alchemy 2.0.0-beta.81 → 2.0.0-beta.82

package/lib/Turso/GroupToken.js

@@ -0,0 +1,83 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Effect from "effect/Effect";
+import * as Provider from "../Provider.js";
+import { Resource } from "../Resource.js";
+import { organization } from "./Credentials.js";
+import { diffSqlToken, isTokenCurrent, tokenExpiry, } from "./DatabaseToken.js";
+/**
+ * A token that lets an app run SQL on every database in a Turso
+ * {@link Group}, even databases created later. Useful when each customer
+ * has their own database.
+ *
+ * Like {@link DatabaseToken}, you can't cancel a single group token. Changing
+ * a prop creates a new token, but the old one keeps working until it expires.
+ * @see https://docs.turso.tech/api-reference/groups/create-token
+ *
+ * ### Creating a Token
+ * **Example:** Full-access token for every database in a group
+ * ```typescript
+ * const token = yield* Turso.GroupToken("Token", {
+ *   group: group.name,
+ * });
+ * ```
+ *
+ * **Example:** Read-only token that expires after a week
+ * ```typescript
+ * const token = yield* Turso.GroupToken("ReadOnly", {
+ *   group: group.name,
+ *   authorization: "read-only",
+ *   expiration: "7d",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Group
+ */
+export const GroupToken = Resource("Turso.GroupToken");
+export const GroupTokenProvider = () => Provider.effect(GroupToken, Effect.gen(function* () {
+    return {
+        stables: ["organization"],
+        diff: diffSqlToken,
+        reconcile: Effect.fn(function* ({ news, olds, output }) {
+            const org = output?.organization ?? (yield* organization);
+            // Observe — the token is bound to the group's UUID, so a group
+            // replaced under the same name invalidates it.
+            const { group } = yield* turso.getGroup({
+                organizationSlug: org,
+                groupName: news.group,
+            });
+            const groupId = group?.uuid ?? "";
+            if (output !== undefined &&
+                output.group === news.group &&
+                output.groupId === groupId &&
+                (yield* isTokenCurrent(output, olds, news))) {
+                return output;
+            }
+            // Ensure — mint.
+            const authorization = news.authorization ?? "full-access";
+            const { jwt } = yield* turso.createGroupToken({
+                organizationSlug: org,
+                groupName: news.group,
+                authorization,
+                expiration: news.expiration,
+                permissions: news.readAttach
+                    ? { read_attach: { databases: news.readAttach } }
+                    : undefined,
+            });
+            if (!jwt) {
+                return yield* Effect.fail(new Error(`Turso returned no token for group ${news.group}`));
+            }
+            return {
+                token: jwt,
+                organization: org,
+                authorization,
+                expiresAt: tokenExpiry(jwt),
+                group: news.group,
+                groupId,
+            };
+        }),
+        // Turso cannot revoke a single token; it simply stops being tracked.
+        delete: () => Effect.void,
+    };
+}));
+//# sourceMappingURL=GroupToken.js.map

package/lib/Turso/GroupToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupToken.js","sourceRoot":"","sources":["../../src/Turso/GroupToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,GAGZ,MAAM,oBAAoB,CAAC;AAuB5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAa,kBAAkB,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACpD,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAE1D,+DAA+D;YAC/D,+CAA+C;YAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACtC,gBAAgB,EAAE,GAAG;gBACrB,SAAS,EAAE,IAAI,CAAC,KAAK;aACtB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;YAClC,IACE,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;gBAC3B,MAAM,CAAC,OAAO,KAAK,OAAO;gBAC1B,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAC3C,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,iBAAiB;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;YAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAC5C,gBAAgB,EAAE,GAAG;gBACrB,SAAS,EAAE,IAAI,CAAC,KAAK;gBACrB,aAAa;gBACb,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,UAAU;oBAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE;oBACjD,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG;gBACV,YAAY,EAAE,GAAG;gBACjB,aAAa;gBACb,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO;aACR,CAAC;QACJ,CAAC,CAAC;QACF,qEAAqE;QACrE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Turso/Hrana.d.ts

@@ -0,0 +1,42 @@
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as Redacted from "effect/Redacted";
+import { type SqlExecutor } from "../SQL/Migrations/index.ts";
+declare const HranaError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Turso::HranaError";
+} & Readonly<A>;
+/**
+ * A minimal Hrana-over-HTTP client (`POST /v2/pipeline`) — the SQL wire
+ * protocol every Turso database speaks. Deploy-time work (migrations, SQL
+ * imports) uses it instead of `@libsql/client`, so the provider needs no
+ * driver and runs anywhere `HttpClient` does.
+ *
+ * @see https://github.com/tursodatabase/libsql/blob/main/docs/HRANA_3_SPEC.md
+ */
+export declare class HranaError extends HranaError_base<{
+    message: string;
+    code?: string;
+    cause?: unknown;
+}> {
+}
+/** Connection details for one Turso database. */
+export interface HranaConnection {
+    /** `https://<hostname>` of the database. */
+    url: string;
+    /** A database auth token (JWT). */
+    authToken: Redacted.Redacted<string>;
+}
+/** Execute one statement and return its rows as objects. */
+export declare const query: (connection: HranaConnection, sql: string, params?: ReadonlyArray<unknown>) => Effect.Effect<Array<Record<string, unknown>>, HranaError, HttpClient.HttpClient>;
+/**
+ * Execute statements atomically. Each entry may hold several
+ * `;`-separated statements (a whole migration file or seed script), so they
+ * run as one Hrana `sequence` wrapped in `BEGIN`/`COMMIT`. A failing
+ * statement stops the sequence before `COMMIT`, and closing the stream
+ * rolls the open transaction back.
+ */
+export declare const transaction: (connection: HranaConnection, statements: ReadonlyArray<string>) => Effect.Effect<void, HranaError, HttpClient.HttpClient>;
+/** Adapt a Turso database connection into the migration registry's executor. */
+export declare const makeMigrationExecutor: (connection: HranaConnection, client: HttpClient.HttpClient) => SqlExecutor;
+export {};
+//# sourceMappingURL=Hrana.d.ts.map

package/lib/Turso/Hrana.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Hrana.d.ts","sourceRoot":"","sources":["../../src/Turso/Hrana.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;;;;AAG9E;;;;;;;GAOG;AACH,qBAAa,UAAW,SAAQ,gBAAsC;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;CAAG;AAoEL,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACtC;AAyBD,4DAA4D;AAC5D,eAAO,MAAM,KAAK,eACJ,eAAe,OACtB,MAAM,WACF,aAAa,CAAC,OAAO,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAW9E,CAAC;AAEL;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,eACV,eAAe,cACf,aAAa,CAAC,MAAM,CAAC,KAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAYpD,CAAC;AAEL,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,eACpB,eAAe,UACnB,UAAU,CAAC,UAAU,KAC5B,WAgBF,CAAC"}

package/lib/Turso/Hrana.js

@@ -0,0 +1,105 @@
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/http/HttpClient";
+import * as HttpClientRequest from "effect/http/HttpClientRequest";
+import * as Redacted from "effect/Redacted";
+import { MigrationError } from "../SQL/Migrations/index.js";
+import { splitSqlStatements } from "../SQL/SqlFile.js";
+/**
+ * A minimal Hrana-over-HTTP client (`POST /v2/pipeline`) — the SQL wire
+ * protocol every Turso database speaks. Deploy-time work (migrations, SQL
+ * imports) uses it instead of `@libsql/client`, so the provider needs no
+ * driver and runs anywhere `HttpClient` does.
+ *
+ * @see https://github.com/tursodatabase/libsql/blob/main/docs/HRANA_3_SPEC.md
+ */
+export class HranaError extends Data.TaggedError("Turso::HranaError") {
+}
+const toHranaValue = (value) => {
+    if (value === null || value === undefined)
+        return { type: "null" };
+    if (typeof value === "bigint")
+        return { type: "integer", value: value.toString() };
+    if (typeof value === "number") {
+        return Number.isInteger(value)
+            ? { type: "integer", value: value.toString() }
+            : { type: "float", value };
+    }
+    if (typeof value === "boolean")
+        return { type: "integer", value: value ? "1" : "0" };
+    if (value instanceof Uint8Array) {
+        return { type: "blob", base64: Buffer.from(value).toString("base64") };
+    }
+    return { type: "text", value: String(value) };
+};
+const fromHranaValue = (value) => {
+    switch (value.type) {
+        case "null":
+            return null;
+        case "integer":
+            return Number(value.value);
+        case "float":
+            return value.value;
+        case "text":
+            return value.value;
+        case "blob":
+            return Buffer.from(value.base64, "base64");
+    }
+};
+const toRows = (result) => result.rows.map((row) => Object.fromEntries(result.cols.map((col, i) => [col.name ?? String(i), fromHranaValue(row[i])])));
+const pipeline = (connection, requests) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const response = yield* client
+        .execute(HttpClientRequest.post(`${connection.url.replace(/\/$/, "")}/v2/pipeline`).pipe(HttpClientRequest.bearerToken(Redacted.value(connection.authToken)), HttpClientRequest.bodyJsonUnsafe({ requests: [...requests, { type: "close" }] })))
+        .pipe(Effect.mapError((cause) => new HranaError({ message: String(cause), cause })));
+    if (response.status < 200 || response.status >= 300) {
+        const text = yield* response.text.pipe(Effect.orElseSucceed(() => ""));
+        return yield* new HranaError({
+            message: `Turso SQL request failed with HTTP ${response.status}: ${text}`,
+        });
+    }
+    const body = (yield* response.json.pipe(Effect.mapError((cause) => new HranaError({ message: String(cause), cause }))));
+    return body.results.slice(0, requests.length);
+});
+/** Execute one statement and return its rows as objects. */
+export const query = (connection, sql, params) => Effect.gen(function* () {
+    const stmt = { sql, args: (params ?? []).map(toHranaValue) };
+    const [result] = yield* pipeline(connection, [{ type: "execute", stmt }]);
+    if (result === undefined) {
+        return yield* new HranaError({ message: "Turso returned no result" });
+    }
+    if (result.type === "error") {
+        return yield* new HranaError({ message: result.error.message, code: result.error.code });
+    }
+    return toRows(result.response.result);
+});
+/**
+ * Execute statements atomically. Each entry may hold several
+ * `;`-separated statements (a whole migration file or seed script), so they
+ * run as one Hrana `sequence` wrapped in `BEGIN`/`COMMIT`. A failing
+ * statement stops the sequence before `COMMIT`, and closing the stream
+ * rolls the open transaction back.
+ */
+export const transaction = (connection, statements) => Effect.gen(function* () {
+    const body = statements.flatMap(splitSqlStatements);
+    if (body.length === 0)
+        return;
+    const sql = ["BEGIN", ...body.map((s) => s.replace(/;\s*$/, "")), "COMMIT"].join(";\n");
+    const [result] = yield* pipeline(connection, [{ type: "sequence", sql }]);
+    if (result === undefined) {
+        return yield* new HranaError({ message: "Turso returned no result" });
+    }
+    if (result.type === "error") {
+        return yield* new HranaError({ message: result.error.message, code: result.error.code });
+    }
+});
+/** Adapt a Turso database connection into the migration registry's executor. */
+export const makeMigrationExecutor = (connection, client) => {
+    const toMigrationError = (error) => new MigrationError({ message: `turso: ${error.message}`, cause: error });
+    return {
+        dialect: "sqlite",
+        query: (sql, params) => query(connection, sql, params).pipe(Effect.provideService(HttpClient.HttpClient, client), Effect.mapError(toMigrationError)),
+        batch: (statements) => transaction(connection, statements).pipe(Effect.provideService(HttpClient.HttpClient, client), Effect.mapError(toMigrationError)),
+    };
+};
+//# sourceMappingURL=Hrana.js.map

package/lib/Turso/Hrana.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Hrana.js","sourceRoot":"","sources":["../../src/Turso/Hrana.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,iBAAiB,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAoB,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,OAAO,UAAW,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAIlE;CAAG;AA+BL,MAAM,YAAY,GAAG,CAAC,KAAc,EAAc,EAAE;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACrF,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAiB,EAAW,EAAE;IACpD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,MAA0B,EAAkC,EAAE,CAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAC9E,CACF,CAAC;AAUJ,MAAM,QAAQ,GAAG,CAAC,UAA2B,EAAE,QAAgC,EAAE,EAAE,CACjF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;SAC3B,OAAO,CACN,iBAAiB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,CAC7E,iBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EACnE,iBAAiB,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CACjF,CACF;SACA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;YAC3B,OAAO,EAAE,sCAAsC,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACrC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAC9E,CAAgC,CAAC;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEL,4DAA4D;AAC5D,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,UAA2B,EAC3B,GAAW,EACX,MAA+B,EACmD,EAAE,CACpF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAc,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAA4B,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,UAA2B,EAC3B,UAAiC,EACuB,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,UAA2B,EAC3B,MAA6B,EAChB,EAAE;IACf,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAE,EAAE,CAC7C,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CACrB,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EACpD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAClC;QACH,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE,CACpB,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EACpD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAClC;KACJ,CAAC;AACJ,CAAC,CAAC"}

package/lib/Turso/ManageDatabases.d.ts

@@ -0,0 +1,73 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Binding from "../Binding.ts";
+import type { RuntimeContext } from "../RuntimeContext.ts";
+import type { ConnectClient } from "./Connect.ts";
+import type { DatabaseSeed } from "./Database.ts";
+import type { Group } from "./Group.ts";
+/** A database in the managed group. */
+export interface ManagedDatabase {
+    /** Database name. */
+    name: string;
+    /** Database UUID. */
+    dbId: string;
+    /** DNS hostname of the database. */
+    hostname: string;
+    /** libSQL URL (`libsql://<hostname>`). */
+    url: string;
+}
+export interface CreateManagedDatabaseOptions {
+    /** Seed the new database from an existing database (e.g. a template). */
+    seed?: DatabaseSeed;
+    /** Maximum size of the database, e.g. `"256mb"`. */
+    sizeLimit?: string;
+}
+export interface ManageDatabasesClient {
+    /** Create a database in the group. */
+    create(name: string, options?: CreateManagedDatabaseOptions): Effect.Effect<ManagedDatabase, turso.CreateDatabaseError, RuntimeContext>;
+    /** Look up a database by name; `undefined` when it doesn't exist. */
+    get(name: string): Effect.Effect<ManagedDatabase | undefined, turso.GetDatabaseError, RuntimeContext>;
+    /** List every database in the group. */
+    list(): Effect.Effect<ManagedDatabase[], turso.ListDatabasesError, RuntimeContext>;
+    /** Delete a database. Deleting a missing database succeeds. */
+    delete(name: string): Effect.Effect<void, turso.DeleteDatabaseError, RuntimeContext>;
+    /**
+     * libSQL connection accessors for a database in the group, authorized by
+     * a group-wide SQL token. Pass to `SQL.LibSQL` or `Drizzle.LibSQL`.
+     */
+    connect(name: string): ConnectClient;
+}
+/**
+ * Let a Worker create, list, delete, and query databases in one Turso
+ * {@link Group}. Use it to give each customer their own database.
+ *
+ * The Worker gets an {@link ApiToken} that only works on that group, and a
+ * {@link GroupToken} for running SQL. It can't touch databases in any other
+ * group, and your own Turso API token stays on your machine.
+ *
+ * ### Database per tenant
+ * **Example:** Create a tenant database on signup and query it
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const tenants = yield* Turso.ManageDatabases(Tenants);
+ *   return {
+ *     fetch: Effect.gen(function* () {
+ *       const db = yield* tenants.create("acme");
+ *       const sql = yield* SQL.LibSQL(tenants.connect(db.name));
+ *       yield* sql`CREATE TABLE IF NOT EXISTS notes (body TEXT)`;
+ *       return HttpServerResponse.text(db.url);
+ *     }),
+ *   };
+ * }).pipe(Effect.provide(Turso.ManageDatabasesHttp));
+ * ```
+ *
+ * @binding
+ * @product Group
+ */
+export interface ManageDatabases extends Binding.Service<ManageDatabases, "Turso.ManageDatabases", (group: Group) => Effect.Effect<ManageDatabasesClient>> {
+}
+export declare const ManageDatabases: ManageDatabases;
+/** Implementation over the Turso Platform API, usable from any Platform host. */
+export declare const ManageDatabasesHttp: Layer.Layer<ManageDatabases, never, never>;
+//# sourceMappingURL=ManageDatabases.d.ts.map

package/lib/Turso/ManageDatabases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManageDatabases.d.ts","sourceRoot":"","sources":["../../src/Turso/ManageDatabases.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGxC,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,4BAA4B;IAC3C,yEAAyE;IACzE,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,4BAA4B,GACrC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAC7E,qEAAqE;IACrE,GAAG,CACD,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,CAAC,eAAe,GAAG,SAAS,EAAE,KAAK,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACtF,wCAAwC;IACxC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACnF,+DAA+D;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IACrF;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,OAAO,CACtD,eAAe,EACf,uBAAuB,EACvB,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CACvD;CAAG;AAEJ,eAAO,MAAM,eAAe,iBAA4D,CAAC;AAEzF,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,4CAwG/B,CAAC"}

package/lib/Turso/ManageDatabases.js

@@ -0,0 +1,81 @@
+import { Credentials, DEFAULT_API_BASE_URL } from "@distilled.cloud/turso/Credentials";
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import * as Binding from "../Binding.js";
+import { ApiToken } from "./ApiToken.js";
+import { GroupToken } from "./GroupToken.js";
+export const ManageDatabases = Binding.Service("Turso.ManageDatabases");
+/** Implementation over the Turso Platform API, usable from any Platform host. */
+export const ManageDatabasesHttp = Layer.effect(ManageDatabases, Effect.gen(function* () {
+    const PlatformToken = yield* ApiToken;
+    const SqlToken = yield* GroupToken;
+    return Effect.fn(function* (group) {
+        const host = yield* Binding.Host;
+        const prefix = `${host?.LogicalId ?? ""}${group.LogicalId}`;
+        const apiToken = yield* PlatformToken(`${prefix}ManageToken`, {
+            group: group.name,
+            scopes: ["read", "db:create", "db:delete", "db:configure"],
+        });
+        const sqlToken = yield* SqlToken(`${prefix}SqlToken`, {
+            group: group.name,
+        });
+        const apiKey = yield* apiToken.token;
+        const authToken = yield* sqlToken.token;
+        const organization = yield* group.organization;
+        const groupName = yield* group.name;
+        const location = yield* group.location;
+        const authorize = (effect) => effect.pipe(Effect.provide(Layer.mergeAll(Layer.succeed(Credentials, Effect.map(apiKey, (key) => ({ apiKey: key, apiBaseUrl: DEFAULT_API_BASE_URL }))), FetchHttpClient.layer)));
+        const toManaged = (db) => ({
+            name: db.Name ?? "",
+            dbId: db.DbId ?? "",
+            hostname: db.Hostname ?? "",
+            url: `libsql://${db.Hostname}`,
+        });
+        const client = {
+            create: (name, options) => authorize(Effect.gen(function* () {
+                const { database } = yield* turso.createDatabase({
+                    organizationSlug: yield* organization,
+                    name,
+                    group: yield* groupName,
+                    seed: options?.seed,
+                    size_limit: options?.sizeLimit,
+                });
+                return toManaged(database ?? {});
+            })),
+            get: (name) => authorize(Effect.gen(function* () {
+                const { database } = yield* turso.getDatabase({
+                    organizationSlug: yield* organization,
+                    databaseName: name,
+                });
+                return database && database.group === (yield* groupName)
+                    ? toManaged(database)
+                    : undefined;
+            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)))),
+            list: () => authorize(Effect.gen(function* () {
+                const { databases } = yield* turso.listDatabases({
+                    organizationSlug: yield* organization,
+                    group: yield* groupName,
+                });
+                return (databases ?? []).map(toManaged);
+            })),
+            delete: (name) => authorize(Effect.gen(function* () {
+                yield* turso.deleteDatabase({
+                    organizationSlug: yield* organization,
+                    databaseName: name,
+                });
+            }).pipe(Effect.catchTag("NotFound", () => Effect.void))),
+            connect: (name) => ({
+                // Turso hostnames are `<database>-<organization>.<location>.turso.io`,
+                // so the URL is derived without a Platform API round-trip.
+                url: Effect.gen(function* () {
+                    return `libsql://${name}-${yield* organization}.${yield* location}.turso.io`;
+                }),
+                authToken,
+            }),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=ManageDatabases.js.map

package/lib/Turso/ManageDatabases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManageDatabases.js","sourceRoot":"","sources":["../../src/Turso/ManageDatabases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAE/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAIzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA2E7C,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAkB,uBAAuB,CAAC,CAAC;AAEzF,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAC7C,eAAe,EACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACnC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAY;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,GAAG,MAAM,aAAa,EAAE;YAC5D,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,UAAU,EAAE;YACpD,KAAK,EAAE,KAAK,CAAC,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;QAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAEvC,MAAM,SAAS,GAAG,CAChB,MAAgE,EAC3B,EAAE,CACvC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,QAAQ,CACZ,KAAK,CAAC,OAAO,CACX,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,CACjF,EACD,eAAe,CAAC,KAAK,CACtB,CACF,CACF,CAAC;QAEJ,MAAM,SAAS,GAAG,CAAC,EAIlB,EAAmB,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;YACnB,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;YACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE;YAC3B,GAAG,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,MAAM,GAA0B;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACxB,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;oBAC/C,gBAAgB,EAAE,KAAK,CAAC,CAAC,YAAY;oBACrC,IAAI;oBACJ,KAAK,EAAE,KAAK,CAAC,CAAC,SAAS;oBACvB,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,UAAU,EAAE,OAAO,EAAE,SAAS;iBAC/B,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC,CAAC,CACH;YACH,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;oBAC5C,gBAAgB,EAAE,KAAK,CAAC,CAAC,YAAY;oBACrC,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;gBACH,OAAO,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC;oBACtD,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;oBACrB,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CACtE;YACH,IAAI,EAAE,GAAG,EAAE,CACT,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;oBAC/C,gBAAgB,EAAE,KAAK,CAAC,CAAC,YAAY;oBACrC,KAAK,EAAE,KAAK,CAAC,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACH,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC,CAAC,CACH;YACH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,SAAS,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;oBAC1B,gBAAgB,EAAE,KAAK,CAAC,CAAC,YAAY;oBACrC,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACxD;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClB,uEAAuE;gBACvE,2DAA2D;gBAC3D,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACvB,OAAO,YAAY,IAAI,IAAI,KAAK,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,QAAQ,WAAW,CAAC;gBAC/E,CAAC,CAAC;gBACF,SAAS;aACV,CAAC;SACH,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/Turso/OrganizationInvite.d.ts

@@ -0,0 +1,46 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "../Provider.ts";
+import { Resource } from "../Resource.ts";
+import type { Providers } from "./Providers.ts";
+/** Role granted to an invited or added organization member. */
+export type MemberRole = "admin" | "member" | "viewer";
+export interface OrganizationInviteProps {
+    /** Email address to invite. Changing it replaces the invite. */
+    email: string;
+    /**
+     * Role the invitee receives on accepting.
+     * @default "member"
+     */
+    role?: MemberRole;
+}
+export interface OrganizationInviteAttributes {
+    /** The invited email address. */
+    email: string;
+    /** The organization slug the invite is for. */
+    organization: string;
+    /** Role the invitee receives on accepting. */
+    role: string;
+}
+export type OrganizationInvite = Resource<"Turso.OrganizationInvite", OrganizationInviteProps, OrganizationInviteAttributes, never, Providers>;
+/**
+ * An invitation for someone to join your Turso organization by email.
+ * Changing `role` re-sends the invite with the new role; destroying the
+ * resource withdraws a pending invite. Requires a team organization on a
+ * paid plan — the Starter plan rejects invites with `BadRequest`.
+ * @see https://docs.turso.tech/api-reference/organizations/invites/create
+ *
+ * ### Inviting Members
+ * **Example:** Invite a teammate as an admin
+ * ```typescript
+ * yield* Turso.OrganizationInvite("Alice", {
+ *   email: "alice@example.com",
+ *   role: "admin",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const OrganizationInvite: import("../Resource.ts").ResourceClass<OrganizationInvite>;
+export declare const OrganizationInviteProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationInvite>, never, import("./Credentials.ts").Organization | turso.TursoOpContext>;
+//# sourceMappingURL=OrganizationInvite.d.ts.map

package/lib/Turso/OrganizationInvite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationInvite.d.ts","sourceRoot":"","sources":["../../src/Turso/OrganizationInvite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAGtD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,+DAA+D;AAC/D,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEvD,MAAM,WAAW,uBAAuB;IACtC,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CACvC,0BAA0B,EAC1B,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB,4DAA2D,CAAC;AAE3F,eAAO,MAAM,0BAA0B,kJA0DpC,CAAC"}

package/lib/Turso/OrganizationInvite.js

@@ -0,0 +1,72 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../Diff.js";
+import * as Provider from "../Provider.js";
+import { Resource } from "../Resource.js";
+import { organization } from "./Credentials.js";
+/**
+ * An invitation for someone to join your Turso organization by email.
+ * Changing `role` re-sends the invite with the new role; destroying the
+ * resource withdraws a pending invite. Requires a team organization on a
+ * paid plan — the Starter plan rejects invites with `BadRequest`.
+ * @see https://docs.turso.tech/api-reference/organizations/invites/create
+ *
+ * ### Inviting Members
+ * **Example:** Invite a teammate as an admin
+ * ```typescript
+ * yield* Turso.OrganizationInvite("Alice", {
+ *   email: "alice@example.com",
+ *   role: "admin",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export const OrganizationInvite = Resource("Turso.OrganizationInvite");
+export const OrganizationInviteProvider = () => Provider.effect(OrganizationInvite, Effect.gen(function* () {
+    const observe = (org, email) => turso
+        .listOrganizationInvitesV2({ organizationSlug: org })
+        .pipe(Effect.map(({ invites }) => (invites ?? []).find((i) => i.email?.toLowerCase() === email.toLowerCase())));
+    const withdraw = (org, email) => turso.deleteOrganizationInviteByEmailV2({ organizationSlug: org, email }).pipe(Effect.asVoid, Effect.catchTag("NotFound", () => Effect.void));
+    return {
+        stables: ["email", "organization"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return undefined;
+            if (news.email.toLowerCase() !== olds?.email.toLowerCase()) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            const org = output?.organization ?? (yield* organization);
+            const invite = yield* observe(org, output?.email ?? olds.email);
+            if (!invite?.email)
+                return undefined;
+            return { email: invite.email, organization: org, role: invite.role ?? "member" };
+        }),
+        reconcile: Effect.fn(function* ({ news, output }) {
+            const org = output?.organization ?? (yield* organization);
+            const role = news.role ?? "member";
+            // Observe
+            const invite = yield* observe(org, news.email);
+            // Ensure / sync — invites have no update API, so a role change
+            // withdraws and re-sends.
+            if (invite?.role === role) {
+                return { email: invite.email ?? news.email, organization: org, role };
+            }
+            if (invite)
+                yield* withdraw(org, news.email);
+            const { invited } = yield* turso.inviteOrganizationMemberV2({
+                organizationSlug: org,
+                email: news.email,
+                role,
+            });
+            return { email: invited?.email ?? news.email, organization: org, role };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* withdraw(output.organization, output.email);
+        }),
+    };
+}));
+//# sourceMappingURL=OrganizationInvite.js.map

package/lib/Turso/OrganizationInvite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationInvite.js","sourceRoot":"","sources":["../../src/Turso/OrganizationInvite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAiChD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAqB,0BAA0B,CAAC,CAAC;AAE3F,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,QAAQ,CAAC,MAAM,CACb,kBAAkB,EAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,EAAE,CAC7C,KAAK;SACF,yBAAyB,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC;SACpD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACzB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAC5E,CACF,CAAC;IAEN,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,EAAE,CAC9C,KAAK,CAAC,iCAAiC,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAC5E,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,EAAE,KAAK;gBAAE,OAAO,SAAS,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;QACnF,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC9C,MAAM,GAAG,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;YAEnC,UAAU;YACV,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAE/C,+DAA+D;YAC/D,0BAA0B;YAC1B,IAAI,MAAM,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YACxE,CAAC;YACD,IAAI,MAAM;gBAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;gBAC1D,gBAAgB,EAAE,GAAG;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Turso/OrganizationMember.d.ts

@@ -0,0 +1,47 @@
+import * as turso from "@distilled.cloud/turso/turso";
+import * as Provider from "../Provider.ts";
+import { Resource } from "../Resource.ts";
+import type { MemberRole } from "./OrganizationInvite.ts";
+import type { Providers } from "./Providers.ts";
+export interface OrganizationMemberProps {
+    /** Username of an existing Turso user. Changing it replaces the member. */
+    username: string;
+    /**
+     * Role of the member in the organization.
+     * @default "member"
+     */
+    role?: MemberRole;
+}
+export interface OrganizationMemberAttributes {
+    /** Username of the member. */
+    username: string;
+    /** The organization slug. */
+    organization: string;
+    /** Role of the member. */
+    role: string;
+    /** Email of the member. */
+    email: string | undefined;
+}
+export type OrganizationMember = Resource<"Turso.OrganizationMember", OrganizationMemberProps, OrganizationMemberAttributes, never, Providers>;
+/**
+ * Adds an existing Turso user to your organization with a role, and keeps
+ * that role in sync. Destroying the resource removes the member. Use
+ * {@link OrganizationInvite} for people who don't have a Turso account
+ * yet. Requires a team organization on a paid plan.
+ * @see https://docs.turso.tech/api-reference/organizations/members/add
+ *
+ * ### Managing Members
+ * **Example:** Add a user as a viewer
+ * ```typescript
+ * yield* Turso.OrganizationMember("Bob", {
+ *   username: "bob",
+ *   role: "viewer",
+ * });
+ * ```
+ *
+ * @resource
+ * @product Organization
+ */
+export declare const OrganizationMember: import("../Resource.ts").ResourceClass<OrganizationMember>;
+export declare const OrganizationMemberProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationMember>, never, import("./Credentials.ts").Organization | turso.TursoOpContext>;
+//# sourceMappingURL=OrganizationMember.d.ts.map

package/lib/Turso/OrganizationMember.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationMember.d.ts","sourceRoot":"","sources":["../../src/Turso/OrganizationMember.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAGtD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CACvC,0BAA0B,EAC1B,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB,4DAA2D,CAAC;AAE3F,eAAO,MAAM,0BAA0B,kJA8DpC,CAAC"}