@alchemy.run/turso 0.0.0 → 2.0.0-beta.85

package/lib/Database.js

@@ -0,0 +1,277 @@
+import { diffMigrations, migrationsAttrs, migrationsInputOf, runMigrations, stampedOf, } from "@alchemy.run/sql/Migrations";
+import { applySqlImports, hashImports, splitSqlStatements } from "@alchemy.run/sql/SqlFile";
+import * as turso from "@distilled.cloud/turso/turso";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as Redacted from "effect/Redacted";
+import { organization } from "./Credentials.js";
+import * as Hrana from "./Hrana.js";
+export class DatabaseUnexpectedResponse extends Data.TaggedError("DatabaseUnexpectedResponse") {
+}
+/**
+ * A Turso database: a SQLite database that lives in a {@link Group}.
+ * Connect to it from a Worker or Lambda with {@link Connect}, or create a
+ * {@link DatabaseToken} for other apps.
+ * @see https://docs.turso.tech/concepts#databases
+ *
+ * ### Creating a Database
+ * **Example:** Database in a group
+ * ```typescript
+ * const group = yield* Turso.Group("Group", { location: "aws-us-east-1" });
+ * const db = yield* Turso.Database("Db", { group: group.name });
+ * ```
+ *
+ * **Example:** Database with delete protection and an IP allowlist
+ * ```typescript
+ * const db = yield* Turso.Database("Db", {
+ *   group: group.name,
+ *   deleteProtection: true,
+ *   allowedIps: ["203.0.113.0/24"],
+ * });
+ * ```
+ *
+ * ### Branching
+ * **Example:** Copy an existing database
+ * ```typescript
+ * const preview = yield* Turso.Database("Preview", {
+ *   group: group.name,
+ *   seed: { type: "database", name: db.name },
+ * });
+ * ```
+ *
+ * ### Migrations
+ * Point `migrations` at a folder of `.sql` files (or a `Drizzle.Schema`).
+ * Pending migrations are applied in order on each deploy.
+ *
+ * **Example:** Apply migrations from a directory
+ * ```typescript
+ * const db = yield* Turso.Database("Db", {
+ *   group: group.name,
+ *   migrations: "./migrations",
+ * });
+ * ```
+ *
+ * **Example:** Seed with SQL files
+ * ```typescript
+ * const db = yield* Turso.Database("Db", {
+ *   group: group.name,
+ *   importFiles: ["./seed/users.sql"],
+ * });
+ * ```
+ *
+ * ### Querying from a Worker
+ * **Example:** Drizzle over a Turso database
+ * ```typescript
+ * const conn = yield* Turso.Connect(Db);
+ * const db = yield* Drizzle.LibSQL(conn);
+ * ```
+ *
+ * @resource
+ * @product Database
+ */
+export const Database = Resource("Turso.Database");
+const databaseName = (id, name) => name
+    ? Effect.succeed(name)
+    : createPhysicalName({ id, lowercase: true, maxLength: 32, delimiter: "-" });
+const rootDir = Effect.sync(() => process.cwd());
+/**
+ * Run `use` against a short-lived (10 minute) full-access database token,
+ * for deploy-time SQL (migrations and imports).
+ */
+const withConnection = (org, database, use) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const { jwt } = yield* turso.createDatabaseToken({
+        organizationSlug: org,
+        databaseName: database.name,
+        expiration: "10m",
+        authorization: "full-access",
+    });
+    if (!jwt) {
+        return yield* new DatabaseUnexpectedResponse({
+            message: `Turso returned no token for ${database.name}`,
+        });
+    }
+    return yield* use({ url: `https://${database.hostname}`, authToken: jwt }, client);
+});
+export const DatabaseProvider = () => Provider.effect(Database, Effect.gen(function* () {
+    const observe = (org, name) => turso.getDatabase({ organizationSlug: org, databaseName: name }).pipe(Effect.map((res) => res.database), Effect.catchTag("NotFound", () => Effect.undefined));
+    const toAttrs = (org, db, config, rest) => ({
+        dbId: db.DbId ?? "",
+        name: db.Name,
+        organization: org,
+        group: db.group ?? "",
+        hostname: db.Hostname ?? "",
+        url: `libsql://${db.Hostname}`,
+        httpUrl: `https://${db.Hostname}`,
+        primaryRegion: db.primaryRegion ?? "",
+        regions: db.regions ?? [],
+        sizeLimit: config.size_limit || undefined,
+        allowAttach: config.allow_attach ?? false,
+        blockReads: config.block_reads ?? false,
+        blockWrites: config.block_writes ?? false,
+        deleteProtection: config.delete_protection ?? false,
+        allowedIps: config.allowed_ips ?? [],
+        allowedAwsVpcIds: config.allowed_aws_vpc_ids ?? [],
+        ...rest,
+    });
+    const getConfig = (org, name) => turso.getDatabaseConfiguration({ organizationSlug: org, databaseName: name });
+    return {
+        stables: ["dbId", "name", "organization", "group", "hostname", "url", "httpUrl"],
+        diff: Effect.fn(function* ({ id, olds, news, output }) {
+            if (!isResolved(news))
+                return undefined;
+            const name = output?.name ?? (yield* databaseName(id, olds?.name));
+            if (news.name !== undefined && news.name !== name) {
+                return { action: "replace" };
+            }
+            if (news.group !== (output?.group ?? olds?.group)) {
+                return { action: "replace", deleteFirst: news.name !== undefined };
+            }
+            if (news.encryption?.cipher !== olds?.encryption?.cipher ||
+                (news.encryption &&
+                    olds?.encryption &&
+                    Redacted.value(news.encryption.key) !== Redacted.value(olds.encryption.key))) {
+                return { action: "replace", deleteFirst: news.name !== undefined };
+            }
+            if (yield* diffMigrations({ news, output })) {
+                return { action: "update" };
+            }
+            if (news.importFiles?.length) {
+                const hashes = yield* hashImports(news.importFiles, yield* rootDir);
+                if (!deepEqual(hashes, output?.importHashes ?? {})) {
+                    return { action: "update" };
+                }
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output, previous }) {
+            const org = output?.organization ?? (yield* organization);
+            const name = output?.name ?? (yield* databaseName(id, olds?.name));
+            const db = yield* observe(org, name);
+            if (!db)
+                return undefined;
+            const attrs = toAttrs(org, db, yield* getConfig(org, name), {
+                migrationsDir: output?.migrationsDir,
+                migrationsTable: output?.migrationsTable,
+                migrationsHashes: output?.migrationsHashes ?? {},
+                importHashes: output?.importHashes ?? {},
+            });
+            // Turso has no tags: a database found under an explicit,
+            // user-chosen name without prior state may belong to someone else — unless it
+            // is the generation a delete-first replacement is about to free.
+            const ours = output !== undefined ||
+                olds?.name === undefined ||
+                (previous?.organization === org && previous.name === name);
+            return ours ? attrs : Unowned(attrs);
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const org = output?.organization ?? (yield* organization);
+            const name = output?.name ?? (yield* databaseName(id, news.name));
+            // Observe
+            let db = yield* observe(org, name);
+            // Ensure
+            if (!db) {
+                yield* session.note(`Creating database ${name}...`);
+                yield* turso
+                    .createDatabase({
+                    organizationSlug: org,
+                    name,
+                    group: news.group,
+                    seed: news.seed,
+                    size_limit: news.sizeLimit,
+                    remote_encryption: news.encryption
+                        ? {
+                            encryption_key: Redacted.value(news.encryption.key),
+                            encryption_cipher: news.encryption.cipher,
+                        }
+                        : undefined,
+                })
+                    .pipe(Effect.catchTag("Conflict", () => Effect.void));
+                db = yield* observe(org, name);
+                if (!db) {
+                    return yield* new DatabaseUnexpectedResponse({
+                        message: `Turso database ${name} vanished after create`,
+                    });
+                }
+            }
+            // Sync configuration — diff observed settings against desired
+            // and PATCH only the fields that differ.
+            let config = yield* getConfig(org, name);
+            const patch = {
+                databaseName: name,
+            };
+            let dirty = false;
+            const set = (key, observed, desired) => {
+                if (!deepEqual(observed, desired)) {
+                    patch[key] = desired;
+                    dirty = true;
+                }
+            };
+            if (news.sizeLimit !== undefined)
+                set("size_limit", config.size_limit, news.sizeLimit);
+            // AWS-hosted databases reject `allow_attach` outright, so it is
+            // only sent when explicitly configured.
+            if (news.allowAttach !== undefined) {
+                set("allow_attach", config.allow_attach ?? false, news.allowAttach);
+            }
+            set("block_reads", config.block_reads ?? false, news.blockReads ?? false);
+            set("block_writes", config.block_writes ?? false, news.blockWrites ?? false);
+            set("delete_protection", config.delete_protection ?? false, news.deleteProtection ?? false);
+            set("allowed_ips", config.allowed_ips ?? [], news.allowedIps ?? []);
+            set("allowed_aws_vpc_ids", config.allowed_aws_vpc_ids ?? [], news.allowedAwsVpcIds ?? []);
+            if (dirty) {
+                config = yield* turso.updateDatabaseConfiguration({ organizationSlug: org, ...patch });
+            }
+            // Sync schema — migrations, then SQL imports.
+            const target = { name, hostname: db.Hostname };
+            const migrationsInput = migrationsInputOf(news);
+            const migrations = migrationsInput
+                ? yield* runMigrations({
+                    input: migrationsInput,
+                    stamped: stampedOf(output),
+                    withExecutor: (apply) => withConnection(org, target, (connection, client) => apply(Hrana.makeMigrationExecutor(connection, client))),
+                })
+                : undefined;
+            const importHashes = yield* applySqlImports({
+                importFiles: news.importFiles,
+                rootDir: yield* rootDir,
+                previous: output?.importHashes,
+                apply: (file) => session
+                    .note(`Importing ${file.id}...`)
+                    .pipe(Effect.andThen(withConnection(org, target, (connection, client) => Hrana.transaction(connection, splitSqlStatements(file.sql)).pipe(Effect.provideService(HttpClient.HttpClient, client))))),
+            });
+            return toAttrs(org, db, config, {
+                ...migrationsAttrs({ input: migrationsInput, run: migrations, output }),
+                importHashes,
+            });
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* turso
+                .deleteDatabase({ organizationSlug: output.organization, databaseName: output.name })
+                .pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        list: Effect.fn(function* () {
+            const org = yield* organization;
+            const { databases } = yield* turso.listDatabases({ organizationSlug: org });
+            return (databases ?? [])
+                .filter((db) => db.Name !== undefined)
+                .map((db) => toAttrs(org, db, {
+                allow_attach: db.allow_attach,
+                block_reads: db.block_reads,
+                block_writes: db.block_writes,
+                delete_protection: db.delete_protection,
+            }, {
+                migrationsDir: undefined,
+                migrationsTable: undefined,
+                migrationsHashes: {},
+                importHashes: {},
+            }));
+        }),
+    };
+}));
+//# sourceMappingURL=Database.js.map

package/lib/Database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Database.js","sourceRoot":"","sources":["../src/Database.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,SAAS,GAEV,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAGpC,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAG3F;CAAG;AA0KL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAW,gBAAgB,CAAC,CAAC;AAE7D,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAC5D,IAAI;IACF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAEjD;;;GAGG;AACH,MAAM,cAAc,GAAG,CACrB,GAAW,EACX,QAA4C,EAC5C,GAAiG,EACjG,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC/C,gBAAgB,EAAE,GAAG;QACrB,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,aAAa;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;YAC3C,OAAO,EAAE,+BAA+B,QAAQ,CAAC,IAAI,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,QAAQ,CAAC,MAAM,CACb,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAC5C,KAAK,CAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACnE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EACjC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CACpD,CAAC;IAEJ,MAAM,OAAO,GAAG,CACd,GAAW,EACX,EAAkB,EAClB,MAA2C,EAC3C,IAGC,EACmB,EAAE,CAAC,CAAC;QACxB,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;QACnB,IAAI,EAAE,EAAE,CAAC,IAAK;QACd,YAAY,EAAE,GAAG;QACjB,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE;QAC3B,GAAG,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE;QAC9B,OAAO,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE;QACjC,aAAa,EAAE,EAAE,CAAC,aAAa,IAAI,EAAE;QACrC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;QACzC,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;QACzC,UAAU,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;QACvC,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;QACzC,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,IAAI,KAAK;QACnD,UAAU,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACpC,gBAAgB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;QAClD,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAC9C,KAAK,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhF,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC;QAChF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,EAAW,CAAC;YAC9E,CAAC;YACD,IACE,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,EAAE,UAAU,EAAE,MAAM;gBACpD,CAAC,IAAI,CAAC,UAAU;oBACd,IAAI,EAAE,UAAU;oBAChB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAC9E,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,EAAW,CAAC;YAC9E,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;YACvC,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;gBACpE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;YACvD,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACnE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;gBAC1D,aAAa,EAAE,MAAM,EAAE,aAAa;gBACpC,eAAe,EAAE,MAAM,EAAE,eAAe;gBACxC,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;gBAChD,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE;aACzC,CAAC,CAAC;YACH,yDAAyD;YACzD,8EAA8E;YAC9E,iEAAiE;YACjE,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;gBACpB,IAAI,EAAE,IAAI,KAAK,SAAS;gBACxB,CAAC,QAAQ,EAAE,YAAY,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAElE,UAAU;YACV,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAEnC,SAAS;YACT,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,IAAI,KAAK,CAAC,CAAC;gBACpD,KAAK,CAAC,CAAC,KAAK;qBACT,cAAc,CAAC;oBACd,gBAAgB,EAAE,GAAG;oBACrB,IAAI;oBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,UAAU,EAAE,IAAI,CAAC,SAAS;oBAC1B,iBAAiB,EAAE,IAAI,CAAC,UAAU;wBAChC,CAAC,CAAC;4BACE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;4BACnD,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;yBAC1C;wBACH,CAAC,CAAC,SAAS;iBACd,CAAC;qBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;wBAC3C,OAAO,EAAE,kBAAkB,IAAI,wBAAwB;qBACxD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,yCAAyC;YACzC,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,KAAK,GAAuE;gBAChF,YAAY,EAAE,IAAI;aACnB,CAAC;YACF,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,MAAM,GAAG,GAAG,CACV,GAAM,EACN,QAAiB,EACjB,OAA0B,EAC1B,EAAE;gBACF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;oBAClC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;oBACrB,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;YACH,CAAC,CAAC;YACF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACvF,gEAAgE;YAChE,wCAAwC;YACxC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACnC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACtE,CAAC;YACD,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;YAC1E,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;YAC7E,GAAG,CACD,mBAAmB,EACnB,MAAM,CAAC,iBAAiB,IAAI,KAAK,EACjC,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAC/B,CAAC;YACF,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAC1F,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACzF,CAAC;YAED,8CAA8C;YAC9C,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAS,EAAE,CAAC;YAChD,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,eAAe;gBAChC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC;oBACnB,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC;oBAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CACjD,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CACvD;iBACJ,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;gBAC1C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,EAAE,YAAY;gBAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,OAAO;qBACJ,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,KAAK,CAAC;qBAC/B,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CACjD,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC9D,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CACrD,CACF,CACF,CACF;aACN,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE;gBAC9B,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;gBACvE,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,KAAK;iBACT,cAAc,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;iBACpF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;YAChC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;iBACrB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;iBACrC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACV,OAAO,CACL,GAAG,EACH,EAAE,EACF;gBACE,YAAY,EAAE,EAAE,CAAC,YAAY;gBAC7B,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,YAAY,EAAE,EAAE,CAAC,YAAY;gBAC7B,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,EACD;gBACE,aAAa,EAAE,SAAS;gBACxB,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,EAAE;gBACpB,YAAY,EAAE,EAAE;aACjB,CACF,CACF,CAAC;QACN,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/DatabaseToken.d.ts

@@ -0,0 +1,104 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import type { Providers } from "./Providers.ts";
+declare const DatabaseTokenUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "DatabaseTokenUnexpectedResponse";
+} & Readonly<A>;
+export declare class DatabaseTokenUnexpectedResponse extends DatabaseTokenUnexpectedResponse_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+/** Access level of a Turso SQL auth token. */
+export type TokenAuthorization = "full-access" | "read-only";
+/** Props shared by {@link DatabaseToken} and {@link GroupToken}. */
+export interface SqlTokenProps {
+    /**
+     * Access level granted by the token.
+     * @default "full-access"
+     */
+    authorization?: TokenAuthorization;
+    /**
+     * Token lifetime, e.g. `"2w"`, `"7d"`, `"1h30m"`. Omit for a token that
+     * never expires. An expired token is re-minted on the next deploy.
+     */
+    expiration?: string;
+    /**
+     * Databases this token may `ATTACH` for reading (requires `allowAttach`
+     * on those databases). Not supported on AWS-hosted databases.
+     */
+    readAttach?: string[];
+}
+/** Attributes shared by {@link DatabaseToken} and {@link GroupToken}. */
+export interface SqlTokenAttributes {
+    /** The token (a JWT), sent as `Authorization: Bearer <token>`. */
+    token: Redacted.Redacted<string>;
+    /** The organization slug the token belongs to. */
+    organization: string;
+    /** Access level granted by the token. */
+    authorization: TokenAuthorization;
+    /** Expiry as epoch milliseconds, or `undefined` for a non-expiring token. */
+    expiresAt: number | undefined;
+}
+export interface DatabaseTokenProps extends SqlTokenProps {
+    /** Name of the database the token grants access to (e.g. `db.name`). */
+    database: string;
+}
+export interface DatabaseTokenAttributes extends SqlTokenAttributes {
+    /** Name of the database the token grants access to. */
+    database: string;
+    /** UUID of the database the token was minted for. */
+    dbId: string;
+}
+export type DatabaseToken = Resource<"Turso.DatabaseToken", DatabaseTokenProps, DatabaseTokenAttributes, never, Providers>;
+/**
+ * A token that lets an app run SQL on one Turso database. Workers and
+ * Lambdas should use {@link Connect}, which creates one for you. Use
+ * `DatabaseToken` for anything else, such as a container or a CI job.
+ *
+ * You can't cancel a single token. Changing a prop creates a new token, but
+ * the old one keeps working until it expires. Destroying the resource doesn't
+ * stop it either. Give tokens you share an `expiration`, or cancel every token
+ * for the database with `turso db tokens invalidate`.
+ * @see https://docs.turso.tech/api-reference/databases/create-token
+ *
+ * ### Creating a Token
+ * **Example:** Full-access token
+ * ```typescript
+ * const token = yield* Turso.DatabaseToken("Token", {
+ *   database: db.name,
+ * });
+ * ```
+ *
+ * **Example:** Read-only token that expires after two weeks
+ * ```typescript
+ * const token = yield* Turso.DatabaseToken("ReadOnly", {
+ *   database: db.name,
+ *   authorization: "read-only",
+ *   expiration: "2w",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Database
+ */
+export declare const DatabaseToken: import("alchemy/Resource").ResourceClass<DatabaseToken>;
+/** Decode a Turso JWT's `exp` claim (seconds) to epoch milliseconds. */
+export declare const tokenExpiry: (token: Redacted.Redacted<string>) => number | undefined;
+/**
+ * `diff` for SQL tokens: an unchanged token that is about to expire still
+ * needs an update, so the deploy re-mints it.
+ */
+export declare const diffSqlToken: (args_0: {
+    output: SqlTokenAttributes | undefined;
+}) => Effect.Effect<{
+    readonly action: "update";
+} | undefined, never, never>;
+/** Whether a previously minted token can be kept as-is. */
+export declare const isTokenCurrent: (output: SqlTokenAttributes | undefined, olds: SqlTokenProps | undefined, news: SqlTokenProps) => Effect.Effect<boolean, never, never>;
+export declare const DatabaseTokenProvider: () => import("effect/Layer").Layer<Provider.Provider<DatabaseToken>, never, import("./Credentials.ts").Organization | turso.TursoOpContext>;
+export {};
+//# sourceMappingURL=DatabaseToken.d.ts.map

package/lib/DatabaseToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseToken.d.ts","sourceRoot":"","sources":["../src/DatabaseToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAEtD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;;;;AAEhD,qBAAa,+BAAgC,SAAQ,qCAEnD;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,8CAA8C;AAC9C,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,WAAW,CAAC;AAE7D,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,aAAa,EAAE,kBAAkB,CAAC;IAClC,6EAA6E;IAC7E,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,CAClC,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,aAAa,yDAAiD,CAAC;AAE5E,wEAAwE;AACxE,eAAO,MAAM,WAAW,UAAW,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,MAAM,GAAG,SAWvE,CAAC;AAKF;;;GAGG;AACH,eAAO,MAAM,YAAY;YAGf,kBAAkB,GAAG,SAAS;;qBAIwB,QAAQ;4BACtE,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,cAAc,wIAkBzB,CAAC;AAEH,eAAO,MAAM,qBAAqB,6IAuD/B,CAAC"}

package/lib/DatabaseToken.js

@@ -0,0 +1,133 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import { deepEqual } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Clock from "effect/Clock";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { organization } from "./Credentials.js";
+export class DatabaseTokenUnexpectedResponse extends Data.TaggedError("DatabaseTokenUnexpectedResponse") {
+}
+/**
+ * A token that lets an app run SQL on one Turso database. Workers and
+ * Lambdas should use {@link Connect}, which creates one for you. Use
+ * `DatabaseToken` for anything else, such as a container or a CI job.
+ *
+ * You can't cancel a single token. Changing a prop creates a new token, but
+ * the old one keeps working until it expires. Destroying the resource doesn't
+ * stop it either. Give tokens you share an `expiration`, or cancel every token
+ * for the database with `turso db tokens invalidate`.
+ * @see https://docs.turso.tech/api-reference/databases/create-token
+ *
+ * ### Creating a Token
+ * **Example:** Full-access token
+ * ```typescript
+ * const token = yield* Turso.DatabaseToken("Token", {
+ *   database: db.name,
+ * });
+ * ```
+ *
+ * **Example:** Read-only token that expires after two weeks
+ * ```typescript
+ * const token = yield* Turso.DatabaseToken("ReadOnly", {
+ *   database: db.name,
+ *   authorization: "read-only",
+ *   expiration: "2w",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Database
+ */
+export const DatabaseToken = Resource("Turso.DatabaseToken");
+/** Decode a Turso JWT's `exp` claim (seconds) to epoch milliseconds. */
+export const tokenExpiry = (token) => {
+    const payload = Redacted.value(token).split(".")[1];
+    if (!payload)
+        return undefined;
+    try {
+        const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+        return typeof claims.exp === "number" ? claims.exp * 1000 : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+/** Re-mint a token that expires within the hour. */
+const RENEW_WITHIN_MS = 60 * 60 * 1000;
+/**
+ * `diff` for SQL tokens: an unchanged token that is about to expire still
+ * needs an update, so the deploy re-mints it.
+ */
+export const diffSqlToken = Effect.fn(function* ({ output, }) {
+    if (output?.expiresAt === undefined)
+        return undefined;
+    const now = yield* Clock.currentTimeMillis;
+    return output.expiresAt - now <= RENEW_WITHIN_MS ? { action: "update" } : undefined;
+});
+/** Whether a previously minted token can be kept as-is. */
+export const isTokenCurrent = Effect.fn(function* (output, olds, news) {
+    if (output === undefined || olds === undefined)
+        return false;
+    if ((news.authorization ?? "full-access") !== (olds.authorization ?? "full-access") ||
+        news.expiration !== olds.expiration ||
+        !deepEqual(news.readAttach ?? [], olds.readAttach ?? [])) {
+        return false;
+    }
+    if (output.expiresAt === undefined)
+        return true;
+    // Re-mint a token that expires within the hour, so a deploy never hands
+    // consumers a token about to lapse.
+    const now = yield* Clock.currentTimeMillis;
+    return output.expiresAt - now > RENEW_WITHIN_MS;
+});
+export const DatabaseTokenProvider = () => Provider.effect(DatabaseToken, Effect.gen(function* () {
+    return {
+        stables: ["organization"],
+        diff: diffSqlToken,
+        reconcile: Effect.fn(function* ({ news, olds, output }) {
+            const org = output?.organization ?? (yield* organization);
+            // Observe — the token is bound to the database's UUID, so a
+            // database replaced under the same name invalidates it.
+            const { database } = yield* turso.getDatabase({
+                organizationSlug: org,
+                databaseName: news.database,
+            });
+            const dbId = database?.DbId ?? "";
+            if (output !== undefined &&
+                output.database === news.database &&
+                output.dbId === dbId &&
+                (yield* isTokenCurrent(output, olds, news))) {
+                return output;
+            }
+            // Ensure — mint.
+            const authorization = news.authorization ?? "full-access";
+            const { jwt } = yield* turso.createDatabaseToken({
+                organizationSlug: org,
+                databaseName: news.database,
+                authorization,
+                expiration: news.expiration,
+                permissions: news.readAttach
+                    ? { read_attach: { databases: news.readAttach } }
+                    : undefined,
+            });
+            if (!jwt) {
+                return yield* new DatabaseTokenUnexpectedResponse({
+                    message: `Turso returned no token for ${news.database}`,
+                });
+            }
+            return {
+                token: jwt,
+                organization: org,
+                authorization,
+                expiresAt: tokenExpiry(jwt),
+                database: news.database,
+                dbId,
+            };
+        }),
+        // Turso cannot revoke a single token; it simply stops being tracked.
+        delete: () => Effect.void,
+    };
+}));
+//# sourceMappingURL=DatabaseToken.js.map

package/lib/DatabaseToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseToken.js","sourceRoot":"","sources":["../src/DatabaseToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,MAAM,OAAO,+BAAgC,SAAQ,IAAI,CAAC,WAAW,CACnE,iCAAiC,CAIjC;CAAG;AAwDL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAgB,qBAAqB,CAAC,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAgC,EAAsB,EAAE;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAE3E,CAAC;QACF,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,oDAAoD;AACpD,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC/C,MAAM,GAGP;IACC,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC3C,OAAO,MAAM,CAAC,SAAS,GAAG,GAAG,IAAI,eAAe,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC/C,MAAsC,EACtC,IAA+B,EAC/B,IAAmB;IAEnB,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7D,IACE,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;QAC/E,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;QACnC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EACxD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC3C,OAAO,MAAM,CAAC,SAAS,GAAG,GAAG,GAAG,eAAe,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACxC,QAAQ,CAAC,MAAM,CACb,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACpD,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAE1D,4DAA4D;YAC5D,wDAAwD;YACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5C,gBAAgB,EAAE,GAAG;gBACrB,YAAY,EAAE,IAAI,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YAClC,IACE,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBACjC,MAAM,CAAC,IAAI,KAAK,IAAI;gBACpB,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAC3C,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,iBAAiB;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;YAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBAC/C,gBAAgB,EAAE,GAAG;gBACrB,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,aAAa;gBACb,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,UAAU;oBAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE;oBACjD,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,KAAK,CAAC,CAAC,IAAI,+BAA+B,CAAC;oBAChD,OAAO,EAAE,+BAA+B,IAAI,CAAC,QAAQ,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG;gBACV,YAAY,EAAE,GAAG;gBACjB,aAAa;gBACb,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,qEAAqE;QACrE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Group.d.ts

@@ -0,0 +1,102 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import type { Providers } from "./Providers.ts";
+declare const GroupUnexpectedResponse_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "GroupUnexpectedResponse";
+} & Readonly<A>;
+export declare class GroupUnexpectedResponse extends GroupUnexpectedResponse_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+/**
+ * A Turso location code, e.g. `"aws-us-east-1"`. List the locations
+ * available to your organization with `turso db locations`.
+ */
+export type Location = "aws-ap-northeast-1" | "aws-ap-south-1" | "aws-ap-southeast-2" | "aws-ca-central-1" | "aws-eu-north-1" | "aws-eu-west-1" | "aws-sa-east-1" | "aws-us-east-1" | "aws-us-east-2" | "aws-us-west-2" | (string & {});
+export interface GroupProps {
+    /**
+     * Group name, unique within the organization. Lowercase letters,
+     * numbers, and dashes. If omitted, a unique name is generated from the
+     * stack, stage, and logical ID. Changing it replaces the group.
+     */
+    name?: string;
+    /**
+     * Primary location of the group. Every database in the group lives here.
+     * Changing it replaces the group (and every database in it).
+     * @default "aws-us-east-1"
+     */
+    location?: Location;
+    /**
+     * Additional replica locations. Reconciled in place by adding and
+     * removing locations. AWS-hosted groups do not support replication, so
+     * this only applies to organizations with legacy Fly-hosted groups.
+     */
+    replicas?: Location[];
+    /**
+     * SQLite extensions enabled for the group's databases: `"all"`, or a list
+     * of extension names. Set at creation; changing it replaces the group.
+     */
+    extensions?: "all" | string[];
+    /**
+     * Prevent the group (and its databases) from being deleted. While
+     * enabled, destroying or replacing the group fails; set it to `false`
+     * and deploy before deleting.
+     * @default false
+     */
+    deleteProtection?: boolean;
+}
+export interface GroupAttributes {
+    /** Group name. */
+    name: string;
+    /** Group UUID. */
+    uuid: string;
+    /** The organization slug that owns the group. */
+    organization: string;
+    /** Primary location of the group. */
+    location: string;
+    /** Every location the group runs in (primary first). */
+    locations: string[];
+    /** The libSQL server version the group's databases run. */
+    version: string;
+    /** Whether delete protection is enabled. */
+    deleteProtection: boolean;
+}
+export type Group = Resource<"Turso.Group", GroupProps, GroupAttributes, never, Providers>;
+/**
+ * A Turso group. Every Turso database belongs to one group, and the group
+ * decides where its databases run.
+ * @see https://docs.turso.tech/concepts#groups
+ *
+ * ### Creating a Group
+ * **Example:** Group in a single location
+ * ```typescript
+ * const group = yield* Turso.Group("Group", {
+ *   location: "aws-us-east-1",
+ * });
+ * ```
+ *
+ * **Example:** Protected group with all extensions enabled
+ * ```typescript
+ * const group = yield* Turso.Group("Group", {
+ *   name: "production",
+ *   location: "aws-eu-west-1",
+ *   extensions: "all",
+ *   deleteProtection: true,
+ * });
+ * ```
+ *
+ * ### Adding databases
+ * **Example:** Create a database in the group
+ * ```typescript
+ * const db = yield* Turso.Database("Db", { group: group.name });
+ * ```
+ *
+ * @resource
+ * @product Group
+ */
+export declare const Group: import("alchemy/Resource").ResourceClass<Group>;
+export declare const GroupProvider: () => import("effect/Layer").Layer<Provider.Provider<Group>, never, import("./Credentials.ts").Organization | import("alchemy/Stack").Stack | import("alchemy/Stage").Stage | turso.TursoOpContext>;
+export {};
+//# sourceMappingURL=Group.d.ts.map

package/lib/Group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Group.d.ts","sourceRoot":"","sources":["../src/Group.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAItD,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAI5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;;;;AAEhD,qBAAa,uBAAwB,SAAQ,6BAA4C;IACvF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAChB,oBAAoB,GACpB,gBAAgB,GAChB,oBAAoB,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,eAAe,GACf,eAAe,GACf,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;IAC9B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,KAAK,iDAAiC,CAAC;AAIpD,eAAO,MAAM,aAAa,qMAmJvB,CAAC"}