alchemy 2.0.0-beta.76 → 2.0.0-beta.78

package/lib/AWS/Lambda/MicrovmBinding.js

@@ -1,69 +1,8 @@
-import * as Endpoint from "@distilled.cloud/aws/Endpoint";
-import { Region } from "@distilled.cloud/aws/Region";
 import * as Effect from "effect/Effect";
-import * as HashMap from "effect/HashMap";
 import * as Layer from "effect/Layer";
-import * as Option from "effect/Option";
-import * as Redacted from "effect/Redacted";
-import * as Ref from "effect/Ref";
-import * as Scope from "effect/Scope";
-import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
-import { AlchemyContext } from "../../AlchemyContext.js";
 import * as Binding from "../../Binding.js";
 import * as Output from "../../Output.js";
-import { DEFAULT_LOCAL_ENDPOINT } from "../AuthProvider.js";
-import { Credentials, makeAssumeRoleResolver } from "../Credentials.js";
-import { AccessKey } from "../IAM/AccessKey.js";
-import { Role } from "../IAM/Role.js";
-import { User } from "../IAM/User.js";
-import { isBindingHost } from "./Function.js";
-// We resolve the host (Worker vs Lambda) at both deploy AND runtime to decide
-// how credentials are supplied. A Cloudflare Worker is structurally tagged with
-// this Type id; a hard import of the Cloudflare module graph is avoided.
-const WORKER_TYPE_ID = "Cloudflare.Worker";
-const isWorkerHost = (host) => host.Type === WORKER_TYPE_ID;
-/** Region segment of an AWS ARN (`arn:partition:service:<region>:...`). */
-const regionFromArn = (arn) => arn.split(":")[3] ?? "us-east-1";
-// ---------------------------------------------------------------------------
-// Per-scope singleton store. A Worker reaching AWS must create exactly ONE IAM
-// User + AccessKey + Role (and one assumed-role credential cache) regardless of
-// how many of the ~16 MicroVM `*Http` bindings it uses. A
-// `WeakMap<Scope, Ref<HashMap>>` memoizes any keyed effect for the lifetime of
-// the surrounding scope (the deploy plan, or the worker's runtime init scope),
-// so every binding shares the same resources and the same credentials.
-// ---------------------------------------------------------------------------
-const perScope = new WeakMap();
-// Fallback when no `Scope` is in context — notably a deployed Worker's init
-// phase, which runs outside any scope. Process-wide is an acceptable singleton
-// granularity there (one isolate == one logical host).
-const globalStore = new Map();
-const storeRef = Effect.gen(function* () {
-    const scope = yield* Effect.serviceOption(Scope.Scope);
-    if (Option.isNone(scope))
-        return undefined;
-    let ref = perScope.get(scope.value);
-    if (!ref) {
-        ref = yield* Ref.make(HashMap.empty());
-        perScope.set(scope.value, ref);
-    }
-    return ref;
-});
-const memoize = (key, build) => Effect.gen(function* () {
-    const ref = yield* storeRef;
-    if (ref) {
-        const existing = HashMap.get(yield* Ref.get(ref), key);
-        if (Option.isSome(existing))
-            return existing.value;
-        const value = yield* build;
-        yield* Ref.update(ref, HashMap.set(key, value));
-        return value;
-    }
-    if (globalStore.has(key))
-        return globalStore.get(key);
-    const value = yield* build;
-    globalStore.set(key, value);
-    return value;
-});
+import { hostAwsAccess, regionFromArn, withRuntimeCredentials, } from "./BindingHttp.js";
 /**
  * Derive the `microvm:*` instance-ARN glob from an image ARN by swapping the
  * `microvm-image:<name>` resource segment for `microvm:*`, keeping the same
@@ -117,128 +56,6 @@ const imagePolicyStatements = (image, options) => [
         ]
         : []),
 ];
-/**
- * Create — once per scope, per host worker — the IAM identity a Cloudflare
- * Worker uses to reach AWS:
- *   - an IAM **User** allowed to assume any role that trusts it,
- *   - a long-lived **AccessKey** for that user,
- *   - a least-privilege **Role** the user assumes (trusts only this user;
- *     MicroVM permissions accumulate on it via `role.bind`).
- *
- * The user's access key + the role ARN are read as {@link Output} *accessors*
- * (`yield* accessKey.accessKeyId`, …) — yielding an attribute both registers
- * the binding on the worker (deploy) and returns an `Effect` that reads it at
- * runtime. At runtime those accessors feed an assume-role credentials layer
- * (single-flight, expiry-aware) built once and shared across all bindings.
- */
-const ensureWorkerAwsAccess = (host) => memoize(`microvm-aws:${host.LogicalId}`, Effect.gen(function* () {
-    const id = host.LogicalId;
-    // The user may assume any role that trusts it (Resource `*`); the role's
-    // trust policy is what actually restricts assumption to this user, which
-    // avoids a User↔Role ARN dependency cycle while staying safe.
-    const user = yield* User(`${id}-microvm-user`, {
-        inlinePolicies: {
-            "assume-microvm-role": {
-                Version: "2012-10-17",
-                Statement: [
-                    { Effect: "Allow", Action: ["sts:AssumeRole"], Resource: ["*"] },
-                ],
-            },
-        },
-    });
-    const accessKey = yield* AccessKey(`${id}-microvm-key`, {
-        userName: user.userName,
-    });
-    const role = yield* Role(`${id}-microvm-role`, {
-        assumeRolePolicyDocument: {
-            Version: "2012-10-17",
-            Statement: [
-                {
-                    Effect: "Allow",
-                    Principal: { AWS: user.userArn },
-                    Action: ["sts:AssumeRole"],
-                },
-            ],
-        },
-    });
-    // Local dev: the AWS side of this binding runs on the emulator, so the
-    // worker's STS AssumeRole and MicroVM calls must too. Bake the
-    // LocalStack-standard `AWS_ENDPOINT_URL` into the worker env — the same
-    // override the emulator injects into Lambda containers, picked up at
-    // runtime by `Endpoint.fromEnv()` in `withRuntimeCredentials`. Deploy
-    // runs (dev=false) bind nothing, so live behavior is unchanged.
-    if (!globalThis.__ALCHEMY_RUNTIME__) {
-        const context = yield* Effect.serviceOption(AlchemyContext);
-        if (Option.isSome(context) && context.value.dev) {
-            yield* host.bind `${id}-microvm-endpoint`({
-                bindings: [
-                    {
-                        type: "plain_text",
-                        name: "AWS_ENDPOINT_URL",
-                        text: DEFAULT_LOCAL_ENDPOINT,
-                    },
-                ],
-            });
-        }
-    }
-    // Bind the user's credentials + role ARN onto the worker via accessors:
-    // at deploy this registers the env (the secret as `secret_text`); at
-    // runtime these resolve to the deployed values.
-    const accessKeyId = yield* accessKey.accessKeyId;
-    const secretAccessKey = yield* accessKey.secretAccessKey;
-    const roleArn = yield* role.roleArn;
-    // The long-lived IAM-user credentials that sign `AssumeRole`. Read lazily
-    // from the worker environment on each refresh (NOT captured eagerly, so
-    // this is valid at deploy time where the env isn't populated yet).
-    const base = Layer.succeed(Credentials, Effect.gen(function* () {
-        const id = yield* accessKeyId;
-        const secret = yield* secretAccessKey;
-        return {
-            accessKeyId: Redacted.make(id),
-            secretAccessKey: secret
-                ? Redacted.isRedacted(secret)
-                    ? secret
-                    : Redacted.make(secret)
-                : Redacted.make(""),
-            sessionToken: undefined,
-            // STS AssumeRole is signed against a fixed global endpoint region;
-            // per-request operations provide their own image-derived Region.
-            region: "us-east-1",
-        };
-    }));
-    // Build the single-flight, expiry-aware assume-role cache ONCE. STS is
-    // global, so the endpoint region is a fixed default; the per-request
-    // operation provides its own image-derived `Region` separately.
-    const credentials = yield* makeAssumeRoleResolver({
-        roleArn,
-        base,
-        region: "us-east-1",
-    });
-    return { role, credentials };
-}));
-/**
- * Run a MicroVM operation with host-appropriate AWS credentials:
- * - Lambda Function host → the execution-role credentials already in the
- *   ambient environment (nothing to provide).
- * - Cloudflare Worker host → the assumed-role credentials, plus a `Region`
- *   derived from the image ARN and an `HttpClient`.
- */
-const withRuntimeCredentials = (access, region, eff) => access
-    ? Effect.gen(function* () {
-        const reg = yield* region;
-        // Provide the SHARED cached resolver built once in
-        // `ensureWorkerAwsAccess` — NOT a fresh assume-role layer per request —
-        // so the assumed-role credentials are reused (and only refreshed near
-        // expiry) instead of re-assuming the role on every call.
-        return yield* eff.pipe(Effect.provide(Layer.succeed(Credentials, access.credentials).pipe(Layer.provideMerge(Layer.succeed(Region, Effect.succeed(reg))), 
-        // `AWS_ENDPOINT_URL` from the worker env (bound under local
-        // dev by `ensureWorkerAwsAccess`); resolves undefined when
-        // unset, so live workers keep the real AWS endpoints. The
-        // shared assume-role resolver also reads this ambient
-        // Endpoint for its STS call.
-        Layer.provideMerge(Endpoint.fromEnv()), Layer.provideMerge(FetchHttpClient.layer))));
-    })
-    : eff;
 /**
  * Build a MicroVM runtime binding bound to a {@link MicrovmImage}. At deploy it
  * registers the IAM grant on the host — the Lambda execution role directly, or
@@ -250,26 +67,16 @@ export const makeImageBinding = (options) => Layer.effect(options.binding, Effec
     const run = yield* options.operation;
     return Effect.fn(function* (image) {
         const host = yield* Binding.Host;
-        const statements = imagePolicyStatements(image, options);
-        const label = `Allow(${host?.LogicalId}, AWS.Lambda.${options.name}(${image.LogicalId}))`;
         // Accessors (registered on the host at deploy, resolved at runtime).
         const imageArn = yield* image.imageArn;
         // Region is derived from the resolved image ARN — via `Effect.map` of
         // the accessor, NOT a second Output binding (whose env key would embed
         // the mapper's source text and is brittle).
         const region = Effect.map(imageArn, regionFromArn);
-        let access;
-        if (isBindingHost(host)) {
-            if (!globalThis.__ALCHEMY_RUNTIME__) {
-                yield* host.bind `${label}`({ policyStatements: statements });
-            }
-        }
-        else if (host !== undefined && isWorkerHost(host)) {
-            access = yield* ensureWorkerAwsAccess(host);
-            if (!globalThis.__ALCHEMY_RUNTIME__) {
-                yield* access.role.bind `${label}`({ policyStatements: statements });
-            }
-        }
+        const access = yield* hostAwsAccess(host, () => ({
+            label: `Allow(${host?.LogicalId}, AWS.Lambda.${options.name}(${image.LogicalId}))`,
+            policyStatements: imagePolicyStatements(image, options),
+        }));
         return Effect.fn(`AWS.Lambda.${options.name}(${image.LogicalId})`)(function* (request) {
             return yield* withRuntimeCredentials(access, region, run(options.injectImageIdentifier
                 ? { ...request, imageIdentifier: yield* imageArn }
@@ -285,22 +92,12 @@ export const makeAccountBinding = (options) => Layer.effect(options.binding, Eff
     const run = yield* options.operation;
     return Effect.fn(function* () {
         const host = yield* Binding.Host;
-        const label = `Allow(${host?.LogicalId}, AWS.Lambda.${options.name}())`;
-        const statements = [
-            { Effect: "Allow", Action: options.actions, Resource: ["*"] },
-        ];
-        let access;
-        if (isBindingHost(host)) {
-            if (!globalThis.__ALCHEMY_RUNTIME__) {
-                yield* host.bind `${label}`({ policyStatements: statements });
-            }
-        }
-        else if (host !== undefined && isWorkerHost(host)) {
-            access = yield* ensureWorkerAwsAccess(host);
-            if (!globalThis.__ALCHEMY_RUNTIME__) {
-                yield* access.role.bind `${label}`({ policyStatements: statements });
-            }
-        }
+        const access = yield* hostAwsAccess(host, () => ({
+            label: `Allow(${host?.LogicalId}, AWS.Lambda.${options.name}())`,
+            policyStatements: [
+                { Effect: "Allow", Action: options.actions, Resource: ["*"] },
+            ],
+        }));
         return Effect.fn(`AWS.Lambda.${options.name}()`)(function* (request) {
             // Account-level operations are global; default the STS/endpoint region.
             const region = Effect.succeed("us-east-1");

package/lib/AWS/Lambda/MicrovmBinding.js.map

@@ -1 +1 @@
-{"version":3,"file":"MicrovmBinding.js","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmBinding.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,GAAG,MAAM,YAAY,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAe9C,8EAA8E;AAC9E,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAO3C,MAAM,YAAY,GAAG,CAAC,IAAkB,EAAsB,EAAE,CAC7D,IAA0B,CAAC,IAAI,KAAK,cAAc,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;AAEhF,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,0DAA0D;AAC1D,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,IAAI,OAAO,EAGzB,CAAC;AACJ,4EAA4E;AAC5E,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;AAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAmB,CAAC,CAAC;QACxD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAU,GAAW,EAAE,KAA6B,EAAE,EAAE,CACtE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IAC5B,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC,KAAU,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAgB,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,CAAM,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC,CAA2B,CAAC;AA2C/B;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC/C,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,YAAY,CAAC;AAE/D;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAY,EAAE;IAC3D,4CAA4C;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC7D,kCAAkC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO;QACL,GAAG,MAAM,sBAAsB;QAC/B,GAAG,YAAY,0BAA0B;KAC1C,CAAC;AACJ,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,qBAAqB,GAAG,CAC5B,KAAmB,EACnB,OAAiD,EACvB,EAAE,CAAC;IAC7B;QACE,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ,EACN,OAAO,CAAC,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,uDAAuD;gBACvD,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,CAAC;oBACE,+DAA+D;oBAC/D,gEAAgE;oBAChE,uDAAuD;oBACvD,6CAA6C;oBAC7C,MAAM,CAAC,WAAW,CAAA,GAAG,KAAK,CAAC,QAAQ,EAAE;oBACrC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;iBAC7C;gBACH,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;KAChD;IACD,GAAG,CAAC,OAAO,CAAC,oBAAoB;QAC9B,CAAC,CAAC;YACE;gBACE,MAAM,EAAE,OAAgB;gBACxB,MAAM,EAAE,CAAC,6BAA6B,CAAC;gBACvC,QAAQ,EAAE;oBACR,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAChD;oBACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAChD;iBACF;aACF;SACF;QACH,CAAC,CAAC,EAAE,CAAC;CACR,CAAC;AAiBF;;;;;;;;;;;;;GAaG;AACH,MAAM,qBAAqB,GAAG,CAAC,IAAgB,EAAE,EAAE,CACjD,OAAO,CACL,eAAgB,IAAqB,CAAC,SAAS,EAAE,EACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAI,IAAqB,CAAC,SAAS,CAAC;IAE5C,yEAAyE;IACzE,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE;QAC7C,cAAc,EAAE;YACd,qBAAqB,EAAE;gBACrB,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE;oBACT,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE;iBACjE;aACF;SACF;KACF,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE;QACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE;QAC7C,wBAAwB,EAAE;YACxB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE;oBAChC,MAAM,EAAE,CAAC,gBAAgB,CAAC;iBAC3B;aACF;SACF;KACF,CAAC,CAAC;IAEH,uEAAuE;IACvE,+DAA+D;IAC/D,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAChD,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,EAAE,mBAAmB,CAAC;gBACvC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,kBAAkB;wBACxB,IAAI,EAAE,sBAAsB;qBAC7B;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IACjD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAEpC,0EAA0E;IAC1E,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CACxB,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;QACtC,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,eAAe,EAAE,MAAM;gBACrB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC3B,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,YAAY,EAAE,SAAS;YACvB,mEAAmE;YACnE,iEAAiE;YACjE,MAAM,EAAE,WAAW;SACU,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IAEF,uEAAuE;IACvE,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC;QAChD,OAAO;QACP,IAAI;QACJ,MAAM,EAAE,WAAW;KACpB,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC,CAAC,CACH,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAC7B,MAAmC,EACnC,MAA6B,EAC7B,GAA6B,EACH,EAAE,CAC5B,MAAM;IACJ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QAC1B,mDAAmD;QACnD,wEAAwE;QACxE,sEAAsE;QACtE,yDAAyD;QACzD,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CACpB,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CACjD,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,4DAA4D;QAC5D,2DAA2D;QAC3D,0DAA0D;QAC1D,sDAAsD;QACtD,6BAA6B;QAC7B,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EACtC,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,CAC1C,CACF,CACF,CAAC;IACJ,CAAC,CAAC;IACJ,CAAC,CAAC,GAAG,CAAC;AAEV;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAiD,EAC9B,EAAE,CACrB,KAAK,CAAC,MAAM,CACV,OAAO,CAAC,OAAc,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAmB;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,SAAS,IAAI,EAAE,SAAS,gBAAgB,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC;QAE1F,qEAAqE;QACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,sEAAsE;QACtE,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEnD,IAAI,MAAmC,CAAC;QACxC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,cAAc,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAChE,QAAQ,CAAC,EAAE,OAAY;YACrB,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAClC,MAAM,EACN,MAAM,EACN,GAAG,CACD,OAAO,CAAC,qBAAqB;gBAC3B,CAAC,CAAC,EAAE,GAAI,OAAkB,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE;gBAC9D,CAAC,CAAC,OAAO,CACZ,CACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAC6B,CAAC;AAapC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAmD,EAChC,EAAE,CACrB,KAAK,CAAC,MAAM,CACV,OAAO,CAAC,OAAc,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,KAAK,GAAG,SAAS,IAAI,EAAE,SAAS,gBAAgB,OAAO,CAAC,IAAI,KAAK,CAAC;QACxE,MAAM,UAAU,GAA6B;YAC3C,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE;SAC9D,CAAC;QAEF,IAAI,MAAmC,CAAC;QACxC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA,GAAG,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,cAAc,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,EACxD,OAAY;YAEZ,wEAAwE;YACxE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAC6B,CAAC"}
+{"version":3,"file":"MicrovmBinding.js","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmBinding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EACL,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAwD1B;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC/C,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,YAAY,CAAC;AAE/D;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAY,EAAE;IAC3D,4CAA4C;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC7D,kCAAkC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO;QACL,GAAG,MAAM,sBAAsB;QAC/B,GAAG,YAAY,0BAA0B;KAC1C,CAAC;AACJ,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,qBAAqB,GAAG,CAC5B,KAAmB,EACnB,OAAiD,EACvB,EAAE,CAAC;IAC7B;QACE,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ,EACN,OAAO,CAAC,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,uDAAuD;gBACvD,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,CAAC;oBACE,+DAA+D;oBAC/D,gEAAgE;oBAChE,uDAAuD;oBACvD,6CAA6C;oBAC7C,MAAM,CAAC,WAAW,CAAA,GAAG,KAAK,CAAC,QAAQ,EAAE;oBACrC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;iBAC7C;gBACH,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;KAChD;IACD,GAAG,CAAC,OAAO,CAAC,oBAAoB;QAC9B,CAAC,CAAC;YACE;gBACE,MAAM,EAAE,OAAgB;gBACxB,MAAM,EAAE,CAAC,6BAA6B,CAAC;gBACvC,QAAQ,EAAE;oBACR,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAChD;oBACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAChD;iBACF;aACF;SACF;QACH,CAAC,CAAC,EAAE,CAAC;CACR,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAiD,EAC9B,EAAE,CACrB,KAAK,CAAC,MAAM,CACV,OAAO,CAAC,OAAc,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAmB;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAEjC,qEAAqE;QACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,sEAAsE;QACtE,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/C,KAAK,EAAE,SAAS,IAAI,EAAE,SAAS,gBAAgB,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI;YAClF,gBAAgB,EAAE,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;SACxD,CAAC,CAAC,CAAC;QAEJ,OAAO,MAAM,CAAC,EAAE,CAAC,cAAc,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAChE,QAAQ,CAAC,EAAE,OAAY;YACrB,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAClC,MAAM,EACN,MAAM,EACN,GAAG,CACD,OAAO,CAAC,qBAAqB;gBAC3B,CAAC,CAAC,EAAE,GAAI,OAAkB,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE;gBAC9D,CAAC,CAAC,OAAO,CACZ,CACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAC6B,CAAC;AAapC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAmD,EAChC,EAAE,CACrB,KAAK,CAAC,MAAM,CACV,OAAO,CAAC,OAAc,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/C,KAAK,EAAE,SAAS,IAAI,EAAE,SAAS,gBAAgB,OAAO,CAAC,IAAI,KAAK;YAChE,gBAAgB,EAAE;gBAChB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE;aAC9D;SACF,CAAC,CAAC,CAAC;QAEJ,OAAO,MAAM,CAAC,EAAE,CAAC,cAAc,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,EACxD,OAAY;YAEZ,wEAAwE;YACxE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAC6B,CAAC"}

package/lib/AWS/Lambda/MicrovmBundle.d.ts

@@ -50,7 +50,7 @@ export interface ArtifactFile {
  * package the MicroVM code artifact (Dockerfile + bundled program, or a build
  * context) before uploading it to S3.
  */
-export declare const zipFiles: (files: readonly ArtifactFile[]) => Effect.Effect<Buffer<ArrayBufferLike>, never, never>;
+export { zipFiles } from "../../Util/zip.ts";
 /**
  * Recursively read a build-context directory into a flat list of files
  * (relative paths + bytes) for zipping into the code artifact. Used by the

package/lib/AWS/Lambda/MicrovmBundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MicrovmBundle.d.ts","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAEpC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,yBAAyB,kDACW,CAAC;AAElD,yDAAyD;AACzD,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,mBACjB,MAAM,GAAG,SAAS,WACzB,KAAK,GAAG,MAAM,QACjB,MAAM,KACX,MAwBF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB;UASzB,MAAM;aACH,KAAK,GAAG,MAAM;cACb,MAAM,GAAG,SAAS;iBACf,OAAO;eACT,MAAM,EAAE;UACb,MAAM;YACJ,MAAM,CAAC,YAAY;;;;;;;gHA+E3B,CAAC;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B;AAED;;;;GAIG;AACH,eAAO,MAAM,QAAQ,0FAenB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;UAON,MAAM;aAAW,UAAU;4CAkBpD,CAAC"}
+{"version":3,"file":"MicrovmBundle.d.ts","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAEpC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,yBAAyB,kDACW,CAAC;AAElD,yDAAyD;AACzD,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,mBACjB,MAAM,GAAG,SAAS,WACzB,KAAK,GAAG,MAAM,QACjB,MAAM,KACX,MAwBF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB;UASzB,MAAM;aACH,KAAK,GAAG,MAAM;cACb,MAAM,GAAG,SAAS;iBACf,OAAO;eACT,MAAM,EAAE;UACb,MAAM;YACJ,MAAM,CAAC,YAAY;;;;;;;gHA+E3B,CAAC;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B;AAED;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;UAON,MAAM;aAAW,UAAU;4CAkBpD,CAAC"}

package/lib/AWS/Lambda/MicrovmBundle.js

@@ -113,18 +113,7 @@ await bootstrap(entrypoint, ${JSON.stringify({
  * package the MicroVM code artifact (Dockerfile + bundled program, or a build
  * context) before uploading it to S3.
  */
-export const zipFiles = Effect.fn(function* (files) {
-    const zip = new (yield* Effect.promise(() => import("jszip"))).default();
-    const date = new Date("1980-01-01T00:00:00.000Z");
-    for (const file of files) {
-        zip.file(file.path, file.content, { date });
-    }
-    return yield* Effect.promise(() => zip.generateAsync({
-        type: "nodebuffer",
-        compression: "DEFLATE",
-        platform: "UNIX",
-    }));
-});
+export { zipFiles } from "../../Util/zip.js";
 /**
  * Recursively read a build-context directory into a flat list of files
  * (relative paths + bytes) for zipping into the code artifact. Used by the

package/lib/AWS/Lambda/MicrovmBundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"MicrovmBundle.js","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAEpC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,+CAA+C,CAAC;AAElD,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,cAAkC,EAClC,OAAuB,EACvB,IAAY,EACJ,EAAE;IACV,MAAM,IAAI,GAAG,cAAc,EAAE,IAAI,EAAE,IAAI,QAAQ,yBAAyB,EAAE,CAAC;IAC3E,MAAM,cAAc,GAClB,OAAO,KAAK,KAAK;QACf,CAAC,CAAC,oEAAoE;YACpE,yDAAyD;YACzD,0IAA0I;QAC5I,CAAC,CAAC,4CAA4C,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO;QACL,IAAI;QACJ,EAAE;QACF,cAAc;QACd,cAAc;QACd,sEAAsE;QACtE,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,kBAAkB;QAClB,UAAU,IAAI,EAAE;QAChB,YAAY,IAAI,EAAE;QAClB,gBAAgB,UAAU,sBAAsB;QAChD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACvD,IAAI,EACJ,OAAO,EACP,OAAO,GAAG,SAAS,EACnB,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,EAAE,EACb,IAAI,EACJ,KAAK,GASN;IACC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC;IAE5D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACrC,KAAa,EACb,OAAuC;QAEvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CACxB;YACE,GAAG,KAAK,EAAE,KAAK;YACf,KAAK,EAAE,KAAK;YACZ,GAAG;YACH,QAAQ,EAAE;gBACR,YAAY;gBACZ,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,GAAG,QAAQ;gBACX,GAAG,CAAE,KAAK,EAAE,KAAK,EAAE,QAAiC,IAAI,EAAE,CAAC;aAC5D;YACD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE;gBACP,cAAc,EACZ,OAAO,KAAK,KAAK;oBACf,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC;oBACjC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;gBACtC,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO;aACzB;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;YACzC,SAAS,EAAE,IAAI;SAChB,EACD;YACE,GAAG,KAAK,EAAE,MAAM;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK;YAC5C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,KAAK;YACtC,cAAc,EAAE,WAAW;YAC3B,uEAAuE;YACvE,6DAA6D;YAC7D,cAAc,EAAE,mBAAmB;SACpC,EACD,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAChB,QAAQ,EACR,kBAAkB,CAChB,CAAC,UAAU,EAAE,EAAE,CAAC;4BACE,IAAI,CAAC,SAAS,CAC9B,OAAO,KAAK,KAAK;YACf,CAAC,CAAC,sCAAsC;YACxC,CAAC,CAAC,uCAAuC,CAC5C;SACF,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,kBAAkB,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;8BAEnF,IAAI,CAAC,SAAS,CAAC;YACjC,IAAI;YACJ,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;SAChD,CAAC;CACX,CACQ,CACF,CAAC;IAEN,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,CAAC,CAAC,OAAO;KAChB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC;AAOH;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACzC,KAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAChC,GAAG,CAAC,aAAa,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,MAAM;KACjB,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAW;IAClE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,CACX,OAAe,EACqD,EAAE,CACtE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAA4C,EAAE,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEL,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"MicrovmBundle.js","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAEpC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,+CAA+C,CAAC;AAElD,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,cAAkC,EAClC,OAAuB,EACvB,IAAY,EACJ,EAAE;IACV,MAAM,IAAI,GAAG,cAAc,EAAE,IAAI,EAAE,IAAI,QAAQ,yBAAyB,EAAE,CAAC;IAC3E,MAAM,cAAc,GAClB,OAAO,KAAK,KAAK;QACf,CAAC,CAAC,oEAAoE;YACpE,yDAAyD;YACzD,0IAA0I;QAC5I,CAAC,CAAC,4CAA4C,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO;QACL,IAAI;QACJ,EAAE;QACF,cAAc;QACd,cAAc;QACd,sEAAsE;QACtE,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,kBAAkB;QAClB,UAAU,IAAI,EAAE;QAChB,YAAY,IAAI,EAAE;QAClB,gBAAgB,UAAU,sBAAsB;QAChD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACvD,IAAI,EACJ,OAAO,EACP,OAAO,GAAG,SAAS,EACnB,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,EAAE,EACb,IAAI,EACJ,KAAK,GASN;IACC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC;IAE5D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACrC,KAAa,EACb,OAAuC;QAEvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CACxB;YACE,GAAG,KAAK,EAAE,KAAK;YACf,KAAK,EAAE,KAAK;YACZ,GAAG;YACH,QAAQ,EAAE;gBACR,YAAY;gBACZ,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,GAAG,QAAQ;gBACX,GAAG,CAAE,KAAK,EAAE,KAAK,EAAE,QAAiC,IAAI,EAAE,CAAC;aAC5D;YACD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE;gBACP,cAAc,EACZ,OAAO,KAAK,KAAK;oBACf,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC;oBACjC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;gBACtC,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO;aACzB;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;YACzC,SAAS,EAAE,IAAI;SAChB,EACD;YACE,GAAG,KAAK,EAAE,MAAM;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK;YAC5C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,KAAK;YACtC,cAAc,EAAE,WAAW;YAC3B,uEAAuE;YACvE,6DAA6D;YAC7D,cAAc,EAAE,mBAAmB;SACpC,EACD,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAChB,QAAQ,EACR,kBAAkB,CAChB,CAAC,UAAU,EAAE,EAAE,CAAC;4BACE,IAAI,CAAC,SAAS,CAC9B,OAAO,KAAK,KAAK;YACf,CAAC,CAAC,sCAAsC;YACxC,CAAC,CAAC,uCAAuC,CAC5C;SACF,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,kBAAkB,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;8BAEnF,IAAI,CAAC,SAAS,CAAC;YACjC,IAAI;YACJ,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;SAChD,CAAC;CACX,CACQ,CACF,CAAC;IAEN,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,CAAC,CAAC,OAAO;KAChB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC;AAOH;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAW;IAClE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,CACX,OAAe,EACqD,EAAE,CACtE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAA4C,EAAE,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEL,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC"}

package/lib/AWS/Lambda/MicrovmImage.d.ts

@@ -51,12 +51,10 @@ export interface MicrovmImageProps {
      */
     external?: string[];
     /**
-     * Bundler configuration for {@link main} (effectful mode): rolldown
-     * `input`/`output` overrides plus pure-annotation options (`pure`).
-     * `effect`, `@effect/*`, `alchemy`, `@alchemy.run/*`, and
-     * `@distilled.cloud/*` are annotated as pure by default so unused code
-     * from those packages is tree-shaken; list additional packages via
-     * `pure.packages`, or disable with `pure: false`.
+     * Bundler configuration for {@link main} (effectful mode). Unused
+     * code is tree-shaken. `effect`, alchemy, and `@distilled.cloud` are
+     * marked pure so unused parts prune more aggressively. List extra
+     * packages with `pure.packages`, or disable with `pure: false`.
      */
     build?: Bundle.BundleConfig;
     /**
@@ -201,7 +199,7 @@ export type MicrovmImageShape = Main<MicrovmImageServices>;
  * - A **build role** (`buildRole`) Lambda assumes to read the code artifact and
  *   write build logs. Pass a {@link Role} instance and the required permissions
  *   are granted automatically — see the example below.
- * - A **bootstrapped Assets bucket** (`alchemy aws bootstrap`) for effectful /
+ * - A **bootstrapped Assets bucket** (`alchemy provider aws bootstrap`) for effectful /
  *   external modes, which upload the artifact to S3.
  * - The account must be **onboarded to the Lambda MicroVM preview**.
  *
@@ -351,16 +349,13 @@ export type MicrovmImageShape = Main<MicrovmImageServices>;
  * ```
  *
  * ### Bundling & Tree-shaking
- * `main` is bundled with rolldown at deploy time. Top-level calls in the
- * `effect`, `@effect/*`, `alchemy`, `@alchemy.run/*`, and
- * `@distilled.cloud/*` packages receive `#__PURE__` annotations by
- * default, so anything the MicroVM program doesn't use from those packages is
- * tree-shaken out of the bundle. Any other package — including your own
- * app — is left untouched unless you list it explicitly.
+ * `main` is bundled with rolldown at deploy time. Unused code is
+ * tree-shaken. `effect`, alchemy, and `@distilled.cloud` are marked
+ * pure so unused parts prune more aggressively. Your app is not
+ * marked pure.
  *
- * **Example:** Treat additional packages as pure
- * Pass package names (or picomatch globs) via `build.pure.packages` to
- * annotate them in addition to the defaults.
+ * **Example:** Mark additional packages as pure
+ * Only list packages with no top-level side effects.
  * ```typescript
  * {
  *   main: import.meta.url,
@@ -370,18 +365,7 @@ export type MicrovmImageShape = Main<MicrovmImageServices>;
  * }
  * ```
  *
- * Listing a package annotates calls whose result is bound (variable
- * initializers, exports) — safe anywhere. If a listed package also
- * declares `"sideEffects": false` (or `[]`) in its `package.json`, that
- * combination opts it into full annotation: top-level calls whose result
- * is discarded (e.g. `router.on("/path", handler)` registrations) are
- * also marked pure and deleted under minification when unused. Only list
- * a `sideEffects: false` package if its modules really are free of
- * meaningful top-level side effects. The `effect`, `alchemy`, and
- * `@distilled.cloud` defaults declare exactly that, on purpose — their
- * modules are designed to be fully tree-shakeable.
- *
- * **Example:** Disable pure annotations
+ * **Example:** Turn it off
  * ```typescript
  * {
  *   main: import.meta.url,

package/lib/AWS/Lambda/MicrovmImage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MicrovmImage.d.ts","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmImage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,KAAK,QAAQ,MAAM,sCAAsC,CAAC;AAGtE,OAAO,KAAK,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,KAAK,MAAM,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA4BjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC;IAE5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAElC;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B;;;OAGG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC;IAErC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC;IAE3B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC;;OAEG;IACH,iBAAiB,CAAC,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAEhD;;OAEG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAEjC;;OAEG;IACH,wBAAwB,CAAC,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IAEjD;;OAEG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;IAEvB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEzC;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,yBAAyB,EACzB,iBAAiB,EACjB;IACE,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAClC,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uDAAuD;IACvD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE,EACD;IACE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC,EACD,SAAS,CACV;CAAG;AAEJ,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,MAAM,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqXG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAsBrB,CAAC"}
+{"version":3,"file":"MicrovmImage.d.ts","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmImage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,KAAK,QAAQ,MAAM,sCAAsC,CAAC;AAGtE,OAAO,KAAK,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,KAAK,MAAM,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA4BjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC;IAE5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAElC;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B;;;OAGG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC;IAErC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC;IAE3B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC;;OAEG;IACH,iBAAiB,CAAC,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAEhD;;OAEG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAEjC;;OAEG;IACH,wBAAwB,CAAC,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IAEjD;;OAEG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;IAEvB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEzC;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,yBAAyB,EACzB,iBAAiB,EACjB;IACE,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAClC,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uDAAuD;IACvD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE,EACD;IACE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC,EACD,SAAS,CACV;CAAG;AAEJ,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,MAAM,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuWG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAsBrB,CAAC"}

package/lib/AWS/Lambda/MicrovmImage.js

@@ -59,7 +59,7 @@ export { MicrovmImageTypeId } from "./MicrovmRuntimeContext.js";
  * - A **build role** (`buildRole`) Lambda assumes to read the code artifact and
  *   write build logs. Pass a {@link Role} instance and the required permissions
  *   are granted automatically — see the example below.
- * - A **bootstrapped Assets bucket** (`alchemy aws bootstrap`) for effectful /
+ * - A **bootstrapped Assets bucket** (`alchemy provider aws bootstrap`) for effectful /
  *   external modes, which upload the artifact to S3.
  * - The account must be **onboarded to the Lambda MicroVM preview**.
  *
@@ -209,16 +209,13 @@ export { MicrovmImageTypeId } from "./MicrovmRuntimeContext.js";
  * ```
  *
  * ### Bundling & Tree-shaking
- * `main` is bundled with rolldown at deploy time. Top-level calls in the
- * `effect`, `@effect/*`, `alchemy`, `@alchemy.run/*`, and
- * `@distilled.cloud/*` packages receive `#__PURE__` annotations by
- * default, so anything the MicroVM program doesn't use from those packages is
- * tree-shaken out of the bundle. Any other package — including your own
- * app — is left untouched unless you list it explicitly.
+ * `main` is bundled with rolldown at deploy time. Unused code is
+ * tree-shaken. `effect`, alchemy, and `@distilled.cloud` are marked
+ * pure so unused parts prune more aggressively. Your app is not
+ * marked pure.
  *
- * **Example:** Treat additional packages as pure
- * Pass package names (or picomatch globs) via `build.pure.packages` to
- * annotate them in addition to the defaults.
+ * **Example:** Mark additional packages as pure
+ * Only list packages with no top-level side effects.
  * ```typescript
  * {
  *   main: import.meta.url,
@@ -228,18 +225,7 @@ export { MicrovmImageTypeId } from "./MicrovmRuntimeContext.js";
  * }
  * ```
  *
- * Listing a package annotates calls whose result is bound (variable
- * initializers, exports) — safe anywhere. If a listed package also
- * declares `"sideEffects": false` (or `[]`) in its `package.json`, that
- * combination opts it into full annotation: top-level calls whose result
- * is discarded (e.g. `router.on("/path", handler)` registrations) are
- * also marked pure and deleted under minification when unused. Only list
- * a `sideEffects: false` package if its modules really are free of
- * meaningful top-level side effects. The `effect`, `alchemy`, and
- * `@distilled.cloud` defaults declare exactly that, on purpose — their
- * modules are designed to be fully tree-shakeable.
- *
- * **Example:** Disable pure annotations
+ * **Example:** Turn it off
  * ```typescript
  * {
  *   main: import.meta.url,

package/lib/AWS/Lambda/MicrovmImage.js.map

@@ -1 +1 @@
-{"version":3,"file":"MicrovmImage.js","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmImage.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAEpC;;;;GAIG;AACH,MAAM,yBAAyB,GAAsB;IACnD;QACE,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,QAAQ,EAAE,CAAC,oCAAoC,CAAC;KACjD;IACD;QACE,MAAM,EAAE,OAAO;QACf,MAAM,EAAE;YACN,qBAAqB;YACrB,sBAAsB;YACtB,mBAAmB;SACpB;QACD,QAAQ,EAAE,CAAC,mDAAmD,CAAC;KAChE;CACF,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAuLhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqXG;AACH,MAAM,CAAC,MAAM,YAAY,GAKrB,QAAQ,CAAC,kBAAkB,EAAE;IAC/B,oBAAoB,EAAE,yBAAyB;IAC/C,4EAA4E;IAC5E,gEAAgE;IAChE,QAAQ,EAAE,CAAC,SAAS,EAAE,KAAwB,EAAE,EAAE,CAChD,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACpD,CAAC,CAAC,KAAK,CAAC,SAAS;aACZ,IAAI,CAAA,SAAS,SAAS,kCAAkC,CAAC;YAC1D,iCAAiC;YACjC,gBAAgB,EAAE,yBAAyB;YAC3C,+DAA+D;YAC/D,mEAAmE;YACnE,0BAA0B,EAAE;gBAC1B;oBACE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;oBAC9C,MAAM,EAAE,CAAC,gBAAgB,CAAC;iBAC3B;aACF;SACF,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI;CAClB,CAAC,CAAC"}
+{"version":3,"file":"MicrovmImage.js","sourceRoot":"","sources":["../../../src/AWS/Lambda/MicrovmImage.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAEpC;;;;GAIG;AACH,MAAM,yBAAyB,GAAsB;IACnD;QACE,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,QAAQ,EAAE,CAAC,oCAAoC,CAAC;KACjD;IACD;QACE,MAAM,EAAE,OAAO;QACf,MAAM,EAAE;YACN,qBAAqB;YACrB,sBAAsB;YACtB,mBAAmB;SACpB;QACD,QAAQ,EAAE,CAAC,mDAAmD,CAAC;KAChE;CACF,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAqLhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuWG;AACH,MAAM,CAAC,MAAM,YAAY,GAKrB,QAAQ,CAAC,kBAAkB,EAAE;IAC/B,oBAAoB,EAAE,yBAAyB;IAC/C,4EAA4E;IAC5E,gEAAgE;IAChE,QAAQ,EAAE,CAAC,SAAS,EAAE,KAAwB,EAAE,EAAE,CAChD,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACpD,CAAC,CAAC,KAAK,CAAC,SAAS;aACZ,IAAI,CAAA,SAAS,SAAS,kCAAkC,CAAC;YAC1D,iCAAiC;YACjC,gBAAgB,EAAE,yBAAyB;YAC3C,+DAA+D;YAC/D,mEAAmE;YACnE,0BAA0B,EAAE;gBAC1B;oBACE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;oBAC9C,MAAM,EAAE,CAAC,gBAAgB,CAAC;iBAC3B;aACF;SACF,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI;CAClB,CAAC,CAAC"}

package/lib/AWS/Lambda/MicrovmRuntimeContext.js

@@ -41,7 +41,7 @@ export const makeMicrovmRuntimeContext = (id) => {
         }),
         get: (key) => 
         // Read straight from `process.env` — see `unpackEnvValue` for why
-        // this must never resolve through `Config.string`.
+        // this must never resolve through `Config.String`.
         Effect.sync(() => unpackEnvValue(process.env[key])),
         run: ((effect) => Effect.sync(() => {
             runners.push(effect);

package/lib/AWS/Local/DevWatchProvider.d.ts

@@ -5,11 +5,11 @@ import * as Scope from "effect/Scope";
 import type { Platform } from "../../Platform.ts";
 import type { ResourceClassLike, ResourceLike } from "../../Resource.ts";
 /**
- * The AWS dev sidecar entry URL ([Local.ts](./Local.ts)) — every
+ * The AWS provider group module ([Local.ts](./Local.ts)) — every
  * {@link makeDevWatchProvider} consumer passes this so all floci dev
- * providers share ONE sidecar process.
+ * providers are served from the same group by the dev sidecar.
  */
-export declare const flociSidecarEntry: () => string;
+export declare const flociProvidersUrl: () => string;
 /** A diff decision produced by {@link DevWatchSpec.replaceOn}. */
 export interface DevReplaceDecision {
     readonly action: "replace";
@@ -133,5 +133,5 @@ export interface DevWatchSpec<Props, Attrs> {
  * a per-resource watch loop. See the module doc for the exact split between
  * the shared skeleton and the {@link DevWatchSpec}.
  */
-export declare const makeDevWatchProvider: <R extends ResourceLike, Props = R["Props"], Attrs = R["Attributes"]>(cls: ResourceClassLike<R> | Platform<R, any, any, any, any, any>, serverEntryUrl: string, spec: DevWatchSpec<Props, Attrs>) => Layer.Layer<import("../../Provider.ts").Provider<R>, never, import("../../AlchemyContext.ts").AlchemyContext | import("../../Artifacts.ts").ArtifactStore | Scope.Scope | import("../../Stack.ts").Stack>;
+export declare const makeDevWatchProvider: <R extends ResourceLike, Props = R["Props"], Attrs = R["Attributes"]>(cls: ResourceClassLike<R> | Platform<R, any, any, any, any, any>, providersUrl: string, spec: DevWatchSpec<Props, Attrs>) => Layer.Layer<import("../../Provider.ts").Provider<R>, never, import("../../AlchemyContext.ts").AlchemyContext | import("../../Artifacts.ts").ArtifactStore | Scope.Scope | import("../../Stack.ts").Stack>;
 //# sourceMappingURL=DevWatchProvider.d.ts.map

package/lib/AWS/Local/DevWatchProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DevWatchProvider.d.ts","sourceRoot":"","sources":["../../../src/AWS/Local/DevWatchProvider.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAoCvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAKtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIzE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAI3B,CAAC;AAEJ,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK,EAAE,KAAK;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;CACxD;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY,CAAC,KAAK,EAAE,KAAK;IACxC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IAC/D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE;QACxC,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,KAAK,CAAC;KACb,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAC9B,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,KAAK,GAAG,SAAS,CAAC;QAC5B,KAAK,EAAE,KAAK,CAAC;KACd,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,KAAK,CAAC;KACf,KAAK,MAAM,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,KAAK,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,CACnB,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,KAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;CACpC;AAYD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,CAAC,SAAS,YAAY,EACtB,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,EAClB,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,OAElB,iBAAiB,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,kBAChD,MAAM,QAChB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,8MAkR/B,CAAC"}
+{"version":3,"file":"DevWatchProvider.d.ts","sourceRoot":"","sources":["../../../src/AWS/Local/DevWatchProvider.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAoCvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAKtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKzE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAI3B,CAAC;AAEJ,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK,EAAE,KAAK;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;CACxD;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY,CAAC,KAAK,EAAE,KAAK;IACxC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IAC/D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE;QACxC,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,KAAK,CAAC;KACb,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAC9B,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,KAAK,GAAG,SAAS,CAAC;QAC5B,KAAK,EAAE,KAAK,CAAC;KACd,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,KAAK,CAAC;KACf,KAAK,MAAM,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,KAAK,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,CACnB,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,KAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;CACpC;AAYD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,CAAC,SAAS,YAAY,EACtB,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,EAClB,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,OAElB,iBAAiB,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,gBAClD,MAAM,QACd,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,8MA2R/B,CAAC"}

package/lib/AWS/Local/DevWatchProvider.js

@@ -9,7 +9,7 @@
  * What the helper owns (identically for every consumer):
  *
  * - **RPC-sidecar hosting** via {@link RpcProvider.effect} with the shared
- *   AWS dev sidecar entry ([Local.ts](./Local.ts)), so the provider and its
+ *   AWS provider group ([Local.ts](./Local.ts)), so the provider and its
  *   watch fibers survive exec-process hot reloads during `alchemy dev`.
  * - **Live-provider delegation** — builds the caller's LIVE provider layer
  *   inside the floci override context ({@link flociServices} + optional
@@ -42,19 +42,20 @@ import { canonicalHash } from "../../Local/LocalProvider.js";
 import * as RpcProvider from "../../Local/RpcProvider.js";
 import { flociServices } from "./FlociServices.js";
 import { withProviderContext } from "./ProviderContext.js";
+import { moduleExtension } from "../../Util/Node.js";
 /**
- * The AWS dev sidecar entry URL ([Local.ts](./Local.ts)) — every
+ * The AWS provider group module ([Local.ts](./Local.ts)) — every
  * {@link makeDevWatchProvider} consumer passes this so all floci dev
- * providers share ONE sidecar process.
+ * providers are served from the same group by the dev sidecar.
  */
-export const flociSidecarEntry = () => import.meta.resolve(import.meta.url.endsWith(".ts") ? "./Local.ts" : "./Local.js", import.meta.url);
+export const flociProvidersUrl = () => import.meta.resolve(`./Local${moduleExtension(import.meta.url)}`, import.meta.url);
 /**
  * Build an RPC-sidecar-hosted `alchemy dev` provider that delegates its
  * lifecycle to the LIVE provider inside the floci override context and owns
  * a per-resource watch loop. See the module doc for the exact split between
  * the shared skeleton and the {@link DevWatchSpec}.
  */
-export const makeDevWatchProvider = (cls, serverEntryUrl, spec) => RpcProvider.effect(cls, serverEntryUrl, Effect.gen(function* () {
+export const makeDevWatchProvider = (cls, providersUrl, spec) => RpcProvider.effect(cls, providersUrl, Effect.gen(function* () {
     const scope = yield* Effect.scope;
     const ambient = yield* Effect.context();
     // The floci override context (emulator endpoint, dummy credentials,
@@ -175,7 +176,16 @@ export const makeDevWatchProvider = (cls, serverEntryUrl, spec) => RpcProvider.e
         // endpoint-wrapped live provider (spreading the Proxy materializes
         // each member through the wrapping `get`).
         ...wrapped,
-        diff: Effect.fn(function* ({ id, olds, news, output, }) {
+        diff: Effect.fn(function* ({ id, olds, news: rawNews, output, }) {
+            // Runtime props (an Effect-native Function's handler, a Layer)
+            // arrive as Effects, which `isResolved` classifies as unresolved.
+            // They are irrelevant to the dev diff, so strip them BEFORE the
+            // resolved check — otherwise this diff bails to the engine default
+            // (`havePropsChanged` → noop) and the "fresh session with a state
+            // row but no watcher" branch below never runs: `alchemy dev`
+            // resumed over an existing stage would start no watch loop and
+            // hot reload would silently be dead.
+            const news = stripEffects(rawNews);
             if (!isResolved(news))
                 return;
             if (!output)