alchemy 2.0.0-beta.55 → 2.0.0-beta.56

package/lib/Cloudflare/MagicCloudNetworking/OnRamp.js

@@ -0,0 +1,301 @@
+import * as mcn from "@distilled.cloud/cloudflare/magic-cloud-networking";
+import * as Effect from "effect/Effect";
+import * as Predicate from "effect/Predicate";
+import * as Stream from "effect/Stream";
+import { Unowned } from "../../AdoptPolicy.js";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+const OnRampTypeId = "Cloudflare.MagicCloudNetworking.OnRamp";
+/**
+ * A Magic Cloud Networking on-ramp — connects cloud VPCs/VNets to Magic WAN
+ * by provisioning VPN/Transit-Gateway constructs inside the cloud account
+ * registered via a `CloudIntegration`.
+ *
+ * On-ramps are heavily eventually consistent: after create/update the
+ * on-ramp goes through plan/apply phases that provision real cloud
+ * infrastructure (minutes). This resource creates and patches the on-ramp
+ * configuration and returns immediately; the apply lifecycle is driven by
+ * Cloudflare.
+ *
+ * `name`, `description`, `vpc`, route-installation flags, and attachments
+ * are patched in place; `cloudType`, `type`, `dynamicRouting`, `region`,
+ * `cloudAsn`, and hub identity force a replacement.
+ *
+ * Magic Cloud Networking is an entitlement-gated add-on (Magic WAN family).
+ * On accounts without the entitlement every API call fails with the typed
+ * `FeatureNotEnabled` error (Cloudflare code 1012, "feature not enabled").
+ *
+ * @section Connecting a single VPC
+ * @example AWS VPC on-ramp
+ * ```typescript
+ * const onramp = yield* Cloudflare.OnRamp("ProdVpc", {
+ *   cloudType: "AWS",
+ *   type: "OnrampTypeSingle",
+ *   region: "us-east-1",
+ *   vpc: discoveredVpcId,
+ *   dynamicRouting: false,
+ *   installRoutesInCloud: true,
+ *   installRoutesInMagicWan: true,
+ * });
+ * ```
+ *
+ * @section Hub topologies
+ * @example Transit Gateway hub with attached VPCs
+ * ```typescript
+ * yield* Cloudflare.OnRamp("TgwHub", {
+ *   cloudType: "AWS",
+ *   type: "OnrampTypeHub",
+ *   region: "us-east-1",
+ *   dynamicRouting: true,
+ *   installRoutesInCloud: false,
+ *   installRoutesInMagicWan: false,
+ *   attachedVpcs: [vpcA, vpcB],
+ *   manageVpcToHubAttachments: true,
+ * });
+ * ```
+ *
+ * @section Destroy behavior
+ * @example Tear down cloud-side resources on destroy
+ * ```typescript
+ * yield* Cloudflare.OnRamp("ProdVpc", {
+ *   cloudType: "AWS",
+ *   type: "OnrampTypeSingle",
+ *   region: "us-east-1",
+ *   vpc: discoveredVpcId,
+ *   dynamicRouting: false,
+ *   installRoutesInCloud: true,
+ *   installRoutesInMagicWan: true,
+ *   destroyOnDelete: true,
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/magic-cloud-networking/
+ */
+export const OnRamp = Resource(OnRampTypeId);
+/**
+ * Returns true if the given value is an OnRamp resource.
+ */
+export const isOnRamp = (value) => Predicate.hasProperty(value, "Type") && value.Type === OnRampTypeId;
+export const OnRampProvider = () => Provider.succeed(OnRamp, {
+    stables: [
+        "onRampId",
+        "accountId",
+        "cloudType",
+        "type",
+        "dynamicRouting",
+        "cloudAsn",
+    ],
+    diff: Effect.fn(function* ({ olds, news, output }) {
+        if (!isResolved(news))
+            return undefined;
+        const old = olds !== undefined && isResolved(olds) ? olds : undefined;
+        // Immutable identity/topology properties — the PATCH body accepts
+        // none of these, so any change is a replacement.
+        const oldCloudType = output?.cloudType ?? old?.cloudType;
+        if (oldCloudType !== undefined && oldCloudType !== news.cloudType) {
+            return { action: "replace" };
+        }
+        const oldType = output?.type ?? old?.type;
+        if (oldType !== undefined && oldType !== news.type) {
+            return { action: "replace" };
+        }
+        const oldDynamicRouting = output?.dynamicRouting ?? old?.dynamicRouting;
+        if (oldDynamicRouting !== undefined &&
+            oldDynamicRouting !== news.dynamicRouting) {
+            return { action: "replace" };
+        }
+        if (old !== undefined) {
+            if (old.region !== news.region) {
+                return { action: "replace" };
+            }
+            if (old.cloudAsn !== news.cloudAsn) {
+                return { action: "replace" };
+            }
+            if (old.adoptedHubId !== news.adoptedHubId) {
+                return { action: "replace" };
+            }
+            if (old.hubProviderId !== news.hubProviderId) {
+                return { action: "replace" };
+            }
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ id, output, olds }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const acct = output?.accountId ?? accountId;
+        const destroyOnDelete = output?.destroyOnDelete ?? olds?.destroyOnDelete ?? false;
+        // Owned path: refresh by our persisted on-ramp id.
+        if (output?.onRampId) {
+            const observed = yield* getOnRamp(acct, output.onRampId);
+            if (observed)
+                return toAttributes(observed, acct, destroyOnDelete);
+            return undefined;
+        }
+        // Cold read — recover from lost state by matching the deterministic
+        // physical name. On-ramps carry no ownership markers, so report a
+        // match as Unowned and let the engine gate adoption.
+        const name = yield* onRampName(id, olds?.name);
+        const match = yield* findByName(acct, name);
+        return match
+            ? Unowned(toAttributes(match, acct, destroyOnDelete))
+            : undefined;
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const name = yield* onRampName(id, news.name);
+        const destroyOnDelete = news.destroyOnDelete ?? false;
+        // 1. Observe — the id cached on `output` is a hint, not a guarantee:
+        //    a missing on-ramp falls through to the name scan and create.
+        let observed = output?.onRampId
+            ? yield* getOnRamp(output.accountId ?? accountId, output.onRampId)
+            : undefined;
+        if (!observed) {
+            observed = yield* findByName(accountId, name);
+        }
+        // 2. Ensure — create when missing. Names are not unique on
+        //    Cloudflare's side so there is no AlreadyExists race to tolerate.
+        if (!observed) {
+            observed = yield* mcn.createOnRamp({
+                accountId,
+                name,
+                cloudType: news.cloudType,
+                type: news.type,
+                dynamicRouting: news.dynamicRouting,
+                installRoutesInCloud: news.installRoutesInCloud,
+                installRoutesInMagicWan: news.installRoutesInMagicWan,
+                region: news.region,
+                vpc: news.vpc,
+                cloudAsn: news.cloudAsn,
+                description: news.description,
+                adoptedHubId: news.adoptedHubId,
+                hubProviderId: news.hubProviderId,
+                attachedHubs: news.attachedHubs,
+                attachedVpcs: news.attachedVpcs,
+                manageHubToHubAttachments: news.manageHubToHubAttachments,
+                manageVpcToHubAttachments: news.manageVpcToHubAttachments,
+            });
+            return toAttributes(observed, accountId, destroyOnDelete);
+        }
+        // 3. Sync — diff observed cloud state against desired; PATCH only the
+        //    delta and skip the call entirely on a no-op.
+        const patch = {
+            accountId,
+            onrampId: observed.id,
+        };
+        let dirty = false;
+        if (observed.name !== name) {
+            patch.name = name;
+            dirty = true;
+        }
+        if (news.description !== undefined &&
+            (observed.description ?? "") !== news.description) {
+            patch.description = news.description;
+            dirty = true;
+        }
+        if (news.vpc !== undefined && (observed.vpc ?? "") !== news.vpc) {
+            patch.vpc = news.vpc;
+            dirty = true;
+        }
+        if (observed.installRoutesInCloud !== news.installRoutesInCloud) {
+            patch.installRoutesInCloud = news.installRoutesInCloud;
+            dirty = true;
+        }
+        if (observed.installRoutesInMagicWan !== news.installRoutesInMagicWan) {
+            patch.installRoutesInMagicWan = news.installRoutesInMagicWan;
+            dirty = true;
+        }
+        if (news.attachedHubs !== undefined &&
+            !sameIds(observed.attachedHubs ?? [], news.attachedHubs)) {
+            patch.attachedHubs = news.attachedHubs;
+            dirty = true;
+        }
+        if (news.attachedVpcs !== undefined &&
+            !sameIds(observed.attachedVpcs ?? [], news.attachedVpcs)) {
+            patch.attachedVpcs = news.attachedVpcs;
+            dirty = true;
+        }
+        if (news.manageHubToHubAttachments !== undefined &&
+            (observed.manageHubToHubAttachments ?? false) !==
+                news.manageHubToHubAttachments) {
+            patch.manageHubToHubAttachments = news.manageHubToHubAttachments;
+            dirty = true;
+        }
+        if (news.manageVpcToHubAttachments !== undefined &&
+            (observed.manageVpcToHubAttachments ?? false) !==
+                news.manageVpcToHubAttachments) {
+            patch.manageVpcToHubAttachments = news.manageVpcToHubAttachments;
+            dirty = true;
+        }
+        if (dirty) {
+            observed = yield* mcn.patchOnRamp(patch);
+        }
+        return toAttributes(observed, accountId, destroyOnDelete);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        // Deleting an on-ramp tears down cloud-side infrastructure when
+        // `destroy` is set — slow and eventually consistent on Cloudflare's
+        // side, but the DELETE call itself returns promptly.
+        yield* mcn
+            .deleteOnRamp({
+            accountId: output.accountId,
+            onrampId: output.onRampId,
+            destroy: output.destroyOnDelete,
+        })
+            .pipe(Effect.catchTag("OnRampNotFound", () => Effect.void));
+    }),
+    list: Effect.fn(function* () {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        // Account-scoped collection: exhaustively paginate the on-ramp list,
+        // then hydrate each id into the exact `read` Attributes shape via
+        // `getOnRamp`. The list item omits some fields (`vpc`, `region`), so
+        // a per-item get is required for a fully-faithful Attributes object.
+        // Magic Cloud Networking is an entitlement-gated add-on; on accounts
+        // without it every call fails with `FeatureNotEnabled` — treat that
+        // as a non-listable account and return `[]`.
+        const ids = yield* mcn.listOnRamps.items({ accountId }).pipe(Stream.map((onramp) => onramp.id), Stream.runCollect, Effect.map((chunk) => Array.from(chunk)), Effect.catchTag("FeatureNotEnabled", () => Effect.succeed([])));
+        const rows = yield* Effect.forEach(ids, (onRampId) => getOnRamp(accountId, onRampId).pipe(Effect.map((observed) => observed ? toAttributes(observed, accountId, false) : undefined)), { concurrency: 10 });
+        return rows.filter((row) => row !== undefined);
+    }),
+});
+/**
+ * Read an on-ramp by id, mapping "gone" (`OnRampNotFound`) to `undefined`.
+ */
+const getOnRamp = (accountId, onrampId) => mcn.getOnRamp({ accountId, onrampId }).pipe(Effect.map((onramp) => onramp), Effect.catchTag("OnRampNotFound", () => Effect.succeed(undefined)));
+/**
+ * Find an on-ramp by exact name. Names are not unique on Cloudflare's side;
+ * if several on-ramps carry the same name, pick the lexicographically-first
+ * id for determinism.
+ */
+const findByName = (accountId, name) => mcn.listOnRamps.items({ accountId }).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk)
+    .filter((onramp) => onramp.name === name)
+    .sort((a, b) => a.id.localeCompare(b.id))
+    .at(0)));
+const onRampName = (id, name) => Effect.gen(function* () {
+    return name ?? (yield* createPhysicalName({ id, lowercase: true }));
+});
+const sameIds = (observed, desired) => observed.length === desired.length &&
+    [...observed].sort().join(",") === [...desired].sort().join(",");
+const toAttributes = (onramp, accountId, destroyOnDelete) => ({
+    onRampId: onramp.id,
+    accountId,
+    name: onramp.name,
+    // Distilled widens generated string enums to open unions (`string & {}`).
+    cloudType: onramp.cloudType,
+    type: onramp.type,
+    dynamicRouting: onramp.dynamicRouting,
+    installRoutesInCloud: onramp.installRoutesInCloud,
+    installRoutesInMagicWan: onramp.installRoutesInMagicWan,
+    vpc: onramp.vpc ?? undefined,
+    cloudAsn: onramp.cloudAsn ?? undefined,
+    description: onramp.description ?? undefined,
+    attachedHubs: [...(onramp.attachedHubs ?? [])],
+    attachedVpcs: [...(onramp.attachedVpcs ?? [])],
+    manageHubToHubAttachments: onramp.manageHubToHubAttachments ?? undefined,
+    manageVpcToHubAttachments: onramp.manageVpcToHubAttachments ?? undefined,
+    updatedAt: onramp.updatedAt,
+    destroyOnDelete,
+});
+//# sourceMappingURL=OnRamp.js.map

package/lib/Cloudflare/MagicCloudNetworking/OnRamp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OnRamp.js","sourceRoot":"","sources":["../../../src/Cloudflare/MagicCloudNetworking/OnRamp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,oDAAoD,CAAC;AAC1E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,YAAY,GAAG,wCAAiD,CAAC;AAmKvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAS,YAAY,CAAC,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC1D,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AAEtE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE;QACP,UAAU;QACV,WAAW;QACX,WAAW;QACX,MAAM;QACN,gBAAgB;QAChB,UAAU;KACX;IAED,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,kEAAkE;QAClE,iDAAiD;QACjD,MAAM,YAAY,GAAG,MAAM,EAAE,SAAS,IAAI,GAAG,EAAE,SAAS,CAAC;QACzD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,CAAC;QAC1C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,MAAM,iBAAiB,GAAG,MAAM,EAAE,cAAc,IAAI,GAAG,EAAE,cAAc,CAAC;QACxE,IACE,iBAAiB,KAAK,SAAS;YAC/B,iBAAiB,KAAK,IAAI,CAAC,cAAc,EACzC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAC5C,MAAM,eAAe,GACnB,MAAM,EAAE,eAAe,IAAI,IAAI,EAAE,eAAe,IAAI,KAAK,CAAC;QAE5D,mDAAmD;QACnD,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,oEAAoE;QACpE,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,KAAK;YACV,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;YACrD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC;QAEtD,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,QAAQ,GAAG,MAAM,EAAE,QAAQ;YAC7B,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;YAClE,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;QAED,2DAA2D;QAC3D,sEAAsE;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;gBACjC,SAAS;gBACT,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;gBACrD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;gBACzD,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;aAC1D,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC5D,CAAC;QAED,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,KAAK,GAA2B;YACpC,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,EAAE;SACtB,CAAC;QACF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;YAClB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IACE,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,WAAW,EACjD,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAChE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YACrB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,CAAC,oBAAoB,KAAK,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAChE,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;YACvD,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,CAAC,uBAAuB,KAAK,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtE,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,CAAC;YAC7D,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IACE,IAAI,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,EACxD,CAAC;YACD,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YACvC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IACE,IAAI,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,EACxD,CAAC;YACD,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YACvC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IACE,IAAI,CAAC,yBAAyB,KAAK,SAAS;YAC5C,CAAC,QAAQ,CAAC,yBAAyB,IAAI,KAAK,CAAC;gBAC3C,IAAI,CAAC,yBAAyB,EAChC,CAAC;YACD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC;YACjE,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IACE,IAAI,CAAC,yBAAyB,KAAK,SAAS;YAC5C,CAAC,QAAQ,CAAC,yBAAyB,IAAI,KAAK,CAAC;gBAC3C,IAAI,CAAC,yBAAyB,EAChC,CAAC;YACD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC;YACjE,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,gEAAgE;QAChE,oEAAoE;QACpE,qDAAqD;QACrD,KAAK,CAAC,CAAC,GAAG;aACP,YAAY,CAAC;YACZ,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,eAAe;SAChC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,qEAAqE;QACrE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,6CAA6C;QAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EACjC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACxC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,OAAO,CAAC,EAAc,CAAC,CAC/B,CACF,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAChC,GAAG,EACH,CAAC,QAAQ,EAAE,EAAE,CACX,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtB,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAChE,CACF,EACH,EAAE,WAAW,EAAE,EAAE,EAAE,CACpB,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAA2B,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC1E,CAAC,CAAC;CACH,CAAC,CAAC;AAsBL;;GAEG;AACH,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,CACxD,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAA8B,EAAE,CAAC,MAAM,CAAC,EAC1D,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACnE,CAAC;AAEJ;;;;GAIG;AACH,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CACrD,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;KACd,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;KACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACxC,EAAE,CAAC,CAAC,CAAC,CACT,CACF,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,CAAC,QAA2B,EAAE,OAA0B,EAAE,EAAE,CAC1E,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;IAClC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnE,MAAM,YAAY,GAAG,CACnB,MAAsB,EACtB,SAAiB,EACjB,eAAwB,EACN,EAAE,CAAC,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,EAAE;IACnB,SAAS;IACT,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC,SAA4B;IAC9C,IAAI,EAAE,MAAM,CAAC,IAAkB;IAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;IACjD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;IACvD,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,SAAS;IAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;IACtC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;IAC5C,YAAY,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9C,YAAY,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9C,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,SAAS;IACxE,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,SAAS;IACxE,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,eAAe;CAChB,CAAC,CAAC"}

package/lib/Cloudflare/MagicCloudNetworking/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./CatalogSync.ts";
+export * from "./CloudIntegration.ts";
+export * from "./OnRamp.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/Cloudflare/MagicCloudNetworking/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/MagicCloudNetworking/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC"}

package/lib/Cloudflare/MagicCloudNetworking/index.js

@@ -0,0 +1,4 @@
+export * from "./CatalogSync.js";
+export * from "./CloudIntegration.js";
+export * from "./OnRamp.js";
+//# sourceMappingURL=index.js.map

package/lib/Cloudflare/MagicCloudNetworking/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Cloudflare/MagicCloudNetworking/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC"}

package/lib/Cloudflare/MagicNetworkMonitoring/Config.d.ts

@@ -0,0 +1,119 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
+import type { Providers } from "../Providers.ts";
+declare const MagicNetworkMonitoringConfigTypeId: "Cloudflare.MagicNetworkMonitoring.Config";
+type MagicNetworkMonitoringConfigTypeId = typeof MagicNetworkMonitoringConfigTypeId;
+/**
+ * A WARP device registered as a flow-data source on the MNM config.
+ */
+export interface MagicNetworkMonitoringWarpDevice {
+    /**
+     * Unique identifier of the WARP device.
+     */
+    id: string;
+    /**
+     * Display name of the WARP device.
+     */
+    name: string;
+    /**
+     * IPv4 address the WARP device sends flow data from.
+     */
+    routerIp: string;
+}
+export interface MagicNetworkMonitoringConfigProps {
+    /**
+     * The account name label stored on the MNM configuration. Freeform —
+     * mutable in place.
+     */
+    name: string;
+    /**
+     * Fallback sampling rate of flow messages being sent in packets per
+     * second. This should match the packet sampling rate configured on the
+     * router. Minimum of 1. Mutable in place.
+     */
+    defaultSampling: number;
+    /**
+     * IPv4 CIDR addresses (`/32`) of the routers that send flow data to
+     * Cloudflare. Registering router flow sources requires the Magic Network
+     * Monitoring router-flow entitlement — accounts without it reject any
+     * non-empty value with the typed `InvalidMnmConfig` error (Cloudflare
+     * code 1003).
+     * @default []
+     */
+    routerIps?: string[];
+    /**
+     * WARP devices registered as flow-data sources.
+     * @default []
+     */
+    warpDevices?: MagicNetworkMonitoringWarpDevice[];
+}
+export interface MagicNetworkMonitoringConfigAttributes {
+    /** The Cloudflare account the configuration belongs to. */
+    accountId: string;
+    /** The account name label stored on the configuration. */
+    name: string;
+    /** Sampling rate of flow messages in packets per second. */
+    defaultSampling: number;
+    /** Router IPs registered as flow-data sources. */
+    routerIps: string[];
+    /** WARP devices registered as flow-data sources. */
+    warpDevices: MagicNetworkMonitoringWarpDevice[];
+}
+export type MagicNetworkMonitoringConfig = Resource<MagicNetworkMonitoringConfigTypeId, MagicNetworkMonitoringConfigProps, MagicNetworkMonitoringConfigAttributes, never, Providers>;
+/**
+ * The Magic Network Monitoring (MNM) account configuration — the singleton
+ * that registers your network's routers (and optionally WARP devices) as
+ * flow-data sources and sets the fallback packet sampling rate.
+ *
+ * There is exactly one MNM configuration per Cloudflare account, and MNM
+ * rules cannot be created until it exists. Creating a second configuration
+ * fails (`MnmConfigAlreadyExists`), so reconcile tolerates the race by
+ * falling through to an update. When the engine has no prior state but a
+ * configuration already exists on the account, `read` reports it as
+ * `Unowned` and takeover is gated behind `--adopt`.
+ *
+ * @section Creating the configuration
+ * @example Minimal configuration
+ * ```typescript
+ * const config = yield* Cloudflare.MagicNetworkMonitoringConfig("Mnm", {
+ *   name: "my-network",
+ *   defaultSampling: 1,
+ * });
+ * ```
+ *
+ * @example Configuration with router IPs
+ * ```typescript
+ * const config = yield* Cloudflare.MagicNetworkMonitoringConfig("Mnm", {
+ *   name: "my-network",
+ *   defaultSampling: 100,
+ *   routerIps: ["203.0.113.1/32"],
+ * });
+ * ```
+ *
+ * @section Rules depend on the configuration
+ * @example Create the config before any rules
+ * ```typescript
+ * const config = yield* Cloudflare.MagicNetworkMonitoringConfig("Mnm", {
+ *   name: "my-network",
+ *   defaultSampling: 1,
+ * });
+ * // Reference an output attribute so the rule deploys after the config.
+ * yield* Cloudflare.MagicNetworkMonitoringRule("VolumetricAlert", {
+ *   accountId: config.accountId,
+ *   type: "threshold",
+ *   prefixes: ["10.0.0.0/24"],
+ *   bandwidthThreshold: 1_000_000,
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/magic-network-monitoring/
+ */
+export declare const MagicNetworkMonitoringConfig: import("../../Resource.ts").ResourceClass<MagicNetworkMonitoringConfig>;
+/**
+ * Returns true if the given value is a MagicNetworkMonitoringConfig resource.
+ */
+export declare const isMagicNetworkMonitoringConfig: (value: unknown) => value is MagicNetworkMonitoringConfig;
+export declare const MagicNetworkMonitoringConfigProvider: () => import("effect/Layer").Layer<Provider.Provider<MagicNetworkMonitoringConfig>, never, CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+export {};
+//# sourceMappingURL=Config.d.ts.map

package/lib/Cloudflare/MagicNetworkMonitoring/Config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Config.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/MagicNetworkMonitoring/Config.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,QAAA,MAAM,kCAAkC,EACtC,0CAAmD,CAAC;AACtD,KAAK,kCAAkC,GACrC,OAAO,kCAAkC,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,gCAAgC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,sCAAsC;IACrD,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,eAAe,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,oDAAoD;IACpD,WAAW,EAAE,gCAAgC,EAAE,CAAC;CACjD;AAED,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CACjD,kCAAkC,EAClC,iCAAiC,EACjC,sCAAsC,EACtC,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,eAAO,MAAM,4BAA4B,yEACmC,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,8BAA8B,UAClC,OAAO,KACb,KAAK,IAAI,4BAEuC,CAAC;AAEpD,eAAO,MAAM,oCAAoC,8NA8F7C,CAAC"}

package/lib/Cloudflare/MagicNetworkMonitoring/Config.js

@@ -0,0 +1,183 @@
+import * as mnm from "@distilled.cloud/cloudflare/magic-network-monitoring";
+import * as Effect from "effect/Effect";
+import * as Predicate from "effect/Predicate";
+import { Unowned } from "../../AdoptPolicy.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+const MagicNetworkMonitoringConfigTypeId = "Cloudflare.MagicNetworkMonitoring.Config";
+/**
+ * The Magic Network Monitoring (MNM) account configuration — the singleton
+ * that registers your network's routers (and optionally WARP devices) as
+ * flow-data sources and sets the fallback packet sampling rate.
+ *
+ * There is exactly one MNM configuration per Cloudflare account, and MNM
+ * rules cannot be created until it exists. Creating a second configuration
+ * fails (`MnmConfigAlreadyExists`), so reconcile tolerates the race by
+ * falling through to an update. When the engine has no prior state but a
+ * configuration already exists on the account, `read` reports it as
+ * `Unowned` and takeover is gated behind `--adopt`.
+ *
+ * @section Creating the configuration
+ * @example Minimal configuration
+ * ```typescript
+ * const config = yield* Cloudflare.MagicNetworkMonitoringConfig("Mnm", {
+ *   name: "my-network",
+ *   defaultSampling: 1,
+ * });
+ * ```
+ *
+ * @example Configuration with router IPs
+ * ```typescript
+ * const config = yield* Cloudflare.MagicNetworkMonitoringConfig("Mnm", {
+ *   name: "my-network",
+ *   defaultSampling: 100,
+ *   routerIps: ["203.0.113.1/32"],
+ * });
+ * ```
+ *
+ * @section Rules depend on the configuration
+ * @example Create the config before any rules
+ * ```typescript
+ * const config = yield* Cloudflare.MagicNetworkMonitoringConfig("Mnm", {
+ *   name: "my-network",
+ *   defaultSampling: 1,
+ * });
+ * // Reference an output attribute so the rule deploys after the config.
+ * yield* Cloudflare.MagicNetworkMonitoringRule("VolumetricAlert", {
+ *   accountId: config.accountId,
+ *   type: "threshold",
+ *   prefixes: ["10.0.0.0/24"],
+ *   bandwidthThreshold: 1_000_000,
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/magic-network-monitoring/
+ */
+export const MagicNetworkMonitoringConfig = Resource(MagicNetworkMonitoringConfigTypeId);
+/**
+ * Returns true if the given value is a MagicNetworkMonitoringConfig resource.
+ */
+export const isMagicNetworkMonitoringConfig = (value) => Predicate.hasProperty(value, "Type") &&
+    value.Type === MagicNetworkMonitoringConfigTypeId;
+export const MagicNetworkMonitoringConfigProvider = () => Provider.succeed(MagicNetworkMonitoringConfig, {
+    stables: ["accountId"],
+    diff: Effect.fn(function* ({ output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        // The config is an account singleton — moving accounts replaces it.
+        if (output !== undefined && output.accountId !== accountId) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const acct = output?.accountId ?? accountId;
+        // A missing config answers HTTP 200 with `result: null` rather than
+        // a 404 — `observe` maps that to `undefined`.
+        const observed = observe(yield* mnm.getConfig({ accountId: acct }));
+        if (observed === undefined)
+            return undefined;
+        // The config carries no ownership markers. With no prior state we
+        // cannot prove we created it — report `Unowned` so the engine gates
+        // takeover behind the adopt policy.
+        const attributes = toAttributes(observed, acct);
+        return output === undefined ? Unowned(attributes) : attributes;
+    }),
+    reconcile: Effect.fn(function* ({ news }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const desired = {
+            accountId,
+            name: news.name,
+            defaultSampling: news.defaultSampling,
+            // Inputs have been resolved to concrete strings by Plan.
+            routerIps: (news.routerIps ?? []),
+            warpDevices: news.warpDevices ?? [],
+        };
+        // 1. Observe — a missing singleton answers `result: null` and maps
+        //    to `undefined`.
+        const observed = observe(yield* mnm.getConfig({ accountId }));
+        // 2. Ensure — create when missing, converging a concurrent create
+        //    (`MnmConfigAlreadyExists`, Cloudflare code 1005) into the
+        //    update below.
+        if (observed === undefined) {
+            const created = observe(yield* mnm
+                .createConfig(desired)
+                .pipe(Effect.catchTag("MnmConfigAlreadyExists", () => mnm.updateConfig(desired))));
+            // `updateConfig` answers `result: null` if the config vanished
+            // again mid-flight — fall back to one fresh create.
+            if (created !== undefined)
+                return toAttributes(created, accountId);
+            const recreated = yield* mnm.createConfig(desired);
+            return toAttributes(observe(recreated) ?? desired, accountId);
+        }
+        // 3. Sync — diff observed cloud state against desired; the update
+        //    is a full-body PUT, so skip the call entirely on a no-op.
+        const dirty = observed.name !== desired.name ||
+            observed.defaultSampling !== desired.defaultSampling ||
+            !sameStrings(observed.routerIps, desired.routerIps) ||
+            !sameWarpDevices(observed.warpDevices, desired.warpDevices);
+        if (!dirty)
+            return toAttributes(observed, accountId);
+        const updated = observe(yield* mnm.updateConfig(desired));
+        if (updated !== undefined)
+            return toAttributes(updated, accountId);
+        // Deleted out-of-band between observe and update — recreate.
+        const recreated = yield* mnm.createConfig(desired);
+        return toAttributes(observe(recreated) ?? desired, accountId);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* mnm.deleteConfig({ accountId: output.accountId }).pipe(
+        // Already gone (`MnmConfigNotFound`, Cloudflare code 1004).
+        Effect.catchTag("MnmConfigNotFound", () => Effect.void));
+    }),
+    // Account singleton — there is exactly one MNM config per account and
+    // only a per-account `getConfig`. Mirror `read`: return the one-element
+    // array when the config exists, `[]` when it is unset (HTTP 200 with
+    // `result: null`, which `observe` maps to `undefined`).
+    list: Effect.fn(function* () {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const observed = observe(yield* mnm.getConfig({ accountId }));
+        return observed === undefined ? [] : [toAttributes(observed, accountId)];
+    }),
+});
+/**
+ * Normalize a config response to a definitely-present shape, mapping
+ * "missing" to `undefined`. Cloudflare answers HTTP 200 with
+ * `result: null` when no config exists; the distilled core client decodes
+ * that as an empty object, so a config without a `name` (a required field
+ * on every real config) means there is no config.
+ */
+const observe = (config) => {
+    if (config === null)
+        return undefined;
+    const { name, defaultSampling } = config;
+    if (name == null || defaultSampling == null)
+        return undefined;
+    return {
+        name,
+        defaultSampling,
+        routerIps: config.routerIps ?? [],
+        warpDevices: config.warpDevices ?? [],
+    };
+};
+const sameStrings = (observed, desired) => observed.length === desired.length &&
+    [...observed].sort().join(",") === [...desired].sort().join(",");
+const sameWarpDevices = (observed, desired) => observed.length === desired.length &&
+    serializeWarpDevices(observed) === serializeWarpDevices(desired);
+const serializeWarpDevices = (devices) => devices
+    .map((d) => `${d.id}|${d.name}|${d.routerIp}`)
+    .sort()
+    .join(",");
+const toAttributes = (config, accountId) => ({
+    accountId,
+    name: config.name,
+    defaultSampling: config.defaultSampling,
+    routerIps: [...config.routerIps],
+    warpDevices: config.warpDevices.map((d) => ({
+        id: d.id,
+        name: d.name,
+        routerIp: d.routerIp,
+    })),
+});
+//# sourceMappingURL=Config.js.map

package/lib/Cloudflare/MagicNetworkMonitoring/Config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Config.js","sourceRoot":"","sources":["../../../src/Cloudflare/MagicNetworkMonitoring/Config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,sDAAsD,CAAC;AAC5E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,kCAAkC,GACtC,0CAAmD,CAAC;AAuEtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,QAAQ,CAA+B,kCAAkC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,KAAc,EACyB,EAAE,CACzC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;IACpC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC;AAEpD,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,EAAE,CACvD,QAAQ,CAAC,OAAO,CAAC,4BAA4B,EAAE;IAC7C,OAAO,EAAE,CAAC,WAAW,CAAC;IAEtB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,oEAAoE;QACpE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAC5C,oEAAoE;QACpE,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,kEAAkE;QAClE,oEAAoE;QACpE,oCAAoC;QACpC,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACjE,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;QACtC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,OAAO,GAAG;YACd,SAAS;YACT,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,yDAAyD;YACzD,SAAS,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAa;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;SACpC,CAAC;QAEF,mEAAmE;QACnE,qBAAqB;QACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAE9D,kEAAkE;QAClE,+DAA+D;QAC/D,mBAAmB;QACnB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,OAAO,CACrB,KAAK,CAAC,CAAC,GAAG;iBACP,YAAY,CAAC,OAAO,CAAC;iBACrB,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7C,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAC1B,CACF,CACJ,CAAC;YACF,+DAA+D;YAC/D,oDAAoD;YACpD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;QAED,kEAAkE;QAClE,+DAA+D;QAC/D,MAAM,KAAK,GACT,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAC9B,QAAQ,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe;YACpD,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YACnD,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnE,6DAA6D;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI;QAC3D,4DAA4D;QAC5D,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACxD,CAAC;IACJ,CAAC,CAAC;IAEF,sEAAsE;IACtE,wEAAwE;IACxE,qEAAqE;IACrE,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;CACH,CAAC,CAAC;AAYL;;;;;;GAMG;AACH,MAAM,OAAO,GAAG,CACd,MAAwD,EAC5B,EAAE;IAC9B,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IACzC,IAAI,IAAI,IAAI,IAAI,IAAI,eAAe,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO;QACL,IAAI;QACJ,eAAe;QACf,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;KACtC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAA2B,EAAE,OAA0B,EAAE,EAAE,CAC9E,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;IAClC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnE,MAAM,eAAe,GAAG,CACtB,QAAqD,EACrD,OAAoD,EACpD,EAAE,CACF,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;IAClC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAEnE,MAAM,oBAAoB,GAAG,CAC3B,OAAoD,EACpD,EAAE,CACF,OAAO;KACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;KAC7C,IAAI,EAAE;KACN,IAAI,CAAC,GAAG,CAAC,CAAC;AAEf,MAAM,YAAY,GAAG,CACnB,MAAsB,EACtB,SAAiB,EACuB,EAAE,CAAC,CAAC;IAC5C,SAAS;IACT,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,eAAe,EAAE,MAAM,CAAC,eAAe;IACvC,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC;CACJ,CAAC,CAAC"}