@infracraft/pulumi 0.1.0

package/dist/railway/index.d.mts

@@ -0,0 +1,8 @@
+import { RailwayClient } from "./client.mjs";
+import { RailwayDeploy, RailwayDeployConfig } from "./deploy.mjs";
+import { RailwayDomain, RailwayDomainInputs } from "./domain.mjs";
+import { RailwayProject, RailwayProjectInputs } from "./project.mjs";
+import { RailwayService, RailwayServiceInputs } from "./service.mjs";
+import { RailwayVariable, RailwayVariableInputs } from "./variable.mjs";
+import { RailwayVolume, RailwayVolumeInputs } from "./volume.mjs";
+export { RailwayClient, RailwayDeploy, type RailwayDeployConfig, RailwayDomain, type RailwayDomainInputs, RailwayProject, type RailwayProjectInputs, RailwayService, type RailwayServiceInputs, RailwayVariable, type RailwayVariableInputs, RailwayVolume, type RailwayVolumeInputs };

package/dist/railway/index.mjs

@@ -0,0 +1,9 @@
+import { RailwayClient } from "./client.mjs";
+import { RailwayDeploy } from "./deploy.mjs";
+import { RailwayDomain } from "./domain.mjs";
+import { RailwayProject } from "./project.mjs";
+import { RailwayService } from "./service.mjs";
+import { RailwayVariable } from "./variable.mjs";
+import { RailwayVolume } from "./volume.mjs";
+
+export { RailwayClient, RailwayDeploy, RailwayDomain, RailwayProject, RailwayService, RailwayVariable, RailwayVolume };

package/dist/railway/project.cjs

@@ -0,0 +1,231 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_railway_client = require('./client.cjs');
+let _pulumi_pulumi = require("@pulumi/pulumi");
+_pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
+
+//#region src/railway/project.ts
+const WORKSPACE_QUERY = `
+  query {
+    me {
+      workspaces {
+        id
+        name
+        projects {
+          edges {
+            node {
+              id
+              name
+            }
+          }
+        }
+      }
+    }
+  }
+`;
+const PROJECT_CREATE = `
+  mutation($input: ProjectCreateInput!) {
+    projectCreate(input: $input) {
+      id
+      name
+    }
+  }
+`;
+const PROJECT_UPDATE = `
+  mutation($id: String!, $input: ProjectUpdateInput!) {
+    projectUpdate(id: $id, input: $input) {
+      id
+      name
+    }
+  }
+`;
+const PROJECT_ENVIRONMENTS_QUERY = `
+  query($projectId: String!) {
+    project(id: $projectId) {
+      environments {
+        edges {
+          node {
+            id
+            name
+          }
+        }
+      }
+    }
+  }
+`;
+const PROJECT_TOKENS_QUERY = `
+  query($projectId: String!) {
+    projectTokens(projectId: $projectId) {
+      edges { node { id name } }
+    }
+  }
+`;
+const PROJECT_TOKEN_CREATE = `
+  mutation($input: ProjectTokenCreateInput!) {
+    projectTokenCreate(input: $input)
+  }
+`;
+const PROJECT_TOKEN_DELETE = `
+  mutation($id: String!) { projectTokenDelete(id: $id) }
+`;
+const PERMANENT_TOKEN_NAME = "pulumi";
+/**
+* Fetches all environments for a project and returns a name → UUID map.
+*/
+async function fetchProjectEnvironments(client, projectId) {
+	const result = await client.query(PROJECT_ENVIRONMENTS_QUERY, { projectId });
+	const environments = {};
+	for (const edge of result.project.environments.edges) environments[edge.node.name] = edge.node.id;
+	return environments;
+}
+/**
+* Gets or creates a permanent project-scoped token named "pulumi".
+*
+* Deletes any stale tokens with the same name before creating a new one,
+* ensuring a single canonical token exists. Does NOT write to Pulumi config —
+* the token is returned as a secret output for the consumer to manage.
+*/
+async function getOrCreateProjectToken(client, projectId, environmentId) {
+	const stale = (await client.query(PROJECT_TOKENS_QUERY, { projectId })).projectTokens.edges.filter((edge) => edge.node.name === PERMANENT_TOKEN_NAME);
+	for (const entry of stale) await client.query(PROJECT_TOKEN_DELETE, { id: entry.node.id });
+	return (await client.query(PROJECT_TOKEN_CREATE, { input: {
+		projectId,
+		name: PERMANENT_TOKEN_NAME,
+		...environmentId ? { environmentId } : {}
+	} })).projectTokenCreate;
+}
+/**
+* Dynamic provider that adopts an existing Railway project by name, or creates one.
+*
+* On create:
+* 1. Queries workspaces to find the project by name.
+* 2. If found → adopts. If not → creates via `projectCreate`.
+* 3. Fetches all environments and resolves the production environment ID.
+* 4. Creates/reuses a project-scoped token named "pulumi".
+*
+* Deletion is a no-op (with a warning) to prevent accidental project removal.
+* Name changes trigger replacement.
+*/
+var RailwayProjectProvider = class {
+	async create(inputs) {
+		const client = new require_railway_client.RailwayClient(inputs.token);
+		const workspaces = (await client.query(WORKSPACE_QUERY)).me.workspaces;
+		if (workspaces.length === 0) throw new Error("No Railway workspace found — cannot create project");
+		let projectId;
+		for (const workspace of workspaces) {
+			const match = workspace.projects.edges.find((edge) => edge.node.name === inputs.name);
+			if (match) {
+				projectId = match.node.id;
+				break;
+			}
+		}
+		if (projectId) {
+			_pulumi_pulumi.log.info(`Adopted existing Railway project "${inputs.name}" (${projectId})`);
+			if (inputs.description) await client.query(PROJECT_UPDATE, {
+				id: projectId,
+				input: { description: inputs.description }
+			});
+		} else {
+			const workspace = workspaces[0];
+			projectId = (await client.query(PROJECT_CREATE, { input: {
+				name: inputs.name,
+				description: inputs.description,
+				workspaceId: workspace.id
+			} })).projectCreate.id;
+			_pulumi_pulumi.log.info(`Created Railway project "${inputs.name}" (${projectId})`);
+		}
+		if (!projectId) throw new Error(`Failed to find or create Railway project "${inputs.name}"`);
+		const productionEnvironmentId = (await fetchProjectEnvironments(client, projectId)).production ?? "";
+		const projectToken = await getOrCreateProjectToken(client, projectId, productionEnvironmentId || void 0);
+		const outs = {
+			...inputs,
+			projectId,
+			productionEnvironmentId,
+			projectToken
+		};
+		return {
+			id: projectId,
+			outs
+		};
+	}
+	async update(id, _olds, news) {
+		const client = new require_railway_client.RailwayClient(news.token);
+		await client.query(PROJECT_UPDATE, {
+			id,
+			input: {
+				name: news.name,
+				description: news.description
+			}
+		});
+		const productionEnvironmentId = (await fetchProjectEnvironments(client, id)).production ?? "";
+		const projectToken = await getOrCreateProjectToken(client, id, productionEnvironmentId || void 0);
+		return { outs: {
+			...news,
+			projectId: id,
+			productionEnvironmentId,
+			projectToken
+		} };
+	}
+	async read(id, props) {
+		const productionEnvironmentId = (await fetchProjectEnvironments(new require_railway_client.RailwayClient(props.token), id)).production ?? props.productionEnvironmentId;
+		return {
+			id,
+			props: {
+				...props,
+				projectId: id,
+				productionEnvironmentId
+			}
+		};
+	}
+	async delete() {
+		_pulumi_pulumi.log.warn("Railway project deletion skipped — projects are not deleted by Pulumi");
+	}
+	async diff(_id, olds, news) {
+		const replaces = [];
+		const changes = [];
+		if (olds.name !== news.name) replaces.push("name");
+		if (olds.description !== news.description) changes.push("description");
+		return {
+			changes: replaces.length > 0 || changes.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/**
+* Manages a Railway project with adopt-or-create semantics.
+*
+* Discovers or creates the project, resolves the production environment ID,
+* and provisions a project-scoped token named "pulumi" for CLI deploys.
+* The token is exposed as a secret output — the consumer decides how to store it.
+*
+* @example
+* ```typescript
+* const project = new RailwayProject("railway-project", {
+*   token: railwayConfig.token,
+*   name: "my-app",
+*   description: "Railway services for my-app",
+* });
+*
+* // Use outputs downstream
+* const serviceVar = new RailwayVariable("...", {
+*   projectId: project.projectId,
+*   environmentId: project.productionEnvironmentId,
+*   ...
+* });
+* ```
+*/
+var RailwayProject = class extends _pulumi_pulumi.dynamic.Resource {
+	constructor(name, args, opts) {
+		super(new RailwayProjectProvider(), name, {
+			...args,
+			projectId: void 0,
+			productionEnvironmentId: void 0,
+			projectToken: _pulumi_pulumi.secret(void 0)
+		}, opts);
+	}
+};
+
+//#endregion
+exports.RailwayProject = RailwayProject;
+//# sourceMappingURL=project.cjs.map

package/dist/railway/project.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.cjs","names":["RailwayClient","pulumi"],"sources":["../../src/railway/project.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { RailwayClient } from \"./client.js\";\n\n/** Resolved inputs for the Railway project dynamic provider. */\nexport interface RailwayProjectInputs {\n\t/** Railway API bearer token. */\n\ttoken: string;\n\n\t/** Desired display name for the project in Railway's dashboard. */\n\tname: string;\n\n\t/** Optional description shown in Railway's dashboard. */\n\tdescription?: string;\n}\n\n/** Persisted state for the Railway project. */\ninterface RailwayProjectOutputs extends RailwayProjectInputs {\n\t/** Railway-assigned project UUID. */\n\tprojectId: string;\n\n\t/** Railway-assigned production environment UUID. */\n\tproductionEnvironmentId: string;\n\n\t/** Railway project-scoped token (auto-provisioned, exposed as secret output). */\n\tprojectToken: string;\n}\n\nconst WORKSPACE_QUERY = `\n  query {\n    me {\n      workspaces {\n        id\n        name\n        projects {\n          edges {\n            node {\n              id\n              name\n            }\n          }\n        }\n      }\n    }\n  }\n`;\n\nconst PROJECT_CREATE = `\n  mutation($input: ProjectCreateInput!) {\n    projectCreate(input: $input) {\n      id\n      name\n    }\n  }\n`;\n\nconst PROJECT_UPDATE = `\n  mutation($id: String!, $input: ProjectUpdateInput!) {\n    projectUpdate(id: $id, input: $input) {\n      id\n      name\n    }\n  }\n`;\n\nconst PROJECT_ENVIRONMENTS_QUERY = `\n  query($projectId: String!) {\n    project(id: $projectId) {\n      environments {\n        edges {\n          node {\n            id\n            name\n          }\n        }\n      }\n    }\n  }\n`;\n\nconst PROJECT_TOKENS_QUERY = `\n  query($projectId: String!) {\n    projectTokens(projectId: $projectId) {\n      edges { node { id name } }\n    }\n  }\n`;\n\nconst PROJECT_TOKEN_CREATE = `\n  mutation($input: ProjectTokenCreateInput!) {\n    projectTokenCreate(input: $input)\n  }\n`;\n\nconst PROJECT_TOKEN_DELETE = `\n  mutation($id: String!) { projectTokenDelete(id: $id) }\n`;\n\nconst PERMANENT_TOKEN_NAME = \"pulumi\";\n\n/**\n * Fetches all environments for a project and returns a name → UUID map.\n */\nasync function fetchProjectEnvironments(\n\tclient: RailwayClient,\n\tprojectId: string,\n): Promise<Record<string, string>> {\n\tconst result = await client.query<{\n\t\tproject: {\n\t\t\tenvironments: {\n\t\t\t\tedges: Array<{ node: { id: string; name: string } }>;\n\t\t\t};\n\t\t};\n\t}>(PROJECT_ENVIRONMENTS_QUERY, { projectId });\n\n\tconst environments: Record<string, string> = {};\n\n\tfor (const edge of result.project.environments.edges) {\n\t\tenvironments[edge.node.name] = edge.node.id;\n\t}\n\n\treturn environments;\n}\n\n/**\n * Gets or creates a permanent project-scoped token named \"pulumi\".\n *\n * Deletes any stale tokens with the same name before creating a new one,\n * ensuring a single canonical token exists. Does NOT write to Pulumi config —\n * the token is returned as a secret output for the consumer to manage.\n */\nasync function getOrCreateProjectToken(\n\tclient: RailwayClient,\n\tprojectId: string,\n\tenvironmentId?: string,\n): Promise<string> {\n\tconst tokensResult = await client.query<{\n\t\tprojectTokens: {\n\t\t\tedges: Array<{ node: { id: string; name: string } }>;\n\t\t};\n\t}>(PROJECT_TOKENS_QUERY, { projectId });\n\n\tconst stale = tokensResult.projectTokens.edges.filter(\n\t\t(edge) => edge.node.name === PERMANENT_TOKEN_NAME,\n\t);\n\n\tfor (const entry of stale) {\n\t\tawait client.query(PROJECT_TOKEN_DELETE, { id: entry.node.id });\n\t}\n\n\tconst result = await client.query<{ projectTokenCreate: string }>(\n\t\tPROJECT_TOKEN_CREATE,\n\t\t{\n\t\t\tinput: {\n\t\t\t\tprojectId,\n\t\t\t\tname: PERMANENT_TOKEN_NAME,\n\t\t\t\t...(environmentId ? { environmentId } : {}),\n\t\t\t},\n\t\t},\n\t);\n\n\treturn result.projectTokenCreate;\n}\n\n/**\n * Dynamic provider that adopts an existing Railway project by name, or creates one.\n *\n * On create:\n * 1. Queries workspaces to find the project by name.\n * 2. If found → adopts. If not → creates via `projectCreate`.\n * 3. Fetches all environments and resolves the production environment ID.\n * 4. Creates/reuses a project-scoped token named \"pulumi\".\n *\n * Deletion is a no-op (with a warning) to prevent accidental project removal.\n * Name changes trigger replacement.\n */\nclass RailwayProjectProvider implements pulumi.dynamic.ResourceProvider {\n\tasync create(\n\t\tinputs: RailwayProjectInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new RailwayClient(inputs.token);\n\n\t\tconst workspaceResult = await client.query<{\n\t\t\tme: {\n\t\t\t\tworkspaces: Array<{\n\t\t\t\t\tid: string;\n\t\t\t\t\tname: string;\n\t\t\t\t\tprojects: {\n\t\t\t\t\t\tedges: Array<{ node: { id: string; name: string } }>;\n\t\t\t\t\t};\n\t\t\t\t}>;\n\t\t\t};\n\t\t}>(WORKSPACE_QUERY);\n\n\t\tconst workspaces = workspaceResult.me.workspaces;\n\n\t\tif (workspaces.length === 0) {\n\t\t\tthrow new Error(\"No Railway workspace found — cannot create project\");\n\t\t}\n\n\t\tlet projectId: string | undefined;\n\n\t\tfor (const workspace of workspaces) {\n\t\t\tconst match = workspace.projects.edges.find(\n\t\t\t\t(edge) => edge.node.name === inputs.name,\n\t\t\t);\n\n\t\t\tif (match) {\n\t\t\t\tprojectId = match.node.id;\n\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\n\t\tif (projectId) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Adopted existing Railway project \"${inputs.name}\" (${projectId})`,\n\t\t\t);\n\n\t\t\tif (inputs.description) {\n\t\t\t\tawait client.query(PROJECT_UPDATE, {\n\t\t\t\t\tid: projectId,\n\t\t\t\t\tinput: { description: inputs.description },\n\t\t\t\t});\n\t\t\t}\n\t\t} else {\n\t\t\tconst workspace = workspaces[0];\n\n\t\t\tconst created = await client.query<{\n\t\t\t\tprojectCreate: { id: string; name: string };\n\t\t\t}>(PROJECT_CREATE, {\n\t\t\t\tinput: {\n\t\t\t\t\tname: inputs.name,\n\t\t\t\t\tdescription: inputs.description,\n\t\t\t\t\tworkspaceId: workspace.id,\n\t\t\t\t},\n\t\t\t});\n\n\t\t\tprojectId = created.projectCreate.id;\n\n\t\t\tpulumi.log.info(\n\t\t\t\t`Created Railway project \"${inputs.name}\" (${projectId})`,\n\t\t\t);\n\t\t}\n\n\t\tif (!projectId) {\n\t\t\tthrow new Error(\n\t\t\t\t`Failed to find or create Railway project \"${inputs.name}\"`,\n\t\t\t);\n\t\t}\n\n\t\tconst environments = await fetchProjectEnvironments(client, projectId);\n\n\t\tconst productionEnvironmentId = environments.production ?? \"\";\n\n\t\tconst projectToken = await getOrCreateProjectToken(\n\t\t\tclient,\n\t\t\tprojectId,\n\t\t\tproductionEnvironmentId || undefined,\n\t\t);\n\n\t\tconst outs: RailwayProjectOutputs = {\n\t\t\t...inputs,\n\t\t\tprojectId,\n\t\t\tproductionEnvironmentId,\n\t\t\tprojectToken,\n\t\t};\n\n\t\treturn { id: projectId, outs };\n\t}\n\n\tasync update(\n\t\tid: string,\n\t\t_olds: RailwayProjectOutputs,\n\t\tnews: RailwayProjectInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new RailwayClient(news.token);\n\n\t\tawait client.query(PROJECT_UPDATE, {\n\t\t\tid,\n\t\t\tinput: { name: news.name, description: news.description },\n\t\t});\n\n\t\tconst environments = await fetchProjectEnvironments(client, id);\n\n\t\tconst productionEnvironmentId = environments.production ?? \"\";\n\n\t\tconst projectToken = await getOrCreateProjectToken(\n\t\t\tclient,\n\t\t\tid,\n\t\t\tproductionEnvironmentId || undefined,\n\t\t);\n\n\t\tconst outs: RailwayProjectOutputs = {\n\t\t\t...news,\n\t\t\tprojectId: id,\n\t\t\tproductionEnvironmentId,\n\t\t\tprojectToken,\n\t\t};\n\n\t\treturn { outs };\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: RailwayProjectOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new RailwayClient(props.token);\n\n\t\tconst environments = await fetchProjectEnvironments(client, id);\n\n\t\tconst productionEnvironmentId =\n\t\t\tenvironments.production ?? props.productionEnvironmentId;\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: { ...props, projectId: id, productionEnvironmentId },\n\t\t};\n\t}\n\n\tasync delete(): Promise<void> {\n\t\tpulumi.log.warn(\n\t\t\t\"Railway project deletion skipped — projects are not deleted by Pulumi\",\n\t\t);\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: RailwayProjectOutputs,\n\t\tnews: RailwayProjectInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\t\tconst changes: string[] = [];\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\n\t\tif (olds.description !== news.description) {\n\t\t\tchanges.push(\"description\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0 || changes.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/**\n * Manages a Railway project with adopt-or-create semantics.\n *\n * Discovers or creates the project, resolves the production environment ID,\n * and provisions a project-scoped token named \"pulumi\" for CLI deploys.\n * The token is exposed as a secret output — the consumer decides how to store it.\n *\n * @example\n * ```typescript\n * const project = new RailwayProject(\"railway-project\", {\n *   token: railwayConfig.token,\n *   name: \"my-app\",\n *   description: \"Railway services for my-app\",\n * });\n *\n * // Use outputs downstream\n * const serviceVar = new RailwayVariable(\"...\", {\n *   projectId: project.projectId,\n *   environmentId: project.productionEnvironmentId,\n *   ...\n * });\n * ```\n */\nexport class RailwayProject extends pulumi.dynamic.Resource {\n\t/** Railway project UUID. */\n\tpublic declare readonly projectId: pulumi.Output<string>;\n\n\t/** Railway production environment UUID. */\n\tpublic declare readonly productionEnvironmentId: pulumi.Output<string>;\n\n\t/** Railway project-scoped token (secret). */\n\tpublic declare readonly projectToken: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\t/** Railway API bearer token. */\n\t\t\ttoken: pulumi.Input<string>;\n\n\t\t\t/** Project display name to find and adopt or create. */\n\t\t\tname: pulumi.Input<string>;\n\n\t\t\t/** Optional description shown in Railway's dashboard. */\n\t\t\tdescription?: pulumi.Input<string>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew RailwayProjectProvider(),\n\t\t\tname,\n\t\t\t{\n\t\t\t\t...args,\n\t\t\t\tprojectId: undefined,\n\t\t\t\tproductionEnvironmentId: undefined,\n\t\t\t\tprojectToken: pulumi.secret(undefined as unknown as string),\n\t\t\t},\n\t\t\topts,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;;;AA2BA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;AAmBxB,MAAM,iBAAiB;;;;;;;;AASvB,MAAM,iBAAiB;;;;;;;;AASvB,MAAM,6BAA6B;;;;;;;;;;;;;;AAenC,MAAM,uBAAuB;;;;;;;AAQ7B,MAAM,uBAAuB;;;;;AAM7B,MAAM,uBAAuB;;;AAI7B,MAAM,uBAAuB;;;;AAK7B,eAAe,yBACd,QACA,WACkC;CAClC,MAAM,SAAS,MAAM,OAAO,MAMzB,4BAA4B,EAAE,UAAU,CAAC;CAE5C,MAAM,eAAuC,CAAC;CAE9C,KAAK,MAAM,QAAQ,OAAO,QAAQ,aAAa,OAC9C,aAAa,KAAK,KAAK,QAAQ,KAAK,KAAK;CAG1C,OAAO;AACR;;;;;;;;AASA,eAAe,wBACd,QACA,WACA,eACkB;CAOlB,MAAM,SAAQ,MANa,OAAO,MAI/B,sBAAsB,EAAE,UAAU,CAAC,GAEX,cAAc,MAAM,QAC7C,SAAS,KAAK,KAAK,SAAS,oBAC9B;CAEA,KAAK,MAAM,SAAS,OACnB,MAAM,OAAO,MAAM,sBAAsB,EAAE,IAAI,MAAM,KAAK,GAAG,CAAC;CAc/D,QAAO,MAXc,OAAO,MAC3B,sBACA,EACC,OAAO;EACN;EACA,MAAM;EACN,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;CAC1C,EACD,CACD,GAEc;AACf;;;;;;;;;;;;;AAcA,IAAM,yBAAN,MAAwE;CACvE,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAIA,qCAAc,OAAO,KAAK;EAc7C,MAAM,cAAa,MAZW,OAAO,MAUlC,eAAe,GAEiB,GAAG;EAEtC,IAAI,WAAW,WAAW,GACzB,MAAM,IAAI,MAAM,oDAAoD;EAGrE,IAAI;EAEJ,KAAK,MAAM,aAAa,YAAY;GACnC,MAAM,QAAQ,UAAU,SAAS,MAAM,MACrC,SAAS,KAAK,KAAK,SAAS,OAAO,IACrC;GAEA,IAAI,OAAO;IACV,YAAY,MAAM,KAAK;IAEvB;GACD;EACD;EAEA,IAAI,WAAW;GACd,eAAO,IAAI,KACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,EACjE;GAEA,IAAI,OAAO,aACV,MAAM,OAAO,MAAM,gBAAgB;IAClC,IAAI;IACJ,OAAO,EAAE,aAAa,OAAO,YAAY;GAC1C,CAAC;EAEH,OAAO;GACN,MAAM,YAAY,WAAW;GAY7B,aAAY,MAVU,OAAO,MAE1B,gBAAgB,EAClB,OAAO;IACN,MAAM,OAAO;IACb,aAAa,OAAO;IACpB,aAAa,UAAU;GACxB,EACD,CAAC,GAEmB,cAAc;GAElC,eAAO,IAAI,KACV,4BAA4B,OAAO,KAAK,KAAK,UAAU,EACxD;EACD;EAEA,IAAI,CAAC,WACJ,MAAM,IAAI,MACT,6CAA6C,OAAO,KAAK,EAC1D;EAKD,MAAM,2BAA0B,MAFL,yBAAyB,QAAQ,SAAS,GAExB,cAAc;EAE3D,MAAM,eAAe,MAAM,wBAC1B,QACA,WACA,2BAA2B,MAC5B;EAEA,MAAM,OAA8B;GACnC,GAAG;GACH;GACA;GACA;EACD;EAEA,OAAO;GAAE,IAAI;GAAW;EAAK;CAC9B;CAEA,MAAM,OACL,IACA,OACA,MACuC;EACvC,MAAM,SAAS,IAAIA,qCAAc,KAAK,KAAK;EAE3C,MAAM,OAAO,MAAM,gBAAgB;GAClC;GACA,OAAO;IAAE,MAAM,KAAK;IAAM,aAAa,KAAK;GAAY;EACzD,CAAC;EAID,MAAM,2BAA0B,MAFL,yBAAyB,QAAQ,EAAE,GAEjB,cAAc;EAE3D,MAAM,eAAe,MAAM,wBAC1B,QACA,IACA,2BAA2B,MAC5B;EASA,OAAO,EAAE;GANR,GAAG;GACH,WAAW;GACX;GACA;EAGW,EAAE;CACf;CAEA,MAAM,KACL,IACA,OACqC;EAKrC,MAAM,2BACL,MAH0B,yBAAyB,IAFjCA,qCAAc,MAAM,KAEkB,GAAG,EAAE,GAGhD,cAAc,MAAM;EAElC,OAAO;GACN;GACA,OAAO;IAAE,GAAG;IAAO,WAAW;IAAI;GAAwB;EAC3D;CACD;CAEA,MAAM,SAAwB;EAC7B,eAAO,IAAI,KACV,uEACD;CACD;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAC5B,MAAM,UAAoB,CAAC;EAE3B,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAGrB,IAAI,KAAK,gBAAgB,KAAK,aAC7B,QAAQ,KAAK,aAAa;EAG3B,OAAO;GACN,SAAS,SAAS,SAAS,KAAK,QAAQ,SAAS;GACjD;GACA,qBAAqB;EACtB;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,IAAa,iBAAb,cAAoCC,eAAO,QAAQ,SAAS;CAU3D,YACC,MACA,MAUA,MACC;EACD,MACC,IAAI,uBAAuB,GAC3B,MACA;GACC,GAAG;GACH,WAAW;GACX,yBAAyB;GACzB,cAAcA,eAAO,OAAO,MAA8B;EAC3D,GACA,IACD;CACD;AACD"}

package/dist/railway/project.d.cts

@@ -0,0 +1,52 @@
+import { t as __name } from "../chunk-OPjESj5l.cjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/railway/project.d.ts
+/** Resolved inputs for the Railway project dynamic provider. */
+interface RailwayProjectInputs {
+  /** Railway API bearer token. */
+  token: string;
+  /** Desired display name for the project in Railway's dashboard. */
+  name: string;
+  /** Optional description shown in Railway's dashboard. */
+  description?: string;
+}
+/**
+ * Manages a Railway project with adopt-or-create semantics.
+ *
+ * Discovers or creates the project, resolves the production environment ID,
+ * and provisions a project-scoped token named "pulumi" for CLI deploys.
+ * The token is exposed as a secret output — the consumer decides how to store it.
+ *
+ * @example
+ * ```typescript
+ * const project = new RailwayProject("railway-project", {
+ *   token: railwayConfig.token,
+ *   name: "my-app",
+ *   description: "Railway services for my-app",
+ * });
+ *
+ * // Use outputs downstream
+ * const serviceVar = new RailwayVariable("...", {
+ *   projectId: project.projectId,
+ *   environmentId: project.productionEnvironmentId,
+ *   ...
+ * });
+ * ```
+ */
+declare class RailwayProject extends pulumi.dynamic.Resource {
+  /** Railway project UUID. */
+  readonly projectId: pulumi.Output<string>;
+  /** Railway production environment UUID. */
+  readonly productionEnvironmentId: pulumi.Output<string>;
+  /** Railway project-scoped token (secret). */
+  readonly projectToken: pulumi.Output<string>;
+  constructor(name: string, args: {
+    /** Railway API bearer token. */token: pulumi.Input<string>; /** Project display name to find and adopt or create. */
+    name: pulumi.Input<string>; /** Optional description shown in Railway's dashboard. */
+    description?: pulumi.Input<string>;
+  }, opts?: pulumi.CustomResourceOptions);
+}
+//#endregion
+export { RailwayProject, RailwayProjectInputs };
+//# sourceMappingURL=project.d.cts.map

package/dist/railway/project.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.cts","names":[],"sources":["../../src/railway/project.ts"],"mappings":";;;;;UAIiB,oBAAA;;EAEhB,KAAA;EAFoC;EAKpC,IAAA;EALoC;EAQpC,WAAA;AAAA;;;AAAW;AAwWZ;;;;;;;;;;;;;;;;;;;;cAAa,cAAA,SAAuB,MAAA,CAAO,OAAA,CAAQ,QAAA;EAKM;EAAA,SAHhC,SAAA,EAAW,MAAA,CAAO,MAAA;EAMJ;EAAA,SAHd,uBAAA,EAAyB,MAAA,CAAO,MAAA;;WAGhC,YAAA,EAAc,MAAA,CAAO,MAAA;cAG5C,IAAA,UACA,IAAA;IAEQ,gCAAP,KAAA,EAAO,MAAA,CAAO,KAAA,UAGd;IAAA,IAAA,EAAM,MAAA,CAAO,KAAA,UAAA;IAGb,WAAA,GAAc,MAAA,CAAO,KAAA;EAAA,GAEtB,IAAA,GAAO,MAAA,CAAO,qBAAA;AAAA"}

package/dist/railway/project.d.mts

@@ -0,0 +1,52 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/railway/project.d.ts
+/** Resolved inputs for the Railway project dynamic provider. */
+interface RailwayProjectInputs {
+  /** Railway API bearer token. */
+  token: string;
+  /** Desired display name for the project in Railway's dashboard. */
+  name: string;
+  /** Optional description shown in Railway's dashboard. */
+  description?: string;
+}
+/**
+ * Manages a Railway project with adopt-or-create semantics.
+ *
+ * Discovers or creates the project, resolves the production environment ID,
+ * and provisions a project-scoped token named "pulumi" for CLI deploys.
+ * The token is exposed as a secret output — the consumer decides how to store it.
+ *
+ * @example
+ * ```typescript
+ * const project = new RailwayProject("railway-project", {
+ *   token: railwayConfig.token,
+ *   name: "my-app",
+ *   description: "Railway services for my-app",
+ * });
+ *
+ * // Use outputs downstream
+ * const serviceVar = new RailwayVariable("...", {
+ *   projectId: project.projectId,
+ *   environmentId: project.productionEnvironmentId,
+ *   ...
+ * });
+ * ```
+ */
+declare class RailwayProject extends pulumi.dynamic.Resource {
+  /** Railway project UUID. */
+  readonly projectId: pulumi.Output<string>;
+  /** Railway production environment UUID. */
+  readonly productionEnvironmentId: pulumi.Output<string>;
+  /** Railway project-scoped token (secret). */
+  readonly projectToken: pulumi.Output<string>;
+  constructor(name: string, args: {
+    /** Railway API bearer token. */token: pulumi.Input<string>; /** Project display name to find and adopt or create. */
+    name: pulumi.Input<string>; /** Optional description shown in Railway's dashboard. */
+    description?: pulumi.Input<string>;
+  }, opts?: pulumi.CustomResourceOptions);
+}
+//#endregion
+export { RailwayProject, RailwayProjectInputs };
+//# sourceMappingURL=project.d.mts.map

package/dist/railway/project.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.mts","names":[],"sources":["../../src/railway/project.ts"],"mappings":";;;;;UAIiB,oBAAA;;EAEhB,KAAA;EAFoC;EAKpC,IAAA;EALoC;EAQpC,WAAA;AAAA;;;AAAW;AAwWZ;;;;;;;;;;;;;;;;;;;;cAAa,cAAA,SAAuB,MAAA,CAAO,OAAA,CAAQ,QAAA;EAKM;EAAA,SAHhC,SAAA,EAAW,MAAA,CAAO,MAAA;EAMJ;EAAA,SAHd,uBAAA,EAAyB,MAAA,CAAO,MAAA;;WAGhC,YAAA,EAAc,MAAA,CAAO,MAAA;cAG5C,IAAA,UACA,IAAA;IAEQ,gCAAP,KAAA,EAAO,MAAA,CAAO,KAAA,UAGd;IAAA,IAAA,EAAM,MAAA,CAAO,KAAA,UAAA;IAGb,WAAA,GAAc,MAAA,CAAO,KAAA;EAAA,GAEtB,IAAA,GAAO,MAAA,CAAO,qBAAA;AAAA"}

package/dist/railway/project.mjs

@@ -0,0 +1,229 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { RailwayClient } from "./client.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/railway/project.ts
+const WORKSPACE_QUERY = `
+  query {
+    me {
+      workspaces {
+        id
+        name
+        projects {
+          edges {
+            node {
+              id
+              name
+            }
+          }
+        }
+      }
+    }
+  }
+`;
+const PROJECT_CREATE = `
+  mutation($input: ProjectCreateInput!) {
+    projectCreate(input: $input) {
+      id
+      name
+    }
+  }
+`;
+const PROJECT_UPDATE = `
+  mutation($id: String!, $input: ProjectUpdateInput!) {
+    projectUpdate(id: $id, input: $input) {
+      id
+      name
+    }
+  }
+`;
+const PROJECT_ENVIRONMENTS_QUERY = `
+  query($projectId: String!) {
+    project(id: $projectId) {
+      environments {
+        edges {
+          node {
+            id
+            name
+          }
+        }
+      }
+    }
+  }
+`;
+const PROJECT_TOKENS_QUERY = `
+  query($projectId: String!) {
+    projectTokens(projectId: $projectId) {
+      edges { node { id name } }
+    }
+  }
+`;
+const PROJECT_TOKEN_CREATE = `
+  mutation($input: ProjectTokenCreateInput!) {
+    projectTokenCreate(input: $input)
+  }
+`;
+const PROJECT_TOKEN_DELETE = `
+  mutation($id: String!) { projectTokenDelete(id: $id) }
+`;
+const PERMANENT_TOKEN_NAME = "pulumi";
+/**
+* Fetches all environments for a project and returns a name → UUID map.
+*/
+async function fetchProjectEnvironments(client, projectId) {
+	const result = await client.query(PROJECT_ENVIRONMENTS_QUERY, { projectId });
+	const environments = {};
+	for (const edge of result.project.environments.edges) environments[edge.node.name] = edge.node.id;
+	return environments;
+}
+/**
+* Gets or creates a permanent project-scoped token named "pulumi".
+*
+* Deletes any stale tokens with the same name before creating a new one,
+* ensuring a single canonical token exists. Does NOT write to Pulumi config —
+* the token is returned as a secret output for the consumer to manage.
+*/
+async function getOrCreateProjectToken(client, projectId, environmentId) {
+	const stale = (await client.query(PROJECT_TOKENS_QUERY, { projectId })).projectTokens.edges.filter((edge) => edge.node.name === PERMANENT_TOKEN_NAME);
+	for (const entry of stale) await client.query(PROJECT_TOKEN_DELETE, { id: entry.node.id });
+	return (await client.query(PROJECT_TOKEN_CREATE, { input: {
+		projectId,
+		name: PERMANENT_TOKEN_NAME,
+		...environmentId ? { environmentId } : {}
+	} })).projectTokenCreate;
+}
+/**
+* Dynamic provider that adopts an existing Railway project by name, or creates one.
+*
+* On create:
+* 1. Queries workspaces to find the project by name.
+* 2. If found → adopts. If not → creates via `projectCreate`.
+* 3. Fetches all environments and resolves the production environment ID.
+* 4. Creates/reuses a project-scoped token named "pulumi".
+*
+* Deletion is a no-op (with a warning) to prevent accidental project removal.
+* Name changes trigger replacement.
+*/
+var RailwayProjectProvider = class {
+	async create(inputs) {
+		const client = new RailwayClient(inputs.token);
+		const workspaces = (await client.query(WORKSPACE_QUERY)).me.workspaces;
+		if (workspaces.length === 0) throw new Error("No Railway workspace found — cannot create project");
+		let projectId;
+		for (const workspace of workspaces) {
+			const match = workspace.projects.edges.find((edge) => edge.node.name === inputs.name);
+			if (match) {
+				projectId = match.node.id;
+				break;
+			}
+		}
+		if (projectId) {
+			pulumi.log.info(`Adopted existing Railway project "${inputs.name}" (${projectId})`);
+			if (inputs.description) await client.query(PROJECT_UPDATE, {
+				id: projectId,
+				input: { description: inputs.description }
+			});
+		} else {
+			const workspace = workspaces[0];
+			projectId = (await client.query(PROJECT_CREATE, { input: {
+				name: inputs.name,
+				description: inputs.description,
+				workspaceId: workspace.id
+			} })).projectCreate.id;
+			pulumi.log.info(`Created Railway project "${inputs.name}" (${projectId})`);
+		}
+		if (!projectId) throw new Error(`Failed to find or create Railway project "${inputs.name}"`);
+		const productionEnvironmentId = (await fetchProjectEnvironments(client, projectId)).production ?? "";
+		const projectToken = await getOrCreateProjectToken(client, projectId, productionEnvironmentId || void 0);
+		const outs = {
+			...inputs,
+			projectId,
+			productionEnvironmentId,
+			projectToken
+		};
+		return {
+			id: projectId,
+			outs
+		};
+	}
+	async update(id, _olds, news) {
+		const client = new RailwayClient(news.token);
+		await client.query(PROJECT_UPDATE, {
+			id,
+			input: {
+				name: news.name,
+				description: news.description
+			}
+		});
+		const productionEnvironmentId = (await fetchProjectEnvironments(client, id)).production ?? "";
+		const projectToken = await getOrCreateProjectToken(client, id, productionEnvironmentId || void 0);
+		return { outs: {
+			...news,
+			projectId: id,
+			productionEnvironmentId,
+			projectToken
+		} };
+	}
+	async read(id, props) {
+		const productionEnvironmentId = (await fetchProjectEnvironments(new RailwayClient(props.token), id)).production ?? props.productionEnvironmentId;
+		return {
+			id,
+			props: {
+				...props,
+				projectId: id,
+				productionEnvironmentId
+			}
+		};
+	}
+	async delete() {
+		pulumi.log.warn("Railway project deletion skipped — projects are not deleted by Pulumi");
+	}
+	async diff(_id, olds, news) {
+		const replaces = [];
+		const changes = [];
+		if (olds.name !== news.name) replaces.push("name");
+		if (olds.description !== news.description) changes.push("description");
+		return {
+			changes: replaces.length > 0 || changes.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/**
+* Manages a Railway project with adopt-or-create semantics.
+*
+* Discovers or creates the project, resolves the production environment ID,
+* and provisions a project-scoped token named "pulumi" for CLI deploys.
+* The token is exposed as a secret output — the consumer decides how to store it.
+*
+* @example
+* ```typescript
+* const project = new RailwayProject("railway-project", {
+*   token: railwayConfig.token,
+*   name: "my-app",
+*   description: "Railway services for my-app",
+* });
+*
+* // Use outputs downstream
+* const serviceVar = new RailwayVariable("...", {
+*   projectId: project.projectId,
+*   environmentId: project.productionEnvironmentId,
+*   ...
+* });
+* ```
+*/
+var RailwayProject = class extends pulumi.dynamic.Resource {
+	constructor(name, args, opts) {
+		super(new RailwayProjectProvider(), name, {
+			...args,
+			projectId: void 0,
+			productionEnvironmentId: void 0,
+			projectToken: pulumi.secret(void 0)
+		}, opts);
+	}
+};
+
+//#endregion
+export { RailwayProject };
+//# sourceMappingURL=project.mjs.map

package/dist/railway/project.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.mjs","names":[],"sources":["../../src/railway/project.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { RailwayClient } from \"./client.js\";\n\n/** Resolved inputs for the Railway project dynamic provider. */\nexport interface RailwayProjectInputs {\n\t/** Railway API bearer token. */\n\ttoken: string;\n\n\t/** Desired display name for the project in Railway's dashboard. */\n\tname: string;\n\n\t/** Optional description shown in Railway's dashboard. */\n\tdescription?: string;\n}\n\n/** Persisted state for the Railway project. */\ninterface RailwayProjectOutputs extends RailwayProjectInputs {\n\t/** Railway-assigned project UUID. */\n\tprojectId: string;\n\n\t/** Railway-assigned production environment UUID. */\n\tproductionEnvironmentId: string;\n\n\t/** Railway project-scoped token (auto-provisioned, exposed as secret output). */\n\tprojectToken: string;\n}\n\nconst WORKSPACE_QUERY = `\n  query {\n    me {\n      workspaces {\n        id\n        name\n        projects {\n          edges {\n            node {\n              id\n              name\n            }\n          }\n        }\n      }\n    }\n  }\n`;\n\nconst PROJECT_CREATE = `\n  mutation($input: ProjectCreateInput!) {\n    projectCreate(input: $input) {\n      id\n      name\n    }\n  }\n`;\n\nconst PROJECT_UPDATE = `\n  mutation($id: String!, $input: ProjectUpdateInput!) {\n    projectUpdate(id: $id, input: $input) {\n      id\n      name\n    }\n  }\n`;\n\nconst PROJECT_ENVIRONMENTS_QUERY = `\n  query($projectId: String!) {\n    project(id: $projectId) {\n      environments {\n        edges {\n          node {\n            id\n            name\n          }\n        }\n      }\n    }\n  }\n`;\n\nconst PROJECT_TOKENS_QUERY = `\n  query($projectId: String!) {\n    projectTokens(projectId: $projectId) {\n      edges { node { id name } }\n    }\n  }\n`;\n\nconst PROJECT_TOKEN_CREATE = `\n  mutation($input: ProjectTokenCreateInput!) {\n    projectTokenCreate(input: $input)\n  }\n`;\n\nconst PROJECT_TOKEN_DELETE = `\n  mutation($id: String!) { projectTokenDelete(id: $id) }\n`;\n\nconst PERMANENT_TOKEN_NAME = \"pulumi\";\n\n/**\n * Fetches all environments for a project and returns a name → UUID map.\n */\nasync function fetchProjectEnvironments(\n\tclient: RailwayClient,\n\tprojectId: string,\n): Promise<Record<string, string>> {\n\tconst result = await client.query<{\n\t\tproject: {\n\t\t\tenvironments: {\n\t\t\t\tedges: Array<{ node: { id: string; name: string } }>;\n\t\t\t};\n\t\t};\n\t}>(PROJECT_ENVIRONMENTS_QUERY, { projectId });\n\n\tconst environments: Record<string, string> = {};\n\n\tfor (const edge of result.project.environments.edges) {\n\t\tenvironments[edge.node.name] = edge.node.id;\n\t}\n\n\treturn environments;\n}\n\n/**\n * Gets or creates a permanent project-scoped token named \"pulumi\".\n *\n * Deletes any stale tokens with the same name before creating a new one,\n * ensuring a single canonical token exists. Does NOT write to Pulumi config —\n * the token is returned as a secret output for the consumer to manage.\n */\nasync function getOrCreateProjectToken(\n\tclient: RailwayClient,\n\tprojectId: string,\n\tenvironmentId?: string,\n): Promise<string> {\n\tconst tokensResult = await client.query<{\n\t\tprojectTokens: {\n\t\t\tedges: Array<{ node: { id: string; name: string } }>;\n\t\t};\n\t}>(PROJECT_TOKENS_QUERY, { projectId });\n\n\tconst stale = tokensResult.projectTokens.edges.filter(\n\t\t(edge) => edge.node.name === PERMANENT_TOKEN_NAME,\n\t);\n\n\tfor (const entry of stale) {\n\t\tawait client.query(PROJECT_TOKEN_DELETE, { id: entry.node.id });\n\t}\n\n\tconst result = await client.query<{ projectTokenCreate: string }>(\n\t\tPROJECT_TOKEN_CREATE,\n\t\t{\n\t\t\tinput: {\n\t\t\t\tprojectId,\n\t\t\t\tname: PERMANENT_TOKEN_NAME,\n\t\t\t\t...(environmentId ? { environmentId } : {}),\n\t\t\t},\n\t\t},\n\t);\n\n\treturn result.projectTokenCreate;\n}\n\n/**\n * Dynamic provider that adopts an existing Railway project by name, or creates one.\n *\n * On create:\n * 1. Queries workspaces to find the project by name.\n * 2. If found → adopts. If not → creates via `projectCreate`.\n * 3. Fetches all environments and resolves the production environment ID.\n * 4. Creates/reuses a project-scoped token named \"pulumi\".\n *\n * Deletion is a no-op (with a warning) to prevent accidental project removal.\n * Name changes trigger replacement.\n */\nclass RailwayProjectProvider implements pulumi.dynamic.ResourceProvider {\n\tasync create(\n\t\tinputs: RailwayProjectInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new RailwayClient(inputs.token);\n\n\t\tconst workspaceResult = await client.query<{\n\t\t\tme: {\n\t\t\t\tworkspaces: Array<{\n\t\t\t\t\tid: string;\n\t\t\t\t\tname: string;\n\t\t\t\t\tprojects: {\n\t\t\t\t\t\tedges: Array<{ node: { id: string; name: string } }>;\n\t\t\t\t\t};\n\t\t\t\t}>;\n\t\t\t};\n\t\t}>(WORKSPACE_QUERY);\n\n\t\tconst workspaces = workspaceResult.me.workspaces;\n\n\t\tif (workspaces.length === 0) {\n\t\t\tthrow new Error(\"No Railway workspace found — cannot create project\");\n\t\t}\n\n\t\tlet projectId: string | undefined;\n\n\t\tfor (const workspace of workspaces) {\n\t\t\tconst match = workspace.projects.edges.find(\n\t\t\t\t(edge) => edge.node.name === inputs.name,\n\t\t\t);\n\n\t\t\tif (match) {\n\t\t\t\tprojectId = match.node.id;\n\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\n\t\tif (projectId) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Adopted existing Railway project \"${inputs.name}\" (${projectId})`,\n\t\t\t);\n\n\t\t\tif (inputs.description) {\n\t\t\t\tawait client.query(PROJECT_UPDATE, {\n\t\t\t\t\tid: projectId,\n\t\t\t\t\tinput: { description: inputs.description },\n\t\t\t\t});\n\t\t\t}\n\t\t} else {\n\t\t\tconst workspace = workspaces[0];\n\n\t\t\tconst created = await client.query<{\n\t\t\t\tprojectCreate: { id: string; name: string };\n\t\t\t}>(PROJECT_CREATE, {\n\t\t\t\tinput: {\n\t\t\t\t\tname: inputs.name,\n\t\t\t\t\tdescription: inputs.description,\n\t\t\t\t\tworkspaceId: workspace.id,\n\t\t\t\t},\n\t\t\t});\n\n\t\t\tprojectId = created.projectCreate.id;\n\n\t\t\tpulumi.log.info(\n\t\t\t\t`Created Railway project \"${inputs.name}\" (${projectId})`,\n\t\t\t);\n\t\t}\n\n\t\tif (!projectId) {\n\t\t\tthrow new Error(\n\t\t\t\t`Failed to find or create Railway project \"${inputs.name}\"`,\n\t\t\t);\n\t\t}\n\n\t\tconst environments = await fetchProjectEnvironments(client, projectId);\n\n\t\tconst productionEnvironmentId = environments.production ?? \"\";\n\n\t\tconst projectToken = await getOrCreateProjectToken(\n\t\t\tclient,\n\t\t\tprojectId,\n\t\t\tproductionEnvironmentId || undefined,\n\t\t);\n\n\t\tconst outs: RailwayProjectOutputs = {\n\t\t\t...inputs,\n\t\t\tprojectId,\n\t\t\tproductionEnvironmentId,\n\t\t\tprojectToken,\n\t\t};\n\n\t\treturn { id: projectId, outs };\n\t}\n\n\tasync update(\n\t\tid: string,\n\t\t_olds: RailwayProjectOutputs,\n\t\tnews: RailwayProjectInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new RailwayClient(news.token);\n\n\t\tawait client.query(PROJECT_UPDATE, {\n\t\t\tid,\n\t\t\tinput: { name: news.name, description: news.description },\n\t\t});\n\n\t\tconst environments = await fetchProjectEnvironments(client, id);\n\n\t\tconst productionEnvironmentId = environments.production ?? \"\";\n\n\t\tconst projectToken = await getOrCreateProjectToken(\n\t\t\tclient,\n\t\t\tid,\n\t\t\tproductionEnvironmentId || undefined,\n\t\t);\n\n\t\tconst outs: RailwayProjectOutputs = {\n\t\t\t...news,\n\t\t\tprojectId: id,\n\t\t\tproductionEnvironmentId,\n\t\t\tprojectToken,\n\t\t};\n\n\t\treturn { outs };\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: RailwayProjectOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new RailwayClient(props.token);\n\n\t\tconst environments = await fetchProjectEnvironments(client, id);\n\n\t\tconst productionEnvironmentId =\n\t\t\tenvironments.production ?? props.productionEnvironmentId;\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: { ...props, projectId: id, productionEnvironmentId },\n\t\t};\n\t}\n\n\tasync delete(): Promise<void> {\n\t\tpulumi.log.warn(\n\t\t\t\"Railway project deletion skipped — projects are not deleted by Pulumi\",\n\t\t);\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: RailwayProjectOutputs,\n\t\tnews: RailwayProjectInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\t\tconst changes: string[] = [];\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\n\t\tif (olds.description !== news.description) {\n\t\t\tchanges.push(\"description\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0 || changes.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/**\n * Manages a Railway project with adopt-or-create semantics.\n *\n * Discovers or creates the project, resolves the production environment ID,\n * and provisions a project-scoped token named \"pulumi\" for CLI deploys.\n * The token is exposed as a secret output — the consumer decides how to store it.\n *\n * @example\n * ```typescript\n * const project = new RailwayProject(\"railway-project\", {\n *   token: railwayConfig.token,\n *   name: \"my-app\",\n *   description: \"Railway services for my-app\",\n * });\n *\n * // Use outputs downstream\n * const serviceVar = new RailwayVariable(\"...\", {\n *   projectId: project.projectId,\n *   environmentId: project.productionEnvironmentId,\n *   ...\n * });\n * ```\n */\nexport class RailwayProject extends pulumi.dynamic.Resource {\n\t/** Railway project UUID. */\n\tpublic declare readonly projectId: pulumi.Output<string>;\n\n\t/** Railway production environment UUID. */\n\tpublic declare readonly productionEnvironmentId: pulumi.Output<string>;\n\n\t/** Railway project-scoped token (secret). */\n\tpublic declare readonly projectToken: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\t/** Railway API bearer token. */\n\t\t\ttoken: pulumi.Input<string>;\n\n\t\t\t/** Project display name to find and adopt or create. */\n\t\t\tname: pulumi.Input<string>;\n\n\t\t\t/** Optional description shown in Railway's dashboard. */\n\t\t\tdescription?: pulumi.Input<string>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew RailwayProjectProvider(),\n\t\t\tname,\n\t\t\t{\n\t\t\t\t...args,\n\t\t\t\tprojectId: undefined,\n\t\t\t\tproductionEnvironmentId: undefined,\n\t\t\t\tprojectToken: pulumi.secret(undefined as unknown as string),\n\t\t\t},\n\t\t\topts,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;AA2BA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;AAmBxB,MAAM,iBAAiB;;;;;;;;AASvB,MAAM,iBAAiB;;;;;;;;AASvB,MAAM,6BAA6B;;;;;;;;;;;;;;AAenC,MAAM,uBAAuB;;;;;;;AAQ7B,MAAM,uBAAuB;;;;;AAM7B,MAAM,uBAAuB;;;AAI7B,MAAM,uBAAuB;;;;AAK7B,eAAe,yBACd,QACA,WACkC;CAClC,MAAM,SAAS,MAAM,OAAO,MAMzB,4BAA4B,EAAE,UAAU,CAAC;CAE5C,MAAM,eAAuC,CAAC;CAE9C,KAAK,MAAM,QAAQ,OAAO,QAAQ,aAAa,OAC9C,aAAa,KAAK,KAAK,QAAQ,KAAK,KAAK;CAG1C,OAAO;AACR;;;;;;;;AASA,eAAe,wBACd,QACA,WACA,eACkB;CAOlB,MAAM,SAAQ,MANa,OAAO,MAI/B,sBAAsB,EAAE,UAAU,CAAC,GAEX,cAAc,MAAM,QAC7C,SAAS,KAAK,KAAK,SAAS,oBAC9B;CAEA,KAAK,MAAM,SAAS,OACnB,MAAM,OAAO,MAAM,sBAAsB,EAAE,IAAI,MAAM,KAAK,GAAG,CAAC;CAc/D,QAAO,MAXc,OAAO,MAC3B,sBACA,EACC,OAAO;EACN;EACA,MAAM;EACN,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;CAC1C,EACD,CACD,GAEc;AACf;;;;;;;;;;;;;AAcA,IAAM,yBAAN,MAAwE;CACvE,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAI,cAAc,OAAO,KAAK;EAc7C,MAAM,cAAa,MAZW,OAAO,MAUlC,eAAe,GAEiB,GAAG;EAEtC,IAAI,WAAW,WAAW,GACzB,MAAM,IAAI,MAAM,oDAAoD;EAGrE,IAAI;EAEJ,KAAK,MAAM,aAAa,YAAY;GACnC,MAAM,QAAQ,UAAU,SAAS,MAAM,MACrC,SAAS,KAAK,KAAK,SAAS,OAAO,IACrC;GAEA,IAAI,OAAO;IACV,YAAY,MAAM,KAAK;IAEvB;GACD;EACD;EAEA,IAAI,WAAW;GACd,OAAO,IAAI,KACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,EACjE;GAEA,IAAI,OAAO,aACV,MAAM,OAAO,MAAM,gBAAgB;IAClC,IAAI;IACJ,OAAO,EAAE,aAAa,OAAO,YAAY;GAC1C,CAAC;EAEH,OAAO;GACN,MAAM,YAAY,WAAW;GAY7B,aAAY,MAVU,OAAO,MAE1B,gBAAgB,EAClB,OAAO;IACN,MAAM,OAAO;IACb,aAAa,OAAO;IACpB,aAAa,UAAU;GACxB,EACD,CAAC,GAEmB,cAAc;GAElC,OAAO,IAAI,KACV,4BAA4B,OAAO,KAAK,KAAK,UAAU,EACxD;EACD;EAEA,IAAI,CAAC,WACJ,MAAM,IAAI,MACT,6CAA6C,OAAO,KAAK,EAC1D;EAKD,MAAM,2BAA0B,MAFL,yBAAyB,QAAQ,SAAS,GAExB,cAAc;EAE3D,MAAM,eAAe,MAAM,wBAC1B,QACA,WACA,2BAA2B,MAC5B;EAEA,MAAM,OAA8B;GACnC,GAAG;GACH;GACA;GACA;EACD;EAEA,OAAO;GAAE,IAAI;GAAW;EAAK;CAC9B;CAEA,MAAM,OACL,IACA,OACA,MACuC;EACvC,MAAM,SAAS,IAAI,cAAc,KAAK,KAAK;EAE3C,MAAM,OAAO,MAAM,gBAAgB;GAClC;GACA,OAAO;IAAE,MAAM,KAAK;IAAM,aAAa,KAAK;GAAY;EACzD,CAAC;EAID,MAAM,2BAA0B,MAFL,yBAAyB,QAAQ,EAAE,GAEjB,cAAc;EAE3D,MAAM,eAAe,MAAM,wBAC1B,QACA,IACA,2BAA2B,MAC5B;EASA,OAAO,EAAE;GANR,GAAG;GACH,WAAW;GACX;GACA;EAGW,EAAE;CACf;CAEA,MAAM,KACL,IACA,OACqC;EAKrC,MAAM,2BACL,MAH0B,yBAAyB,IAFjC,cAAc,MAAM,KAEkB,GAAG,EAAE,GAGhD,cAAc,MAAM;EAElC,OAAO;GACN;GACA,OAAO;IAAE,GAAG;IAAO,WAAW;IAAI;GAAwB;EAC3D;CACD;CAEA,MAAM,SAAwB;EAC7B,OAAO,IAAI,KACV,uEACD;CACD;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAC5B,MAAM,UAAoB,CAAC;EAE3B,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAGrB,IAAI,KAAK,gBAAgB,KAAK,aAC7B,QAAQ,KAAK,aAAa;EAG3B,OAAO;GACN,SAAS,SAAS,SAAS,KAAK,QAAQ,SAAS;GACjD;GACA,qBAAqB;EACtB;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,IAAa,iBAAb,cAAoC,OAAO,QAAQ,SAAS;CAU3D,YACC,MACA,MAUA,MACC;EACD,MACC,IAAI,uBAAuB,GAC3B,MACA;GACC,GAAG;GACH,WAAW;GACX,yBAAyB;GACzB,cAAc,OAAO,OAAO,MAA8B;EAC3D,GACA,IACD;CACD;AACD"}