alchemy 2.0.0-beta.4 → 2.0.0-beta.41

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "alchemy",
-  "version": "2.0.0-beta.4",
+  "version": "2.0.0-beta.41",
   "homepage": "https://alchemy.run",
   "license": "Apache-2.0",
   "author": "Sam Goodwin <sam@alchemy.run>",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/alchemy-run/alchemy-effect.git",
-    "directory": "alchemy"
+    "directory": "packages/alchemy"
   },
   "bin": {
-    "alchemy": "bin/alchemy.sh"
+    "alchemy": "./bin/cli.js"
   },
   "files": [
     "bin",
@@ -21,7 +21,7 @@
   "sideEffects": false,
   "scripts": {
     "dev": "tsdown --watch",
-    "build": "bun bundle && bun pm pack",
+    "build": "bun bundle",
     "bundle": "tsdown",
     "bundle:watch": "tsdown --watch",
     "publish:npm": "cp ../README.md . && bun publish && rm README.md",
@@ -29,238 +29,322 @@
   },
   "exports": {
     ".": {
-      "types": "./src/index.ts",
+      "types": "./lib/index.d.ts",
       "bun": "./src/index.ts",
       "worker": "./src/index.ts",
       "import": "./lib/index.js"
     },
     "./*": {
-      "types": "./src/*.ts",
+      "types": "./lib/*.d.ts",
       "bun": "./src/*.ts",
-      "import": "./lib/*.js",
-      "worker": "./src/*.ts"
+      "worker": "./src/*.ts",
+      "import": "./lib/*.js"
     },
-    "./Agent": {
-      "types": "./src/Agent/index.ts",
-      "bun": "./src/Agent/index.ts",
-      "worker": "./src/Agent/index.ts",
-      "import": "./lib/Agent/index.js"
+    "./Auth": {
+      "types": "./lib/Auth/index.d.ts",
+      "bun": "./src/Auth/index.ts",
+      "worker": "./src/Auth/index.ts",
+      "import": "./lib/Auth/index.js"
     },
     "./AWS": {
-      "types": "./src/AWS/index.ts",
+      "types": "./lib/AWS/index.d.ts",
       "bun": "./src/AWS/index.ts",
       "worker": "./src/AWS/index.ts",
       "import": "./lib/AWS/index.js"
     },
     "./AWS/*": {
-      "types": "./src/AWS/*/index.ts",
+      "types": "./lib/AWS/*/index.d.ts",
       "bun": "./src/AWS/*/index.ts",
       "worker": "./src/AWS/*/index.ts",
       "import": "./lib/AWS/*/index.js"
     },
     "./AWS/Credentials": {
-      "types": "./src/AWS/Credentials/index.ts",
+      "types": "./lib/AWS/Credentials/index.d.ts",
       "bun": "./src/AWS/Credentials/index.ts",
       "worker": "./src/AWS/Credentials/index.ts",
       "import": "./lib/AWS/Credentials/index.js"
     },
     "./AWS/Endpoint": {
-      "types": "./src/AWS/Endpoint/index.ts",
+      "types": "./lib/AWS/Endpoint/index.d.ts",
       "bun": "./src/AWS/Endpoint/index.ts",
       "worker": "./src/AWS/Endpoint/index.ts",
       "import": "./lib/AWS/Endpoint/index.js"
     },
     "./AWS/Region": {
-      "types": "./src/AWS/Region/index.ts",
+      "types": "./lib/AWS/Region/index.d.ts",
       "bun": "./src/AWS/Region/index.ts",
       "worker": "./src/AWS/Region/index.ts",
       "import": "./lib/AWS/Region/index.js"
     },
     "./AWS/Profile": {
-      "types": "./src/AWS/Profile/index.ts",
+      "types": "./lib/AWS/Profile/index.d.ts",
       "bun": "./src/AWS/Profile/index.ts",
       "worker": "./src/AWS/Profile/index.ts",
       "import": "./lib/AWS/Profile/index.js"
     },
     "./AWS/Lambda/*": {
-      "types": "./src/AWS/Lambda/*.ts",
+      "types": "./lib/AWS/Lambda/*.d.ts",
       "bun": "./src/AWS/Lambda/*.ts",
       "worker": "./src/AWS/Lambda/*.ts",
       "import": "./lib/AWS/Lambda/*.js"
     },
     "./Build": {
-      "types": "./src/Build/index.ts",
+      "types": "./lib/Build/index.d.ts",
       "bun": "./src/Build/index.ts",
       "worker": "./src/Build/index.ts",
       "import": "./lib/Build/index.js"
     },
     "./Construct": {
-      "types": "./src/Construct/index.ts",
+      "types": "./lib/Construct/index.d.ts",
       "bun": "./src/Construct/index.ts",
       "worker": "./src/Construct/index.ts",
       "import": "./lib/Construct/index.js"
     },
     "./Bundle": {
-      "types": "./src/Bundle/index.ts",
+      "types": "./lib/Bundle/index.d.ts",
       "bun": "./src/Bundle/index.ts",
       "worker": "./src/Bundle/index.ts",
       "import": "./lib/Bundle/index.js"
     },
     "./ContentType": {
-      "types": "./src/ContentType.ts",
+      "types": "./lib/ContentType.d.ts",
       "bun": "./src/ContentType.ts",
       "worker": "./src/ContentType.ts",
       "import": "./lib/ContentType.js"
     },
+    "./Cli": {
+      "types": "./lib/Cli/index.d.ts",
+      "bun": "./src/Cli/index.ts",
+      "worker": "./src/Cli/index.ts",
+      "import": "./lib/Cli/index.js"
+    },
+    "./Cli/InkCLI": {
+      "types": "./lib/Cli/InkCLI.d.ts",
+      "bun": "./src/Cli/InkCLI.tsx",
+      "worker": "./src/Cli/InkCLI.tsx",
+      "import": "./lib/Cli/InkCLI.js"
+    },
     "./Cloudflare": {
-      "types": "./src/Cloudflare/index.ts",
+      "types": "./lib/Cloudflare/index.d.ts",
       "bun": "./src/Cloudflare/index.ts",
       "worker": "./src/Cloudflare/index.ts",
       "import": "./lib/Cloudflare/index.js"
     },
+    "./Cloudflare/Bridge": {
+      "types": "./lib/Cloudflare/Bridge.d.ts",
+      "bun": "./src/Cloudflare/Bridge.ts",
+      "worker": "./src/Cloudflare/Bridge.ts",
+      "import": "./lib/Cloudflare/Bridge.js"
+    },
     "./Cloudflare/Live": {
-      "types": "./src/Cloudflare/Live.ts",
+      "types": "./lib/Cloudflare/Live.d.ts",
       "bun": "./src/Cloudflare/Live.ts",
       "worker": "./src/Cloudflare/Live.ts",
       "import": "./lib/Cloudflare/Live.js"
     },
     "./Cloudflare/*": {
-      "types": "./src/Cloudflare/*/index.ts",
+      "types": "./lib/Cloudflare/*/index.d.ts",
       "bun": "./src/Cloudflare/*/index.ts",
       "worker": "./src/Cloudflare/*/index.ts",
       "import": "./lib/Cloudflare/*/index.js"
     },
+    "./Drizzle": {
+      "types": "./lib/Drizzle/index.d.ts",
+      "bun": "./src/Drizzle/index.ts",
+      "worker": "./src/Drizzle/index.ts",
+      "import": "./lib/Drizzle/index.js"
+    },
+    "./Axiom": {
+      "types": "./lib/Axiom/index.d.ts",
+      "bun": "./src/Axiom/index.ts",
+      "worker": "./src/Axiom/index.ts",
+      "import": "./lib/Axiom/index.js"
+    },
     "./GitHub": {
-      "types": "./src/GitHub/index.ts",
+      "types": "./lib/GitHub/index.d.ts",
       "bun": "./src/GitHub/index.ts",
       "worker": "./src/GitHub/index.ts",
       "import": "./lib/GitHub/index.js"
     },
     "./Endpoint": {
-      "types": "./src/Endpoint/index.ts",
+      "types": "./lib/Endpoint/index.d.ts",
       "bun": "./src/Endpoint/index.ts",
       "worker": "./src/Endpoint/index.ts",
       "import": "./lib/Endpoint/index.js"
     },
     "./Kubernetes": {
-      "types": "./src/Kubernetes/index.ts",
+      "types": "./lib/Kubernetes/index.d.ts",
       "bun": "./src/Kubernetes/index.ts",
       "worker": "./src/Kubernetes/index.ts",
       "import": "./lib/Kubernetes/index.js"
     },
+    "./Neon": {
+      "types": "./lib/Neon/index.d.ts",
+      "bun": "./src/Neon/index.ts",
+      "worker": "./src/Neon/index.ts",
+      "import": "./lib/Neon/index.js"
+    },
+    "./Neon/*": {
+      "types": "./lib/Neon/*/index.d.ts",
+      "bun": "./src/Neon/*/index.ts",
+      "worker": "./src/Neon/*/index.ts",
+      "import": "./lib/Neon/*/index.js"
+    },
     "./Output": {
-      "types": "./src/Output.ts",
+      "types": "./lib/Output.d.ts",
       "bun": "./src/Output.ts",
       "worker": "./src/Output.ts",
       "import": "./lib/Output.js"
     },
+    "./Runtime": {
+      "types": "./lib/Runtime.d.ts",
+      "bun": "./src/Runtime.ts",
+      "worker": "./src/Runtime.ts",
+      "import": "./lib/Runtime.js"
+    },
     "./Process": {
-      "types": "./src/Process/index.ts",
+      "types": "./lib/Process/index.d.ts",
       "bun": "./src/Process/index.ts",
       "worker": "./src/Process/index.ts",
       "import": "./lib/Process/index.js"
     },
     "./SQLite": {
-      "types": "./src/SQLite/index.ts",
+      "types": "./lib/SQLite/index.d.ts",
       "bun": "./src/SQLite/index.ts",
       "worker": "./src/SQLite/index.ts",
       "import": "./lib/SQLite/index.js"
     },
     "./TUI": {
-      "types": "./src/TUI/index.ts",
+      "types": "./lib/TUI/index.d.ts",
       "bun": "./src/TUI/index.ts",
       "worker": "./src/TUI/index.ts",
       "import": "./lib/TUI/index.js"
     },
     "./Server": {
-      "types": "./src/Server/index.ts",
+      "types": "./lib/Server/index.d.ts",
       "bun": "./src/Server/index.ts",
       "worker": "./src/Server/index.ts",
       "import": "./lib/Server/index.js"
     },
+    "./Stack": {
+      "types": "./lib/Stack.d.ts",
+      "bun": "./src/Stack.ts",
+      "worker": "./src/Stack.ts",
+      "import": "./lib/Stack.js"
+    },
     "./State": {
-      "types": "./src/State/index.ts",
+      "types": "./lib/State/index.d.ts",
       "bun": "./src/State/index.ts",
       "worker": "./src/State/index.ts",
       "import": "./lib/State/index.js"
     },
+    "./State/*": {
+      "types": "./lib/State/*.d.ts",
+      "bun": "./src/State/*.ts",
+      "worker": "./src/State/*.ts",
+      "import": "./lib/State/*.js"
+    },
     "./Test/Bun": {
-      "types": "./src/Test/Bun.ts",
+      "types": "./lib/Test/Bun.d.ts",
       "bun": "./src/Test/Bun.ts",
       "worker": "./src/Test/Bun.ts",
       "import": "./lib/Test/Bun.js"
     },
     "./Util": {
-      "types": "./src/Util/index.ts",
+      "types": "./lib/Util/index.d.ts",
       "bun": "./src/Util/index.ts",
       "worker": "./src/Util/index.ts",
       "import": "./lib/Util/index.js"
-    }
+    },
+    "./Util/Clank": {
+      "types": "./lib/Util/Clank.d.ts",
+      "bun": "./src/Util/Clank.ts",
+      "worker": "./src/Util/Clank.ts",
+      "import": "./lib/Util/Clank.js"
+    },
+    "./Util/PlatformServices": {
+      "types": "./lib/Util/PlatformServices.d.ts",
+      "bun": "./src/Util/PlatformServices.ts",
+      "worker": "./src/Util/PlatformServices.ts",
+      "import": "./lib/Util/PlatformServices.js"
+    },
+    "./bin/alchemy.js": "./bin/alchemy.js",
+    "./bin/exec.ts": "./bin/exec.ts",
+    "./bin/exec.js": "./bin/exec.js"
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@clack/prompts": "^0.11.0",
-    "@ai-sdk/anthropic": "^3.0.31",
-    "@ai-sdk/openai": "^3.0.23",
-    "@ai-sdk/provider": "^3.0.8",
+    "@alchemy.run/node-utils": "0.0.2",
     "@aws-sdk/credential-providers": "^3.0.0",
-    "@distilled.cloud/aws": "^0.10.2",
-    "@distilled.cloud/cloudflare": "^0.10.2",
-    "@distilled.cloud/cloudflare-rolldown-plugin": "0.3.0",
-    "@distilled.cloud/cloudflare-vite-plugin": "0.2.0",
-    "@distilled.cloud/core": "^0.10.2",
-    "@effect/vitest": "4.0.0-beta.48",
+    "@clack/prompts": "^0.11.0",
+    "@distilled.cloud/aws": "^0.21.0",
+    "@distilled.cloud/axiom": "^0.21.0",
+    "@distilled.cloud/cloudflare": "^0.21.0",
+    "@distilled.cloud/cloudflare-rolldown-plugin": "0.5.4",
+    "@distilled.cloud/cloudflare-runtime": "0.5.4",
+    "@distilled.cloud/cloudflare-vite-plugin": "0.5.4",
+    "@distilled.cloud/core": "^0.21.0",
+    "@distilled.cloud/neon": "^0.21.0",
+    "@effect/vitest": ">=4.0.0-beta.66 || >=4.0.0",
     "@libsql/client": "^0.17.0",
     "@octokit/rest": "^22.0.1",
     "@smithy/node-config-provider": "^4.0.0",
     "@smithy/shared-ini-file-loader": "^4.3.4",
     "@smithy/types": "^4.8.1",
     "@types/aws-lambda": "^8.10.152",
-    "@types/libsodium-wrappers": "^0.8.2",
-    "ai": "^6.0.62",
     "aws4fetch": "^1.0.20",
-    "capnp-es": "^0.0.14",
-    "cloudflare": "^5.2.0",
+    "capnweb": "^0.6.1",
     "fast-glob": "^3.3.2",
     "fast-xml-parser": "^5.3.4",
-    "ignore": "^7.0.5",
+    "foreground-child": "^4.0.3",
+    "ink": "^6.3.1",
     "jszip": "^3.10.1",
     "libsodium-wrappers": "^0.8.3",
-    "rolldown": "1.0.0-rc.13",
-    "solid-js": "latest",
+    "magic-string": "^0.30.21",
+    "pathe": "^2.0.3",
+    "pg": "^8.13.0",
+    "picomatch": "^4.0.4",
+    "react": "^19.2.0",
+    "rolldown": "1.0.0-rc.17",
     "sonda": "^0.11.1",
-    "web-tree-sitter": "0.25.10",
-    "workerd": "1.20260412.1",
+    "undici": "^7.16.0",
     "yaml": "^2.0.0"
   },
   "devDependencies": {
     "@clack/prompts": "^0.11.0",
     "@cloudflare/workers-types": "^4.20250805.0",
-    "@effect/platform-bun": "4.0.0-beta.48",
-    "@effect/platform-node": "4.0.0-beta.48",
-    "@effect/platform-node-shared": "4.0.0-beta.48",
+    "@effect/platform-bun": ">=4.0.0-beta.66 || >=4.0.0",
+    "@effect/platform-node": ">=4.0.0-beta.66 || >=4.0.0",
+    "@effect/platform-node-shared": ">=4.0.0-beta.66 || >=4.0.0",
+    "@oxc-project/types": "^0.127.0",
+    "@types/pg": "^8.11.0",
     "@types/aws-lambda": "^8.10.152",
     "@types/bun": "latest",
     "@types/node": "latest",
+    "@types/picomatch": "^4.0.0",
     "@types/react": "^19.2.2",
+    "@types/ws": "^8.18.1",
     "better-auth": "^1.6.2",
-    "effect": "4.0.0-beta.48",
-    "ink": "^6.3.1",
-    "pathe": "^2.0.3",
-    "react": "^19.2.0",
+    "effect": ">=4.0.0-beta.66 || >=4.0.0",
     "react-devtools-core": "^7.0.1",
+    "solid-js": "latest",
     "tsconfig-paths": "^4.2.0",
     "tsdown": "^0.15.4",
     "tsx": "^4.20.6",
-    "typescript": "^5.9.3"
+    "typescript": "^6.0.3",
+    "ws": "^8.20.0"
   },
   "peerDependencies": {
-    "@effect/platform-bun": "*",
-    "@effect/platform-node": "*",
-    "effect": "*",
-    "vite": "^8.0.7"
+    "@effect/platform-bun": ">=4.0.0-beta.66 || >=4.0.0",
+    "@effect/platform-node": ">=4.0.0-beta.66 || >=4.0.0",
+    "@effect/sql-pg": ">=4.0.0-beta.66 || >=4.0.0",
+    "drizzle-kit": ">=1.0.0-rc.1",
+    "drizzle-orm": ">=1.0.0-rc.1",
+    "effect": ">=4.0.0-beta.66 || >=4.0.0",
+    "vite": "^8.0.7",
+    "ws": "^8.20.0"
   },
   "peerDependenciesMeta": {
     "@effect/platform-node": {
@@ -269,11 +353,20 @@
     "@effect/platform-bun": {
       "optional": true
     },
-    "effect": {
+    "@effect/sql-pg": {
+      "optional": true
+    },
+    "drizzle-kit": {
+      "optional": true
+    },
+    "drizzle-orm": {
       "optional": true
     },
     "vite": {
       "optional": true
+    },
+    "ws": {
+      "optional": true
     }
   }
 }

package/src/AWS/ACM/Certificate.ts

@@ -338,16 +338,34 @@ export const CertificateProvider = () =>
           const tags = yield* listCertificateTags(certificate.CertificateArn);
           return toAttrs(olds!, certificate, tags);
         }),
-        create: Effect.fn(function* ({ id, instanceId, news, session }) {
-          const tags = {
-            ...(yield* createInternalTags(id)),
-            ...news.tags,
-          };
-
-          const existing = yield* findManagedCertificate(id, news);
-          const certificate =
-            existing ??
-            (yield* withAcmRegion(
+        reconcile: Effect.fn(function* ({
+          id,
+          instanceId,
+          news,
+          output,
+          session,
+        }) {
+          const internalTags = yield* createInternalTags(id);
+          const desiredTags = { ...internalTags, ...news.tags };
+
+          // Observe — find the live certificate. Domain + SAN combo plus
+          // alchemy-owned tags identify a certificate uniquely; if we have
+          // a cached ARN, prefer that as the fast path. ACM certificates
+          // can't be renamed, and most fields trigger replace via diff,
+          // so the only real ensure path is "request if no managed
+          // certificate exists".
+          let certificate = output?.certificateArn
+            ? yield* describeCertificate(output.certificateArn)
+            : undefined;
+          if (!certificate?.CertificateArn) {
+            certificate = yield* findManagedCertificate(id, news);
+          }
+
+          // Ensure — request a new certificate if none exists. The
+          // `IdempotencyToken` (derived from `instanceId`) makes the
+          // request safe to retry.
+          if (!certificate?.CertificateArn) {
+            certificate = yield* withAcmRegion(
               acm
                 .requestCertificate({
                   DomainName: news.domainName,
@@ -364,7 +382,7 @@ export const CertificateProvider = () =>
                   IdempotencyToken: instanceId
                     .replaceAll(/[^a-zA-Z0-9]/g, "")
                     .slice(0, 32),
-                  Tags: createTagsList(tags),
+                  Tags: createTagsList(desiredTags),
                 })
                 .pipe(
                   Effect.flatMap((response) =>
@@ -379,7 +397,8 @@ export const CertificateProvider = () =>
                         ),
                   ),
                 ),
-            ));
+            );
+          }
 
           if (!certificate?.CertificateArn) {
             return yield* Effect.fail(
@@ -387,64 +406,48 @@ export const CertificateProvider = () =>
             );
           }
 
-          yield* session.note(certificate.CertificateArn);
+          const certificateArn = certificate.CertificateArn;
+          yield* session.note(certificateArn);
 
+          // Sync DNS validation. If the user wired a hostedZoneId, ensure
+          // validation records are upserted and the cert reaches `ISSUED`.
+          // For an already-issued cert this is mostly a fast-path: we only
+          // wait for validation records when the cert isn't already issued.
           const shouldAutoValidate =
             (news.validationMethod ?? defaultValidationMethod) === "DNS" &&
             news.hostedZoneId !== undefined;
 
-          const finalCertificate = shouldAutoValidate
-            ? yield* Effect.gen(function* () {
-                const withRecords = yield* waitForValidationRecords(
-                  certificate.CertificateArn!,
-                );
-                yield* upsertValidationRecords(news.hostedZoneId!, withRecords);
-                return yield* waitForIssued(certificate.CertificateArn!);
-              })
-            : certificate;
+          if (shouldAutoValidate && certificate.Status !== "ISSUED") {
+            const withRecords = yield* waitForValidationRecords(certificateArn);
+            yield* upsertValidationRecords(news.hostedZoneId!, withRecords);
+            certificate = yield* waitForIssued(certificateArn);
+          }
 
-          const listedTags = yield* listCertificateTags(
-            certificate.CertificateArn,
-          );
-          return toAttrs(news, finalCertificate, listedTags);
-        }),
-        update: Effect.fn(function* ({ id, olds, news, output, session }) {
-          const oldTags = {
-            ...(yield* createInternalTags(id)),
-            ...olds.tags,
-          };
-          const newTags = {
-            ...(yield* createInternalTags(id)),
-            ...news.tags,
-          };
-          const { removed, upsert } = diffTags(oldTags, newTags);
+          // Sync tags — diff observed cloud tags against desired so
+          // adoption rewrites ownership tags correctly.
+          const observedTags = yield* listCertificateTags(certificateArn);
+          const { removed, upsert } = diffTags(observedTags, desiredTags);
 
           if (upsert.length > 0) {
             yield* withAcmRegion(
               acm.addTagsToCertificate({
-                CertificateArn: output.certificateArn,
+                CertificateArn: certificateArn,
                 Tags: upsert,
               }),
             );
           }
-
           if (removed.length > 0) {
             yield* withAcmRegion(
               acm.removeTagsFromCertificate({
-                CertificateArn: output.certificateArn,
+                CertificateArn: certificateArn,
                 Tags: removed.map((Key) => ({ Key })),
               }),
             );
           }
 
-          const detail = yield* describeCertificate(output.certificateArn);
-          if (!detail?.CertificateArn) {
-            return output;
-          }
-
-          yield* session.note(output.certificateArn);
-          const tags = yield* listCertificateTags(output.certificateArn);
-          return toAttrs(news, detail, tags);
+          // Re-read so the returned attributes reflect any tag mutation.
+          const finalTags = yield* listCertificateTags(certificateArn);
+          return toAttrs(news, certificate, finalTags);
         }),
         delete: Effect.fn(function* ({ output }) {
           yield* withAcmRegion(