alchemy 2.0.0-beta.74 → 2.0.0-beta.76

package/lib/Railway/AuthProvider.js

@@ -0,0 +1,224 @@
+import * as railway from "@distilled.cloud/railway";
+import { DEFAULT_API_BASE_URL } from "@distilled.cloud/railway";
+import * as Console from "effect/Console";
+import * as Effect from "effect/Effect";
+import * as Match from "effect/Match";
+import * as Redacted from "effect/Redacted";
+import * as Os from "node:os";
+import { AuthError, AuthProviderLayer, } from "../Auth/AuthProvider.js";
+import { CredentialsStore, displayRedacted } from "../Auth/Credentials.js";
+import { getEnv, getEnvRedacted, retryOnce } from "../Auth/Env.js";
+import { AlchemyProfile } from "../Auth/Profile.js";
+import * as Clank from "../Util/Clank.js";
+import { loginSessionUrl, pollLoginSessionToken, provideAnonymousRailway, } from "./LoginSession.js";
+export const RAILWAY_AUTH_PROVIDER_NAME = "Railway";
+export const RAILWAY_API_TOKEN_ENV = "RAILWAY_API_TOKEN";
+export const RAILWAY_API_URL_ENV = "RAILWAY_API_URL";
+const STORAGE_KEY = "railway-stored";
+const OAUTH_STORAGE_KEY = "railway-oauth";
+const options = [
+    {
+        value: "oauth",
+        label: "OAuth (CLI login session)",
+        hint: "recommended — open railway.com/cli-login, confirm the pairing code",
+    },
+    {
+        value: "env",
+        label: "Environment Variables",
+        hint: `${RAILWAY_API_TOKEN_ENV} + optional ${RAILWAY_API_URL_ENV}`,
+    },
+    {
+        value: "stored",
+        label: "API Token",
+        hint: "enter interactively, stored in ~/.alchemy/credentials",
+    },
+];
+const normalizeApiBaseUrl = (explicit) => {
+    const trimmed = (explicit ?? "").trim().replace(/\/+$/, "");
+    return trimmed.length > 0 ? trimmed : DEFAULT_API_BASE_URL;
+};
+const resolveApiBaseUrl = (explicit) => getEnv(RAILWAY_API_URL_ENV).pipe(Effect.map((fromEnv) => normalizeApiBaseUrl(explicit ?? fromEnv)));
+/**
+ * Layer that registers the Railway {@link AuthProvider} into the
+ * {@link AuthProviders} registry. Include this in the Railway `providers()`
+ * layer so `alchemy login` can discover it.
+ *
+ * Supported methods:
+ * - `env`: reads `RAILWAY_API_TOKEN` (account Bearer). Project tokens are
+ *   not used — they cannot reach workspace-wide operations.
+ * - `stored`: prompts for an API token and writes it to
+ *   `~/.alchemy/credentials/<profile>/railway-stored.json`.
+ * - `oauth`: CLI login session (`loginSessionCreate` → print pairing URL →
+ *   poll `loginSessionVerify` / `loginSessionConsume` → store the token).
+ *   Does not require a pre-existing token. An optional `RAILWAY_API_URL`
+ *   overrides the backboard host (default `https://backboard.railway.com`).
+ */
+export const RailwayAuth = AuthProviderLayer()(RAILWAY_AUTH_PROVIDER_NAME, Effect.gen(function* () {
+    const profiles = yield* AlchemyProfile;
+    const store = yield* CredentialsStore;
+    const loginStored = Effect.fn(function* (profileName) {
+        const token = yield* Clank.password({
+            message: "Railway API Token",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const envUrl = yield* getEnv(RAILWAY_API_URL_ENV);
+        const urlPrompt = yield* Clank.text({
+            message: "Railway API URL (Enter for default)",
+            placeholder: DEFAULT_API_BASE_URL,
+            defaultValue: envUrl ?? DEFAULT_API_BASE_URL,
+        }).pipe(retryOnce);
+        const trimmed = (urlPrompt ?? "").trim();
+        const apiBaseUrl = trimmed.length > 0 && trimmed !== DEFAULT_API_BASE_URL
+            ? trimmed
+            : undefined;
+        yield* store.write(profileName, STORAGE_KEY, {
+            type: "token",
+            token,
+            apiBaseUrl,
+        });
+        yield* Clank.success("Railway: credentials saved.");
+        return { method: "stored" };
+    });
+    const loginOAuth = Effect.fn(function* (profileName) {
+        const apiBaseUrl = yield* resolveApiBaseUrl();
+        const hostname = yield* Effect.sync(() => {
+            try {
+                return Os.hostname();
+            }
+            catch {
+                return "alchemy";
+            }
+        });
+        const withAnonymous = (effect) => provideAnonymousRailway(effect, apiBaseUrl);
+        const code = yield* withAnonymous(railway.loginSessionCreate({})).pipe(Effect.mapError((e) => new AuthError({
+            message: "Railway login session create failed",
+            cause: e,
+        })));
+        const url = loginSessionUrl(code, { hostname });
+        yield* Clank.info("Railway: opening browser for CLI login...");
+        yield* Clank.info(url);
+        yield* Clank.info(`Railway: pairing code is ${code}`);
+        yield* Clank.openUrl(url).pipe(Effect.catch(() => Clank.warn("Railway: could not open browser automatically. Please open the URL above and enter the pairing code.")));
+        yield* Clank.info("Railway: waiting for login (up to 5 minutes).");
+        const cancel = withAnonymous(railway.loginSessionCancel({ code })).pipe(Effect.catch(() => Effect.void));
+        const token = yield* withAnonymous(pollLoginSessionToken(code)).pipe(Effect.onInterrupt(() => cancel), Effect.tapError(() => cancel), Effect.mapError((e) => new AuthError({
+            message: "Railway login session poll failed",
+            cause: e,
+        })));
+        if (token == null || token.length === 0) {
+            yield* cancel;
+            return yield* new AuthError({
+                message: "Railway login session timed out after 5 minutes.",
+            });
+        }
+        yield* store.write(profileName, OAUTH_STORAGE_KEY, {
+            type: "token",
+            token,
+            apiBaseUrl: apiBaseUrl === DEFAULT_API_BASE_URL ? undefined : apiBaseUrl,
+        });
+        yield* Clank.success("Railway: OAuth credentials saved.");
+        return { method: "oauth" };
+    });
+    const configureInteractive = (profileName) => Clank.select({
+        message: "Railway authentication method",
+        options,
+    }).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("stored", () => loginStored(profileName)), Match.when("oauth", () => loginOAuth(profileName)), Match.exhaustive)));
+    const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
+        if (ctx.ci) {
+            return { method: "env" };
+        }
+        return yield* configureInteractive(profileName);
+    }).pipe(Effect.mapError((e) => new AuthError({
+        message: "failed to configure credentials",
+        cause: e,
+    })));
+    const resolveCredentials = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, Effect.fn(function* () {
+        const token = yield* getEnvRedacted(RAILWAY_API_TOKEN_ENV);
+        if (!token) {
+            return yield* new AuthError({
+                message: `Railway env credentials not found. Set ${RAILWAY_API_TOKEN_ENV}.`,
+            });
+        }
+        const apiBaseUrl = yield* resolveApiBaseUrl();
+        return {
+            type: "token",
+            token,
+            tokenKind: "account",
+            apiBaseUrl,
+            source: {
+                type: "env",
+                details: RAILWAY_API_TOKEN_ENV,
+            },
+        };
+    })), Match.when({ method: "stored" }, () => store.read(profileName, STORAGE_KEY).pipe(Effect.flatMap((creds) => creds == null
+        ? Effect.fail(new AuthError({
+            message: "Railway stored credentials not found. Run: alchemy login --configure",
+        }))
+        : resolveApiBaseUrl(creds.apiBaseUrl).pipe(Effect.map((apiBaseUrl) => ({
+            type: "token",
+            token: Redacted.make(creds.token),
+            tokenKind: "account",
+            apiBaseUrl,
+            source: { type: "stored" },
+        })))))), Match.when({ method: "oauth" }, () => store
+        .read(profileName, OAUTH_STORAGE_KEY)
+        .pipe(Effect.flatMap((creds) => creds == null
+        ? Effect.fail(new AuthError({
+            message: "Railway OAuth credentials not found. Run: alchemy login --configure",
+        }))
+        : resolveApiBaseUrl(creds.apiBaseUrl).pipe(Effect.map((apiBaseUrl) => ({
+            type: "token",
+            token: Redacted.make(creds.token),
+            tokenKind: "account",
+            apiBaseUrl,
+            source: { type: "oauth" },
+        })))))), Match.exhaustive);
+    const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => store
+        .delete(profileName, STORAGE_KEY)
+        .pipe(Effect.andThen(Clank.success("Railway: stored credentials removed")))), Match.when({ method: "oauth" }, () => store
+        .delete(profileName, OAUTH_STORAGE_KEY)
+        .pipe(Effect.andThen(Clank.success("Railway: OAuth credentials removed")))), Match.exhaustive);
+    const login = (profileName, config) => Match.value(config)
+        .pipe(Match.when({ method: "env" }, () => 
+    // If RAILWAY_API_TOKEN isn't set, fall through to the interactive
+    // picker so the user can switch to `stored` (or be told to set
+    // the env var) instead of silently failing later in `read`. The
+    // new selection is persisted to the profile so subsequent logins
+    // don't re-prompt.
+    getEnvRedacted(RAILWAY_API_TOKEN_ENV).pipe(Effect.flatMap((token) => token
+        ? Effect.void
+        : Effect.gen(function* () {
+            const next = yield* configureInteractive(profileName);
+            const existing = yield* profiles.getProfile(profileName);
+            yield* profiles.setProfile(profileName, {
+                ...existing,
+                [RAILWAY_AUTH_PROVIDER_NAME]: next,
+            });
+        })))), Match.when({ method: "stored" }, () => store
+        .read(profileName, STORAGE_KEY)
+        .pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.when({ method: "oauth" }, () => store
+        .read(profileName, OAUTH_STORAGE_KEY)
+        .pipe(Effect.flatMap((creds) => creds == null
+        ? loginOAuth(profileName).pipe(Effect.asVoid)
+        : Effect.void))), Match.exhaustive)
+        .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
+    const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => {
+        const sourceStr = creds.source.details
+            ? `${creds.source.type} - ${creds.source.details}`
+            : creds.source.type;
+        return Effect.all([
+            Console.log(`  token: ${displayRedacted(creds.token, 6)}`),
+            Console.log(`  tokenKind: ${creds.tokenKind}`),
+            Console.log(`  apiBaseUrl: ${creds.apiBaseUrl}`),
+            Console.log(`  source: ${sourceStr}`),
+        ]);
+    }));
+    return {
+        configure: configureCredentials,
+        logout,
+        login,
+        prettyPrint,
+        read: resolveCredentials,
+    };
+}));
+//# sourceMappingURL=AuthProvider.js.map

package/lib/Railway/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/Railway/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAqB1C,MAAM,OAAO,GAIR;IACH;QACE,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,2BAA2B;QAClC,IAAI,EAAE,oEAAoE;KAC3E;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,GAAG,qBAAqB,eAAe,mBAAmB,EAAE;KACnE;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,uDAAuD;KAC9D;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,QAAiB,EAAE,EAAE;IAChD,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,QAAiB,EAAE,EAAE,CAC9C,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAClE,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAGzC,CACD,0BAA0B,EAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;IAEtC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAmB;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YAClC,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAClC,OAAO,EAAE,qCAAqC;YAC9C,WAAW,EAAE,oBAAoB;YACjC,YAAY,EAAE,MAAM,IAAI,oBAAoB;SAC7C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,oBAAoB;YACpD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,CAAC;QAEhB,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAA2B,WAAW,EAAE,WAAW,EAAE;YACrE,IAAI,EAAE,OAAO;YACb,KAAK;YACL,UAAU;SACX,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAmB;QACzD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,CACpB,MAAqD,EACrD,EAAE,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;YACZ,OAAO,EAAE,qCAAqC;YAC9C,KAAK,EAAE,CAAC;SACT,CAAC,CACL,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC/D,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACtD,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAChB,KAAK,CAAC,IAAI,CACR,sGAAsG,CACvG,CACF,CACF,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAC7B,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;YACZ,OAAO,EAAE,mCAAmC;YAC5C,KAAK,EAAE,CAAC;SACT,CAAC,CACL,CACF,CAAC;QAEF,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,CAAC,MAAM,CAAC;YACd,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC1B,OAAO,EAAE,kDAAkD;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAChB,WAAW,EACX,iBAAiB,EACjB;YACE,IAAI,EAAE,OAAO;YACb,KAAK;YACL,UAAU,EACR,UAAU,KAAK,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SAC/D,CACF,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAC1D,OAAO,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC;QACX,OAAO,EAAE,+BAA+B;QACxC,OAAO;KACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,EACnE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EACpD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAClD,KAAK,CAAC,UAAU,CACjB,CACF,CACF,CAAC;IAEJ,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,GAAqB,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,KAAK,EAAE,CAAC;KACT,CAAC,CACL,CACF,CAAC;IAEJ,MAAM,kBAAkB,GAAG,CACzB,WAAmB,EACnB,MAAyB,EAC6B,EAAE,CACxD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACjB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC1B,OAAO,EAAE,0CAA0C,qBAAqB,GAAG;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,OAAgB;YACtB,KAAK;YACL,SAAS,EAAE,SAAkB;YAC7B,UAAU;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,KAAc;gBACpB,OAAO,EAAE,qBAAqB;aAC/B;SACF,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,KAAK,CAAC,IAAI,CAA2B,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;QACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;YACZ,OAAO,EACL,sEAAsE;SACzE,CAAC,CACH;QACH,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,OAAgB;YACtB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YACjC,SAAS,EAAE,SAAkB;YAC7B,UAAU;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;SACpC,CAAC,CAAC,CACJ,CACN,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CACnC,KAAK;SACF,IAAI,CAA2B,WAAW,EAAE,iBAAiB,CAAC;SAC9D,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;QACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;YACZ,OAAO,EACL,qEAAqE;SACxE,CAAC,CACH;QACH,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,OAAgB;YACtB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YACjC,SAAS,EAAE,SAAkB;YAC7B,UAAU;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,OAAgB,EAAE;SACnC,CAAC,CAAC,CACJ,CACN,CACF,CACJ,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;IAEJ,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,MAAyB,EAAE,EAAE,CAChE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,KAAK;SACF,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;SAChC,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,OAAO,CAAC,qCAAqC,CAAC,CACrD,CACF,CACJ,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CACnC,KAAK;SACF,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC;SACtC,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,OAAO,CAAC,oCAAoC,CAAC,CACpD,CACF,CACJ,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;IAEJ,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,MAAyB,EAAE,EAAE,CAC/D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;SAChB,IAAI,CACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE;IACjC,kEAAkE;IAClE,+DAA+D;IAC/D,gEAAgE;IAChE,iEAAiE;IACjE,mBAAmB;IACnB,cAAc,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACxC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK;QACH,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE;gBACtC,GAAG,QAAQ;gBACX,CAAC,0BAA0B,CAAC,EAAE,IAAI;aACnC,CAAC,CAAC;QACL,CAAC,CAAC,CACP,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,KAAK;SACF,IAAI,CAA2B,WAAW,EAAE,WAAW,CAAC;SACxD,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACvD,CACF,CACJ,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CACnC,KAAK;SACF,IAAI,CAA2B,WAAW,EAAE,iBAAiB,CAAC;SAC9D,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;QACX,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,CACF,CACJ,EACD,KAAK,CAAC,UAAU,CACjB;SACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;IAEN,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,MAAyB,EAAE,EAAE,CACrE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO;YACpC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;YAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACtB,OAAO,MAAM,CAAC,GAAG,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,YAAY,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEJ,OAAO;QACL,SAAS,EAAE,oBAAoB;QAC/B,MAAM;QACN,KAAK;QACL,WAAW;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Railway/Bind.d.ts

@@ -0,0 +1,50 @@
+import * as Effect from "effect/Effect";
+import type { Rpc } from "../Rpc.ts";
+declare const RpcCallError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Railway.RpcCallError";
+} & Readonly<A>;
+export declare class RpcCallError extends RpcCallError_base<{
+    readonly method: string;
+    readonly cause: unknown;
+}> {
+}
+declare const RpcUnauthorized_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Railway.RpcUnauthorized";
+} & Readonly<A>;
+export declare class RpcUnauthorized extends RpcUnauthorized_base<{
+    readonly method: string;
+}> {
+}
+type RpcTarget = {
+    readonly Type: string;
+    readonly LogicalId: string;
+    readonly dnsName?: unknown;
+    readonly port?: unknown;
+    readonly rpcToken?: unknown;
+};
+declare const bindRpc: <Shape, Req = never>(targetEff: (RpcTarget & Rpc<Shape>) | Effect.Effect<RpcTarget & Rpc<Shape>, never, Req>) => Effect.Effect<Shape, never, Req>;
+/**
+ * Bind a {@link Function} and return a typed schemaless RPC stub.
+ * Calls go to `{dnsName}:{port}/__rpc__/{method}` on the private mesh
+ * with a shared token — not the public `*.up.railway.app` URL.
+ *
+ * @example
+ * ```typescript
+ * const query = yield* Railway.bindFunction(Query);
+ * const greeting = yield* query.greet("sam");
+ * ```
+ */
+export declare const bindFunction: typeof bindRpc;
+/**
+ * Bind a {@link Service} and return a typed schemaless RPC stub.
+ * Same private-mesh + token path as {@link bindFunction}.
+ *
+ * @example
+ * ```typescript
+ * const api = yield* Railway.bindService(Api);
+ * const greeting = yield* api.greet("sam");
+ * ```
+ */
+export declare const bindService: typeof bindRpc;
+export {};
+//# sourceMappingURL=Bind.d.ts.map

package/lib/Railway/Bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bind.d.ts","sourceRoot":"","sources":["../../src/Railway/Bind.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;;;;AAYrC,qBAAa,YAAa,SAAQ,kBAAyC;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;CAAG;;;;AAEL,qBAAa,eAAgB,SAAQ,qBAEnC;IACA,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;CAAG;AAQL,KAAK,SAAS,GAAG;IACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAgFF,QAAA,MAAM,OAAO,GAAI,KAAK,EAAE,GAAG,GAAG,KAAK,aAE7B,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GACxB,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KACpD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CA2B9B,CAAC;AAEL;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,gBAAU,CAAC;AAEpC;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,gBAAU,CAAC"}

package/lib/Railway/Bind.js

@@ -0,0 +1,125 @@
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Binding from "../Binding.js";
+import { unpackEnvValue } from "../RuntimeContext.js";
+import { isYieldableEffectLike } from "../Util/effect.js";
+import { isRailwayHost } from "./MountVolume.js";
+import { DEFAULT_RPC_PORT, RPC_ERROR_TAG, RPC_PATH_PREFIX, RPC_TOKEN_HEADER, rpcEnvKeys, } from "./rpc-token.js";
+export class RpcCallError extends Data.TaggedError("Railway.RpcCallError") {
+}
+export class RpcUnauthorized extends Data.TaggedError("Railway.RpcUnauthorized") {
+}
+const fromProcessEnv = (key) => {
+    const unpacked = unpackEnvValue(process.env[key]);
+    if (typeof unpacked === "string")
+        return unpacked;
+    return "";
+};
+const resolveTarget = (targetEff) => isYieldableEffectLike(targetEff)
+    ? targetEff
+    : Effect.succeed(targetEff);
+/** Logical id without yielding the Resource (runtime has no engine). */
+const logicalIdOf = (target) => {
+    if (target !== null && typeof target === "object" && "LogicalId" in target) {
+        const id = target.LogicalId;
+        if (typeof id === "string" && id.length > 0)
+            return id;
+    }
+    if (typeof target === "function") {
+        const named = target.name;
+        if (typeof named === "string" && named.length > 0)
+            return named;
+    }
+    return "";
+};
+const makeStub = (options) => {
+    const { baseUrl, token } = options;
+    return new Proxy({}, {
+        get: (_obj, prop) => {
+            if (typeof prop !== "string")
+                return undefined;
+            return (...args) => Effect.gen(function* () {
+                if (!baseUrl || !token) {
+                    return yield* new RpcCallError({
+                        method: prop,
+                        cause: !baseUrl ? "missing host" : "missing token",
+                    });
+                }
+                const response = yield* Effect.tryPromise({
+                    try: () => fetch(`${baseUrl}${RPC_PATH_PREFIX}${encodeURIComponent(prop)}`, {
+                        method: "POST",
+                        headers: {
+                            "content-type": "application/json",
+                            [RPC_TOKEN_HEADER]: token,
+                        },
+                        body: JSON.stringify(args),
+                        signal: AbortSignal.timeout(25_000),
+                    }),
+                    catch: (cause) => new RpcCallError({ method: prop, cause }),
+                });
+                if (response.status === 401) {
+                    return yield* new RpcUnauthorized({ method: prop });
+                }
+                const value = yield* Effect.tryPromise({
+                    try: () => response.json(),
+                    catch: (cause) => new RpcCallError({ method: prop, cause }),
+                });
+                if (typeof value === "object" &&
+                    value !== null &&
+                    value._tag === RPC_ERROR_TAG &&
+                    "error" in value) {
+                    return yield* Effect.fail(value.error);
+                }
+                return value;
+            });
+        },
+    });
+};
+const bindRpc = (targetEff) => Effect.gen(function* () {
+    if (!globalThis.__ALCHEMY_RUNTIME__) {
+        const target = yield* resolveTarget(targetEff);
+        const keys = rpcEnvKeys(target.LogicalId);
+        const host = yield* Binding.Host;
+        if (isRailwayHost(host)) {
+            yield* host.bind `${target}`({
+                env: {
+                    [keys.host]: target.dnsName,
+                    [keys.port]: target.port ?? DEFAULT_RPC_PORT,
+                    [keys.token]: target.rpcToken,
+                },
+            });
+        }
+    }
+    const keys = rpcEnvKeys(logicalIdOf(targetEff));
+    const hostName = fromProcessEnv(keys.host);
+    const port = fromProcessEnv(keys.port);
+    const token = fromProcessEnv(keys.token);
+    const baseUrl = hostName.length > 0
+        ? `http://${hostName}:${port.length > 0 ? port : String(DEFAULT_RPC_PORT)}`
+        : "";
+    return makeStub({ baseUrl, token });
+});
+/**
+ * Bind a {@link Function} and return a typed schemaless RPC stub.
+ * Calls go to `{dnsName}:{port}/__rpc__/{method}` on the private mesh
+ * with a shared token — not the public `*.up.railway.app` URL.
+ *
+ * @example
+ * ```typescript
+ * const query = yield* Railway.bindFunction(Query);
+ * const greeting = yield* query.greet("sam");
+ * ```
+ */
+export const bindFunction = bindRpc;
+/**
+ * Bind a {@link Service} and return a typed schemaless RPC stub.
+ * Same private-mesh + token path as {@link bindFunction}.
+ *
+ * @example
+ * ```typescript
+ * const api = yield* Railway.bindService(Api);
+ * const greeting = yield* api.greet("sam");
+ * ```
+ */
+export const bindService = bindRpc;
+//# sourceMappingURL=Bind.js.map

package/lib/Railway/Bind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bind.js","sourceRoot":"","sources":["../../src/Railway/Bind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAExB,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAGvE;CAAG;AAEL,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CACnD,yBAAyB,CAGzB;CAAG;AAEL,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAU,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAClD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAUF,MAAM,aAAa,GAAG,CACpB,SAEqD,EACF,EAAE,CACrD,qBAAqB,CAAC,SAAS,CAAC;IAC9B,CAAC,CAAE,SAA+D;IAClE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAmC,CAAC,CAAC;AAE1D,wEAAwE;AACxE,MAAM,WAAW,GAAG,CAAC,MAAe,EAAU,EAAE;IAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;QAC3E,MAAM,EAAE,GAAI,MAAkC,CAAC,SAAS,CAAC;QACzD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,KAAK,GAAI,MAA6B,CAAC,IAAI,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAQ,OAGxB,EAAS,EAAE;IACV,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACnC,OAAO,IAAI,KAAK,CACd,EAAE,EACF;QACE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YAClB,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC/C,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;oBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;wBAC7B,MAAM,EAAE,IAAI;wBACZ,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe;qBACnD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;oBACxC,GAAG,EAAE,GAAG,EAAE,CACR,KAAK,CACH,GAAG,OAAO,GAAG,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EACzD;wBACE,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;4BAClC,CAAC,gBAAgB,CAAC,EAAE,KAAK;yBAC1B;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;wBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;qBACpC,CACF;oBACH,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;iBAC5D,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;oBACrC,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAsB;oBAC9C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;iBAC5D,CAAC,CAAC;gBACH,IACE,OAAO,KAAK,KAAK,QAAQ;oBACzB,KAAK,KAAK,IAAI;oBACb,KAA4B,CAAC,IAAI,KAAK,aAAa;oBACpD,OAAO,IAAI,KAAK,EAChB,CAAC;oBACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAE,KAA4B,CAAC,KAAK,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QACP,CAAC;KACF,CACO,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACd,SAEqD,EACnB,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,MAAM,EAAE,CAAC;gBAC1B,GAAG,EAAE;oBACH,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO;oBAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,gBAAgB;oBAC5C,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;iBAC9B;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,UAAU,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE;QAC3E,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,QAAQ,CAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC"}

package/lib/Railway/Bucket.d.ts

@@ -0,0 +1,225 @@
+import * as railway from "@distilled.cloud/railway";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../Provider.ts";
+import { Resource } from "../Resource.ts";
+import { type Project } from "./Project.ts";
+import type { Providers } from "./Providers.ts";
+/**
+ * A resource-valued prop: the resource itself, or an Effect that produces
+ * it (so `yield* Project(...)` and `Project(...)` both type-check).
+ */
+type Ref<T> = T | Effect.Effect<T, never, Providers>;
+/**
+ * Environment identity a Bucket instance is deployed into. Accepts a
+ * `Railway.Project` (its primary environment), a `Railway.Environment`,
+ * or an `{ environmentId }` stub.
+ */
+export type BucketEnvironment = {
+    readonly environmentId: string;
+};
+/** Default Railway bucket region (US West). Changing region replaces. */
+export declare const DEFAULT_BUCKET_REGION = "sjc";
+export interface BucketProps {
+    /**
+     * Parent Railway Project. Changing it replaces the Bucket.
+     */
+    project: Ref<Project>;
+    /**
+     * Environment to deploy the bucket instance into. Accepts a
+     * `Railway.Project` (primary environment), a `Railway.Environment`, or
+     * `{ environmentId }`. Defaults to the project's primary environment.
+     * Changing it replaces the Bucket.
+     */
+    environment?: Ref<BucketEnvironment>;
+    /**
+     * Display name. Unique per project. If omitted, a unique name is
+     * generated from the stack, stage and logical ID. Changing it updates
+     * in place via `bucketUpdate`. The S3 API name is this plus a hash
+     * (`s3BucketName`).
+     */
+    name?: string;
+    /**
+     * Bucket region (`sjc`, `iad`, `ams`, `sin`). Cannot be changed after
+     * create.
+     *
+     * @default "sjc"
+     */
+    region?: string;
+}
+export type Bucket = Resource<"Railway.Bucket", BucketProps, {
+    /** Railway bucket id. */
+    bucketId: string;
+    /** Display name (unique per project). */
+    name: string;
+    /** Parent Railway project id. */
+    projectId: string;
+    /** Environment the instance is deployed in. */
+    environmentId: string;
+    /** Railway region code (`sjc`, `iad`, `ams`, `sin`). */
+    region: string | undefined;
+    /** Globally unique S3 bucket name (`{name}-{hash}`). */
+    s3BucketName: string | undefined;
+    /** S3 API endpoint (`https://storage.railway.app`). */
+    endpoint: string | undefined;
+    /** S3 URL style (`virtual` or `path`). */
+    urlStyle: string | undefined;
+    /** S3 region reported by credentials (often `auto`). */
+    s3Region: string | undefined;
+    /**
+     * S3 access key id from `bucketS3Credentials`. Never logged.
+     */
+    accessKeyId: Redacted.Redacted<string> | undefined;
+    /**
+     * S3 secret access key from `bucketS3Credentials`. Never logged.
+     */
+    secretAccessKey: Redacted.Redacted<string> | undefined;
+    /** RFC3339 creation timestamp. */
+    createdAt: string;
+    /** RFC3339 update timestamp. */
+    updatedAt: string;
+}, never, Providers>;
+declare const BucketResource: import("../Resource.ts").ResourceClass<Bucket>;
+/**
+ * A Railway.Bucket is S3-compatible object storage in a Project. Each
+ * environment gets its own isolated instance and credentials. Bind
+ * {@link PutObject} / {@link GetObject} (and the other S3 object ops) in
+ * Service init — Alchemy injects the endpoint and credentials.
+ *
+ * Railway has no labels. Ownership is stamped into the display name via
+ * `createPhysicalName`. `name` updates in place. Changing `project`,
+ * `environment`, or `region` replaces the Bucket.
+ *
+ * @see https://docs.railway.com/storage-buckets
+ *
+ * ### Create a Bucket
+ * Pass a Project. Alchemy generates a unique name and deploys to the
+ * project's primary environment in `sjc`.
+ *
+ * **Example:** Generated name
+ * ```typescript
+ * const site = yield* Railway.Project("Site");
+ * const data = yield* Railway.Bucket("Data", { project: site });
+ * ```
+ *
+ * :::caution[Changing `project` replaces the Bucket]
+ * The Bucket is created in the new Project. The old Bucket is deleted.
+ * :::
+ *
+ * ### A stable name
+ * Pass `name` when you need a stable display name. The S3 API name is
+ * this plus a short hash (`s3BucketName`).
+ *
+ * **Example:** Explicit name
+ * ```typescript
+ * const data = yield* Railway.Bucket("Data", {
+ *   project: site,
+ *   name: "uploads",
+ * });
+ * ```
+ *
+ * ### Region
+ * Omit `region` to use `sjc`. Changing it replaces the Bucket.
+ *
+ * **Example:** Pin a region
+ * ```typescript
+ * const data = yield* Railway.Bucket("Data", {
+ *   project: site,
+ *   region: "iad",
+ * });
+ * ```
+ *
+ * :::caution[Changing `region` replaces the Bucket]
+ * Railway cannot move a bucket. A new Bucket is created, then the old
+ * one is deleted.
+ * :::
+ *
+ * ### Environment
+ * Defaults to the Project's primary environment. Pass a
+ * `Railway.Environment` (or `{ environmentId }`) to target another one.
+ *
+ * **Example:** Extra environment
+ * ```typescript
+ * const staging = yield* Railway.Environment("Staging", { project: site });
+ * const data = yield* Railway.Bucket("StagingData", {
+ *   project: site,
+ *   environment: staging,
+ * });
+ * ```
+ *
+ * :::caution[Changing `environment` replaces the Bucket]
+ * The Bucket instance is created in the new environment. The old
+ * instance is deleted.
+ * :::
+ *
+ * ### Put and get objects
+ * Railway buckets speak the S3 API. Bind {@link PutObject} /
+ * {@link GetObject} in Service init.
+ *
+ * **Example:** Put an object from a Service
+ * ```typescript
+ * import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+ *
+ * export default class Api extends Railway.Service<Api>()(
+ *   "Api",
+ *   { project: Site, main: import.meta.url },
+ *   Effect.gen(function* () {
+ *     const putObject = yield* Railway.PutObject(Data);
+ *     const getObject = yield* Railway.GetObject(Data);
+ *
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         yield* putObject({
+ *           Key: "hello.txt",
+ *           Body: "hello",
+ *           ContentType: "text/plain",
+ *         });
+ *         const obj = yield* getObject({ Key: "hello.txt" });
+ *         return HttpServerResponse.json({ ok: obj.ETag !== undefined });
+ *       }),
+ *     };
+ *   }).pipe(Effect.provide([Railway.PutObjectHttp, Railway.GetObjectHttp])),
+ * ) {}
+ * ```
+ *
+ * ### Module-scope declarations
+ * Declare the Project once. Pass it into every child. Resource-valued
+ * props accept the resource or an Effect producing it.
+ *
+ * **Example:** Module-scope Bucket
+ * ```typescript
+ * // src/data.ts
+ * import * as Railway from "alchemy/Railway";
+ *
+ * export const Site = Railway.Project("Site");
+ * export const Data = Railway.Bucket("Data", { project: Site });
+ * ```
+ *
+ * @resource
+ */
+export declare const Bucket: typeof BucketResource;
+declare const BucketNotCreated_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Railway.BucketNotCreated";
+} & Readonly<A>;
+export declare class BucketNotCreated extends BucketNotCreated_base<{
+    name: string;
+    projectId: string;
+}> {
+}
+declare const BucketProjectRequired_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Railway.BucketProjectRequired";
+} & Readonly<A>;
+export declare class BucketProjectRequired extends BucketProjectRequired_base<{
+    message: string;
+}> {
+}
+declare const BucketEnvironmentRequired_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Railway.BucketEnvironmentRequired";
+} & Readonly<A>;
+export declare class BucketEnvironmentRequired extends BucketEnvironmentRequired_base<{
+    message: string;
+}> {
+}
+export declare const BucketProvider: () => import("effect/Layer").Layer<Provider.Provider<Bucket>, never, import("./Environment.ts").RailwayEnvironment | import("../Stack.ts").Stack | import("../Stage.ts").Stage | railway.RailwayOpContext>;
+export {};
+//# sourceMappingURL=Bucket.d.ts.map

package/lib/Railway/Bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bucket.d.ts","sourceRoot":"","sources":["../../src/Railway/Bucket.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,OAAO,MAAM,0BAA0B,CAAC;AAEpD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAK5C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAM1C,OAAO,EAGL,KAAK,OAAO,EACb,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD;;;GAGG;AACH,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACrC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,MAAM,GAAG,QAAQ,CAC3B,gBAAgB,EAChB,WAAW,EACX;IACE,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,wDAAwD;IACxD,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,uDAAuD;IACvD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACnD;;OAEG;IACH,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACvD,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,EACD,KAAK,EACL,SAAS,CACV,CAAC;AAwBF,QAAA,MAAM,cAAc,gDAAqC,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoHG;AACH,eAAO,MAAM,MAAM,EAAE,OAAO,cAM3B,CAAC;;;;AAEF,qBAAa,gBAAiB,SAAQ,sBAEpC;IACA,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;CAAG;;;;AAEL,qBAAa,qBAAsB,SAAQ,2BAEzC;IACA,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;CAAG;;;;AAEL,qBAAa,yBAA0B,SAAQ,+BAE7C;IACA,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;CAAG;AAoSL,eAAO,MAAM,cAAc,4MAqNvB,CAAC"}