@distilled.cloud/gcp 0.2.6 → 0.4.0

package/README.md

@@ -13,35 +13,37 @@ npm install @distilled.cloud/gcp effect
 ```typescript
 import { Effect, Layer } from "effect";
 import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
-import * as Storage from "@distilled.cloud/gcp/storage";
-import { Auth } from "@distilled.cloud/gcp";
+import * as Storage from "@distilled.cloud/gcp/storage-v1";
+import { CredentialsFromEnv } from "@distilled.cloud/gcp";
 
 const program = Storage.listBuckets({ project: "my-project" });
 
-const GCPLive = Layer.mergeAll(FetchHttpClient.layer, Auth.fromADC());
+const GCPLive = Layer.mergeAll(FetchHttpClient.layer, CredentialsFromEnv);
 
 program.pipe(Effect.provide(GCPLive), Effect.runPromise);
 ```
 
-## Authentication
+## Configuration
 
-```typescript
-import { Auth } from "@distilled.cloud/gcp";
+Set the following environment variables:
 
-// Application Default Credentials (recommended for development)
-Auth.fromADC()
+```bash
+GOOGLE_ACCESS_TOKEN=your-access-token
+GOOGLE_PROJECT_ID=my-project  # optional, used by operations that require a project
+```
 
-// Service account JSON key file
-Auth.fromServiceAccountFile("./service-account.json")
+Generate an access token using the `gcloud` CLI:
 
-// Environment variable (GOOGLE_ACCESS_TOKEN)
-Auth.fromEnv()
+```bash
+gcloud auth print-access-token
 ```
 
+For service accounts, use workload identity or a service account key to obtain an OAuth2 access token. Access tokens are short-lived (typically 1 hour) — refresh as needed.
+
 ## Error Handling
 
 ```typescript
-Storage.getBucket({ bucket: "missing-bucket" }).pipe(
+Storage.getBuckets({ bucket: "missing-bucket" }).pipe(
   Effect.catchTags({
     NotFound: () => Effect.succeed(null),
     UnknownGCPError: (e) => Effect.fail(new Error(`Unknown: ${e.message}`)),

package/lib/client/api.d.ts

@@ -1,13 +1,5 @@
-/**
- * GCP API operations factory.
- *
- * This module is imported as `import * as API from "../client/api.ts"` by
- * generated service files so that `API.make()`, `API.OperationMethod`, etc.
- * are all accessible as namespace members.
- */
-import * as Effect from "effect/Effect";
 import { type OperationMethod, type PaginatedOperationMethod } from "@distilled.cloud/core/client";
 export type { OperationMethod, PaginatedOperationMethod };
 export declare const make: <I extends import("effect/Schema").Top, O extends import("effect/Schema").Top, const E extends readonly import("@distilled.cloud/core/client").ApiErrorClass[] = readonly []>(configFn: () => import("@distilled.cloud/core/client").OperationConfig<I, O, E>) => any;
-export declare const makePaginated: <I extends import("effect/Schema").Top, O extends import("effect/Schema").Top, const E extends readonly import("@distilled.cloud/core/client").ApiErrorClass[] = readonly []>(configFn: () => import("@distilled.cloud/core/client").PaginatedOperationConfig<I, O, E>, paginateFn?: ((baseFn: (input: any) => Effect.Effect<any, any, any>, input: any, pagination: import("@distilled.cloud/core/pagination").PaginatedTrait) => import("effect/Stream").Stream<any, any, any>) | undefined) => any;
+export declare const makePaginated: <I extends import("effect/Schema").Top, O extends import("effect/Schema").Top, const E extends readonly import("@distilled.cloud/core/client").ApiErrorClass[] = readonly []>(configFn: () => import("@distilled.cloud/core/client").PaginatedOperationConfig<I, O, E>, paginateFn?: import("@distilled.cloud/core/pagination").PaginationStrategy | undefined) => any;
 //# sourceMappingURL=api.d.ts.map

package/lib/client/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/client/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAItC,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAAC;AAsC1D,eAAO,MAAM,IAAI,uQAAY,CAAC;AAC9B,eAAO,MAAM,aAAa,ueAAqB,CAAC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/client/api.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAItC,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAAC;AAsC1D,eAAO,MAAM,IAAI,uQAAY,CAAC;AAC9B,eAAO,MAAM,aAAa,wWAAqB,CAAC"}

package/lib/client/api.js

@@ -6,6 +6,7 @@
  * are all accessible as namespace members.
  */
 import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
 import { makeAPI, } from "@distilled.cloud/core/client";
 import { HTTP_STATUS_MAP, UnknownGCPError, GCPParseError } from "../errors.js";
 import { Credentials } from "../credentials.js";
@@ -31,7 +32,7 @@ const _API = makeAPI({
     credentials: Credentials,
     getBaseUrl: (_creds) => "", // Set per-service via Http trait
     getAuthHeaders: (creds) => ({
-        Authorization: `Bearer ${creds.accessToken}`,
+        Authorization: `Bearer ${Redacted.value(creds.accessToken)}`,
     }),
     matchError,
     ParseError: GCPParseError,

package/lib/client/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/client/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,OAAO,GAGR,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD;;GAEG;AACH,MAAM,UAAU,GAAG,CACjB,MAAc,EACd,SAAkB,EACa,EAAE;IACjC,MAAM,UAAU,GAAI,eAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GACX,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,IAAI,SAAS;QACzE,CAAC,CAAC,CAAE,SAAiB,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,IAAI,GAAG,OAAO,CAAC;IACnB,WAAW,EAAE,WAAkB;IAC/B,UAAU,EAAE,CAAC,MAAW,EAAE,EAAE,CAAC,EAAE,EAAE,iCAAiC;IAClE,cAAc,EAAE,CAAC,KAAU,EAAE,EAAE,CAAC,CAAC;QAC/B,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;KAC7C,CAAC;IACF,UAAU;IACV,UAAU,EAAE,aAAoB;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;AAC9B,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/client/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,OAAO,GAGR,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD;;GAEG;AACH,MAAM,UAAU,GAAG,CACjB,MAAc,EACd,SAAkB,EACa,EAAE;IACjC,MAAM,UAAU,GAAI,eAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GACX,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,IAAI,SAAS;QACzE,CAAC,CAAC,CAAE,SAAiB,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,IAAI,GAAG,OAAO,CAAC;IACnB,WAAW,EAAE,WAAkB;IAC/B,UAAU,EAAE,CAAC,MAAW,EAAE,EAAE,CAAC,EAAE,EAAE,iCAAiC;IAClE,cAAc,EAAE,CAAC,KAAU,EAAE,EAAE,CAAC,CAAC;QAC/B,aAAa,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;KAC7D,CAAC;IACF,UAAU;IACV,UAAU,EAAE,aAAoB;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;AAC9B,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC"}

package/lib/credentials.d.ts

@@ -1,8 +1,9 @@
 import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
 import * as ServiceMap from "effect/ServiceMap";
 import { ConfigError } from "@distilled.cloud/core/errors";
 export interface Config {
-    readonly accessToken: string;
+    readonly accessToken: Redacted.Redacted<string>;
     readonly project?: string;
 }
 declare const Credentials_base: ServiceMap.ServiceClass<Credentials, "GCPCredentials", Config>;

package/lib/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;;AAED,qBAAa,WAAY,SAAQ,gBAEhC;CAAG;AAEJ,eAAO,MAAM,kBAAkB,8CAgB9B,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;;AAED,qBAAa,WAAY,SAAQ,gBAEhC;CAAG;AAEJ,eAAO,MAAM,kBAAkB,8CAgB9B,CAAC"}

package/lib/credentials.js

@@ -1,5 +1,6 @@
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
 import * as ServiceMap from "effect/ServiceMap";
 import { ConfigError } from "@distilled.cloud/core/errors";
 export class Credentials extends ServiceMap.Service()("GCPCredentials") {
@@ -12,7 +13,7 @@ export const CredentialsFromEnv = Layer.effect(Credentials, Effect.gen(function*
         });
     }
     return {
-        accessToken,
+        accessToken: Redacted.make(accessToken),
         project: process.env.GOOGLE_PROJECT_ID,
     };
 }));

package/lib/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAO3D,MAAM,OAAO,WAAY,SAAQ,UAAU,CAAC,OAAO,EAAuB,CACxE,gBAAgB,CACjB;CAAG;AAEJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAC5C,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAEpD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC;YAC5B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW;QACX,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;KACvC,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAO3D,MAAM,OAAO,WAAY,SAAQ,UAAU,CAAC,OAAO,EAAuB,CACxE,gBAAgB,CACjB;CAAG;AAEJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAC5C,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAEpD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC;YAC5B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;KACvC,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/sensitive.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Re-export sensitive data schemas from sdk-core.
+ */
+export * from "@distilled.cloud/core/sensitive";
+//# sourceMappingURL=sensitive.d.ts.map

package/lib/sensitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../src/sensitive.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,iCAAiC,CAAC"}

package/lib/sensitive.js

@@ -0,0 +1,5 @@
+/**
+ * Re-export sensitive data schemas from sdk-core.
+ */
+export * from "@distilled.cloud/core/sensitive";
+//# sourceMappingURL=sensitive.js.map

package/lib/sensitive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.js","sourceRoot":"","sources":["../src/sensitive.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,iCAAiC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@distilled.cloud/gcp",
-  "version": "0.2.6",
+  "version": "0.4.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/alchemy-run/distilled",
@@ -57,7 +57,7 @@
     "specs:update": "git -C specs/distilled-spec-gcp fetch && git -C specs/distilled-spec-gcp checkout main && git -C specs/distilled-spec-gcp pull"
   },
   "dependencies": {
-    "@distilled.cloud/core": "0.2.6",
+    "@distilled.cloud/core": "0.4.0",
     "effect": "4.0.0-beta.30"
   },
   "devDependencies": {

package/src/client/api.ts

@@ -6,6 +6,7 @@
  * are all accessible as namespace members.
  */
 import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
 import {
   makeAPI,
   type OperationMethod,
@@ -46,7 +47,7 @@ const _API = makeAPI({
   credentials: Credentials as any,
   getBaseUrl: (_creds: any) => "", // Set per-service via Http trait
   getAuthHeaders: (creds: any) => ({
-    Authorization: `Bearer ${creds.accessToken}`,
+    Authorization: `Bearer ${Redacted.value(creds.accessToken)}`,
   }),
   matchError,
   ParseError: GCPParseError as any,

package/src/credentials.ts

@@ -1,10 +1,11 @@
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
 import * as ServiceMap from "effect/ServiceMap";
 import { ConfigError } from "@distilled.cloud/core/errors";
 
 export interface Config {
-  readonly accessToken: string;
+  readonly accessToken: Redacted.Redacted<string>;
   readonly project?: string;
 }
 
@@ -24,7 +25,7 @@ export const CredentialsFromEnv = Layer.effect(
     }
 
     return {
-      accessToken,
+      accessToken: Redacted.make(accessToken),
       project: process.env.GOOGLE_PROJECT_ID,
     };
   }),

package/src/sensitive.ts

@@ -0,0 +1,4 @@
+/**
+ * Re-export sensitive data schemas from sdk-core.
+ */
+export * from "@distilled.cloud/core/sensitive";