alchemy 2.0.0-beta.17 → 2.0.0-beta.19

package/lib/Axiom/AuthProvider.js

@@ -0,0 +1,177 @@
+import * as Console from "effect/Console";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Match from "effect/Match";
+import * as Redacted from "effect/Redacted";
+import { AuthError, AuthProviderLayer, } from "../Auth/AuthProvider.js";
+import { deleteCredentials, displayRedacted, readCredentials, writeCredentials, } from "../Auth/Credentials.js";
+import { getEnv, getEnvRedacted, retryOnce } from "../Auth/Env.js";
+import * as Clank from "../Util/Clank.js";
+import { DEFAULT_API_BASE_URL } from "@distilled.cloud/axiom/Credentials";
+const STORAGE_KEY = "axiom-stored";
+const options = [
+    {
+        value: "env",
+        label: "Environment Variables",
+        hint: "AXIOM_TOKEN (or AXIOM_API_KEY) + optional AXIOM_ORG_ID, AXIOM_URL",
+    },
+    {
+        value: "stored",
+        label: "API Token or Personal Access Token",
+        hint: "enter credentials interactively, stored in ~/.alchemy/credentials",
+    },
+];
+export const AXIOM_AUTH_PROVIDER_NAME = "Axiom";
+/**
+ * Layer that registers the Axiom {@link AuthProvider} into the
+ * {@link AuthProviders} registry when built. Include this in the Axiom
+ * `providers()` layer so `alchemy login` can discover it.
+ */
+export const AxiomAuth = AuthProviderLayer()(AXIOM_AUTH_PROVIDER_NAME, {
+    configure: (profileName, ctx) => configureCredentials(profileName, ctx),
+    logout: (profileName, config) => logout(profileName, config),
+    login: (profileName, config) => login(profileName, config),
+    prettyPrint: (profileName, config) => prettyPrint(profileName, config),
+    read: (profileName, config) => resolveCredentials(profileName, config),
+});
+const resolveCredentials = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
+    const apiToken = (yield* getEnvRedacted("AXIOM_TOKEN")) ??
+        (yield* getEnvRedacted("AXIOM_API_KEY"));
+    if (!apiToken) {
+        return yield* new AuthError({
+            message: "Axiom env credentials not found. Set AXIOM_TOKEN (or AXIOM_API_KEY).",
+        });
+    }
+    const apiBaseUrl = (yield* getEnv("AXIOM_URL")) ?? DEFAULT_API_BASE_URL;
+    const orgId = yield* getEnv("AXIOM_ORG_ID");
+    if (orgId) {
+        return {
+            type: "pat",
+            apiToken,
+            apiBaseUrl,
+            orgId,
+            source: { type: "env" },
+        };
+    }
+    return {
+        type: "apiToken",
+        apiToken,
+        apiBaseUrl,
+        source: { type: "env" },
+    };
+})), Match.when({ method: "stored" }, () => readCredentials(profileName, STORAGE_KEY).pipe(Effect.flatMap((creds) => creds == null
+    ? Effect.fail(new AuthError({
+        message: "Axiom stored credentials not found. Run: alchemy login --configure",
+    }))
+    : Effect.succeed(Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => ({
+        type: "apiToken",
+        apiToken: Redacted.make(c.apiToken),
+        apiBaseUrl: c.apiBaseUrl ?? DEFAULT_API_BASE_URL,
+        orgId: c.orgId,
+        source: { type: "stored" },
+    })), Match.when({ type: "pat" }, (c) => ({
+        type: "pat",
+        apiToken: Redacted.make(c.apiToken),
+        apiBaseUrl: c.apiBaseUrl ?? DEFAULT_API_BASE_URL,
+        orgId: c.orgId,
+        source: { type: "stored" },
+    })), Match.exhaustive))))), Match.exhaustive);
+const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => deleteCredentials(profileName, STORAGE_KEY).pipe(Effect.andThen(Clank.success("Axiom: stored credentials removed")))), Match.exhaustive);
+const login = (profileName, config) => Match.value(config)
+    .pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => readCredentials(profileName, STORAGE_KEY).pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.exhaustive)
+    .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
+const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
+    if (ctx.ci) {
+        return { method: "env" };
+    }
+    return yield* configureInteractive(profileName);
+}).pipe(Effect.mapError((e) => new AuthError({
+    message: "failed to configure credentials",
+    cause: e,
+})));
+const configureInteractive = (profileName) => Clank.select({
+    message: "Axiom authentication method",
+    options,
+}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
+const loginStored = Effect.fnUntraced(function* (profileName) {
+    const credentialType = yield* Clank.select({
+        message: "Axiom credential type",
+        options: [
+            {
+                value: "apiToken",
+                label: "API Token",
+                hint: "recommended — scoped to specific datasets/actions",
+            },
+            {
+                value: "pat",
+                label: "Personal Access Token",
+                hint: "full account control, requires Org ID",
+            },
+        ],
+    }).pipe(retryOnce);
+    const apiBaseUrlPrompt = yield* Clank.text({
+        message: "Axiom API Base URL (Enter for default)",
+        placeholder: DEFAULT_API_BASE_URL,
+        defaultValue: DEFAULT_API_BASE_URL,
+    }).pipe(retryOnce);
+    const apiBaseUrl = apiBaseUrlPrompt && apiBaseUrlPrompt.length > 0
+        ? apiBaseUrlPrompt
+        : undefined;
+    return yield* Match.value(credentialType).pipe(Match.when("apiToken", () => Effect.gen(function* () {
+        const apiToken = yield* Clank.password({
+            message: "Axiom API Token",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const orgId = yield* promptOrgId(false);
+        yield* writeCredentials(profileName, STORAGE_KEY, {
+            type: "apiToken",
+            apiToken,
+            apiBaseUrl,
+            orgId: orgId && orgId.length > 0 ? orgId : undefined,
+        });
+        yield* Clank.success("Axiom: credentials saved.");
+        return {
+            method: "stored",
+            credentialType: "apiToken",
+        };
+    })), Match.when("pat", () => Effect.gen(function* () {
+        const apiToken = yield* Clank.password({
+            message: "Axiom Personal Access Token",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const orgId = yield* promptOrgId(true);
+        yield* writeCredentials(profileName, STORAGE_KEY, { type: "pat", apiToken, apiBaseUrl, orgId });
+        yield* Clank.success("Axiom: credentials saved.");
+        return {
+            method: "stored",
+            credentialType: "pat",
+        };
+    })), Match.exhaustive);
+});
+const promptOrgId = (required) => getEnv("AXIOM_ORG_ID").pipe(Effect.flatMap((envOrgId) => Clank.text({
+    message: required
+        ? "Axiom Org ID (required for PAT)"
+        : "Axiom Org ID (Enter to skip)",
+    placeholder: envOrgId ?? "",
+    defaultValue: envOrgId ?? "",
+    validate: required
+        ? (v) => (v.length === 0 ? "Required" : undefined)
+        : undefined,
+}).pipe(retryOnce)));
+const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => {
+    const sourceStr = creds.source.details
+        ? `${creds.source.type} - ${creds.source.details}`
+        : creds.source.type;
+    return Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => Effect.all([
+        Console.log(`  apiToken: ${displayRedacted(c.apiToken, 9)}`),
+        Console.log(`  apiBaseUrl: ${c.apiBaseUrl}`),
+        Console.log(`  orgId: ${c.orgId ?? "(none)"}`),
+        Console.log(`  source: ${sourceStr}`),
+    ])), Match.when({ type: "pat" }, (c) => Effect.all([
+        Console.log(`  apiToken: ${displayRedacted(c.apiToken, 9)}`),
+        Console.log(`  apiBaseUrl: ${c.apiBaseUrl}`),
+        Console.log(`  orgId: ${c.orgId}`),
+        Console.log(`  source: ${sourceStr}`),
+    ])), Match.exhaustive);
+}), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
+//# sourceMappingURL=AuthProvider.js.map

package/lib/Axiom/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/Axiom/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,WAAW,GAAG,cAAc,CAAC;AAEnC,MAAM,OAAO,GAIR;IACH;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,mEAAmE;KAC1E;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,oCAAoC;QAC3C,IAAI,EAAE,mEAAmE;KAC1E;CACF,CAAC;AA2BF,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,EAGvC,CAAC,wBAAwB,EAAE;IAC5B,SAAS,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC;IACvE,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;IAC5D,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;IAC1D,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,WAAmB,EACnB,MAAuB,EAKvB,EAAE,CACF,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;IACzB,MAAM,QAAQ,GACZ,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QACtC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YAC1B,OAAO,EACL,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GACd,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,oBAAoB,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,IAAI,EAAE,KAAc;YACpB,QAAQ;YACR,UAAU;YACV,KAAK;YACL,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;SACjC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAmB;QACzB,QAAQ;QACR,UAAU;QACV,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;KACjC,CAAC;AACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAAyB,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;IACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;QACZ,OAAO,EACL,oEAAoE;KACvE,CAAC,CACH;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,oBAAoB;QAChD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACpC,CAAC,CAAC,EACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,KAAc;QACpB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,oBAAoB;QAChD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACpC,CAAC,CAAC,EACH,KAAK,CAAC,UAAU,CACjB,CACF,CACN,CACF,CACF,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,MAAuB,EAAE,EAAE,CAC9D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,CACnE,CACF,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,MAAuB,EAAE,EAAE,CAC7D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;KAChB,IAAI,CACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAAyB,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACvD,CACF,CACF,EACD,KAAK,CAAC,UAAU,CACjB;KACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;AAEN,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,GAAqB,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;IACZ,OAAO,EAAE,iCAAiC;IAC1C,KAAK,EAAE,CAAC;CACT,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC;IACX,OAAO,EAAE,6BAA6B;IACtC,OAAO;CACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,EACnE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EACpD,KAAK,CAAC,UAAU,CACjB,CACF,CACF,CAAC;AAEJ,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAmB;IAClE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACzC,OAAO,EAAE,uBAAuB;QAChC,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,UAAmB;gBAC1B,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,mDAAmD;aAC1D;YACD;gBACE,KAAK,EAAE,KAAc;gBACrB,KAAK,EAAE,uBAAuB;gBAC9B,IAAI,EAAE,uCAAuC;aAC9C;SACF;KACF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACzC,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,oBAAoB;QACjC,YAAY,EAAE,oBAAoB;KACnC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,MAAM,UAAU,GACd,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAC5C,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAExC,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,WAAW,EACX;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ;YACR,UAAU;YACV,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACrD,CACF,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,QAAiB;YACzB,cAAc,EAAE,UAAmB;SACpC,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,6BAA6B;YACtC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEvC,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,WAAW,EACX,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAC7C,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,QAAiB;YACzB,cAAc,EAAE,KAAc;SAC/B,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,QAAiB,EAAE,EAAE,CACxC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CACzB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,KAAK,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,QAAQ;QACf,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,8BAA8B;IAClC,WAAW,EAAE,QAAQ,IAAI,EAAE;IAC3B,YAAY,EAAE,QAAQ,IAAI,EAAE;IAC5B,QAAQ,EAAE,QAAQ;QAChB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC,CAAC,SAAS;CACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CACnB,CACF,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,MAAuB,EAAE,EAAE,CACnE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACnB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO;QACpC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;IACtB,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;KACtC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAChC,MAAM,CAAC,GAAG,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;KACtC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CACxD,CACF,CAAC"}

package/lib/Axiom/Chart.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Typed view of the Axiom dashboard chart-JSON subset.
+ *
+ * Axiom's `CreateDashboardInput` declares
+ * `dashboard.charts: ReadonlyArray<unknown>` (see
+ * `@distilled.cloud/axiom/.../v2/createDashboard.ts`); these
+ * interfaces give callers compile-time safety when building the
+ * payload by hand.
+ *
+ * `chart.id` is a free-form string the author picks — Axiom
+ * doesn't validate the format. It joins to the matching
+ * `LayoutCell.i` in `dashboard.layout`.
+ */
+/**
+ * Axiom-validated chart kinds. Discovered by probing
+ * `POST /v2/dashboards`: anything else returns
+ * `dashboard validation failed at [charts N type]: Invalid input`.
+ */
+export type ChartKind = "TimeSeries" | "Table" | "Pie" | "Statistic" | "Heatmap" | "LogStream" | "Note";
+/**
+ * Minimum chart payload Axiom's `POST /v2/dashboards` accepts.
+ * Any unknown keys (e.g. `dataset`, `description`) trigger
+ * `Unrecognized keys: "<name>"`, so this struct is intentionally
+ * narrow. The dataset is implicit via the APL query.
+ */
+export interface BaseChart {
+    readonly id: string;
+    readonly name: string;
+    readonly type: ChartKind;
+    readonly query: {
+        readonly apl: string;
+    };
+}
+export interface TimeSeriesChart extends BaseChart {
+    readonly type: "TimeSeries";
+}
+export interface TableChart extends BaseChart {
+    readonly type: "Table";
+}
+export interface PieChart extends BaseChart {
+    readonly type: "Pie";
+}
+export interface StatisticChart extends BaseChart {
+    readonly type: "Statistic";
+}
+export interface HeatmapChart extends BaseChart {
+    readonly type: "Heatmap";
+}
+export interface LogStreamChart extends BaseChart {
+    readonly type: "LogStream";
+}
+export interface NoteChart extends BaseChart {
+    readonly type: "Note";
+}
+export type Chart = TimeSeriesChart | TableChart | PieChart | StatisticChart | HeatmapChart | LogStreamChart | NoteChart;
+/**
+ * Mirrors Axiom's `CreateDashboardInput.dashboard.layout` cell schema.
+ * `i` references a chart by its `id`.
+ */
+export interface LayoutCell {
+    readonly i: string;
+    readonly x: number;
+    readonly y: number | null;
+    readonly w: number;
+    readonly h: number;
+    readonly minW?: number;
+    readonly minH?: number;
+    readonly maxW?: number;
+    readonly maxH?: number;
+    readonly static?: boolean;
+}
+//# sourceMappingURL=Chart.d.ts.map

package/lib/Axiom/Chart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Chart.d.ts","sourceRoot":"","sources":["../../src/Axiom/Chart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB,YAAY,GACZ,OAAO,GACP,KAAK,GACL,WAAW,GACX,SAAS,GACT,WAAW,GACX,MAAM,CAAC;AAEX;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B;AAED,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,KAAK,GACb,eAAe,GACf,UAAU,GACV,QAAQ,GACR,cAAc,GACd,YAAY,GACZ,cAAc,GACd,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/lib/Axiom/Chart.js

@@ -0,0 +1,14 @@
+/**
+ * Typed view of the Axiom dashboard chart-JSON subset.
+ *
+ * Axiom's `CreateDashboardInput` declares
+ * `dashboard.charts: ReadonlyArray<unknown>` (see
+ * `@distilled.cloud/axiom/.../v2/createDashboard.ts`); these
+ * interfaces give callers compile-time safety when building the
+ * payload by hand.
+ *
+ * `chart.id` is a free-form string the author picks — Axiom
+ * doesn't validate the format. It joins to the matching
+ * `LayoutCell.i` in `dashboard.layout`.
+ */
+//# sourceMappingURL=Chart.js.map

package/lib/Axiom/Chart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Chart.js","sourceRoot":"","sources":["../../src/Axiom/Chart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/lib/Axiom/Credentials.d.ts

@@ -0,0 +1,12 @@
+import { Credentials } from "@distilled.cloud/axiom/Credentials";
+import { ConfigError } from "@distilled.cloud/core/errors";
+import * as Layer from "effect/Layer";
+import * as Config from "effect/Config";
+export { Credentials, CredentialsFromEnv, DEFAULT_API_BASE_URL, } from "@distilled.cloud/axiom/Credentials";
+/**
+ * Build a `Credentials` layer that resolves Axiom credentials via the Alchemy
+ * AuthProvider using the configured profile (defaults to "default", overridable
+ * with the `ALCHEMY_PROFILE` env/config value).
+ */
+export declare const fromAuthProvider: () => Layer.Layer<Credentials, Config.ConfigError | import("../Auth/AuthProvider.ts").AuthError | ConfigError, import("effect/FileSystem").FileSystem | import("../Auth/AuthProvider.ts").AuthProviders>;
+//# sourceMappingURL=Credentials.d.ts.map

package/lib/Axiom/Credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credentials.d.ts","sourceRoot":"","sources":["../../src/Axiom/Credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EAEZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AASxC,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,0MAwC1B,CAAC"}

package/lib/Axiom/Credentials.js

@@ -0,0 +1,34 @@
+import { Credentials, DEFAULT_API_BASE_URL, } from "@distilled.cloud/axiom/Credentials";
+import { ConfigError } from "@distilled.cloud/core/errors";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Match from "effect/Match";
+import * as Redacted from "effect/Redacted";
+import * as Config from "effect/Config";
+import { getAuthProvider } from "../Auth/AuthProvider.js";
+import { ALCHEMY_PROFILE, loadOrConfigure } from "../Auth/Profile.js";
+import { AXIOM_AUTH_PROVIDER_NAME, } from "./AuthProvider.js";
+export { Credentials, CredentialsFromEnv, DEFAULT_API_BASE_URL, } from "@distilled.cloud/axiom/Credentials";
+/**
+ * Build a `Credentials` layer that resolves Axiom credentials via the Alchemy
+ * AuthProvider using the configured profile (defaults to "default", overridable
+ * with the `ALCHEMY_PROFILE` env/config value).
+ */
+export const fromAuthProvider = () => Layer.effect(Credentials, Effect.gen(function* () {
+    const auth = yield* getAuthProvider(AXIOM_AUTH_PROVIDER_NAME);
+    const profileName = yield* ALCHEMY_PROFILE;
+    const ci = yield* Config.boolean("CI").pipe(Config.withDefault(false));
+    const ctx = yield* Effect.context();
+    return yield* loadOrConfigure(auth, profileName, { ci }).pipe(Effect.flatMap((config) => auth.read(profileName, config)), Effect.map((creds) => Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => ({
+        apiKey: c.apiToken,
+        apiBaseUrl: c.apiBaseUrl,
+        orgId: c.orgId,
+    })), Match.when({ type: "pat" }, (c) => ({
+        apiKey: c.apiToken,
+        apiBaseUrl: c.apiBaseUrl,
+        orgId: c.orgId,
+    })), Match.exhaustive)), Effect.mapError((e) => new ConfigError({
+        message: `Failed to resolve Axiom credentials for profile '${profileName}': ${e.message ?? String(e)}`,
+    })), Effect.provide(ctx));
+}));
+//# sourceMappingURL=Credentials.js.map

package/lib/Axiom/Credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credentials.js","sourceRoot":"","sources":["../../src/Axiom/Credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EACL,wBAAwB,GAGzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,KAAK,CAAC,MAAM,CACV,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAe,CAGjC,wBAAwB,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAS,CAAC;IAE3C,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAyB,CAAC,CAClD,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,QAAQ;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,EACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,CAAC,QAAQ;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,EACH,KAAK,CAAC,UAAU,CACjB,CACF,EACD,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,WAAW,CAAC;QACd,OAAO,EAAE,oDAAoD,WAAW,MAAO,CAA0B,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;KACjI,CAAC,CACL,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CACpB,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Axiom/Dashboard.d.ts

@@ -0,0 +1,124 @@
+import * as Operations from "@distilled.cloud/axiom/Operations";
+import * as Provider from "../Provider.ts";
+import { Resource } from "../Resource.ts";
+import type { Chart, LayoutCell } from "./Chart.ts";
+import type { Providers } from "./Providers.ts";
+type DashboardDoc = Operations.CreateDashboardInput["dashboard"];
+/**
+ * Dashboard input. Mirrors `Operations.CreateDashboardInput` but
+ * narrows `dashboard.charts` and `dashboard.layout` to the typed
+ * {@link Chart} / {@link LayoutCell} shapes (Axiom declares them
+ * as `Schema.Array(Schema.Unknown)`, so this is a compile-time-only
+ * refinement; runtime validation is unchanged).
+ */
+export type DashboardProps = Omit<Operations.CreateDashboardInput, "dashboard"> & {
+    readonly dashboard: Omit<DashboardDoc, "charts" | "layout"> & {
+        readonly charts: readonly Chart[];
+        readonly layout: readonly LayoutCell[];
+    };
+};
+export type Dashboard = Resource<"Axiom.Dashboard", DashboardProps, {
+    /** Stable Axiom dashboard `uid` (used as the path identifier). */
+    uid: string;
+    id: string;
+    createdAt: string;
+    createdBy: string;
+    updatedAt: string;
+    updatedBy: string;
+    /** The full dashboard document as returned by Axiom. */
+    dashboard: Operations.CreateDashboardOutput["dashboard"]["dashboard"];
+}, never, Providers>;
+/**
+ * An Axiom dashboard — a named, layout-driven collection of charts. Each
+ * dashboard takes a full document (`charts` + `layout` array of grid cells +
+ * `timeWindow` + `refreshTime`) at version `schemaVersion: 2`.
+ *
+ * Charts are typed via {@link Chart} (a discriminated union over the
+ * Axiom-validated chart kinds — `TimeSeries`, `Table`, `Pie`, `Statistic`,
+ * `Heatmap`, `LogStream`, `Note`). The `id` on each chart is a free-form
+ * string the author picks; layout cells join via `LayoutCell.i`.
+ *
+ * The path identifier is `uid` (auto-assigned by Axiom). `id` is also
+ * exposed as an output but the API uses `uid` everywhere.
+ *
+ * Notes from probing `POST /v2/dashboards`:
+ *
+ * - Relative time windows must use the `qr-now-{duration}` form (e.g.
+ *   `"qr-now-7d"` / `"qr-now"`); plain `"now-7d"` is rejected.
+ * - When authenticating with an API token, `dashboard.owner` must be `""`
+ *   (Axiom rewrites this to the org-shared `X-AXIOM-EVERYONE`); per-user
+ *   "private" dashboards aren't allowed for tokens.
+ * - The chart payload is strict: only `id`, `name`, `type`, `query`. Extra
+ *   keys (e.g. `dataset`, `description`) trigger
+ *   `Unrecognized keys: "<name>"`.
+ *
+ * @see https://axiom.co/docs/query-data/dashboards
+ *
+ * @section Creating a Dashboard
+ * @example Minimal empty dashboard
+ * ```typescript
+ * yield* Axiom.Dashboard("ops", {
+ *   dashboard: {
+ *     name: "Ops Overview",
+ *     owner: "",                 // org-shared (required for API tokens)
+ *     description: "Top-level service health",
+ *     charts: [],
+ *     layout: [],
+ *     refreshTime: 60,           // seconds: 15 | 60 | 300
+ *     schemaVersion: 2,
+ *     timeWindowStart: "qr-now-1h",
+ *     timeWindowEnd: "qr-now",
+ *   },
+ * });
+ * ```
+ *
+ * @example One-chart dashboard
+ * ```typescript
+ * import type { Chart, LayoutCell } from "alchemy/Axiom";
+ *
+ * const errors: Chart = {
+ *   id: "errors-5m",
+ *   name: "5xx errors / 5m",
+ *   type: "TimeSeries",
+ *   query: {
+ *     apl: `['my-app-traces']
+ *       | where status >= 500
+ *       | summarize count() by bin_auto(_time)`,
+ *   },
+ * };
+ *
+ * yield* Axiom.Dashboard("errors", {
+ *   dashboard: {
+ *     name: "Errors",
+ *     owner: "",
+ *     refreshTime: 60,
+ *     schemaVersion: 2,
+ *     timeWindowStart: "qr-now-24h",
+ *     timeWindowEnd: "qr-now",
+ *     charts: [errors],
+ *     layout: [{ i: errors.id, x: 0, y: 0, w: 12, h: 6 } satisfies LayoutCell],
+ *   },
+ * });
+ * ```
+ *
+ * @example Compare to last 24h
+ * ```typescript
+ * yield* Axiom.Dashboard("compare", {
+ *   dashboard: {
+ *     name: "Compare vs yesterday",
+ *     owner: "",
+ *     refreshTime: 300,
+ *     schemaVersion: 2,
+ *     timeWindowStart: "qr-now-1h",
+ *     timeWindowEnd: "qr-now",
+ *     against: "-1d",            // overlay the same window from 24h ago
+ *     charts: [],
+ *     layout: [],
+ *   },
+ * });
+ * ```
+ */
+export declare const Dashboard: import("../Resource.ts").ResourceClass<Dashboard>;
+export declare const DashboardProvider: () => import("effect/Layer").Layer<Provider.Provider<Dashboard>, never, any>;
+export {};
+//# sourceMappingURL=Dashboard.d.ts.map

package/lib/Axiom/Dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Dashboard.d.ts","sourceRoot":"","sources":["../../src/Axiom/Dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,mCAAmC,CAAC;AAEhE,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,KAAK,YAAY,GAAG,UAAU,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,UAAU,CAAC,oBAAoB,EAC/B,WAAW,CACZ,GAAG;IACF,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG;QAC5D,QAAQ,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;QAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,QAAQ,CAC9B,iBAAiB,EACjB,cAAc,EACd;IACE,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,EAAE,UAAU,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC;CACvE,EACD,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,eAAO,MAAM,SAAS,mDAAyC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,8EAuD3B,CAAC"}

package/lib/Axiom/Dashboard.js

@@ -0,0 +1,140 @@
+import * as Operations from "@distilled.cloud/axiom/Operations";
+import * as Effect from "effect/Effect";
+import * as Provider from "../Provider.js";
+import { Resource } from "../Resource.js";
+/**
+ * An Axiom dashboard — a named, layout-driven collection of charts. Each
+ * dashboard takes a full document (`charts` + `layout` array of grid cells +
+ * `timeWindow` + `refreshTime`) at version `schemaVersion: 2`.
+ *
+ * Charts are typed via {@link Chart} (a discriminated union over the
+ * Axiom-validated chart kinds — `TimeSeries`, `Table`, `Pie`, `Statistic`,
+ * `Heatmap`, `LogStream`, `Note`). The `id` on each chart is a free-form
+ * string the author picks; layout cells join via `LayoutCell.i`.
+ *
+ * The path identifier is `uid` (auto-assigned by Axiom). `id` is also
+ * exposed as an output but the API uses `uid` everywhere.
+ *
+ * Notes from probing `POST /v2/dashboards`:
+ *
+ * - Relative time windows must use the `qr-now-{duration}` form (e.g.
+ *   `"qr-now-7d"` / `"qr-now"`); plain `"now-7d"` is rejected.
+ * - When authenticating with an API token, `dashboard.owner` must be `""`
+ *   (Axiom rewrites this to the org-shared `X-AXIOM-EVERYONE`); per-user
+ *   "private" dashboards aren't allowed for tokens.
+ * - The chart payload is strict: only `id`, `name`, `type`, `query`. Extra
+ *   keys (e.g. `dataset`, `description`) trigger
+ *   `Unrecognized keys: "<name>"`.
+ *
+ * @see https://axiom.co/docs/query-data/dashboards
+ *
+ * @section Creating a Dashboard
+ * @example Minimal empty dashboard
+ * ```typescript
+ * yield* Axiom.Dashboard("ops", {
+ *   dashboard: {
+ *     name: "Ops Overview",
+ *     owner: "",                 // org-shared (required for API tokens)
+ *     description: "Top-level service health",
+ *     charts: [],
+ *     layout: [],
+ *     refreshTime: 60,           // seconds: 15 | 60 | 300
+ *     schemaVersion: 2,
+ *     timeWindowStart: "qr-now-1h",
+ *     timeWindowEnd: "qr-now",
+ *   },
+ * });
+ * ```
+ *
+ * @example One-chart dashboard
+ * ```typescript
+ * import type { Chart, LayoutCell } from "alchemy/Axiom";
+ *
+ * const errors: Chart = {
+ *   id: "errors-5m",
+ *   name: "5xx errors / 5m",
+ *   type: "TimeSeries",
+ *   query: {
+ *     apl: `['my-app-traces']
+ *       | where status >= 500
+ *       | summarize count() by bin_auto(_time)`,
+ *   },
+ * };
+ *
+ * yield* Axiom.Dashboard("errors", {
+ *   dashboard: {
+ *     name: "Errors",
+ *     owner: "",
+ *     refreshTime: 60,
+ *     schemaVersion: 2,
+ *     timeWindowStart: "qr-now-24h",
+ *     timeWindowEnd: "qr-now",
+ *     charts: [errors],
+ *     layout: [{ i: errors.id, x: 0, y: 0, w: 12, h: 6 } satisfies LayoutCell],
+ *   },
+ * });
+ * ```
+ *
+ * @example Compare to last 24h
+ * ```typescript
+ * yield* Axiom.Dashboard("compare", {
+ *   dashboard: {
+ *     name: "Compare vs yesterday",
+ *     owner: "",
+ *     refreshTime: 300,
+ *     schemaVersion: 2,
+ *     timeWindowStart: "qr-now-1h",
+ *     timeWindowEnd: "qr-now",
+ *     against: "-1d",            // overlay the same window from 24h ago
+ *     charts: [],
+ *     layout: [],
+ *   },
+ * });
+ * ```
+ */
+export const Dashboard = Resource("Axiom.Dashboard");
+export const DashboardProvider = () => Provider.effect(Dashboard, Effect.gen(function* () {
+    const create = yield* Operations.createDashboard;
+    const update = yield* Operations.updateDashboard;
+    const get = yield* Operations.getDashboard;
+    const del = yield* Operations.deleteDashboard;
+    const toAttrsFromCreate = (envelope) => ({
+        uid: envelope.dashboard.uid,
+        id: envelope.dashboard.id,
+        createdAt: envelope.dashboard.createdAt,
+        createdBy: envelope.dashboard.createdBy,
+        updatedAt: envelope.dashboard.updatedAt,
+        updatedBy: envelope.dashboard.updatedBy,
+        dashboard: envelope.dashboard.dashboard,
+    });
+    const toAttrsFromGet = (current) => ({
+        uid: current.uid,
+        id: current.id,
+        createdAt: current.createdAt,
+        createdBy: current.createdBy,
+        updatedAt: current.updatedAt,
+        updatedBy: current.updatedBy,
+        dashboard: current.dashboard,
+    });
+    return {
+        stables: ["uid", "id", "createdAt", "createdBy"],
+        create: Effect.fn(function* ({ news }) {
+            return toAttrsFromCreate(yield* create(news));
+        }),
+        update: Effect.fn(function* ({ news, output }) {
+            // `overwrite: true` short-circuits Axiom's optimistic-concurrency
+            // check (otherwise the API requires the caller to echo back the
+            // server-side `version`, which the resource state doesn't track).
+            return toAttrsFromCreate(yield* update({ ...news, uid: output.uid, overwrite: true }));
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* del({ uid: output.uid }).pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (!output?.uid)
+                return undefined;
+            return yield* get({ uid: output.uid }).pipe(Effect.map(toAttrsFromGet), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+        }),
+    };
+}));
+//# sourceMappingURL=Dashboard.js.map

package/lib/Axiom/Dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Dashboard.js","sourceRoot":"","sources":["../../src/Axiom/Dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,mCAAmC,CAAC;AAChE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAyC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAY,iBAAiB,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,QAAQ,CAAC,MAAM,CACb,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;IACjD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;IAE9C,MAAM,iBAAiB,GAAG,CAAC,QAA0C,EAAE,EAAE,CAAC,CAAC;QACzE,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG;QAC3B,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;QACvC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;QACvC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;QACvC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;QACvC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;KACxC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,CAAC,OAAsC,EAAE,EAAE,CAAC,CAAC;QAClE,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACnC,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,kEAAkE;YAClE,gEAAgE;YAChE,kEAAkE;YAClE,OAAO,iBAAiB,CACtB,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,GAAG;gBAAE,OAAO,SAAS,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAC1B,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}