feat(gcp): add GCP resource providers, HTTP bindings, and nuke

[Mkassabov]

GCP resource factory coverage: 1051 Resource exports (each with a dedicated {Resource}.test.ts), 192 HTTP Binding.Services, live tests under packages/alchemy/test/GCP, and pnpm nuke:gcp.

Effect-native Function with bindings

Cloud Run is the GCP analog of Lambda/Worker. Bindings grant IAM onto the runtime service account (AWS policyStatements / Cloudflare AccountApiToken) and inject env. Memorystore speaks RESP through the shared alchemy/Redis client.

const tweets = yield* GCP.PubSub.Topic("tweets", {});
const cache = yield* GCP.Redis.Instance("Cache", { memorySizeGb: 1 });

export class TweetBot extends GCP.Function<TweetBot>()(
  "TweetBot",
  { main: import.meta.url },
  Effect.gen(function* () {
    const publish = yield* GCP.PubSub.Publish(tweets);
    const redis = yield* GCP.Redis.ReadWriteRedis(cache);
    return {
      fetch: Effect.gen(function* () {
        const text = (yield* redis.get("last-tweet")) ?? "hello twitter";
        yield* publish({
          body: { messages: [{ data: btoa(text) }] },
        });
        return HttpServerResponse.text("queued");
      }),
    };
  }).pipe(
    Effect.provide(GCP.PubSub.PublishHttp),
    Effect.provide(GCP.Redis.ReadWriteRedisHttp),
  ),
) {}

GCP.Function is GCP.Run.Service. Jobs are the same shape with GCP.Run.Job (runs to completion). Zip-source Cloud Functions stay on GCP.CloudFunctions.Function and still receive binding env + IAM on the runtime SA.

const bucket = yield* GCP.Storage.Bucket("data", { forceDestroy: true });
const topic = yield* GCP.PubSub.Topic("events", {});

Observe-ensure-sync reconcilers, idempotent delete, list() of alchemy-labeled rows. HTTP bindings close over Credentials + HttpClient on GCP.providers() and grant least-privilege IAM on the host. Distilled pin: cecf35fe9597699b66e8e5ad3e3db6b135e2a44c.

Catalog

Every distilled create+get+delete trio is implemented or out-of-scope ({SCRATCH}/gcp-catalog.txt): 1127 implemented rows, 0 missing, 3 out-of-scope (Cloud Tasks tasks, Spanner sessions, Storage objects). Vertex/Apigee/consumer APIs are implemented with skipIf-gated live tests, not catalogued away.

Every registered Resource has packages/alchemy/test/GCP/{Service}/{Resource}.test.ts (1051/1051).

Live recapture (188 dirs)

Per-service timeout 240 pnpm test test/GCP/{dir} --profile testing --retry 0. The full test/GCP tree cannot finish in a 240s wall (~2124 tests).

• 188/188 dirs PASS after targeted retests (skipIf FAST/creds/entitlement todos are not failures)
• Compute whole-dir hits the 240s wall. File-batch recapture: 70 PASS / 2 GATED / 0 FAIL of 72 files
• Skeptic Compute recapture (no GCP_TEST_*): NetworkFirewallPolicy 2/2, RegionNetworkFirewallPolicy 2/2, NetworkAttachment 2/2, RegionCompositeHealthCheck 3/3

Bindings census

192 Binding.Service exports, each with a live Action/HTTP invocation in Bindings.test.ts. Memorystore also has ReadRedis / WriteRedis / ReadWriteRedis over alchemy/Redis.

Nuke residue (catalogued)

pnpm nuke:gcp --dry-run after the recapture:

GCP.Analyticshub.DataExchange  2 to delete
GCP.Analyticshub.DataExchangesListing  2 to delete
GCP.KMS.CryptoKey  2 to delete
6 resource(s) to delete.

• Analytics Hub listings/exchanges: GCP HTTP 500 INTERNAL when replicaState: UNAVAILABLE
• KMS crypto keys: DESTROY_SCHEDULED (24h; no immediate delete API)

[alchemy-version-bot]

Install the packages built from this commit:

Alchemy

alchemy

bun add https://pkg.ing/alchemy/c5229a6

@alchemy.run/better-auth

bun add https://pkg.ing/@alchemy.run/better-auth/c5229a6

@alchemy.run/cloudflare-runtime

bun add https://pkg.ing/@alchemy.run/cloudflare-runtime/c5229a6

@alchemy.run/frontend-frameworks

bun add https://pkg.ing/@alchemy.run/frontend-frameworks/c5229a6

@alchemy.run/node-utils

bun add https://pkg.ing/@alchemy.run/node-utils/c5229a6

@alchemy.run/pr-package

bun add https://pkg.ing/@alchemy.run/pr-package/c5229a6

@alchemy.run/floci

bun add https://pkg.ing/@alchemy.run/floci/c5229a6

Distilled

@distilled.cloud/core

bun add https://pkg.ing/@distilled.cloud/core/cecf35f

@distilled.cloud/aws

bun add https://pkg.ing/@distilled.cloud/aws/cecf35f

@distilled.cloud/axiom

bun add https://pkg.ing/@distilled.cloud/axiom/cecf35f

@distilled.cloud/cloudflare

bun add https://pkg.ing/@distilled.cloud/cloudflare/cecf35f

@distilled.cloud/hetzner

bun add https://pkg.ing/@distilled.cloud/hetzner/cecf35f

@distilled.cloud/neon

bun add https://pkg.ing/@distilled.cloud/neon/cecf35f

@distilled.cloud/planetscale

bun add https://pkg.ing/@distilled.cloud/planetscale/cecf35f

[sam-goodwin]

Please update PR description with DX (heading + code snippet showing resources, effectful sevices, bindings) etc.

[sam-goodwin]

Can you show me a GCP.Function with bindings (something for twitter)

[Mkassabov]

Updated the PR description with an Effect-native `GCP.Function` (Cloud Run Service) that binds Pub/Sub + Memorystore Redis — the twitter-bot shape. `GCP.Function` is an alias of `GCP.Run.Service`.