alchemy 2.0.0-beta.66 → 2.0.0-beta.67

package/bin/exec.js

@@ -709,7 +709,7 @@ var init_Output = __esm({ "lib/Output.js": (() => {
 			return `stackRef(${this.stack}${this.stage ? `, { stage: ${this.stage} }` : ""})`;
 		}
 	};
-	stackRef = (stack, options$6 = {}) => Effect.succeed(new StackRefExpr(stack, options$6.stage));
+	stackRef = (stack, options$7 = {}) => Effect.succeed(new StackRefExpr(stack, options$7.stage));
 	MissingSourceError = class extends Data.TaggedError("MissingSourceError") {};
 	InvalidReferenceError = class extends Data.TaggedError("InvalidReferenceError") {};
 	evaluate = (expr, upstream$1) => Effect.gen(function* () {
@@ -874,9 +874,9 @@ var init_PlatformServices = __esm({ "lib/Util/PlatformServices.js": (() => {
 			return Layer.merge(NodeServices.layer, NodeSocket.layerWebSocketConstructor);
 		}
 	});
-	runMain = (effect, options$6) => {
-		if (isBun) import("@effect/platform-bun/BunRuntime").then((BunRuntime) => BunRuntime.runMain(effect, options$6));
-		else import("@effect/platform-node/NodeRuntime").then((NodeRuntime) => NodeRuntime.runMain(effect, options$6));
+	runMain = (effect, options$7) => {
+		if (isBun) import("@effect/platform-bun/BunRuntime").then((BunRuntime) => BunRuntime.runMain(effect, options$7));
+		else import("@effect/platform-node/NodeRuntime").then((NodeRuntime) => NodeRuntime.runMain(effect, options$7));
 	};
 }) });
 
@@ -891,31 +891,31 @@ var init_Stack = __esm({ "lib/Stack.js": (() => {
 	init_effect();
 	init_FileLogger();
 	init_PlatformServices();
-	Stack = Object.assign(taggedFunction(EffectContext.Service()("Stack"), (stackName, options$6, eff) => {
+	Stack = Object.assign(taggedFunction(EffectContext.Service()("Stack"), (stackName, options$7, eff) => {
 		if (!stackName) return (stackName$1) => Object.assign(stackRef(stackName$1).pipe(effectClass), {
 			stackName: stackName$1,
 			stage: createStageProxy(stackName$1),
-			state: options$6?.state,
-			providers: options$6?.providers,
-			make: (options$7, eff$1) => Stack(stackName$1, options$7, eff$1)
+			state: options$7?.state,
+			providers: options$7?.providers,
+			make: (options$8, eff$1) => Stack(stackName$1, options$8, eff$1)
 		});
 		return eff.pipe(make$2({
 			name: stackName,
-			...options$6
+			...options$7
 		}), (eff$1) => Object.assign(eff$1, {
 			stackName,
 			stage: createStageProxy(stackName),
-			state: options$6?.state,
-			providers: options$6?.providers
+			state: options$7?.state,
+			providers: options$7?.providers
 		}));
 	}));
 	createStageProxy = (stackName) => new Proxy({}, { get: (_, stage$1) => stackRef(stackName, { stage: stage$1 }) });
 	StackName = Stack.use((stack) => Effect.succeed(stack.name));
-	make$2 = (options$6) => (effect) => Effect.scope.pipe(Effect.flatMap((scope) => {
-		if (options$6.state == null) return Effect.die(/* @__PURE__ */ new Error(`Stack "${options$6.name}" is missing a state store. Add a \`state\` layer to the stack options, e.g.:\n  Alchemy.Stack("${options$6.name}", {\n    providers: Cloudflare.providers(),\n    state: Cloudflare.state(), // <-- required\n  }, ...)\nSee https://alchemy.run/state-store for available state stores.`));
-		if (options$6.providers == null) return Effect.die(/* @__PURE__ */ new Error(`Stack "${options$6.name}" is missing a providers layer. Add a \`providers\` layer to the stack options, e.g.:\n  Alchemy.Stack("${options$6.name}", {\n    providers: Cloudflare.providers(), // <-- required\n    state: Cloudflare.state(),\n  }, ...)`));
-		return options$6.providers.pipe(Layer.provideMerge(options$6.state), Layer.provideMerge(Layer.effect(Stack, Stage.pipe(Effect.map((stage$1) => options$6.stack ?? {
-			name: options$6.name,
+	make$2 = (options$7) => (effect) => Effect.scope.pipe(Effect.flatMap((scope) => {
+		if (options$7.state == null) return Effect.die(/* @__PURE__ */ new Error(`Stack "${options$7.name}" is missing a state store. Add a \`state\` layer to the stack options, e.g.:\n  Alchemy.Stack("${options$7.name}", {\n    providers: Cloudflare.providers(),\n    state: Cloudflare.state(), // <-- required\n  }, ...)\nSee https://alchemy.run/state-store for available state stores.`));
+		if (options$7.providers == null) return Effect.die(/* @__PURE__ */ new Error(`Stack "${options$7.name}" is missing a providers layer. Add a \`providers\` layer to the stack options, e.g.:\n  Alchemy.Stack("${options$7.name}", {\n    providers: Cloudflare.providers(), // <-- required\n    state: Cloudflare.state(),\n  }, ...)`));
+		return options$7.providers.pipe(Layer.provideMerge(options$7.state), Layer.provideMerge(Layer.effect(Stack, Stage.pipe(Effect.map((stage$1) => options$7.stack ?? {
+			name: options$7.name,
 			stage: stage$1,
 			resources: {},
 			bindings: {},
@@ -1338,7 +1338,7 @@ init_Provider();
 init_ProviderMode();
 init_Resource();
 init_sha256();
-const make = (stack, options$6 = {}) => Effect.gen(function* () {
+const make = (stack, options$7 = {}) => Effect.gen(function* () {
 	const state = yield* yield* State;
 	const resources = Object.values(stack.resources);
 	const actions = Object.values(stack.actions ?? {});
@@ -1422,7 +1422,7 @@ const make = (stack, options$6 = {}) => Effect.gen(function* () {
 				if (havePropsChanged(oldProps, props)) return withStables(oldState?.attr);
 			} else if (diff.action === "update") return withStables(oldState?.attr);
 			else if (diff.action === "replace") return resourceExpr;
-			if (options$6.force) return withStables(oldState?.attr);
+			if (options$7.force) return withStables(oldState?.attr);
 			if (oldState.status === "created" || oldState.status === "updated" || oldState.status === "replaced") return oldState?.attr;
 			else return resourceExpr;
 		}));
@@ -1626,7 +1626,7 @@ const make = (stack, options$6 = {}) => Effect.gen(function* () {
 			news,
 			oldBindings,
 			newBindings
-		}).pipe(providePlanScope(fqn, oldState.instanceId))).pipe(Effect.map((diff$1) => diff$1 ?? { action: havePropsChanged(oldProps, news) || bindingDiffs.some((b) => b.action !== "noop") ? "update" : "noop" }), Effect.map((diff$1) => options$6.force && diff$1.action === "noop" ? { action: "update" } : diff$1), Effect.map((diff$1) => forceUpdateAfterAdoption && diff$1.action === "noop" ? { action: "update" } : diff$1));
+		}).pipe(providePlanScope(fqn, oldState.instanceId))).pipe(Effect.map((diff$1) => diff$1 ?? { action: havePropsChanged(oldProps, news) || bindingDiffs.some((b) => b.action !== "noop") ? "update" : "noop" }), Effect.map((diff$1) => options$7.force && diff$1.action === "noop" ? { action: "update" } : diff$1), Effect.map((diff$1) => forceUpdateAfterAdoption && diff$1.action === "noop" ? { action: "update" } : diff$1));
 		if (oldState.status === "creating") if (diff.action === "noop") return Node({
 			action: "create",
 			props: news,
@@ -1736,7 +1736,7 @@ const make = (stack, options$6 = {}) => Effect.gen(function* () {
 			forced: false
 		}];
 		const prior = oldState;
-		if (prior?.status === "ran" && prior.inputHash === inputHash && !options$6.force) return [fqn, {
+		if (prior?.status === "ran" && prior.inputHash === inputHash && !options$7.force) return [fqn, {
 			kind: "action",
 			action: "noop",
 			def: action,
@@ -1750,7 +1750,7 @@ const make = (stack, options$6 = {}) => Effect.gen(function* () {
 			input: action.Input,
 			state: prior,
 			downstream,
-			forced: !!options$6.force
+			forced: !!options$7.force
 		}];
 	})), { concurrency: "unbounded" }));
 	const cycleMembers = combinedCycleMembers;
@@ -1877,7 +1877,7 @@ const make = (stack, options$6 = {}) => Effect.gen(function* () {
 	"alchemy.stack": stack.name,
 	"alchemy.stage": stack.stage,
 	"alchemy.resources.count": Object.keys(stack.resources).length,
-	"alchemy.force": !!options$6.force
+	"alchemy.force": !!options$7.force
 } }));
 /**
 * Build the plan that destroys every resource of `(stack.name, stack.stage)`.
@@ -3048,7 +3048,7 @@ const fromEnvironment = Layer.effect(Region.Region, Effect.gen(function* () {
 init_AuthProvider();
 init_Credentials();
 const AWS_AUTH_PROVIDER_NAME = "AWS";
-const options$5 = [
+const options$6 = [
 	{
 		value: "sso",
 		label: "SSO",
@@ -3123,7 +3123,7 @@ const AwsAuth = AuthProviderLayer()(AWS_AUTH_PROVIDER_NAME, Effect.gen(function*
 	});
 	const configureInteractive = (profileName) => select({
 		message: "AWS authentication method",
-		options: options$5
+		options: options$6
 	}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("sso", () => Effect.gen(function* () {
 		const config = {
 			method: "sso",
@@ -3270,7 +3270,7 @@ const clearDistilledSsoCache = (ssoProfile) => Effect.gen(function* () {
 init_AuthProvider();
 init_Credentials();
 const STORAGE_KEY = "axiom-stored";
-const options$4 = [{
+const options$5 = [{
 	value: "env",
 	label: "Environment Variables",
 	hint: "AXIOM_TOKEN (or AXIOM_API_KEY) + optional AXIOM_ORG_ID, AXIOM_URL"
@@ -3350,7 +3350,7 @@ const AxiomAuth = AuthProviderLayer()(AXIOM_AUTH_PROVIDER_NAME, Effect.gen(funct
 	});
 	const configureInteractive = (profileName) => select({
 		message: "Axiom authentication method",
-		options: options$4
+		options: options$5
 	}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
 	const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
 		if (ctx.ci) return { method: "env" };
@@ -3693,7 +3693,7 @@ function callbackPromise$1(authorization, signal) {
 //#region lib/Cloudflare/Auth/AuthProvider.js
 init_AuthProvider();
 init_Credentials();
-const options$3 = [
+const options$4 = [
 	{
 		value: "oauth",
 		label: "OAuth",
@@ -3854,7 +3854,7 @@ const CloudflareAuth = AuthProviderLayer()(CLOUDFLARE_AUTH_PROVIDER_NAME, Effect
 	});
 	const configureInteractive = (profileName) => select({
 		message: "Cloudflare authentication method",
-		options: options$3
+		options: options$4
 	}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("oauth", () => configureOAuth(profileName)), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
 	const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
 		const config = ctx.ci ? { method: "env" } : yield* configureInteractive(profileName);
@@ -4130,7 +4130,7 @@ const resolveGitHubBaseUrlFromEnv = Effect.gen(function* () {
 //#region lib/GitHub/AuthProvider.js
 init_AuthProvider();
 init_Credentials();
-const options$2 = [
+const options$3 = [
 	{
 		value: "gh-cli",
 		label: "GitHub CLI",
@@ -4231,7 +4231,7 @@ const makeGitHubAuth = (authOptions) => AuthProviderLayer()(GITHUB_AUTH_PROVIDER
 	const configureInteractive = (profileName) => Effect.gen(function* () {
 		const method = yield* select({
 			message: "GitHub authentication method",
-			options: options$2
+			options: options$3
 		});
 		const baseUrl = fixed !== void 0 ? void 0 : yield* promptBaseUrl;
 		const verifyHost = fixed !== void 0 ? fixed.baseUrl : baseUrl;
@@ -4307,7 +4307,7 @@ init_AuthProvider();
 init_Credentials();
 init_Profile();
 const NEON_AUTH_PROVIDER_NAME = "Neon";
-const options$1 = [{
+const options$2 = [{
 	value: "env",
 	label: "Environment Variable",
 	hint: "NEON_API_KEY"
@@ -4337,7 +4337,7 @@ const NeonAuth = AuthProviderLayer()(NEON_AUTH_PROVIDER_NAME, Effect.gen(functio
 	});
 	const configureInteractive = (profileName) => select({
 		message: "Neon authentication method",
-		options: options$1
+		options: options$2
 	}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
 	const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
 		if (ctx.ci) return { method: "env" };
@@ -4680,7 +4680,7 @@ const selectOrganization = (accessToken) => Effect.gen(function* () {
 		}))
 	}).pipe(retryOnce);
 }).pipe((e) => withOAuthCredentials(accessToken, e));
-const options = [
+const options$1 = [
 	{
 		value: "env",
 		label: "Environment Variables",
@@ -4762,7 +4762,7 @@ const PlanetscaleAuth = AuthProviderLayer()(PLANETSCALE_AUTH_PROVIDER_NAME, Effe
 	});
 	const configureInteractive = (profileName) => select({
 		message: "Planetscale authentication method",
-		options
+		options: options$1
 	}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("oauth", () => configureOAuth(profileName)), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
 	const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
 		if (ctx.ci) return { method: "env" };
@@ -4847,6 +4847,108 @@ const PlanetscaleAuth = AuthProviderLayer()(PLANETSCALE_AUTH_PROVIDER_NAME, Effe
 	};
 }));
 
+//#endregion
+//#region lib/Prisma/AuthProvider.js
+init_AuthProvider();
+init_Credentials();
+init_Profile();
+const PRISMA_AUTH_PROVIDER_NAME = "Prisma";
+const PRISMA_SERVICE_TOKEN_ENV = "PRISMA_SERVICE_TOKEN";
+const PRISMA_API_TOKEN_ENV = "PRISMA_API_TOKEN";
+const options = [{
+	value: "env",
+	label: "Environment Variable",
+	hint: `${PRISMA_SERVICE_TOKEN_ENV} or ${PRISMA_API_TOKEN_ENV}`
+}, {
+	value: "stored",
+	label: "Service Token",
+	hint: "enter interactively, stored in ~/.alchemy/credentials"
+}];
+const nonEmptyToken = (token) => token !== void 0 && Redacted.value(token).trim().length > 0;
+const validStoredCredentials = (credentials) => credentials?.type === "serviceToken" && credentials.serviceToken.trim().length > 0;
+const trimToken = (token) => Redacted.make(Redacted.value(token).trim());
+const readEnvServiceToken = Effect.fnUntraced(function* () {
+	const serviceToken = yield* getEnvRedacted(PRISMA_SERVICE_TOKEN_ENV);
+	if (nonEmptyToken(serviceToken)) return {
+		serviceToken: trimToken(serviceToken),
+		envName: PRISMA_SERVICE_TOKEN_ENV
+	};
+	const apiToken = yield* getEnvRedacted(PRISMA_API_TOKEN_ENV);
+	if (nonEmptyToken(apiToken)) return {
+		serviceToken: trimToken(apiToken),
+		envName: PRISMA_API_TOKEN_ENV
+	};
+});
+/**
+* Layer that registers the Prisma Management API auth provider.
+*/
+const PrismaAuth = AuthProviderLayer()(PRISMA_AUTH_PROVIDER_NAME, Effect.gen(function* () {
+	const profiles = yield* AlchemyProfile;
+	const store = yield* CredentialsStore;
+	const loginStored = Effect.fnUntraced(function* (profileName) {
+		const serviceToken = yield* password({
+			message: "Prisma Service Token",
+			validate: (v) => v.trim().length === 0 ? "Required" : void 0
+		}).pipe(retryOnce);
+		yield* store.write(profileName, "prisma-stored", {
+			type: "serviceToken",
+			serviceToken: serviceToken.trim()
+		});
+		yield* success("Prisma: credentials saved.");
+		return { method: "stored" };
+	});
+	const configureInteractive = (profileName) => select({
+		message: "Prisma authentication method",
+		options
+	}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
+	const configure = (profileName, ctx) => Effect.gen(function* () {
+		if (ctx.ci) return { method: "env" };
+		return yield* configureInteractive(profileName);
+	}).pipe(Effect.mapError((e) => new AuthError({
+		message: "failed to configure credentials",
+		cause: e
+	})));
+	const read = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
+		const envToken = yield* readEnvServiceToken();
+		if (!envToken) return yield* new AuthError({ message: `Prisma env credentials not found. Set ${PRISMA_SERVICE_TOKEN_ENV} or ${PRISMA_API_TOKEN_ENV}.` });
+		return {
+			type: "serviceToken",
+			serviceToken: envToken.serviceToken,
+			source: {
+				type: "env",
+				details: envToken.envName
+			}
+		};
+	})), Match.when({ method: "stored" }, () => store.read(profileName, "prisma-stored").pipe(Effect.flatMap((creds) => !validStoredCredentials(creds) ? Effect.fail(new AuthError({ message: creds == null ? "Prisma stored credentials not found. Run: alchemy login --configure" : "Prisma stored credentials are invalid. Run: alchemy login --configure" })) : Effect.succeed({
+		type: "serviceToken",
+		serviceToken: Redacted.make(creds.serviceToken.trim()),
+		source: { type: "stored" }
+	})))), Match.exhaustive);
+	const login = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => readEnvServiceToken().pipe(Effect.flatMap((envToken) => envToken ? Effect.void : Effect.gen(function* () {
+		const next = yield* configureInteractive(profileName);
+		const existing = yield* profiles.getProfile(profileName);
+		yield* profiles.setProfile(profileName, {
+			...existing,
+			[PRISMA_AUTH_PROVIDER_NAME]: next
+		});
+	})))), Match.when({ method: "stored" }, () => store.read(profileName, "prisma-stored").pipe(Effect.flatMap((creds) => validStoredCredentials(creds) ? Effect.void : loginStored(profileName)))), Match.exhaustive).pipe(Effect.mapError((e) => new AuthError({
+		message: "login failed",
+		cause: e
+	})));
+	const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => store.delete(profileName, "prisma-stored").pipe(Effect.andThen(success("Prisma: stored credentials removed")))), Match.exhaustive);
+	const prettyPrint = (profileName, config) => read(profileName, config).pipe(Effect.tap((creds) => {
+		const source = creds.source.details ? `${creds.source.type} - ${creds.source.details}` : creds.source.type;
+		return Effect.all([Console.log(`  serviceToken: ${displayRedacted(creds.serviceToken, 9)}`), Console.log(`  source: ${source}`)]);
+	}), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
+	return {
+		configure,
+		login,
+		logout,
+		prettyPrint,
+		read
+	};
+}));
+
 //#endregion
 //#region lib/Cli/commands/_shared.js
 init_AuthProvider();
@@ -4962,13 +5064,13 @@ const placeholderStack = (name) => ({
 * entrypoint is fatal (login / nuke let it propagate) or best-effort
 * (profile show wraps the call in `Effect.catchCause`).
 */
-const buildStackProviders = Effect.fn("buildStackProviders")(function* (options$6) {
-	const authProviders = options$6.registry ?? {};
-	const stackEffect = yield* importStack(options$6.main);
-	const configProvider = withProfileOverride(yield* loadConfigProvider(options$6.envFile), options$6.profile);
+const buildStackProviders = Effect.fn("buildStackProviders")(function* (options$7) {
+	const authProviders = options$7.registry ?? {};
+	const stackEffect = yield* importStack(options$7.main);
+	const configProvider = withProfileOverride(yield* loadConfigProvider(options$7.envFile), options$7.profile);
 	return {
 		authProviders,
-		context: yield* Layer.build((stackEffect.providers ?? Layer.empty).pipe(Layer.provideMerge(stackEffect.state ?? Layer.empty), Layer.provideMerge(Layer.mergeAll(Layer.succeed(AuthProviders, authProviders), ConfigProvider.layer(configProvider), options$6.logger ?? Logger.layer([fileLogger("out")], { mergeWithExisting: true }), Layer.succeed(Stage, "placeholder"), Layer.succeed(Stack, placeholderStack(stackEffect.stackName)), options$6.extra ?? Layer.empty)))),
+		context: yield* Layer.build((stackEffect.providers ?? Layer.empty).pipe(Layer.provideMerge(stackEffect.state ?? Layer.empty), Layer.provideMerge(Layer.mergeAll(Layer.succeed(AuthProviders, authProviders), ConfigProvider.layer(configProvider), options$7.logger ?? Logger.layer([fileLogger("out")], { mergeWithExisting: true }), Layer.succeed(Stage, "placeholder"), Layer.succeed(Stack, placeholderStack(stackEffect.stackName)), options$7.extra ?? Layer.empty)))),
 		stackEffect
 	};
 });
@@ -4978,14 +5080,14 @@ const buildStackProviders = Effect.fn("buildStackProviders")(function* (options$
 * `alchemy profile show` can pretty-print any provider a profile mentions,
 * even one the current stack doesn't wire up.
 */
-const builtinAuth = Layer.mergeAll(AwsAuth, AxiomAuth, CloudflareAuth, GitHubAuth, NeonAuth, PlanetscaleAuth);
+const builtinAuth = Layer.mergeAll(AwsAuth, AxiomAuth, CloudflareAuth, GitHubAuth, NeonAuth, PlanetscaleAuth, PrismaAuth);
 /**
 * Build {@link builtinAuth} against `registry` so every built-in auth
 * provider registers itself, without importing any stack entrypoint.
 */
-const buildBuiltinAuthProviders = Effect.fn("buildBuiltinAuthProviders")(function* (options$6) {
-	const authProviders = options$6.registry ?? {};
-	yield* Layer.build(Layer.provide(builtinAuth, Layer.mergeAll(Layer.succeed(AuthProviders, authProviders), ConfigProvider.layer(withProfileOverride(yield* loadConfigProvider(options$6.envFile), options$6.profile)), Logger.layer([fileLogger("out")], { mergeWithExisting: true }))));
+const buildBuiltinAuthProviders = Effect.fn("buildBuiltinAuthProviders")(function* (options$7) {
+	const authProviders = options$7.registry ?? {};
+	yield* Layer.build(Layer.provide(builtinAuth, Layer.mergeAll(Layer.succeed(AuthProviders, authProviders), ConfigProvider.layer(withProfileOverride(yield* loadConfigProvider(options$7.envFile), options$7.profile)), Logger.layer([fileLogger("out")], { mergeWithExisting: true }))));
 	return authProviders;
 });