alchemy 2.0.0-beta.cli-platform-split-2 → 2.0.0-beta.pkg-setup-rc

package/lib/Cloudflare/Auth/OAuthClient.js

@@ -0,0 +1,221 @@
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import crypto from "node:crypto";
+import http from "node:http";
+import { OAUTH_CLIENT_ID, OAUTH_ENDPOINTS, OAUTH_REDIRECT_URI, } from "./AuthProvider.js";
+export class OAuthError extends Data.TaggedError("OAuthError") {
+}
+function generateState(length = 32) {
+    return crypto.randomBytes(length).toString("base64url");
+}
+function generatePKCE(length = 96) {
+    const verifier = crypto.randomBytes(length).toString("base64url");
+    const challenge = crypto
+        .createHash("sha256")
+        .update(verifier)
+        .digest("base64url");
+    return { verifier, challenge };
+}
+function extractCredentials(json) {
+    return {
+        type: "oauth",
+        access: json.access_token,
+        refresh: json.refresh_token,
+        expires: Date.now() + json.expires_in * 1000,
+        scopes: json.scope.split(" "),
+    };
+}
+const tokenRequest = (body) => Effect.gen(function* () {
+    const res = yield* Effect.tryPromise({
+        try: () => fetch(OAUTH_ENDPOINTS.token, {
+            method: "POST",
+            headers: {
+                Accept: "application/json",
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams(body).toString(),
+        }),
+        catch: (err) => new OAuthError({
+            error: "network_error",
+            errorDescription: `Token request failed: ${err}`,
+        }),
+    });
+    if (!res.ok) {
+        const json = yield* Effect.tryPromise({
+            try: () => res.json(),
+            catch: () => new OAuthError({
+                error: "parse_error",
+                errorDescription: `Token endpoint returned ${res.status}`,
+            }),
+        });
+        return yield* new OAuthError({
+            error: json.error,
+            errorDescription: json.error_description,
+        });
+    }
+    const json = yield* Effect.tryPromise({
+        try: () => res.json(),
+        catch: () => new OAuthError({
+            error: "parse_error",
+            errorDescription: "Failed to parse token response",
+        }),
+    });
+    return extractCredentials(json);
+});
+/**
+ * Generate an authorization URL with PKCE for the given scopes.
+ */
+export function authorize(scopes) {
+    const state = generateState();
+    const pkce = generatePKCE();
+    const url = new URL(OAUTH_ENDPOINTS.authorize);
+    url.searchParams.set("client_id", OAUTH_CLIENT_ID);
+    url.searchParams.set("redirect_uri", OAUTH_REDIRECT_URI);
+    url.searchParams.set("response_type", "code");
+    url.searchParams.set("scope", scopes.join(" "));
+    url.searchParams.set("state", state);
+    url.searchParams.set("code_challenge", pkce.challenge);
+    url.searchParams.set("code_challenge_method", "S256");
+    return { url: url.toString(), state, verifier: pkce.verifier };
+}
+/**
+ * Exchange an authorization code for OAuth credentials.
+ */
+export const exchange = (code, verifier) => tokenRequest({
+    grant_type: "authorization_code",
+    code,
+    code_verifier: verifier,
+    client_id: OAUTH_CLIENT_ID,
+    redirect_uri: OAUTH_REDIRECT_URI,
+});
+/**
+ * Refresh expired OAuth credentials.
+ */
+export const refresh = (credentials) => tokenRequest({
+    grant_type: "refresh_token",
+    refresh_token: credentials.refresh,
+    client_id: OAUTH_CLIENT_ID,
+    redirect_uri: OAUTH_REDIRECT_URI,
+});
+/**
+ * Revoke OAuth credentials.
+ */
+export const revoke = (credentials) => Effect.gen(function* () {
+    yield* Effect.tryPromise({
+        try: () => fetch(OAUTH_ENDPOINTS.revoke, {
+            method: "POST",
+            headers: {
+                Accept: "application/json",
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams({
+                refresh_token: credentials.refresh,
+                client_id: OAUTH_CLIENT_ID,
+                redirect_uri: OAUTH_REDIRECT_URI,
+            }).toString(),
+        }),
+        catch: (err) => new OAuthError({
+            error: "network_error",
+            errorDescription: `Revoke request failed: ${err}`,
+        }),
+    });
+});
+/**
+ * Start a local HTTP server to listen for the OAuth callback, exchange
+ * the authorization code, and return the credentials.
+ *
+ * Times out after 5 minutes.
+ */
+export const callback = (authorization) => Effect.tryPromise({
+    try: () => callbackPromise(authorization),
+    catch: (err) => {
+        if (err instanceof OAuthError)
+            return err;
+        return new OAuthError({
+            error: "callback_error",
+            errorDescription: `OAuth callback failed: ${err}`,
+        });
+    },
+});
+function callbackPromise(authorization) {
+    const { pathname, port } = new URL(OAUTH_REDIRECT_URI);
+    return new Promise((resolve, reject) => {
+        const server = http.createServer(async (req, res) => {
+            const url = new URL(req.url ?? "/", `http://${req.headers.host}`);
+            if (url.pathname !== pathname) {
+                res.statusCode = 404;
+                res.end("Not Found");
+                return;
+            }
+            const error = url.searchParams.get("error");
+            const errorDescription = url.searchParams.get("error_description");
+            if (error) {
+                res.writeHead(302, { Location: "https://alchemy.run/auth/error" });
+                res.end();
+                cleanup();
+                reject(new OAuthError({
+                    error,
+                    errorDescription: errorDescription ?? "An unknown error occurred.",
+                }));
+                return;
+            }
+            const code = url.searchParams.get("code");
+            const state = url.searchParams.get("state");
+            if (!code || !state) {
+                res.writeHead(302, { Location: "https://alchemy.run/auth/error" });
+                res.end();
+                cleanup();
+                reject(new OAuthError({
+                    error: "invalid_request",
+                    errorDescription: "Missing code or state",
+                }));
+                return;
+            }
+            if (state !== authorization.state) {
+                res.writeHead(302, { Location: "https://alchemy.run/auth/error" });
+                res.end();
+                cleanup();
+                reject(new OAuthError({
+                    error: "invalid_request",
+                    errorDescription: "Invalid state",
+                }));
+                return;
+            }
+            try {
+                const credentials = await Effect.runPromise(exchange(code, authorization.verifier));
+                res.writeHead(302, {
+                    Location: "https://alchemy.run/auth/success",
+                });
+                res.end();
+                cleanup();
+                resolve(credentials);
+            }
+            catch (err) {
+                res.writeHead(302, { Location: "https://alchemy.run/auth/error" });
+                res.end();
+                cleanup();
+                reject(err);
+            }
+        });
+        const timeout = setTimeout(() => {
+            cleanup();
+            reject(new OAuthError({
+                error: "timeout",
+                errorDescription: "The authorization process timed out.",
+            }));
+        }, 5 * 60 * 1000);
+        function cleanup() {
+            clearTimeout(timeout);
+            server.close();
+        }
+        server.on("error", (err) => {
+            cleanup();
+            reject(new OAuthError({
+                error: "server_error",
+                errorDescription: `Failed to start callback server: ${err.message}`,
+            }));
+        });
+        server.listen(Number(port));
+    });
+}
+//# sourceMappingURL=OAuthClient.js.map

package/lib/Cloudflare/Auth/OAuthClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthClient.js","sourceRoot":"","sources":["../../../src/Cloudflare/Auth/OAuthClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,OAAO,UAAW,SAAQ,IAAI,CAAC,WAAW,CAAC,YAAY,CAG3D;CAAG;AAgBL,SAAS,aAAa,CAAC,MAAM,GAAG,EAAE;IAChC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,MAAM,GAAG,EAAE;IAI/B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAK3B;IACC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,OAAO,EAAE,IAAI,CAAC,aAAa;QAC3B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;QAC5C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,CACnB,IAA4B,EACiB,EAAE,CAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACnC,GAAG,EAAE,GAAG,EAAE,CACR,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SAC3C,CAAC;QACJ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,IAAI,UAAU,CAAC;YACb,KAAK,EAAE,eAAe;YACtB,gBAAgB,EAAE,yBAAyB,GAAG,EAAE;SACjD,CAAC;KACL,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACpC,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,IAAI,EAA2D;YACrE,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,UAAU,CAAC;gBACb,KAAK,EAAE,aAAa;gBACpB,gBAAgB,EAAE,2BAA2B,GAAG,CAAC,MAAM,EAAE;aAC1D,CAAC;SACL,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;SACzC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACpC,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,IAAI,EAKN;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,UAAU,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,gBAAgB,EAAE,gCAAgC;SACnD,CAAC;KACL,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEL;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,MAAgB;IACxC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,IAAY,EACZ,QAAgB,EAC6B,EAAE,CAC/C,YAAY,CAAC;IACX,UAAU,EAAE,oBAAoB;IAChC,IAAI;IACJ,aAAa,EAAE,QAAQ;IACvB,SAAS,EAAE,eAAe;IAC1B,YAAY,EAAE,kBAAkB;CACjC,CAAC,CAAC;AAEL;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,WAA6B,EACgB,EAAE,CAC/C,YAAY,CAAC;IACX,UAAU,EAAE,eAAe;IAC3B,aAAa,EAAE,WAAW,CAAC,OAAO;IAClC,SAAS,EAAE,eAAe;IAC1B,YAAY,EAAE,kBAAkB;CACjC,CAAC,CAAC;AAEL;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,WAA6B,EACI,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CACR,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,aAAa,EAAE,WAAW,CAAC,OAAO;gBAClC,SAAS,EAAE,eAAe;gBAC1B,YAAY,EAAE,kBAAkB;aACjC,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC;QACJ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,IAAI,UAAU,CAAC;YACb,KAAK,EAAE,eAAe;YACtB,gBAAgB,EAAE,0BAA0B,GAAG,EAAE;SAClD,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,aAA4B,EACiB,EAAE,CAC/C,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC;IACzC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,GAAG,YAAY,UAAU;YAAE,OAAO,GAAG,CAAC;QAC1C,OAAO,IAAI,UAAU,CAAC;YACpB,KAAK,EAAE,gBAAgB;YACvB,gBAAgB,EAAE,0BAA0B,GAAG,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEL,SAAS,eAAe,CACtB,aAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAEvD,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAElE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACnE,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,MAAM,CACJ,IAAI,UAAU,CAAC;oBACb,KAAK;oBACL,gBAAgB,EAAE,gBAAgB,IAAI,4BAA4B;iBACnE,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,MAAM,CACJ,IAAI,UAAU,CAAC;oBACb,KAAK,EAAE,iBAAiB;oBACxB,gBAAgB,EAAE,uBAAuB;iBAC1C,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;gBAClC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,MAAM,CACJ,IAAI,UAAU,CAAC;oBACb,KAAK,EAAE,iBAAiB;oBACxB,gBAAgB,EAAE,eAAe;iBAClC,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,UAAU,CACzC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,CACvC,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,QAAQ,EAAE,kCAAkC;iBAC7C,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE;YACH,OAAO,EAAE,CAAC;YACV,MAAM,CACJ,IAAI,UAAU,CAAC;gBACb,KAAK,EAAE,SAAS;gBAChB,gBAAgB,EAAE,sCAAsC;aACzD,CAAC,CACH,CAAC;QACJ,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QAEF,SAAS,OAAO;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,MAAM,CACJ,IAAI,UAAU,CAAC;gBACb,KAAK,EAAE,cAAc;gBACrB,gBAAgB,EAAE,oCAAoC,GAAG,CAAC,OAAO,EAAE;aACpE,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/lib/Cloudflare/Container/Container.d.ts

@@ -0,0 +1,161 @@
+import type * as cf from "@cloudflare/workers-types";
+import * as Effect from "effect/Effect";
+import { Platform } from "../../Platform.ts";
+import * as Server from "../../Server/index.ts";
+import type { Fetcher } from "../Fetcher.ts";
+import type { ContainerApplication, ContainerApplicationProps, ContainerServices, ContainerShape } from "./ContainerApplication.ts";
+import { bindContainer } from "./ContainerBinding.ts";
+export declare const ContainerTypeId = "Cloudflare.Container";
+export type ContainerTypeId = typeof ContainerTypeId;
+export declare const isContainer: <T>(value: T) => value is T & Container;
+declare const ContainerError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ContainerError";
+} & Readonly<A>;
+export declare class ContainerError extends ContainerError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface ContainerStartupOptions extends cf.ContainerStartupOptions {
+}
+export interface ContainerProps extends ContainerApplicationProps {
+    main: string;
+}
+export type Container = {
+    get running(): Effect.Effect<boolean>;
+    start(options?: ContainerStartupOptions): Effect.Effect<void>;
+    monitor(): Effect.Effect<void, ContainerError>;
+    destroy(error?: any): Effect.Effect<void>;
+    signal(signo: number): Effect.Effect<void>;
+    getTcpPort(port: number): Effect.Effect<Fetcher>;
+    setInactivityTimeout(durationMs: number | bigint): Effect.Effect<void>;
+    interceptOutboundHttp(addr: string, binding: Fetcher): Effect.Effect<void>;
+    interceptAllOutboundHttp(binding: Fetcher): Effect.Effect<void>;
+};
+/**
+ * A Cloudflare Container that runs a long-lived process alongside a
+ * Durable Object.
+ *
+ * Containers always use the **Container Layer** pattern — the class
+ * and `.make()` must live in separate files. A Container must be
+ * bound to a Durable Object, and the DO imports the class to get a
+ * typed handle. If the class and `.make()` lived in the same file,
+ * the DO's bundle would pull in all of the container's runtime
+ * dependencies (process spawners, Node APIs, SDKs, etc.), which
+ * would bloat the bundle and likely break the Cloudflare Workers
+ * runtime. Keeping them separate ensures the bundler only includes
+ * the tiny class in the DO's output.
+ *
+ * See the {@link https://alchemy.run/concepts/platform | Platform
+ * concept} page for how this fits into the async / effect / layer
+ * progression.
+ *
+ * @section Container Layer
+ * Define the class and `.make()` in separate files. The class
+ * declares the container's identity, configuration, and typed
+ * shape. `.make()` provides the runtime implementation as a
+ * default export. Use `Container.of` to construct the typed
+ * shape — it ensures your implementation matches the methods
+ * declared on the class.
+ *
+ * @example Container class
+ * ```typescript
+ * // src/Sandbox.ts
+ * export class Sandbox extends Cloudflare.Container<
+ *   Sandbox,
+ *   {
+ *     exec: (cmd: string) => Effect.Effect<{
+ *       exitCode: number;
+ *       stdout: string;
+ *       stderr: string;
+ *     }>;
+ *   }
+ * >()(
+ *   "Sandbox",
+ *   { main: import.meta.filename },
+ * ) {}
+ * ```
+ *
+ * @example Container .make()
+ * ```typescript
+ * // src/Sandbox.runtime.ts
+ * export default Sandbox.make(
+ *   Effect.gen(function* () {
+ *     const cp = yield* ChildProcessSpawner;
+ *
+ *     return Sandbox.of({
+ *       exec: (cmd) =>
+ *         cp.spawn(ChildProcess.make(cmd, { shell: true })).pipe(
+ *           Effect.map(({ exitCode, stdout, stderr }) => ({
+ *             exitCode, stdout, stderr,
+ *           })),
+ *           Effect.scoped,
+ *         ),
+ *       fetch: Effect.succeed(
+ *         HttpServerResponse.text("Hello from container!"),
+ *       ),
+ *     });
+ *   }),
+ * );
+ * ```
+ *
+ * @section Configuration
+ * The props object accepts `main` (entrypoint file), `instanceType`
+ * (compute size), `runtime` (`"bun"` or `"node"`), and
+ * `observability` settings. Use `Stack.useSync` to vary config by
+ * stage.
+ *
+ * @example Stage-dependent configuration
+ * ```typescript
+ * export class Sandbox extends Cloudflare.Container<Sandbox>()(
+ *   "Sandbox",
+ *   Stack.useSync((stack) => ({
+ *     main: import.meta.filename,
+ *     instanceType: stack.stage === "prod" ? "standard-1" : "dev",
+ *     observability: { logs: { enabled: true } },
+ *   })),
+ * ) {}
+ * ```
+ *
+ * @section Starting from a Durable Object
+ * Use `Cloudflare.Container.bind` in the outer init phase to bind
+ * the container class, then `Cloudflare.start` in the inner
+ * per-instance phase to start it. Because the DO only imports the
+ * class, the runtime implementation is completely excluded from the
+ * DO's bundle.
+ *
+ * @example Binding and starting a container
+ * ```typescript
+ * // init (outer Effect) — only imports the class
+ * const sandbox = yield* Cloudflare.Container.bind(Sandbox);
+ *
+ * // per-instance (inner Effect)
+ * return Effect.gen(function* () {
+ *   const container = yield* Cloudflare.start(sandbox);
+ *
+ *   return {
+ *     exec: (cmd: string) => container.exec(cmd),
+ *   };
+ * });
+ * ```
+ *
+ * @section HTTP Requests to Container Ports
+ * Use `getTcpPort` to get a `fetch` handle for a specific port on
+ * the running container. This lets you make HTTP requests to
+ * servers running inside the container process.
+ *
+ * @example Fetching from a container port
+ * ```typescript
+ * const container = yield* Cloudflare.start(sandbox);
+ * const { fetch } = yield* container.getTcpPort(3000);
+ *
+ * const response = yield* fetch(
+ *   HttpClientRequest.get("http://container/health"),
+ * );
+ * ```
+ */
+export declare const Container: Platform<ContainerApplication, ContainerServices, ContainerShape, Server.ProcessContext, Container> & {
+    bind: typeof bindContainer;
+};
+export {};
+//# sourceMappingURL=Container.d.ts.map

package/lib/Cloudflare/Container/Container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Container.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Container/Container.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAGrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EACV,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,eAAO,MAAM,eAAe,yBAAyB,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC;AAErD,eAAO,MAAM,WAAW,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,KAAK,IAAI,CAAC,GAAG,SAIvB,CAAC;;;;AAEjC,qBAAa,cAAe,SAAQ,oBAAmC;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,uBAAwB,SAAQ,EAAE,CAAC,uBAAuB;CAAG;AAE9E,MAAM,WAAW,cAAe,SAAQ,yBAAyB;IAC/D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvE,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3E,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACjE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHG;AACH,eAAO,MAAM,SAAS,EAAE,QAAQ,CAC9B,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,MAAM,CAAC,cAAc,EACrB,SAAS,CACV,GAAG;IACF,IAAI,EAAE,OAAO,aAAa,CAAC;CAqF5B,CAAC"}

package/lib/Cloudflare/Container/Container.js

@@ -0,0 +1,189 @@
+import * as Config from "effect/Config";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { HttpServer } from "../../Http.js";
+import * as Output from "../../Output.js";
+import { Platform } from "../../Platform.js";
+import * as Server from "../../Server/index.js";
+import { bindContainer } from "./ContainerBinding.js";
+export const ContainerTypeId = "Cloudflare.Container";
+export const isContainer = (value) => typeof value === "object" &&
+    value !== null &&
+    "Type" in value &&
+    value.Type === ContainerTypeId;
+export class ContainerError extends Data.TaggedError("ContainerError") {
+}
+/**
+ * A Cloudflare Container that runs a long-lived process alongside a
+ * Durable Object.
+ *
+ * Containers always use the **Container Layer** pattern — the class
+ * and `.make()` must live in separate files. A Container must be
+ * bound to a Durable Object, and the DO imports the class to get a
+ * typed handle. If the class and `.make()` lived in the same file,
+ * the DO's bundle would pull in all of the container's runtime
+ * dependencies (process spawners, Node APIs, SDKs, etc.), which
+ * would bloat the bundle and likely break the Cloudflare Workers
+ * runtime. Keeping them separate ensures the bundler only includes
+ * the tiny class in the DO's output.
+ *
+ * See the {@link https://alchemy.run/concepts/platform | Platform
+ * concept} page for how this fits into the async / effect / layer
+ * progression.
+ *
+ * @section Container Layer
+ * Define the class and `.make()` in separate files. The class
+ * declares the container's identity, configuration, and typed
+ * shape. `.make()` provides the runtime implementation as a
+ * default export. Use `Container.of` to construct the typed
+ * shape — it ensures your implementation matches the methods
+ * declared on the class.
+ *
+ * @example Container class
+ * ```typescript
+ * // src/Sandbox.ts
+ * export class Sandbox extends Cloudflare.Container<
+ *   Sandbox,
+ *   {
+ *     exec: (cmd: string) => Effect.Effect<{
+ *       exitCode: number;
+ *       stdout: string;
+ *       stderr: string;
+ *     }>;
+ *   }
+ * >()(
+ *   "Sandbox",
+ *   { main: import.meta.filename },
+ * ) {}
+ * ```
+ *
+ * @example Container .make()
+ * ```typescript
+ * // src/Sandbox.runtime.ts
+ * export default Sandbox.make(
+ *   Effect.gen(function* () {
+ *     const cp = yield* ChildProcessSpawner;
+ *
+ *     return Sandbox.of({
+ *       exec: (cmd) =>
+ *         cp.spawn(ChildProcess.make(cmd, { shell: true })).pipe(
+ *           Effect.map(({ exitCode, stdout, stderr }) => ({
+ *             exitCode, stdout, stderr,
+ *           })),
+ *           Effect.scoped,
+ *         ),
+ *       fetch: Effect.succeed(
+ *         HttpServerResponse.text("Hello from container!"),
+ *       ),
+ *     });
+ *   }),
+ * );
+ * ```
+ *
+ * @section Configuration
+ * The props object accepts `main` (entrypoint file), `instanceType`
+ * (compute size), `runtime` (`"bun"` or `"node"`), and
+ * `observability` settings. Use `Stack.useSync` to vary config by
+ * stage.
+ *
+ * @example Stage-dependent configuration
+ * ```typescript
+ * export class Sandbox extends Cloudflare.Container<Sandbox>()(
+ *   "Sandbox",
+ *   Stack.useSync((stack) => ({
+ *     main: import.meta.filename,
+ *     instanceType: stack.stage === "prod" ? "standard-1" : "dev",
+ *     observability: { logs: { enabled: true } },
+ *   })),
+ * ) {}
+ * ```
+ *
+ * @section Starting from a Durable Object
+ * Use `Cloudflare.Container.bind` in the outer init phase to bind
+ * the container class, then `Cloudflare.start` in the inner
+ * per-instance phase to start it. Because the DO only imports the
+ * class, the runtime implementation is completely excluded from the
+ * DO's bundle.
+ *
+ * @example Binding and starting a container
+ * ```typescript
+ * // init (outer Effect) — only imports the class
+ * const sandbox = yield* Cloudflare.Container.bind(Sandbox);
+ *
+ * // per-instance (inner Effect)
+ * return Effect.gen(function* () {
+ *   const container = yield* Cloudflare.start(sandbox);
+ *
+ *   return {
+ *     exec: (cmd: string) => container.exec(cmd),
+ *   };
+ * });
+ * ```
+ *
+ * @section HTTP Requests to Container Ports
+ * Use `getTcpPort` to get a `fetch` handle for a specific port on
+ * the running container. This lets you make HTTP requests to
+ * servers running inside the container process.
+ *
+ * @example Fetching from a container port
+ * ```typescript
+ * const container = yield* Cloudflare.start(sandbox);
+ * const { fetch } = yield* container.getTcpPort(3000);
+ *
+ * const response = yield* fetch(
+ *   HttpClientRequest.get("http://container/health"),
+ * );
+ * ```
+ */
+export const Container = Platform("Cloudflare.Container", {
+    createExecutionContext: (id) => {
+        const runners = [];
+        const env = {};
+        const serve = (handler) => Effect.sync(() => {
+            runners.push(Effect.gen(function* () {
+                const httpServer = yield* Effect.serviceOption(HttpServer).pipe(Effect.map(Option.getOrUndefined));
+                if (httpServer) {
+                    yield* httpServer.serve(handler);
+                    yield* Effect.never;
+                }
+                else {
+                    // this should only happen at plantime, validate?
+                }
+            }).pipe(Effect.orDie));
+        });
+        return {
+            Type: ContainerTypeId,
+            LogicalId: id,
+            id,
+            env,
+            set: (bindingId, output) => Effect.sync(() => {
+                const key = bindingId.replaceAll(/[^a-zA-Z0-9]/g, "_");
+                env[key] = output.pipe(Output.map((value) => JSON.stringify(value)));
+                return key;
+            }),
+            get: (key) => Config.string(key)
+                .asEffect()
+                .pipe(Effect.flatMap((value) => Effect.try({
+                try: () => JSON.parse(value),
+                catch: (error) => error,
+            })), Effect.catch((cause) => Effect.die(new Error(`Failed to get environment variable: ${key}`, {
+                cause,
+            })))),
+            run: ((effect) => Effect.sync(() => {
+                runners.push(effect);
+            })),
+            serve,
+            exports: Effect.sync(() => ({
+                default: Effect.all(runners.map((eff) => Effect.forever(eff.pipe(
+                // Log and ignore errors (daemon mode, it should just re-run)
+                Effect.tapError((err) => Effect.logError(err)), Effect.ignore))), {
+                    concurrency: "unbounded",
+                }),
+            })),
+        };
+    },
+}, {
+    bind: bindContainer,
+});
+//# sourceMappingURL=Container.js.map

package/lib/Cloudflare/Container/Container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Container.js","sourceRoot":"","sources":["../../../src/Cloudflare/Container/Container.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAmB,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAQhD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAGtD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAI,KAAQ,EAA0B,EAAE,CACjE,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,MAAM,IAAI,KAAK;IACf,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC;AAEjC,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAoBL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHG;AACH,MAAM,CAAC,MAAM,SAAS,GAQlB,QAAQ,CACV,sBAAsB,EACtB;IACE,sBAAsB,EAAE,CAAC,EAAU,EAAyB,EAAE;QAC5D,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAwB,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,CAAc,OAAwB,EAAE,EAAE,CACtD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAClC,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACjC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACtB,CAAC;qBAAM,CAAC;oBACN,iDAAiD;gBACnD,CAAC;YACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE;YACb,EAAE;YACF,GAAG;YACH,GAAG,EAAE,CAAC,SAAiB,EAAE,MAAqB,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;gBACvD,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CACpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC7C,CAAC;gBACF,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YACJ,GAAG,EAAE,CAAI,GAAW,EAAE,EAAE,CACtB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;iBACf,QAAQ,EAAE;iBACV,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,MAAM,CAAC,GAAG,CAAC;gBACT,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM;gBACjC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAc;aACjC,CAAC,CACH,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,GAAG,CACR,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,EAAE;gBACtD,KAAK;aACN,CAAC,CACH,CACF,CACF;YACL,GAAG,EAAE,CAAC,CAAC,MAAuC,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC,CAAC,CAA4C;YAChD,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,CAAC,GAAG,CACjB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClB,MAAM,CAAC,OAAO,CACZ,GAAG,CAAC,IAAI;gBACN,6DAA6D;gBAC7D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,MAAM,CAAC,MAAM,CAGd,CACF,CACF,EACD;oBACE,WAAW,EAAE,WAAW;iBACzB,CACF;aACF,CAAC,CAAC;SACqB,CAAC;IAC7B,CAAC;CACF,EACD;IACE,IAAI,EAAE,aAAa;CACpB,CACF,CAAC"}