@infracraft/pulumi 0.1.0

package/dist/neon/endpoint.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.mjs","names":[],"sources":["../../src/neon/endpoint.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { NeonClient } from \"./client.js\";\n\n/** Resolved inputs for the Neon endpoint dynamic provider. */\nexport interface NeonEndpointInputs {\n\t/** Neon API key. */\n\tapiKey: string;\n\n\t/** Neon project ID. */\n\tprojectId: string;\n\n\t/** Branch ID to attach the endpoint to. */\n\tbranchId: string;\n\n\t/** Minimum compute units (e.g. `0.25`). */\n\tminCu: number;\n\n\t/** Maximum compute units (e.g. `2`). */\n\tmaxCu: number;\n\n\t/** Seconds of inactivity before suspending. `0` means use global default. */\n\tsuspendTimeout: number;\n}\n\n/** Persisted state for the Neon endpoint. */\ninterface NeonEndpointOutputs extends NeonEndpointInputs {\n\t/** Endpoint hostname (e.g. `\"ep-delicate-union-ah0ekn7n.us-east-1.aws.neon.tech\"`). */\n\thost: string;\n}\n\n/** Neon API response for an endpoint. */\ninterface EndpointResponse {\n\tendpoint: {\n\t\tid: string;\n\t\thost: string;\n\t\tbranch_id: string;\n\t\tautoscaling_limit_min_cu: number;\n\t\tautoscaling_limit_max_cu: number;\n\t\tsuspend_timeout_seconds: number;\n\t};\n}\n\n/** Neon API response for listing endpoints. */\ninterface EndpointListResponse {\n\tendpoints: Array<{\n\t\tid: string;\n\t\thost: string;\n\t\tbranch_id: string;\n\t\ttype: string;\n\t}>;\n}\n\n/**\n * Finds an existing read-write endpoint for a branch.\n *\n * @param client Authenticated Neon API client\n * @param projectId Neon project ID\n * @param branchId Branch ID to search within\n * @returns The endpoint ID and host if found, `undefined` otherwise\n */\nasync function findEndpointByBranch(\n\tclient: NeonClient,\n\tprojectId: string,\n\tbranchId: string,\n): Promise<{ id: string; host: string } | undefined> {\n\tconst result = await client.get<EndpointListResponse>(\n\t\t`/projects/${projectId}/branches/${branchId}/endpoints`,\n\t);\n\n\tconst match = result.endpoints.find((e) => e.type === \"read_write\");\n\n\treturn match ? { id: match.id, host: match.host } : undefined;\n}\n\n/**\n * Dynamic provider implementing CRUD for Neon compute endpoints.\n *\n * Uses adopt-or-create on `create()`: finds an existing read-write endpoint\n * on the target branch before creating a new one.\n */\nclass NeonEndpointProvider implements pulumi.dynamic.ResourceProvider {\n\t/**\n\t * Creates or adopts a Neon endpoint on the target branch.\n\t *\n\t * @param inputs Resolved endpoint configuration\n\t * @returns The Neon endpoint ID as the resource ID\n\t */\n\tasync create(\n\t\tinputs: NeonEndpointInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new NeonClient(inputs.apiKey);\n\n\t\tconst existing = await findEndpointByBranch(\n\t\t\tclient,\n\t\t\tinputs.projectId,\n\t\t\tinputs.branchId,\n\t\t);\n\n\t\tif (existing) {\n\t\t\tpulumi.log.info(`Adopting existing Neon endpoint (${existing.id})`);\n\n\t\t\tawait client.patch(\n\t\t\t\t`/projects/${inputs.projectId}/endpoints/${existing.id}`,\n\t\t\t\t{\n\t\t\t\t\tendpoint: {\n\t\t\t\t\t\tautoscaling_limit_min_cu: inputs.minCu,\n\t\t\t\t\t\tautoscaling_limit_max_cu: inputs.maxCu,\n\t\t\t\t\t\tsuspend_timeout_seconds: inputs.suspendTimeout,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t);\n\n\t\t\treturn {\n\t\t\t\tid: existing.id,\n\t\t\t\touts: { ...inputs, host: existing.host },\n\t\t\t};\n\t\t}\n\n\t\tconst result = await client.post<EndpointResponse>(\n\t\t\t`/projects/${inputs.projectId}/branches/${inputs.branchId}/endpoints`,\n\t\t\t{\n\t\t\t\tendpoint: {\n\t\t\t\t\ttype: \"read_write\",\n\t\t\t\t\tautoscaling_limit_min_cu: inputs.minCu,\n\t\t\t\t\tautoscaling_limit_max_cu: inputs.maxCu,\n\t\t\t\t\tsuspend_timeout_seconds: inputs.suspendTimeout,\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\n\t\treturn {\n\t\t\tid: result.endpoint.id,\n\t\t\touts: { ...inputs, host: result.endpoint.host },\n\t\t};\n\t}\n\n\t/**\n\t * Updates endpoint compute settings in place.\n\t *\n\t * @param id Current Neon endpoint ID\n\t * @param _olds Previous persisted state\n\t * @param news New desired configuration\n\t * @returns Updated outputs with current host\n\t */\n\tasync update(\n\t\tid: string,\n\t\t_olds: NeonEndpointOutputs,\n\t\tnews: NeonEndpointInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new NeonClient(news.apiKey);\n\n\t\tconst result = await client.patch<EndpointResponse>(\n\t\t\t`/projects/${news.projectId}/endpoints/${id}`,\n\t\t\t{\n\t\t\t\tendpoint: {\n\t\t\t\t\tautoscaling_limit_min_cu: news.minCu,\n\t\t\t\t\tautoscaling_limit_max_cu: news.maxCu,\n\t\t\t\t\tsuspend_timeout_seconds: news.suspendTimeout,\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\n\t\treturn { outs: { ...news, host: result.endpoint.host } };\n\t}\n\n\t/**\n\t * Reads current state for `pulumi refresh`.\n\t *\n\t * @param id Current Neon endpoint ID\n\t * @param props Last known persisted state\n\t * @returns Refreshed resource ID and properties\n\t * @throws {Error} If the endpoint no longer exists\n\t */\n\tasync read(\n\t\tid: string,\n\t\tprops: NeonEndpointOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new NeonClient(props.apiKey);\n\n\t\tconst result = await client.get<EndpointResponse>(\n\t\t\t`/projects/${props.projectId}/endpoints/${id}`,\n\t\t);\n\n\t\treturn {\n\t\t\tid: result.endpoint.id,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\thost: result.endpoint.host,\n\t\t\t\tminCu: result.endpoint.autoscaling_limit_min_cu,\n\t\t\t\tmaxCu: result.endpoint.autoscaling_limit_max_cu,\n\t\t\t\tsuspendTimeout: result.endpoint.suspend_timeout_seconds,\n\t\t\t},\n\t\t};\n\t}\n\n\t/**\n\t * Deletes the Neon endpoint. Silently succeeds if already deleted.\n\t */\n\tasync delete(id: string, props: NeonEndpointOutputs): Promise<void> {\n\t\tconst client = new NeonClient(props.apiKey);\n\n\t\ttry {\n\t\t\tawait client.delete(`/projects/${props.projectId}/endpoints/${id}`);\n\t\t} catch {\n\t\t\tpulumi.log.warn(\n\t\t\t\t`Failed to delete Neon endpoint (may already be deleted)`,\n\t\t\t);\n\t\t}\n\t}\n\n\t/**\n\t * Compares old and new inputs. Changing `projectId` or `branchId` triggers replacement.\n\t */\n\tasync diff(\n\t\t_id: string,\n\t\tolds: NeonEndpointOutputs,\n\t\tnews: NeonEndpointInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.projectId !== news.projectId) {\n\t\t\treplaces.push(\"projectId\");\n\t\t}\n\n\t\tif (olds.branchId !== news.branchId) {\n\t\t\treplaces.push(\"branchId\");\n\t\t}\n\n\t\tconst hasChanges =\n\t\t\treplaces.length > 0 ||\n\t\t\tolds.minCu !== news.minCu ||\n\t\t\tolds.maxCu !== news.maxCu ||\n\t\t\tolds.suspendTimeout !== news.suspendTimeout;\n\n\t\treturn { changes: hasChanges, replaces, deleteBeforeReplace: true };\n\t}\n}\n\n/**\n * Manages a Neon compute endpoint with adopt-or-create semantics.\n * Exposes `host` as an output for connection string composition.\n *\n * @example\n * ```typescript\n * const endpoint = new NeonEndpoint(\"neon-endpoint-production\", {\n *   apiKey: config.requireSecret(\"neonApiKey\"),\n *   projectId: \"quiet-forest-69719462\",\n *   branchId: branch.id,\n *   minCu: 0.25,\n *   maxCu: 2,\n *   suspendTimeout: 0,\n * });\n *\n * const host = endpoint.host;\n * ```\n */\nexport class NeonEndpoint extends pulumi.dynamic.Resource {\n\t/** Endpoint hostname for connection strings. */\n\tpublic declare readonly host: pulumi.Output<string>;\n\n\t/**\n\t * @param name Pulumi resource name\n\t * @param args Endpoint configuration inputs\n\t * @param opts Standard Pulumi resource options\n\t */\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\t/** Neon API key. */\n\t\t\tapiKey: pulumi.Input<string>;\n\n\t\t\t/** Neon project ID. */\n\t\t\tprojectId: pulumi.Input<string>;\n\n\t\t\t/** Branch ID to attach the endpoint to. */\n\t\t\tbranchId: pulumi.Input<string>;\n\n\t\t\t/** Minimum compute units. */\n\t\t\tminCu: pulumi.Input<number>;\n\n\t\t\t/** Maximum compute units. */\n\t\t\tmaxCu: pulumi.Input<number>;\n\n\t\t\t/** Seconds of inactivity before suspending. */\n\t\t\tsuspendTimeout: pulumi.Input<number>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(new NeonEndpointProvider(), name, { ...args, host: undefined }, opts);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AA4DA,eAAe,qBACd,QACA,WACA,UACoD;CAKpD,MAAM,SAAQ,MAJO,OAAO,IAC3B,aAAa,UAAU,YAAY,SAAS,WAC7C,GAEqB,UAAU,MAAM,MAAM,EAAE,SAAS,YAAY;CAElE,OAAO,QAAQ;EAAE,IAAI,MAAM;EAAI,MAAM,MAAM;CAAK,IAAI;AACrD;;;;;;;AAQA,IAAM,uBAAN,MAAsE;;;;;;;CAOrE,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAI,WAAW,OAAO,MAAM;EAE3C,MAAM,WAAW,MAAM,qBACtB,QACA,OAAO,WACP,OAAO,QACR;EAEA,IAAI,UAAU;GACb,OAAO,IAAI,KAAK,oCAAoC,SAAS,GAAG,EAAE;GAElE,MAAM,OAAO,MACZ,aAAa,OAAO,UAAU,aAAa,SAAS,MACpD,EACC,UAAU;IACT,0BAA0B,OAAO;IACjC,0BAA0B,OAAO;IACjC,yBAAyB,OAAO;GACjC,EACD,CACD;GAEA,OAAO;IACN,IAAI,SAAS;IACb,MAAM;KAAE,GAAG;KAAQ,MAAM,SAAS;IAAK;GACxC;EACD;EAEA,MAAM,SAAS,MAAM,OAAO,KAC3B,aAAa,OAAO,UAAU,YAAY,OAAO,SAAS,aAC1D,EACC,UAAU;GACT,MAAM;GACN,0BAA0B,OAAO;GACjC,0BAA0B,OAAO;GACjC,yBAAyB,OAAO;EACjC,EACD,CACD;EAEA,OAAO;GACN,IAAI,OAAO,SAAS;GACpB,MAAM;IAAE,GAAG;IAAQ,MAAM,OAAO,SAAS;GAAK;EAC/C;CACD;;;;;;;;;CAUA,MAAM,OACL,IACA,OACA,MACuC;EAGvC,MAAM,SAAS,MAAM,IAFF,WAAW,KAAK,MAET,EAAE,MAC3B,aAAa,KAAK,UAAU,aAAa,MACzC,EACC,UAAU;GACT,0BAA0B,KAAK;GAC/B,0BAA0B,KAAK;GAC/B,yBAAyB,KAAK;EAC/B,EACD,CACD;EAEA,OAAO,EAAE,MAAM;GAAE,GAAG;GAAM,MAAM,OAAO,SAAS;EAAK,EAAE;CACxD;;;;;;;;;CAUA,MAAM,KACL,IACA,OACqC;EAGrC,MAAM,SAAS,MAAM,IAFF,WAAW,MAAM,MAEV,EAAE,IAC3B,aAAa,MAAM,UAAU,aAAa,IAC3C;EAEA,OAAO;GACN,IAAI,OAAO,SAAS;GACpB,OAAO;IACN,GAAG;IACH,MAAM,OAAO,SAAS;IACtB,OAAO,OAAO,SAAS;IACvB,OAAO,OAAO,SAAS;IACvB,gBAAgB,OAAO,SAAS;GACjC;EACD;CACD;;;;CAKA,MAAM,OAAO,IAAY,OAA2C;EACnE,MAAM,SAAS,IAAI,WAAW,MAAM,MAAM;EAE1C,IAAI;GACH,MAAM,OAAO,OAAO,aAAa,MAAM,UAAU,aAAa,IAAI;EACnE,QAAQ;GACP,OAAO,IAAI,KACV,yDACD;EACD;CACD;;;;CAKA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,cAAc,KAAK,WAC3B,SAAS,KAAK,WAAW;EAG1B,IAAI,KAAK,aAAa,KAAK,UAC1B,SAAS,KAAK,UAAU;EASzB,OAAO;GAAE,SALR,SAAS,SAAS,KAClB,KAAK,UAAU,KAAK,SACpB,KAAK,UAAU,KAAK,SACpB,KAAK,mBAAmB,KAAK;GAEA;GAAU,qBAAqB;EAAK;CACnE;AACD;;;;;;;;;;;;;;;;;;;AAoBA,IAAa,eAAb,cAAkC,OAAO,QAAQ,SAAS;;;;;;CASzD,YACC,MACA,MAmBA,MACC;EACD,MAAM,IAAI,qBAAqB,GAAG,MAAM;GAAE,GAAG;GAAM,MAAM;EAAU,GAAG,IAAI;CAC3E;AACD"}

package/dist/neon/index.cjs

@@ -0,0 +1,14 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_neon_client = require('./client.cjs');
+const require_neon_branch = require('./branch.cjs');
+const require_neon_database = require('./database.cjs');
+const require_neon_endpoint = require('./endpoint.cjs');
+const require_neon_project = require('./project.cjs');
+const require_neon_role = require('./role.cjs');
+
+exports.NeonBranch = require_neon_branch.NeonBranch;
+exports.NeonClient = require_neon_client.NeonClient;
+exports.NeonDatabase = require_neon_database.NeonDatabase;
+exports.NeonEndpoint = require_neon_endpoint.NeonEndpoint;
+exports.NeonProject = require_neon_project.NeonProject;
+exports.NeonRole = require_neon_role.NeonRole;

package/dist/neon/index.d.cts

@@ -0,0 +1,7 @@
+import { NeonBranch, NeonBranchInputs } from "./branch.cjs";
+import { NeonClient } from "./client.cjs";
+import { NeonDatabase, NeonDatabaseInputs } from "./database.cjs";
+import { NeonEndpoint, NeonEndpointInputs } from "./endpoint.cjs";
+import { NeonProject, NeonProjectInputs } from "./project.cjs";
+import { NeonRole, NeonRoleInputs } from "./role.cjs";
+export { NeonBranch, type NeonBranchInputs, NeonClient, NeonDatabase, type NeonDatabaseInputs, NeonEndpoint, type NeonEndpointInputs, NeonProject, type NeonProjectInputs, NeonRole, type NeonRoleInputs };

package/dist/neon/index.d.mts

@@ -0,0 +1,7 @@
+import { NeonBranch, NeonBranchInputs } from "./branch.mjs";
+import { NeonClient } from "./client.mjs";
+import { NeonDatabase, NeonDatabaseInputs } from "./database.mjs";
+import { NeonEndpoint, NeonEndpointInputs } from "./endpoint.mjs";
+import { NeonProject, NeonProjectInputs } from "./project.mjs";
+import { NeonRole, NeonRoleInputs } from "./role.mjs";
+export { NeonBranch, type NeonBranchInputs, NeonClient, NeonDatabase, type NeonDatabaseInputs, NeonEndpoint, type NeonEndpointInputs, NeonProject, type NeonProjectInputs, NeonRole, type NeonRoleInputs };

package/dist/neon/index.mjs

@@ -0,0 +1,8 @@
+import { NeonClient } from "./client.mjs";
+import { NeonBranch } from "./branch.mjs";
+import { NeonDatabase } from "./database.mjs";
+import { NeonEndpoint } from "./endpoint.mjs";
+import { NeonProject } from "./project.mjs";
+import { NeonRole } from "./role.mjs";
+
+export { NeonBranch, NeonClient, NeonDatabase, NeonEndpoint, NeonProject, NeonRole };

package/dist/neon/project.cjs

@@ -0,0 +1,120 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_neon_client = require('./client.cjs');
+let _pulumi_pulumi = require("@pulumi/pulumi");
+_pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
+
+//#region src/neon/project.ts
+/**
+* Dynamic provider implementing adopt-or-create for Neon projects.
+*
+* On `create()`, queries `GET /projects` and performs an exact name match.
+* If found, adopts the existing project. If not, creates a new one via
+* `POST /projects`. Deletion is a no-op to protect production databases.
+*/
+var NeonProjectProvider = class {
+	/**
+	* Creates or adopts a Neon project by name.
+	*
+	* @param inputs Resolved project configuration
+	* @returns The Neon project ID as the resource ID
+	*/
+	async create(inputs) {
+		const client = new require_neon_client.NeonClient(inputs.apiKey);
+		const query = inputs.orgId ? `/projects?org_id=${inputs.orgId}&search=${encodeURIComponent(inputs.name)}` : "/projects";
+		const existing = (await client.get(query)).projects.find((p) => p.name === inputs.name);
+		let projectId;
+		if (existing) {
+			_pulumi_pulumi.log.info(`Adopting existing Neon project "${inputs.name}" (${existing.id})`);
+			projectId = existing.id;
+		} else {
+			_pulumi_pulumi.log.info(`Neon project "${inputs.name}" not found — creating...`);
+			projectId = (await client.post("/projects", { project: { name: inputs.name } })).project.id;
+		}
+		const outs = {
+			...inputs,
+			projectId
+		};
+		return {
+			id: projectId,
+			outs
+		};
+	}
+	/**
+	* Reads current state for `pulumi refresh`.
+	*
+	* @param id Current Neon project ID
+	* @param props Last known persisted state
+	* @returns Refreshed resource ID and properties
+	* @throws {Error} If the project no longer exists
+	*/
+	async read(id, props) {
+		const result = await new require_neon_client.NeonClient(props.apiKey).get(`/projects/${id}`);
+		return {
+			id: result.project.id,
+			props: {
+				...props,
+				name: result.project.name,
+				projectId: result.project.id
+			}
+		};
+	}
+	/**
+	* Skips deletion to protect production databases.
+	*/
+	async delete() {
+		_pulumi_pulumi.log.warn("Neon project deletion skipped — projects are not deleted by Pulumi");
+	}
+	/**
+	* Compares old and new inputs. `name` or `orgId` changes trigger replacement.
+	*/
+	async diff(_id, olds, news) {
+		const replaces = [];
+		if (olds.name !== news.name) replaces.push("name");
+		if (olds.orgId !== news.orgId) replaces.push("orgId");
+		return {
+			changes: replaces.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/**
+* Manages a Neon project with adopt-or-create semantics.
+*
+* Discovers or creates the project by exact name match. Deletion is a no-op
+* to prevent accidental removal of production databases.
+*
+* @example
+* ```typescript
+* const project = new NeonProject("neon-project", {
+*   apiKey: config.requireSecret("neonApiKey"),
+*   name: "my-app",
+*   orgId: "org-abc123",
+* });
+*
+* // Use the resolved project ID downstream
+* const branch = new NeonBranch("neon-branch-production", {
+*   apiKey: config.requireSecret("neonApiKey"),
+*   projectId: project.projectId,
+*   name: "production",
+* });
+* ```
+*/
+var NeonProject = class extends _pulumi_pulumi.dynamic.Resource {
+	/**
+	* @param name Pulumi resource name
+	* @param args Project configuration inputs
+	* @param opts Standard Pulumi resource options
+	*/
+	constructor(name, args, opts) {
+		super(new NeonProjectProvider(), name, {
+			...args,
+			projectId: void 0
+		}, opts);
+	}
+};
+
+//#endregion
+exports.NeonProject = NeonProject;
+//# sourceMappingURL=project.cjs.map

package/dist/neon/project.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.cjs","names":["NeonClient","pulumi"],"sources":["../../src/neon/project.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { NeonClient } from \"./client.js\";\n\n/** Resolved inputs for the Neon project dynamic provider. */\nexport interface NeonProjectInputs {\n\t/** Neon API key. */\n\tapiKey: string;\n\n\t/** Exact project display name to adopt or create. */\n\tname: string;\n\n\t/** Optional Neon organization ID to scope the project search. */\n\torgId?: string;\n}\n\n/** Persisted state for the Neon project. */\ninterface NeonProjectOutputs extends NeonProjectInputs {\n\t/** Neon-assigned project ID (e.g. `\"quiet-forest-69719462\"`). */\n\tprojectId: string;\n}\n\n/** Neon API response for listing projects. */\ninterface ProjectListResponse {\n\tprojects: Array<{ id: string; name: string }>;\n}\n\n/** Neon API response for project creation. */\ninterface ProjectCreateResponse {\n\tproject: { id: string; name: string };\n}\n\n/** Neon API response for reading a single project. */\ninterface ProjectReadResponse {\n\tproject: { id: string; name: string };\n}\n\n/**\n * Dynamic provider implementing adopt-or-create for Neon projects.\n *\n * On `create()`, queries `GET /projects` and performs an exact name match.\n * If found, adopts the existing project. If not, creates a new one via\n * `POST /projects`. Deletion is a no-op to protect production databases.\n */\nclass NeonProjectProvider implements pulumi.dynamic.ResourceProvider {\n\t/**\n\t * Creates or adopts a Neon project by name.\n\t *\n\t * @param inputs Resolved project configuration\n\t * @returns The Neon project ID as the resource ID\n\t */\n\tasync create(\n\t\tinputs: NeonProjectInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new NeonClient(inputs.apiKey);\n\n\t\tconst query = inputs.orgId\n\t\t\t? `/projects?org_id=${inputs.orgId}&search=${encodeURIComponent(inputs.name)}`\n\t\t\t: \"/projects\";\n\n\t\tconst result = await client.get<ProjectListResponse>(query);\n\n\t\tconst existing = result.projects.find((p) => p.name === inputs.name);\n\n\t\tlet projectId: string;\n\n\t\tif (existing) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Adopting existing Neon project \"${inputs.name}\" (${existing.id})`,\n\t\t\t);\n\n\t\t\tprojectId = existing.id;\n\t\t} else {\n\t\t\tpulumi.log.info(`Neon project \"${inputs.name}\" not found — creating...`);\n\n\t\t\tconst created = await client.post<ProjectCreateResponse>(\"/projects\", {\n\t\t\t\tproject: { name: inputs.name },\n\t\t\t});\n\n\t\t\tprojectId = created.project.id;\n\t\t}\n\n\t\tconst outs: NeonProjectOutputs = { ...inputs, projectId };\n\n\t\treturn { id: projectId, outs };\n\t}\n\n\t/**\n\t * Reads current state for `pulumi refresh`.\n\t *\n\t * @param id Current Neon project ID\n\t * @param props Last known persisted state\n\t * @returns Refreshed resource ID and properties\n\t * @throws {Error} If the project no longer exists\n\t */\n\tasync read(\n\t\tid: string,\n\t\tprops: NeonProjectOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new NeonClient(props.apiKey);\n\n\t\tconst result = await client.get<ProjectReadResponse>(`/projects/${id}`);\n\n\t\treturn {\n\t\t\tid: result.project.id,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tname: result.project.name,\n\t\t\t\tprojectId: result.project.id,\n\t\t\t},\n\t\t};\n\t}\n\n\t/**\n\t * Skips deletion to protect production databases.\n\t */\n\tasync delete(): Promise<void> {\n\t\tpulumi.log.warn(\n\t\t\t\"Neon project deletion skipped — projects are not deleted by Pulumi\",\n\t\t);\n\t}\n\n\t/**\n\t * Compares old and new inputs. `name` or `orgId` changes trigger replacement.\n\t */\n\tasync diff(\n\t\t_id: string,\n\t\tolds: NeonProjectOutputs,\n\t\tnews: NeonProjectInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\n\t\tif (olds.orgId !== news.orgId) {\n\t\t\treplaces.push(\"orgId\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/**\n * Manages a Neon project with adopt-or-create semantics.\n *\n * Discovers or creates the project by exact name match. Deletion is a no-op\n * to prevent accidental removal of production databases.\n *\n * @example\n * ```typescript\n * const project = new NeonProject(\"neon-project\", {\n *   apiKey: config.requireSecret(\"neonApiKey\"),\n *   name: \"my-app\",\n *   orgId: \"org-abc123\",\n * });\n *\n * // Use the resolved project ID downstream\n * const branch = new NeonBranch(\"neon-branch-production\", {\n *   apiKey: config.requireSecret(\"neonApiKey\"),\n *   projectId: project.projectId,\n *   name: \"production\",\n * });\n * ```\n */\nexport class NeonProject extends pulumi.dynamic.Resource {\n\t/** Neon-assigned project ID. */\n\tpublic declare readonly projectId: pulumi.Output<string>;\n\n\t/**\n\t * @param name Pulumi resource name\n\t * @param args Project configuration inputs\n\t * @param opts Standard Pulumi resource options\n\t */\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\t/** Neon API key. */\n\t\t\tapiKey: pulumi.Input<string>;\n\n\t\t\t/** Exact project display name to adopt or create. */\n\t\t\tname: pulumi.Input<string>;\n\n\t\t\t/** Optional Neon organization ID to scope the project search. */\n\t\t\torgId?: pulumi.Input<string>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew NeonProjectProvider(),\n\t\t\tname,\n\t\t\t{ ...args, projectId: undefined },\n\t\t\topts,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AA2CA,IAAM,sBAAN,MAAqE;;;;;;;CAOpE,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAIA,+BAAW,OAAO,MAAM;EAE3C,MAAM,QAAQ,OAAO,QAClB,oBAAoB,OAAO,MAAM,UAAU,mBAAmB,OAAO,IAAI,MACzE;EAIH,MAAM,YAAW,MAFI,OAAO,IAAyB,KAAK,GAElC,SAAS,MAAM,MAAM,EAAE,SAAS,OAAO,IAAI;EAEnE,IAAI;EAEJ,IAAI,UAAU;GACb,eAAO,IAAI,KACV,mCAAmC,OAAO,KAAK,KAAK,SAAS,GAAG,EACjE;GAEA,YAAY,SAAS;EACtB,OAAO;GACN,eAAO,IAAI,KAAK,iBAAiB,OAAO,KAAK,0BAA0B;GAMvE,aAAY,MAJU,OAAO,KAA4B,aAAa,EACrE,SAAS,EAAE,MAAM,OAAO,KAAK,EAC9B,CAAC,GAEmB,QAAQ;EAC7B;EAEA,MAAM,OAA2B;GAAE,GAAG;GAAQ;EAAU;EAExD,OAAO;GAAE,IAAI;GAAW;EAAK;CAC9B;;;;;;;;;CAUA,MAAM,KACL,IACA,OACqC;EAGrC,MAAM,SAAS,MAAM,IAFFA,+BAAW,MAAM,MAEV,EAAE,IAAyB,aAAa,IAAI;EAEtE,OAAO;GACN,IAAI,OAAO,QAAQ;GACnB,OAAO;IACN,GAAG;IACH,MAAM,OAAO,QAAQ;IACrB,WAAW,OAAO,QAAQ;GAC3B;EACD;CACD;;;;CAKA,MAAM,SAAwB;EAC7B,eAAO,IAAI,KACV,oEACD;CACD;;;;CAKA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAGrB,IAAI,KAAK,UAAU,KAAK,OACvB,SAAS,KAAK,OAAO;EAGtB,OAAO;GACN,SAAS,SAAS,SAAS;GAC3B;GACA,qBAAqB;EACtB;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;;AAwBA,IAAa,cAAb,cAAiCC,eAAO,QAAQ,SAAS;;;;;;CASxD,YACC,MACA,MAUA,MACC;EACD,MACC,IAAI,oBAAoB,GACxB,MACA;GAAE,GAAG;GAAM,WAAW;EAAU,GAChC,IACD;CACD;AACD"}

package/dist/neon/project.d.cts

@@ -0,0 +1,52 @@
+import { t as __name } from "../chunk-OPjESj5l.cjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/neon/project.d.ts
+/** Resolved inputs for the Neon project dynamic provider. */
+interface NeonProjectInputs {
+  /** Neon API key. */
+  apiKey: string;
+  /** Exact project display name to adopt or create. */
+  name: string;
+  /** Optional Neon organization ID to scope the project search. */
+  orgId?: string;
+}
+/**
+ * Manages a Neon project with adopt-or-create semantics.
+ *
+ * Discovers or creates the project by exact name match. Deletion is a no-op
+ * to prevent accidental removal of production databases.
+ *
+ * @example
+ * ```typescript
+ * const project = new NeonProject("neon-project", {
+ *   apiKey: config.requireSecret("neonApiKey"),
+ *   name: "my-app",
+ *   orgId: "org-abc123",
+ * });
+ *
+ * // Use the resolved project ID downstream
+ * const branch = new NeonBranch("neon-branch-production", {
+ *   apiKey: config.requireSecret("neonApiKey"),
+ *   projectId: project.projectId,
+ *   name: "production",
+ * });
+ * ```
+ */
+declare class NeonProject extends pulumi.dynamic.Resource {
+  /** Neon-assigned project ID. */
+  readonly projectId: pulumi.Output<string>;
+  /**
+   * @param name Pulumi resource name
+   * @param args Project configuration inputs
+   * @param opts Standard Pulumi resource options
+   */
+  constructor(name: string, args: {
+    /** Neon API key. */apiKey: pulumi.Input<string>; /** Exact project display name to adopt or create. */
+    name: pulumi.Input<string>; /** Optional Neon organization ID to scope the project search. */
+    orgId?: pulumi.Input<string>;
+  }, opts?: pulumi.CustomResourceOptions);
+}
+//#endregion
+export { NeonProject, NeonProjectInputs };
+//# sourceMappingURL=project.d.cts.map

package/dist/neon/project.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.cts","names":[],"sources":["../../src/neon/project.ts"],"mappings":";;;;;UAIiB,iBAAA;;EAEhB,MAAA;EAFiC;EAKjC,IAAA;EALiC;EAQjC,KAAA;AAAA;;;AAAK;AA6JN;;;;;;;;;;;;;;;;;;;cAAa,WAAA,SAAoB,MAAA,CAAO,OAAA,CAAQ,QAAA;EAarC;EAAA,SAXc,SAAA,EAAW,MAAA,CAAO,MAAA;EAcxC;;;;;cAND,IAAA,UACA,IAAA;IAAA,oBAEC,MAAA,EAAQ,MAAA,CAAO,KAAA,UAQF;IALb,IAAA,EAAM,MAAA,CAAO,KAAA,UAKqB;IAFlC,KAAA,GAAQ,MAAA,CAAO,KAAA;EAAA,GAEhB,IAAA,GAAO,MAAA,CAAO,qBAAA;AAAA"}

package/dist/neon/project.d.mts

@@ -0,0 +1,52 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/neon/project.d.ts
+/** Resolved inputs for the Neon project dynamic provider. */
+interface NeonProjectInputs {
+  /** Neon API key. */
+  apiKey: string;
+  /** Exact project display name to adopt or create. */
+  name: string;
+  /** Optional Neon organization ID to scope the project search. */
+  orgId?: string;
+}
+/**
+ * Manages a Neon project with adopt-or-create semantics.
+ *
+ * Discovers or creates the project by exact name match. Deletion is a no-op
+ * to prevent accidental removal of production databases.
+ *
+ * @example
+ * ```typescript
+ * const project = new NeonProject("neon-project", {
+ *   apiKey: config.requireSecret("neonApiKey"),
+ *   name: "my-app",
+ *   orgId: "org-abc123",
+ * });
+ *
+ * // Use the resolved project ID downstream
+ * const branch = new NeonBranch("neon-branch-production", {
+ *   apiKey: config.requireSecret("neonApiKey"),
+ *   projectId: project.projectId,
+ *   name: "production",
+ * });
+ * ```
+ */
+declare class NeonProject extends pulumi.dynamic.Resource {
+  /** Neon-assigned project ID. */
+  readonly projectId: pulumi.Output<string>;
+  /**
+   * @param name Pulumi resource name
+   * @param args Project configuration inputs
+   * @param opts Standard Pulumi resource options
+   */
+  constructor(name: string, args: {
+    /** Neon API key. */apiKey: pulumi.Input<string>; /** Exact project display name to adopt or create. */
+    name: pulumi.Input<string>; /** Optional Neon organization ID to scope the project search. */
+    orgId?: pulumi.Input<string>;
+  }, opts?: pulumi.CustomResourceOptions);
+}
+//#endregion
+export { NeonProject, NeonProjectInputs };
+//# sourceMappingURL=project.d.mts.map

package/dist/neon/project.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.mts","names":[],"sources":["../../src/neon/project.ts"],"mappings":";;;;;UAIiB,iBAAA;;EAEhB,MAAA;EAFiC;EAKjC,IAAA;EALiC;EAQjC,KAAA;AAAA;;;AAAK;AA6JN;;;;;;;;;;;;;;;;;;;cAAa,WAAA,SAAoB,MAAA,CAAO,OAAA,CAAQ,QAAA;EAarC;EAAA,SAXc,SAAA,EAAW,MAAA,CAAO,MAAA;EAcxC;;;;;cAND,IAAA,UACA,IAAA;IAAA,oBAEC,MAAA,EAAQ,MAAA,CAAO,KAAA,UAQF;IALb,IAAA,EAAM,MAAA,CAAO,KAAA,UAKqB;IAFlC,KAAA,GAAQ,MAAA,CAAO,KAAA;EAAA,GAEhB,IAAA,GAAO,MAAA,CAAO,qBAAA;AAAA"}

package/dist/neon/project.mjs

@@ -0,0 +1,118 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { NeonClient } from "./client.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/neon/project.ts
+/**
+* Dynamic provider implementing adopt-or-create for Neon projects.
+*
+* On `create()`, queries `GET /projects` and performs an exact name match.
+* If found, adopts the existing project. If not, creates a new one via
+* `POST /projects`. Deletion is a no-op to protect production databases.
+*/
+var NeonProjectProvider = class {
+	/**
+	* Creates or adopts a Neon project by name.
+	*
+	* @param inputs Resolved project configuration
+	* @returns The Neon project ID as the resource ID
+	*/
+	async create(inputs) {
+		const client = new NeonClient(inputs.apiKey);
+		const query = inputs.orgId ? `/projects?org_id=${inputs.orgId}&search=${encodeURIComponent(inputs.name)}` : "/projects";
+		const existing = (await client.get(query)).projects.find((p) => p.name === inputs.name);
+		let projectId;
+		if (existing) {
+			pulumi.log.info(`Adopting existing Neon project "${inputs.name}" (${existing.id})`);
+			projectId = existing.id;
+		} else {
+			pulumi.log.info(`Neon project "${inputs.name}" not found — creating...`);
+			projectId = (await client.post("/projects", { project: { name: inputs.name } })).project.id;
+		}
+		const outs = {
+			...inputs,
+			projectId
+		};
+		return {
+			id: projectId,
+			outs
+		};
+	}
+	/**
+	* Reads current state for `pulumi refresh`.
+	*
+	* @param id Current Neon project ID
+	* @param props Last known persisted state
+	* @returns Refreshed resource ID and properties
+	* @throws {Error} If the project no longer exists
+	*/
+	async read(id, props) {
+		const result = await new NeonClient(props.apiKey).get(`/projects/${id}`);
+		return {
+			id: result.project.id,
+			props: {
+				...props,
+				name: result.project.name,
+				projectId: result.project.id
+			}
+		};
+	}
+	/**
+	* Skips deletion to protect production databases.
+	*/
+	async delete() {
+		pulumi.log.warn("Neon project deletion skipped — projects are not deleted by Pulumi");
+	}
+	/**
+	* Compares old and new inputs. `name` or `orgId` changes trigger replacement.
+	*/
+	async diff(_id, olds, news) {
+		const replaces = [];
+		if (olds.name !== news.name) replaces.push("name");
+		if (olds.orgId !== news.orgId) replaces.push("orgId");
+		return {
+			changes: replaces.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/**
+* Manages a Neon project with adopt-or-create semantics.
+*
+* Discovers or creates the project by exact name match. Deletion is a no-op
+* to prevent accidental removal of production databases.
+*
+* @example
+* ```typescript
+* const project = new NeonProject("neon-project", {
+*   apiKey: config.requireSecret("neonApiKey"),
+*   name: "my-app",
+*   orgId: "org-abc123",
+* });
+*
+* // Use the resolved project ID downstream
+* const branch = new NeonBranch("neon-branch-production", {
+*   apiKey: config.requireSecret("neonApiKey"),
+*   projectId: project.projectId,
+*   name: "production",
+* });
+* ```
+*/
+var NeonProject = class extends pulumi.dynamic.Resource {
+	/**
+	* @param name Pulumi resource name
+	* @param args Project configuration inputs
+	* @param opts Standard Pulumi resource options
+	*/
+	constructor(name, args, opts) {
+		super(new NeonProjectProvider(), name, {
+			...args,
+			projectId: void 0
+		}, opts);
+	}
+};
+
+//#endregion
+export { NeonProject };
+//# sourceMappingURL=project.mjs.map

package/dist/neon/project.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.mjs","names":[],"sources":["../../src/neon/project.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { NeonClient } from \"./client.js\";\n\n/** Resolved inputs for the Neon project dynamic provider. */\nexport interface NeonProjectInputs {\n\t/** Neon API key. */\n\tapiKey: string;\n\n\t/** Exact project display name to adopt or create. */\n\tname: string;\n\n\t/** Optional Neon organization ID to scope the project search. */\n\torgId?: string;\n}\n\n/** Persisted state for the Neon project. */\ninterface NeonProjectOutputs extends NeonProjectInputs {\n\t/** Neon-assigned project ID (e.g. `\"quiet-forest-69719462\"`). */\n\tprojectId: string;\n}\n\n/** Neon API response for listing projects. */\ninterface ProjectListResponse {\n\tprojects: Array<{ id: string; name: string }>;\n}\n\n/** Neon API response for project creation. */\ninterface ProjectCreateResponse {\n\tproject: { id: string; name: string };\n}\n\n/** Neon API response for reading a single project. */\ninterface ProjectReadResponse {\n\tproject: { id: string; name: string };\n}\n\n/**\n * Dynamic provider implementing adopt-or-create for Neon projects.\n *\n * On `create()`, queries `GET /projects` and performs an exact name match.\n * If found, adopts the existing project. If not, creates a new one via\n * `POST /projects`. Deletion is a no-op to protect production databases.\n */\nclass NeonProjectProvider implements pulumi.dynamic.ResourceProvider {\n\t/**\n\t * Creates or adopts a Neon project by name.\n\t *\n\t * @param inputs Resolved project configuration\n\t * @returns The Neon project ID as the resource ID\n\t */\n\tasync create(\n\t\tinputs: NeonProjectInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new NeonClient(inputs.apiKey);\n\n\t\tconst query = inputs.orgId\n\t\t\t? `/projects?org_id=${inputs.orgId}&search=${encodeURIComponent(inputs.name)}`\n\t\t\t: \"/projects\";\n\n\t\tconst result = await client.get<ProjectListResponse>(query);\n\n\t\tconst existing = result.projects.find((p) => p.name === inputs.name);\n\n\t\tlet projectId: string;\n\n\t\tif (existing) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Adopting existing Neon project \"${inputs.name}\" (${existing.id})`,\n\t\t\t);\n\n\t\t\tprojectId = existing.id;\n\t\t} else {\n\t\t\tpulumi.log.info(`Neon project \"${inputs.name}\" not found — creating...`);\n\n\t\t\tconst created = await client.post<ProjectCreateResponse>(\"/projects\", {\n\t\t\t\tproject: { name: inputs.name },\n\t\t\t});\n\n\t\t\tprojectId = created.project.id;\n\t\t}\n\n\t\tconst outs: NeonProjectOutputs = { ...inputs, projectId };\n\n\t\treturn { id: projectId, outs };\n\t}\n\n\t/**\n\t * Reads current state for `pulumi refresh`.\n\t *\n\t * @param id Current Neon project ID\n\t * @param props Last known persisted state\n\t * @returns Refreshed resource ID and properties\n\t * @throws {Error} If the project no longer exists\n\t */\n\tasync read(\n\t\tid: string,\n\t\tprops: NeonProjectOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new NeonClient(props.apiKey);\n\n\t\tconst result = await client.get<ProjectReadResponse>(`/projects/${id}`);\n\n\t\treturn {\n\t\t\tid: result.project.id,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tname: result.project.name,\n\t\t\t\tprojectId: result.project.id,\n\t\t\t},\n\t\t};\n\t}\n\n\t/**\n\t * Skips deletion to protect production databases.\n\t */\n\tasync delete(): Promise<void> {\n\t\tpulumi.log.warn(\n\t\t\t\"Neon project deletion skipped — projects are not deleted by Pulumi\",\n\t\t);\n\t}\n\n\t/**\n\t * Compares old and new inputs. `name` or `orgId` changes trigger replacement.\n\t */\n\tasync diff(\n\t\t_id: string,\n\t\tolds: NeonProjectOutputs,\n\t\tnews: NeonProjectInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\n\t\tif (olds.orgId !== news.orgId) {\n\t\t\treplaces.push(\"orgId\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/**\n * Manages a Neon project with adopt-or-create semantics.\n *\n * Discovers or creates the project by exact name match. Deletion is a no-op\n * to prevent accidental removal of production databases.\n *\n * @example\n * ```typescript\n * const project = new NeonProject(\"neon-project\", {\n *   apiKey: config.requireSecret(\"neonApiKey\"),\n *   name: \"my-app\",\n *   orgId: \"org-abc123\",\n * });\n *\n * // Use the resolved project ID downstream\n * const branch = new NeonBranch(\"neon-branch-production\", {\n *   apiKey: config.requireSecret(\"neonApiKey\"),\n *   projectId: project.projectId,\n *   name: \"production\",\n * });\n * ```\n */\nexport class NeonProject extends pulumi.dynamic.Resource {\n\t/** Neon-assigned project ID. */\n\tpublic declare readonly projectId: pulumi.Output<string>;\n\n\t/**\n\t * @param name Pulumi resource name\n\t * @param args Project configuration inputs\n\t * @param opts Standard Pulumi resource options\n\t */\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\t/** Neon API key. */\n\t\t\tapiKey: pulumi.Input<string>;\n\n\t\t\t/** Exact project display name to adopt or create. */\n\t\t\tname: pulumi.Input<string>;\n\n\t\t\t/** Optional Neon organization ID to scope the project search. */\n\t\t\torgId?: pulumi.Input<string>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew NeonProjectProvider(),\n\t\t\tname,\n\t\t\t{ ...args, projectId: undefined },\n\t\t\topts,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;AA2CA,IAAM,sBAAN,MAAqE;;;;;;;CAOpE,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAI,WAAW,OAAO,MAAM;EAE3C,MAAM,QAAQ,OAAO,QAClB,oBAAoB,OAAO,MAAM,UAAU,mBAAmB,OAAO,IAAI,MACzE;EAIH,MAAM,YAAW,MAFI,OAAO,IAAyB,KAAK,GAElC,SAAS,MAAM,MAAM,EAAE,SAAS,OAAO,IAAI;EAEnE,IAAI;EAEJ,IAAI,UAAU;GACb,OAAO,IAAI,KACV,mCAAmC,OAAO,KAAK,KAAK,SAAS,GAAG,EACjE;GAEA,YAAY,SAAS;EACtB,OAAO;GACN,OAAO,IAAI,KAAK,iBAAiB,OAAO,KAAK,0BAA0B;GAMvE,aAAY,MAJU,OAAO,KAA4B,aAAa,EACrE,SAAS,EAAE,MAAM,OAAO,KAAK,EAC9B,CAAC,GAEmB,QAAQ;EAC7B;EAEA,MAAM,OAA2B;GAAE,GAAG;GAAQ;EAAU;EAExD,OAAO;GAAE,IAAI;GAAW;EAAK;CAC9B;;;;;;;;;CAUA,MAAM,KACL,IACA,OACqC;EAGrC,MAAM,SAAS,MAAM,IAFF,WAAW,MAAM,MAEV,EAAE,IAAyB,aAAa,IAAI;EAEtE,OAAO;GACN,IAAI,OAAO,QAAQ;GACnB,OAAO;IACN,GAAG;IACH,MAAM,OAAO,QAAQ;IACrB,WAAW,OAAO,QAAQ;GAC3B;EACD;CACD;;;;CAKA,MAAM,SAAwB;EAC7B,OAAO,IAAI,KACV,oEACD;CACD;;;;CAKA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAGrB,IAAI,KAAK,UAAU,KAAK,OACvB,SAAS,KAAK,OAAO;EAGtB,OAAO;GACN,SAAS,SAAS,SAAS;GAC3B;GACA,qBAAqB;EACtB;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;;AAwBA,IAAa,cAAb,cAAiC,OAAO,QAAQ,SAAS;;;;;;CASxD,YACC,MACA,MAUA,MACC;EACD,MACC,IAAI,oBAAoB,GACxB,MACA;GAAE,GAAG;GAAM,WAAW;EAAU,GAChC,IACD;CACD;AACD"}

package/dist/neon/role.cjs

@@ -0,0 +1,135 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_neon_client = require('./client.cjs');
+let _pulumi_pulumi = require("@pulumi/pulumi");
+_pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
+
+//#region src/neon/role.ts
+/**
+* Checks if a role exists by name on a branch.
+*
+* @param client Authenticated Neon API client
+* @param projectId Neon project ID
+* @param branchId Branch ID to search within
+* @param name Exact role name to match
+* @returns `true` if found, `false` otherwise
+*/
+async function roleExists(client, projectId, branchId, name) {
+	return (await client.get(`/projects/${projectId}/branches/${branchId}/roles`)).roles.some((r) => r.name === name);
+}
+/**
+* Reveals the password for an existing role via the dedicated API endpoint.
+*
+* @param client Authenticated Neon API client
+* @param projectId Neon project ID
+* @param branchId Branch ID
+* @param name Role name
+* @returns The role password
+*/
+async function revealPassword(client, projectId, branchId, name) {
+	return (await client.get(`/projects/${projectId}/branches/${branchId}/roles/${name}/reveal_password`)).password;
+}
+/**
+* Dynamic provider implementing CRUD for Neon database roles.
+*
+* Uses adopt-or-create on `create()`: finds an existing role by name
+* before creating a new one.
+*/
+var NeonRoleProvider = class {
+	/**
+	* Creates or adopts a Neon role by name.
+	*
+	* @param inputs Resolved role configuration
+	* @returns Composite ID `{branchId}/{roleName}` as the resource ID
+	*/
+	async create(inputs) {
+		const client = new require_neon_client.NeonClient(inputs.apiKey);
+		if (!await roleExists(client, inputs.projectId, inputs.branchId, inputs.name)) await client.post(`/projects/${inputs.projectId}/branches/${inputs.branchId}/roles`, { role: { name: inputs.name } });
+		else _pulumi_pulumi.log.info(`Adopting existing Neon role "${inputs.name}"`);
+		const password = await revealPassword(client, inputs.projectId, inputs.branchId, inputs.name);
+		return {
+			id: `${inputs.branchId}/${inputs.name}`,
+			outs: {
+				...inputs,
+				password
+			}
+		};
+	}
+	/**
+	* Reads current state for `pulumi refresh`.
+	*
+	* @param id Current composite role ID
+	* @param props Last known persisted state
+	* @returns Refreshed resource ID and properties with current password
+	* @throws {Error} If the role no longer exists
+	*/
+	async read(id, props) {
+		const password = await revealPassword(new require_neon_client.NeonClient(props.apiKey), props.projectId, props.branchId, props.name);
+		return {
+			id,
+			props: {
+				...props,
+				password
+			}
+		};
+	}
+	/**
+	* Deletes the Neon role. Silently succeeds if already deleted.
+	*/
+	async delete(_id, props) {
+		const client = new require_neon_client.NeonClient(props.apiKey);
+		try {
+			await client.delete(`/projects/${props.projectId}/branches/${props.branchId}/roles/${props.name}`);
+		} catch {
+			_pulumi_pulumi.log.warn(`Failed to delete Neon role "${props.name}" (may already be deleted)`);
+		}
+	}
+	/**
+	* Compares old and new inputs. Changing any field triggers replacement
+	* since roles cannot be renamed or moved between branches.
+	*/
+	async diff(_id, olds, news) {
+		const replaces = [];
+		if (olds.projectId !== news.projectId) replaces.push("projectId");
+		if (olds.branchId !== news.branchId) replaces.push("branchId");
+		if (olds.name !== news.name) replaces.push("name");
+		return {
+			changes: replaces.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/**
+* Manages a Neon database role with adopt-or-create semantics.
+* Exposes `password` as a secret output for connection string composition.
+*
+* @example
+* ```typescript
+* const role = new NeonRole("neon-role-owner", {
+*   apiKey: config.requireSecret("neonApiKey"),
+*   projectId: "quiet-forest-69719462",
+*   branchId: branch.id,
+*   name: "neondb_owner",
+* });
+*
+* const password = role.password;
+* ```
+*/
+var NeonRole = class extends _pulumi_pulumi.dynamic.Resource {
+	/**
+	* @param name Pulumi resource name
+	* @param args Role configuration inputs
+	* @param opts Standard Pulumi resource options
+	*/
+	constructor(name, args, opts) {
+		super(new NeonRoleProvider(), name, {
+			...args,
+			password: void 0
+		}, opts);
+	}
+};
+
+//#endregion
+exports.NeonRole = NeonRole;
+//# sourceMappingURL=role.cjs.map

package/dist/neon/role.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.cjs","names":["NeonClient","pulumi"],"sources":["../../src/neon/role.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { NeonClient } from \"./client.js\";\n\n/** Resolved inputs for the Neon role dynamic provider. */\nexport interface NeonRoleInputs {\n\t/** Neon API key. */\n\tapiKey: string;\n\n\t/** Neon project ID. */\n\tprojectId: string;\n\n\t/** Branch ID the role belongs to. */\n\tbranchId: string;\n\n\t/** Role name (e.g. `\"neondb_owner\"`). */\n\tname: string;\n}\n\n/** Persisted state for the Neon role. */\ninterface NeonRoleOutputs extends NeonRoleInputs {\n\t/** Role password (auto-generated by Neon). */\n\tpassword: string;\n}\n\n/** Neon API response for the reveal_password endpoint. */\ninterface PasswordResponse {\n\tpassword: string;\n}\n\n/** Neon API response for listing roles. */\ninterface RoleListResponse {\n\troles: Array<{\n\t\tname: string;\n\t}>;\n}\n\n/**\n * Checks if a role exists by name on a branch.\n *\n * @param client Authenticated Neon API client\n * @param projectId Neon project ID\n * @param branchId Branch ID to search within\n * @param name Exact role name to match\n * @returns `true` if found, `false` otherwise\n */\nasync function roleExists(\n\tclient: NeonClient,\n\tprojectId: string,\n\tbranchId: string,\n\tname: string,\n): Promise<boolean> {\n\tconst result = await client.get<RoleListResponse>(\n\t\t`/projects/${projectId}/branches/${branchId}/roles`,\n\t);\n\n\treturn result.roles.some((r) => r.name === name);\n}\n\n/**\n * Reveals the password for an existing role via the dedicated API endpoint.\n *\n * @param client Authenticated Neon API client\n * @param projectId Neon project ID\n * @param branchId Branch ID\n * @param name Role name\n * @returns The role password\n */\nasync function revealPassword(\n\tclient: NeonClient,\n\tprojectId: string,\n\tbranchId: string,\n\tname: string,\n): Promise<string> {\n\tconst result = await client.get<PasswordResponse>(\n\t\t`/projects/${projectId}/branches/${branchId}/roles/${name}/reveal_password`,\n\t);\n\n\treturn result.password;\n}\n\n/**\n * Dynamic provider implementing CRUD for Neon database roles.\n *\n * Uses adopt-or-create on `create()`: finds an existing role by name\n * before creating a new one.\n */\nclass NeonRoleProvider implements pulumi.dynamic.ResourceProvider {\n\t/**\n\t * Creates or adopts a Neon role by name.\n\t *\n\t * @param inputs Resolved role configuration\n\t * @returns Composite ID `{branchId}/{roleName}` as the resource ID\n\t */\n\tasync create(inputs: NeonRoleInputs): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new NeonClient(inputs.apiKey);\n\n\t\tconst exists = await roleExists(\n\t\t\tclient,\n\t\t\tinputs.projectId,\n\t\t\tinputs.branchId,\n\t\t\tinputs.name,\n\t\t);\n\n\t\tif (!exists) {\n\t\t\tawait client.post(\n\t\t\t\t`/projects/${inputs.projectId}/branches/${inputs.branchId}/roles`,\n\t\t\t\t{ role: { name: inputs.name } },\n\t\t\t);\n\t\t} else {\n\t\t\tpulumi.log.info(`Adopting existing Neon role \"${inputs.name}\"`);\n\t\t}\n\n\t\tconst password = await revealPassword(\n\t\t\tclient,\n\t\t\tinputs.projectId,\n\t\t\tinputs.branchId,\n\t\t\tinputs.name,\n\t\t);\n\n\t\treturn {\n\t\t\tid: `${inputs.branchId}/${inputs.name}`,\n\t\t\touts: { ...inputs, password },\n\t\t};\n\t}\n\n\t/**\n\t * Reads current state for `pulumi refresh`.\n\t *\n\t * @param id Current composite role ID\n\t * @param props Last known persisted state\n\t * @returns Refreshed resource ID and properties with current password\n\t * @throws {Error} If the role no longer exists\n\t */\n\tasync read(\n\t\tid: string,\n\t\tprops: NeonRoleOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new NeonClient(props.apiKey);\n\n\t\tconst password = await revealPassword(\n\t\t\tclient,\n\t\t\tprops.projectId,\n\t\t\tprops.branchId,\n\t\t\tprops.name,\n\t\t);\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: { ...props, password },\n\t\t};\n\t}\n\n\t/**\n\t * Deletes the Neon role. Silently succeeds if already deleted.\n\t */\n\tasync delete(_id: string, props: NeonRoleOutputs): Promise<void> {\n\t\tconst client = new NeonClient(props.apiKey);\n\n\t\ttry {\n\t\t\tawait client.delete(\n\t\t\t\t`/projects/${props.projectId}/branches/${props.branchId}/roles/${props.name}`,\n\t\t\t);\n\t\t} catch {\n\t\t\tpulumi.log.warn(\n\t\t\t\t`Failed to delete Neon role \"${props.name}\" (may already be deleted)`,\n\t\t\t);\n\t\t}\n\t}\n\n\t/**\n\t * Compares old and new inputs. Changing any field triggers replacement\n\t * since roles cannot be renamed or moved between branches.\n\t */\n\tasync diff(\n\t\t_id: string,\n\t\tolds: NeonRoleOutputs,\n\t\tnews: NeonRoleInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.projectId !== news.projectId) {\n\t\t\treplaces.push(\"projectId\");\n\t\t}\n\n\t\tif (olds.branchId !== news.branchId) {\n\t\t\treplaces.push(\"branchId\");\n\t\t}\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/**\n * Manages a Neon database role with adopt-or-create semantics.\n * Exposes `password` as a secret output for connection string composition.\n *\n * @example\n * ```typescript\n * const role = new NeonRole(\"neon-role-owner\", {\n *   apiKey: config.requireSecret(\"neonApiKey\"),\n *   projectId: \"quiet-forest-69719462\",\n *   branchId: branch.id,\n *   name: \"neondb_owner\",\n * });\n *\n * const password = role.password;\n * ```\n */\nexport class NeonRole extends pulumi.dynamic.Resource {\n\t/** Role password (auto-generated by Neon). */\n\tpublic declare readonly password: pulumi.Output<string>;\n\n\t/**\n\t * @param name Pulumi resource name\n\t * @param args Role configuration inputs\n\t * @param opts Standard Pulumi resource options\n\t */\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\t/** Neon API key. */\n\t\t\tapiKey: pulumi.Input<string>;\n\n\t\t\t/** Neon project ID. */\n\t\t\tprojectId: pulumi.Input<string>;\n\n\t\t\t/** Branch ID the role belongs to. */\n\t\t\tbranchId: pulumi.Input<string>;\n\n\t\t\t/** Role name (e.g. `\"neondb_owner\"`). */\n\t\t\tname: pulumi.Input<string>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(new NeonRoleProvider(), name, { ...args, password: undefined }, opts);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA6CA,eAAe,WACd,QACA,WACA,UACA,MACmB;CAKnB,QAAO,MAJc,OAAO,IAC3B,aAAa,UAAU,YAAY,SAAS,OAC7C,GAEc,MAAM,MAAM,MAAM,EAAE,SAAS,IAAI;AAChD;;;;;;;;;;AAWA,eAAe,eACd,QACA,WACA,UACA,MACkB;CAKlB,QAAO,MAJc,OAAO,IAC3B,aAAa,UAAU,YAAY,SAAS,SAAS,KAAK,iBAC3D,GAEc;AACf;;;;;;;AAQA,IAAM,mBAAN,MAAkE;;;;;;;CAOjE,MAAM,OAAO,QAA8D;EAC1E,MAAM,SAAS,IAAIA,+BAAW,OAAO,MAAM;EAS3C,IAAI,CAAC,MAPgB,WACpB,QACA,OAAO,WACP,OAAO,UACP,OAAO,IACR,GAGC,MAAM,OAAO,KACZ,aAAa,OAAO,UAAU,YAAY,OAAO,SAAS,SAC1D,EAAE,MAAM,EAAE,MAAM,OAAO,KAAK,EAAE,CAC/B;OAEA,eAAO,IAAI,KAAK,gCAAgC,OAAO,KAAK,EAAE;EAG/D,MAAM,WAAW,MAAM,eACtB,QACA,OAAO,WACP,OAAO,UACP,OAAO,IACR;EAEA,OAAO;GACN,IAAI,GAAG,OAAO,SAAS,GAAG,OAAO;GACjC,MAAM;IAAE,GAAG;IAAQ;GAAS;EAC7B;CACD;;;;;;;;;CAUA,MAAM,KACL,IACA,OACqC;EAGrC,MAAM,WAAW,MAAM,eACtB,IAHkBA,+BAAW,MAAM,MAG9B,GACL,MAAM,WACN,MAAM,UACN,MAAM,IACP;EAEA,OAAO;GACN;GACA,OAAO;IAAE,GAAG;IAAO;GAAS;EAC7B;CACD;;;;CAKA,MAAM,OAAO,KAAa,OAAuC;EAChE,MAAM,SAAS,IAAIA,+BAAW,MAAM,MAAM;EAE1C,IAAI;GACH,MAAM,OAAO,OACZ,aAAa,MAAM,UAAU,YAAY,MAAM,SAAS,SAAS,MAAM,MACxE;EACD,QAAQ;GACP,eAAO,IAAI,KACV,+BAA+B,MAAM,KAAK,2BAC3C;EACD;CACD;;;;;CAMA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,cAAc,KAAK,WAC3B,SAAS,KAAK,WAAW;EAG1B,IAAI,KAAK,aAAa,KAAK,UAC1B,SAAS,KAAK,UAAU;EAGzB,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAGrB,OAAO;GACN,SAAS,SAAS,SAAS;GAC3B;GACA,qBAAqB;EACtB;CACD;AACD;;;;;;;;;;;;;;;;;AAkBA,IAAa,WAAb,cAA8BC,eAAO,QAAQ,SAAS;;;;;;CASrD,YACC,MACA,MAaA,MACC;EACD,MAAM,IAAI,iBAAiB,GAAG,MAAM;GAAE,GAAG;GAAM,UAAU;EAAU,GAAG,IAAI;CAC3E;AACD"}

package/dist/neon/role.d.cts

@@ -0,0 +1,49 @@
+import { t as __name } from "../chunk-OPjESj5l.cjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/neon/role.d.ts
+/** Resolved inputs for the Neon role dynamic provider. */
+interface NeonRoleInputs {
+  /** Neon API key. */
+  apiKey: string;
+  /** Neon project ID. */
+  projectId: string;
+  /** Branch ID the role belongs to. */
+  branchId: string;
+  /** Role name (e.g. `"neondb_owner"`). */
+  name: string;
+}
+/**
+ * Manages a Neon database role with adopt-or-create semantics.
+ * Exposes `password` as a secret output for connection string composition.
+ *
+ * @example
+ * ```typescript
+ * const role = new NeonRole("neon-role-owner", {
+ *   apiKey: config.requireSecret("neonApiKey"),
+ *   projectId: "quiet-forest-69719462",
+ *   branchId: branch.id,
+ *   name: "neondb_owner",
+ * });
+ *
+ * const password = role.password;
+ * ```
+ */
+declare class NeonRole extends pulumi.dynamic.Resource {
+  /** Role password (auto-generated by Neon). */
+  readonly password: pulumi.Output<string>;
+  /**
+   * @param name Pulumi resource name
+   * @param args Role configuration inputs
+   * @param opts Standard Pulumi resource options
+   */
+  constructor(name: string, args: {
+    /** Neon API key. */apiKey: pulumi.Input<string>; /** Neon project ID. */
+    projectId: pulumi.Input<string>; /** Branch ID the role belongs to. */
+    branchId: pulumi.Input<string>; /** Role name (e.g. `"neondb_owner"`). */
+    name: pulumi.Input<string>;
+  }, opts?: pulumi.CustomResourceOptions);
+}
+//#endregion
+export { NeonRole, NeonRoleInputs };
+//# sourceMappingURL=role.d.cts.map