alchemy 2.0.0-beta.24 → 2.0.0-beta.26

package/lib/Auth/Profile.js

@@ -1,74 +0,0 @@
-import * as Config from "effect/Config";
-import * as ConfigProvider from "effect/ConfigProvider";
-import * as Context from "effect/Context";
-import * as Effect from "effect/Effect";
-import * as FileSystem from "effect/FileSystem";
-import os from "node:os";
-import path from "pathe";
-export const rootDir = path.join(os.homedir(), ".alchemy");
-export const configFilePath = path.join(rootDir, "profiles.json");
-/**
- * Config key consulted by the various `fromAuthProvider` /
- * `fromEnvironment` layers to pick which named profile in
- * `~/.alchemy/profiles.json` to use. Defaults to `"default"`.
- */
-export const ALCHEMY_PROFILE = Config.string("ALCHEMY_PROFILE").pipe(Config.withDefault("default"));
-export const CONFIG_VERSION = 0;
-export class AlchemyConfig extends Context.Service()("Alchemy::Profiles") {
-}
-const emptyConfig = () => ({
-    version: CONFIG_VERSION,
-    profiles: {},
-});
-export const readConfig = FileSystem.FileSystem.asEffect().pipe(Effect.flatMap((fs) => fs.readFileString(configFilePath)), Effect.flatMap((data) => Effect.try({
-    try: () => {
-        const parsed = JSON.parse(data);
-        if (parsed?.version !== CONFIG_VERSION) {
-            // TODO(sam): this is destructive, should we maintain a chain of migrations from 0 to current?
-            return emptyConfig();
-        }
-        return parsed;
-    },
-    catch: emptyConfig,
-})), Effect.orElseSucceed(emptyConfig));
-export const writeConfig = (config) => FileSystem.FileSystem.asEffect().pipe(Effect.tap((fs) => fs.makeDirectory(path.dirname(configFilePath), { recursive: true })), Effect.flatMap((fs) => fs.writeFileString(configFilePath, JSON.stringify(config, null, 2))));
-export const getProfile = (name) => readConfig.pipe(Effect.map((config) => config.profiles[name]));
-export const setProfile = (name, profile) => readConfig.pipe(Effect.tap((config) => Effect.sync(() => (config.profiles[name] = profile))), Effect.flatMap(writeConfig));
-/**
- * Remove `name` and all its provider credentials from the on-disk config.
- * Returns `true` if the profile existed and was removed, `false` otherwise.
- */
-export const deleteProfile = (name) => readConfig.pipe(Effect.flatMap((config) => {
-    if (!(name in config.profiles)) {
-        return Effect.succeed(false);
-    }
-    delete config.profiles[name];
-    return writeConfig(config).pipe(Effect.as(true));
-}));
-/**
- * Returns a `ConfigProvider` that overrides `ALCHEMY_PROFILE` with the
- * given `profile` (when explicitly passed via the CLI `--profile` flag),
- * falling through to `base` for everything else.
- *
- * Use this to let the CLI's `--profile <name>` win over `$ALCHEMY_PROFILE`
- * without disturbing other config lookups.
- */
-export const withProfileOverride = (base, profile) => {
-    if (profile === undefined)
-        return base;
-    const overrides = { ALCHEMY_PROFILE: profile };
-    const overrideProvider = ConfigProvider.make((path) => Effect.succeed(path.length === 1 && typeof path[0] === "string" && path[0] in overrides
-        ? ConfigProvider.makeValue(overrides[path[0]])
-        : undefined));
-    return ConfigProvider.orElse(base)(overrideProvider);
-};
-/**
- * Load the stored config for the given AuthProvider in `profileName`.
- * If absent, run the provider's `configure` step (passing through `ctx` so
- * providers can pick a CI-friendly default) and persist the resulting config
- * under the provider's name.
- */
-export const loadOrConfigure = (auth, profileName, ctx) => Effect.flatMap(getProfile(profileName), (existing) => existing?.[auth.name]
-    ? Effect.succeed(existing?.[auth.name])
-    : Effect.tap(auth.configure(profileName, ctx), (config) => setProfile(profileName, { ...existing, [auth.name]: config })));
-//# sourceMappingURL=Profile.js.map

package/lib/Auth/Profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Profile.js","sourceRoot":"","sources":["../../src/Auth/Profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,OAAO,CAAC;AAGzB,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAElE;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAQ/C,CAAC,mBAAmB,CAAC;CAAG;AAkB3B,MAAM,WAAW,GAAG,GAA6B,EAAE,CAAC,CAAC;IACnD,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,EAAE;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,CAC7D,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,EACzD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,EAAE,OAAO,KAAK,cAAc,EAAE,CAAC;YACvC,8FAA8F;YAC9F,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,MAAkC,CAAC;IAC5C,CAAC;IACD,KAAK,EAAE,WAAW;CACnB,CAAC,CACH,EACD,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAgC,EAAE,EAAE,CAC9D,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,CACnC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAChB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACpE,EACD,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CACpE,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,OAAuB,EAAE,EAAE,CAClE,UAAU,CAAC,IAAI,CACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CACrD,EACD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAC5B,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5C,UAAU,CAAC,IAAI,CACb,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IACxB,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CACH,CAAC;AAEJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,IAAmC,EACnC,OAA2B,EACI,EAAE;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,SAAS,GAA2B,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACvE,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACpD,MAAM,CAAC,OAAO,CACZ,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS;QACtE,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;QAC/C,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACF,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAA0B,EAC1B,WAAmB,EACnB,GAAqB,EACrB,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnD,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CACtD,UAAU,CAAC,WAAW,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAC9D,CACN,CAAC"}

package/lib/Auth/index.d.ts

@@ -1,5 +0,0 @@
-export * from "./AuthProvider.ts";
-export * from "./Credentials.ts";
-export * from "./Env.ts";
-export * from "./Profile.ts";
-//# sourceMappingURL=index.d.ts.map

package/lib/Auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/Auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC"}

package/lib/Auth/index.js

@@ -1,5 +0,0 @@
-export * from "./AuthProvider.js";
-export * from "./Credentials.js";
-export * from "./Env.js";
-export * from "./Profile.js";
-//# sourceMappingURL=index.js.map

package/lib/Auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/Auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC"}

package/lib/Axiom/Annotation.d.ts

@@ -1,49 +0,0 @@
-import * as Axiom from "@distilled.cloud/axiom";
-import * as Provider from "../Provider.ts";
-import { Resource } from "../Resource.ts";
-import type { Providers } from "./Providers.ts";
-export type AnnotationProps = Axiom.CreateAnnotationInput;
-export type Annotation = Resource<"Axiom.Annotation", AnnotationProps, Axiom.CreateAnnotationOutput, never, Providers>;
-/**
- * An Axiom annotation — a vertical marker overlaid on charts to flag a
- * deploy, incident, feature flag flip, or any other point/range event you
- * want correlated with telemetry.
- *
- * Annotations are scoped to one or more `datasets`. Use a single `time` for
- * a point marker or `time` + `endTime` for a range. The `type` (e.g.
- * `"deploy"`, `"incident"`) groups markers visually in the UI.
- *
- * Although typically created at deploy/release time (out-of-band of
- * regular IaC), modelling them as resources makes per-environment
- * annotation history reproducible.
- *
- * @see https://axiom.co/docs/query-data/annotate-charts
- *
- * @section Creating an Annotation
- * @example Point-in-time deploy marker
- * ```typescript
- * yield* Axiom.Annotation("deploy-1.2.3", {
- *   type: "deploy",
- *   title: "Release 1.2.3",
- *   description: "https://github.com/acme/app/releases/tag/v1.2.3",
- *   datasets: ["my-app-traces", "my-app-logs"],
- *   time: new Date().toISOString(),
- *   url: "https://github.com/acme/app/releases/tag/v1.2.3",
- * });
- * ```
- *
- * @example Incident time-range
- * ```typescript
- * yield* Axiom.Annotation("inc-2026-04-27", {
- *   type: "incident",
- *   title: "Database failover",
- *   datasets: ["my-app-traces"],
- *   time:    "2026-04-27T18:05:00Z",
- *   endTime: "2026-04-27T18:32:00Z",
- *   url: "https://incident.io/incidents/abc123",
- * });
- * ```
- */
-export declare const Annotation: import("../Resource.ts").ResourceClass<Annotation>;
-export declare const AnnotationProvider: () => import("effect/Layer").Layer<Provider.Provider<Annotation>, never, any>;
-//# sourceMappingURL=Annotation.d.ts.map

package/lib/Axiom/Annotation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Annotation.d.ts","sourceRoot":"","sources":["../../src/Axiom/Annotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAEhD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,qBAAqB,CAAC;AAE1D,MAAM,MAAM,UAAU,GAAG,QAAQ,CAC/B,kBAAkB,EAClB,eAAe,EACf,KAAK,CAAC,sBAAsB,EAC5B,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,UAAU,oDAA2C,CAAC;AAEnE,eAAO,MAAM,kBAAkB,+EAoC5B,CAAC"}

package/lib/Axiom/Annotation.js

@@ -1,74 +0,0 @@
-import * as Axiom from "@distilled.cloud/axiom";
-import * as Effect from "effect/Effect";
-import * as Provider from "../Provider.js";
-import { Resource } from "../Resource.js";
-/**
- * An Axiom annotation — a vertical marker overlaid on charts to flag a
- * deploy, incident, feature flag flip, or any other point/range event you
- * want correlated with telemetry.
- *
- * Annotations are scoped to one or more `datasets`. Use a single `time` for
- * a point marker or `time` + `endTime` for a range. The `type` (e.g.
- * `"deploy"`, `"incident"`) groups markers visually in the UI.
- *
- * Although typically created at deploy/release time (out-of-band of
- * regular IaC), modelling them as resources makes per-environment
- * annotation history reproducible.
- *
- * @see https://axiom.co/docs/query-data/annotate-charts
- *
- * @section Creating an Annotation
- * @example Point-in-time deploy marker
- * ```typescript
- * yield* Axiom.Annotation("deploy-1.2.3", {
- *   type: "deploy",
- *   title: "Release 1.2.3",
- *   description: "https://github.com/acme/app/releases/tag/v1.2.3",
- *   datasets: ["my-app-traces", "my-app-logs"],
- *   time: new Date().toISOString(),
- *   url: "https://github.com/acme/app/releases/tag/v1.2.3",
- * });
- * ```
- *
- * @example Incident time-range
- * ```typescript
- * yield* Axiom.Annotation("inc-2026-04-27", {
- *   type: "incident",
- *   title: "Database failover",
- *   datasets: ["my-app-traces"],
- *   time:    "2026-04-27T18:05:00Z",
- *   endTime: "2026-04-27T18:32:00Z",
- *   url: "https://incident.io/incidents/abc123",
- * });
- * ```
- */
-export const Annotation = Resource("Axiom.Annotation");
-export const AnnotationProvider = () => Provider.effect(Annotation, Effect.gen(function* () {
-    const create = yield* Axiom.createAnnotation;
-    const update = yield* Axiom.updateAnnotation;
-    const get = yield* Axiom.getAnnotation;
-    const del = yield* Axiom.deleteAnnotation;
-    return {
-        stables: ["id"],
-        create: Effect.fn(function* ({ news }) {
-            return yield* create(news);
-        }),
-        update: Effect.fn(function* ({ news, output }) {
-            const result = yield* update({ ...news, id: output.id });
-            return { ...result, id: output.id, time: result.time ?? output.time };
-        }),
-        delete: Effect.fn(function* ({ output }) {
-            yield* del({ id: output.id }).pipe(Effect.catchTag("NotFound", () => Effect.void));
-        }),
-        read: Effect.fn(function* ({ output }) {
-            if (!output?.id)
-                return undefined;
-            return yield* get({ id: output.id }).pipe(Effect.map((current) => ({
-                ...current,
-                id: current.id ?? output.id,
-                time: current.time ?? output.time,
-            })), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
-        }),
-    };
-}));
-//# sourceMappingURL=Annotation.js.map

package/lib/Axiom/Annotation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Annotation.js","sourceRoot":"","sources":["../../src/Axiom/Annotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAa1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAa,kBAAkB,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAE1C,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,CAAC;QACf,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAChC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,EAAE;gBAAE,OAAO,SAAS,CAAC;YAClC,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG,OAAO;gBACV,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;aAClC,CAAC,CAAC,EACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Axiom/ApiToken.d.ts

@@ -1,62 +0,0 @@
-import * as Axiom from "@distilled.cloud/axiom";
-import * as Redacted from "effect/Redacted";
-import * as Provider from "../Provider.ts";
-import { Resource } from "../Resource.ts";
-import type { Providers } from "./Providers.ts";
-export type ApiTokenProps = Omit<Axiom.CreateAPITokenInput, never>;
-export type ApiToken = Resource<"Axiom.ApiToken", ApiTokenProps, Omit<Axiom.CreateAPITokenOutput, "token"> & {
-    /**
-     * The bearer token. Returned only by `create` (and `regenerate`); Axiom
-     * does not return it on subsequent reads. Persisted in resource state via
-     * `Redacted` — handle with care.
-     */
-    token: Redacted.Redacted<string>;
-}, never, Providers>;
-/**
- * An Axiom API token — a scoped bearer token used to authenticate API
- * requests (ingest, query, admin). Capabilities are pinned at creation time;
- * changing any field triggers a **replacement** because Axiom does not
- * expose an update endpoint.
- *
- * The raw token value is returned only by `create`. After that, Axiom
- * never echoes it back, so it is captured into `output.token` (as a
- * {@link Redacted}) on initial create and persisted in resource state.
- * Treat resource state as sensitive — anyone with read access can recover
- * the token. Pair with a secret store for downstream consumption.
- *
- * @see https://axiom.co/docs/reference/tokens
- *
- * @section Creating an API Token
- * @example Ingest-only token scoped to one dataset
- * ```typescript
- * const ingest = yield* Axiom.ApiToken("ingest", {
- *   name: "prod-ingest",
- *   description: "OTEL collector ingest",
- *   datasetCapabilities: {
- *     "my-app-traces": { ingest: ["create"] },
- *   },
- * });
- * ```
- *
- * @example Read-only query token
- * ```typescript
- * yield* Axiom.ApiToken("query", {
- *   name: "grafana-reader",
- *   datasetCapabilities: {
- *     "my-app-traces": { query: ["read"] },
- *     "my-app-logs":   { query: ["read"] },
- *   },
- * });
- * ```
- *
- * @section Consuming the Token
- * @example Forward the token via Cloudflare Secrets
- * ```typescript
- * const secret = yield* Cloudflare.Secret("axiom-token", {
- *   value: ingest.token,
- * });
- * ```
- */
-export declare const ApiToken: import("../Resource.ts").ResourceClass<ApiToken>;
-export declare const ApiTokenProvider: () => import("effect/Layer").Layer<Provider.Provider<ApiToken>, never, any>;
-//# sourceMappingURL=ApiToken.d.ts.map

package/lib/Axiom/ApiToken.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiToken.d.ts","sourceRoot":"","sources":["../../src/Axiom/ApiToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAEhD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AAEnE,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAC7B,gBAAgB,EAChB,aAAa,EACb,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG;IAC1C;;;;OAIG;IACH,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAClC,EACD,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,eAAO,MAAM,QAAQ,kDAAuC,CAAC;AAE7D,eAAO,MAAM,gBAAgB,6EAoD1B,CAAC"}

package/lib/Axiom/ApiToken.js

@@ -1,98 +0,0 @@
-import * as Axiom from "@distilled.cloud/axiom";
-import * as Effect from "effect/Effect";
-import * as Redacted from "effect/Redacted";
-import { deepEqual, isResolved } from "../Diff.js";
-import * as Provider from "../Provider.js";
-import { Resource } from "../Resource.js";
-/**
- * An Axiom API token — a scoped bearer token used to authenticate API
- * requests (ingest, query, admin). Capabilities are pinned at creation time;
- * changing any field triggers a **replacement** because Axiom does not
- * expose an update endpoint.
- *
- * The raw token value is returned only by `create`. After that, Axiom
- * never echoes it back, so it is captured into `output.token` (as a
- * {@link Redacted}) on initial create and persisted in resource state.
- * Treat resource state as sensitive — anyone with read access can recover
- * the token. Pair with a secret store for downstream consumption.
- *
- * @see https://axiom.co/docs/reference/tokens
- *
- * @section Creating an API Token
- * @example Ingest-only token scoped to one dataset
- * ```typescript
- * const ingest = yield* Axiom.ApiToken("ingest", {
- *   name: "prod-ingest",
- *   description: "OTEL collector ingest",
- *   datasetCapabilities: {
- *     "my-app-traces": { ingest: ["create"] },
- *   },
- * });
- * ```
- *
- * @example Read-only query token
- * ```typescript
- * yield* Axiom.ApiToken("query", {
- *   name: "grafana-reader",
- *   datasetCapabilities: {
- *     "my-app-traces": { query: ["read"] },
- *     "my-app-logs":   { query: ["read"] },
- *   },
- * });
- * ```
- *
- * @section Consuming the Token
- * @example Forward the token via Cloudflare Secrets
- * ```typescript
- * const secret = yield* Cloudflare.Secret("axiom-token", {
- *   value: ingest.token,
- * });
- * ```
- */
-export const ApiToken = Resource("Axiom.ApiToken");
-export const ApiTokenProvider = () => Provider.effect(ApiToken, Effect.gen(function* () {
-    const create = yield* Axiom.createAPIToken;
-    const get = yield* Axiom.getAPIToken;
-    const del = yield* Axiom.deleteAPIToken;
-    return {
-        stables: ["id", "token"],
-        diff: Effect.fn(function* ({ olds, news, output }) {
-            if (!isResolved(news))
-                return undefined;
-            // First create — let the engine create normally.
-            if (output == null)
-                return undefined;
-            // Axiom has no update endpoint for tokens, so any actual change
-            // to the inputs forces a replacement (which mints a new bearer
-            // value). If nothing changed, fall through to `noop` so we don't
-            // needlessly rotate the token on every deploy.
-            if (deepEqual(olds, news))
-                return undefined;
-            return { action: "replace" };
-        }),
-        create: Effect.fn(function* ({ news }) {
-            const result = yield* create(news);
-            if (!result.token) {
-                return yield* Effect.die(new Error("Axiom did not return a token on create"));
-            }
-            return {
-                ...result,
-                token: Redacted.make(result.token),
-            };
-        }),
-        update: Effect.fn(function* ({ output }) {
-            // Diff returns "replace" for every change, so update should never
-            // run. If invoked, just return current state unchanged.
-            return output;
-        }),
-        delete: Effect.fn(function* ({ output }) {
-            yield* del({ id: output.id }).pipe(Effect.catchTag("NotFound", () => Effect.void));
-        }),
-        read: Effect.fn(function* ({ output }) {
-            if (!output?.id)
-                return undefined;
-            return yield* get({ id: output.id }).pipe(Effect.map((current) => ({ ...current, token: output.token })), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
-        }),
-    };
-}));
-//# sourceMappingURL=ApiToken.js.map

package/lib/Axiom/ApiToken.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiToken.js","sourceRoot":"","sources":["../../src/Axiom/ApiToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAoB1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAW,gBAAgB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,QAAQ,CAAC,MAAM,CACb,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAExC,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,iDAAiD;YACjD,IAAI,MAAM,IAAI,IAAI;gBAAE,OAAO,SAAS,CAAC;YACrC,gEAAgE;YAChE,+DAA+D;YAC/D,iEAAiE;YACjE,+CAA+C;YAC/C,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACpD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,MAAM;gBACT,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;aACnC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,kEAAkE;YAClE,wDAAwD;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAChC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,EAAE;gBAAE,OAAO,SAAS,CAAC;YAClC,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAC9D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Axiom/AuthProvider.d.ts

@@ -1,48 +0,0 @@
-import * as Redacted from "effect/Redacted";
-export type AxiomAuthConfig = {
-    method: "env";
-} | {
-    method: "stored";
-    credentialType: "apiToken";
-} | {
-    method: "stored";
-    credentialType: "pat";
-};
-export type AxiomStoredCredentials = {
-    type: "apiToken";
-    apiToken: string;
-    apiBaseUrl?: string;
-    orgId?: string;
-} | {
-    type: "pat";
-    apiToken: string;
-    apiBaseUrl?: string;
-    orgId: string;
-};
-export type AxiomResolvedCredentials = {
-    type: "apiToken";
-    apiToken: Redacted.Redacted<string>;
-    apiBaseUrl: string;
-    orgId?: string;
-    source: {
-        type: AxiomAuthConfig["method"];
-        details?: string;
-    };
-} | {
-    type: "pat";
-    apiToken: Redacted.Redacted<string>;
-    apiBaseUrl: string;
-    orgId: string;
-    source: {
-        type: AxiomAuthConfig["method"];
-        details?: string;
-    };
-};
-export declare const AXIOM_AUTH_PROVIDER_NAME = "Axiom";
-/**
- * Layer that registers the Axiom {@link AuthProvider} into the
- * {@link AuthProviders} registry when built. Include this in the Axiom
- * `providers()` layer so `alchemy login` can discover it.
- */
-export declare const AxiomAuth: import("effect/Layer").Layer<never, never, import("../Auth/AuthProvider.ts").AuthProviders>;
-//# sourceMappingURL=AuthProvider.d.ts.map

package/lib/Axiom/AuthProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../src/Axiom/AuthProvider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAmC5C,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,GACjB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,cAAc,EAAE,UAAU,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,cAAc,EAAE,KAAK,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,MAAM,MAAM,wBAAwB,GAChC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D,CAAC;AAEN,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,SAAS,6FASpB,CAAC"}

package/lib/Axiom/AuthProvider.js

@@ -1,177 +0,0 @@
-import * as Console from "effect/Console";
-import * as Effect from "effect/Effect";
-import * as FileSystem from "effect/FileSystem";
-import * as Match from "effect/Match";
-import * as Redacted from "effect/Redacted";
-import { AuthError, AuthProviderLayer, } from "../Auth/AuthProvider.js";
-import { deleteCredentials, displayRedacted, readCredentials, writeCredentials, } from "../Auth/Credentials.js";
-import { getEnv, getEnvRedacted, retryOnce } from "../Auth/Env.js";
-import * as Clank from "../Util/Clank.js";
-import { DEFAULT_API_BASE_URL } from "@distilled.cloud/axiom/Credentials";
-const STORAGE_KEY = "axiom-stored";
-const options = [
-    {
-        value: "env",
-        label: "Environment Variables",
-        hint: "AXIOM_TOKEN (or AXIOM_API_KEY) + optional AXIOM_ORG_ID, AXIOM_URL",
-    },
-    {
-        value: "stored",
-        label: "API Token or Personal Access Token",
-        hint: "enter credentials interactively, stored in ~/.alchemy/credentials",
-    },
-];
-export const AXIOM_AUTH_PROVIDER_NAME = "Axiom";
-/**
- * Layer that registers the Axiom {@link AuthProvider} into the
- * {@link AuthProviders} registry when built. Include this in the Axiom
- * `providers()` layer so `alchemy login` can discover it.
- */
-export const AxiomAuth = AuthProviderLayer()(AXIOM_AUTH_PROVIDER_NAME, {
-    configure: (profileName, ctx) => configureCredentials(profileName, ctx),
-    logout: (profileName, config) => logout(profileName, config),
-    login: (profileName, config) => login(profileName, config),
-    prettyPrint: (profileName, config) => prettyPrint(profileName, config),
-    read: (profileName, config) => resolveCredentials(profileName, config),
-});
-const resolveCredentials = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
-    const apiToken = (yield* getEnvRedacted("AXIOM_TOKEN")) ??
-        (yield* getEnvRedacted("AXIOM_API_KEY"));
-    if (!apiToken) {
-        return yield* new AuthError({
-            message: "Axiom env credentials not found. Set AXIOM_TOKEN (or AXIOM_API_KEY).",
-        });
-    }
-    const apiBaseUrl = (yield* getEnv("AXIOM_URL")) ?? DEFAULT_API_BASE_URL;
-    const orgId = yield* getEnv("AXIOM_ORG_ID");
-    if (orgId) {
-        return {
-            type: "pat",
-            apiToken,
-            apiBaseUrl,
-            orgId,
-            source: { type: "env" },
-        };
-    }
-    return {
-        type: "apiToken",
-        apiToken,
-        apiBaseUrl,
-        source: { type: "env" },
-    };
-})), Match.when({ method: "stored" }, () => readCredentials(profileName, STORAGE_KEY).pipe(Effect.flatMap((creds) => creds == null
-    ? Effect.fail(new AuthError({
-        message: "Axiom stored credentials not found. Run: alchemy login --configure",
-    }))
-    : Effect.succeed(Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => ({
-        type: "apiToken",
-        apiToken: Redacted.make(c.apiToken),
-        apiBaseUrl: c.apiBaseUrl ?? DEFAULT_API_BASE_URL,
-        orgId: c.orgId,
-        source: { type: "stored" },
-    })), Match.when({ type: "pat" }, (c) => ({
-        type: "pat",
-        apiToken: Redacted.make(c.apiToken),
-        apiBaseUrl: c.apiBaseUrl ?? DEFAULT_API_BASE_URL,
-        orgId: c.orgId,
-        source: { type: "stored" },
-    })), Match.exhaustive))))), Match.exhaustive);
-const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => deleteCredentials(profileName, STORAGE_KEY).pipe(Effect.andThen(Clank.success("Axiom: stored credentials removed")))), Match.exhaustive);
-const login = (profileName, config) => Match.value(config)
-    .pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => readCredentials(profileName, STORAGE_KEY).pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.exhaustive)
-    .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
-const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
-    if (ctx.ci) {
-        return { method: "env" };
-    }
-    return yield* configureInteractive(profileName);
-}).pipe(Effect.mapError((e) => new AuthError({
-    message: "failed to configure credentials",
-    cause: e,
-})));
-const configureInteractive = (profileName) => Clank.select({
-    message: "Axiom authentication method",
-    options,
-}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
-const loginStored = Effect.fnUntraced(function* (profileName) {
-    const credentialType = yield* Clank.select({
-        message: "Axiom credential type",
-        options: [
-            {
-                value: "apiToken",
-                label: "API Token",
-                hint: "recommended — scoped to specific datasets/actions",
-            },
-            {
-                value: "pat",
-                label: "Personal Access Token",
-                hint: "full account control, requires Org ID",
-            },
-        ],
-    }).pipe(retryOnce);
-    const apiBaseUrlPrompt = yield* Clank.text({
-        message: "Axiom API Base URL (Enter for default)",
-        placeholder: DEFAULT_API_BASE_URL,
-        defaultValue: DEFAULT_API_BASE_URL,
-    }).pipe(retryOnce);
-    const apiBaseUrl = apiBaseUrlPrompt && apiBaseUrlPrompt.length > 0
-        ? apiBaseUrlPrompt
-        : undefined;
-    return yield* Match.value(credentialType).pipe(Match.when("apiToken", () => Effect.gen(function* () {
-        const apiToken = yield* Clank.password({
-            message: "Axiom API Token",
-            validate: (v) => (v.length === 0 ? "Required" : undefined),
-        }).pipe(retryOnce);
-        const orgId = yield* promptOrgId(false);
-        yield* writeCredentials(profileName, STORAGE_KEY, {
-            type: "apiToken",
-            apiToken,
-            apiBaseUrl,
-            orgId: orgId && orgId.length > 0 ? orgId : undefined,
-        });
-        yield* Clank.success("Axiom: credentials saved.");
-        return {
-            method: "stored",
-            credentialType: "apiToken",
-        };
-    })), Match.when("pat", () => Effect.gen(function* () {
-        const apiToken = yield* Clank.password({
-            message: "Axiom Personal Access Token",
-            validate: (v) => (v.length === 0 ? "Required" : undefined),
-        }).pipe(retryOnce);
-        const orgId = yield* promptOrgId(true);
-        yield* writeCredentials(profileName, STORAGE_KEY, { type: "pat", apiToken, apiBaseUrl, orgId });
-        yield* Clank.success("Axiom: credentials saved.");
-        return {
-            method: "stored",
-            credentialType: "pat",
-        };
-    })), Match.exhaustive);
-});
-const promptOrgId = (required) => getEnv("AXIOM_ORG_ID").pipe(Effect.flatMap((envOrgId) => Clank.text({
-    message: required
-        ? "Axiom Org ID (required for PAT)"
-        : "Axiom Org ID (Enter to skip)",
-    placeholder: envOrgId ?? "",
-    defaultValue: envOrgId ?? "",
-    validate: required
-        ? (v) => (v.length === 0 ? "Required" : undefined)
-        : undefined,
-}).pipe(retryOnce)));
-const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => {
-    const sourceStr = creds.source.details
-        ? `${creds.source.type} - ${creds.source.details}`
-        : creds.source.type;
-    return Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => Effect.all([
-        Console.log(`  apiToken: ${displayRedacted(c.apiToken, 9)}`),
-        Console.log(`  apiBaseUrl: ${c.apiBaseUrl}`),
-        Console.log(`  orgId: ${c.orgId ?? "(none)"}`),
-        Console.log(`  source: ${sourceStr}`),
-    ])), Match.when({ type: "pat" }, (c) => Effect.all([
-        Console.log(`  apiToken: ${displayRedacted(c.apiToken, 9)}`),
-        Console.log(`  apiBaseUrl: ${c.apiBaseUrl}`),
-        Console.log(`  orgId: ${c.orgId}`),
-        Console.log(`  source: ${sourceStr}`),
-    ])), Match.exhaustive);
-}), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
-//# sourceMappingURL=AuthProvider.js.map