvider(),
-    EKS.AddonProvider(),
-    EKS.ClusterProvider(),
-    EKS.PodIdentityAssociationProvider(),
-  );
-
-export const elbv2Providers = () =>
-  Layer.mergeAll(
-    ELBv2.ListenerProvider(),
-    ELBv2.LoadBalancerProvider(),
-    ELBv2.TargetGroupProvider(),
-  );
-
-export const eventBridgeProviders = () =>
-  Layer.mergeAll(
-    EventBridge.EventBusProvider(),
-    EventBridge.PermissionProvider(),
-    EventBridge.RuleProvider(),
-  );
-
-export const iamProviders = () =>
-  Layer.mergeAll(
-    IAM.AccessKeyProvider(),
-    IAM.AccountAliasProvider(),
-    IAM.AccountPasswordPolicyProvider(),
-    IAM.GroupMembershipProvider(),
-    IAM.GroupProvider(),
-    IAM.InstanceProfileProvider(),
-    IAM.LoginProfileProvider(),
-    IAM.OpenIDConnectProviderProvider(),
-    IAM.PolicyProvider(),
-    IAM.RoleProvider(),
-    IAM.SAMLProviderProvider(),
-    IAM.ServerCertificateProvider(),
-    IAM.ServiceSpecificCredentialProvider(),
-    IAM.SigningCertificateProvider(),
-    IAM.SSHPublicKeyProvider(),
-    IAM.UserProvider(),
-    IAM.VirtualMFADeviceProvider(),
-  );
-
-export const identityCenterProviders = () =>
-  Layer.mergeAll(
-    IdentityCenter.AccountAssignmentProvider(),
-    IdentityCenter.GroupProvider(),
-    IdentityCenter.InstanceProvider(),
-    IdentityCenter.PermissionSetProvider(),
-  );
-
-export const kinesisProviders = () =>
-  Layer.mergeAll(Kinesis.StreamConsumerProvider(), Kinesis.StreamProvider());
-
-export const lambdaProviders = () =>
-  Layer.mergeAll(
-    Lambda.EventSourceMappingProvider(),
-    Lambda.FunctionProvider(),
-    Lambda.PermissionProvider(),
-  );
-
-export const logsProviders = () => Layer.mergeAll(Logs.LogGroupProvider());
-
-export const organizationsProviders = () =>
-  Layer.mergeAll(
-    Organizations.AccountProvider(),
-    Organizations.DelegatedAdministratorProvider(),
-    Organizations.OrganizationalUnitProvider(),
-    Organizations.OrganizationProvider(),
-    Organizations.OrganizationResourcePolicyProvider(),
-    Organizations.PolicyAttachmentProvider(),
-    Organizations.PolicyProvider(),
-    Organizations.RootPolicyTypeProvider(),
-    Organizations.RootProvider(),
-    Organizations.TrustedServiceAccessProvider(),
-  );
-
-export const rdsProviders = () =>
-  Layer.mergeAll(
-    RDS.DBClusterEndpointProvider(),
-    RDS.DBClusterParameterGroupProvider(),
-    RDS.DBClusterProvider(),
-    RDS.DBInstanceProvider(),
-    RDS.DBParameterGroupProvider(),
-    RDS.DBProxyEndpointProvider(),
-    RDS.DBProxyProvider(),
-    RDS.DBProxyTargetGroupProvider(),
-    RDS.DBSubnetGroupProvider(),
-  );
-
-export const route53Providers = () => Layer.mergeAll(Route53.RecordProvider());
-
-export const s3Providers = () => Layer.mergeAll(S3.BucketProvider());
-
-export const schedulerProviders = () =>
-  Layer.mergeAll(
-    Scheduler.ScheduleGroupProvider(),
-    Scheduler.ScheduleProvider(),
-  );
-
-export const secretsManagerProviders = () =>
-  Layer.mergeAll(SecretsManager.SecretProvider());
-
-export const snsProviders = () =>
-  Layer.mergeAll(SNS.SubscriptionProvider(), SNS.TopicProvider());
-
-export const sqsProviders = () => Layer.mergeAll(SQS.QueueProvider());
-
-export const websiteProviders = () =>
-  Layer.mergeAll(Website.AssetDeploymentProvider());
-
-/**
- * All AWS binding policies.
- *
- * These layers attach IAM statements and event-source bindings to functions at
- * deploy time so runtime bindings like `PutObject.bind(bucket)` can execute
- * with the required permissions.
- */
-export const bindings = () =>
-  Layer.mergeAll(
-    cloudWatchBindings(),
-    dynamoDbBindings(),
-    ecsBindings(),
-    eventBridgeBindings(),
-    kinesisBindings(),
-    lambdaBindings(),
-    rdsBindings(),
-    rdsDataBindings(),
-    s3Bindings(),
-    secretsManagerBindings(),
-    snsBindings(),
-    sqsBindings(),
-  );
-
-export const cloudWatchBindings = () =>
-  Layer.mergeAll(
-    CloudWatch.DescribeAlarmContributorsPolicyLive,
-    CloudWatch.DescribeAlarmHistoryPolicyLive,
-    CloudWatch.DescribeAlarmsForMetricPolicyLive,
-    CloudWatch.DescribeAlarmsPolicyLive,
-    CloudWatch.DescribeAnomalyDetectorsPolicyLive,
-    CloudWatch.DescribeInsightRulesPolicyLive,
-    CloudWatch.DisableAlarmActionsPolicyLive,
-    CloudWatch.DisableInsightRulesPolicyLive,
-    CloudWatch.EnableAlarmActionsPolicyLive,
-    CloudWatch.GetAlarmMuteRulePolicyLive,
-    CloudWatch.GetDashboardPolicyLive,
-    CloudWatch.GetInsightRuleReportPolicyLive,
-    CloudWatch.GetMetricDataPolicyLive,
-    CloudWatch.GetMetricStatisticsPolicyLive,
-    CloudWatch.GetMetricStreamPolicyLive,
-    CloudWatch.GetMetricWidgetImagePolicyLive,
-    CloudWatch.ListAlarmMuteRulesPolicyLive,
-    CloudWatch.ListDashboardsPolicyLive,
-    CloudWatch.ListManagedInsightRulesPolicyLive,
-    CloudWatch.ListMetricsPolicyLive,
-    CloudWatch.ListMetricStreamsPolicyLive,
-    CloudWatch.ListTagsForResourcePolicyLive,
-    CloudWatch.PutMetricDataPolicyLive,
-    CloudWatch.SetAlarmStatePolicyLive,
-  );
-
-export const dynamoDbBindings = () =>
-  Layer.mergeAll(
-    DynamoDB.BatchExecuteStatementPolicyLive,
-    DynamoDB.BatchGetItemPolicyLive,
-    DynamoDB.BatchWriteItemPolicyLive,
-    DynamoDB.DeleteItemPolicyLive,
-    DynamoDB.DescribeTablePolicyLive,
-    DynamoDB.DescribeTimeToLivePolicyLive,
-    DynamoDB.ExecuteStatementPolicyLive,
-    DynamoDB.ExecuteTransactionPolicyLive,
-    DynamoDB.GetItemPolicyLive,
-    DynamoDB.ListTablesPolicyLive,
-    DynamoDB.ListTagsOfResourcePolicyLive,
-    DynamoDB.PutItemPolicyLive,
-    DynamoDB.QueryPolicyLive,
-    DynamoDB.RestoreTableToPointInTimePolicyLive,
-    DynamoDB.ScanPolicyLive,
-    DynamoDB.TransactGetItemsPolicyLive,
-    DynamoDB.TransactWriteItemsPolicyLive,
-    DynamoDB.UpdateItemPolicyLive,
-    DynamoDB.UpdateTimeToLivePolicyLive,
-  );
-
-export const ecsBindings = () =>
-  Layer.mergeAll(
-    ECS.DescribeTasksPolicyLive,
-    ECS.ListTasksPolicyLive,
-    ECS.RunTaskPolicyLive,
-    ECS.StopTaskPolicyLive,
-  );
-
-export const eventBridgeBindings = () =>
-  Layer.mergeAll(
-    EventBridge.DescribeEventBusPolicyLive,
-    EventBridge.DescribeRulePolicyLive,
-    EventBridge.ListEventBusesPolicyLive,
-    EventBridge.ListRulesPolicyLive,
-    EventBridge.ListTargetsByRulePolicyLive,
-    EventBridge.PutEventsPolicyLive,
-    EventBridge.TestEventPatternPolicyLive,
-    EventBridge.ToLambdaPolicyLive,
-    EventBridge.ToQueuePolicyLive,
-  );
-
-export const kinesisBindings = () =>
-  Layer.mergeAll(
-    Kinesis.DescribeAccountSettingsPolicyLive,
-    Kinesis.DescribeLimitsPolicyLive,
-    Kinesis.DescribeStreamConsumerPolicyLive,
-    Kinesis.DescribeStreamPolicyLive,
-    Kinesis.DescribeStreamSummaryPolicyLive,
-    Kinesis.GetRecordsPolicyLive,
-    Kinesis.GetResourcePolicyPolicyLive,
-    Kinesis.GetShardIteratorPolicyLive,
-    Kinesis.ListShardsPolicyLive,
-    Kinesis.ListStreamConsumersPolicyLive,
-    Kinesis.ListStreamsPolicyLive,
-    Kinesis.ListTagsForResourcePolicyLive,
-    Kinesis.PutRecordPolicyLive,
-    Kinesis.PutRecordsPolicyLive,
-    Kinesis.StreamSinkPolicyLive,
-    Kinesis.SubscribeToShardPolicyLive,
-  );
-
-export const lambdaBindings = () =>
-  Layer.mergeAll(
-    Lambda.BucketEventSourcePolicyLive,
-    Lambda.QueueEventSourcePolicyLive,
-    Lambda.StreamEventSourcePolicyLive,
-    Lambda.TableEventSourcePolicyLive,
-    Lambda.TopicEventSourcePolicyLive,
-  );
-
-export const rdsBindings = () => Layer.mergeAll(RDS.ConnectPolicyLive);
-
-export const rdsDataBindings = () =>
-  Layer.mergeAll(
-    RDSData.BatchExecuteStatementPolicyLive,
-    RDSData.BeginTransactionPolicyLive,
-    RDSData.CommitTransactionPolicyLive,
-    RDSData.ExecuteSqlPolicyLive,
-    RDSData.ExecuteStatementPolicyLive,
-    RDSData.RollbackTransactionPolicyLive,
-  );
-
-export const s3Bindings = () =>
-  Layer.mergeAll(
-    S3.AbortMultipartUploadPolicyLive,
-    S3.CompleteMultipartUploadPolicyLive,
-    S3.CreateMultipartUploadPolicyLive,
-    S3.DeleteObjectPolicyLive,
-    S3.GetObjectPolicyLive,
-    S3.HeadObjectPolicyLive,
-    S3.ListObjectsV2PolicyLive,
-    S3.PutObjectPolicyLive,
-    S3.UploadPartPolicyLive,
-  );
-
-export const secretsManagerBindings = () =>
-  Layer.mergeAll(
-    SecretsManager.DescribeSecretPolicyLive,
-    SecretsManager.GetRandomPasswordPolicyLive,
-    SecretsManager.GetSecretValuePolicyLive,
-    SecretsManager.ListSecretsPolicyLive,
-    SecretsManager.PutSecretValuePolicyLive,
-  );
-
-export const snsBindings = () =>
-  Layer.mergeAll(
-    SNS.AddPermissionPolicyLive,
-    SNS.ConfirmSubscriptionPolicyLive,
-    SNS.GetDataProtectionPolicyPolicyLive,
-    SNS.GetSubscriptionAttributesPolicyLive,
-    SNS.GetTopicAttributesPolicyLive,
-    SNS.ListSubscriptionsByTopicPolicyLive,
-    SNS.ListSubscriptionsPolicyLive,
-    SNS.ListTagsForResourcePolicyLive,
-    SNS.ListTopicsPolicyLive,
-    SNS.PublishBatchPolicyLive,
-    SNS.PublishPolicyLive,
-    SNS.PutDataProtectionPolicyPolicyLive,
-    SNS.RemovePermissionPolicyLive,
-    SNS.SetSubscriptionAttributesPolicyLive,
-    SNS.SetTopicAttributesPolicyLive,
-    SNS.TagResourcePolicyLive,
-    SNS.TopicSinkPolicyLive,
-    SNS.UntagResourcePolicyLive,
-  );
-
-export const sqsBindings = () =>
-  Layer.mergeAll(
-    SQS.DeleteMessageBatchPolicyLive,
-    SQS.QueueSinkPolicyLive,
-    SQS.ReceiveMessagePolicyLive,
-    SQS.SendMessageBatchPolicyLive,
-    SQS.SendMessagePolicyLive,
-    // SQS.QueueEventSourcePolicyLive,
-  );