cdk-turso 0.3.3 → 0.4.0

package/.jsii

@@ -3992,7 +3992,7 @@
   },
   "name": "cdk-turso",
   "readme": {
-    "markdown": "# CDK Turso\n\nCDK constructs to create [Turso cloud](https://docs.turso.tech/turso-cloud) databases and manage auth tokens.\n\n## Installation\n\n```bash\nnpm install cdk-turso\n```\n\n## Usage\n\nFirst, create a `TursoProvider` with your API token:\n\n```typescript\nimport { Stack } from 'aws-cdk-lib';\nimport { StringParameter } from 'aws-cdk-lib/aws-ssm';\nimport { TursoProvider, TursoDatabase, TursoAuthToken } from 'cdk-turso';\n\nconst stack = new Stack();\n\n// SSM Parameter containing your Turso API token (must be a SecureString)\nconst apiToken = new StringParameter(stack, 'TursoApiToken', {\n  parameterName: '/turso/api-token',\n  stringValue: 'your-api-token',\n  type: ParameterType.SECURE_STRING,\n});\n\n// Create the provider (one per stack)\nconst provider = new TursoProvider(stack, 'TursoProvider', {\n  apiToken,\n});\n\nconst database = new TursoDatabase(stack, 'Database', {\n  provider,\n  databaseName: 'my-database',\n  group: 'group-name',\n  organizationSlug: 'my-org',\n});\n\n// Access database attributes\ndatabase.dbId;      // Database ID\ndatabase.hostname;  // Database hostname (e.g., my-database-my-org.turso.io)\ndatabase.databaseName;  // Database name\n```\n\n### Auth Token\n\nGenerate a database auth token and store it as a SecureString in SSM Parameter Store:\n\n```typescript\nconst authToken = new TursoAuthToken(stack, 'AuthToken', {\n  provider,\n  databaseName: database.databaseName,\n  organizationSlug: 'my-org',\n  parameterName: '/turso/db-token',\n  expiration: '2w',          // optional, default: 'never'\n  authorization: 'read-only', // optional, default: 'full-access'\n});\n\n// The SSM parameter name where the JWT is stored\nauthToken.parameterName;\n```\n\n## API\n\n### TursoProviderProps\n\n| Prop | Type | Required | Description |\n|------|------|----------|-------------|\n| `apiToken` | `ssm.IParameter` | Yes | SSM Parameter containing the Turso platform API token (must be SecureString) |\n| `logGroup` | `ILogGroup` | No | Optional CloudWatch log group for the Lambda handler |\n\n### TursoProvider\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `handler` | `Function` | The Lambda function backing all Turso custom resources (for attaching IAM permissions) |\n| `serviceToken` | `string` | The CDK custom-resource provider service token |\n\n### TursoDatabaseProps\n\n| Prop | Type | Required | Description |\n|------|------|----------|-------------|\n| `provider` | `TursoProvider` | Yes | The Turso provider to use for this database |\n| `databaseName` | `string` | Yes | Database name (lowercase, numbers, dashes only, max 64 chars) |\n| `group` | `string` | Yes | Turso group name (must already exist) |\n| `organizationSlug` | `string` | Yes | Organization slug |\n| `sizeLimit` | `string` | No | Size limit (e.g., '256mb') |\n| `seed` | `TursoDatabaseSeed` | No | Database seed configuration |\n| `encryption` | `TursoDatabaseEncryption` | No | Encryption configuration |\n\n### TursoDatabaseSeed\n\n```typescript\ninterface TursoDatabaseSeed {\n  readonly type: string;      // Seed type (e.g., 'schema')\n  readonly name: string;       // Seed name\n  readonly timestamp?: string;  // Optional timestamp\n}\n```\n\n### TursoDatabaseEncryption\n\n```typescript\ninterface TursoDatabaseEncryption {\n  readonly encryptionKey: string;    // KMS key ARN\n  readonly encryptionCipher: string; // Cipher type (e.g., 'AES')\n}\n```\n\n### TursoDatabase\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `dbId` | `string` | Turso database ID |\n| `hostname` | `string` | DNS hostname (e.g., `my-database-my-org.turso.io`) for libSQL/HTTP connections |\n| `databaseName` | `string` | Database name |\n\n### TursoAuthTokenProps\n\n| Prop | Type | Required | Description |\n|------|------|----------|-------------|\n| `provider` | `TursoProvider` | Yes | The Turso provider to use for this auth token |\n| `databaseName` | `string` | Yes | The name of the Turso database to create an auth token for |\n| `organizationSlug` | `string` | Yes | The Turso organization slug that owns the database |\n| `parameterName` | `string` | Yes | SSM parameter name where the generated JWT will be stored as a SecureString |\n| `expiration` | `string` | No | Token expiry (e.g., `'2w'`, `'1d30m'`). Default: `'never'` |\n| `authorization` | `string` | No | `'full-access'` or `'read-only'`. Default: `'full-access'` |\n\n### TursoAuthToken\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `parameterName` | `string` | The SSM parameter name where the auth token is stored |\n\n## Requirements\n\n- Node.js 24.x runtime for the Lambda handler\n- The Lambda handler requires the AWS SDK for JavaScript v3 (pre-installed in Lambda runtime)\n"
+    "markdown": "# CDK Turso\n\nCDK constructs to create [Turso cloud](https://docs.turso.tech/turso-cloud) databases and manage auth tokens.\n\n## Installation\n\n```bash\nnpm install cdk-turso\n```\n\n## Usage\n\nCreate a `TursoProvider` with your API token:\n\n```typescript\nimport { RemovalPolicy, Stack } from 'aws-cdk-lib';\nimport { ParameterType, StringParameter } from 'aws-cdk-lib/aws-ssm';\nimport { TursoProvider, TursoDatabase, TursoAuthToken } from 'cdk-turso';\n\nconst stack = new Stack();\n\n// SSM Parameter containing your Turso API token (must be a SecureString)\nconst apiToken = new StringParameter(stack, 'TursoApiToken', {\n  parameterName: '/turso/api-token',\n  stringValue: 'your-api-token',\n  type: ParameterType.SECURE_STRING,\n});\n\n// Create the provider (one per stack)\nconst provider = new TursoProvider(stack, 'TursoProvider', {\n  apiToken,\n});\n\nconst database = new TursoDatabase(stack, 'Database', {\n  provider,\n  databaseName: 'my-database',\n  group: 'group-name',\n  organizationSlug: 'my-org',\n  adopt: true, // optional: adopt existing database if it already exists\n  removalPolicy: RemovalPolicy.RETAIN, // optional: keep DB on stack delete\n});\n\n// Access database attributes\ndatabase.dbId;      // Database ID\ndatabase.hostname;  // Database hostname (e.g., my-database-my-org.turso.io)\ndatabase.databaseName;  // Database name\n```\n\nIf you run a shared provider in another stack, import it by service token:\n\n```typescript\nconst provider = TursoProvider.fromServiceToken(\n  stack,\n  'TursoProvider',\n  'arn:aws:lambda:us-east-1:123456789012:function:shared-turso-provider',\n);\n```\n\n### Auth Token\n\nGenerate a database auth token and store it as a SecureString in SSM Parameter Store:\n\n```typescript\nconst authToken = new TursoAuthToken(stack, 'AuthToken', {\n  provider,\n  databaseName: database.databaseName,\n  organizationSlug: 'my-org',\n  parameterName: '/turso/db-token',\n  expiration: '2w',          // optional, default: 'never'\n  authorization: 'read-only', // optional, default: 'full-access'\n  removalPolicy: RemovalPolicy.RETAIN, // optional: keep SSM parameter\n});\n\n// The SSM parameter name where the JWT is stored\nauthToken.parameterName;\n```\n\n## API\n\n### TursoProviderProps\n\n| Prop | Type | Required | Description |\n|------|------|----------|-------------|\n| `apiToken` | `ssm.IParameter` | Yes | SSM Parameter containing the Turso platform API token (must be SecureString) |\n| `logGroup` | `ILogGroup` | No | Optional CloudWatch log group for the Lambda handler |\n\n### TursoProvider\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `handler` | `Function` | The Lambda function backing all Turso custom resources (for attaching IAM permissions) |\n| `serviceToken` | `string` | The CDK custom-resource provider service token |\n\nStatic method:\n\n| Method | Returns | Description |\n|--------|---------|-------------|\n| `fromServiceToken(scope, id, serviceToken)` | `ITursoProvider` | Imports an existing Turso custom-resource provider |\n\n### ITursoProvider\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `serviceToken` | `string` | The CDK custom-resource provider service token |\n\n### TursoDatabaseProps\n\n| Prop | Type | Required | Description |\n|------|------|----------|-------------|\n| `provider` | `ITursoProvider` | Yes | The Turso provider to use for this database |\n| `databaseName` | `string` | Yes | Database name (lowercase, numbers, dashes only, max 64 chars) |\n| `group` | `string` | Yes | Turso group name (must already exist) |\n| `organizationSlug` | `string` | Yes | Organization slug |\n| `sizeLimit` | `string` | No | Size limit (e.g., '256mb') |\n| `seed` | `TursoDatabaseSeed` | No | Database seed configuration |\n| `encryption` | `TursoDatabaseEncryption` | No | Encryption configuration |\n| `adopt` | `boolean` | No | On create, adopt an existing database when create returns \"already exists\" |\n| `removalPolicy` | `RemovalPolicy` | No | Custom resource removal policy (for example `RemovalPolicy.RETAIN`) |\n\n### TursoDatabaseSeed\n\n```typescript\ninterface TursoDatabaseSeed {\n  readonly type: string;      // Seed type (e.g., 'schema')\n  readonly name: string;       // Seed name\n  readonly timestamp?: string;  // Optional timestamp\n}\n```\n\n### TursoDatabaseEncryption\n\n```typescript\ninterface TursoDatabaseEncryption {\n  readonly encryptionKey: string;    // KMS key ARN\n  readonly encryptionCipher: string; // Cipher type (e.g., 'AES')\n}\n```\n\n### TursoDatabase\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `dbId` | `string` | Turso database ID |\n| `hostname` | `string` | DNS hostname (e.g., `my-database-my-org.turso.io`) for libSQL/HTTP connections |\n| `databaseName` | `string` | Database name |\n\n### TursoAuthTokenProps\n\n| Prop | Type | Required | Description |\n|------|------|----------|-------------|\n| `provider` | `ITursoProvider` | Yes | The Turso provider to use for this auth token |\n| `databaseName` | `string` | Yes | The name of the Turso database to create an auth token for |\n| `organizationSlug` | `string` | Yes | The Turso organization slug that owns the database |\n| `parameterName` | `string` | Yes | SSM parameter name where the generated JWT will be stored as a SecureString |\n| `expiration` | `string` | No | Token expiry (e.g., `'2w'`, `'1d30m'`). Default: `'never'` |\n| `authorization` | `string` | No | `'full-access'` or `'read-only'`. Default: `'full-access'` |\n| `removalPolicy` | `RemovalPolicy` | No | Custom resource removal policy (for example `RemovalPolicy.RETAIN`) |\n\n### TursoAuthToken\n\n| Attribute | Type | Description |\n|-----------|------|-------------|\n| `parameterName` | `string` | The SSM parameter name where the auth token is stored |\n\n## Requirements\n\n- Node.js 24.x runtime for the Lambda handler\n- The Lambda handler requires the AWS SDK for JavaScript v3 (pre-installed in Lambda runtime)\n"
   },
   "repository": {
     "type": "git",
@@ -4005,6 +4005,39 @@
     }
   },
   "types": {
+    "cdk-turso.ITursoProvider": {
+      "assembly": "cdk-turso",
+      "docs": {
+        "stability": "stable",
+        "summary": "Shared Turso custom-resource provider contract."
+      },
+      "fqn": "cdk-turso.ITursoProvider",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/turso-provider.ts",
+        "line": 12
+      },
+      "name": "ITursoProvider",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The CDK custom-resource provider service token."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/turso-provider.ts",
+            "line": 16
+          },
+          "name": "serviceToken",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/turso-provider:ITursoProvider"
+    },
     "cdk-turso.TursoAuthToken": {
       "assembly": "cdk-turso",
       "base": "constructs.Construct",
@@ -4018,7 +4051,7 @@
         },
         "locationInModule": {
           "filename": "src/turso-auth-token.ts",
-          "line": 46
+          "line": 53
         },
         "parameters": [
           {
@@ -4044,7 +4077,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/turso-auth-token.ts",
-        "line": 40
+        "line": 47
       },
       "name": "TursoAuthToken",
       "properties": [
@@ -4056,7 +4089,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-auth-token.ts",
-            "line": 44
+            "line": 51
           },
           "name": "parameterName",
           "type": {
@@ -4140,7 +4173,7 @@
           },
           "name": "provider",
           "type": {
-            "fqn": "cdk-turso.TursoProvider"
+            "fqn": "cdk-turso.ITursoProvider"
           }
         },
         {
@@ -4178,6 +4211,24 @@
           "type": {
             "primitive": "string"
           }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Set to `RemovalPolicy.RETAIN` to keep the SSM parameter on stack\ndeletion.",
+            "stability": "stable",
+            "summary": "Removal policy for the underlying custom resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/turso-auth-token.ts",
+            "line": 44
+          },
+          "name": "removalPolicy",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.RemovalPolicy"
+          }
         }
       ],
       "symbolId": "src/turso-auth-token:TursoAuthTokenProps"
@@ -4195,7 +4246,7 @@
         },
         "locationInModule": {
           "filename": "src/turso-database.ts",
-          "line": 35
+          "line": 52
         },
         "parameters": [
           {
@@ -4221,7 +4272,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/turso-database.ts",
-        "line": 26
+        "line": 43
       },
       "name": "TursoDatabase",
       "properties": [
@@ -4232,7 +4283,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-database.ts",
-            "line": 33
+            "line": 50
           },
           "name": "databaseName",
           "type": {
@@ -4246,7 +4297,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-database.ts",
-            "line": 27
+            "line": 44
           },
           "name": "dbId",
           "type": {
@@ -4261,7 +4312,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-database.ts",
-            "line": 32
+            "line": 49
           },
           "name": "hostname",
           "type": {
@@ -4389,7 +4440,26 @@
           },
           "name": "provider",
           "type": {
-            "fqn": "cdk-turso.TursoProvider"
+            "fqn": "cdk-turso.ITursoProvider"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false",
+            "remarks": "This flag is only used during Create requests.",
+            "stability": "stable",
+            "summary": "If true, the provider will adopt an existing Turso database when creation reports that the database already exists."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/turso-database.ts",
+            "line": 33
+          },
+          "name": "adopt",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
           }
         },
         {
@@ -4408,6 +4478,24 @@
             "fqn": "cdk-turso.TursoDatabaseEncryption"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Set to `RemovalPolicy.RETAIN` to keep the Turso database on stack\ndeletion.",
+            "stability": "stable",
+            "summary": "Removal policy for the underlying custom resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/turso-database.ts",
+            "line": 40
+          },
+          "name": "removalPolicy",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.RemovalPolicy"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4521,7 +4609,7 @@
         },
         "locationInModule": {
           "filename": "src/turso-provider.ts",
-          "line": 41
+          "line": 72
         },
         "parameters": [
           {
@@ -4544,11 +4632,53 @@
           }
         ]
       },
+      "interfaces": [
+        "cdk-turso.ITursoProvider"
+      ],
       "kind": "class",
       "locationInModule": {
         "filename": "src/turso-provider.ts",
-        "line": 28
+        "line": 48
       },
+      "methods": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Imports an existing Turso provider by service token."
+          },
+          "locationInModule": {
+            "filename": "src/turso-provider.ts",
+            "line": 52
+          },
+          "name": "fromServiceToken",
+          "parameters": [
+            {
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "serviceToken",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-turso.ITursoProvider"
+            }
+          },
+          "static": true
+        }
+      ],
       "name": "TursoProvider",
       "properties": [
         {
@@ -4560,7 +4690,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-provider.ts",
-            "line": 34
+            "line": 65
           },
           "name": "handler",
           "type": {
@@ -4575,9 +4705,10 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-provider.ts",
-            "line": 39
+            "line": 70
           },
           "name": "serviceToken",
+          "overrides": "cdk-turso.ITursoProvider",
           "type": {
             "primitive": "string"
           }
@@ -4595,7 +4726,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/turso-provider.ts",
-        "line": 9
+        "line": 29
       },
       "name": "TursoProviderProps",
       "properties": [
@@ -4608,7 +4739,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-provider.ts",
-            "line": 14
+            "line": 34
           },
           "name": "apiToken",
           "type": {
@@ -4625,7 +4756,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/turso-provider.ts",
-            "line": 20
+            "line": 40
           },
           "name": "logGroup",
           "optional": true,
@@ -4637,6 +4768,6 @@
       "symbolId": "src/turso-provider:TursoProviderProps"
     }
   },
-  "version": "0.3.3",
-  "fingerprint": "N1aiv7fpRdWTVCEl9bEXfksK0Ax9YYQBzrVxaPCT0SM="
+  "version": "0.4.0",
+  "fingerprint": "IS+Survie1liGWodZx7DEmCYC9BiVWorwKnEdEgMSYY="
 }

package/AGENTS.md

@@ -1,146 +1,149 @@
 # AGENTS.md
-
-Guidance for AI coding agents working in this repository.
+Guidance for agentic coding assistants working in this repository.
 
 ## Project Overview
-
-CDK construct library for provisioning Turso cloud databases. Built with projen's `AwsCdkConstructLibrary` template, using JSII for multi-language support. Source must remain JSII-compatible.
-
-## Commands
-
+`cdk-turso` is a JSII-based AWS CDK construct library for Turso resources,
+implemented through Lambda-backed CloudFormation custom resources.
+- Main constructs: `TursoProvider`, `TursoDatabase`, `TursoAuthToken`
+- Language: TypeScript with strict settings
+- Build system: projen (`AwsCdkConstructLibrary`)
+- Lint/format: Biome (ESLint is disabled)
+
+## Build, Lint, and Test Commands
+Use npm/projen tasks from the repo root.
 ```bash
-npm run build          # Full pipeline: compile → test → package
-npm run compile        # jsii compiler (TypeScript → JS + .d.ts) + esbuild handler bundle
-npm run test           # Jest (with coverage) + Biome lint
-npm run test:watch     # Jest in watch mode
-npm run watch          # jsii in watch mode (for development)
-npx projen biome       # Run Biome formatter + linter with --fix
-npx projen             # Regenerate project files from .projenrc.ts
+npm run build          # compile -> docgen -> test -> package
+npm run compile        # jsii compile + esbuild bundle
+npm run test           # jest + biome
+npm run test:watch     # jest watch mode
+npm run watch          # jsii watch mode
+npx projen biome       # biome check/format with --write
+npx projen             # regenerate projen-managed files
 ```
 
-Run a single test file:
+### Single-test execution (important)
+Run one test file:
 ```bash
 npx jest --passWithNoTests test/handler.test.ts
 ```
-
-## Projen: Critical Rule
-
-Most config files are **generated by projen** and must NOT be edited directly. This includes `package.json`, `biome.jsonc`, `tsconfig.json`, `tsconfig.dev.json`, GitHub workflows, `.mergify.yml`, and anything marked `~~ Generated by projen`. To change project configuration, edit `.projenrc.ts` and run `npx projen`.
-
-## Architecture
-
+Run one named test:
+```bash
+npx jest --passWithNoTests test/handler.test.ts -t "create with adopt"
+```
+Run construct tests only:
+```bash
+npx jest --passWithNoTests test/turso-database.test.ts
 ```
+
+## Projen and Generated Files
+Do not manually edit generated files; edit `.projenrc.ts`, then run
+`npx projen`.
+Common generated files include:
+- `package.json`
+- `biome.jsonc`
+- `tsconfig.json`
+- `tsconfig.dev.json`
+- `.github/workflows/*`
+- `.mergify.yml`
+- files with `~~ Generated by projen`
+`API.md` is generated by `jsii-docgen` during `npm run build`.
+
+## Repository Layout
+```text
 src/
-  index.ts                 # Barrel exports — all public symbols re-exported here
-  turso-database.ts        # Main CDK construct for Turso databases
-  turso-auth-token.ts      # Auth token generation construct
-  turso-provider.ts        # Shared CloudFormation custom resource provider
-  handler/index.ts         # Lambda handler for custom resources (bundled via esbuild)
+  index.ts                 # Public exports barrel
+  turso-provider.ts        # Shared provider (Lambda + Provider)
+  turso-database.ts        # Database construct
+  turso-auth-token.ts      # Auth token construct
+  handler/index.ts         # Lambda custom-resource handler
 test/
-  turso-database.test.ts   # Construct unit tests (CDK assertions)
-  turso-auth-token.test.ts # Auth token construct tests
-  handler.test.ts          # Handler unit tests (Jest mocks)
-lib/                       # Compiled output (generated, gitignored)
-dist/                      # Distribution packages (generated, gitignored)
+  turso-database.test.ts   # CDK assertion tests
+  turso-auth-token.test.ts # CDK assertion tests
+  handler.test.ts          # Handler unit tests with mocks
+lib/                       # Generated compile output
+dist/                      # Generated JSII packaging output
 ```
 
-- Peer dependencies: `aws-cdk-lib` (^2.1.0), `constructs` (^10.0.5)
-- Handler bundled separately: `esbuild src/handler/index.ts --bundle --platform=node --target=node24 --outfile=lib/handler/index.js --external:@aws-sdk/*`
-- Pre-commit hook (husky): runs `npx projen biome && npx projen build`
-
-## Code Style (enforced by Biome)
-
-Biome is the sole linter and formatter. ESLint is disabled.
-
-### Formatting
-- **2-space** indentation (spaces, not tabs)
-- **80-char** max line width
-- **Double quotes** for strings: `"hello"` not `'hello'`
-- **Semicolons as needed** — omit them; Biome inserts only where syntactically required
-- **Trailing commas** on all multi-line constructs (arrays, objects, parameters)
-- **Arrow parentheses**: always, even for single parameter `(x) => x`
-- **Bracket spacing**: `{ a }` not `{a}`
-
-### Linting Rules
+## Dependency and Runtime Notes
+- Peer deps: `aws-cdk-lib` `^2.201.0`, `constructs` `^10.3.0`
+- Lambda target/runtime: Node.js 24.x
+- Handler bundle command is configured in `.projenrc.ts`
+- Pre-commit hook runs: `npx projen biome && npx projen build`
+
+## Formatting and Linting (Biome)
+Follow the enforced formatting profile:
+- 2-space indentation, no tabs
+- line width 80
+- double quotes
+- semicolons only when required
+- trailing commas in multiline literals/params
+- always parenthesize arrow function args: `(x) => x`
+- bracket spacing: `{ a }`
+Important lint rules:
 - `noUnusedImports`: error
 - `noUnusedVariables`: error
 - `noConfusingVoidType`: error
-- `noNonNullAssertion`: allowed in `**/*.test.ts` only
-- `useNodejsImportProtocol`: off — use `"path"` not `"node:path"`
+- `noNonNullAssertion`: off only in `**/*.test.ts`
+- `useNodejsImportProtocol`: off (`"path"` over `"node:path"`)
 
 ## Import Conventions
-
-### Ordering
-1. AWS CDK / framework imports (`aws-cdk-lib`, `aws-cdk-lib/*`, `constructs`)
-2. External packages (`@aws-sdk/client-ssm`)
-3. Node.js builtins (`import * as path from "path"`)
-4. Relative imports (`"./turso-database"`, `"../src"`)
-
-### Style
-- **Named imports** with destructuring: `import { CustomResource, Duration } from "aws-cdk-lib"`
-- **Namespace imports** for Node builtins: `import * as path from "path"`
-- **`type` keyword** for type-only imports: `import type { IParameter } from "aws-cdk-lib/aws-ssm"`
-- **Inline `type`** in mixed imports: `import { type SomeType, someValue } from "..."`
-- Use deep CDK imports: `aws-cdk-lib/aws-lambda`, `aws-cdk-lib/aws-ssm`, `aws-cdk-lib/custom-resources`
-- Barrel exports in `src/index.ts` are **alphabetically sorted**
+Order imports in this sequence:
+1. CDK/framework (`aws-cdk-lib`, `aws-cdk-lib/*`, `constructs`)
+2. External packages (`@aws-sdk/client-ssm`, etc.)
+3. Node builtins (`import * as path from "path"`)
+4. Relative imports (`"./..."`, `"../..."`)
+Style rules:
+- Prefer named imports
+- Use namespace imports for Node builtins
+- Use `import type` for type-only imports
+- Use inline `type` specifiers in mixed imports when needed
+- Keep `src/index.ts` exports alphabetically ordered
+
+## TypeScript and API Design
+- Keep code JSII-compatible (public API types should be simple/stable)
+- Respect `strict` mode and avoid `any`
+- Avoid unused locals/parameters and implicit returns
+- Use explicit, narrow interfaces for custom resource properties
+- Prefer `readonly` on interface and public class properties
 
 ## Naming Conventions
-
-| Category | Convention | Example |
-|---|---|---|
-| Source files | kebab-case `.ts` | `turso-database.ts` |
-| Test files | `{source-name}.test.ts` | `handler.test.ts` |
-| Classes | PascalCase | `TursoDatabase` |
-| Props interfaces | `{ClassName}Props` | `TursoDatabaseProps` |
-| Sub-config interfaces | `{ClassName}{Feature}` | `TursoDatabaseEncryption` |
-| Interface properties | `readonly`, camelCase | `readonly databaseName: string` |
-| Public class properties | `public readonly`, camelCase | `public readonly dbId: string` |
-| Functions | camelCase | `handler`, `getApiToken` |
-| CDK resource IDs | PascalCase string | `"Handler"`, `"Provider"` |
-| CF resource properties | PascalCase string | `"DatabaseName"`, `"Group"` |
-| Environment variables | SCREAMING_SNAKE_CASE | `TURSO_API_TOKEN_PARAMETER_NAME` |
-
-## TypeScript
-
-- `strict: true` — all strict checks enabled (`noImplicitAny`, `strictNullChecks`, `strictPropertyInitialization`, etc.)
-- `noUnusedLocals: true`, `noUnusedParameters: true`, `noImplicitReturns: true`
-- `noFallthroughCasesInSwitch: true`
-- Target: `ES2020`, Module: `CommonJS`
-
-## CDK Construct Patterns
-
-- Extend `Construct` from `constructs`, not from `aws-cdk-lib`
-- Constructor signature: `constructor(scope: Construct, id: string, props: XxxProps)`
-- Call `super(scope, id)` first
-- Validate inputs in constructor with `throw new Error(...)` for bad values (regex checks, length limits)
-- Custom resource pattern: Lambda Function → Provider → CustomResource
-- Expose outputs as `public readonly` properties via `cr.getAttString("AttrName")`
-
-## Error Handling
-
-- **Constructor validation**: throw `new Error(...)` with clear messages for invalid props
-- **Handler errors**: include HTTP status and response text: `throw new Error(\`Failed to create: ${response.status} ${errorText}\`)`
-- **Environment checks**: throw early if required env vars are missing
-- **Idempotent deletes**: tolerate 404 on delete operations
-- **Graceful handling**: skip delete for unknown/failed physical resource IDs
-
-## Testing Patterns
-
-- Use `describe("ClassName", () => { ... })` as outer wrapper
-- Use **`test()`** (not `it()`) for individual cases
-- Test names are descriptive sentences: `"creates custom resource with correct properties"`
-
-### Construct Tests
-- Helper function `createStack()` at top of describe block for shared setup
-- CDK assertions: `Template.fromStack(stack)`, `template.hasResource()`, `template.hasResourceProperties()`
-- Partial matching: `Match.arrayWith([...])`, `Match.objectLike({...})`
-- Validation tests: `expect(() => { ... }).toThrow("exact message")`
-- Import constructs from barrel: `import { TursoDatabase } from "../src"`
-
-### Handler Tests
-- `jest.mock()` at file top level, before imports
-- Mock `global.fetch` per test: `global.fetch = jest.fn()`
-- `beforeEach`: clear mocks, set env vars, configure default mock responses
-- `afterEach`: clean up env vars
-- Async error assertions: `await expect(handler(...)).rejects.toThrow("message")`
-- Argument checking: `expect(mockFetch).toHaveBeenCalledWith(url, expect.objectContaining({...}))`
+- Files: kebab-case (`turso-database.ts`)
+- Tests: `<source>.test.ts`
+- Classes: PascalCase
+- Props interfaces: `<ClassName>Props`
+- Function/method names: camelCase
+- CDK logical IDs: PascalCase strings (`"Handler"`, `"Provider"`)
+- Custom resource payload keys: PascalCase (`DatabaseName`, `OrganizationSlug`)
+- Env vars: SCREAMING_SNAKE_CASE
+
+## Construct Patterns
+- Extend `Construct` from `constructs`
+- Constructor pattern: `(scope, id, props)` and `super(scope, id)` first
+- Validate inputs early with clear `Error` messages
+- Pattern is `Lambda -> Provider -> CustomResource`
+- Expose CR outputs using `cr.getAttString(...)`
+- Forward `removalPolicy` with `cr.applyRemovalPolicy(...)`
+- `TursoDatabase.adopt` is create-only behavior; updates ignore it
+
+## Error Handling Guidelines
+- Fail fast if required environment variables are missing
+- Include status code and response text for API failures
+- Keep delete operations idempotent (404 is tolerated where intended)
+- Skip destructive delete work for unknown/failed physical IDs
+- In adopt flows, only suppress expected "already exists" create errors
+
+## Testing Guidelines
+- Use `describe(...)` and `test(...)` (not `it(...)`)
+- Use behavior-focused test names
+- Keep construct tests focused on synthesized template assertions
+- Use `Template.fromStack`, `hasResource`, `hasResourceProperties`
+- Use `Match.objectLike` / `Match.arrayWith` for partial assertions
+- In handler tests, mock `global.fetch` per scenario
+- Keep `jest.mock(...)` declarations at top-level before imports
+- Use `await expect(...).rejects.toThrow(...)` for async error checks
+
+## Agent Checklist Before Finishing
+- Run focused tests for changed behavior first
+- Run `npm run test`
+- Run `npm run build` when API surface/types/docs changed
+- Regenerate files only through projen workflows

package/API.md

@@ -278,6 +278,8 @@ DNS hostname for the database (e.g., `my-db-my-org.turso.io`). Use with libSQL o
 
 ### TursoProvider <a name="TursoProvider" id="cdk-turso.TursoProvider"></a>
 
+- *Implements:* <a href="#cdk-turso.ITursoProvider">ITursoProvider</a>
+
 Shared Lambda + CloudFormation custom-resource provider for all Turso resources.
 
 Create one per stack and pass it to every
@@ -338,6 +340,7 @@ Returns a string representation of this construct.
 | **Name** | **Description** |
 | --- | --- |
 | <code><a href="#cdk-turso.TursoProvider.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+| <code><a href="#cdk-turso.TursoProvider.fromServiceToken">fromServiceToken</a></code> | Imports an existing Turso provider by service token. |
 
 ---
 
@@ -373,6 +376,34 @@ Any object.
 
 ---
 
+##### `fromServiceToken` <a name="fromServiceToken" id="cdk-turso.TursoProvider.fromServiceToken"></a>
+
+```typescript
+import { TursoProvider } from 'cdk-turso'
+
+TursoProvider.fromServiceToken(scope: Construct, id: string, serviceToken: string)
+```
+
+Imports an existing Turso provider by service token.
+
+###### `scope`<sup>Required</sup> <a name="scope" id="cdk-turso.TursoProvider.fromServiceToken.parameter.scope"></a>
+
+- *Type:* constructs.Construct
+
+---
+
+###### `id`<sup>Required</sup> <a name="id" id="cdk-turso.TursoProvider.fromServiceToken.parameter.id"></a>
+
+- *Type:* string
+
+---
+
+###### `serviceToken`<sup>Required</sup> <a name="serviceToken" id="cdk-turso.TursoProvider.fromServiceToken.parameter.serviceToken"></a>
+
+- *Type:* string
+
+---
+
 #### Properties <a name="Properties" id="Properties"></a>
 
 | **Name** | **Type** | **Description** |
@@ -442,9 +473,10 @@ const tursoAuthTokenProps: TursoAuthTokenProps = { ... }
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.databaseName">databaseName</a></code> | <code>string</code> | The name of the Turso database to create an auth token for. |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.organizationSlug">organizationSlug</a></code> | <code>string</code> | The Turso organization slug that owns the database. |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.parameterName">parameterName</a></code> | <code>string</code> | The SSM parameter name where the generated JWT will be stored as a SecureString. |
-| <code><a href="#cdk-turso.TursoAuthTokenProps.property.provider">provider</a></code> | <code><a href="#cdk-turso.TursoProvider">TursoProvider</a></code> | *No description.* |
+| <code><a href="#cdk-turso.TursoAuthTokenProps.property.provider">provider</a></code> | <code><a href="#cdk-turso.ITursoProvider">ITursoProvider</a></code> | *No description.* |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.authorization">authorization</a></code> | <code>string</code> | Authorization level for the token. |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.expiration">expiration</a></code> | <code>string</code> | Expiration time for the token (e.g., `"2w"`, `"1d30m"`). |
+| <code><a href="#cdk-turso.TursoAuthTokenProps.property.removalPolicy">removalPolicy</a></code> | <code>aws-cdk-lib.RemovalPolicy</code> | Removal policy for the underlying custom resource. |
 
 ---
 
@@ -487,10 +519,10 @@ The SSM parameter name where the generated JWT will be stored as a SecureString.
 ##### `provider`<sup>Required</sup> <a name="provider" id="cdk-turso.TursoAuthTokenProps.property.provider"></a>
 
 ```typescript
-public readonly provider: TursoProvider;
+public readonly provider: ITursoProvider;
 ```
 
-- *Type:* <a href="#cdk-turso.TursoProvider">TursoProvider</a>
+- *Type:* <a href="#cdk-turso.ITursoProvider">ITursoProvider</a>
 
 ---
 
@@ -520,6 +552,21 @@ Expiration time for the token (e.g., `"2w"`, `"1d30m"`).
 
 ---
 
+##### `removalPolicy`<sup>Optional</sup> <a name="removalPolicy" id="cdk-turso.TursoAuthTokenProps.property.removalPolicy"></a>
+
+```typescript
+public readonly removalPolicy: RemovalPolicy;
+```
+
+- *Type:* aws-cdk-lib.RemovalPolicy
+
+Removal policy for the underlying custom resource.
+
+Set to `RemovalPolicy.RETAIN` to keep the SSM parameter on stack
+deletion.
+
+---
+
 ### TursoDatabaseEncryption <a name="TursoDatabaseEncryption" id="cdk-turso.TursoDatabaseEncryption"></a>
 
 #### Initializer <a name="Initializer" id="cdk-turso.TursoDatabaseEncryption.Initializer"></a>
@@ -576,8 +623,10 @@ const tursoDatabaseProps: TursoDatabaseProps = { ... }
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.databaseName">databaseName</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.group">group</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.organizationSlug">organizationSlug</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#cdk-turso.TursoDatabaseProps.property.provider">provider</a></code> | <code><a href="#cdk-turso.TursoProvider">TursoProvider</a></code> | *No description.* |
+| <code><a href="#cdk-turso.TursoDatabaseProps.property.provider">provider</a></code> | <code><a href="#cdk-turso.ITursoProvider">ITursoProvider</a></code> | *No description.* |
+| <code><a href="#cdk-turso.TursoDatabaseProps.property.adopt">adopt</a></code> | <code>boolean</code> | If true, the provider will adopt an existing Turso database when creation reports that the database already exists. |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.encryption">encryption</a></code> | <code><a href="#cdk-turso.TursoDatabaseEncryption">TursoDatabaseEncryption</a></code> | *No description.* |
+| <code><a href="#cdk-turso.TursoDatabaseProps.property.removalPolicy">removalPolicy</a></code> | <code>aws-cdk-lib.RemovalPolicy</code> | Removal policy for the underlying custom resource. |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.seed">seed</a></code> | <code><a href="#cdk-turso.TursoDatabaseSeed">TursoDatabaseSeed</a></code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.sizeLimit">sizeLimit</a></code> | <code>string</code> | *No description.* |
 
@@ -616,10 +665,25 @@ public readonly organizationSlug: string;
 ##### `provider`<sup>Required</sup> <a name="provider" id="cdk-turso.TursoDatabaseProps.property.provider"></a>
 
 ```typescript
-public readonly provider: TursoProvider;
+public readonly provider: ITursoProvider;
+```
+
+- *Type:* <a href="#cdk-turso.ITursoProvider">ITursoProvider</a>
+
+---
+
+##### `adopt`<sup>Optional</sup> <a name="adopt" id="cdk-turso.TursoDatabaseProps.property.adopt"></a>
+
+```typescript
+public readonly adopt: boolean;
 ```
 
-- *Type:* <a href="#cdk-turso.TursoProvider">TursoProvider</a>
+- *Type:* boolean
+- *Default:* false
+
+If true, the provider will adopt an existing Turso database when creation reports that the database already exists.
+
+This flag is only used during Create requests.
 
 ---
 
@@ -633,6 +697,21 @@ public readonly encryption: TursoDatabaseEncryption;
 
 ---
 
+##### `removalPolicy`<sup>Optional</sup> <a name="removalPolicy" id="cdk-turso.TursoDatabaseProps.property.removalPolicy"></a>
+
+```typescript
+public readonly removalPolicy: RemovalPolicy;
+```
+
+- *Type:* aws-cdk-lib.RemovalPolicy
+
+Removal policy for the underlying custom resource.
+
+Set to `RemovalPolicy.RETAIN` to keep the Turso database on stack
+deletion.
+
+---
+
 ##### `seed`<sup>Optional</sup> <a name="seed" id="cdk-turso.TursoDatabaseProps.property.seed"></a>
 
 ```typescript
@@ -749,4 +828,32 @@ If not provided, a log group will be automatically created.
 ---
 
 
+## Protocols <a name="Protocols" id="Protocols"></a>
+
+### ITursoProvider <a name="ITursoProvider" id="cdk-turso.ITursoProvider"></a>
+
+- *Implemented By:* <a href="#cdk-turso.TursoProvider">TursoProvider</a>, <a href="#cdk-turso.ITursoProvider">ITursoProvider</a>
+
+Shared Turso custom-resource provider contract.
+
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#cdk-turso.ITursoProvider.property.serviceToken">serviceToken</a></code> | <code>string</code> | The CDK custom-resource provider service token. |
+
+---
+
+##### `serviceToken`<sup>Required</sup> <a name="serviceToken" id="cdk-turso.ITursoProvider.property.serviceToken"></a>
+
+```typescript
+public readonly serviceToken: string;
+```
+
+- *Type:* string
+
+The CDK custom-resource provider service token.
+
+---
 

package/README.md

@@ -10,11 +10,11 @@ npm install cdk-turso
 
 ## Usage
 
-First, create a `TursoProvider` with your API token:
+Create a `TursoProvider` with your API token:
 
 ```typescript
-import { Stack } from 'aws-cdk-lib';
-import { StringParameter } from 'aws-cdk-lib/aws-ssm';
+import { RemovalPolicy, Stack } from 'aws-cdk-lib';
+import { ParameterType, StringParameter } from 'aws-cdk-lib/aws-ssm';
 import { TursoProvider, TursoDatabase, TursoAuthToken } from 'cdk-turso';
 
 const stack = new Stack();
@@ -36,6 +36,8 @@ const database = new TursoDatabase(stack, 'Database', {
   databaseName: 'my-database',
   group: 'group-name',
   organizationSlug: 'my-org',
+  adopt: true, // optional: adopt existing database if it already exists
+  removalPolicy: RemovalPolicy.RETAIN, // optional: keep DB on stack delete
 });
 
 // Access database attributes
@@ -44,6 +46,16 @@ database.hostname;  // Database hostname (e.g., my-database-my-org.turso.io)
 database.databaseName;  // Database name
 ```
 
+If you run a shared provider in another stack, import it by service token:
+
+```typescript
+const provider = TursoProvider.fromServiceToken(
+  stack,
+  'TursoProvider',
+  'arn:aws:lambda:us-east-1:123456789012:function:shared-turso-provider',
+);
+```
+
 ### Auth Token
 
 Generate a database auth token and store it as a SecureString in SSM Parameter Store:
@@ -56,6 +68,7 @@ const authToken = new TursoAuthToken(stack, 'AuthToken', {
   parameterName: '/turso/db-token',
   expiration: '2w',          // optional, default: 'never'
   authorization: 'read-only', // optional, default: 'full-access'
+  removalPolicy: RemovalPolicy.RETAIN, // optional: keep SSM parameter
 });
 
 // The SSM parameter name where the JWT is stored
@@ -78,17 +91,31 @@ authToken.parameterName;
 | `handler` | `Function` | The Lambda function backing all Turso custom resources (for attaching IAM permissions) |
 | `serviceToken` | `string` | The CDK custom-resource provider service token |
 
+Static method:
+
+| Method | Returns | Description |
+|--------|---------|-------------|
+| `fromServiceToken(scope, id, serviceToken)` | `ITursoProvider` | Imports an existing Turso custom-resource provider |
+
+### ITursoProvider
+
+| Attribute | Type | Description |
+|-----------|------|-------------|
+| `serviceToken` | `string` | The CDK custom-resource provider service token |
+
 ### TursoDatabaseProps
 
 | Prop | Type | Required | Description |
 |------|------|----------|-------------|
-| `provider` | `TursoProvider` | Yes | The Turso provider to use for this database |
+| `provider` | `ITursoProvider` | Yes | The Turso provider to use for this database |
 | `databaseName` | `string` | Yes | Database name (lowercase, numbers, dashes only, max 64 chars) |
 | `group` | `string` | Yes | Turso group name (must already exist) |
 | `organizationSlug` | `string` | Yes | Organization slug |
 | `sizeLimit` | `string` | No | Size limit (e.g., '256mb') |
 | `seed` | `TursoDatabaseSeed` | No | Database seed configuration |
 | `encryption` | `TursoDatabaseEncryption` | No | Encryption configuration |
+| `adopt` | `boolean` | No | On create, adopt an existing database when create returns "already exists" |
+| `removalPolicy` | `RemovalPolicy` | No | Custom resource removal policy (for example `RemovalPolicy.RETAIN`) |
 
 ### TursoDatabaseSeed
 
@@ -121,12 +148,13 @@ interface TursoDatabaseEncryption {
 
 | Prop | Type | Required | Description |
 |------|------|----------|-------------|
-| `provider` | `TursoProvider` | Yes | The Turso provider to use for this auth token |
+| `provider` | `ITursoProvider` | Yes | The Turso provider to use for this auth token |
 | `databaseName` | `string` | Yes | The name of the Turso database to create an auth token for |
 | `organizationSlug` | `string` | Yes | The Turso organization slug that owns the database |
 | `parameterName` | `string` | Yes | SSM parameter name where the generated JWT will be stored as a SecureString |
 | `expiration` | `string` | No | Token expiry (e.g., `'2w'`, `'1d30m'`). Default: `'never'` |
 | `authorization` | `string` | No | `'full-access'` or `'read-only'`. Default: `'full-access'` |
+| `removalPolicy` | `RemovalPolicy` | No | Custom resource removal policy (for example `RemovalPolicy.RETAIN`) |
 
 ### TursoAuthToken
 

package/lib/handler/index.js

@@ -591,16 +591,22 @@ var retryOptions = {
   numOfAttempts: 4,
   jitter: "none"
 };
-async function fetchWithRetry(url, options, errorMessage, allow404 = false) {
+async function fetchWithRetry(url, options, errorMessage, allow404 = false, allowError) {
   return (0, import_exponential_backoff.backOff)(async () => {
     const response = await fetch(url, options);
     if (!response.ok && !(allow404 && response.status === 404)) {
       const errorText = await response.text();
+      if (allowError?.(response.status, errorText)) {
+        return response;
+      }
       throw new Error(`${errorMessage}: ${response.status} ${errorText}`);
     }
     return response;
   }, retryOptions);
 }
+function isAlreadyExistsError(status, errorText) {
+  return status === 409 || /already exists|already been taken/i.test(errorText);
+}
 async function getApiToken(parameterName) {
   const command = new import_client_ssm.GetParameterCommand({
     Name: parameterName,
@@ -618,6 +624,7 @@ async function handleDatabase(event, apiToken) {
   const baseUrl = "https://api.turso.tech/v1";
   if (RequestType === "Create") {
     const dbName = ResourceProperties.DatabaseName;
+    const adopt = ResourceProperties.Adopt === true;
     const body = {
       name: dbName,
       group: ResourceProperties.Group
@@ -641,8 +648,34 @@ async function handleDatabase(event, apiToken) {
         },
         body: JSON.stringify(body)
       },
-      "Failed to create database"
+      "Failed to create database",
+      false,
+      (status, errorText) => {
+        return adopt && isAlreadyExistsError(status, errorText);
+      }
     );
+    if (!response.ok) {
+      const existingDbName = encodeURIComponent(dbName);
+      const existingResponse = await fetchWithRetry(
+        `${baseUrl}/organizations/${orgSlug}/databases/${existingDbName}`,
+        {
+          method: "GET",
+          headers: {
+            Authorization: `Bearer ${apiToken}`
+          }
+        },
+        "Failed to get database"
+      );
+      const existingData = await existingResponse.json();
+      return {
+        PhysicalResourceId: dbName,
+        Data: {
+          DbId: existingData.database.DbId,
+          Hostname: existingData.database.Hostname,
+          Name: existingData.database.Name
+        }
+      };
+    }
     const data = await response.json();
     return {
       PhysicalResourceId: dbName,

package/lib/index.d.ts

@@ -1,3 +1,3 @@
 export { TursoAuthToken, TursoAuthTokenProps } from "./turso-auth-token";
 export { TursoDatabase, TursoDatabaseEncryption, TursoDatabaseProps, TursoDatabaseSeed, } from "./turso-database";
-export { TursoProvider, TursoProviderProps } from "./turso-provider";
+export { ITursoProvider, TursoProvider, TursoProviderProps, } from "./turso-provider";

package/lib/index.js

@@ -7,4 +7,4 @@ var turso_database_1 = require("./turso-database");
 Object.defineProperty(exports, "TursoDatabase", { enumerable: true, get: function () { return turso_database_1.TursoDatabase; } });
 var turso_provider_1 = require("./turso-provider");
 Object.defineProperty(exports, "TursoProvider", { enumerable: true, get: function () { return turso_provider_1.TursoProvider; } });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/turso-auth-token.d.ts

@@ -1,7 +1,8 @@
+import { RemovalPolicy } from "aws-cdk-lib";
 import { Construct } from "constructs";
-import type { TursoProvider } from "./turso-provider";
+import type { ITursoProvider } from "./turso-provider";
 export interface TursoAuthTokenProps {
-    readonly provider: TursoProvider;
+    readonly provider: ITursoProvider;
     /**
      * The name of the Turso database to create an auth token for.
      */
@@ -27,6 +28,12 @@ export interface TursoAuthTokenProps {
      * @default "full-access"
      */
     readonly authorization?: string;
+    /**
+     * Removal policy for the underlying custom resource.
+     * Set to `RemovalPolicy.RETAIN` to keep the SSM parameter on stack
+     * deletion.
+     */
+    readonly removalPolicy?: RemovalPolicy;
 }
 export declare class TursoAuthToken extends Construct {
     /**

package/lib/turso-auth-token.js

@@ -21,7 +21,8 @@ class TursoAuthToken extends constructs_1.Construct {
                 ? props.parameterName.slice(1)
                 : props.parameterName,
         });
-        props.provider.handler.addToRolePolicy(new aws_iam_1.PolicyStatement({
+        const providerWithHandler = props.provider;
+        providerWithHandler.handler?.addToRolePolicy(new aws_iam_1.PolicyStatement({
             effect: aws_iam_1.Effect.ALLOW,
             actions: ["ssm:PutParameter", "ssm:DeleteParameter"],
             resources: [parameterArn],
@@ -38,15 +39,18 @@ class TursoAuthToken extends constructs_1.Construct {
         if (props.authorization) {
             resourceProps.Authorization = props.authorization;
         }
-        new aws_cdk_lib_1.CustomResource(this, "TursoAuthToken", {
+        const cr = new aws_cdk_lib_1.CustomResource(this, "TursoAuthToken", {
             serviceToken: props.provider.serviceToken,
             resourceType: "Custom::TursoAuthToken",
             properties: resourceProps,
         });
+        if (props.removalPolicy !== undefined) {
+            cr.applyRemovalPolicy(props.removalPolicy);
+        }
         this.parameterName = props.parameterName;
     }
 }
 exports.TursoAuthToken = TursoAuthToken;
 _a = JSII_RTTI_SYMBOL_1;
-TursoAuthToken[_a] = { fqn: "cdk-turso.TursoAuthToken", version: "0.3.3" };
-//# sourceMappingURL=data:application/json;base64,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
+TursoAuthToken[_a] = { fqn: "cdk-turso.TursoAuthToken", version: "0.4.0" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/turso-database.d.ts

@@ -1,5 +1,6 @@
+import { RemovalPolicy } from "aws-cdk-lib";
 import { Construct } from "constructs";
-import type { TursoProvider } from "./turso-provider";
+import type { ITursoProvider } from "./turso-provider";
 export interface TursoDatabaseSeed {
     readonly type: string;
     readonly name: string;
@@ -10,13 +11,28 @@ export interface TursoDatabaseEncryption {
     readonly encryptionCipher: string;
 }
 export interface TursoDatabaseProps {
-    readonly provider: TursoProvider;
+    readonly provider: ITursoProvider;
     readonly databaseName: string;
     readonly group: string;
     readonly organizationSlug: string;
     readonly sizeLimit?: string;
     readonly seed?: TursoDatabaseSeed;
     readonly encryption?: TursoDatabaseEncryption;
+    /**
+     * If true, the provider will adopt an existing Turso database when
+     * creation reports that the database already exists.
+     *
+     * This flag is only used during Create requests.
+     *
+     * @default false
+     */
+    readonly adopt?: boolean;
+    /**
+     * Removal policy for the underlying custom resource.
+     * Set to `RemovalPolicy.RETAIN` to keep the Turso database on stack
+     * deletion.
+     */
+    readonly removalPolicy?: RemovalPolicy;
 }
 export declare class TursoDatabase extends Construct {
     readonly dbId: string;

package/lib/turso-database.js

@@ -29,11 +29,17 @@ class TursoDatabase extends constructs_1.Construct {
         if (props.encryption) {
             resourceProps.Encryption = props.encryption;
         }
+        if (props.adopt !== undefined) {
+            resourceProps.Adopt = props.adopt;
+        }
         const cr = new aws_cdk_lib_1.CustomResource(this, "TursoDb", {
             serviceToken: props.provider.serviceToken,
             resourceType: "Custom::TursoDatabase",
             properties: resourceProps,
         });
+        if (props.removalPolicy !== undefined) {
+            cr.applyRemovalPolicy(props.removalPolicy);
+        }
         this.dbId = cr.getAttString("DbId");
         this.hostname = cr.getAttString("Hostname");
         this.databaseName = cr.getAttString("Name");
@@ -41,5 +47,5 @@ class TursoDatabase extends constructs_1.Construct {
 }
 exports.TursoDatabase = TursoDatabase;
 _a = JSII_RTTI_SYMBOL_1;
-TursoDatabase[_a] = { fqn: "cdk-turso.TursoDatabase", version: "0.3.3" };
-//# sourceMappingURL=data:application/json;base64,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
+TursoDatabase[_a] = { fqn: "cdk-turso.TursoDatabase", version: "0.4.0" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/turso-provider.d.ts

@@ -2,6 +2,15 @@ import { Function } from "aws-cdk-lib/aws-lambda";
 import type { ILogGroup } from "aws-cdk-lib/aws-logs";
 import type { IParameter } from "aws-cdk-lib/aws-ssm";
 import { Construct } from "constructs";
+/**
+ * Shared Turso custom-resource provider contract.
+ */
+export interface ITursoProvider {
+    /**
+     * The CDK custom-resource provider service token.
+     */
+    readonly serviceToken: string;
+}
 export interface TursoProviderProps {
     /**
      * SSM parameter that holds the Turso platform API token
@@ -19,7 +28,11 @@ export interface TursoProviderProps {
  * Turso resources.  Create one per stack and pass it to every
  * `TursoDatabase`, `TursoAuthToken`, etc.
  */
-export declare class TursoProvider extends Construct {
+export declare class TursoProvider extends Construct implements ITursoProvider {
+    /**
+     * Imports an existing Turso provider by service token.
+     */
+    static fromServiceToken(scope: Construct, id: string, serviceToken: string): ITursoProvider;
     /**
      * The Lambda function backing all Turso custom resources.
      * Use this to attach additional IAM permissions when a resource

package/lib/turso-provider.js

@@ -8,12 +8,24 @@ const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
 const custom_resources_1 = require("aws-cdk-lib/custom-resources");
 const constructs_1 = require("constructs");
 const path = require("path");
+class ImportedTursoProvider extends constructs_1.Construct {
+    constructor(scope, id, serviceToken) {
+        super(scope, id);
+        this.serviceToken = serviceToken;
+    }
+}
 /**
  * Shared Lambda + CloudFormation custom-resource provider for all
  * Turso resources.  Create one per stack and pass it to every
  * `TursoDatabase`, `TursoAuthToken`, etc.
  */
 class TursoProvider extends constructs_1.Construct {
+    /**
+     * Imports an existing Turso provider by service token.
+     */
+    static fromServiceToken(scope, id, serviceToken) {
+        return new ImportedTursoProvider(scope, id, serviceToken);
+    }
     constructor(scope, id, props) {
         super(scope, id);
         this.handler = new aws_lambda_1.Function(this, "Handler", {
@@ -36,5 +48,5 @@ class TursoProvider extends constructs_1.Construct {
 }
 exports.TursoProvider = TursoProvider;
 _a = JSII_RTTI_SYMBOL_1;
-TursoProvider[_a] = { fqn: "cdk-turso.TursoProvider", version: "0.3.3" };
-//# sourceMappingURL=data:application/json;base64,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
+TursoProvider[_a] = { fqn: "cdk-turso.TursoProvider", version: "0.4.0" };
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -68,7 +68,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.3.3",
+  "version": "0.4.0",
   "jest": {
     "coverageProvider": "v8",
     "testMatch": [

package/CLAUDE.md

@@ -1 +0,0 @@
-@AGENTS.md