gigadrive 2.14.0 → 2.16.0

package/dist/index.mjs

@@ -9,7 +9,7 @@ import { Effect as Effect29, Layer, LogLevel, Logger } from "effect";
 // package.json
 var package_default = {
   name: "gigadrive",
-  version: "2.14.0",
+  version: "2.16.0",
   repository: {
     type: "git",
     url: "https://github.com/Gigadrive/sdk.git",
@@ -3063,6 +3063,7 @@ var describeMicroVm = (vm, now = Date.now()) => {
     `Size:        ${vm.vcpus} vCPU, ${formatMemory(vm.memoryMb)} memory, ${formatMemory(vm.diskMb)} disk`,
     `Region:      ${vm.region}`,
     `Network:     ${vm.network.egress === "deny" ? "outbound traffic blocked" : vm.network.allow && vm.network.allow.length > 0 ? `only ${vm.network.allow.join(", ")}` : "internet access"}`,
+    ...(vm.network.inject ?? []).map((rule) => `Injects:     ${rule.headers.join(", ")} for ${rule.domain}`),
     `Previews:    ${vm.network.previews === "private" ? "private (preview token required)" : "public"}`,
     `Application: ${vm.applicationId}`,
     `Created:     ${vm.createdAt}`
@@ -3098,6 +3099,17 @@ var formatWebhookTable = (webhooks) => formatTable([
     webhook.id
   ])
 ]);
+var formatVolumeTable = (volumes) => formatTable([
+  ["NAME", "SIZE", "STORED", "STATUS", "LAST SAVED", "ID"],
+  ...volumes.map((volume) => [
+    volume.name,
+    `${String(volume.sizeMb)} MiB`,
+    volume.storedBytes === null ? "-" : formatBytes(volume.storedBytes),
+    volume.attachedMicrovmId ? `${volume.status} (${volume.attachedMicrovmId})` : volume.status,
+    volume.lastSaveError ? `failed: ${volume.lastSaveError}` : volume.lastSavedAt ?? "never",
+    volume.id
+  ])
+]);
 var formatDeliveryTable = (deliveries) => formatTable([
   ["CREATED", "EVENT", "STATUS", "ATTEMPTS", "RESPONSE", "MICROVM"],
   ...deliveries.map((delivery) => [
@@ -3343,6 +3355,45 @@ var withClient = (run) => Effect22.gen(function* () {
   return yield* Effect22.tryPromise({ try: () => run(client), catch: toApiRequestError });
 });
 var signalOnInterrupt = (signal) => (command, exit) => Exit.isInterrupted(exit) ? Effect22.tryPromise(() => command.kill(signal)).pipe(Effect22.timeout("2 seconds"), Effect22.ignore) : Effect22.void;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var parseVolumeFlags = (values) => Effect22.gen(function* () {
+  if (values.length > 4) {
+    return yield* new InvalidMicroVmOptionsError({ message: "--volume takes at most 4 volumes." });
+  }
+  const volumes = [];
+  for (const value of values) {
+    const separator = value.indexOf(":");
+    const volumeId = separator > 0 ? value.slice(0, separator) : "";
+    const mountPath = separator > 0 ? value.slice(separator + 1) : "";
+    if (volumeId === "" || !mountPath.startsWith("/")) {
+      return yield* new InvalidMicroVmOptionsError({
+        message: `--volume must be VOLUME:PATH with an absolute path, such as cache:/cache (got ${value}).`
+      });
+    }
+    volumes.push({ volumeId, mountPath });
+  }
+  return volumes;
+});
+var parseInjectFlags = (values) => Effect22.gen(function* () {
+  const rules = /* @__PURE__ */ new Map();
+  for (const value of values) {
+    const colon = value.indexOf(":");
+    const equals = value.indexOf("=", colon + 1);
+    const domain = colon > 0 ? value.slice(0, colon).trim().toLowerCase() : "";
+    const name = colon > 0 && equals > colon ? value.slice(colon + 1, equals).trim() : "";
+    if (domain === "" || name === "" || equals === value.length - 1) {
+      return yield* new InvalidMicroVmOptionsError({
+        // The entry is not echoed: it may hold the credential.
+        message: '--inject must be DOMAIN:HEADER=VALUE, such as "api.openai.com:Authorization=Bearer $OPENAI_API_KEY".'
+      });
+    }
+    rules.set(domain, { ...rules.get(domain), [name]: value.slice(equals + 1) });
+  }
+  if (rules.size > 8) {
+    return yield* new InvalidMicroVmOptionsError({ message: "--inject takes at most 8 domains." });
+  }
+  return [...rules].map(([domain, headers]) => ({ domain, headers }));
+});
 var checkEgressFlags = (denyEgress, allowEgress) => Effect22.gen(function* () {
   if (denyEgress && allowEgress.length > 0) {
     return yield* new InvalidMicroVmOptionsError({
@@ -3373,6 +3424,14 @@ var createInput = (flags) => Effect22.gen(function* () {
   if (badPort !== void 0) {
     return yield* new InvalidMicroVmOptionsError({ message: `--port must be between 1 and 65535 (got ${badPort}).` });
   }
+  const inject = yield* parseInjectFlags(flags.inject);
+  if (inject.length > 0 && flags.denyEgress) {
+    return yield* new InvalidMicroVmOptionsError({ message: "--inject cannot be combined with --deny-egress." });
+  }
+  const volumes = yield* parseVolumeFlags(flags.volumes);
+  if (volumes.length > 0 && flags.pauseOnTimeout) {
+    return yield* new InvalidMicroVmOptionsError({ message: "--volume cannot be combined with --pause-on-timeout." });
+  }
   const applicationId = yield* resolveApplicationId(flags.app);
   const input = {
     ...applicationId ? { applicationId } : {},
@@ -3389,11 +3448,13 @@ var createInput = (flags) => Effect22.gen(function* () {
     ...flags.ports.length > 0 ? { ports: [...flags.ports] } : {},
     ...env ? { env } : {},
     ...metadata ? { metadata } : {},
-    ...flags.denyEgress || flags.privatePreviews || flags.allowEgress.length > 0 ? {
+    ...volumes.length > 0 ? { volumes } : {},
+    ...flags.denyEgress || flags.privatePreviews || flags.allowEgress.length > 0 || inject.length > 0 ? {
       network: {
         egress: flags.denyEgress ? "deny" : "allow",
         ...flags.privatePreviews ? { previews: "private" } : {},
-        ...flags.allowEgress.length > 0 ? { allow: flags.allowEgress.map((entry) => entry.trim()) } : {}
+        ...flags.allowEgress.length > 0 ? { allow: flags.allowEgress.map((entry) => entry.trim()) } : {},
+        ...inject.length > 0 ? { inject } : {}
       }
     } : {},
     ...Option14.match(flags.region, { onNone: () => ({}), onSome: (region) => ({ region }) })
@@ -3402,7 +3463,26 @@ var createInput = (flags) => Effect22.gen(function* () {
 });
 var createMicroVm = (flags) => Effect22.gen(function* () {
   const apiClient = yield* ApiClientService;
-  const input = yield* createInput(flags);
+  const parsed = yield* createInput(flags);
+  const named = (parsed.volumes ?? []).filter((volume) => !UUID.test(volume.volumeId));
+  const known = named.length > 0 ? yield* apiClient.request(
+    (client) => client.microvms.volumes.list({ ...parsed.applicationId ? { applicationId: parsed.applicationId } : {} })
+  ) : [];
+  const volumes = [];
+  for (const volume of parsed.volumes ?? []) {
+    if (UUID.test(volume.volumeId)) {
+      volumes.push(volume);
+      continue;
+    }
+    const match = known.find((entry) => entry.name === volume.volumeId);
+    if (match === void 0) {
+      return yield* new InvalidMicroVmOptionsError({
+        message: `No volume is named ${volume.volumeId}. Create it with "gigadrive microvms volumes create ${volume.volumeId}".`
+      });
+    }
+    volumes.push({ volumeId: match.id, mountPath: volume.mountPath });
+  }
+  const input = volumes.length > 0 ? { ...parsed, volumes } : parsed;
   if (!flags.json) yield* Console12.error(`Creating a microVM from ${input.image ?? "node22"}...`);
   const vm = yield* apiClient.request((client) => client.microvms.create(input));
   if (flags.json) {
@@ -3465,6 +3545,12 @@ var createCommand = Command12.make(
       ),
       Options7.repeated
     ),
+    inject: Options7.text("inject").pipe(
+      Options7.withDescription(
+        "Add a header to HTTPS requests to a domain, as DOMAIN:HEADER=VALUE (repeatable, up to 8 domains); the value never enters the microVM"
+      ),
+      Options7.repeated
+    ),
     pauseOnTimeout: Options7.boolean("pause-on-timeout").pipe(
       Options7.withDescription("Pause the microVM when its timeout ends instead of stopping it")
     ),
@@ -3473,6 +3559,13 @@ var createCommand = Command12.make(
         "Resume the paused microVM when a command, file call or public preview request reaches it"
       )
     ),
+    volumes: Options7.text("volume").pipe(
+      Options7.withAlias("v"),
+      Options7.withDescription(
+        "Attach a volume as VOLUME:PATH, by ID or name, such as cache:/cache (repeatable, up to 4; saved when the microVM stops)"
+      ),
+      Options7.repeated
+    ),
     region: Options7.text("region").pipe(Options7.withDescription("Region to place the microVM in"), Options7.optional),
     json: jsonOption2
   },
@@ -3827,15 +3920,31 @@ var updateMicroVmNetwork = (microvmId, flags) => Effect22.gen(function* () {
     });
   }
   yield* checkEgressFlags(flags.denyEgress, flags.allowEgress);
+  const inject = yield* parseInjectFlags(flags.inject);
+  if (inject.length > 0 && flags.denyEgress) {
+    return yield* new InvalidMicroVmOptionsError({ message: "--inject cannot be combined with --deny-egress." });
+  }
+  if (flags.clearInject && (inject.length > 0 || flags.denyEgress)) {
+    return yield* new InvalidMicroVmOptionsError({
+      message: "--clear-inject cannot be combined with --inject or --deny-egress."
+    });
+  }
   const apiClient = yield* ApiClientService;
   const vm = yield* apiClient.request(
     (client) => client.microvms.updateNetwork(
       microvmId,
-      flags.denyEgress ? { egress: "deny" } : flags.allowEgress.length > 0 ? { egress: "allow", allow: flags.allowEgress.map((entry) => entry.trim()) } : { egress: "allow" }
+      flags.denyEgress ? { egress: "deny" } : {
+        egress: "allow",
+        ...flags.allowEgress.length > 0 ? { allow: flags.allowEgress.map((entry) => entry.trim()) } : {},
+        ...inject.length > 0 || flags.clearInject ? { inject } : {}
+      }
     )
   );
   const reach = vm.network.egress === "deny" ? "no outbound traffic" : vm.network.allow ? vm.network.allow.join(", ") : "the whole internet";
   yield* Console12.log(`${vm.id} now reaches ${reach}.`);
+  for (const rule of vm.network.inject ?? []) {
+    yield* Console12.log(`Adds ${rule.headers.join(", ")} to HTTPS requests to ${rule.domain}.`);
+  }
   return vm;
 });
 var networkCommand = Command12.make(
@@ -3851,6 +3960,15 @@ var networkCommand = Command12.make(
     ),
     allowAllEgress: Options7.boolean("allow-all-egress").pipe(
       Options7.withDescription("Reach the whole internet again (private networks stay blocked)")
+    ),
+    inject: Options7.text("inject").pipe(
+      Options7.withDescription(
+        "Add a header to HTTPS requests to a domain, as DOMAIN:HEADER=VALUE (repeatable, up to 8 domains); the value never enters the microVM"
+      ),
+      Options7.repeated
+    ),
+    clearInject: Options7.boolean("clear-inject").pipe(
+      Options7.withDescription("Remove every header rule added with --inject")
     )
   },
   ({ microvmId, ...flags }) => updateMicroVmNetwork(microvmId, flags).pipe(Effect22.asVoid, reportErrors2("update the microVM network"))
@@ -3955,6 +4073,90 @@ var imagesCommand = Command12.make("images", {}, () => Effect22.void).pipe(
   Command12.withDescription("Built-in and custom microVM images"),
   Command12.withSubcommands([imagesListCommand, imagesCreateCommand, imagesRemoveCommand])
 );
+var volumeIdArg = Args5.text({ name: "volume-id" }).pipe(Args5.withDescription("The volume ID"));
+var volumesListCommand = Command12.make(
+  "ls",
+  { app: appOption6, json: jsonOption2 },
+  ({ app, json }) => Effect22.gen(function* () {
+    const apiClient = yield* ApiClientService;
+    const applicationId = yield* resolveApplicationId(app);
+    const volumes = yield* apiClient.request((client) => client.microvms.volumes.list({ applicationId }));
+    if (json) return yield* Console12.log(JSON.stringify(volumes, null, 2));
+    if (volumes.length === 0)
+      return yield* Console12.log('No volumes yet. Create one with "gigadrive microvms volumes create <name>".');
+    for (const line of formatVolumeTable(volumes)) yield* Console12.log(line);
+  }).pipe(reportErrors2("list volumes"))
+).pipe(Command12.withDescription("List the application's volumes"));
+var createVolume = (flags) => Effect22.gen(function* () {
+  const apiClient = yield* ApiClientService;
+  const applicationId = yield* resolveApplicationId(flags.app);
+  const volume = yield* apiClient.request(
+    (client) => client.microvms.volumes.create({
+      name: flags.name,
+      ...Option14.match(flags.size, { onNone: () => ({}), onSome: (sizeMb) => ({ sizeMb }) }),
+      ...applicationId ? { applicationId } : {}
+    })
+  );
+  if (flags.json) {
+    yield* Console12.log(JSON.stringify(volume, null, 2));
+  } else {
+    yield* Console12.log(`Created volume ${volume.name} (${String(volume.sizeMb)} MiB, ${volume.id}).`);
+    yield* Console12.log(`Attach it: gigadrive microvms create --volume ${volume.name}:/data`);
+  }
+  return volume;
+});
+var volumesCreateCommand = Command12.make(
+  "create",
+  {
+    name: Args5.text({ name: "name" }).pipe(
+      Args5.withDescription("Lowercase letters, digits and -, unique per application")
+    ),
+    size: Options7.integer("size").pipe(
+      Options7.withDescription("Size in MiB, 1024 to 51200 (default: 10240)"),
+      Options7.optional
+    ),
+    app: appOption6,
+    json: jsonOption2
+  },
+  (flags) => createVolume(flags).pipe(Effect22.asVoid, reportErrors2("create the volume"))
+).pipe(Command12.withDescription("Create an empty volume"));
+var volumesRenameCommand = Command12.make(
+  "rename",
+  { volumeId: volumeIdArg, name: Args5.text({ name: "name" }).pipe(Args5.withDescription("The new name")) },
+  ({ volumeId, name }) => Effect22.gen(function* () {
+    const apiClient = yield* ApiClientService;
+    const volume = yield* apiClient.request((client) => client.microvms.volumes.rename(volumeId, name));
+    yield* Console12.log(`Renamed the volume to ${volume.name}.`);
+  }).pipe(reportErrors2("rename the volume"))
+).pipe(Command12.withDescription("Rename a volume"));
+var volumesSaveCommand = Command12.make(
+  "save",
+  { microvmId: Args5.text({ name: "microvm-id" }).pipe(Args5.withDescription("A running microVM with volumes")) },
+  ({ microvmId }) => Effect22.gen(function* () {
+    const apiClient = yield* ApiClientService;
+    yield* apiClient.request((client) => client.microvms.saveVolumes(microvmId));
+    yield* Console12.log(`Saved the volumes of ${microvmId}.`);
+  }).pipe(reportErrors2("save the volumes"))
+).pipe(Command12.withDescription("Save a running microVM's volumes without stopping it"));
+var volumesRemoveCommand = Command12.make(
+  "rm",
+  { volumeId: volumeIdArg },
+  ({ volumeId }) => Effect22.gen(function* () {
+    const apiClient = yield* ApiClientService;
+    yield* apiClient.request((client) => client.microvms.volumes.delete(volumeId));
+    yield* Console12.log(`Deleted volume ${volumeId}.`);
+  }).pipe(reportErrors2("delete the volume"))
+).pipe(Command12.withDescription("Delete a volume and its contents (it must not be attached)"));
+var volumesCommand = Command12.make("volumes", {}, () => Effect22.void).pipe(
+  Command12.withDescription("Persistent filesystems that outlive the microVMs they are attached to"),
+  Command12.withSubcommands([
+    volumesListCommand,
+    volumesCreateCommand,
+    volumesRenameCommand,
+    volumesSaveCommand,
+    volumesRemoveCommand
+  ])
+);
 var WEBHOOK_EVENTS = [
   "microvm.created",
   "microvm.running",
@@ -4083,6 +4285,7 @@ var SUBCOMMANDS = [
   extendCommand,
   networkCommand,
   imagesCommand,
+  volumesCommand,
   webhooksCommand
 ];
 var microvmsCommand = Command12.make("microvms", {}, () => Effect22.void).pipe(