@alchemy.run/daytona 0.0.0-stage → 2.0.0-beta.86

package/lib/OrganizationInvitation.d.ts

@@ -0,0 +1,70 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { type OrganizationRef } from "./internal/Organization.ts";
+import { type Ref } from "./internal/Ref.ts";
+import type { Providers } from "./Providers.ts";
+/** A role, by id. Accepts a `Daytona.OrganizationRole` or `{ roleId }`. */
+export type RoleRef = {
+    readonly roleId: string;
+};
+/** `owner` manages the organization; `member` gets only the assigned roles. */
+export type MemberRole = "owner" | "member";
+export interface OrganizationInvitationProps {
+    /**
+     * Organization to act on, e.g. a `Daytona.Organization`. Defaults to the
+     * credentials' organization. Changing it replaces the resource.
+     */
+    organization?: Ref<OrganizationRef>;
+    /** Email to invite. Changing it replaces the invitation. */
+    email: string;
+    /** Base role. @default "member" */
+    role?: MemberRole;
+    /** Custom roles to assign. Updated in place. */
+    roles?: Ref<RoleRef>[];
+    /** When the invitation expires, as an ISO 8601 timestamp. */
+    expiresAt?: string;
+}
+export interface OrganizationInvitationAttributes {
+    /** Invitation ID. */
+    invitationId: string;
+    /** Organization ID. */
+    organizationId: string;
+    /** Invited email. */
+    email: string;
+    /** `pending`, `accepted`, `declined`, `cancelled`. */
+    status: string;
+    /** When it expires. */
+    expiresAt: string;
+}
+export type OrganizationInvitation = Resource<"Daytona.OrganizationInvitation", OrganizationInvitationProps, OrganizationInvitationAttributes, never, Providers>;
+/**
+ * Invite someone to the Daytona organization by email, with a base role
+ * and custom {@link OrganizationRole}s. Destroying it cancels the
+ * invitation if it hasn't been accepted; an accepted invitation leaves the
+ * member in place.
+ *
+ * ### Inviting a Developer
+ * **Example:** A member with a custom role
+ * ```typescript
+ * export const Alice = Daytona.OrganizationInvitation("Alice", {
+ *   email: "alice@example.com",
+ *   roles: [Developer],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const OrganizationInvitation: import("alchemy/Resource").ResourceConstructor<OrganizationInvitation, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<OrganizationInvitation, never>, never, never> & {
+    Self: import("alchemy/Self").Self<OrganizationInvitation>;
+    Provider: Provider.Provider<OrganizationInvitation>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<OrganizationInvitation, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<OrganizationInvitationProps>) => Effect.Effect<OrganizationInvitation, never, Providers>);
+export declare const OrganizationInvitationProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationInvitation>, never, organizations.DaytonaOpContext>;
+//# sourceMappingURL=OrganizationInvitation.d.ts.map

package/lib/OrganizationInvitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationInvitation.d.ts","sources":["../src/OrganizationInvitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAExE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,2EAA2E;AAC3E,MAAM,MAAM,OAAO,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,+EAA+E;AAC/E,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5C,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,gDAAgD;IAChD,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IACvB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAC3C,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;iKAElC,CAAC;AAeF,eAAO,MAAM,8BAA8B,sHAgFxC,CAAC"}

package/lib/OrganizationInvitation.js

@@ -0,0 +1,109 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { declarable } from "./internal/Declared.js";
+import { currentOrganizationId, movesOrganization, organizationIdFor, } from "./internal/Organization.js";
+import { resolved } from "./internal/Ref.js";
+/**
+ * Invite someone to the Daytona organization by email, with a base role
+ * and custom {@link OrganizationRole}s. Destroying it cancels the
+ * invitation if it hasn't been accepted; an accepted invitation leaves the
+ * member in place.
+ *
+ * ### Inviting a Developer
+ * **Example:** A member with a custom role
+ * ```typescript
+ * export const Alice = Daytona.OrganizationInvitation("Alice", {
+ *   email: "alice@example.com",
+ *   roles: [Developer],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export const OrganizationInvitation = declarable()(Resource("Daytona.OrganizationInvitation"));
+const resolveRoles = (roles) => Effect.succeed((roles ?? []).map((r) => resolved(r).roleId));
+const toAttributes = (i) => ({
+    invitationId: i.id,
+    organizationId: i.organizationId,
+    email: i.email,
+    status: i.status,
+    expiresAt: i.expiresAt,
+});
+export const OrganizationInvitationProvider = () => Provider.effect(OrganizationInvitation, Effect.succeed({
+    stables: ["invitationId", "organizationId"],
+    list: Effect.fn(function* () {
+        const organizationId = yield* currentOrganizationId;
+        return (yield* organizations.listOrganizationInvitations({ organizationId })).map(toAttributes);
+    }),
+    diff: Effect.fn(function* ({ news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        if (yield* movesOrganization(news.organization, output))
+            return { action: "replace" };
+        if (news.email !== output.email)
+            return { action: "replace" };
+    }),
+    read: Effect.fn(function* ({ output }) {
+        if (output === undefined)
+            return undefined;
+        const all = yield* organizations.listOrganizationInvitations({
+            organizationId: output.organizationId,
+        });
+        const found = all.find((i) => i.id === output.invitationId);
+        return found ? toAttributes(found) : undefined;
+    }),
+    reconcile: Effect.fn(function* ({ news, output }) {
+        const organizationId = yield* organizationIdFor(news.organization);
+        const assignedRoleIds = yield* resolveRoles(news.roles);
+        const role = news.role ?? "member";
+        // Observe the pending invitation for this email.
+        const all = yield* organizations.listOrganizationInvitations({ organizationId });
+        const current = all.find((i) => i.id === output?.invitationId) ??
+            all.find((i) => i.email === news.email && i.status === "pending");
+        // Ensure
+        if (current === undefined || current.status !== "pending") {
+            if (current?.status === "accepted")
+                return toAttributes(current);
+            return toAttributes(yield* organizations.createOrganizationInvitation({
+                organizationId,
+                email: news.email,
+                role,
+                assignedRoleIds,
+                expiresAt: news.expiresAt,
+            }));
+        }
+        // Sync
+        const observedRoles = current.assignedRoles.map((r) => r.id).sort();
+        if (current.role === role &&
+            deepEqual(observedRoles, [...assignedRoleIds].sort()) &&
+            (news.expiresAt === undefined || news.expiresAt === current.expiresAt)) {
+            return toAttributes(current);
+        }
+        return toAttributes(yield* organizations.updateOrganizationInvitation({
+            organizationId,
+            invitationId: current.id,
+            role,
+            assignedRoleIds,
+            expiresAt: news.expiresAt,
+        }));
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        const all = yield* organizations.listOrganizationInvitations({
+            organizationId: output.organizationId,
+        });
+        const found = all.find((i) => i.id === output.invitationId);
+        if (found?.status !== "pending")
+            return;
+        yield* organizations
+            .cancelOrganizationInvitation({
+            organizationId: output.organizationId,
+            invitationId: output.invitationId,
+        })
+            .pipe(Effect.catchTag("OrganizationInvitationNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=OrganizationInvitation.js.map

package/lib/OrganizationInvitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationInvitation.js","sources":["../src/OrganizationInvitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAY,MAAM,mBAAmB,CAAC;AA8CvD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,EAA0B,CACxE,QAAQ,CAAyB,gCAAgC,CAAC,CACnE,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAA2C,EAAE,EAAE,CACnE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,YAAY,GAAG,CACnB,CAAuC,EACL,EAAE,CAAC,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,EAAE;IAClB,cAAc,EAAE,CAAC,CAAC,cAAc;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,SAAS,EAAE,CAAC,CAAC,SAAS;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,EAAE,CACjD,QAAQ,CAAC,MAAM,CACb,sBAAsB,EACtB,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,CAC/E,YAAY,CACb,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;IACzE,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,2BAA2B,CAAC;YAC3D,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;QACnC,iDAAiD;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACjF,MAAM,OAAO,GACX,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,YAAY,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACpE,SAAS;QACT,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU;gBAAE,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;YACjE,OAAO,YAAY,CACjB,KAAK,CAAC,CAAC,aAAa,CAAC,4BAA4B,CAAC;gBAChD,cAAc;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI;gBACJ,eAAe;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO;QACP,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,IACE,OAAO,CAAC,IAAI,KAAK,IAAI;YACrB,SAAS,CAAC,aAAa,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,EACtE,CAAC;YACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,YAAY,CACjB,KAAK,CAAC,CAAC,aAAa,CAAC,4BAA4B,CAAC;YAChD,cAAc;YACd,YAAY,EAAE,OAAO,CAAC,EAAE;YACxB,IAAI;YACJ,eAAe;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,2BAA2B,CAAC;YAC3D,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS;YAAE,OAAO;QACxC,KAAK,CAAC,CAAC,aAAa;aACjB,4BAA4B,CAAC;YAC5B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}

package/lib/OrganizationMember.d.ts

@@ -0,0 +1,86 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { type OrganizationRef } from "./internal/Organization.ts";
+import { type Ref } from "./internal/Ref.ts";
+import type { MemberRole, RoleRef } from "./OrganizationInvitation.ts";
+import type { Providers } from "./Providers.ts";
+export interface OrganizationMemberProps {
+    /**
+     * Organization to act on, e.g. a `Daytona.Organization`. Defaults to the
+     * credentials' organization. Changing it replaces the resource.
+     */
+    organization?: Ref<OrganizationRef>;
+    /** The member, by user ID or email. Changing it replaces the resource. */
+    user: string;
+    /** Base role. */
+    role: MemberRole;
+    /** Custom roles. Updated in place. */
+    roles?: Ref<RoleRef>[];
+    /**
+     * Remove the member from the organization on destroy. By default destroy
+     * only puts back the access the member had before alchemy changed it.
+     * @default false
+     */
+    removeOnDestroy?: boolean;
+}
+export interface OrganizationMemberAttributes {
+    /** Organization ID. */
+    organizationId: string;
+    /** User ID. */
+    userId: string;
+    /** Email. */
+    email: string;
+    /** Base role. */
+    role: string;
+    /** Assigned custom role IDs. */
+    roleIds: string[];
+    /** Access before alchemy first changed it; restored on destroy. */
+    original: {
+        role: string;
+        roleIds: string[];
+    };
+    /** Whether destroy removes the member. */
+    removeOnDestroy: boolean;
+}
+export type OrganizationMember = Resource<"Daytona.OrganizationMember", OrganizationMemberProps, OrganizationMemberAttributes, never, Providers>;
+declare const MemberNotInOrganization_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Daytona.MemberNotInOrganization";
+} & Readonly<A>;
+/** No member of the organization has that user ID or email. */
+export declare class MemberNotInOrganization extends MemberNotInOrganization_base<{
+    readonly user: string;
+}> {
+    get message(): string;
+}
+/**
+ * The access of an existing member of the Daytona organization: their
+ * base role and custom {@link OrganizationRole}s. Use it to manage who can
+ * do what as code. To add someone, use {@link OrganizationInvitation}.
+ *
+ * ### Granting a Role
+ * **Example:** Make a member a developer
+ * ```typescript
+ * export const Bob = Daytona.OrganizationMember("Bob", {
+ *   user: "bob@example.com",
+ *   role: "member",
+ *   roles: [Developer],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const OrganizationMember: import("alchemy/Resource").ResourceConstructor<OrganizationMember, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<OrganizationMember, never>, never, never> & {
+    Self: import("alchemy/Self").Self<OrganizationMember>;
+    Provider: Provider.Provider<OrganizationMember>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<OrganizationMember, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<OrganizationMemberProps>) => Effect.Effect<OrganizationMember, never, Providers>);
+export declare const OrganizationMemberProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationMember>, never, organizations.DaytonaOpContext>;
+export {};
+//# sourceMappingURL=OrganizationMember.d.ts.map

package/lib/OrganizationMember.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationMember.d.ts","sources":["../src/OrganizationMember.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAExE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,sCAAsC;IACtC,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mEAAmE;IACnE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9C,0CAA0C;IAC1C,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CACvC,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,EACL,SAAS,CACV,CAAC;;;;AAEF,+DAA+D;AAC/D,qBAAa,uBAAwB,SAAQ,6BAAoD;IAC/F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;IACA,IAAa,OAAO,WAEnB;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;yJAE9B,CAAC;AAqBF,eAAO,MAAM,0BAA0B,kHA8DpC,CAAC"}

package/lib/OrganizationMember.js

@@ -0,0 +1,109 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { declarable } from "./internal/Declared.js";
+import { movesOrganization, organizationIdFor, } from "./internal/Organization.js";
+import { resolved } from "./internal/Ref.js";
+/** No member of the organization has that user ID or email. */
+export class MemberNotInOrganization extends Data.TaggedError("Daytona.MemberNotInOrganization") {
+    get message() {
+        return `${this.user} is not a member of the Daytona organization; invite them with Daytona.OrganizationInvitation`;
+    }
+}
+/**
+ * The access of an existing member of the Daytona organization: their
+ * base role and custom {@link OrganizationRole}s. Use it to manage who can
+ * do what as code. To add someone, use {@link OrganizationInvitation}.
+ *
+ * ### Granting a Role
+ * **Example:** Make a member a developer
+ * ```typescript
+ * export const Bob = Daytona.OrganizationMember("Bob", {
+ *   user: "bob@example.com",
+ *   role: "member",
+ *   roles: [Developer],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export const OrganizationMember = declarable()(Resource("Daytona.OrganizationMember"));
+const findMember = Effect.fn(function* (organizationId, user) {
+    const members = yield* organizations.listOrganizationMembers({ organizationId });
+    return members.find((m) => m.userId === user || m.email === user);
+});
+const toAttributes = (m, original, removeOnDestroy) => ({
+    organizationId: m.organizationId,
+    userId: m.userId,
+    email: m.email,
+    role: m.role,
+    roleIds: m.assignedRoles.map((r) => r.id).sort(),
+    original,
+    removeOnDestroy,
+});
+export const OrganizationMemberProvider = () => Provider.effect(OrganizationMember, Effect.succeed({
+    stables: ["organizationId", "userId", "original"],
+    nuke: { skip: true },
+    list: () => Effect.succeed([]),
+    diff: Effect.fn(function* ({ news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        if (yield* movesOrganization(news.organization, output))
+            return { action: "replace" };
+        if (news.user !== output.userId && news.user !== output.email)
+            return { action: "replace" };
+    }),
+    read: Effect.fn(function* ({ output }) {
+        if (output === undefined)
+            return undefined;
+        const found = yield* findMember(output.organizationId, output.userId);
+        return found ? toAttributes(found, output.original, output.removeOnDestroy) : undefined;
+    }),
+    reconcile: Effect.fn(function* ({ news, output }) {
+        const organizationId = yield* organizationIdFor(news.organization);
+        const member = yield* findMember(organizationId, output?.userId ?? news.user);
+        if (member === undefined)
+            return yield* new MemberNotInOrganization({ user: news.user });
+        const original = output?.original ?? {
+            role: member.role,
+            roleIds: member.assignedRoles.map((r) => r.id).sort(),
+        };
+        const roleIds = (news.roles ?? []).map((r) => resolved(r).roleId).sort();
+        if (member.role !== news.role ||
+            !deepEqual(member.assignedRoles.map((r) => r.id).sort(), roleIds)) {
+            yield* organizations.updateAccessForOrganizationMember({
+                organizationId,
+                userId: member.userId,
+                role: news.role,
+                assignedRoleIds: roleIds,
+            });
+        }
+        const updated = yield* findMember(organizationId, member.userId);
+        return toAttributes(updated ?? member, original, news.removeOnDestroy ?? false);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        if (output.removeOnDestroy) {
+            yield* organizations
+                .deleteOrganizationMember({
+                organizationId: output.organizationId,
+                userId: output.userId,
+            })
+                .pipe(Effect.catchTag("OrganizationMemberNotFound", () => Effect.void));
+            return;
+        }
+        const member = yield* findMember(output.organizationId, output.userId);
+        if (member === undefined)
+            return;
+        yield* organizations.updateAccessForOrganizationMember({
+            organizationId: output.organizationId,
+            userId: output.userId,
+            role: output.original.role,
+            assignedRoleIds: output.original.roleIds,
+        });
+    }),
+}));
+//# sourceMappingURL=OrganizationMember.js.map

package/lib/OrganizationMember.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationMember.js","sources":["../src/OrganizationMember.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAY,MAAM,mBAAmB,CAAC;AAiDvD,+DAA+D;AAC/D,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAAC,iCAAiC,CAE7F;IACA,IAAa,OAAO;QAClB,OAAO,GAAG,IAAI,CAAC,IAAI,+FAA+F,CAAC;IACrH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,EAAsB,CAChE,QAAQ,CAAqB,4BAA4B,CAAC,CAC3D,CAAC;AAEF,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,cAAsB,EAAE,IAAY;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CACnB,CAAiC,EACjC,QAAkD,EAClD,eAAwB,EACM,EAAE,CAAC,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,cAAc;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;IAChD,QAAQ;IACR,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,QAAQ,CAAC,MAAM,CACb,kBAAkB,EAClB,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,UAAU,CAAC;IACjD,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IACpB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK;YAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;IAC1C,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI;YACnC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;SACtD,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,IACE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YACzB,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,EACjE,CAAC;YACD,KAAK,CAAC,CAAC,aAAa,CAAC,iCAAiC,CAAC;gBACrD,cAAc;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,eAAe,EAAE,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjE,OAAO,YAAY,CAAC,OAAO,IAAI,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,aAAa;iBACjB,wBAAwB,CAAC;gBACxB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,KAAK,CAAC,CAAC,aAAa,CAAC,iCAAiC,CAAC;YACrD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAC1B,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;SACzC,CAAC,CAAC;IACL,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}

package/lib/OrganizationOtelConfig.d.ts

@@ -0,0 +1,59 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { type OrganizationRef } from "./internal/Organization.ts";
+import type { Ref } from "./internal/Ref.ts";
+import type { Providers } from "./Providers.ts";
+export interface OrganizationOtelConfigProps {
+    /**
+     * Organization to act on, e.g. a `Daytona.Organization`. Defaults to the
+     * credentials' organization. Changing it replaces the resource.
+     */
+    organization?: Ref<OrganizationRef>;
+    /** OTLP/HTTP endpoint sandboxes export telemetry to. */
+    endpoint: string;
+    /** Headers sent with every export, e.g. an API key. */
+    headers?: Record<string, string | Redacted.Redacted<string>>;
+}
+export interface OrganizationOtelConfigAttributes {
+    /** Organization ID. */
+    organizationId: string;
+    /** OTLP endpoint. */
+    endpoint: string;
+    /** Header names configured (values are not returned). */
+    headerNames: string[];
+}
+export type OrganizationOtelConfig = Resource<"Daytona.OrganizationOtelConfig", OrganizationOtelConfigProps, OrganizationOtelConfigAttributes, never, Providers>;
+/**
+ * Export the organization's sandbox telemetry (logs, traces, metrics) to
+ * your own OpenTelemetry backend. One per organization; destroying it
+ * stops the export.
+ *
+ * ### Exporting Telemetry
+ * **Example:** Send sandbox telemetry to Axiom
+ * ```typescript
+ * export const Telemetry = Daytona.OrganizationOtelConfig("Telemetry", {
+ *   endpoint: "https://api.axiom.co",
+ *   headers: {
+ *     Authorization: Config.Redacted("AXIOM_TOKEN"),
+ *     "X-Axiom-Dataset": "daytona",
+ *   },
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const OrganizationOtelConfig: import("alchemy/Resource").ResourceConstructor<OrganizationOtelConfig, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<OrganizationOtelConfig, never>, never, never> & {
+    Self: import("alchemy/Self").Self<OrganizationOtelConfig>;
+    Provider: Provider.Provider<OrganizationOtelConfig>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<OrganizationOtelConfig, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<OrganizationOtelConfigProps>) => Effect.Effect<OrganizationOtelConfig, never, Providers>);
+export declare const OrganizationOtelConfigProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationOtelConfig>, never, organizations.DaytonaOpContext>;
+//# sourceMappingURL=OrganizationOtelConfig.d.ts.map

package/lib/OrganizationOtelConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationOtelConfig.d.ts","sources":["../src/OrganizationOtelConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAExE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,gCAAgC;IAC/C,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAC3C,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;iKAElC,CAAC;AAuBF,eAAO,MAAM,8BAA8B,sHA+CxC,CAAC"}

package/lib/OrganizationOtelConfig.js

@@ -0,0 +1,87 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { declarable } from "./internal/Declared.js";
+import { currentOrganizationId, movesOrganization, organizationIdFor, } from "./internal/Organization.js";
+/**
+ * Export the organization's sandbox telemetry (logs, traces, metrics) to
+ * your own OpenTelemetry backend. One per organization; destroying it
+ * stops the export.
+ *
+ * ### Exporting Telemetry
+ * **Example:** Send sandbox telemetry to Axiom
+ * ```typescript
+ * export const Telemetry = Daytona.OrganizationOtelConfig("Telemetry", {
+ *   endpoint: "https://api.axiom.co",
+ *   headers: {
+ *     Authorization: Config.Redacted("AXIOM_TOKEN"),
+ *     "X-Axiom-Dataset": "daytona",
+ *   },
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export const OrganizationOtelConfig = declarable()(Resource("Daytona.OrganizationOtelConfig"));
+const plainHeaders = (headers) => headers === undefined
+    ? undefined
+    : Object.fromEntries(Object.entries(headers).map(([k, v]) => [
+        k,
+        Redacted.isRedacted(v) ? Redacted.value(v) : v,
+    ]));
+// Daytona stores the endpoint normalized (`https://host` -> `https://host/`).
+const sameEndpoint = (observed, desired) => observed !== undefined && URL.canParse(observed) && URL.canParse(desired)
+    ? new URL(observed).href === new URL(desired).href
+    : observed === desired;
+// getOrganizationOtelConfig is for Daytona's runners and proxy (users get
+// 401); the organization itself carries the config.
+const observeOtelConfig = (organizationId) => Effect.map(organizations.getOrganization({ organizationId }), (o) => o.otelConfig);
+export const OrganizationOtelConfigProvider = () => Provider.effect(OrganizationOtelConfig, Effect.succeed({
+    stables: ["organizationId"],
+    nuke: { singleton: true },
+    list: () => Effect.succeed([]),
+    diff: Effect.fn(function* ({ news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        if (yield* movesOrganization(news.organization, output))
+            return { action: "replace" };
+    }),
+    read: Effect.fn(function* ({ output }) {
+        const organizationId = output?.organizationId ?? (yield* currentOrganizationId);
+        const config = yield* observeOtelConfig(organizationId);
+        if (!config?.endpoint)
+            return undefined;
+        return {
+            organizationId,
+            endpoint: config.endpoint,
+            headerNames: Object.keys(config.headers ?? {}),
+        };
+    }),
+    reconcile: Effect.fn(function* ({ news, olds }) {
+        const organizationId = yield* organizationIdFor(news.organization);
+        // Observe — header values aren't returned, so they are written
+        // whenever they changed since the last deploy (or on first deploy).
+        const current = yield* observeOtelConfig(organizationId);
+        const headers = plainHeaders(news.headers);
+        if (!sameEndpoint(current?.endpoint, news.endpoint) ||
+            olds === undefined ||
+            !deepEqual(plainHeaders(olds.headers), headers)) {
+            yield* organizations.updateOrganizationOtelConfig({
+                organizationId,
+                endpoint: news.endpoint,
+                headers,
+            });
+        }
+        return { organizationId, endpoint: news.endpoint, headerNames: Object.keys(headers ?? {}) };
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* organizations
+            .deleteOrganizationOtelConfig({ organizationId: output.organizationId })
+            .pipe(Effect.catchTag("OrganizationNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=OrganizationOtelConfig.js.map

package/lib/OrganizationOtelConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationOtelConfig.js","sources":["../src/OrganizationOtelConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AAiCpC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,EAA0B,CACxE,QAAQ,CAAyB,gCAAgC,CAAC,CACnE,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAA+C,EAAE,EAAE,CACvE,OAAO,KAAK,SAAS;IACnB,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC;QACD,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/C,CAAC,CACH,CAAC;AAER,8EAA8E;AAC9E,MAAM,YAAY,GAAG,CAAC,QAA4B,EAAE,OAAe,EAAE,EAAE,CACrE,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;IACvE,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI;IAClD,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE3B,0EAA0E;AAC1E,oDAAoD;AACpD,MAAM,iBAAiB,GAAG,CAAC,cAAsB,EAAE,EAAE,CACnD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,EAAE,CACjD,QAAQ,CAAC,MAAM,CACb,sBAAsB,EACtB,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,gBAAgB,CAAC;IAC3B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;IACzB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;IAC1C,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,MAAM,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO;YACL,cAAc;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,+DAA+D;QAC/D,oEAAoE;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IACE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;YAC/C,IAAI,KAAK,SAAS;YAClB,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAC/C,CAAC;YACD,KAAK,CAAC,CAAC,aAAa,CAAC,4BAA4B,CAAC;gBAChD,cAAc;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,aAAa;aACjB,4BAA4B,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;aACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}

package/lib/OrganizationRole.d.ts

@@ -0,0 +1,66 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import type { Permission } from "./ApiKey.ts";
+import { type OrganizationRef } from "./internal/Organization.ts";
+import type { Ref } from "./internal/Ref.ts";
+import type { Providers } from "./Providers.ts";
+export interface OrganizationRoleProps {
+    /**
+     * Organization to act on, e.g. a `Daytona.Organization`. Defaults to the
+     * credentials' organization. Changing it replaces the resource.
+     */
+    organization?: Ref<OrganizationRef>;
+    /**
+     * Role name. If omitted, a unique name is generated from the stack,
+     * stage and logical ID. Renames update in place.
+     */
+    name?: string;
+    /** What the role is for. */
+    description?: string;
+    /** Permissions members with this role get. Updated in place. */
+    permissions: Permission[];
+}
+export interface OrganizationRoleAttributes {
+    /** Role ID; what invitations and member access take. */
+    roleId: string;
+    /** Organization the role belongs to. */
+    organizationId: string;
+    /** Role name. */
+    name: string;
+    /** Description. */
+    description: string;
+    /** Permissions the role grants. */
+    permissions: Permission[];
+}
+export type OrganizationRole = Resource<"Daytona.OrganizationRole", OrganizationRoleProps, OrganizationRoleAttributes, never, Providers>;
+/**
+ * A custom role in the Daytona organization: a named set of permissions to
+ * give members, through {@link OrganizationInvitation} or
+ * {@link OrganizationMember}.
+ * @see https://www.daytona.io/docs/en/organizations/
+ *
+ * ### Creating a Role
+ * **Example:** A role that can run sandboxes but not manage images
+ * ```typescript
+ * export const Developer = Daytona.OrganizationRole("Developer", {
+ *   description: "Run sandboxes",
+ *   permissions: ["write:sandboxes", "delete:sandboxes", "read:volumes"],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const OrganizationRole: import("alchemy/Resource").ResourceConstructor<OrganizationRole, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<OrganizationRole, never>, never, never> & {
+    Self: import("alchemy/Self").Self<OrganizationRole>;
+    Provider: Provider.Provider<OrganizationRole>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<OrganizationRole, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<OrganizationRoleProps>) => Effect.Effect<OrganizationRole, never, Providers>);
+export declare const OrganizationRoleProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationRole>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | organizations.DaytonaOpContext>;
+//# sourceMappingURL=OrganizationRole.d.ts.map

package/lib/OrganizationRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationRole.d.ts","sources":["../src/OrganizationRole.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAGxE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;qJAE5B,CAAC;AAkBF,eAAO,MAAM,wBAAwB,gLAwElC,CAAC"}