alchemy 2.0.0-beta.65 → 2.0.0-beta.67

package/src/Docker/ServiceImage.ts

@@ -0,0 +1,331 @@
+import * as Effect from "effect/Effect";
+import type * as rolldown from "rolldown";
+import { AlchemyContext } from "../AlchemyContext.ts";
+import * as Bundle from "../Bundle/Bundle.ts";
+import {
+  findCwdForBundle,
+  getStableContextDir,
+  resolveMainPath,
+} from "../Bundle/TempRoot.ts";
+import { Self } from "../Self.ts";
+import { sha256Object } from "../Util/sha256.ts";
+import { Docker } from "./Docker.ts";
+
+/**
+ * INTERNAL — image machinery for the effectful `Docker.Service` platform.
+ *
+ * NOT exported from the Docker barrel. Bundles a `main` Effect program with
+ * rolldown, bakes it into a generated bun Dockerfile, and builds the image
+ * with the Docker CLI against the service's Docker context — so the image is
+ * present in the exact engine the Swarm service schedules from. There is no
+ * registry push: the built image is content-addressed (`<name>:<hash>`) and
+ * only rebuilt when the bundle, Dockerfile, or environment image changes.
+ *
+ * Multi-node swarms need the image on every node; for those, build with
+ * `Docker.Image` + a `registry` and pass the pushed ref as `image` instead.
+ */
+
+/** The props subset that describes a bundled `main` service image. */
+export interface BundledServiceSource {
+  main: string;
+  image?: string;
+  handler?: string;
+  port?: number;
+  build?: {
+    input?: Partial<rolldown.InputOptions>;
+    output?: Partial<rolldown.OutputOptions>;
+  };
+}
+
+/** The resolved (built) local image. */
+export interface ResolvedServiceImage {
+  /** Full image reference, `<name>:<codeHash>`. */
+  imageRef: string;
+  /** Content hash identifying the image (also the image tag). */
+  codeHash: string;
+}
+
+/**
+ * The standard bun bootstrap wrapped around a `Docker.Service` `main` entry:
+ * resolves the bundled program's registered runners (`host.run` loops and the
+ * served `fetch` handler) and runs them with a Bun HTTP server bound to
+ * `PORT`. Mirrors the ECS bootstrap minus the AWS credential/region layers —
+ * a Swarm task has no ambient cloud identity.
+ */
+export const makeServiceBunBootstrap =
+  (handler: string) =>
+  (importPath: string): string =>
+    `
+import { BunServices } from "@effect/platform-bun";
+import { BunHttpServer } from "alchemy/Http";
+import { Stack } from "alchemy/Stack";
+import { makeEntrypointLayer, reifyBoundConfigProvider } from "alchemy/Runtime";
+import * as Config from "effect/Config";
+import * as ConfigProvider from "effect/ConfigProvider";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import * as Logger from "effect/Logger";
+
+import { ${handler} as entrypoint } from ${JSON.stringify(importPath)};
+
+// Normalize the entrypoint export: an inline-effect class default export is
+// an Effect resolving the platform instance, while the tagged form
+// (X.make(props, impl)) exports a Layer providing the Self tag. Both fold
+// into a Layer via makeEntrypointLayer (same pattern as the ECS bridge).
+const tag = Context.Service("${Self.key}");
+const layer = makeEntrypointLayer(tag, entrypoint);
+
+const platform = Layer.mergeAll(
+  BunServices.layer,
+  FetchHttpClient.layer,
+  Logger.layer([Logger.consolePretty()]),
+);
+
+const stack = Layer.effect(
+  Stack,
+  Effect.all([
+    Config.string("ALCHEMY_STACK_NAME"),
+    Config.string("ALCHEMY_STAGE")
+  ]).pipe(
+    Effect.map(([name, stage]) => ({
+      name,
+      stage,
+      bindings: {},
+      resources: {}
+    }))
+  )
+);
+
+// Resolve the bundled program (the runners registered via host.run / serve)
+// and run it with a Bun HTTP server bound to PORT, so the returned { fetch }
+// handler is actually served and host.run loops stay alive.
+const program = tag.pipe(
+  Effect.flatMap((service) => service.RuntimeContext.exports),
+  Effect.flatMap((exports) => exports.program),
+  Effect.provide(
+    layer.pipe(
+      Layer.provideMerge(stack),
+      Layer.provideMerge(BunHttpServer()),
+      Layer.provideMerge(platform),
+      Layer.provideMerge(
+        Layer.succeed(
+          ConfigProvider.ConfigProvider,
+          reifyBoundConfigProvider(ConfigProvider.fromEnv(), process.env)
+        )
+      ),
+    )
+  ),
+  Effect.scoped
+);
+
+console.log("Docker service bootstrap starting...");
+await Effect.runPromise(program).catch((err) => {
+  console.error("Docker service bootstrap failed:", err);
+  process.exit(1);
+});
+`;
+
+/**
+ * Init-time constructor for the service-image resolver. Resolves the services
+ * that are only available at provider-layer construction (Docker, the
+ * `.alchemy` directory, the rolldown virtual-entry plugin) and returns
+ * `resolve` (build the image if its content hash isn't present in the target
+ * engine) and `hash` (content hash only, for `diff`).
+ */
+export const makeServiceImage = Effect.gen(function* () {
+  const docker = yield* Docker;
+  const { dotAlchemy } = yield* AlchemyContext;
+  const virtualEntryPlugin = yield* Bundle.virtualEntryPlugin;
+
+  /** Bundle the Effect program behind a `main` source. */
+  const bundleProgram = Effect.fn(function* (options: {
+    source: BundledServiceSource;
+    isExternal?: boolean;
+  }) {
+    const { source } = options;
+    const realMain = yield* resolveMainPath(source.main);
+    const cwd = yield* findCwdForBundle(realMain);
+    const bootstrap = makeServiceBunBootstrap(source.handler ?? "default");
+
+    const buildBundle = Effect.fn(function* (
+      entry: string,
+      plugins?: rolldown.RolldownPluginOption,
+    ) {
+      return yield* Bundle.build(
+        {
+          ...source.build?.input,
+          input: entry,
+          cwd,
+          platform: "node",
+          // The container runs on `bun`; keep `bun`/`bun:*` external (the
+          // runtime provides them) and resolve the `bun` export condition
+          // so `@effect/platform-bun` picks its Bun implementations.
+          external: [
+            "bun",
+            "bun:*",
+            ...((source.build?.input?.external as string[] | undefined) ?? []),
+          ],
+          resolve: {
+            conditionNames: ["bun", "import", "module", "default"],
+            ...source.build?.input?.resolve,
+          },
+          plugins: [source.build?.input?.plugins, plugins],
+        },
+        {
+          ...source.build?.output,
+          format: "esm",
+          sourcemap: source.build?.output?.sourcemap ?? false,
+          minify: source.build?.output?.minify ?? false,
+          entryFileNames: "index.mjs",
+        },
+      );
+    });
+
+    const bundleOutput = options.isExternal
+      ? yield* buildBundle(realMain)
+      : yield* buildBundle(realMain, virtualEntryPlugin(bootstrap));
+
+    // Return every emitted file (entry + shared chunks). Dynamic imports in
+    // the Bun HTTP server split into chunks; dropping any of them crashes the
+    // container with `Cannot find module './chunk-XXX.js'`.
+    const files = bundleOutput.files.map((file) => ({
+      path: file.path,
+      content:
+        typeof file.content === "string"
+          ? new TextEncoder().encode(file.content)
+          : file.content,
+    }));
+
+    return { files, hash: bundleOutput.hash };
+  });
+
+  /**
+   * Generated Dockerfile for a bundled `main` program. The environment
+   * preamble is the `image` ref or the default bun base (`oven/bun` is
+   * Docker-Hub only).
+   */
+  const generateDockerfile = (source: BundledServiceSource) => {
+    const lines = [
+      `FROM ${source.image ?? "oven/bun:1"}`,
+      `WORKDIR /app`,
+      `COPY index.mjs /app/index.mjs`,
+      // Copy any additional rolldown chunks (`chunk-XXX.js`, …). Non-trivial
+      // bundles always emit at least one; minimal bundles emit none and the
+      // COPY no-ops.
+      `COPY *.js /app/`,
+    ];
+    if (source.port !== undefined) {
+      lines.push(
+        `ENV PORT=${String(source.port)}`,
+        `EXPOSE ${String(source.port)}`,
+      );
+    }
+    lines.push(`ENTRYPOINT ["bun", "/app/index.mjs"]`);
+    return `${lines.join("\n")}\n`;
+  };
+
+  /**
+   * Bundle a `main` source and compute its content-addressed code hash. The
+   * hash covers the full image identity — the bundle output (bootstrap entry
+   * included, so bootstrap-template changes invalidate it) and the generated
+   * Dockerfile — so `diff` and `resolve` always agree.
+   */
+  const computeCodeHash = Effect.fn(function* (options: {
+    source: BundledServiceSource;
+    isExternal?: boolean;
+  }) {
+    const bundled = yield* bundleProgram(options);
+    const dockerfile = generateDockerfile(options.source);
+    const codeHash = (yield* sha256Object({
+      bundleHash: bundled.hash,
+      dockerfile,
+    })).slice(0, 16);
+    return { bundled, dockerfile, codeHash };
+  });
+
+  /** Observe a locally-present tag in the target engine. Missing → undefined. */
+  const imageExists = (imageRef: string, context: string | undefined) =>
+    docker.image.inspect(imageRef, context).pipe(
+      Effect.map(() => true),
+      Effect.catchReason("PlatformError", "NotFound", () =>
+        Effect.succeed(false),
+      ),
+    );
+
+  /**
+   * Resolve the image for a bundled service: compute the content-addressed
+   * tag, then build only when that exact tag is not already present in the
+   * target Docker context (crash-safe convergence).
+   */
+  const resolve = Effect.fn(function* (options: {
+    /** Logical resource id — keys the stable build-context directory. */
+    id: string;
+    source: BundledServiceSource;
+    /** Image repository name (the service's physical name). */
+    name: string;
+    /** Docker context the swarm service is deployed to. */
+    context: string | undefined;
+    isExternal?: boolean;
+    /** Plan-status session used to emit build progress notes. */
+    session: { note: (message: string) => Effect.Effect<void> };
+  }) {
+    const { id, source, session } = options;
+    yield* session.note(`Bundling ${id} program...`);
+    const { bundled, dockerfile, codeHash } = yield* computeCodeHash({
+      source,
+      isExternal: options.isExternal,
+    });
+    const imageRef = `${options.name}:${codeHash}`;
+
+    if (yield* imageExists(imageRef, options.context)) {
+      return { imageRef, codeHash } satisfies ResolvedServiceImage;
+    }
+
+    const realMain = yield* resolveMainPath(source.main);
+    const contextDir = yield* getStableContextDir(
+      realMain,
+      dotAlchemy,
+      `${id}-image`,
+    );
+    yield* docker.materialize({
+      context: contextDir,
+      dockerfile,
+      // Entry chunk becomes `index.mjs`; all other chunks keep their emitted
+      // `*.js` names so the entry's relative imports resolve.
+      files: bundled.files.map((file, index) => ({
+        path: index === 0 ? "index.mjs" : file.path,
+        content: file.content,
+      })),
+    });
+    yield* session.note(`Building container image ${imageRef}...`);
+    yield* docker.image.build({
+      context: contextDir,
+      tag: imageRef,
+      engineContext: options.context,
+    });
+    yield* session.note(`Built ${imageRef}`);
+    return { imageRef, codeHash } satisfies ResolvedServiceImage;
+  });
+
+  /**
+   * Content hash without building the image. Runs the bundler (bootstrap
+   * entry included) so the hash reflects the exact image `resolve` would
+   * build — bootstrap-template changes and user-code edits both surface as
+   * drift. The provider calls this from `diff` and compares against
+   * `output.code.hash`.
+   */
+  const hash = Effect.fn(function* (options: {
+    source: BundledServiceSource;
+    isExternal?: boolean;
+  }) {
+    const { codeHash } = yield* computeCodeHash(options);
+    return codeHash;
+  });
+
+  return { resolve, hash };
+});
+
+/** The resolver service returned by {@link makeServiceImage}. */
+export interface ServiceImage extends Effect.Success<typeof makeServiceImage> {}

package/src/Docker/Swarm.ts

@@ -0,0 +1,226 @@
+import * as Effect from "effect/Effect";
+import { Unowned } from "../AdoptPolicy.ts";
+import { isResolved } from "../Diff.ts";
+import * as Provider from "../Provider.ts";
+import { Resource } from "../Resource.ts";
+import { Docker, dockerContextName } from "./Docker.ts";
+import type { Providers } from "./Providers.ts";
+
+export interface SwarmProps {
+  /** Docker context name or context resource of the engine to initialize. */
+  context?: Docker.ContextRef;
+  /**
+   * Address advertised to other swarm members, e.g. `"10.0.0.1"` or
+   * `"eth0"`. Required by Docker when the host has several network
+   * interfaces. Applied only when the swarm is first initialized.
+   */
+  advertiseAddr?: string;
+  /**
+   * Listen address for swarm traffic, e.g. `"0.0.0.0:2377"`. Applied only
+   * when the swarm is first initialized.
+   */
+  listenAddr?: string;
+  /**
+   * Address pools for global-scope (overlay) networks, e.g.
+   * `["10.20.0.0/16"]`. Applied only when the swarm is first initialized.
+   */
+  defaultAddrPool?: string[];
+  /**
+   * CIDR mask length for each subnet carved from `defaultAddrPool`.
+   * Applied only when the swarm is first initialized.
+   *
+   * @default 24
+   */
+  subnetSize?: number;
+}
+
+export interface Swarm extends Resource<
+  "Docker.Swarm",
+  SwarmProps,
+  {
+    /** Swarm cluster id. */
+    id: string;
+    /** This node's id in the swarm (a manager). */
+    nodeId: string;
+    /** Docker context the swarm was initialized on. */
+    context?: string;
+    /** Number of manager nodes. */
+    managers: number;
+    /** Number of nodes in the swarm. */
+    nodes: number;
+  },
+  never,
+  Providers
+> {}
+
+/**
+ * Swarm mode on a Docker engine — an idempotent `docker swarm init`.
+ *
+ * Turns the engine behind the given `context` (or the local engine) into a
+ * single-node swarm: the node becomes a manager that can run `Docker.Service`
+ * workloads. Regular (non-swarm) docker usage of the engine is unaffected.
+ *
+ * Pass the swarm as the `context` of a `Docker.Service` or overlay
+ * `Docker.Network`: the workload then deploys after the swarm exists and
+ * inherits its Docker context.
+ *
+ * An engine that is already in swarm mode is treated as foreign — adopt it
+ * with `adopt(true)` (or `--adopt`) to manage it. Destroying the resource
+ * dissolves the node's swarm membership (`docker swarm leave --force`),
+ * which stops every service running on it — services managed by the same
+ * stack are destroyed first via their dependency edges.
+ *
+ * Growing the cluster beyond one node is host-level setup: run
+ * `docker swarm join --token <token> <manager-ip>:2377` on each additional
+ * machine (`docker swarm join-token worker` on the manager prints the
+ * command). Alchemy manages the swarm's workloads through the manager.
+ * @resource
+ * @section Creating a Swarm
+ * @example Local single-node swarm
+ * ```typescript
+ * const swarm = yield* Docker.Swarm("swarm");
+ * ```
+ *
+ * @example Remote engine over SSH
+ * ```typescript
+ * const vps = yield* Docker.Context("vps", {
+ *   docker: "host=ssh://deploy@example.com",
+ * });
+ * const swarm = yield* Docker.Swarm("swarm", {
+ *   context: vps,
+ *   advertiseAddr: "10.0.0.1",
+ * });
+ * ```
+ *
+ * @section Using an Existing Swarm
+ * @example Reference without owning
+ * ```typescript
+ * // Services don't require a Swarm resource — point them at an engine that
+ * // is already a manager and the swarm's lifecycle stays external: destroy
+ * // removes the services, never the swarm.
+ * const web = yield* Docker.Service("web", {
+ *   context: vps,
+ *   image: "nginx:alpine",
+ * });
+ * ```
+ *
+ * @example Adopt an already-initialized engine
+ * ```typescript
+ * // Adoption makes the swarm part of the stack — destroy then dissolves
+ * // the node's membership.
+ * const swarm = yield* Docker.Swarm("swarm").pipe(adopt(true));
+ * ```
+ *
+ * @section Deploying into the Swarm
+ * @example Service ordered after the swarm
+ * ```typescript
+ * const swarm = yield* Docker.Swarm("swarm");
+ * const web = yield* Docker.Service("web", {
+ *   context: swarm,
+ *   image: "nginx:alpine",
+ *   replicas: 2,
+ *   ports: [{ external: 8080, internal: 80 }],
+ * });
+ * ```
+ */
+export const Swarm = Resource<Swarm>("Docker.Swarm");
+
+export const SwarmProvider = () =>
+  Provider.effect(
+    Swarm,
+    Effect.gen(function* () {
+      const docker = yield* Docker;
+
+      /** Active-manager info, or undefined when the engine isn't one. */
+      const observe = Effect.fn(function* (context: string | undefined) {
+        const info = yield* docker.swarm.info(context);
+        if (
+          info.LocalNodeState !== "active" ||
+          !info.ControlAvailable ||
+          !info.Cluster?.ID
+        ) {
+          return undefined;
+        }
+        return info;
+      });
+
+      return Swarm.Provider.of({
+        list: () => Effect.succeed([]),
+        read: Effect.fn(function* ({ olds, output }) {
+          const context = dockerContextName(olds?.context);
+          const info = yield* observe(context);
+          if (!info) return undefined;
+          const attrs = toSwarmAttributes(info, context);
+          if (output) return attrs;
+          // A swarm carries no labels to brand, so an already-initialized
+          // engine can never be proven ours — adoption is gated behind
+          // `--adopt` / `adopt(true)`.
+          return Unowned(attrs);
+        }),
+        diff: Effect.fn(function* ({ news, olds }) {
+          if (!isResolved(news)) return undefined;
+          if (
+            dockerContextName(olds?.context) !==
+            dockerContextName(news?.context)
+          ) {
+            return { action: "replace" as const, deleteFirst: true };
+          }
+          // The remaining props only apply at `swarm init`; changing them on
+          // a live swarm is a no-op rather than a destructive re-init.
+          return { action: "noop" as const };
+        }),
+        reconcile: Effect.fn(function* ({ news }) {
+          const context = dockerContextName(news?.context);
+          const existing = yield* observe(context);
+          if (existing) return toSwarmAttributes(existing, context);
+
+          yield* docker.swarm
+            .init({
+              context,
+              "advertise-addr": news?.advertiseAddr,
+              "listen-addr": news?.listenAddr,
+              "default-addr-pool": news?.defaultAddrPool,
+              "default-addr-pool-mask-length": news?.subnetSize,
+            })
+            .pipe(
+              // A concurrent init (or an interrupted prior reconcile) already
+              // made this node a swarm member — converge on the observation.
+              Effect.catchIf(
+                (error) => /already part of a swarm/i.test(String(error)),
+                () => Effect.void,
+              ),
+            );
+
+          const info = yield* observe(context);
+          if (!info) {
+            return yield* Effect.die(
+              new Error(
+                "docker swarm init succeeded but the engine did not become an active swarm manager",
+              ),
+            );
+          }
+          return toSwarmAttributes(info, context);
+        }),
+        delete: Effect.fn(({ output }) =>
+          docker.swarm.leave(true, output.context).pipe(
+            Effect.catchIf(
+              (error) => /not part of a swarm/i.test(String(error)),
+              () => Effect.void,
+            ),
+            Effect.asVoid,
+          ),
+        ),
+      });
+    }),
+  );
+
+const toSwarmAttributes = (
+  info: Docker.SwarmInfo,
+  context: string | undefined,
+): Swarm["Attributes"] => ({
+  id: info.Cluster!.ID,
+  nodeId: info.NodeID,
+  context,
+  managers: info.Managers ?? 1,
+  nodes: info.Nodes ?? 1,
+});

package/src/Docker/Volume.ts

@@ -9,7 +9,7 @@ import {
   hasAlchemyTags,
   stripInternalTags,
 } from "../Tags.ts";
-import { Docker, dockerPhysicalName } from "./Docker.ts";
+import { Docker, dockerContextName, dockerPhysicalName } from "./Docker.ts";
 import type { Providers } from "./Providers.ts";
 
 export interface VolumeLabel {
@@ -32,6 +32,8 @@ export interface VolumeProps {
   driverOpts?: Record<string, string>;
   /** Custom metadata labels. */
   labels?: Record<string, string>;
+  /** Docker context name or context resource. */
+  context?: Docker.ContextRef;
 }
 
 export interface Volume extends Resource<
@@ -92,6 +94,15 @@ export interface Volume extends Resource<
  *   },
  * });
  * ```
+ *
+ * @section Docker Context
+ * @example Create a volume in a named Docker context
+ * ```typescript
+ * const data = yield* Docker.Volume("data", {
+ *   name: "app-data",
+ *   context: "remote-build",
+ * });
+ * ```
  */
 export const Volume = Resource<Volume>("Docker.Volume");
 
@@ -104,9 +115,10 @@ export const VolumeProvider = () =>
       return Volume.Provider.of({
         list: () => Effect.succeed([]),
         read: Effect.fn(function* ({ id, instanceId, olds, output }) {
+          const context = dockerContextName(olds.context);
           const name = yield* dockerPhysicalName(id, olds, instanceId);
           const info = yield* docker.volume
-            .inspect(name)
+            .inspect(name, context)
             .pipe(
               Effect.catchReason(
                 "PlatformError",
@@ -122,8 +134,13 @@ export const VolumeProvider = () =>
           const owned = yield* hasAlchemyTags(id, info.Labels ?? undefined);
           return owned ? attrs : Unowned(attrs);
         }),
-        diff: Effect.fn(function* ({ id, instanceId, output, news }) {
+        diff: Effect.fn(function* ({ id, instanceId, output, news, olds }) {
           if (!isResolved(news)) return undefined;
+          if (
+            dockerContextName(olds.context) !== dockerContextName(news.context)
+          ) {
+            return { action: "replace" as const, deleteFirst: true };
+          }
           const args = yield* makeVolumeArgs(id, news, instanceId);
           // Auto-generated names are engine-owned: the deployed name stays
           // authoritative even if the generator would name this id differently
@@ -141,6 +158,7 @@ export const VolumeProvider = () =>
           }
         }),
         reconcile: Effect.fn(function* ({ id, instanceId, news, output }) {
+          const context = dockerContextName(news.context);
           const args = yield* makeVolumeArgs(id, news, instanceId);
           // Prefer the deployed name: regenerating would target a different
           // volume if the generator's output for this id ever drifts.
@@ -150,14 +168,15 @@ export const VolumeProvider = () =>
             ...args,
             name,
             label: { ...internalTags, ...args.label },
+            context,
           });
           return toVolumeAttributes(
-            yield* docker.volume.inspect(result.stdout),
+            yield* docker.volume.inspect(result.stdout, context),
           );
         }),
-        delete: Effect.fn(({ output }) =>
+        delete: Effect.fn(({ olds, output }) =>
           docker.volume
-            .remove(output.name)
+            .remove(output.name, dockerContextName(olds.context))
             .pipe(
               Effect.catchReason(
                 "PlatformError",

package/src/Docker/index.ts

@@ -1,4 +1,5 @@
 export * from "./Container.ts";
+export * from "./Context.ts";
 export * from "./Docker.ts";
 export * as Dockerfile from "./Dockerfile.ts";
 export * from "./Image.ts";
@@ -6,4 +7,6 @@ export * from "./Network.ts";
 export * from "./Providers.ts";
 export type { ImageRegistry } from "./Registry.ts";
 export * from "./RemoteImage.ts";
+export * from "./Service.ts";
+export * from "./Swarm.ts";
 export * from "./Volume.ts";

package/src/Http.ts

@@ -108,7 +108,15 @@ export const resolvePort = (options: { port?: number } | undefined) =>
     ? Effect.succeed(options.port)
     : Config.number("PORT").pipe(Config.withDefault(3000));
 
-export const BunHttpServer = () =>
+export interface BunHttpServerOptions {
+  /**
+   * Network interface on which the Bun HTTP server listens.
+   * Omit to use Bun's default.
+   */
+  hostname?: string;
+}
+
+export const BunHttpServer = (serverOptions?: BunHttpServerOptions) =>
   Layer.effect(
     HttpServer,
     Effect.gen(function* () {
@@ -119,7 +127,12 @@ export const BunHttpServer = () =>
         serve: (handler, options) =>
           Effect.gen(function* () {
             const port = yield* resolvePort(options);
-            const server = yield* BunHttpServerPlatform.make({ port });
+            const server = yield* BunHttpServerPlatform.make({
+              port,
+              ...(serverOptions?.hostname === undefined
+                ? {}
+                : { hostname: serverOptions.hostname }),
+            });
             yield* server.serve(safeHttpEffect(handler));
           }).pipe(Effect.orDie),
       };