@infracraft/pulumi 1.2.0 → 1.5.1

package/dist/fly/app.cjs

@@ -0,0 +1,102 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_fly_client = require('./client.cjs');
+let _pulumi_pulumi = require("@pulumi/pulumi");
+_pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
+
+//#region src/fly/app.ts
+/**
+* Dynamic provider implementing adopt-or-create for Fly apps.
+*
+* `create()` does `GET /v1/apps/{name}`; if found it adopts, otherwise it
+* `POST /v1/apps`. `delete()` is a no-op — deleting a Fly app destroys
+* everything in it, so (like Railway/Neon/Vercel top-level resources) Pulumi
+* does not delete apps.
+*/
+var FlyAppResourceProvider = class {
+	async create(inputs) {
+		const client = new require_fly_client.FlyClient(inputs.token);
+		if (await client.tryGet(`/v1/apps/${inputs.name}`)) _pulumi_pulumi.log.info(`Adopting existing Fly app "${inputs.name}"`);
+		else {
+			if (!inputs.organization) throw new Error(`FlyApp "${inputs.name}": an organization is required to create a new app — set it on FlyProvider or FlyApp args`);
+			_pulumi_pulumi.log.info(`Fly app "${inputs.name}" not found — creating...`);
+			await client.post("/v1/apps", {
+				app_name: inputs.name,
+				org_slug: inputs.organization
+			});
+		}
+		const outs = {
+			...inputs,
+			appId: inputs.name
+		};
+		return {
+			id: inputs.name,
+			outs
+		};
+	}
+	async read(id, props) {
+		const app = await new require_fly_client.FlyClient(props.token).tryGet(`/v1/apps/${id}`);
+		if (!app) throw new Error(`Fly app "${id}" not found during refresh`);
+		return {
+			id,
+			props: {
+				...props,
+				name: app.name,
+				appId: app.name
+			}
+		};
+	}
+	async update(id, _olds, news) {
+		return { outs: {
+			...news,
+			appId: id
+		} };
+	}
+	async delete() {
+		_pulumi_pulumi.log.warn("Fly app deletion skipped — apps are not deleted by Pulumi (would destroy all contained resources)");
+	}
+	async diff(_id, olds, news) {
+		const replaces = [];
+		if (olds.name !== news.name) replaces.push("name");
+		if (olds.organization !== news.organization) replaces.push("organization");
+		return {
+			changes: replaces.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/** Internal dynamic resource — not part of the public API. */
+var FlyAppResource = class extends _pulumi_pulumi.dynamic.Resource {
+	constructor(name, args, opts) {
+		super(new FlyAppResourceProvider(), name, {
+			...args,
+			appId: void 0
+		}, opts);
+	}
+};
+/**
+* Manages a Fly app with adopt-or-create semantics.
+*
+* @example
+* ```typescript
+* const app = new FlyApp("api", { name: "rby-api" }, { provider });
+* ```
+*/
+var FlyApp = class extends _pulumi_pulumi.ComponentResource {
+	constructor(name, args, opts) {
+		const { provider, ...pulumiOpts } = opts;
+		super("infracraft:fly:App", name, {}, pulumiOpts);
+		const resource = new FlyAppResource(`${name}-resource`, {
+			token: provider.token,
+			name: args.name,
+			organization: args.organization ?? provider.organization
+		}, { parent: this });
+		this.id = resource.appId;
+		this.registerOutputs({ id: this.id });
+	}
+};
+
+//#endregion
+exports.FlyApp = FlyApp;
+//# sourceMappingURL=app.cjs.map

package/dist/fly/app.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.cjs","names":["FlyClient","pulumi"],"sources":["../../src/fly/app.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\n\nimport { FlyClient } from \"./client\";\nimport type { FlyProvider } from \"./provider\";\n\n/** Resolved inputs for the Fly app dynamic provider. */\nexport interface FlyAppInputs {\n\t/** Fly API token. */\n\ttoken: string;\n\n\t/** App name (globally unique). Used as the resource identifier. */\n\tname: string;\n\n\t/** Org slug used only when creating a new app. */\n\torganization?: string;\n}\n\n/** Persisted state for the Fly app. */\ninterface FlyAppOutputs extends FlyAppInputs {\n\t/** App identifier — equals the app name (all child paths key off the name). */\n\tappId: string;\n}\n\n/** Get-app response (only the fields we read). */\ninterface FlyAppResponse {\n\tid: string;\n\tname: string;\n}\n\n/**\n * Dynamic provider implementing adopt-or-create for Fly apps.\n *\n * `create()` does `GET /v1/apps/{name}`; if found it adopts, otherwise it\n * `POST /v1/apps`. `delete()` is a no-op — deleting a Fly app destroys\n * everything in it, so (like Railway/Neon/Vercel top-level resources) Pulumi\n * does not delete apps.\n */\nclass FlyAppResourceProvider implements pulumi.dynamic.ResourceProvider {\n\tasync create(inputs: FlyAppInputs): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new FlyClient(inputs.token);\n\t\tconst existing = await client.tryGet<FlyAppResponse>(\n\t\t\t`/v1/apps/${inputs.name}`,\n\t\t);\n\n\t\tif (existing) {\n\t\t\tpulumi.log.info(`Adopting existing Fly app \"${inputs.name}\"`);\n\t\t} else {\n\t\t\tif (!inputs.organization) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`FlyApp \"${inputs.name}\": an organization is required to create a new app — set it on FlyProvider or FlyApp args`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tpulumi.log.info(`Fly app \"${inputs.name}\" not found — creating...`);\n\n\t\t\tawait client.post(\"/v1/apps\", {\n\t\t\t\tapp_name: inputs.name,\n\t\t\t\torg_slug: inputs.organization,\n\t\t\t});\n\t\t}\n\n\t\tconst outs: FlyAppOutputs = { ...inputs, appId: inputs.name };\n\n\t\treturn { id: inputs.name, outs };\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: FlyAppOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new FlyClient(props.token);\n\t\tconst app = await client.tryGet<FlyAppResponse>(`/v1/apps/${id}`);\n\n\t\tif (!app) {\n\t\t\tthrow new Error(`Fly app \"${id}\" not found during refresh`);\n\t\t}\n\n\t\treturn { id, props: { ...props, name: app.name, appId: app.name } };\n\t}\n\n\tasync update(\n\t\tid: string,\n\t\t_olds: FlyAppOutputs,\n\t\tnews: FlyAppInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\treturn { outs: { ...news, appId: id } };\n\t}\n\n\tasync delete(): Promise<void> {\n\t\tpulumi.log.warn(\n\t\t\t\"Fly app deletion skipped — apps are not deleted by Pulumi (would destroy all contained resources)\",\n\t\t);\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: FlyAppOutputs,\n\t\tnews: FlyAppInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\t\tif (olds.organization !== news.organization) {\n\t\t\treplaces.push(\"organization\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass FlyAppResource extends pulumi.dynamic.Resource {\n\tpublic declare readonly appId: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken: pulumi.Input<string>;\n\t\t\tname: pulumi.Input<string>;\n\t\t\torganization?: pulumi.Input<string | undefined>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew FlyAppResourceProvider(),\n\t\t\tname,\n\t\t\t{ ...args, appId: undefined },\n\t\t\topts,\n\t\t);\n\t}\n}\n\n/** Options type for FlyApp — replaces Pulumi's native `provider` field. */\ntype FlyAppOptions = Omit<pulumi.ComponentResourceOptions, \"provider\"> & {\n\t/** Fly authentication context. */\n\tprovider: FlyProvider;\n};\n\n/** Args for FlyApp. */\nexport interface FlyAppArgs {\n\t/** App name (globally unique). Used for adoption lookup and as `.id`. */\n\tname: pulumi.Input<string>;\n\n\t/**\n\t * Org slug for app creation. Overrides `FlyProvider.organization`.\n\t * Ignored when the app already exists (adoption).\n\t */\n\torganization?: pulumi.Input<string>;\n}\n\n/**\n * Manages a Fly app with adopt-or-create semantics.\n *\n * @example\n * ```typescript\n * const app = new FlyApp(\"api\", { name: \"rby-api\" }, { provider });\n * ```\n */\nexport class FlyApp extends pulumi.ComponentResource {\n\t/** App identifier (equals the app name). */\n\tpublic readonly id: pulumi.Output<string>;\n\n\tconstructor(name: string, args: FlyAppArgs, opts: FlyAppOptions) {\n\t\tconst { provider, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:fly:App\", name, {}, pulumiOpts);\n\n\t\tconst resource = new FlyAppResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\tname: args.name,\n\t\t\t\torganization: args.organization ?? provider.organization,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.id = resource.appId;\n\n\t\tthis.registerOutputs({ id: this.id });\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;AAqCA,IAAM,yBAAN,MAAwE;CACvE,MAAM,OAAO,QAA4D;EACxE,MAAM,SAAS,IAAIA,6BAAU,OAAO,KAAK;EAKzC,IAAI,MAJmB,OAAO,OAC7B,YAAY,OAAO,MACpB,GAGC,eAAO,IAAI,KAAK,8BAA8B,OAAO,KAAK,EAAE;OACtD;GACN,IAAI,CAAC,OAAO,cACX,MAAM,IAAI,MACT,WAAW,OAAO,KAAK,0FACxB;GAGD,eAAO,IAAI,KAAK,YAAY,OAAO,KAAK,0BAA0B;GAElE,MAAM,OAAO,KAAK,YAAY;IAC7B,UAAU,OAAO;IACjB,UAAU,OAAO;GAClB,CAAC;EACF;EAEA,MAAM,OAAsB;GAAE,GAAG;GAAQ,OAAO,OAAO;EAAK;EAE5D,OAAO;GAAE,IAAI,OAAO;GAAM;EAAK;CAChC;CAEA,MAAM,KACL,IACA,OACqC;EAErC,MAAM,MAAM,MAAM,IADCA,6BAAU,MAAM,KACZ,EAAE,OAAuB,YAAY,IAAI;EAEhE,IAAI,CAAC,KACJ,MAAM,IAAI,MAAM,YAAY,GAAG,2BAA2B;EAG3D,OAAO;GAAE;GAAI,OAAO;IAAE,GAAG;IAAO,MAAM,IAAI;IAAM,OAAO,IAAI;GAAK;EAAE;CACnE;CAEA,MAAM,OACL,IACA,OACA,MACuC;EACvC,OAAO,EAAE,MAAM;GAAE,GAAG;GAAM,OAAO;EAAG,EAAE;CACvC;CAEA,MAAM,SAAwB;EAC7B,eAAO,IAAI,KACV,mGACD;CACD;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAErB,IAAI,KAAK,iBAAiB,KAAK,cAC9B,SAAS,KAAK,cAAc;EAG7B,OAAO;GACN,SAAS,SAAS,SAAS;GAC3B;GACA,qBAAqB;EACtB;CACD;AACD;;AAGA,IAAM,iBAAN,cAA6BC,eAAO,QAAQ,SAAS;CAGpD,YACC,MACA,MAKA,MACC;EACD,MACC,IAAI,uBAAuB,GAC3B,MACA;GAAE,GAAG;GAAM,OAAO;EAAU,GAC5B,IACD;CACD;AACD;;;;;;;;;AA4BA,IAAa,SAAb,cAA4BA,eAAO,kBAAkB;CAIpD,YAAY,MAAc,MAAkB,MAAqB;EAChE,MAAM,EAAE,UAAU,GAAG,eAAe;EAEpC,MAAM,sBAAsB,MAAM,CAAC,GAAG,UAAU;EAEhD,MAAM,WAAW,IAAI,eACpB,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,MAAM,KAAK;GACX,cAAc,KAAK,gBAAgB,SAAS;EAC7C,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,KAAK,SAAS;EAEnB,KAAK,gBAAgB,EAAE,IAAI,KAAK,GAAG,CAAC;CACrC;AACD"}

package/dist/fly/app.d.cts

@@ -0,0 +1,44 @@
+import { t as __name } from "../chunk-OPjESj5l.cjs";
+import { FlyProvider } from "./provider.cjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/fly/app.d.ts
+/** Resolved inputs for the Fly app dynamic provider. */
+interface FlyAppInputs {
+  /** Fly API token. */
+  token: string;
+  /** App name (globally unique). Used as the resource identifier. */
+  name: string;
+  /** Org slug used only when creating a new app. */
+  organization?: string;
+}
+/** Options type for FlyApp — replaces Pulumi's native `provider` field. */
+type FlyAppOptions = Omit<pulumi.ComponentResourceOptions, "provider"> & {
+  /** Fly authentication context. */provider: FlyProvider;
+};
+/** Args for FlyApp. */
+interface FlyAppArgs {
+  /** App name (globally unique). Used for adoption lookup and as `.id`. */
+  name: pulumi.Input<string>;
+  /**
+   * Org slug for app creation. Overrides `FlyProvider.organization`.
+   * Ignored when the app already exists (adoption).
+   */
+  organization?: pulumi.Input<string>;
+}
+/**
+ * Manages a Fly app with adopt-or-create semantics.
+ *
+ * @example
+ * ```typescript
+ * const app = new FlyApp("api", { name: "rby-api" }, { provider });
+ * ```
+ */
+declare class FlyApp extends pulumi.ComponentResource {
+  /** App identifier (equals the app name). */
+  readonly id: pulumi.Output<string>;
+  constructor(name: string, args: FlyAppArgs, opts: FlyAppOptions);
+}
+//#endregion
+export { FlyApp, FlyAppArgs, FlyAppInputs };
+//# sourceMappingURL=app.d.cts.map

package/dist/fly/app.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.cts","names":[],"sources":["../../src/fly/app.ts"],"mappings":";;;;;;UAMiB,YAAA;;EAEhB,KAAA;EAF4B;EAK5B,IAAA;EAL4B;EAQ5B,YAAA;AAAA;;KA6HI,aAAA,GAAgB,IAAA,CAAK,MAAA,CAAO,wBAAA;EA7HpB,kCA+HZ,QAAA,EAAU,WAAA;AAAA;;UAIM,UAAA;EANI;EAQpB,IAAA,EAAM,MAAA,CAAO,KAAA;EANQ;;;;EAYrB,YAAA,GAAe,MAAA,CAAO,KAAK;AAAA;;;AAZN;AAItB;;;;;cAmBa,MAAA,SAAe,MAAA,CAAO,iBAAA;EAjBrB;EAAA,SAmBG,EAAA,EAAI,MAAA,CAAO,MAAA;cAEf,IAAA,UAAc,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,aAAA;AAAA"}

package/dist/fly/app.d.mts

@@ -0,0 +1,44 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { FlyProvider } from "./provider.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/fly/app.d.ts
+/** Resolved inputs for the Fly app dynamic provider. */
+interface FlyAppInputs {
+  /** Fly API token. */
+  token: string;
+  /** App name (globally unique). Used as the resource identifier. */
+  name: string;
+  /** Org slug used only when creating a new app. */
+  organization?: string;
+}
+/** Options type for FlyApp — replaces Pulumi's native `provider` field. */
+type FlyAppOptions = Omit<pulumi.ComponentResourceOptions, "provider"> & {
+  /** Fly authentication context. */provider: FlyProvider;
+};
+/** Args for FlyApp. */
+interface FlyAppArgs {
+  /** App name (globally unique). Used for adoption lookup and as `.id`. */
+  name: pulumi.Input<string>;
+  /**
+   * Org slug for app creation. Overrides `FlyProvider.organization`.
+   * Ignored when the app already exists (adoption).
+   */
+  organization?: pulumi.Input<string>;
+}
+/**
+ * Manages a Fly app with adopt-or-create semantics.
+ *
+ * @example
+ * ```typescript
+ * const app = new FlyApp("api", { name: "rby-api" }, { provider });
+ * ```
+ */
+declare class FlyApp extends pulumi.ComponentResource {
+  /** App identifier (equals the app name). */
+  readonly id: pulumi.Output<string>;
+  constructor(name: string, args: FlyAppArgs, opts: FlyAppOptions);
+}
+//#endregion
+export { FlyApp, FlyAppArgs, FlyAppInputs };
+//# sourceMappingURL=app.d.mts.map

package/dist/fly/app.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.mts","names":[],"sources":["../../src/fly/app.ts"],"mappings":";;;;;;UAMiB,YAAA;;EAEhB,KAAA;EAF4B;EAK5B,IAAA;EAL4B;EAQ5B,YAAA;AAAA;;KA6HI,aAAA,GAAgB,IAAA,CAAK,MAAA,CAAO,wBAAA;EA7HpB,kCA+HZ,QAAA,EAAU,WAAA;AAAA;;UAIM,UAAA;EANI;EAQpB,IAAA,EAAM,MAAA,CAAO,KAAA;EANQ;;;;EAYrB,YAAA,GAAe,MAAA,CAAO,KAAK;AAAA;;;AAZN;AAItB;;;;;cAmBa,MAAA,SAAe,MAAA,CAAO,iBAAA;EAjBrB;EAAA,SAmBG,EAAA,EAAI,MAAA,CAAO,MAAA;cAEf,IAAA,UAAc,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,aAAA;AAAA"}

package/dist/fly/app.mjs

@@ -0,0 +1,100 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { FlyClient } from "./client.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/fly/app.ts
+/**
+* Dynamic provider implementing adopt-or-create for Fly apps.
+*
+* `create()` does `GET /v1/apps/{name}`; if found it adopts, otherwise it
+* `POST /v1/apps`. `delete()` is a no-op — deleting a Fly app destroys
+* everything in it, so (like Railway/Neon/Vercel top-level resources) Pulumi
+* does not delete apps.
+*/
+var FlyAppResourceProvider = class {
+	async create(inputs) {
+		const client = new FlyClient(inputs.token);
+		if (await client.tryGet(`/v1/apps/${inputs.name}`)) pulumi.log.info(`Adopting existing Fly app "${inputs.name}"`);
+		else {
+			if (!inputs.organization) throw new Error(`FlyApp "${inputs.name}": an organization is required to create a new app — set it on FlyProvider or FlyApp args`);
+			pulumi.log.info(`Fly app "${inputs.name}" not found — creating...`);
+			await client.post("/v1/apps", {
+				app_name: inputs.name,
+				org_slug: inputs.organization
+			});
+		}
+		const outs = {
+			...inputs,
+			appId: inputs.name
+		};
+		return {
+			id: inputs.name,
+			outs
+		};
+	}
+	async read(id, props) {
+		const app = await new FlyClient(props.token).tryGet(`/v1/apps/${id}`);
+		if (!app) throw new Error(`Fly app "${id}" not found during refresh`);
+		return {
+			id,
+			props: {
+				...props,
+				name: app.name,
+				appId: app.name
+			}
+		};
+	}
+	async update(id, _olds, news) {
+		return { outs: {
+			...news,
+			appId: id
+		} };
+	}
+	async delete() {
+		pulumi.log.warn("Fly app deletion skipped — apps are not deleted by Pulumi (would destroy all contained resources)");
+	}
+	async diff(_id, olds, news) {
+		const replaces = [];
+		if (olds.name !== news.name) replaces.push("name");
+		if (olds.organization !== news.organization) replaces.push("organization");
+		return {
+			changes: replaces.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/** Internal dynamic resource — not part of the public API. */
+var FlyAppResource = class extends pulumi.dynamic.Resource {
+	constructor(name, args, opts) {
+		super(new FlyAppResourceProvider(), name, {
+			...args,
+			appId: void 0
+		}, opts);
+	}
+};
+/**
+* Manages a Fly app with adopt-or-create semantics.
+*
+* @example
+* ```typescript
+* const app = new FlyApp("api", { name: "rby-api" }, { provider });
+* ```
+*/
+var FlyApp = class extends pulumi.ComponentResource {
+	constructor(name, args, opts) {
+		const { provider, ...pulumiOpts } = opts;
+		super("infracraft:fly:App", name, {}, pulumiOpts);
+		const resource = new FlyAppResource(`${name}-resource`, {
+			token: provider.token,
+			name: args.name,
+			organization: args.organization ?? provider.organization
+		}, { parent: this });
+		this.id = resource.appId;
+		this.registerOutputs({ id: this.id });
+	}
+};
+
+//#endregion
+export { FlyApp };
+//# sourceMappingURL=app.mjs.map

package/dist/fly/app.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.mjs","names":[],"sources":["../../src/fly/app.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\n\nimport { FlyClient } from \"./client\";\nimport type { FlyProvider } from \"./provider\";\n\n/** Resolved inputs for the Fly app dynamic provider. */\nexport interface FlyAppInputs {\n\t/** Fly API token. */\n\ttoken: string;\n\n\t/** App name (globally unique). Used as the resource identifier. */\n\tname: string;\n\n\t/** Org slug used only when creating a new app. */\n\torganization?: string;\n}\n\n/** Persisted state for the Fly app. */\ninterface FlyAppOutputs extends FlyAppInputs {\n\t/** App identifier — equals the app name (all child paths key off the name). */\n\tappId: string;\n}\n\n/** Get-app response (only the fields we read). */\ninterface FlyAppResponse {\n\tid: string;\n\tname: string;\n}\n\n/**\n * Dynamic provider implementing adopt-or-create for Fly apps.\n *\n * `create()` does `GET /v1/apps/{name}`; if found it adopts, otherwise it\n * `POST /v1/apps`. `delete()` is a no-op — deleting a Fly app destroys\n * everything in it, so (like Railway/Neon/Vercel top-level resources) Pulumi\n * does not delete apps.\n */\nclass FlyAppResourceProvider implements pulumi.dynamic.ResourceProvider {\n\tasync create(inputs: FlyAppInputs): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new FlyClient(inputs.token);\n\t\tconst existing = await client.tryGet<FlyAppResponse>(\n\t\t\t`/v1/apps/${inputs.name}`,\n\t\t);\n\n\t\tif (existing) {\n\t\t\tpulumi.log.info(`Adopting existing Fly app \"${inputs.name}\"`);\n\t\t} else {\n\t\t\tif (!inputs.organization) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`FlyApp \"${inputs.name}\": an organization is required to create a new app — set it on FlyProvider or FlyApp args`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tpulumi.log.info(`Fly app \"${inputs.name}\" not found — creating...`);\n\n\t\t\tawait client.post(\"/v1/apps\", {\n\t\t\t\tapp_name: inputs.name,\n\t\t\t\torg_slug: inputs.organization,\n\t\t\t});\n\t\t}\n\n\t\tconst outs: FlyAppOutputs = { ...inputs, appId: inputs.name };\n\n\t\treturn { id: inputs.name, outs };\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: FlyAppOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new FlyClient(props.token);\n\t\tconst app = await client.tryGet<FlyAppResponse>(`/v1/apps/${id}`);\n\n\t\tif (!app) {\n\t\t\tthrow new Error(`Fly app \"${id}\" not found during refresh`);\n\t\t}\n\n\t\treturn { id, props: { ...props, name: app.name, appId: app.name } };\n\t}\n\n\tasync update(\n\t\tid: string,\n\t\t_olds: FlyAppOutputs,\n\t\tnews: FlyAppInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\treturn { outs: { ...news, appId: id } };\n\t}\n\n\tasync delete(): Promise<void> {\n\t\tpulumi.log.warn(\n\t\t\t\"Fly app deletion skipped — apps are not deleted by Pulumi (would destroy all contained resources)\",\n\t\t);\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: FlyAppOutputs,\n\t\tnews: FlyAppInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.name !== news.name) {\n\t\t\treplaces.push(\"name\");\n\t\t}\n\t\tif (olds.organization !== news.organization) {\n\t\t\treplaces.push(\"organization\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass FlyAppResource extends pulumi.dynamic.Resource {\n\tpublic declare readonly appId: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken: pulumi.Input<string>;\n\t\t\tname: pulumi.Input<string>;\n\t\t\torganization?: pulumi.Input<string | undefined>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew FlyAppResourceProvider(),\n\t\t\tname,\n\t\t\t{ ...args, appId: undefined },\n\t\t\topts,\n\t\t);\n\t}\n}\n\n/** Options type for FlyApp — replaces Pulumi's native `provider` field. */\ntype FlyAppOptions = Omit<pulumi.ComponentResourceOptions, \"provider\"> & {\n\t/** Fly authentication context. */\n\tprovider: FlyProvider;\n};\n\n/** Args for FlyApp. */\nexport interface FlyAppArgs {\n\t/** App name (globally unique). Used for adoption lookup and as `.id`. */\n\tname: pulumi.Input<string>;\n\n\t/**\n\t * Org slug for app creation. Overrides `FlyProvider.organization`.\n\t * Ignored when the app already exists (adoption).\n\t */\n\torganization?: pulumi.Input<string>;\n}\n\n/**\n * Manages a Fly app with adopt-or-create semantics.\n *\n * @example\n * ```typescript\n * const app = new FlyApp(\"api\", { name: \"rby-api\" }, { provider });\n * ```\n */\nexport class FlyApp extends pulumi.ComponentResource {\n\t/** App identifier (equals the app name). */\n\tpublic readonly id: pulumi.Output<string>;\n\n\tconstructor(name: string, args: FlyAppArgs, opts: FlyAppOptions) {\n\t\tconst { provider, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:fly:App\", name, {}, pulumiOpts);\n\n\t\tconst resource = new FlyAppResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\tname: args.name,\n\t\t\t\torganization: args.organization ?? provider.organization,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.id = resource.appId;\n\n\t\tthis.registerOutputs({ id: this.id });\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AAqCA,IAAM,yBAAN,MAAwE;CACvE,MAAM,OAAO,QAA4D;EACxE,MAAM,SAAS,IAAI,UAAU,OAAO,KAAK;EAKzC,IAAI,MAJmB,OAAO,OAC7B,YAAY,OAAO,MACpB,GAGC,OAAO,IAAI,KAAK,8BAA8B,OAAO,KAAK,EAAE;OACtD;GACN,IAAI,CAAC,OAAO,cACX,MAAM,IAAI,MACT,WAAW,OAAO,KAAK,0FACxB;GAGD,OAAO,IAAI,KAAK,YAAY,OAAO,KAAK,0BAA0B;GAElE,MAAM,OAAO,KAAK,YAAY;IAC7B,UAAU,OAAO;IACjB,UAAU,OAAO;GAClB,CAAC;EACF;EAEA,MAAM,OAAsB;GAAE,GAAG;GAAQ,OAAO,OAAO;EAAK;EAE5D,OAAO;GAAE,IAAI,OAAO;GAAM;EAAK;CAChC;CAEA,MAAM,KACL,IACA,OACqC;EAErC,MAAM,MAAM,MAAM,IADC,UAAU,MAAM,KACZ,EAAE,OAAuB,YAAY,IAAI;EAEhE,IAAI,CAAC,KACJ,MAAM,IAAI,MAAM,YAAY,GAAG,2BAA2B;EAG3D,OAAO;GAAE;GAAI,OAAO;IAAE,GAAG;IAAO,MAAM,IAAI;IAAM,OAAO,IAAI;GAAK;EAAE;CACnE;CAEA,MAAM,OACL,IACA,OACA,MACuC;EACvC,OAAO,EAAE,MAAM;GAAE,GAAG;GAAM,OAAO;EAAG,EAAE;CACvC;CAEA,MAAM,SAAwB;EAC7B,OAAO,IAAI,KACV,mGACD;CACD;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,SAAS,KAAK,MACtB,SAAS,KAAK,MAAM;EAErB,IAAI,KAAK,iBAAiB,KAAK,cAC9B,SAAS,KAAK,cAAc;EAG7B,OAAO;GACN,SAAS,SAAS,SAAS;GAC3B;GACA,qBAAqB;EACtB;CACD;AACD;;AAGA,IAAM,iBAAN,cAA6B,OAAO,QAAQ,SAAS;CAGpD,YACC,MACA,MAKA,MACC;EACD,MACC,IAAI,uBAAuB,GAC3B,MACA;GAAE,GAAG;GAAM,OAAO;EAAU,GAC5B,IACD;CACD;AACD;;;;;;;;;AA4BA,IAAa,SAAb,cAA4B,OAAO,kBAAkB;CAIpD,YAAY,MAAc,MAAkB,MAAqB;EAChE,MAAM,EAAE,UAAU,GAAG,eAAe;EAEpC,MAAM,sBAAsB,MAAM,CAAC,GAAG,UAAU;EAEhD,MAAM,WAAW,IAAI,eACpB,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,MAAM,KAAK;GACX,cAAc,KAAK,gBAAgB,SAAS;EAC7C,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,KAAK,SAAS;EAEnB,KAAK,gBAAgB,EAAE,IAAI,KAAK,GAAG,CAAC;CACrC;AACD"}

package/dist/fly/certificate.cjs

@@ -0,0 +1,109 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_fly_client = require('./client.cjs');
+let _pulumi_pulumi = require("@pulumi/pulumi");
+_pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
+
+//#region src/fly/certificate.ts
+/**
+* Dynamic provider for Fly ACME (Let's Encrypt) certificates. `create()` checks
+* for an existing cert by hostname and adopts it, otherwise it requests one via
+* `POST /v1/apps/{app}/certificates/acme`. The Machines API returns no `id` —
+* the hostname is the resource key.
+*/
+var FlyCertificateResourceProvider = class {
+	async create(inputs) {
+		const client = new require_fly_client.FlyClient(inputs.token);
+		const path = `/v1/apps/${inputs.appName}/certificates/${encodeURIComponent(inputs.hostname)}`;
+		let cert = await client.tryGet(path);
+		if (cert) _pulumi_pulumi.log.info(`Adopting existing Fly certificate "${inputs.hostname}"`);
+		else cert = await client.post(`/v1/apps/${inputs.appName}/certificates/acme`, { hostname: inputs.hostname });
+		const outs = {
+			...inputs,
+			configured: cert.configured ?? false,
+			dnsRequirements: cert.dns_requirements ?? {}
+		};
+		return {
+			id: inputs.hostname,
+			outs
+		};
+	}
+	async read(id, props) {
+		const cert = await new require_fly_client.FlyClient(props.token).tryGet(`/v1/apps/${props.appName}/certificates/${encodeURIComponent(id)}`);
+		if (!cert) throw new Error(`Fly certificate "${id}" not found during refresh`);
+		return {
+			id,
+			props: {
+				...props,
+				configured: cert.configured ?? false,
+				dnsRequirements: cert.dns_requirements ?? {}
+			}
+		};
+	}
+	async update(_id, _olds, news) {
+		return { outs: {
+			...news,
+			configured: false,
+			dnsRequirements: {}
+		} };
+	}
+	async delete(id, props) {
+		await new require_fly_client.FlyClient(props.token).delete(`/v1/apps/${props.appName}/certificates/${encodeURIComponent(id)}`);
+	}
+	async diff(_id, olds, news) {
+		const replaces = [];
+		if (olds.appName !== news.appName) replaces.push("appName");
+		if (olds.hostname !== news.hostname) replaces.push("hostname");
+		return {
+			changes: replaces.length > 0,
+			replaces,
+			deleteBeforeReplace: true
+		};
+	}
+};
+/** Internal dynamic resource — not part of the public API. */
+var FlyCertificateResource = class extends _pulumi_pulumi.dynamic.Resource {
+	constructor(name, args, opts) {
+		super(new FlyCertificateResourceProvider(), name, {
+			...args,
+			configured: void 0,
+			dnsRequirements: void 0
+		}, opts);
+	}
+};
+/**
+* Manages a Fly ACME certificate for a custom hostname.
+*
+* Exposes `.configured` and `.dnsRequirements` so the consumer can wire up the
+* required DNS records.
+*
+* @example
+* ```typescript
+* const cert = new FlyCertificate("api-cert", {
+*   hostname: "api.example.com",
+* }, { provider, app });
+* ```
+*/
+var FlyCertificate = class extends _pulumi_pulumi.ComponentResource {
+	constructor(name, args, opts) {
+		const { provider, app, ...pulumiOpts } = opts;
+		super("infracraft:fly:Certificate", name, {}, pulumiOpts);
+		const resource = new FlyCertificateResource(`${name}-resource`, {
+			token: provider.token,
+			appName: app.id,
+			hostname: args.hostname
+		}, { parent: this });
+		this.id = _pulumi_pulumi.output(args.hostname);
+		this.configured = resource.configured;
+		this.dnsRequirements = resource.dnsRequirements;
+		this.registerOutputs({
+			id: this.id,
+			configured: this.configured,
+			dnsRequirements: this.dnsRequirements
+		});
+	}
+};
+
+//#endregion
+exports.FlyCertificate = FlyCertificate;
+//# sourceMappingURL=certificate.cjs.map

package/dist/fly/certificate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.cjs","names":["FlyClient","pulumi"],"sources":["../../src/fly/certificate.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\n\nimport type { FlyApp } from \"./app\";\nimport { FlyClient } from \"./client\";\nimport type { FlyProvider } from \"./provider\";\n\n/** DNS records the consumer must create for certificate validation. */\nexport interface FlyDnsRequirements {\n\t/** ACME challenge CNAME record. */\n\tacme_challenge?: { name: string; target: string };\n\n\t/** `_fly-ownership` TXT record. */\n\townership?: { name: string; app_value: string };\n\n\t/** CNAME target for the hostname itself. */\n\tcname?: string;\n}\n\n/** Resolved inputs for the Fly certificate dynamic provider. */\nexport interface FlyCertificateInputs {\n\t/** Fly API token. */\n\ttoken: string;\n\n\t/** App name the certificate belongs to. */\n\tappName: string;\n\n\t/** Hostname to issue an ACME certificate for. Used as the resource key. */\n\thostname: string;\n}\n\n/** Persisted state for the Fly certificate. */\ninterface FlyCertificateOutputs extends FlyCertificateInputs {\n\t/** Whether the certificate is fully provisioned (DNS correct). */\n\tconfigured: boolean;\n\n\t/** DNS records required for validation. */\n\tdnsRequirements: FlyDnsRequirements;\n}\n\n/** Certificate response (only the fields we read). */\ninterface FlyCertificateResponse {\n\thostname: string;\n\tconfigured: boolean;\n\tdns_requirements?: FlyDnsRequirements;\n}\n\n/**\n * Dynamic provider for Fly ACME (Let's Encrypt) certificates. `create()` checks\n * for an existing cert by hostname and adopts it, otherwise it requests one via\n * `POST /v1/apps/{app}/certificates/acme`. The Machines API returns no `id` —\n * the hostname is the resource key.\n */\nclass FlyCertificateResourceProvider\n\timplements pulumi.dynamic.ResourceProvider\n{\n\tasync create(\n\t\tinputs: FlyCertificateInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new FlyClient(inputs.token);\n\t\tconst path = `/v1/apps/${inputs.appName}/certificates/${encodeURIComponent(inputs.hostname)}`;\n\n\t\tlet cert = await client.tryGet<FlyCertificateResponse>(path);\n\n\t\tif (cert) {\n\t\t\tpulumi.log.info(`Adopting existing Fly certificate \"${inputs.hostname}\"`);\n\t\t} else {\n\t\t\tcert = await client.post<FlyCertificateResponse>(\n\t\t\t\t`/v1/apps/${inputs.appName}/certificates/acme`,\n\t\t\t\t{ hostname: inputs.hostname },\n\t\t\t);\n\t\t}\n\n\t\tconst outs: FlyCertificateOutputs = {\n\t\t\t...inputs,\n\t\t\tconfigured: cert.configured ?? false,\n\t\t\tdnsRequirements: cert.dns_requirements ?? {},\n\t\t};\n\n\t\treturn { id: inputs.hostname, outs };\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: FlyCertificateOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new FlyClient(props.token);\n\n\t\tconst cert = await client.tryGet<FlyCertificateResponse>(\n\t\t\t`/v1/apps/${props.appName}/certificates/${encodeURIComponent(id)}`,\n\t\t);\n\n\t\tif (!cert) {\n\t\t\tthrow new Error(`Fly certificate \"${id}\" not found during refresh`);\n\t\t}\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tconfigured: cert.configured ?? false,\n\t\t\t\tdnsRequirements: cert.dns_requirements ?? {},\n\t\t\t},\n\t\t};\n\t}\n\n\tasync update(\n\t\t_id: string,\n\t\t_olds: FlyCertificateOutputs,\n\t\tnews: FlyCertificateInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\t// Hostname/app changes force replacement (see diff); nothing else is updatable.\n\t\treturn {\n\t\t\touts: { ...news, configured: false, dnsRequirements: {} },\n\t\t};\n\t}\n\n\tasync delete(id: string, props: FlyCertificateOutputs): Promise<void> {\n\t\tconst client = new FlyClient(props.token);\n\n\t\tawait client.delete(\n\t\t\t`/v1/apps/${props.appName}/certificates/${encodeURIComponent(id)}`,\n\t\t);\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: FlyCertificateOutputs,\n\t\tnews: FlyCertificateInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst replaces: string[] = [];\n\n\t\tif (olds.appName !== news.appName) {\n\t\t\treplaces.push(\"appName\");\n\t\t}\n\t\tif (olds.hostname !== news.hostname) {\n\t\t\treplaces.push(\"hostname\");\n\t\t}\n\n\t\treturn {\n\t\t\tchanges: replaces.length > 0,\n\t\t\treplaces,\n\t\t\tdeleteBeforeReplace: true,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass FlyCertificateResource extends pulumi.dynamic.Resource {\n\tpublic declare readonly configured: pulumi.Output<boolean>;\n\tpublic declare readonly dnsRequirements: pulumi.Output<FlyDnsRequirements>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken: pulumi.Input<string>;\n\t\t\tappName: pulumi.Input<string>;\n\t\t\thostname: pulumi.Input<string>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew FlyCertificateResourceProvider(),\n\t\t\tname,\n\t\t\t{ ...args, configured: undefined, dnsRequirements: undefined },\n\t\t\topts,\n\t\t);\n\t}\n}\n\n/** Options type for FlyCertificate. */\ntype FlyCertificateOptions = Omit<\n\tpulumi.ComponentResourceOptions,\n\t\"provider\"\n> & {\n\t/** Fly authentication context. */\n\tprovider: FlyProvider;\n\n\t/** App the certificate belongs to. */\n\tapp: FlyApp;\n};\n\n/** Args for FlyCertificate. */\nexport interface FlyCertificateArgs {\n\t/** Hostname to issue an ACME certificate for (e.g. `\"api.example.com\"`). */\n\thostname: pulumi.Input<string>;\n}\n\n/**\n * Manages a Fly ACME certificate for a custom hostname.\n *\n * Exposes `.configured` and `.dnsRequirements` so the consumer can wire up the\n * required DNS records.\n *\n * @example\n * ```typescript\n * const cert = new FlyCertificate(\"api-cert\", {\n *   hostname: \"api.example.com\",\n * }, { provider, app });\n * ```\n */\nexport class FlyCertificate extends pulumi.ComponentResource {\n\t/** Certificate identifier (equals the hostname). */\n\tpublic readonly id: pulumi.Output<string>;\n\n\t/** Whether the certificate is fully provisioned. */\n\tpublic readonly configured: pulumi.Output<boolean>;\n\n\t/** DNS records required for validation. */\n\tpublic readonly dnsRequirements: pulumi.Output<FlyDnsRequirements>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: FlyCertificateArgs,\n\t\topts: FlyCertificateOptions,\n\t) {\n\t\tconst { provider, app, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:fly:Certificate\", name, {}, pulumiOpts);\n\n\t\tconst resource = new FlyCertificateResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\tappName: app.id,\n\t\t\t\thostname: args.hostname,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.id = pulumi.output(args.hostname);\n\t\tthis.configured = resource.configured;\n\t\tthis.dnsRequirements = resource.dnsRequirements;\n\n\t\tthis.registerOutputs({\n\t\t\tid: this.id,\n\t\t\tconfigured: this.configured,\n\t\t\tdnsRequirements: this.dnsRequirements,\n\t\t});\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AAoDA,IAAM,iCAAN,MAEA;CACC,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAIA,6BAAU,OAAO,KAAK;EACzC,MAAM,OAAO,YAAY,OAAO,QAAQ,gBAAgB,mBAAmB,OAAO,QAAQ;EAE1F,IAAI,OAAO,MAAM,OAAO,OAA+B,IAAI;EAE3D,IAAI,MACH,eAAO,IAAI,KAAK,sCAAsC,OAAO,SAAS,EAAE;OAExE,OAAO,MAAM,OAAO,KACnB,YAAY,OAAO,QAAQ,qBAC3B,EAAE,UAAU,OAAO,SAAS,CAC7B;EAGD,MAAM,OAA8B;GACnC,GAAG;GACH,YAAY,KAAK,cAAc;GAC/B,iBAAiB,KAAK,oBAAoB,CAAC;EAC5C;EAEA,OAAO;GAAE,IAAI,OAAO;GAAU;EAAK;CACpC;CAEA,MAAM,KACL,IACA,OACqC;EAGrC,MAAM,OAAO,MAAM,IAFAA,6BAAU,MAAM,KAEX,EAAE,OACzB,YAAY,MAAM,QAAQ,gBAAgB,mBAAmB,EAAE,GAChE;EAEA,IAAI,CAAC,MACJ,MAAM,IAAI,MAAM,oBAAoB,GAAG,2BAA2B;EAGnE,OAAO;GACN;GACA,OAAO;IACN,GAAG;IACH,YAAY,KAAK,cAAc;IAC/B,iBAAiB,KAAK,oBAAoB,CAAC;GAC5C;EACD;CACD;CAEA,MAAM,OACL,KACA,OACA,MACuC;EAEvC,OAAO,EACN,MAAM;GAAE,GAAG;GAAM,YAAY;GAAO,iBAAiB,CAAC;EAAE,EACzD;CACD;CAEA,MAAM,OAAO,IAAY,OAA6C;EAGrE,MAAM,IAFaA,6BAAU,MAAM,KAExB,EAAE,OACZ,YAAY,MAAM,QAAQ,gBAAgB,mBAAmB,EAAE,GAChE;CACD;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,WAAqB,CAAC;EAE5B,IAAI,KAAK,YAAY,KAAK,SACzB,SAAS,KAAK,SAAS;EAExB,IAAI,KAAK,aAAa,KAAK,UAC1B,SAAS,KAAK,UAAU;EAGzB,OAAO;GACN,SAAS,SAAS,SAAS;GAC3B;GACA,qBAAqB;EACtB;CACD;AACD;;AAGA,IAAM,yBAAN,cAAqCC,eAAO,QAAQ,SAAS;CAI5D,YACC,MACA,MAKA,MACC;EACD,MACC,IAAI,+BAA+B,GACnC,MACA;GAAE,GAAG;GAAM,YAAY;GAAW,iBAAiB;EAAU,GAC7D,IACD;CACD;AACD;;;;;;;;;;;;;;AAiCA,IAAa,iBAAb,cAAoCA,eAAO,kBAAkB;CAU5D,YACC,MACA,MACA,MACC;EACD,MAAM,EAAE,UAAU,KAAK,GAAG,eAAe;EAEzC,MAAM,8BAA8B,MAAM,CAAC,GAAG,UAAU;EAExD,MAAM,WAAW,IAAI,uBACpB,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,SAAS,IAAI;GACb,UAAU,KAAK;EAChB,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,KAAKA,eAAO,OAAO,KAAK,QAAQ;EACrC,KAAK,aAAa,SAAS;EAC3B,KAAK,kBAAkB,SAAS;EAEhC,KAAK,gBAAgB;GACpB,IAAI,KAAK;GACT,YAAY,KAAK;GACjB,iBAAiB,KAAK;EACvB,CAAC;CACF;AACD"}

package/dist/fly/certificate.d.cts

@@ -0,0 +1,65 @@
+import { t as __name } from "../chunk-OPjESj5l.cjs";
+import { FlyProvider } from "./provider.cjs";
+import { FlyApp } from "./app.cjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/fly/certificate.d.ts
+/** DNS records the consumer must create for certificate validation. */
+interface FlyDnsRequirements {
+  /** ACME challenge CNAME record. */
+  acme_challenge?: {
+    name: string;
+    target: string;
+  };
+  /** `_fly-ownership` TXT record. */
+  ownership?: {
+    name: string;
+    app_value: string;
+  };
+  /** CNAME target for the hostname itself. */
+  cname?: string;
+}
+/** Resolved inputs for the Fly certificate dynamic provider. */
+interface FlyCertificateInputs {
+  /** Fly API token. */
+  token: string;
+  /** App name the certificate belongs to. */
+  appName: string;
+  /** Hostname to issue an ACME certificate for. Used as the resource key. */
+  hostname: string;
+}
+/** Options type for FlyCertificate. */
+type FlyCertificateOptions = Omit<pulumi.ComponentResourceOptions, "provider"> & {
+  /** Fly authentication context. */provider: FlyProvider; /** App the certificate belongs to. */
+  app: FlyApp;
+};
+/** Args for FlyCertificate. */
+interface FlyCertificateArgs {
+  /** Hostname to issue an ACME certificate for (e.g. `"api.example.com"`). */
+  hostname: pulumi.Input<string>;
+}
+/**
+ * Manages a Fly ACME certificate for a custom hostname.
+ *
+ * Exposes `.configured` and `.dnsRequirements` so the consumer can wire up the
+ * required DNS records.
+ *
+ * @example
+ * ```typescript
+ * const cert = new FlyCertificate("api-cert", {
+ *   hostname: "api.example.com",
+ * }, { provider, app });
+ * ```
+ */
+declare class FlyCertificate extends pulumi.ComponentResource {
+  /** Certificate identifier (equals the hostname). */
+  readonly id: pulumi.Output<string>;
+  /** Whether the certificate is fully provisioned. */
+  readonly configured: pulumi.Output<boolean>;
+  /** DNS records required for validation. */
+  readonly dnsRequirements: pulumi.Output<FlyDnsRequirements>;
+  constructor(name: string, args: FlyCertificateArgs, opts: FlyCertificateOptions);
+}
+//#endregion
+export { FlyCertificate, FlyCertificateArgs, FlyCertificateInputs, FlyDnsRequirements };
+//# sourceMappingURL=certificate.d.cts.map

package/dist/fly/certificate.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.d.cts","names":[],"sources":["../../src/fly/certificate.ts"],"mappings":";;;;;;;UAOiB,kBAAA;;EAEhB,cAAA;IAAmB,IAAA;IAAc,MAAA;EAAA;EAAjC;EAGA,SAAA;IAAc,IAAA;IAAc,SAAA;EAAA;EAAA;EAG5B,KAAA;AAAA;AAAK;AAAA,UAIW,oBAAA;EAAoB;EAEpC,KAAA;EAFoC;EAKpC,OAAA;EAAA;EAGA,QAAA;AAAA;AAAQ;AAAA,KA+IJ,qBAAA,GAAwB,IAAA,CAC5B,MAAA,CAAO,wBAAA;EADkB,kCAKzB,QAAA,EAAU,WAAA,EAJV;EAOA,GAAA,EAAK,MAAA;AAAA;;UAIW,kBAAA;EAJL;EAMX,QAAA,EAAU,MAAA,CAAO,KAAK;AAAA;;;;;;;AANX;AAIZ;;;;;;cAkBa,cAAA,SAAuB,MAAA,CAAO,iBAAA;EAhBpB;EAAA,SAkBN,EAAA,EAAI,MAAA,CAAO,MAAA;EAFf;EAAA,SAKI,UAAA,EAAY,MAAA,CAAO,MAAA;;WAGnB,eAAA,EAAiB,MAAA,CAAO,MAAA,CAAO,kBAAA;cAG9C,IAAA,UACA,IAAA,EAAM,kBAAA,EACN,IAAA,EAAM,qBAAA;AAAA"}

package/dist/fly/certificate.d.mts

@@ -0,0 +1,65 @@
+import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { FlyProvider } from "./provider.mjs";
+import { FlyApp } from "./app.mjs";
+import * as pulumi from "@pulumi/pulumi";
+
+//#region src/fly/certificate.d.ts
+/** DNS records the consumer must create for certificate validation. */
+interface FlyDnsRequirements {
+  /** ACME challenge CNAME record. */
+  acme_challenge?: {
+    name: string;
+    target: string;
+  };
+  /** `_fly-ownership` TXT record. */
+  ownership?: {
+    name: string;
+    app_value: string;
+  };
+  /** CNAME target for the hostname itself. */
+  cname?: string;
+}
+/** Resolved inputs for the Fly certificate dynamic provider. */
+interface FlyCertificateInputs {
+  /** Fly API token. */
+  token: string;
+  /** App name the certificate belongs to. */
+  appName: string;
+  /** Hostname to issue an ACME certificate for. Used as the resource key. */
+  hostname: string;
+}
+/** Options type for FlyCertificate. */
+type FlyCertificateOptions = Omit<pulumi.ComponentResourceOptions, "provider"> & {
+  /** Fly authentication context. */provider: FlyProvider; /** App the certificate belongs to. */
+  app: FlyApp;
+};
+/** Args for FlyCertificate. */
+interface FlyCertificateArgs {
+  /** Hostname to issue an ACME certificate for (e.g. `"api.example.com"`). */
+  hostname: pulumi.Input<string>;
+}
+/**
+ * Manages a Fly ACME certificate for a custom hostname.
+ *
+ * Exposes `.configured` and `.dnsRequirements` so the consumer can wire up the
+ * required DNS records.
+ *
+ * @example
+ * ```typescript
+ * const cert = new FlyCertificate("api-cert", {
+ *   hostname: "api.example.com",
+ * }, { provider, app });
+ * ```
+ */
+declare class FlyCertificate extends pulumi.ComponentResource {
+  /** Certificate identifier (equals the hostname). */
+  readonly id: pulumi.Output<string>;
+  /** Whether the certificate is fully provisioned. */
+  readonly configured: pulumi.Output<boolean>;
+  /** DNS records required for validation. */
+  readonly dnsRequirements: pulumi.Output<FlyDnsRequirements>;
+  constructor(name: string, args: FlyCertificateArgs, opts: FlyCertificateOptions);
+}
+//#endregion
+export { FlyCertificate, FlyCertificateArgs, FlyCertificateInputs, FlyDnsRequirements };
+//# sourceMappingURL=certificate.d.mts.map

package/dist/fly/certificate.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.d.mts","names":[],"sources":["../../src/fly/certificate.ts"],"mappings":";;;;;;;UAOiB,kBAAA;;EAEhB,cAAA;IAAmB,IAAA;IAAc,MAAA;EAAA;EAAjC;EAGA,SAAA;IAAc,IAAA;IAAc,SAAA;EAAA;EAAA;EAG5B,KAAA;AAAA;AAAK;AAAA,UAIW,oBAAA;EAAoB;EAEpC,KAAA;EAFoC;EAKpC,OAAA;EAAA;EAGA,QAAA;AAAA;AAAQ;AAAA,KA+IJ,qBAAA,GAAwB,IAAA,CAC5B,MAAA,CAAO,wBAAA;EADkB,kCAKzB,QAAA,EAAU,WAAA,EAJV;EAOA,GAAA,EAAK,MAAA;AAAA;;UAIW,kBAAA;EAJL;EAMX,QAAA,EAAU,MAAA,CAAO,KAAK;AAAA;;;;;;;AANX;AAIZ;;;;;;cAkBa,cAAA,SAAuB,MAAA,CAAO,iBAAA;EAhBpB;EAAA,SAkBN,EAAA,EAAI,MAAA,CAAO,MAAA;EAFf;EAAA,SAKI,UAAA,EAAY,MAAA,CAAO,MAAA;;WAGnB,eAAA,EAAiB,MAAA,CAAO,MAAA,CAAO,kBAAA;cAG9C,IAAA,UACA,IAAA,EAAM,kBAAA,EACN,IAAA,EAAM,qBAAA;AAAA"}