@alchemy.run/turso 0.0.0 → 2.0.0-beta.85

package/LICENSE

@@ -0,0 +1,201 @@
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,9 +1,73 @@
 # @alchemy.run/turso
 
-🐣 This package name has been claimed with [fledgling](https://github.com/dmno-dev/fledgling) for [https://alchemy.run](https://alchemy.run), and a real release will land here soon.
+Turso for [Alchemy](https://alchemy.run). Declare SQLite databases, groups, and tokens in the same TypeScript program as the Workers that query them.
 
-This is a placeholder — there is nothing to install yet.
+```sh
+npm install alchemy @alchemy.run/turso @alchemy.run/cloudflare @alchemy.run/sql @effect/sql-libsql effect
+```
 
----
+A database with migrations, queried from a Cloudflare Worker:
 
-Want to claim a name of your own? Run `npx fledgling add <name> --new --yes` — it reserves the name on npm and can set up token-less (OIDC trusted) publishing for when you are ready.
+```typescript
+// src/worker.ts
+import * as Cloudflare from "@alchemy.run/cloudflare";
+import * as SQL from "@alchemy.run/sql/SQLite";
+import * as Turso from "@alchemy.run/turso";
+import * as Effect from "effect/Effect";
+import * as HttpServerResponse from "effect/http/HttpServerResponse";
+
+export const Db = Effect.gen(function* () {
+  const group = yield* Turso.Group("Group", { location: "aws-us-east-1" });
+  return yield* Turso.Database("Db", {
+    group: group.name,
+    migrations: "./migrations",
+  });
+});
+
+export default Cloudflare.Worker(
+  "Worker",
+  { main: import.meta.url },
+  Effect.gen(function* () {
+    // The Worker gets the database URL and its own scoped token.
+    const sql = yield* SQL.LibSQL(yield* Turso.Connect(Db));
+
+    return {
+      fetch: Effect.gen(function* () {
+        const notes = yield* sql`SELECT * FROM notes`;
+        return yield* HttpServerResponse.json(notes);
+      }).pipe(Effect.orDie),
+    };
+  }).pipe(Effect.provide(Turso.ConnectHttp)),
+);
+```
+
+```typescript
+// alchemy.run.ts
+import * as Alchemy from "alchemy";
+import * as Cloudflare from "@alchemy.run/cloudflare";
+import * as Turso from "@alchemy.run/turso";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import Worker from "./src/worker.ts";
+
+export default Alchemy.Stack(
+  "MyApp",
+  {
+    providers: Layer.mergeAll(Cloudflare.providers(), Turso.providers()),
+    state: Cloudflare.state(),
+  },
+  Effect.gen(function* () {
+    const worker = yield* Worker;
+    return { url: worker.url };
+  }),
+);
+```
+
+Turso databases are cheap, so a Worker can also create one per tenant with `Turso.ManageDatabases`.
+
+## Learn more
+
+- [Turso on alchemy.run](https://alchemy.run/turso)
+- [Setup](https://alchemy.run/turso/setup)
+- [Tutorial](https://alchemy.run/turso/tutorial/part-1)
+- [Database per tenant](https://alchemy.run/turso/database-per-tenant)

package/lib/ApiToken.d.ts

@@ -0,0 +1,82 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Redacted from "effect/Redacted";
+import type { Providers } from "./Providers.ts";
+declare const ApiTokenUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ApiTokenUnexpectedResponse";
+} & Readonly<A>;
+export declare class ApiTokenUnexpectedResponse extends ApiTokenUnexpectedResponse_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+/**
+ * A permission granted to a group-scoped API token. `read-only` and
+ * `full-access` are presets that expand to individual scopes.
+ */
+export type ApiTokenScope = "read" | "db:create" | "db:delete" | "db:configure" | "db:mint-token" | "db:rotate-creds" | "group:configure" | "group:mint-token" | "group:rotate-creds" | "read-only" | "full-access";
+export interface ApiTokenProps {
+    /**
+     * Token name, unique within your account. If omitted, a unique name is
+     * generated from the stack, stage, and logical ID.
+     */
+    name?: string;
+    /**
+     * Restrict the token to one group of the organization (e.g.
+     * `group.name`). Requires `scopes`. Omit for an organization-scoped token.
+     */
+    group?: string;
+    /**
+     * Permissions of a group-scoped token. Required (and non-empty) when
+     * `group` is set. `db:mint-token` issues new SQL tokens;
+     * `db:rotate-creds` invalidates every SQL token of a database.
+     */
+    scopes?: ApiTokenScope[];
+}
+export interface ApiTokenAttributes {
+    /** Token ID. */
+    id: string;
+    /** Token name. */
+    name: string;
+    /** The organization slug the token is restricted to. */
+    organization: string;
+    /** The group the token is restricted to, if group-scoped. */
+    group: string | undefined;
+    /** The expanded scopes of a group-scoped token. */
+    scopes: string[];
+    /** The Platform API token, sent as `Authorization: Bearer <token>`. */
+    token: Redacted.Redacted<string>;
+}
+export type ApiToken = Resource<"Turso.ApiToken", ApiTokenProps, ApiTokenAttributes, never, Providers>;
+/**
+ * A Turso API token. It lets an app create and delete groups and databases.
+ * To run SQL, use a {@link DatabaseToken} instead. Limit it to one group
+ * with `group` and `scopes` to give an app only the access it needs.
+ *
+ * Turso only shows the token once, when it's created, so Alchemy stores it
+ * in state as a `Redacted` value. Changing a prop creates a new token, and
+ * destroying it cancels the token.
+ * @see https://docs.turso.tech/api-reference/tokens/create
+ *
+ * ### Creating a Token
+ * **Example:** Token for the whole organization
+ * ```typescript
+ * const token = yield* Turso.ApiToken("Ci", {});
+ * ```
+ *
+ * **Example:** Token that can only create databases in one group
+ * ```typescript
+ * const token = yield* Turso.ApiToken("Tenants", {
+ *   group: group.name,
+ *   scopes: ["read", "db:create", "db:delete", "db:mint-token"],
+ * });
+ * ```
+ *
+ * @resource
+ * @product API Token
+ */
+export declare const ApiToken: import("alchemy/Resource").ResourceClass<ApiToken>;
+export declare const ApiTokenProvider: () => import("effect/Layer").Layer<Provider.Provider<ApiToken>, never, import("./Credentials.ts").Organization | import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | turso.TursoOpContext>;
+export {};
+//# sourceMappingURL=ApiToken.d.ts.map

package/lib/ApiToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiToken.d.ts","sourceRoot":"","sources":["../src/ApiToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAItD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;;;;AAEhD,qBAAa,0BAA2B,SAAQ,gCAA+C;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,WAAW,GACX,WAAW,GACX,cAAc,GACd,eAAe,GACf,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,oBAAoB,GACpB,WAAW,GACX,aAAa,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,mDAAmD;IACnD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uEAAuE;IACvE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAC7B,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,QAAQ,oDAAuC,CAAC;AAK7D,eAAO,MAAM,gBAAgB,wMAkG1B,CAAC"}

package/lib/ApiToken.js

@@ -0,0 +1,128 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { organization } from "./Credentials.js";
+export class ApiTokenUnexpectedResponse extends Data.TaggedError("ApiTokenUnexpectedResponse") {
+}
+/**
+ * A Turso API token. It lets an app create and delete groups and databases.
+ * To run SQL, use a {@link DatabaseToken} instead. Limit it to one group
+ * with `group` and `scopes` to give an app only the access it needs.
+ *
+ * Turso only shows the token once, when it's created, so Alchemy stores it
+ * in state as a `Redacted` value. Changing a prop creates a new token, and
+ * destroying it cancels the token.
+ * @see https://docs.turso.tech/api-reference/tokens/create
+ *
+ * ### Creating a Token
+ * **Example:** Token for the whole organization
+ * ```typescript
+ * const token = yield* Turso.ApiToken("Ci", {});
+ * ```
+ *
+ * **Example:** Token that can only create databases in one group
+ * ```typescript
+ * const token = yield* Turso.ApiToken("Tenants", {
+ *   group: group.name,
+ *   scopes: ["read", "db:create", "db:delete", "db:mint-token"],
+ * });
+ * ```
+ *
+ * @resource
+ * @product API Token
+ */
+export const ApiToken = Resource("Turso.ApiToken");
+const tokenName = (id, name) => name ? Effect.succeed(name) : createPhysicalName({ id, maxLength: 64, delimiter: "-" });
+export const ApiTokenProvider = () => Provider.effect(ApiToken, Effect.gen(function* () {
+    const observe = (name) => turso
+        .listAPITokens({})
+        .pipe(Effect.map(({ tokens }) => (tokens ?? []).find((t) => t.name === name)));
+    const revoke = (name) => turso.revokeAPIToken({ tokenName: name }).pipe(Effect.asVoid, Effect.catchTag("NotFound", () => Effect.void));
+    return {
+        stables: ["id", "name", "organization", "group", "scopes", "token"],
+        diff: Effect.fn(function* ({ id, olds, news, output }) {
+            if (!isResolved(news))
+                return undefined;
+            const name = output?.name ?? (yield* tokenName(id, olds?.name));
+            // Turso tokens are immutable: any change mints a new one.
+            if ((news.name !== undefined && news.name !== name) ||
+                news.group !== olds?.group ||
+                !deepEqual(news.scopes ?? [], olds?.scopes ?? [])) {
+                // A pinned name can't be held by two tokens at once.
+                return {
+                    action: "replace",
+                    deleteFirst: news.name !== undefined && news.name === name,
+                };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output, previous }) {
+            const name = output?.name ?? (yield* tokenName(id, olds?.name));
+            const observed = yield* observe(name);
+            if (!observed)
+                return undefined;
+            if (output !== undefined && output.id === observed.id)
+                return output;
+            // The generation a delete-first replacement is about to revoke.
+            if (previous !== undefined && previous.id === observed.id)
+                return previous;
+            // The secret is only revealed at creation, so a token we have no
+            // state for can't be adopted with its value — reconcile re-mints.
+            return Unowned({
+                id: observed.id ?? "",
+                name,
+                organization: observed.organization ?? "",
+                group: observed.group,
+                scopes: observed.scopes ?? [],
+                token: Redacted.make(""),
+            });
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const org = output?.organization ?? (yield* organization);
+            const name = output?.name ?? (yield* tokenName(id, news.name));
+            // Observe
+            const observed = yield* observe(name);
+            if (observed &&
+                output &&
+                Redacted.value(output.token) !== "" &&
+                output.id === observed.id) {
+                return output;
+            }
+            // Ensure — a token we hold no secret for (a lost create, or an
+            // adoption) is revoked and re-minted.
+            if (observed) {
+                yield* session.note(`Re-minting API token ${name}...`);
+                yield* revoke(name);
+            }
+            const created = yield* turso.createAPIToken({
+                tokenName: name,
+                organization: org,
+                group: news.group,
+                scopes: news.scopes,
+            });
+            if (!created.token || !created.id) {
+                return yield* new ApiTokenUnexpectedResponse({
+                    message: `Turso returned no token for ${name}`,
+                });
+            }
+            const minted = yield* observe(name);
+            return {
+                id: created.id,
+                name,
+                organization: minted?.organization ?? org,
+                group: minted?.group ?? news.group,
+                scopes: minted?.scopes ?? [],
+                token: created.token,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* revoke(output.name);
+        }),
+    };
+}));
+//# sourceMappingURL=ApiToken.js.map

package/lib/ApiToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiToken.js","sourceRoot":"","sources":["../src/ApiToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAG3F;CAAG;AA6DL;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAW,gBAAgB,CAAC,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CACzD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAE1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,QAAQ,CAAC,MAAM,CACb,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAC/B,KAAK;SACF,aAAa,CAAC,EAAE,CAAC;SACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,KAAK,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;QACnE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,0DAA0D;YAC1D,IACE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;gBAC/C,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,KAAK;gBAC1B,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,EACjD,CAAC;gBACD,qDAAqD;gBACrD,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,WAAW,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;iBAClD,CAAC;YACb,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;YACvD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC;YACrE,gEAAgE;YAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC;YAC3E,iEAAiE;YACjE,kEAAkE;YAClE,OAAO,OAAO,CAAC;gBACb,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE;gBACrB,IAAI;gBACJ,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;gBACzC,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE;gBAC7B,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;aACzB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAE/D,UAAU;YACV,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtC,IACE,QAAQ;gBACR,MAAM;gBACN,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;gBACnC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,EACzB,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,+DAA+D;YAC/D,sCAAsC;YACtC,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,KAAK,CAAC,CAAC;gBACvD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;gBAC1C,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,GAAG;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;oBAC3C,OAAO,EAAE,+BAA+B,IAAI,EAAE;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI;gBACJ,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,GAAG;gBACzC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK;gBAClC,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AuthProvider.d.ts

@@ -0,0 +1,36 @@
+import { type StoredAuthConfig } from "alchemy/Auth/StoredAuthProvider";
+import * as Redacted from "effect/Redacted";
+/**
+ * Canonical name registered in the AuthProviders registry. Use this key to
+ * look up the Turso AuthProvider from inside provider Layers.
+ */
+export declare const TURSO_AUTH_PROVIDER_NAME = "Turso";
+export type TursoAuthConfig = StoredAuthConfig;
+/**
+ * Resolved Turso Platform API credentials.
+ *
+ * Turso has no OAuth application flow — the Platform API authenticates
+ * with API tokens only (`turso auth api-tokens mint <name>`). The
+ * organization is optional: when omitted it is discovered from the token
+ * (an organization-scoped token, or an account with a single organization).
+ */
+export interface TursoResolvedCredentials {
+    type: "apiToken";
+    apiToken: Redacted.Redacted<string>;
+    apiBaseUrl: string;
+    organization: string | undefined;
+    source: {
+        type: TursoAuthConfig["method"] | "env";
+        details?: string;
+    };
+}
+/**
+ * Layer that registers the Turso AuthProvider into the AuthProviders
+ * registry when built. Included in `Turso.providers()` so the alchemy CLI
+ * (`alchemy profile edit`) can configure it.
+ */
+export declare const TursoAuth: import("effect/Layer").Layer<never, never, import("alchemy/Auth/Registry").AuthProviders | import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
+/** Schema of Turso's inline API-token values. */
+export declare const TursoStoredCredentials: import("effect/Schema").Codec<import("alchemy/Auth/StoredAuthProvider").StoredValues, import("alchemy/Auth/StoredAuthProvider").StoredValues, never, never>;
+export type TursoStoredCredentials = typeof TursoStoredCredentials.Type;
+//# sourceMappingURL=AuthProvider.d.ts.map

package/lib/AuthProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../src/AuthProvider.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAEhD,MAAM,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAqED;;;;GAIG;AACH,eAAO,MAAM,SAAS,iKAAkB,CAAC;AAEzC,iDAAiD;AACjD,eAAO,MAAM,sBAAsB,6JAAyB,CAAC;AAC7D,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC"}

package/lib/AuthProvider.js

@@ -0,0 +1,85 @@
+import { DEFAULT_API_BASE_URL } from "@distilled.cloud/turso/Credentials";
+import { AuthError } from "alchemy/Auth/AuthProvider";
+import { getEnv, getEnvRedacted } from "alchemy/Auth/Env";
+import { makeStoredAuthProvider, storedSecret, storedValueText, } from "alchemy/Auth/StoredAuthProvider";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+/**
+ * Canonical name registered in the AuthProviders registry. Use this key to
+ * look up the Turso AuthProvider from inside provider Layers.
+ */
+export const TURSO_AUTH_PROVIDER_NAME = "Turso";
+const readEnvironment = Effect.gen(function* () {
+    const apiToken = yield* getEnvRedacted("TURSO_API_TOKEN");
+    const apiKey = yield* getEnvRedacted("TURSO_API_KEY");
+    const token = apiToken ?? apiKey;
+    if (token === undefined || Redacted.value(token).trim().length === 0) {
+        return yield* AuthError.make({
+            message: "Turso CI credentials not found. Set TURSO_API_TOKEN or TURSO_API_KEY.",
+        });
+    }
+    return {
+        type: "apiToken",
+        apiToken: Redacted.make(Redacted.value(token).trim()),
+        apiBaseUrl: (yield* getEnv("TURSO_API_BASE_URL")) ?? DEFAULT_API_BASE_URL,
+        organization: yield* getEnv("TURSO_ORGANIZATION"),
+        source: {
+            type: "env",
+            details: apiToken === undefined ? "TURSO_API_KEY" : "TURSO_API_TOKEN",
+        },
+    };
+});
+const tursoAuth = makeStoredAuthProvider({
+    provider: TURSO_AUTH_PROVIDER_NAME,
+    fields: [
+        {
+            name: "apiToken",
+            label: "Turso API Token",
+            description: "Mint one with `turso auth api-tokens mint alchemy`.",
+            secret: true,
+            validate: (value) => (value.trim().length === 0 ? "Required" : undefined),
+        },
+        {
+            name: "organization",
+            label: "Turso Organization (slug)",
+            description: "Defaults to the token's organization when it has exactly one.",
+            optional: true,
+        },
+    ],
+    toResolved: (values, source) => ({
+        type: "apiToken",
+        apiToken: storedSecret(values.apiToken) ?? Redacted.make(""),
+        apiBaseUrl: DEFAULT_API_BASE_URL,
+        organization: storedValueText(values.organization),
+        source: { type: source },
+    }),
+    readEnvironment,
+    environment: [
+        {
+            name: "TURSO_API_TOKEN",
+            required: true,
+            secret: true,
+            alternatives: ["TURSO_API_KEY"],
+            description: "Turso Platform API token.",
+        },
+        {
+            name: "TURSO_ORGANIZATION",
+            required: false,
+            description: "Organization slug; defaults to the token's only organization.",
+        },
+        {
+            name: "TURSO_API_BASE_URL",
+            required: false,
+            description: "Platform API base URL override.",
+        },
+    ],
+});
+/**
+ * Layer that registers the Turso AuthProvider into the AuthProviders
+ * registry when built. Included in `Turso.providers()` so the alchemy CLI
+ * (`alchemy profile edit`) can configure it.
+ */
+export const TursoAuth = tursoAuth.layer;
+/** Schema of Turso's inline API-token values. */
+export const TursoStoredCredentials = tursoAuth.storedSchema;
+//# sourceMappingURL=AuthProvider.js.map

package/lib/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../src/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,eAAe,GAEhB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAoBhD,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,QAAQ,IAAI,MAAM,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3B,OAAO,EAAE,uEAAuE;SACjF,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,oBAAoB;QACzE,YAAY,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACjD,MAAM,EAAE;YACN,IAAI,EAAE,KAAc;YACpB,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;SACtE;KACiC,CAAC;AACvC,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,sBAAsB,CAA2B;IACjE,QAAQ,EAAE,wBAAwB;IAClC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,qDAAqD;YAClE,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1E;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,2BAA2B;YAClC,WAAW,EAAE,+DAA+D;YAC5E,QAAQ,EAAE,IAAI;SACf;KACF;IACD,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAClD,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACzB,CAAC;IACF,eAAe;IACf,WAAW,EAAE;QACX;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,CAAC,eAAe,CAAC;YAC/B,WAAW,EAAE,2BAA2B;SACzC;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,+DAA+D;SAC7E;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,iCAAiC;SAC/C;KACF;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;AAEzC,iDAAiD;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC,YAAY,CAAC"}