alchemy 2.0.0-beta.64 → 2.0.0-beta.65

package/src/AWS/EKS/internal/client.ts

@@ -10,6 +10,7 @@ import { AwsClient } from "aws4fetch";
 import * as Data from "effect/Data";
 import * as Effect from "effect/Effect";
 import * as Redacted from "effect/Redacted";
+import * as Schedule from "effect/Schedule";
 import * as https from "node:https";
 import { AWSEnvironment } from "../../Environment.ts";
 import {
@@ -30,7 +31,13 @@ export class KubernetesApiError extends Data.TaggedError("KubernetesApiError")<{
   path: string;
   statusCode: number;
   body: string;
-}> {}
+}> {
+  override get message(): string {
+    return `${this.method} ${this.path} responded ${this.statusCode}: ${
+      this.body.length > 0 ? this.body.slice(0, 1000) : "(empty body)"
+    }`;
+  }
+}
 
 export interface KubernetesClusterConnection {
   clusterName: string;
@@ -163,7 +170,20 @@ const requestJson = Effect.fn(function* ({
         : new Error(
             `Failed Kubernetes ${method} ${path}: ${error instanceof Error ? error.message : String(error)}`,
           ),
-  });
+  }).pipe(
+    // Transport-level failures (ECONNREFUSED/ECONNRESET/ETIMEDOUT/DNS)
+    // are transient — a fresh EKS endpoint's NLB can refuse connections
+    // for a short window after the cluster reports ACTIVE. Every request
+    // here is idempotent (GET / SSA PATCH / DELETE), so retry them; HTTP
+    // errors (KubernetesApiError) are handled by the callers.
+    Effect.retry({
+      while: (e): boolean => !(e instanceof KubernetesApiError),
+      schedule: Schedule.max([
+        Schedule.spaced("5 seconds"),
+        Schedule.recurs(8),
+      ]),
+    }),
+  );
 });
 
 // ─────────────────────────────────────────────────────── kind discovery ──
@@ -285,7 +305,24 @@ export const applyObject = Effect.fn(function* ({
     method: "PATCH",
     path,
     body: object,
-  });
+  }).pipe(
+    // A freshly ACTIVE cluster's API server briefly 5xxes while warming
+    // up, and the creator's bootstrap access entry propagates
+    // asynchronously (401/403 in the first minute) — retry transient
+    // failures for ~1 min.
+    Effect.retry({
+      while: (e): boolean =>
+        e instanceof KubernetesApiError &&
+        (e.statusCode >= 500 ||
+          e.statusCode === 429 ||
+          e.statusCode === 401 ||
+          e.statusCode === 403),
+      schedule: Schedule.max([
+        Schedule.spaced("6 seconds"),
+        Schedule.recurs(10),
+      ]),
+    }),
+  );
 });
 
 export const deleteObject = Effect.fn(function* ({

package/src/AWS/Lambda/Function.ts

@@ -1420,8 +1420,10 @@ export default handler;
         // config untouched (precreate stub); `[]` explicitly clears mounts.
         fileSystemConfigs?: Lambda.FileSystemConfig[];
         // Effective VPC attachment (prop ∪ binding-channel requests).
-        // Defaults to `news.vpc` when omitted (precreate stub, before
-        // bindings are known).
+        // Omitted for the precreate stub: `news` is UNRESOLVED at precreate
+        // (Output-valued subnet/security-group ids would fail to serialize),
+        // and the stub doesn't need connectivity — `reconcile` attaches the
+        // resolved VPC config afterwards.
         vpc?: FunctionProps["vpc"];
         session: { note: (note: string) => Effect.Effect<void> };
       }) => Effect.Effect<
@@ -1438,7 +1440,7 @@ export default handler;
         functionName,
         preferUpdate,
         fileSystemConfigs,
-        vpc = news.vpc,
+        vpc,
         session,
       }: {
         id: string;

package/src/AWS/Providers.ts

@@ -846,6 +846,9 @@ export const providers = () =>
       SageMaker.EndpointConfig,
       SageMaker.Endpoint,
       SageMaker.FeatureGroup,
+      SageMaker.Cluster,
+      SageMaker.ClusterSchedulerConfig,
+      SageMaker.ComputeQuota,
       Scheduler.Schedule,
       Scheduler.ScheduleGroup,
       Schemas.Discoverer,
@@ -1468,6 +1471,9 @@ export const providers = () =>
           SageMaker.EndpointConfigProvider(),
           SageMaker.EndpointProvider(),
           SageMaker.FeatureGroupProvider(),
+          SageMaker.ClusterProvider(),
+          SageMaker.ClusterSchedulerConfigProvider(),
+          SageMaker.ComputeQuotaProvider(),
           Account.AccountNameProvider(),
           Account.AlternateContactProvider(),
           Account.ContactInformationProvider(),