Turso Database
SQLite-compatible embedded database for modern applications, AI agents, and edge computing.
Links
Quick Navigation
| Topic |
Reference |
| Installation |
installation.md |
| Encryption |
encryption.md |
| Authorization |
auth.md |
| Sync |
sync.md |
| Agent DBs |
agents.md |
When to Use
- Embedded SQLite database with cloud sync
- AI agent state management and multi-agent coordination
- Offline-first applications
- Encrypted databases (AEGIS, AES-GCM)
- Edge computing and IoT devices
Core Concepts
libSQL
Turso is built on libSQL, an open-source fork of SQLite with:
- Native encryption (AEGIS-256, AES-GCM)
- Async I/O (Linux io_uring)
- Cloud sync capabilities
Deployment Options
- Embedded — runs locally in your app
- Turso Cloud — managed platform with branching, backups
- Hybrid — local with cloud sync (push/pull)
Common Patterns
Encrypted Database
openssl rand -hex 32 # Generate key
tursodb --experimental-encryption "file:db.db?cipher=aegis256&hexkey=YOUR_KEY"
Cloud Sync
import { connect } from "@tursodatabase/sync";
const db = await connect({
path: "./local.db",
url: "turso://...", // also accepts "libsql://..." — both schemes work
authToken: process.env.TURSO_AUTH_TOKEN,
});
await db.push(); // local → cloud
await db.pull(); // cloud → local
Agent Database
import { connect } from "@tursodatabase/database";
// Local-first
const db = await connect("agent.db");
// Or with sync
const db = await connect({
path: "agent.db",
url: "https://db.turso.io",
authToken: "...",
sync: "full",
});
Version
Based on product version: 0.7.2
Release Notes
0.7.1 – 0.7.2
- JS/serverless SDK:
transactionAsync() is the new closure-safe transaction API. transaction() is now deprecated — its closure semantics are unsound once transactions can run concurrently, because statements captured over the outer db/conn instance can be scheduled out of order. Migrate transaction callbacks to use the txn handle passed into transactionAsync() instead of closing over the outer instance (see references/agents.md).
- Breaking:
Connection.execute() was removed from the serverless driver's native-mirroring surface (connect()), which now matches @tursodatabase/database and exposes run/get/all/iterate/exec/batch/transaction(Async) instead. The libsql-compatible createClient() layer keeps its own execute() and is unaffected (see references/auth.md).
- Fixed a stale
inTransaction flag after execute()/batch() that could leave a server-side write transaction open past a constraint error.
- Per-query
requestHeaders, passed through the trailing query-options argument, let you attach custom headers (e.g. a request-identity header) to a single call instead of only at the connection level.
- Sync engine: the remote pull protocol (page-based WAL vs. MVCC logical-log) is now auto-detected on first contact, so the old
logical_mvcc_pull flag becomes an optional manual override instead of a requirement. A WAL-mode local replica is automatically converted to MVCC journal mode in place when it syncs against an MVCC remote.
- Sync bindings (Rust, Python, JavaScript, Go, React Native) accept both
turso:// and libsql:// remote URLs interchangeably.
- Core fixes: an
IN (...) list query-cost regression that degraded InSeek to a full scan, a missing index left behind after UPSERT due to a pre-constraint-check index mutation, a change-count leak from sequences under MVCC, and DELETE/upsert replay bugs for tables with composite or non-rowid primary keys.
0.7.0
- SQL surface: SQL-standard scalar functions with PostgreSQL-compatible aliases, PostgreSQL-style sequences, MVCC-safe
AUTOINCREMENT, window-function work (row_number() on VDBE aggregate machinery, FILTER in window clauses), and WITHIN GROUP ordered-set aggregates.
- MVCC/durability: passive checkpoint for MVCC, portable logical-log metadata for Turso sync, and Aristo WAL verification.
- Collations: core custom collation support and locale-backed collations.
- .NET / platforms: NativeAOT static linking, remote transactions and batches, a Turso EF Core SQLite provider, NuGet native targets, and Windows ARM64 CLI releases.
Earlier (0.6.0)
JS/serverless timeouts, interactive transactions, Python SQLAlchemy improvements (sqlalchemy-libsql), npm-based CLI distribution, and a broader SQL surface for local-first/agent workloads — still in effect, see references/agents.md and references/installation.md.
1---2name: turso3description: Turso SQLite database. Covers encryption, sync, agent patterns. Use when working with Turso/libSQL embedded databases, configuring encryption-at-rest, setting up sync replication, or building agent-friendly database patterns. Keywords: Turso, libSQL, embedded, SQLite, encryption, sync.4---5
6# Turso Database
7
8SQLite-compatible embedded database for modern applications, AI agents, and edge computing.
9
10## Links
11
12- [Documentation](https://docs.turso.tech/)
13- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
14- [GitHub](https://github.com/tursodatabase/turso)
15
16## Quick Navigation
17
18| Topic | Reference |
19| ------------- | --------------------------------------------- |
20| Installation | [installation.md](references/installation.md) |
21| Encryption | [encryption.md](references/encryption.md) |
22| Authorization | [auth.md](references/auth.md) |
23| Sync | [sync.md](references/sync.md) |
24| Agent DBs | [agents.md](references/agents.md) |
25
26## When to Use
27
28- Embedded SQLite database with cloud sync
29- AI agent state management and multi-agent coordination
30- Offline-first applications
31- Encrypted databases (AEGIS, AES-GCM)
32- Edge computing and IoT devices
33
34## Core Concepts
35
36### libSQL
37
38Turso is built on libSQL, an open-source fork of SQLite with:
39
40- Native encryption (AEGIS-256, AES-GCM)
41- Async I/O (Linux io_uring)
42- Cloud sync capabilities
43
44### Deployment Options
45
461. **Embedded** — runs locally in your app
472. **Turso Cloud** — managed platform with branching, backups
483. **Hybrid** — local with cloud sync (push/pull)
49
50## Common Patterns
51
52### Encrypted Database
53
54```bash
55openssl rand -hex 32 # Generate key
56tursodb --experimental-encryption "file:db.db?cipher=aegis256&hexkey=YOUR_KEY"
57```
58
59### Cloud Sync
60
61```typescript
62import { connect } from "@tursodatabase/sync";
63
64const db = await connect({
65 path: "./local.db",
66 url: "turso://...", // also accepts "libsql://..." — both schemes work
67 authToken: process.env.TURSO_AUTH_TOKEN,
68});
69
70await db.push(); // local → cloud
71await db.pull(); // cloud → local
72```
73
74### Agent Database
75
76```javascript
77import { connect } from "@tursodatabase/database";
78
79// Local-first
80const db = await connect("agent.db");
81
82// Or with sync
83const db = await connect({
84 path: "agent.db",
85 url: "https://db.turso.io",
86 authToken: "...",
87 sync: "full",
88});
89```
90
91## Version
92
93Based on product version: 0.7.2
94
95## Release Notes
96
97### 0.7.1 – 0.7.2
98
99- **JS/serverless SDK**: `transactionAsync()` is the new closure-safe transaction API. `transaction()` is now deprecated — its closure semantics are unsound once transactions can run concurrently, because statements captured over the outer `db`/`conn` instance can be scheduled out of order. Migrate transaction callbacks to use the `txn` handle passed into `transactionAsync()` instead of closing over the outer instance (see `references/agents.md`).
100- **Breaking**: `Connection.execute()` was removed from the serverless driver's native-mirroring surface (`connect()`), which now matches `@tursodatabase/database` and exposes `run`/`get`/`all`/`iterate`/`exec`/`batch`/`transaction(Async)` instead. The libsql-compatible `createClient()` layer keeps its own `execute()` and is unaffected (see `references/auth.md`).
101- Fixed a stale `inTransaction` flag after `execute()`/`batch()` that could leave a server-side write transaction open past a constraint error.
102- Per-query `requestHeaders`, passed through the trailing query-options argument, let you attach custom headers (e.g. a request-identity header) to a single call instead of only at the connection level.
103- **Sync engine**: the remote pull protocol (page-based WAL vs. MVCC logical-log) is now auto-detected on first contact, so the old `logical_mvcc_pull` flag becomes an optional manual override instead of a requirement. A WAL-mode local replica is automatically converted to MVCC journal mode in place when it syncs against an MVCC remote.
104- Sync bindings (Rust, Python, JavaScript, Go, React Native) accept both `turso://` and `libsql://` remote URLs interchangeably.
105- **Core fixes**: an `IN (...)` list query-cost regression that degraded `InSeek` to a full scan, a missing index left behind after `UPSERT` due to a pre-constraint-check index mutation, a change-count leak from sequences under MVCC, and DELETE/upsert replay bugs for tables with composite or non-rowid primary keys.
106
107### 0.7.0
108
109- **SQL surface**: SQL-standard scalar functions with PostgreSQL-compatible aliases, PostgreSQL-style sequences, MVCC-safe `AUTOINCREMENT`, window-function work (`row_number()` on VDBE aggregate machinery, `FILTER` in window clauses), and `WITHIN GROUP` ordered-set aggregates.
110- **MVCC/durability**: passive checkpoint for MVCC, portable logical-log metadata for Turso sync, and Aristo WAL verification.
111- **Collations**: core custom collation support and locale-backed collations.
112- **.NET / platforms**: NativeAOT static linking, remote transactions and batches, a Turso EF Core SQLite provider, NuGet native targets, and Windows ARM64 CLI releases.
113
114### Earlier (0.6.0)
115
116JS/serverless timeouts, interactive transactions, Python SQLAlchemy improvements (`sqlalchemy-libsql`), npm-based CLI distribution, and a broader SQL surface for local-first/agent workloads — still in effect, see `references/agents.md` and `references/installation.md`.