@alchemy.run/turso 0.0.0 → 2.0.0-beta.84

package/lib/Group.js

@@ -0,0 +1,162 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { organization } from "./Credentials.js";
+/**
+ * A Turso group. Every Turso database belongs to one group, and the group
+ * decides where its databases run.
+ * @see https://docs.turso.tech/concepts#groups
+ *
+ * ### Creating a Group
+ * **Example:** Group in a single location
+ * ```typescript
+ * const group = yield* Turso.Group("Group", {
+ *   location: "aws-us-east-1",
+ * });
+ * ```
+ *
+ * **Example:** Protected group with all extensions enabled
+ * ```typescript
+ * const group = yield* Turso.Group("Group", {
+ *   name: "production",
+ *   location: "aws-eu-west-1",
+ *   extensions: "all",
+ *   deleteProtection: true,
+ * });
+ * ```
+ *
+ * ### Adding databases
+ * **Example:** Create a database in the group
+ * ```typescript
+ * const db = yield* Turso.Database("Db", { group: group.name });
+ * ```
+ *
+ * @resource
+ * @product Group
+ */
+export const Group = Resource("Turso.Group");
+const DEFAULT_LOCATION = "aws-us-east-1";
+export const GroupProvider = () => Provider.effect(Group, Effect.gen(function* () {
+    const groupName = (id, name) => name
+        ? Effect.succeed(name)
+        : createPhysicalName({ id, lowercase: true, maxLength: 32, delimiter: "-" });
+    const observe = (org, name) => turso.getGroup({ organizationSlug: org, groupName: name }).pipe(Effect.map((res) => res.group), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+    const toAttrs = (org, group, deleteProtection) => ({
+        name: group.name,
+        uuid: group.uuid ?? "",
+        organization: org,
+        location: group.primary ?? "",
+        locations: group.locations ?? [],
+        version: group.version ?? "",
+        deleteProtection,
+    });
+    return {
+        stables: ["name", "uuid", "organization", "location"],
+        diff: Effect.fn(function* ({ id, olds, news, output }) {
+            if (!isResolved(news))
+                return undefined;
+            const name = output?.name ?? (yield* groupName(id, olds?.name));
+            if (news.name !== undefined && news.name !== name) {
+                return { action: "replace" };
+            }
+            if ((news.location ?? DEFAULT_LOCATION) !== (olds?.location ?? DEFAULT_LOCATION)) {
+                return { action: "replace", deleteFirst: news.name !== undefined };
+            }
+            if (!deepEqual(news.extensions, olds?.extensions)) {
+                return { action: "replace", deleteFirst: news.name !== undefined };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const org = output?.organization ?? (yield* organization);
+            const name = output?.name ?? (yield* groupName(id, olds?.name));
+            const group = yield* observe(org, name);
+            if (!group)
+                return undefined;
+            const attrs = toAttrs(org, group, group.delete_protection ?? false);
+            // Turso has no tags: a group found under an explicit, user-chosen
+            // name without prior state may belong to someone else.
+            return output === undefined && olds?.name !== undefined ? Unowned(attrs) : attrs;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const org = output?.organization ?? (yield* organization);
+            const name = output?.name ?? (yield* groupName(id, news.name));
+            const location = news.location ?? DEFAULT_LOCATION;
+            // Observe
+            let group = yield* observe(org, name);
+            // Ensure
+            if (!group) {
+                yield* session.note(`Creating group ${name}...`);
+                group = yield* turso
+                    .createGroup({
+                    organizationSlug: org,
+                    name,
+                    location,
+                    extensions: news.extensions,
+                })
+                    .pipe(Effect.map((res) => res.group), Effect.catchTag("Conflict", () => observe(org, name)));
+                if (!group) {
+                    return yield* Effect.fail(new Error(`Turso group ${name} vanished after create`));
+                }
+            }
+            // Sync replica locations against the observed set.
+            const primary = group.primary ?? location;
+            const desired = new Set([primary, ...(news.replicas ?? [])]);
+            const observed = new Set(group.locations ?? [primary]);
+            for (const loc of desired) {
+                if (!observed.has(loc)) {
+                    yield* session.note(`Adding location ${loc}...`);
+                    group =
+                        (yield* turso.addLocationToGroup({
+                            organizationSlug: org,
+                            groupName: name,
+                            location: loc,
+                        })).group ?? group;
+                }
+            }
+            for (const loc of observed) {
+                if (!desired.has(loc)) {
+                    yield* session.note(`Removing location ${loc}...`);
+                    group =
+                        (yield* turso.removeLocationFromGroup({
+                            organizationSlug: org,
+                            groupName: name,
+                            location: loc,
+                        })).group ?? group;
+                }
+            }
+            // Sync configuration.
+            const config = yield* turso.getGroupConfiguration({
+                organizationSlug: org,
+                groupName: name,
+            });
+            let deleteProtection = config.delete_protection ?? false;
+            const desiredProtection = news.deleteProtection ?? false;
+            if (deleteProtection !== desiredProtection) {
+                const updated = yield* turso.updateGroupConfiguration({
+                    organizationSlug: org,
+                    groupName: name,
+                    delete_protection: desiredProtection,
+                });
+                deleteProtection = updated.delete_protection ?? desiredProtection;
+            }
+            return toAttrs(org, group, deleteProtection);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* turso
+                .deleteGroup({ organizationSlug: output.organization, groupName: output.name })
+                .pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        list: Effect.fn(function* () {
+            const org = yield* organization;
+            const { groups } = yield* turso.listGroups({ organizationSlug: org });
+            return (groups ?? [])
+                .filter((group) => group.name !== undefined)
+                .map((group) => toAttrs(org, group, group.delete_protection ?? false));
+        }),
+    };
+}));
+//# sourceMappingURL=Group.js.map

package/lib/Group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Group.js","sourceRoot":"","sources":["../src/Group.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAwEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAQ,aAAa,CAAC,CAAC;AAEpD,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEzC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAChC,QAAQ,CAAC,MAAM,CACb,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CACzD,IAAI;QACF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAC5C,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAC9B,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;IAEJ,MAAM,OAAO,GAAG,CACd,GAAW,EACX,KAAkB,EAClB,gBAAyB,EACR,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,CAAC,IAAK;QACjB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,YAAY,EAAE,GAAG;QACjB,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC7B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,gBAAgB;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,gBAAgB,CAAC,EAAE,CAAC;gBACjF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,EAAW,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,EAAW,CAAC;YAC9E,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;YACpE,kEAAkE;YAClE,uDAAuD;YACvD,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnF,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC;YAEnD,UAAU;YACV,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAEtC,SAAS;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAC;gBACjD,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK;qBACjB,WAAW,CAAC;oBACX,gBAAgB,EAAE,GAAG;oBACrB,IAAI;oBACJ,QAAQ;oBACR,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAC9B,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CACtD,CAAC;gBACJ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,wBAAwB,CAAC,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACvD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,CAAC;oBACjD,KAAK;wBACH,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;4BAC/B,gBAAgB,EAAE,GAAG;4BACrB,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,GAAG;yBACd,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;gBACvB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC,CAAC;oBACnD,KAAK;wBACH,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;4BACpC,gBAAgB,EAAE,GAAG;4BACrB,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,GAAG;yBACd,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBAChD,gBAAgB,EAAE,GAAG;gBACrB,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;YACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC;YACzD,IAAI,gBAAgB,KAAK,iBAAiB,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;oBACpD,gBAAgB,EAAE,GAAG;oBACrB,SAAS,EAAE,IAAI;oBACf,iBAAiB,EAAE,iBAAiB;iBACrC,CAAC,CAAC;gBACH,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;YACpE,CAAC;YAED,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,KAAK;iBACT,WAAW,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;iBAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;YAChC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;iBAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;iBAC3C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/GroupToken.d.ts

@@ -0,0 +1,48 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import { type SqlTokenAttributes, type SqlTokenProps } from "./DatabaseToken.ts";
+import type { Providers } from "./Providers.ts";
+export interface GroupTokenProps extends SqlTokenProps {
+    /** Name of the group whose databases the token grants access to. */
+    group: string;
+}
+export interface GroupTokenAttributes extends SqlTokenAttributes {
+    /** Name of the group the token grants access to. */
+    group: string;
+    /** UUID of the group the token was minted for. */
+    groupId: string;
+}
+export type GroupToken = Resource<"Turso.GroupToken", GroupTokenProps, GroupTokenAttributes, never, Providers>;
+/**
+ * A token that lets an app run SQL on every database in a Turso
+ * {@link Group}, even databases created later. Useful when each customer
+ * has their own database.
+ *
+ * Like {@link DatabaseToken}, you can't cancel a single group token. Changing
+ * a prop creates a new token, but the old one keeps working until it expires.
+ * @see https://docs.turso.tech/api-reference/groups/create-token
+ *
+ * ### Creating a Token
+ * **Example:** Full-access token for every database in a group
+ * ```typescript
+ * const token = yield* Turso.GroupToken("Token", {
+ *   group: group.name,
+ * });
+ * ```
+ *
+ * **Example:** Read-only token that expires after a week
+ * ```typescript
+ * const token = yield* Turso.GroupToken("ReadOnly", {
+ *   group: group.name,
+ *   authorization: "read-only",
+ *   expiration: "7d",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Group
+ */
+export declare const GroupToken: import("alchemy/Resource").ResourceClass<GroupToken>;
+export declare const GroupTokenProvider: () => import("effect/Layer").Layer<Provider.Provider<GroupToken>, never, import("./Credentials.ts").Organization | turso.TursoOpContext>;
+//# sourceMappingURL=GroupToken.d.ts.map

package/lib/GroupToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupToken.d.ts","sourceRoot":"","sources":["../src/GroupToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,CAC/B,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,UAAU,sDAA2C,CAAC;AAEnE,eAAO,MAAM,kBAAkB,0IAqD5B,CAAC"}

package/lib/GroupToken.js

@@ -0,0 +1,83 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { organization } from "./Credentials.js";
+import { diffSqlToken, isTokenCurrent, tokenExpiry, } from "./DatabaseToken.js";
+/**
+ * A token that lets an app run SQL on every database in a Turso
+ * {@link Group}, even databases created later. Useful when each customer
+ * has their own database.
+ *
+ * Like {@link DatabaseToken}, you can't cancel a single group token. Changing
+ * a prop creates a new token, but the old one keeps working until it expires.
+ * @see https://docs.turso.tech/api-reference/groups/create-token
+ *
+ * ### Creating a Token
+ * **Example:** Full-access token for every database in a group
+ * ```typescript
+ * const token = yield* Turso.GroupToken("Token", {
+ *   group: group.name,
+ * });
+ * ```
+ *
+ * **Example:** Read-only token that expires after a week
+ * ```typescript
+ * const token = yield* Turso.GroupToken("ReadOnly", {
+ *   group: group.name,
+ *   authorization: "read-only",
+ *   expiration: "7d",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Group
+ */
+export const GroupToken = Resource("Turso.GroupToken");
+export const GroupTokenProvider = () => Provider.effect(GroupToken, Effect.gen(function* () {
+    return {
+        stables: ["organization"],
+        diff: diffSqlToken,
+        reconcile: Effect.fn(function* ({ news, olds, output }) {
+            const org = output?.organization ?? (yield* organization);
+            // Observe — the token is bound to the group's UUID, so a group
+            // replaced under the same name invalidates it.
+            const { group } = yield* turso.getGroup({
+                organizationSlug: org,
+                groupName: news.group,
+            });
+            const groupId = group?.uuid ?? "";
+            if (output !== undefined &&
+                output.group === news.group &&
+                output.groupId === groupId &&
+                (yield* isTokenCurrent(output, olds, news))) {
+                return output;
+            }
+            // Ensure — mint.
+            const authorization = news.authorization ?? "full-access";
+            const { jwt } = yield* turso.createGroupToken({
+                organizationSlug: org,
+                groupName: news.group,
+                authorization,
+                expiration: news.expiration,
+                permissions: news.readAttach
+                    ? { read_attach: { databases: news.readAttach } }
+                    : undefined,
+            });
+            if (!jwt) {
+                return yield* Effect.fail(new Error(`Turso returned no token for group ${news.group}`));
+            }
+            return {
+                token: jwt,
+                organization: org,
+                authorization,
+                expiresAt: tokenExpiry(jwt),
+                group: news.group,
+                groupId,
+            };
+        }),
+        // Turso cannot revoke a single token; it simply stops being tracked.
+        delete: () => Effect.void,
+    };
+}));
+//# sourceMappingURL=GroupToken.js.map

package/lib/GroupToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupToken.js","sourceRoot":"","sources":["../src/GroupToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,GAGZ,MAAM,oBAAoB,CAAC;AAuB5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAa,kBAAkB,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACpD,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAE1D,+DAA+D;YAC/D,+CAA+C;YAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACtC,gBAAgB,EAAE,GAAG;gBACrB,SAAS,EAAE,IAAI,CAAC,KAAK;aACtB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;YAClC,IACE,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;gBAC3B,MAAM,CAAC,OAAO,KAAK,OAAO;gBAC1B,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAC3C,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,iBAAiB;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;YAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAC5C,gBAAgB,EAAE,GAAG;gBACrB,SAAS,EAAE,IAAI,CAAC,KAAK;gBACrB,aAAa;gBACb,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,UAAU;oBAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE;oBACjD,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG;gBACV,YAAY,EAAE,GAAG;gBACjB,aAAa;gBACb,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO;aACR,CAAC;QACJ,CAAC,CAAC;QACF,qEAAqE;QACrE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Hrana.d.ts

@@ -0,0 +1,42 @@
+import { type SqlExecutor } from "@alchemy.run/sql/Migrations";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as Redacted from "effect/Redacted";
+declare const HranaError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Turso::HranaError";
+} & Readonly<A>;
+/**
+ * A minimal Hrana-over-HTTP client (`POST /v2/pipeline`) — the SQL wire
+ * protocol every Turso database speaks. Deploy-time work (migrations, SQL
+ * imports) uses it instead of `@libsql/client`, so the provider needs no
+ * driver and runs anywhere `HttpClient` does.
+ *
+ * @see https://github.com/tursodatabase/libsql/blob/main/docs/HRANA_3_SPEC.md
+ */
+export declare class HranaError extends HranaError_base<{
+    message: string;
+    code?: string;
+    cause?: unknown;
+}> {
+}
+/** Connection details for one Turso database. */
+export interface HranaConnection {
+    /** `https://<hostname>` of the database. */
+    url: string;
+    /** A database auth token (JWT). */
+    authToken: Redacted.Redacted<string>;
+}
+/** Execute one statement and return its rows as objects. */
+export declare const query: (connection: HranaConnection, sql: string, params?: ReadonlyArray<unknown>) => Effect.Effect<Array<Record<string, unknown>>, HranaError, HttpClient.HttpClient>;
+/**
+ * Execute statements atomically. Each entry may hold several
+ * `;`-separated statements (a whole migration file or seed script), so they
+ * run as one Hrana `sequence` wrapped in `BEGIN`/`COMMIT`. A failing
+ * statement stops the sequence before `COMMIT`, and closing the stream
+ * rolls the open transaction back.
+ */
+export declare const transaction: (connection: HranaConnection, statements: ReadonlyArray<string>) => Effect.Effect<void, HranaError, HttpClient.HttpClient>;
+/** Adapt a Turso database connection into the migration registry's executor. */
+export declare const makeMigrationExecutor: (connection: HranaConnection, client: HttpClient.HttpClient) => SqlExecutor;
+export {};
+//# sourceMappingURL=Hrana.d.ts.map

package/lib/Hrana.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Hrana.d.ts","sourceRoot":"","sources":["../src/Hrana.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAG/E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;;;;AAE5C;;;;;;;GAOG;AACH,qBAAa,UAAW,SAAQ,gBAAsC;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;CAAG;AAoEL,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACtC;AAyBD,4DAA4D;AAC5D,eAAO,MAAM,KAAK,eACJ,eAAe,OACtB,MAAM,WACF,aAAa,CAAC,OAAO,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAW9E,CAAC;AAEL;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,eACV,eAAe,cACf,aAAa,CAAC,MAAM,CAAC,KAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAYpD,CAAC;AAEL,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,eACpB,eAAe,UACnB,UAAU,CAAC,UAAU,KAC5B,WAgBF,CAAC"}

package/lib/Hrana.js

@@ -0,0 +1,105 @@
+import { MigrationError } from "@alchemy.run/sql/Migrations";
+import { splitSqlStatements } from "@alchemy.run/sql/SqlFile";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as HttpClientRequest from "effect/http/HttpClientRequest";
+import * as Redacted from "effect/Redacted";
+/**
+ * A minimal Hrana-over-HTTP client (`POST /v2/pipeline`) — the SQL wire
+ * protocol every Turso database speaks. Deploy-time work (migrations, SQL
+ * imports) uses it instead of `@libsql/client`, so the provider needs no
+ * driver and runs anywhere `HttpClient` does.
+ *
+ * @see https://github.com/tursodatabase/libsql/blob/main/docs/HRANA_3_SPEC.md
+ */
+export class HranaError extends Data.TaggedError("Turso::HranaError") {
+}
+const toHranaValue = (value) => {
+    if (value === null || value === undefined)
+        return { type: "null" };
+    if (typeof value === "bigint")
+        return { type: "integer", value: value.toString() };
+    if (typeof value === "number") {
+        return Number.isInteger(value)
+            ? { type: "integer", value: value.toString() }
+            : { type: "float", value };
+    }
+    if (typeof value === "boolean")
+        return { type: "integer", value: value ? "1" : "0" };
+    if (value instanceof Uint8Array) {
+        return { type: "blob", base64: Buffer.from(value).toString("base64") };
+    }
+    return { type: "text", value: String(value) };
+};
+const fromHranaValue = (value) => {
+    switch (value.type) {
+        case "null":
+            return null;
+        case "integer":
+            return Number(value.value);
+        case "float":
+            return value.value;
+        case "text":
+            return value.value;
+        case "blob":
+            return Buffer.from(value.base64, "base64");
+    }
+};
+const toRows = (result) => result.rows.map((row) => Object.fromEntries(result.cols.map((col, i) => [col.name ?? String(i), fromHranaValue(row[i])])));
+const pipeline = (connection, requests) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const response = yield* client
+        .execute(HttpClientRequest.post(`${connection.url.replace(/\/$/, "")}/v2/pipeline`).pipe(HttpClientRequest.bearerToken(Redacted.value(connection.authToken)), HttpClientRequest.bodyJsonUnsafe({ requests: [...requests, { type: "close" }] })))
+        .pipe(Effect.mapError((cause) => new HranaError({ message: String(cause), cause })));
+    if (response.status < 200 || response.status >= 300) {
+        const text = yield* response.text.pipe(Effect.orElseSucceed(() => ""));
+        return yield* new HranaError({
+            message: `Turso SQL request failed with HTTP ${response.status}: ${text}`,
+        });
+    }
+    const body = (yield* response.json.pipe(Effect.mapError((cause) => new HranaError({ message: String(cause), cause }))));
+    return body.results.slice(0, requests.length);
+});
+/** Execute one statement and return its rows as objects. */
+export const query = (connection, sql, params) => Effect.gen(function* () {
+    const stmt = { sql, args: (params ?? []).map(toHranaValue) };
+    const [result] = yield* pipeline(connection, [{ type: "execute", stmt }]);
+    if (result === undefined) {
+        return yield* new HranaError({ message: "Turso returned no result" });
+    }
+    if (result.type === "error") {
+        return yield* new HranaError({ message: result.error.message, code: result.error.code });
+    }
+    return toRows(result.response.result);
+});
+/**
+ * Execute statements atomically. Each entry may hold several
+ * `;`-separated statements (a whole migration file or seed script), so they
+ * run as one Hrana `sequence` wrapped in `BEGIN`/`COMMIT`. A failing
+ * statement stops the sequence before `COMMIT`, and closing the stream
+ * rolls the open transaction back.
+ */
+export const transaction = (connection, statements) => Effect.gen(function* () {
+    const body = statements.flatMap(splitSqlStatements);
+    if (body.length === 0)
+        return;
+    const sql = ["BEGIN", ...body.map((s) => s.replace(/;\s*$/, "")), "COMMIT"].join(";\n");
+    const [result] = yield* pipeline(connection, [{ type: "sequence", sql }]);
+    if (result === undefined) {
+        return yield* new HranaError({ message: "Turso returned no result" });
+    }
+    if (result.type === "error") {
+        return yield* new HranaError({ message: result.error.message, code: result.error.code });
+    }
+});
+/** Adapt a Turso database connection into the migration registry's executor. */
+export const makeMigrationExecutor = (connection, client) => {
+    const toMigrationError = (error) => new MigrationError({ message: `turso: ${error.message}`, cause: error });
+    return {
+        dialect: "sqlite",
+        query: (sql, params) => query(connection, sql, params).pipe(Effect.provideService(HttpClient.HttpClient, client), Effect.mapError(toMigrationError)),
+        batch: (statements) => transaction(connection, statements).pipe(Effect.provideService(HttpClient.HttpClient, client), Effect.mapError(toMigrationError)),
+    };
+};
+//# sourceMappingURL=Hrana.js.map

package/lib/Hrana.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Hrana.js","sourceRoot":"","sources":["../src/Hrana.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAoB,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,iBAAiB,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,OAAO,UAAW,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAIlE;CAAG;AA+BL,MAAM,YAAY,GAAG,CAAC,KAAc,EAAc,EAAE;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACrF,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAiB,EAAW,EAAE;IACpD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,MAA0B,EAAkC,EAAE,CAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAC9E,CACF,CAAC;AAUJ,MAAM,QAAQ,GAAG,CAAC,UAA2B,EAAE,QAAgC,EAAE,EAAE,CACjF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;SAC3B,OAAO,CACN,iBAAiB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,CAC7E,iBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EACnE,iBAAiB,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CACjF,CACF;SACA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;YAC3B,OAAO,EAAE,sCAAsC,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACrC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAC9E,CAAgC,CAAC;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEL,4DAA4D;AAC5D,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,UAA2B,EAC3B,GAAW,EACX,MAA+B,EACmD,EAAE,CACpF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAc,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAA4B,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,UAA2B,EAC3B,UAAiC,EACuB,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,UAA2B,EAC3B,MAA6B,EAChB,EAAE;IACf,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAE,EAAE,CAC7C,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CACrB,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EACpD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAClC;QACH,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE,CACpB,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EACpD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAClC;KACJ,CAAC;AACJ,CAAC,CAAC"}

package/lib/ManageDatabases.d.ts

@@ -0,0 +1,73 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import type { ConnectClient } from "./Connect.ts";
+import type { DatabaseSeed } from "./Database.ts";
+import type { Group } from "./Group.ts";
+/** A database in the managed group. */
+export interface ManagedDatabase {
+    /** Database name. */
+    name: string;
+    /** Database UUID. */
+    dbId: string;
+    /** DNS hostname of the database. */
+    hostname: string;
+    /** libSQL URL (`libsql://<hostname>`). */
+    url: string;
+}
+export interface CreateManagedDatabaseOptions {
+    /** Seed the new database from an existing database (e.g. a template). */
+    seed?: DatabaseSeed;
+    /** Maximum size of the database, e.g. `"256mb"`. */
+    sizeLimit?: string;
+}
+export interface ManageDatabasesClient {
+    /** Create a database in the group. */
+    create(name: string, options?: CreateManagedDatabaseOptions): Effect.Effect<ManagedDatabase, turso.CreateDatabaseError, RuntimeContext>;
+    /** Look up a database by name; `undefined` when it doesn't exist. */
+    get(name: string): Effect.Effect<ManagedDatabase | undefined, turso.GetDatabaseError, RuntimeContext>;
+    /** List every database in the group. */
+    list(): Effect.Effect<ManagedDatabase[], turso.ListDatabasesError, RuntimeContext>;
+    /** Delete a database. Deleting a missing database succeeds. */
+    delete(name: string): Effect.Effect<void, turso.DeleteDatabaseError, RuntimeContext>;
+    /**
+     * libSQL connection accessors for a database in the group, authorized by
+     * a group-wide SQL token. Pass to `SQL.LibSQL` or `Drizzle.LibSQL`.
+     */
+    connect(name: string): ConnectClient;
+}
+/**
+ * Let a Worker create, list, delete, and query databases in one Turso
+ * {@link Group}. Use it to give each customer their own database.
+ *
+ * The Worker gets an {@link ApiToken} that only works on that group, and a
+ * {@link GroupToken} for running SQL. It can't touch databases in any other
+ * group, and your own Turso API token stays on your machine.
+ *
+ * ### Database per tenant
+ * **Example:** Create a tenant database on signup and query it
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const tenants = yield* Turso.ManageDatabases(Tenants);
+ *   return {
+ *     fetch: Effect.gen(function* () {
+ *       const db = yield* tenants.create("acme");
+ *       const sql = yield* SQL.LibSQL(tenants.connect(db.name));
+ *       yield* sql`CREATE TABLE IF NOT EXISTS notes (body TEXT)`;
+ *       return HttpServerResponse.text(db.url);
+ *     }),
+ *   };
+ * }).pipe(Effect.provide(Turso.ManageDatabasesHttp));
+ * ```
+ *
+ * @binding
+ * @product Group
+ */
+export interface ManageDatabases extends Binding.Service<ManageDatabases, "Turso.ManageDatabases", (group: Group) => Effect.Effect<ManageDatabasesClient>> {
+}
+export declare const ManageDatabases: ManageDatabases;
+/** Implementation over the Turso Platform API, usable from any Platform host. */
+export declare const ManageDatabasesHttp: Layer.Layer<ManageDatabases, never, never>;
+//# sourceMappingURL=ManageDatabases.d.ts.map

package/lib/ManageDatabases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManageDatabases.d.ts","sourceRoot":"","sources":["../src/ManageDatabases.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGxC,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,4BAA4B;IAC3C,yEAAyE;IACzE,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,4BAA4B,GACrC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAC7E,qEAAqE;IACrE,GAAG,CACD,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,CAAC,eAAe,GAAG,SAAS,EAAE,KAAK,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACtF,wCAAwC;IACxC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACnF,+DAA+D;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IACrF;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,OAAO,CACtD,eAAe,EACf,uBAAuB,EACvB,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CACvD;CAAG;AAEJ,eAAO,MAAM,eAAe,iBAA4D,CAAC;AAEzF,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,4CAwG/B,CAAC"}

package/lib/ManageDatabases.js

@@ -0,0 +1,81 @@
+import { Credentials, DEFAULT_API_BASE_URL } from "@distilled.cloud/turso/Credentials";
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Binding from "alchemy/Binding";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import { ApiToken } from "./ApiToken.js";
+import { GroupToken } from "./GroupToken.js";
+export const ManageDatabases = Binding.Service("Turso.ManageDatabases");
+/** Implementation over the Turso Platform API, usable from any Platform host. */
+export const ManageDatabasesHttp = Layer.effect(ManageDatabases, Effect.gen(function* () {
+    const PlatformToken = yield* ApiToken;
+    const SqlToken = yield* GroupToken;
+    return Effect.fn(function* (group) {
+        const host = yield* Binding.Host;
+        const prefix = `${host?.LogicalId ?? ""}${group.LogicalId}`;
+        const apiToken = yield* PlatformToken(`${prefix}ManageToken`, {
+            group: group.name,
+            scopes: ["read", "db:create", "db:delete", "db:configure"],
+        });
+        const sqlToken = yield* SqlToken(`${prefix}SqlToken`, {
+            group: group.name,
+        });
+        const apiKey = yield* apiToken.token;
+        const authToken = yield* sqlToken.token;
+        const organization = yield* group.organization;
+        const groupName = yield* group.name;
+        const location = yield* group.location;
+        const authorize = (effect) => effect.pipe(Effect.provide(Layer.mergeAll(Layer.succeed(Credentials, Effect.map(apiKey, (key) => ({ apiKey: key, apiBaseUrl: DEFAULT_API_BASE_URL }))), FetchHttpClient.layer)));
+        const toManaged = (db) => ({
+            name: db.Name ?? "",
+            dbId: db.DbId ?? "",
+            hostname: db.Hostname ?? "",
+            url: `libsql://${db.Hostname}`,
+        });
+        const client = {
+            create: (name, options) => authorize(Effect.gen(function* () {
+                const { database } = yield* turso.createDatabase({
+                    organizationSlug: yield* organization,
+                    name,
+                    group: yield* groupName,
+                    seed: options?.seed,
+                    size_limit: options?.sizeLimit,
+                });
+                return toManaged(database ?? {});
+            })),
+            get: (name) => authorize(Effect.gen(function* () {
+                const { database } = yield* turso.getDatabase({
+                    organizationSlug: yield* organization,
+                    databaseName: name,
+                });
+                return database && database.group === (yield* groupName)
+                    ? toManaged(database)
+                    : undefined;
+            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)))),
+            list: () => authorize(Effect.gen(function* () {
+                const { databases } = yield* turso.listDatabases({
+                    organizationSlug: yield* organization,
+                    group: yield* groupName,
+                });
+                return (databases ?? []).map(toManaged);
+            })),
+            delete: (name) => authorize(Effect.gen(function* () {
+                yield* turso.deleteDatabase({
+                    organizationSlug: yield* organization,
+                    databaseName: name,
+                });
+            }).pipe(Effect.catchTag("NotFound", () => Effect.void))),
+            connect: (name) => ({
+                // Turso hostnames are `<database>-<organization>.<location>.turso.io`,
+                // so the URL is derived without a Platform API round-trip.
+                url: Effect.gen(function* () {
+                    return `libsql://${name}-${yield* organization}.${yield* location}.turso.io`;
+                }),
+                authToken,
+            }),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=ManageDatabases.js.map