alchemy 2.0.0-beta.59 → 2.0.0-beta.60

package/lib/Bundle/Docker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Docker.js","sourceRoot":"","sources":["../../src/Bundle/Docker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAK3E;CAAG;AAwBL,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtD,UAAkB,EAClB,GAAW;IAEX,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAClD,GAAW,EACX,KAGE;IAEF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjD,IAA2B,EAC3B,OAKC;IAED,MAAM,OAAO,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,CAAC;IAChD,MAAM,cAAc,GAAgC;QAClD,GAAG;QACH,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS;YAC9B,CAAC,CAAC;gBACE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAC/D;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,EAAE,GAAG;QACxB,CAAC,CAAC,YAAY,CAAC,MAAM,CACjB,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,EACjD,OAAO,CAAC,GAAG,CACZ;QACH,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAEtD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,MAAM,CAAC,IAAI,CACT,IAAI,kBAAkB,CAAC;QACrB,OAAO;QACP,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACpD,CAAC,CACH,CACF,CACF,CAAC;IAEF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,kBAAkB,CAAC;YACrB,OAAO;YACP,MAAM;YACN,QAAQ;YACR,OAAO,EACL,0BAA0B,QAAQ,MAAM,OAAO,KAAK,MAAM,EAAE,CAAC,IAAI,EAAE;SACtE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAA2B;IACzE,MAAM,IAAI,GAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3B,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAW;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;QACzC,SAAS;QACT,UAAU;QACV,SAAS;QACT,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAc,EAAE,MAAc;IAC1E,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC5C,IAAkB,EAClB,OAAsD;IAEtD,KAAK,CAAC,CAAC,gBAAgB,CACrB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,EAC/D;QACE,GAAG,EAAE,OAAO,EAAE,GAAG;QACjB,KAAK,EAAE,IAAI,CAAC,QAAQ;KACrB,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC1C,QAAgB,EAChB,IAAmB;IAEnB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC;YAC5C,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,yEAAyE;QACzE,iEAAiE;QACjE,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACpC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACpE,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;SAC1C,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAC9D,MAAM,CAAC,QAAQ,CACb,EAAE;aACC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACzC,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC"}

package/src/Bundle/Docker.ts

@@ -1,229 +0,0 @@
-import * as Data from "effect/Data";
-import * as Effect from "effect/Effect";
-import * as FileSystem from "effect/FileSystem";
-import * as Path from "effect/Path";
-import * as Stream from "effect/Stream";
-import { ChildProcess } from "effect/unstable/process";
-import { exec } from "../Util/exec.ts";
-
-export class DockerCommandError extends Data.TaggedError("DockerCommandError")<{
-  readonly command: string;
-  readonly stderr: string;
-  readonly exitCode: number;
-  readonly message: string;
-}> {}
-
-export interface RegistryAuth {
-  readonly username: string;
-  readonly password: string;
-  /**
-   * Registry host only (no `https://`, no path), e.g. `123456789.dkr.ecr.us-east-1.amazonaws.com`.
-   */
-  readonly server: string;
-}
-
-export interface DockerBuildOptions {
-  /** Image reference passed to `docker build -t`. */
-  readonly tag: string;
-  /** Build context directory (`.` argument to `docker build`). */
-  readonly context: string;
-  readonly platform?: string;
-  readonly target?: string;
-  readonly buildArgs?: Record<string, string>;
-  /** Appended to `docker build` before the final context path. */
-  readonly extraArgs?: ReadonlyArray<string>;
-  readonly env?: Record<string, string | undefined>;
-}
-
-export const materializeDockerfile = Effect.fn(function* (
-  dockerfile: string,
-  dir: string,
-) {
-  const fs = yield* FileSystem.FileSystem;
-  const path = yield* Path.Path;
-  yield* fs.makeDirectory(dir, { recursive: true });
-  const target = path.join(dir, "Dockerfile");
-  yield* fs.writeFileString(target, dockerfile);
-  return target;
-});
-
-export const writeContextFiles = Effect.fn(function* (
-  dir: string,
-  files: ReadonlyArray<{
-    readonly path: string;
-    readonly content: string | Uint8Array;
-  }>,
-) {
-  const fs = yield* FileSystem.FileSystem;
-  const path = yield* Path.Path;
-  for (const file of files) {
-    const fullPath = path.join(dir, file.path);
-    yield* fs.makeDirectory(path.dirname(fullPath), { recursive: true });
-    if (typeof file.content === "string") {
-      yield* fs.writeFileString(fullPath, file.content);
-    } else {
-      yield* fs.writeFile(fullPath, file.content);
-    }
-  }
-});
-
-export const runDockerCommand = Effect.fn(function* (
-  args: ReadonlyArray<string>,
-  options?: {
-    cwd?: string;
-    env?: Record<string, string | undefined>;
-    /** Passed to the process stdin (e.g. for `docker login --password-stdin`). */
-    stdin?: string;
-  },
-) {
-  const command = `docker ${args.join(" ")}`;
-  const env = { ...process.env, ...options?.env };
-  const commandOptions: ChildProcess.CommandOptions = {
-    env,
-    ...(options?.stdin !== undefined
-      ? {
-          stdin: Stream.succeed(new TextEncoder().encode(options.stdin)),
-        }
-      : {}),
-  };
-  const child = options?.cwd
-    ? ChildProcess.setCwd(
-        ChildProcess.make("docker", args, commandOptions),
-        options.cwd,
-      )
-    : ChildProcess.make("docker", args, commandOptions);
-
-  const { stdout, stderr, exitCode } = yield* exec(child).pipe(
-    Effect.catch((e) =>
-      Effect.fail(
-        new DockerCommandError({
-          command,
-          stderr: e instanceof Error ? e.message : String(e),
-          exitCode: 1,
-          message: e instanceof Error ? e.message : String(e),
-        }),
-      ),
-    ),
-  );
-
-  if (exitCode !== 0) {
-    return yield* Effect.fail(
-      new DockerCommandError({
-        command,
-        stderr,
-        exitCode,
-        message:
-          `Docker command failed (${exitCode}): ${command}\n${stderr}`.trim(),
-      }),
-    );
-  }
-
-  return { stdout, stderr };
-});
-
-/**
- * Run `docker build` with standard flags from {@link DockerBuildOptions}.
- */
-export const dockerBuild = Effect.fn(function* (options: DockerBuildOptions) {
-  const args: string[] = ["build", "-t", options.tag];
-  if (options.platform) {
-    args.push("--platform", options.platform);
-  }
-  if (options.target) {
-    args.push("--target", options.target);
-  }
-  if (options.buildArgs) {
-    for (const [k, v] of Object.entries(options.buildArgs)) {
-      args.push("--build-arg", `${k}=${v}`);
-    }
-  }
-  if (options.extraArgs?.length) {
-    args.push(...options.extraArgs);
-  }
-  args.push(options.context);
-
-  yield* runDockerCommand(args, { env: options.env });
-});
-
-/**
- * Get the image ID (content-addressable digest) of a locally-built image.
- */
-export const getDockerImageId = Effect.fn(function* (tag: string) {
-  const { stdout } = yield* runDockerCommand([
-    "inspect",
-    "--format",
-    "{{.Id}}",
-    tag,
-  ]);
-  return stdout.trim();
-});
-
-/**
- * Tag a local image with a new reference.
- */
-export const dockerTag = Effect.fn(function* (source: string, target: string) {
-  yield* runDockerCommand(["tag", source, target]);
-});
-
-/**
- * Log in to a registry using `docker login --password-stdin` (no password on argv).
- */
-export const dockerLogin = Effect.fn(function* (
-  auth: RegistryAuth,
-  options?: { env?: Record<string, string | undefined> },
-) {
-  yield* runDockerCommand(
-    ["login", "-u", auth.username, "--password-stdin", auth.server],
-    {
-      env: options?.env,
-      stdin: auth.password,
-    },
-  );
-});
-
-/**
- * Push an image ref. When `auth` is set, uses an isolated `DOCKER_CONFIG`
- * directory so concurrent deploys do not race on global docker credentials.
- */
-export const pushImage = Effect.fn(function* (
-  imageRef: string,
-  auth?: RegistryAuth,
-) {
-  if (auth) {
-    const fs = yield* FileSystem.FileSystem;
-    const path = yield* Path.Path;
-    const configDir = yield* fs.makeTempDirectory({
-      prefix: "alchemy-docker-",
-    });
-    // Write the registry credentials directly into an isolated docker config
-    // as a plaintext `auths` entry and skip `docker login` entirely.
-    //
-    // `docker login` is the wrong tool here: on macOS Docker Desktop it routes
-    // through the shared `osxkeychain`/`desktop` credential helper *regardless*
-    // of an isolated DOCKER_CONFIG, so concurrent deploys either race the system
-    // keychain (`The specified item already exists in the keychain (-25299)`) or
-    // land the credential in the helper — leaving this isolated config without
-    // an `auths` entry, so the subsequent `docker push` fails with "no basic
-    // auth credentials". Embedding the base64 `auth` inline (the same thing
-    // `docker login` would write when no credsStore is configured) makes each
-    // deploy fully self-contained: no credential helper, no keychain, no login
-    // race. Only `push` reads this config; `build`/`pull`/`tag` keep using the
-    // global docker config (buildx builders, `docker context`, etc. intact).
-    const token = yield* Effect.sync(() =>
-      Buffer.from(`${auth.username}:${auth.password}`).toString("base64"),
-    );
-    const config = JSON.stringify({
-      auths: { [auth.server]: { auth: token } },
-    });
-    yield* fs.writeFileString(path.join(configDir, "config.json"), config);
-    const env = { ...process.env, DOCKER_CONFIG: configDir };
-    return yield* runDockerCommand(["push", imageRef], { env }).pipe(
-      Effect.ensuring(
-        fs
-          .remove(configDir, { recursive: true })
-          .pipe(Effect.catch(() => Effect.void)),
-      ),
-    );
-  }
-  yield* runDockerCommand(["push", imageRef]);
-});