feat: add Turso environment database adapter and update .env.example and .gitignore

Author: hotlong

apps/server/.env.example

@@ -1,4 +1,10 @@
-# Turso Database Configuration
+# Turso Database Configuration (control-plane DB)
 # Required for Vercel deployment
 TURSO_DATABASE_URL=libsql://your-database.turso.io
 TURSO_AUTH_TOKEN=your-auth-token-here
+
+# Turso Platform API (environment provisioning)
+# When set, new environments are provisioned as real Turso cloud databases.
+# When unset, each environment gets a local SQLite file under .objectstack/data/environments/.
+TURSO_ORG_NAME=your-org-slug
+TURSO_API_TOKEN=your-platform-api-token

apps/server/.gitignore

@@ -19,3 +19,5 @@ node_modules/
 # OS files
 .DS_Store
 Thumbs.db
+.vercel
+.env*.local

packages/services/service-tenant/src/environment-provisioning.ts

@@ -12,6 +12,7 @@ import type {
   ProvisionOrganizationResponse,
 } from '@objectstack/spec/cloud';
 import { ProvisionEnvironmentRequestSchema, ProvisionOrganizationRequestSchema } from '@objectstack/spec/cloud';
+import { TursoPlatformClient } from './turso-platform-client.js';
 
 /**
  * Backend-agnostic physical DB provisioning adapter.
@@ -63,6 +64,66 @@ export class NoopSecretEncryptor implements SecretEncryptor {
   }
 }
 
+/**
+ * Turso Platform adapter — calls the Turso Platform API to provision a new
+ * cloud database for each environment, then mints a per-database auth token.
+ *
+ * Required env vars: `TURSO_ORG_NAME`, `TURSO_API_TOKEN`.
+ */
+export class TursoEnvironmentDatabaseAdapter implements EnvironmentDatabaseAdapter {
+  readonly driver: DatabaseDriver = 'turso';
+
+  private readonly client: TursoPlatformClient;
+
+  constructor(config: { apiToken: string; organization: string; apiBaseUrl?: string }) {
+    this.client = new TursoPlatformClient(config);
+  }
+
+  async createDatabase(params: {
+    environmentId: string;
+    databaseName: string;
+    region: string;
+    storageLimitMb: number;
+  }): Promise<{ databaseUrl: string; plaintextSecret: string }> {
+    await this.client.createDatabase({ name: params.databaseName });
+    const { jwt } = await this.client.createDatabaseToken(params.databaseName, {
+      authorization: 'full-access',
+    });
+    const db = await this.client.getDatabase(params.databaseName);
+    return {
+      databaseUrl: `libsql://${db.Hostname}`,
+      plaintextSecret: jwt,
+    };
+  }
+}
+
+/**
+ * Local SQLite adapter for development environments. Creates one `.db` file
+ * per environment under `baseDir`, named after the stable `databaseName`
+ * (e.g. `env-{uuid}.db`) so the file survives slug renames.
+ */
+export class LocalSQLiteEnvironmentDatabaseAdapter implements EnvironmentDatabaseAdapter {
+  readonly driver: DatabaseDriver = 'sqlite';
+
+  constructor(private readonly baseDir: string = '.objectstack/data/environments') {}
+
+  async createDatabase(params: {
+    environmentId: string;
+    databaseName: string;
+    region: string;
+    storageLimitMb: number;
+  }): Promise<{ databaseUrl: string; plaintextSecret: string }> {
+    const { mkdirSync } = await import('node:fs');
+    const { resolve } = await import('node:path');
+    const dbPath = resolve(this.baseDir, `${params.databaseName}.db`);
+    mkdirSync(this.baseDir, { recursive: true });
+    return {
+      databaseUrl: `file:${dbPath}`,
+      plaintextSecret: '',
+    };
+  }
+}
+
 /**
  * Mock adapter used by dev/test environments when no real provider is
  * configured. Returns stable synthetic URLs / tokens.
@@ -421,3 +482,24 @@ export class EnvironmentProvisioningService {
     }
   }
 }
+
+/**
+ * Build the default adapter list from environment variables.
+ *
+ * - `TURSO_ORG_NAME` + `TURSO_API_TOKEN` present → `TursoEnvironmentDatabaseAdapter`
+ *   (provisions real cloud databases via the Turso Platform API).
+ * - Otherwise → `LocalSQLiteEnvironmentDatabaseAdapter`
+ *   (creates one `.db` file per environment under `.objectstack/data/environments/`).
+ */
+export function createDefaultEnvironmentAdapters(
+  env: Record<string, string | undefined> = process.env,
+): EnvironmentDatabaseAdapter[] {
+  const orgName = env.TURSO_ORG_NAME;
+  const apiToken = env.TURSO_API_TOKEN;
+
+  if (orgName && apiToken) {
+    return [new TursoEnvironmentDatabaseAdapter({ organization: orgName, apiToken })];
+  }
+
+  return [new LocalSQLiteEnvironmentDatabaseAdapter()];
+}