@alchemy.run/daytona 0.0.0 → 2.0.0-beta.86

package/lib/DaytonaBindings.js

@@ -0,0 +1,61 @@
+import { Credentials, DEFAULT_ANALYTICS_BASE_URL, DEFAULT_TOOLBOX_BASE_URL, } from "@distilled.cloud/daytona/Credentials";
+import * as Binding from "alchemy/Binding";
+import * as Output from "alchemy/Output";
+import { createInternalTags } from "alchemy/Tags";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { ApiKey } from "./ApiKey.js";
+import { toLabels } from "./internal/Labels.js";
+/**
+ * Resolve once, when a binding's layer is built: returns a function that
+ * mints (at deploy) and reads back (at runtime) an API key for the current
+ * host, named after the host and `purpose`, with `permissions`.
+ */
+export const makeAccess = Effect.gen(function* () {
+    const Key = yield* ApiKey;
+    return Effect.fn(function* (purpose, permissions) {
+        const host = yield* Binding.Host;
+        const key = yield* Key(`${host?.LogicalId ?? ""}${purpose}ApiKey`, { permissions });
+        const value = yield* key.value;
+        const apiBaseUrl = yield* key.apiBaseUrl;
+        const organizationId = yield* key.organizationId;
+        const authorize = (effect) => Effect.gen(function* () {
+            const config = {
+                apiKey: yield* value,
+                apiBaseUrl: yield* apiBaseUrl,
+                analyticsBaseUrl: DEFAULT_ANALYTICS_BASE_URL,
+                toolboxBaseUrl: DEFAULT_TOOLBOX_BASE_URL,
+                organizationId: yield* organizationId,
+            };
+            return yield* effect.pipe(Effect.provide(Layer.mergeAll(Layer.succeed(Credentials, Effect.succeed(config)), FetchHttpClient.layer)));
+        });
+        return {
+            authorize,
+            organizationId,
+        };
+    });
+});
+/**
+ * The labels a runtime binding puts on what it creates: the host's
+ * `alchemy::stack`, `alchemy::stage` and `alchemy::id`, as Daytona label
+ * keys (`alchemy.stack`, `alchemy.stage`, `alchemy.id`; Daytona doesn't
+ * accept `::` in a key). Computed at deploy from the host's identity and
+ * bound into the host, so the runtime reads them back rather than
+ * computing them.
+ */
+export const makeOwnerLabels = Effect.gen(function* () {
+    const host = yield* Binding.Host;
+    const id = host?.LogicalId ?? "";
+    const owner = Output.fromEffect(createInternalTags(id));
+    const tags = yield* owner.bind(`${id}DaytonaOwner`);
+    return Effect.map(tags, (owner) => toLabels(owner));
+});
+/** The owner labels as a description, for objects that only have one. */
+export const ownerDescription = (labels) => `${labels["alchemy.stack"]}/${labels["alchemy.stage"]}/${labels["alchemy.id"]}`;
+/** User labels with the owner labels on top: a user label never overwrites `alchemy.*`. */
+export const withOwnerLabels = (user, owner) => ({
+    ...Object.fromEntries(Object.entries(user ?? {}).filter(([k]) => !k.startsWith("alchemy."))),
+    ...owner,
+});
+//# sourceMappingURL=DaytonaBindings.js.map

package/lib/DaytonaBindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DaytonaBindings.js","sources":["../src/DaytonaBindings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAE/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,MAAM,EAAmB,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AA0BhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC1B,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAe,EAAE,WAAyB;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,GAAG,OAAO,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;QACjD,MAAM,SAAS,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK;gBACpB,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,0BAA0B;gBAC5C,cAAc,EAAE,wBAAwB;gBACxC,cAAc,EAAE,KAAK,CAAC,CAAC,cAAc;aACtC,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,QAAQ,CACZ,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAClD,eAAe,CAAC,KAAK,CACtB,CACF,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACL,OAAO;YACL,SAAS;YACT,cAAc;SACS,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAErD,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,GAAG,CACf,IAAgF,EAChF,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC3B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAA8B,EAAE,EAAE,CACjE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;AAElF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAwC,EACxC,KAA6B,EAC7B,EAAE,CAAC,CAAC;IACJ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5F,GAAG,KAAK;CACT,CAAC,CAAC"}

package/lib/IdentityProvider.d.ts

@@ -0,0 +1,80 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import type * as Redacted from "effect/Redacted";
+import { type OrganizationRef } from "./internal/Organization.ts";
+import { type Ref } from "./internal/Ref.ts";
+import type { RoleRef } from "./OrganizationInvitation.ts";
+import type { Providers } from "./Providers.ts";
+export interface IdentityProviderProps {
+    /**
+     * Organization to act on, e.g. a `Daytona.Organization`. Defaults to the
+     * credentials' organization. Changing it replaces the resource.
+     */
+    organization?: Ref<OrganizationRef>;
+    /** Display name. If omitted, generated from the stack, stage and logical ID. */
+    name?: string;
+    /** OIDC issuer URL. */
+    issuerUrl: string;
+    /** OIDC client ID. */
+    clientId: string;
+    /** OIDC client secret. Updated in place. */
+    clientSecret: string | Redacted.Redacted<string>;
+    /** Scopes to request. @default "openid email profile" */
+    scope?: string;
+    /** Email domains that sign in through this provider. */
+    emailDomains: string[];
+    /** Accept any email domain. @default false */
+    allowAnyDomain?: boolean;
+    /** Trust the provider's `email_verified` claim. @default false */
+    trustEmailVerified?: boolean;
+    /** Custom roles new members get. */
+    defaultRoles?: Ref<RoleRef>[];
+    /** Whether sign-in through it is enabled. @default true */
+    enabled?: boolean;
+}
+export interface IdentityProviderAttributes {
+    /** Identity provider ID. */
+    identityProviderId: string;
+    /** Organization ID. */
+    organizationId: string;
+    /** Display name. */
+    name: string;
+    /** Email domains. */
+    emailDomains: string[];
+    /** Whether it is enabled. */
+    enabled: boolean;
+}
+export type IdentityProvider = Resource<"Daytona.IdentityProvider", IdentityProviderProps, IdentityProviderAttributes, never, Providers>;
+/**
+ * An OIDC identity provider for single sign-on into the Daytona
+ * organization. Needs an organization with SSO enabled (an enterprise
+ * plan); other organizations reject it.
+ *
+ * ### Single Sign-On
+ * **Example:** Sign in with your company's OIDC provider
+ * ```typescript
+ * export const Sso = Daytona.IdentityProvider("Sso", {
+ *   issuerUrl: "https://login.example.com",
+ *   clientId: "daytona",
+ *   clientSecret: Config.Redacted("OIDC_CLIENT_SECRET"),
+ *   emailDomains: ["example.com"],
+ *   defaultRoles: [Developer],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const IdentityProvider: import("alchemy/Resource").ResourceConstructor<IdentityProvider, Providers> & Effect.Effect<import("alchemy/Resource").ResourceConstructor<IdentityProvider, never>, never, never> & {
+    Self: import("alchemy/Self").Self<IdentityProvider>;
+    Provider: Provider.Provider<IdentityProvider>;
+    Aliases: readonly string[] | undefined;
+    ref(id: string, options?: {
+        stage?: string;
+        stack?: string;
+    }): Effect.Effect<IdentityProvider, never, never>;
+} & ((id: string, props: import("./internal/Declared.ts").DeclaredProps<IdentityProviderProps>) => Effect.Effect<IdentityProvider, never, Providers>);
+export declare const IdentityProviderProvider: () => import("effect/Layer").Layer<Provider.Provider<IdentityProvider>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | organizations.DaytonaOpContext>;
+//# sourceMappingURL=IdentityProvider.d.ts.map

package/lib/IdentityProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProvider.d.ts","sources":["../src/IdentityProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAGxE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oCAAoC;IACpC,YAAY,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,4BAA4B;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,6BAA6B;IAC7B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;qJAE5B,CAAC;AAgBF,eAAO,MAAM,wBAAwB,gLA0ElC,CAAC"}

package/lib/IdentityProvider.js

@@ -0,0 +1,111 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { declarable } from "./internal/Declared.js";
+import { isOwnedName, resolveName } from "./internal/Names.js";
+import { currentOrganizationId, movesOrganization, organizationIdFor, } from "./internal/Organization.js";
+import { resolved } from "./internal/Ref.js";
+/**
+ * An OIDC identity provider for single sign-on into the Daytona
+ * organization. Needs an organization with SSO enabled (an enterprise
+ * plan); other organizations reject it.
+ *
+ * ### Single Sign-On
+ * **Example:** Sign in with your company's OIDC provider
+ * ```typescript
+ * export const Sso = Daytona.IdentityProvider("Sso", {
+ *   issuerUrl: "https://login.example.com",
+ *   clientId: "daytona",
+ *   clientSecret: Config.Redacted("OIDC_CLIENT_SECRET"),
+ *   emailDomains: ["example.com"],
+ *   defaultRoles: [Developer],
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export const IdentityProvider = declarable()(Resource("Daytona.IdentityProvider"));
+const toAttributes = (organizationId, p) => ({
+    identityProviderId: p.id,
+    organizationId,
+    name: p.name,
+    emailDomains: p.emailDomains,
+    enabled: p.enabled,
+});
+const roleIds = (roles) => Effect.succeed((roles ?? []).map((r) => resolved(r).roleId));
+export const IdentityProviderProvider = () => Provider.effect(IdentityProvider, Effect.succeed({
+    stables: ["identityProviderId", "organizationId"],
+    list: Effect.fn(function* () {
+        const organizationId = yield* currentOrganizationId;
+        const all = yield* organizations.listOrganizationIdentityProviders({ organizationId });
+        return all.map((p) => toAttributes(organizationId, p));
+    }),
+    diff: Effect.fn(function* ({ news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        if (yield* movesOrganization(news.organization, output))
+            return { action: "replace" };
+    }),
+    read: Effect.fn(function* ({ id, olds, output }) {
+        const organizationId = output?.organizationId ?? (yield* currentOrganizationId);
+        const name = yield* resolveName(id, olds?.name, output?.name);
+        const all = yield* organizations.listOrganizationIdentityProviders({ organizationId });
+        const found = all.find((p) => p.id === output?.identityProviderId) ?? all.find((p) => p.name === name);
+        if (found === undefined)
+            return undefined;
+        const attrs = toAttributes(organizationId, found);
+        return (yield* isOwnedName(id, found.name, output !== undefined)) ? attrs : Unowned(attrs);
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const organizationId = yield* organizationIdFor(news.organization);
+        const name = yield* resolveName(id, news.name, output?.name);
+        const desired = {
+            name,
+            emailDomains: news.emailDomains,
+            allowAnyDomain: news.allowAnyDomain ?? false,
+            trustEmailVerified: news.trustEmailVerified ?? false,
+            defaultAssignedRoleIds: yield* roleIds(news.defaultRoles),
+            enabled: news.enabled ?? true,
+        };
+        const oidcConfig = {
+            issuerUrl: news.issuerUrl,
+            clientId: news.clientId,
+            clientSecret: news.clientSecret,
+            scope: news.scope,
+        };
+        // Observe
+        const all = yield* organizations.listOrganizationIdentityProviders({ organizationId });
+        const current = all.find((p) => p.id === output?.identityProviderId) ?? all.find((p) => p.name === name);
+        // Ensure
+        if (current === undefined) {
+            const created = yield* organizations.createOrganizationIdentityProvider({
+                organizationId,
+                oidcConfig,
+                ...desired,
+            });
+            return toAttributes(organizationId, created);
+        }
+        // Sync — the client secret can't be read back, so the full
+        // configuration is written on every deploy.
+        const updated = yield* organizations.updateOrganizationIdentityProvider({
+            organizationId,
+            id: current.id,
+            oidcConfig,
+            ...desired,
+        });
+        return toAttributes(organizationId, updated);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* organizations
+            .deleteOrganizationIdentityProvider({
+            organizationId: output.organizationId,
+            id: output.identityProviderId,
+        })
+            .pipe(Effect.catchTag("IdentityProviderNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=IdentityProvider.js.map

package/lib/IdentityProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProvider.js","sources":["../src/IdentityProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAY,MAAM,mBAAmB,CAAC;AAqDvD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,EAAoB,CAC5D,QAAQ,CAAmB,0BAA0B,CAAC,CACvD,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,cAAsB,EACtB,CAAyE,EAC7C,EAAE,CAAC,CAAC;IAChC,kBAAkB,EAAE,CAAC,CAAC,EAAE;IACxB,cAAc;IACd,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,YAAY,EAAE,CAAC,CAAC,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;CACnB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,KAA4C,EAAE,EAAE,CAC/D,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,QAAQ,CAAC,MAAM,CACb,gBAAgB,EAChB,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACvF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;IAC1C,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,MAAM,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC3F,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,KAAK;YACpD,sBAAsB,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YACzD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC;QACF,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QACF,UAAU;QACV,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GACX,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC3F,SAAS;QACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,kCAAkC,CAAC;gBACtE,cAAc;gBACd,UAAU;gBACV,GAAG,OAAO;aACX,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,2DAA2D;QAC3D,4CAA4C;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,kCAAkC,CAAC;YACtE,cAAc;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,UAAU;YACV,GAAG,OAAO;SACX,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,aAAa;aACjB,kCAAkC,CAAC;YAClC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,EAAE,EAAE,MAAM,CAAC,kBAAkB;SAC9B,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}

package/lib/MountVolume.d.ts

@@ -0,0 +1,86 @@
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import type { Volume } from "./Volume.ts";
+/**
+ * A volume a mount names: a `Daytona.Volume` (or the reference
+ * `MountVolume` returns), or a runtime handle from `CreateVolume`.
+ */
+export interface MountableVolume {
+    readonly volumeId: string | Effect.Effect<string, never, RuntimeContext>;
+}
+/** A volume mounted at a path: an entry of `mounts`. */
+export interface VolumeMount {
+    /** The volume. */
+    readonly volume: MountableVolume;
+    /** Absolute path in the sandbox. */
+    readonly path: string;
+    /** Mount only this directory of the volume. */
+    readonly subpath?: string;
+}
+export interface MountVolumeOptions {
+    /** Absolute path in the sandbox. */
+    readonly path: string;
+    /** Mount only this directory of the volume. */
+    readonly subpath?: string;
+}
+/** The volume ID behind a mount entry. */
+export declare const volumeIdOf: (volume: MountableVolume) => Effect.Effect<string, never, RuntimeContext>;
+/**
+ * Mount a {@link Volume} at a path.
+ *
+ * Inside a sandbox's program, the volume is mounted into that sandbox:
+ * it joins the sandbox's `mounts`. A mount change replaces the sandbox,
+ * since Daytona only mounts volumes when it creates one. Inside any other
+ * host (a Worker, a Lambda), the binding resolves the volume and returns a
+ * mount reference to pass to `CreateSandbox`'s `create({ mounts })`.
+ *
+ * The reference has the same fields as a `mounts` entry: `volume`,
+ * `path` and `subpath`. Daytona has no per-volume access control, so the
+ * binding mints no credentials.
+ *
+ * ### Mounting a Volume in a Program
+ * **Example:** Serve the files of a volume
+ * ```typescript
+ * export default class Agent extends Daytona.Sandbox<Agent>()(
+ *   "Agent",
+ *   { main: import.meta.url, public: true },
+ *   Effect.gen(function* () {
+ *     const data = yield* Daytona.MountVolume(Data, { path: "/data" });
+ *     const fs = yield* FileSystem.FileSystem;
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         return yield* HttpServerResponse.json(yield* fs.readDirectory(data.path));
+ *       }),
+ *     };
+ *   }).pipe(Effect.provide(Daytona.MountVolumeLive)),
+ * ) {}
+ * ```
+ *
+ * ### Mounting a Volume in Sandboxes You Create
+ * **Example:** A shared cache plus each user's home
+ * ```typescript
+ * const cache = yield* Daytona.MountVolume(Cache, { path: "/cache" });
+ * const sandboxes = yield* Daytona.CreateSandbox(Base);
+ * const volumes = yield* Daytona.CreateVolume({ prefix: "user-" });
+ * return {
+ *   fetch: Effect.gen(function* () {
+ *     const home = yield* volumes.getOrCreate({ name: `user-${user}` });
+ *     const sandbox = yield* sandboxes.create({
+ *       mounts: [cache, { volume: home, path: "/home/daytona/work" }],
+ *     });
+ *     return yield* HttpServerResponse.json(yield* sandbox.exec("ls /cache"));
+ *   }),
+ * };
+ * ```
+ *
+ * @binding
+ * @product Volume
+ */
+export interface MountVolume extends Binding.Service<MountVolume, "Daytona.MountVolume", (volume: Volume, options: MountVolumeOptions) => Effect.Effect<VolumeMount>> {
+}
+export declare const MountVolume: MountVolume;
+/** {@link MountVolume}; works on any host. */
+export declare const MountVolumeLive: Layer.Layer<MountVolume, never, never>;
+//# sourceMappingURL=MountVolume.d.ts.map

package/lib/MountVolume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MountVolume.d.ts","sources":["../src/MountVolume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;CAC1E;AAED,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,kBAAkB;IAClB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,0CAA0C;AAC1C,eAAO,MAAM,UAAU,WAAY,eAAe,iDACuC,CAAC;AAO1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO,CAAC,OAAO,CAClD,WAAW,EACX,qBAAqB,EACrB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAC5E;CAAG;AAEJ,eAAO,MAAM,WAAW,aAAsD,CAAC;AAE/E,8CAA8C;AAC9C,eAAO,MAAM,eAAe,wCAoB3B,CAAC"}

package/lib/MountVolume.js

@@ -0,0 +1,27 @@
+import * as Binding from "alchemy/Binding";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+/** The volume ID behind a mount entry. */
+export const volumeIdOf = (volume) => typeof volume.volumeId === "string" ? Effect.succeed(volume.volumeId) : volume.volumeId;
+const isSandboxHost = (value) => typeof value === "object" &&
+    value !== null &&
+    value.Type === "Daytona.Sandbox";
+export const MountVolume = Binding.Service("Daytona.MountVolume");
+/** {@link MountVolume}; works on any host. */
+export const MountVolumeLive = Layer.effect(MountVolume, Effect.succeed(Effect.fn(function* (volume, options) {
+    const volumeId = yield* volume.volumeId;
+    if (!globalThis.__ALCHEMY_RUNTIME__) {
+        const host = yield* Binding.Host;
+        if (isSandboxHost(host)) {
+            yield* host.bind `Daytona.MountVolume(${volume})`({
+                mounts: [{ volumeId: volume.volumeId, path: options.path, subpath: options.subpath }],
+            });
+        }
+    }
+    return {
+        volume: { volumeId },
+        path: options.path,
+        subpath: options.subpath,
+    };
+})));
+//# sourceMappingURL=MountVolume.js.map

package/lib/MountVolume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MountVolume.js","sources":["../src/MountVolume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAE3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AA6BtC,0CAA0C;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAuB,EAAE,EAAE,CACpD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;AAE1F,MAAM,aAAa,GAAG,CAAC,KAAc,EAAoB,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACb,KAA2B,CAAC,IAAI,KAAK,iBAAiB,CAAC;AA2D1D,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAc,qBAAqB,CAAC,CAAC;AAE/E,8CAA8C;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CACzC,WAAW,EACX,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAc,EAAE,OAA2B;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,uBAAuB,MAAM,GAAG,CAAC;gBAC/C,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE,QAAQ,EAAE;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACH,CAAC;AAC1B,CAAC,CAAC,CACH,CACF,CAAC"}

package/lib/OAuthClient.d.ts

@@ -0,0 +1,14 @@
+export { OAuthCredentials, OAuthError, type DeviceAuthorization } from "alchemy/Auth/OAuthFlow";
+/**
+ * The Daytona CLI's public WorkOS client (no secret), published by Daytona's
+ * `GET /api/config` under `oidc.cli`. `daytona login` uses the same device
+ * flow. A user session can call what an organization API key can't: the
+ * organization, role, invitation and API key endpoints.
+ */
+export declare const OAUTH_CLIENT_ID = "client_01M392QZWMYD01SA05BPEYQ84V";
+export declare const OAUTH_ENDPOINTS: {
+    deviceAuthorization: string;
+    token: string;
+};
+export declare const { deviceAuthorize, deviceToken, refresh, usesCurrentClient }: import("alchemy/Auth/OAuthFlow").OAuthClient;
+//# sourceMappingURL=OAuthClient.d.ts.map

package/lib/OAuthClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthClient.d.ts","sources":["../src/OAuthClient.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEhG;;;;;GAKG;AACH,eAAO,MAAM,eAAe,sCAAsC,CAAC;AAEnE,eAAO,MAAM,eAAe;IAC1B,mBAAmB;IACnB,KAAK;CACN,CAAC;AAWF,eAAO,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,8CAAS,CAAC"}

package/lib/OAuthClient.js

@@ -0,0 +1,23 @@
+import { makeOAuthClient } from "alchemy/Auth/OAuthFlow";
+export { OAuthCredentials, OAuthError } from "alchemy/Auth/OAuthFlow";
+/**
+ * The Daytona CLI's public WorkOS client (no secret), published by Daytona's
+ * `GET /api/config` under `oidc.cli`. `daytona login` uses the same device
+ * flow. A user session can call what an organization API key can't: the
+ * organization, role, invitation and API key endpoints.
+ */
+export const OAUTH_CLIENT_ID = "client_01M392QZWMYD01SA05BPEYQ84V";
+export const OAUTH_ENDPOINTS = {
+    deviceAuthorization: "https://api.auth.daytona.io/user_management/authorize/device",
+    token: "https://api.auth.daytona.io/user_management/authenticate",
+};
+const client = makeOAuthClient({
+    clientId: OAUTH_CLIENT_ID,
+    endpoints: OAUTH_ENDPOINTS,
+    auth: { kind: "pkce" },
+    // WorkOS answers on api.auth.daytona.io but serves the device page on
+    // auth.daytona.io.
+    verificationHosts: ["auth.daytona.io"],
+});
+export const { deviceAuthorize, deviceToken, refresh, usesCurrentClient } = client;
+//# sourceMappingURL=OAuthClient.js.map

package/lib/OAuthClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthClient.js","sources":["../src/OAuthClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAA4B,MAAM,wBAAwB,CAAC;AAEhG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,mCAAmC,CAAC;AAEnE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mBAAmB,EAAE,8DAA8D;IACnF,KAAK,EAAE,0DAA0D;CAClE,CAAC;AAEF,MAAM,MAAM,GAAG,eAAe,CAAC;IAC7B,QAAQ,EAAE,eAAe;IACzB,SAAS,EAAE,eAAe;IAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;IACtB,sEAAsE;IACtE,mBAAmB;IACnB,iBAAiB,EAAE,CAAC,iBAAiB,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC"}

package/lib/Organization.d.ts

@@ -0,0 +1,40 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import type { Providers } from "./Providers.ts";
+export interface OrganizationProps {
+    /** Organization name. If omitted, generated from the stack, stage and logical ID. */
+    name?: string;
+    /**
+     * Region new sandboxes go to by default. Daytona sets it once, so changing
+     * it replaces the organization.
+     */
+    defaultRegionId: string;
+}
+export interface OrganizationAttributes {
+    /** Organization ID. */
+    organizationId: string;
+    /** Name. */
+    name: string;
+    /** Default region. */
+    defaultRegionId: string | undefined;
+}
+export type Organization = Resource<"Daytona.Organization", OrganizationProps, OrganizationAttributes, never, Providers>;
+/**
+ * A new Daytona organization, owned by the signed-in user. Creating
+ * organizations needs a user login, not an organization API key: an API
+ * key already belongs to exactly one organization. To configure the
+ * organization your key belongs to, use {@link OrganizationSettings}.
+ *
+ * ### Creating an Organization
+ * **Example:** A separate organization for a team
+ * ```typescript
+ * export const Team = Daytona.Organization("Team", { defaultRegionId: "us" });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const Organization: import("alchemy/Resource").ResourceClass<Organization>;
+export declare const OrganizationProvider: () => import("effect/Layer").Layer<Provider.Provider<Organization>, never, import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | organizations.DaytonaOpContext>;
+//# sourceMappingURL=Organization.d.ts.map

package/lib/Organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Organization.d.ts","sources":["../src/Organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AAExE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,MAAM,YAAY,GAAG,QAAQ,CACjC,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,YAAY,wDAAiD,CAAC;AAQ3E,eAAO,MAAM,oBAAoB,4KA8D9B,CAAC"}

package/lib/Organization.js

@@ -0,0 +1,80 @@
+import * as organizations from "@distilled.cloud/daytona/organizations";
+import { isResolved } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { resolveName } from "./internal/Names.js";
+/**
+ * A new Daytona organization, owned by the signed-in user. Creating
+ * organizations needs a user login, not an organization API key: an API
+ * key already belongs to exactly one organization. To configure the
+ * organization your key belongs to, use {@link OrganizationSettings}.
+ *
+ * ### Creating an Organization
+ * **Example:** A separate organization for a team
+ * ```typescript
+ * export const Team = Daytona.Organization("Team", { defaultRegionId: "us" });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export const Organization = Resource("Daytona.Organization");
+const toAttributes = (o) => ({
+    organizationId: o.id,
+    name: o.name,
+    defaultRegionId: o.defaultRegionId,
+});
+export const OrganizationProvider = () => Provider.effect(Organization, Effect.succeed({
+    stables: ["organizationId"],
+    nuke: { skip: true },
+    list: () => Effect.succeed([]),
+    diff: Effect.fn(function* ({ id, news, output }) {
+        if (!isResolved(news) || output === undefined)
+            return undefined;
+        const name = yield* resolveName(id, news.name, news.name === undefined ? output.name : undefined);
+        // Reconcile finds an organization by name, so the old one must go
+        // first or the replacement would adopt it.
+        if (name !== output.name ||
+            (output.defaultRegionId !== undefined && news.defaultRegionId !== output.defaultRegionId)) {
+            return { action: "replace", deleteFirst: true };
+        }
+    }),
+    read: Effect.fn(function* ({ output }) {
+        if (output === undefined)
+            return undefined;
+        return yield* organizations.getOrganization({ organizationId: output.organizationId }).pipe(Effect.map(toAttributes), Effect.catchTag("OrganizationNotFound", () => Effect.undefined));
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const name = yield* resolveName(id, news.name, output?.name);
+        // Observe
+        let current = output
+            ? yield* organizations
+                .getOrganization({ organizationId: output.organizationId })
+                .pipe(Effect.catchTag("OrganizationNotFound", () => Effect.undefined))
+            : (yield* organizations.listOrganizations({})).find((o) => o.name === name);
+        // Ensure
+        if (current === undefined) {
+            current = yield* organizations.createOrganization({
+                name,
+                defaultRegionId: news.defaultRegionId,
+            });
+        }
+        // Sync: Daytona only accepts a default region while none is set
+        // (an adopted organization); changing one replaces (see diff).
+        if (current.defaultRegionId === undefined) {
+            yield* organizations.setOrganizationDefaultRegion({
+                organizationId: current.id,
+                defaultRegionId: news.defaultRegionId,
+            });
+            current = yield* organizations.getOrganization({ organizationId: current.id });
+        }
+        return toAttributes(current);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* organizations
+            .deleteOrganization({ organizationId: output.organizationId })
+            .pipe(Effect.catchTag("OrganizationNotFound", () => Effect.void));
+    }),
+}));
+//# sourceMappingURL=Organization.js.map

package/lib/Organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Organization.js","sources":["../src/Organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA8BlD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAe,sBAAsB,CAAC,CAAC;AAE3E,MAAM,YAAY,GAAG,CAAC,CAA6B,EAA0B,EAAE,CAAC,CAAC;IAC/E,cAAc,EAAE,CAAC,CAAC,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,eAAe,EAAE,CAAC,CAAC,eAAe;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,EAAE,CACvC,QAAQ,CAAC,MAAM,CACb,YAAY,EACZ,MAAM,CAAC,OAAO,CAAC;IACb,OAAO,EAAE,CAAC,gBAAgB,CAAC;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IACpB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAC7B,EAAE,EACF,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;QACF,kEAAkE;QAClE,2CAA2C;QAC3C,IACE,IAAI,KAAK,MAAM,CAAC,IAAI;YACpB,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe,CAAC,EACzF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAW,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CACzF,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAChE,CAAC;IACJ,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,UAAU;QACV,IAAI,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa;iBACjB,eAAe,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;iBAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9E,SAAS;QACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC;gBAChD,IAAI;gBACJ,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;QACL,CAAC;QACD,gEAAgE;QAChE,+DAA+D;QAC/D,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1C,KAAK,CAAC,CAAC,aAAa,CAAC,4BAA4B,CAAC;gBAChD,cAAc,EAAE,OAAO,CAAC,EAAE;gBAC1B,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YACH,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,aAAa;aACjB,kBAAkB,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;aAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;CACH,CAAC,CACH,CAAC"}