@infracraft/pulumi 1.30.0 → 1.30.2

package/dist/fly/certificate.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_fly_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/fly/certificate.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { FlyClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/fly/secret.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_fly_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/fly/secret.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { FlyClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/fly/volume.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_fly_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/fly/volume.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { FlyClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/neon/branch.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_dynamic_is_resolved_string = require('../dynamic/is-resolved-string.cjs');
 const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
-const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_neon_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/neon/branch.mjs

@@ -1,7 +1,7 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { isResolvedString } from "../dynamic/is-resolved-string.mjs";
 import { resolveCredential } from "../dynamic/resolve-credential.mjs";
-import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { NeonClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/neon/client.cjs

@@ -2,10 +2,30 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_http_resilient_fetch = require('../http/resilient-fetch.cjs');
+let _pulumi_pulumi = require("@pulumi/pulumi");
+_pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
 
 //#region src/neon/client.ts
 const NEON_API_URL = "https://console.neon.tech/api/v2";
 /**
+* Neon runs project mutations as ASYNC operations and answers 423 ("project
+* already has running conflicting operations, scheduling of new ones is
+* prohibited") while earlier ones settle — its docs prescribe waiting for
+* completion before the next request. A destroy immediately followed by an
+* `up` on the same project hits this deterministically (live: branch/endpoint
+* deletion still settling 30s later). Waiting until the lock clears is the
+* documented protocol, bounded so a genuinely wedged project still fails.
+*/
+const OPERATION_LOCK_WAIT = {
+	/** Delay between lock probes. */
+	intervalMs: 5e3,
+	/** Upper bound on probes (~2 minutes total). */
+	maxAttempts: 24
+};
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
 * REST client for the Neon API.
 *
 * @example
@@ -69,14 +89,20 @@ var NeonClient = class {
 		await this.request("DELETE", path);
 	}
 	async request(method, path, body) {
-		const response = await require_http_resilient_fetch.resilientFetch(`${NEON_API_URL}${path}`, {
-			method,
-			headers: {
-				"Content-Type": "application/json",
-				Authorization: `Bearer ${this.apiKey}`
-			},
-			body: body ? JSON.stringify(body) : void 0
-		});
+		let response;
+		for (let attempt = 1;; attempt++) {
+			response = await require_http_resilient_fetch.resilientFetch(`${NEON_API_URL}${path}`, {
+				method,
+				headers: {
+					"Content-Type": "application/json",
+					Authorization: `Bearer ${this.apiKey}`
+				},
+				body: body ? JSON.stringify(body) : void 0
+			});
+			if (response.status !== 423 || attempt >= OPERATION_LOCK_WAIT.maxAttempts) break;
+			_pulumi_pulumi.log.info(`[infracraft] Neon project operations still settling (423) — waiting ${OPERATION_LOCK_WAIT.intervalMs / 1e3}s (attempt ${attempt}/${OPERATION_LOCK_WAIT.maxAttempts})`);
+			await sleep(OPERATION_LOCK_WAIT.intervalMs);
+		}
 		if (response.status === 404) throw new require_errors_api_not_found_error.ApiNotFoundError("neon", path);
 		if (!response.ok) {
 			const errorText = await response.text();

package/dist/neon/client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.cjs","names":["resilientFetch","ApiNotFoundError"],"sources":["../../src/neon/client.ts"],"sourcesContent":["import { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { resilientFetch } from \"../http/resilient-fetch\";\n\nconst NEON_API_URL = \"https://console.neon.tech/api/v2\";\n\n/**\n * REST client for the Neon API.\n *\n * @example\n * ```typescript\n * const client = new NeonClient(apiKey);\n * const branch = await client.get<{ branch: { id: string } }>(\n *   `/projects/abc/branches/br-xyz`\n * );\n * ```\n */\nexport class NeonClient {\n\t/** Neon API key for authentication. */\n\tprivate readonly apiKey: string;\n\n\t/**\n\t * @param apiKey Neon API key (project-scoped or account-scoped)\n\t */\n\tconstructor(apiKey: string) {\n\t\tthis.apiKey = apiKey;\n\t}\n\n\t/**\n\t * Performs a GET request against the Neon API.\n\t *\n\t * @param path API path (e.g. `/projects/abc/branches`)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync get<T>(path: string): Promise<T> {\n\t\treturn this.request<T>(\"GET\", path);\n\t}\n\n\t/**\n\t * Performs a POST request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync post<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"POST\", path, body);\n\t}\n\n\t/**\n\t * Performs a PATCH request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync patch<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"PATCH\", path, body);\n\t}\n\n\t/**\n\t * Performs a DELETE request against the Neon API.\n\t *\n\t * @param path API path\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync delete(path: string): Promise<void> {\n\t\tawait this.request<void>(\"DELETE\", path);\n\t}\n\n\tprivate async request<T>(\n\t\tmethod: string,\n\t\tpath: string,\n\t\tbody?: unknown,\n\t): Promise<T> {\n\t\tconst response = await resilientFetch(`${NEON_API_URL}${path}`, {\n\t\t\tmethod,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\tAuthorization: `Bearer ${this.apiKey}`,\n\t\t\t},\n\t\t\tbody: body ? JSON.stringify(body) : undefined,\n\t\t});\n\n\t\tif (response.status === 404) {\n\t\t\tthrow new ApiNotFoundError(\"neon\", path);\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\tconst errorText = await response.text();\n\n\t\t\tthrow new Error(`Neon API error (${response.status}): ${errorText}`);\n\t\t}\n\n\t\tif (method === \"DELETE\") {\n\t\t\treturn undefined as T;\n\t\t}\n\n\t\treturn (await response.json()) as T;\n\t}\n}\n"],"mappings":";;;;;;AAGA,MAAM,eAAe;;;;;;;;;;;;AAarB,IAAa,aAAb,MAAwB;;;;CAOvB,YAAY,QAAgB;EAC3B,KAAK,SAAS;CACf;;;;;;;;;CAUA,MAAM,IAAO,MAA0B;EACtC,OAAO,KAAK,QAAW,OAAO,IAAI;CACnC;;;;;;;;;;CAWA,MAAM,KAAQ,MAAc,MAA4B;EACvD,OAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;CAC1C;;;;;;;;;;CAWA,MAAM,MAAS,MAAc,MAA4B;EACxD,OAAO,KAAK,QAAW,SAAS,MAAM,IAAI;CAC3C;;;;;;;;CASA,MAAM,OAAO,MAA6B;EACzC,MAAM,KAAK,QAAc,UAAU,IAAI;CACxC;CAEA,MAAc,QACb,QACA,MACA,MACa;EACb,MAAM,WAAW,MAAMA,4CAAe,GAAG,eAAe,QAAQ;GAC/D;GACA,SAAS;IACR,gBAAgB;IAChB,eAAe,UAAU,KAAK;GAC/B;GACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;EACrC,CAAC;EAED,IAAI,SAAS,WAAW,KACvB,MAAM,IAAIC,oDAAiB,QAAQ,IAAI;EAGxC,IAAI,CAAC,SAAS,IAAI;GACjB,MAAM,YAAY,MAAM,SAAS,KAAK;GAEtC,MAAM,IAAI,MAAM,mBAAmB,SAAS,OAAO,KAAK,WAAW;EACpE;EAEA,IAAI,WAAW,UACd;EAGD,OAAQ,MAAM,SAAS,KAAK;CAC7B;AACD"}
+{"version":3,"file":"client.cjs","names":["resilientFetch","ApiNotFoundError"],"sources":["../../src/neon/client.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { resilientFetch } from \"../http/resilient-fetch\";\n\nconst NEON_API_URL = \"https://console.neon.tech/api/v2\";\n\n/**\n * Neon runs project mutations as ASYNC operations and answers 423 (\"project\n * already has running conflicting operations, scheduling of new ones is\n * prohibited\") while earlier ones settle — its docs prescribe waiting for\n * completion before the next request. A destroy immediately followed by an\n * `up` on the same project hits this deterministically (live: branch/endpoint\n * deletion still settling 30s later). Waiting until the lock clears is the\n * documented protocol, bounded so a genuinely wedged project still fails.\n */\nconst OPERATION_LOCK_WAIT = {\n\t/** Delay between lock probes. */\n\tintervalMs: 5_000,\n\t/** Upper bound on probes (~2 minutes total). */\n\tmaxAttempts: 24,\n} as const;\n\nfunction sleep(ms: number): Promise<void> {\n\treturn new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * REST client for the Neon API.\n *\n * @example\n * ```typescript\n * const client = new NeonClient(apiKey);\n * const branch = await client.get<{ branch: { id: string } }>(\n *   `/projects/abc/branches/br-xyz`\n * );\n * ```\n */\nexport class NeonClient {\n\t/** Neon API key for authentication. */\n\tprivate readonly apiKey: string;\n\n\t/**\n\t * @param apiKey Neon API key (project-scoped or account-scoped)\n\t */\n\tconstructor(apiKey: string) {\n\t\tthis.apiKey = apiKey;\n\t}\n\n\t/**\n\t * Performs a GET request against the Neon API.\n\t *\n\t * @param path API path (e.g. `/projects/abc/branches`)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync get<T>(path: string): Promise<T> {\n\t\treturn this.request<T>(\"GET\", path);\n\t}\n\n\t/**\n\t * Performs a POST request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync post<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"POST\", path, body);\n\t}\n\n\t/**\n\t * Performs a PATCH request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync patch<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"PATCH\", path, body);\n\t}\n\n\t/**\n\t * Performs a DELETE request against the Neon API.\n\t *\n\t * @param path API path\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync delete(path: string): Promise<void> {\n\t\tawait this.request<void>(\"DELETE\", path);\n\t}\n\n\tprivate async request<T>(\n\t\tmethod: string,\n\t\tpath: string,\n\t\tbody?: unknown,\n\t): Promise<T> {\n\t\tlet response: Response;\n\n\t\tfor (let attempt = 1; ; attempt++) {\n\t\t\tresponse = await resilientFetch(`${NEON_API_URL}${path}`, {\n\t\t\t\tmethod,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\tAuthorization: `Bearer ${this.apiKey}`,\n\t\t\t\t},\n\t\t\t\tbody: body ? JSON.stringify(body) : undefined,\n\t\t\t});\n\n\t\t\tif (\n\t\t\t\tresponse.status !== 423 ||\n\t\t\t\tattempt >= OPERATION_LOCK_WAIT.maxAttempts\n\t\t\t) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tpulumi.log.info(\n\t\t\t\t`[infracraft] Neon project operations still settling (423) — waiting ${OPERATION_LOCK_WAIT.intervalMs / 1000}s (attempt ${attempt}/${OPERATION_LOCK_WAIT.maxAttempts})`,\n\t\t\t);\n\n\t\t\tawait sleep(OPERATION_LOCK_WAIT.intervalMs);\n\t\t}\n\n\t\tif (response.status === 404) {\n\t\t\tthrow new ApiNotFoundError(\"neon\", path);\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\tconst errorText = await response.text();\n\n\t\t\tthrow new Error(`Neon API error (${response.status}): ${errorText}`);\n\t\t}\n\n\t\tif (method === \"DELETE\") {\n\t\t\treturn undefined as T;\n\t\t}\n\n\t\treturn (await response.json()) as T;\n\t}\n}\n"],"mappings":";;;;;;;;AAIA,MAAM,eAAe;;;;;;;;;;AAWrB,MAAM,sBAAsB;;CAE3B,YAAY;;CAEZ,aAAa;AACd;AAEA,SAAS,MAAM,IAA2B;CACzC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;AACxD;;;;;;;;;;;;AAaA,IAAa,aAAb,MAAwB;;;;CAOvB,YAAY,QAAgB;EAC3B,KAAK,SAAS;CACf;;;;;;;;;CAUA,MAAM,IAAO,MAA0B;EACtC,OAAO,KAAK,QAAW,OAAO,IAAI;CACnC;;;;;;;;;;CAWA,MAAM,KAAQ,MAAc,MAA4B;EACvD,OAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;CAC1C;;;;;;;;;;CAWA,MAAM,MAAS,MAAc,MAA4B;EACxD,OAAO,KAAK,QAAW,SAAS,MAAM,IAAI;CAC3C;;;;;;;;CASA,MAAM,OAAO,MAA6B;EACzC,MAAM,KAAK,QAAc,UAAU,IAAI;CACxC;CAEA,MAAc,QACb,QACA,MACA,MACa;EACb,IAAI;EAEJ,KAAK,IAAI,UAAU,IAAK,WAAW;GAClC,WAAW,MAAMA,4CAAe,GAAG,eAAe,QAAQ;IACzD;IACA,SAAS;KACR,gBAAgB;KAChB,eAAe,UAAU,KAAK;IAC/B;IACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;GACrC,CAAC;GAED,IACC,SAAS,WAAW,OACpB,WAAW,oBAAoB,aAE/B;GAGD,eAAO,IAAI,KACV,uEAAuE,oBAAoB,aAAa,IAAK,aAAa,QAAQ,GAAG,oBAAoB,YAAY,EACtK;GAEA,MAAM,MAAM,oBAAoB,UAAU;EAC3C;EAEA,IAAI,SAAS,WAAW,KACvB,MAAM,IAAIC,oDAAiB,QAAQ,IAAI;EAGxC,IAAI,CAAC,SAAS,IAAI;GACjB,MAAM,YAAY,MAAM,SAAS,KAAK;GAEtC,MAAM,IAAI,MAAM,mBAAmB,SAAS,OAAO,KAAK,WAAW;EACpE;EAEA,IAAI,WAAW,UACd;EAGD,OAAQ,MAAM,SAAS,KAAK;CAC7B;AACD"}

package/dist/neon/client.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.cts","names":[],"sources":["../../src/neon/client.ts"],"mappings":";;;;;;AAgBA;;;;;;;;cAAa,UAAA;EAwDgB;EAAA,iBAtDX,MAAA;EAsDkB;;;cAjDvB,MAAA;EAYN;;;;;;;;EAAA,GAAA,GAAA,CAAO,IAAA,WAAe,OAAA,CAAQ,CAAA;EAaS;;;;;;;;;EAAvC,IAAA,GAAA,CAAQ,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;EAwBzB;;;AAIP;;;;;;EAff,KAAA,GAAA,CAAS,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;;;;;;;;EAWhD,MAAA,CAAO,IAAA,WAAe,OAAA;EAAA,QAId,OAAA;AAAA"}
+{"version":3,"file":"client.d.cts","names":[],"sources":["../../src/neon/client.ts"],"mappings":";;;;;;AAqCA;;;;;;;;cAAa,UAAA;EAwDgB;EAAA,iBAtDX,MAAA;EAsDkB;;;cAjDvB,MAAA;EAYN;;;;;;;;EAAA,GAAA,GAAA,CAAO,IAAA,WAAe,OAAA,CAAQ,CAAA;EAaS;;;;;;;;;EAAvC,IAAA,GAAA,CAAQ,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;EAwBzB;;;AAIP;;;;;;EAff,KAAA,GAAA,CAAS,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;;;;;;;;EAWhD,MAAA,CAAO,IAAA,WAAe,OAAA;EAAA,QAId,OAAA;AAAA"}

package/dist/neon/client.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.mts","names":[],"sources":["../../src/neon/client.ts"],"mappings":";;;;;;AAgBA;;;;;;;;cAAa,UAAA;EAwDgB;EAAA,iBAtDX,MAAA;EAsDkB;;;cAjDvB,MAAA;EAYN;;;;;;;;EAAA,GAAA,GAAA,CAAO,IAAA,WAAe,OAAA,CAAQ,CAAA;EAaS;;;;;;;;;EAAvC,IAAA,GAAA,CAAQ,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;EAwBzB;;;AAIP;;;;;;EAff,KAAA,GAAA,CAAS,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;;;;;;;;EAWhD,MAAA,CAAO,IAAA,WAAe,OAAA;EAAA,QAId,OAAA;AAAA"}
+{"version":3,"file":"client.d.mts","names":[],"sources":["../../src/neon/client.ts"],"mappings":";;;;;;AAqCA;;;;;;;;cAAa,UAAA;EAwDgB;EAAA,iBAtDX,MAAA;EAsDkB;;;cAjDvB,MAAA;EAYN;;;;;;;;EAAA,GAAA,GAAA,CAAO,IAAA,WAAe,OAAA,CAAQ,CAAA;EAaS;;;;;;;;;EAAvC,IAAA,GAAA,CAAQ,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;EAwBzB;;;AAIP;;;;;;EAff,KAAA,GAAA,CAAS,IAAA,UAAc,IAAA,aAAiB,OAAA,CAAQ,CAAA;;;;;;;;EAWhD,MAAA,CAAO,IAAA,WAAe,OAAA;EAAA,QAId,OAAA;AAAA"}

package/dist/neon/client.mjs

@@ -1,10 +1,29 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { resilientFetch } from "../http/resilient-fetch.mjs";
+import * as pulumi from "@pulumi/pulumi";
 
 //#region src/neon/client.ts
 const NEON_API_URL = "https://console.neon.tech/api/v2";
 /**
+* Neon runs project mutations as ASYNC operations and answers 423 ("project
+* already has running conflicting operations, scheduling of new ones is
+* prohibited") while earlier ones settle — its docs prescribe waiting for
+* completion before the next request. A destroy immediately followed by an
+* `up` on the same project hits this deterministically (live: branch/endpoint
+* deletion still settling 30s later). Waiting until the lock clears is the
+* documented protocol, bounded so a genuinely wedged project still fails.
+*/
+const OPERATION_LOCK_WAIT = {
+	/** Delay between lock probes. */
+	intervalMs: 5e3,
+	/** Upper bound on probes (~2 minutes total). */
+	maxAttempts: 24
+};
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
 * REST client for the Neon API.
 *
 * @example
@@ -68,14 +87,20 @@ var NeonClient = class {
 		await this.request("DELETE", path);
 	}
 	async request(method, path, body) {
-		const response = await resilientFetch(`${NEON_API_URL}${path}`, {
-			method,
-			headers: {
-				"Content-Type": "application/json",
-				Authorization: `Bearer ${this.apiKey}`
-			},
-			body: body ? JSON.stringify(body) : void 0
-		});
+		let response;
+		for (let attempt = 1;; attempt++) {
+			response = await resilientFetch(`${NEON_API_URL}${path}`, {
+				method,
+				headers: {
+					"Content-Type": "application/json",
+					Authorization: `Bearer ${this.apiKey}`
+				},
+				body: body ? JSON.stringify(body) : void 0
+			});
+			if (response.status !== 423 || attempt >= OPERATION_LOCK_WAIT.maxAttempts) break;
+			pulumi.log.info(`[infracraft] Neon project operations still settling (423) — waiting ${OPERATION_LOCK_WAIT.intervalMs / 1e3}s (attempt ${attempt}/${OPERATION_LOCK_WAIT.maxAttempts})`);
+			await sleep(OPERATION_LOCK_WAIT.intervalMs);
+		}
 		if (response.status === 404) throw new ApiNotFoundError("neon", path);
 		if (!response.ok) {
 			const errorText = await response.text();

package/dist/neon/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":[],"sources":["../../src/neon/client.ts"],"sourcesContent":["import { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { resilientFetch } from \"../http/resilient-fetch\";\n\nconst NEON_API_URL = \"https://console.neon.tech/api/v2\";\n\n/**\n * REST client for the Neon API.\n *\n * @example\n * ```typescript\n * const client = new NeonClient(apiKey);\n * const branch = await client.get<{ branch: { id: string } }>(\n *   `/projects/abc/branches/br-xyz`\n * );\n * ```\n */\nexport class NeonClient {\n\t/** Neon API key for authentication. */\n\tprivate readonly apiKey: string;\n\n\t/**\n\t * @param apiKey Neon API key (project-scoped or account-scoped)\n\t */\n\tconstructor(apiKey: string) {\n\t\tthis.apiKey = apiKey;\n\t}\n\n\t/**\n\t * Performs a GET request against the Neon API.\n\t *\n\t * @param path API path (e.g. `/projects/abc/branches`)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync get<T>(path: string): Promise<T> {\n\t\treturn this.request<T>(\"GET\", path);\n\t}\n\n\t/**\n\t * Performs a POST request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync post<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"POST\", path, body);\n\t}\n\n\t/**\n\t * Performs a PATCH request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync patch<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"PATCH\", path, body);\n\t}\n\n\t/**\n\t * Performs a DELETE request against the Neon API.\n\t *\n\t * @param path API path\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync delete(path: string): Promise<void> {\n\t\tawait this.request<void>(\"DELETE\", path);\n\t}\n\n\tprivate async request<T>(\n\t\tmethod: string,\n\t\tpath: string,\n\t\tbody?: unknown,\n\t): Promise<T> {\n\t\tconst response = await resilientFetch(`${NEON_API_URL}${path}`, {\n\t\t\tmethod,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\tAuthorization: `Bearer ${this.apiKey}`,\n\t\t\t},\n\t\t\tbody: body ? JSON.stringify(body) : undefined,\n\t\t});\n\n\t\tif (response.status === 404) {\n\t\t\tthrow new ApiNotFoundError(\"neon\", path);\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\tconst errorText = await response.text();\n\n\t\t\tthrow new Error(`Neon API error (${response.status}): ${errorText}`);\n\t\t}\n\n\t\tif (method === \"DELETE\") {\n\t\t\treturn undefined as T;\n\t\t}\n\n\t\treturn (await response.json()) as T;\n\t}\n}\n"],"mappings":";;;;;AAGA,MAAM,eAAe;;;;;;;;;;;;AAarB,IAAa,aAAb,MAAwB;;;;CAOvB,YAAY,QAAgB;EAC3B,KAAK,SAAS;CACf;;;;;;;;;CAUA,MAAM,IAAO,MAA0B;EACtC,OAAO,KAAK,QAAW,OAAO,IAAI;CACnC;;;;;;;;;;CAWA,MAAM,KAAQ,MAAc,MAA4B;EACvD,OAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;CAC1C;;;;;;;;;;CAWA,MAAM,MAAS,MAAc,MAA4B;EACxD,OAAO,KAAK,QAAW,SAAS,MAAM,IAAI;CAC3C;;;;;;;;CASA,MAAM,OAAO,MAA6B;EACzC,MAAM,KAAK,QAAc,UAAU,IAAI;CACxC;CAEA,MAAc,QACb,QACA,MACA,MACa;EACb,MAAM,WAAW,MAAM,eAAe,GAAG,eAAe,QAAQ;GAC/D;GACA,SAAS;IACR,gBAAgB;IAChB,eAAe,UAAU,KAAK;GAC/B;GACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;EACrC,CAAC;EAED,IAAI,SAAS,WAAW,KACvB,MAAM,IAAI,iBAAiB,QAAQ,IAAI;EAGxC,IAAI,CAAC,SAAS,IAAI;GACjB,MAAM,YAAY,MAAM,SAAS,KAAK;GAEtC,MAAM,IAAI,MAAM,mBAAmB,SAAS,OAAO,KAAK,WAAW;EACpE;EAEA,IAAI,WAAW,UACd;EAGD,OAAQ,MAAM,SAAS,KAAK;CAC7B;AACD"}
+{"version":3,"file":"client.mjs","names":[],"sources":["../../src/neon/client.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { resilientFetch } from \"../http/resilient-fetch\";\n\nconst NEON_API_URL = \"https://console.neon.tech/api/v2\";\n\n/**\n * Neon runs project mutations as ASYNC operations and answers 423 (\"project\n * already has running conflicting operations, scheduling of new ones is\n * prohibited\") while earlier ones settle — its docs prescribe waiting for\n * completion before the next request. A destroy immediately followed by an\n * `up` on the same project hits this deterministically (live: branch/endpoint\n * deletion still settling 30s later). Waiting until the lock clears is the\n * documented protocol, bounded so a genuinely wedged project still fails.\n */\nconst OPERATION_LOCK_WAIT = {\n\t/** Delay between lock probes. */\n\tintervalMs: 5_000,\n\t/** Upper bound on probes (~2 minutes total). */\n\tmaxAttempts: 24,\n} as const;\n\nfunction sleep(ms: number): Promise<void> {\n\treturn new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * REST client for the Neon API.\n *\n * @example\n * ```typescript\n * const client = new NeonClient(apiKey);\n * const branch = await client.get<{ branch: { id: string } }>(\n *   `/projects/abc/branches/br-xyz`\n * );\n * ```\n */\nexport class NeonClient {\n\t/** Neon API key for authentication. */\n\tprivate readonly apiKey: string;\n\n\t/**\n\t * @param apiKey Neon API key (project-scoped or account-scoped)\n\t */\n\tconstructor(apiKey: string) {\n\t\tthis.apiKey = apiKey;\n\t}\n\n\t/**\n\t * Performs a GET request against the Neon API.\n\t *\n\t * @param path API path (e.g. `/projects/abc/branches`)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync get<T>(path: string): Promise<T> {\n\t\treturn this.request<T>(\"GET\", path);\n\t}\n\n\t/**\n\t * Performs a POST request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync post<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"POST\", path, body);\n\t}\n\n\t/**\n\t * Performs a PATCH request against the Neon API.\n\t *\n\t * @param path API path\n\t * @param body Request body (will be JSON-serialized)\n\t * @returns Typed JSON response body\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync patch<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(\"PATCH\", path, body);\n\t}\n\n\t/**\n\t * Performs a DELETE request against the Neon API.\n\t *\n\t * @param path API path\n\t * @throws {ApiNotFoundError} On 404\n\t * @throws {Error} On any other non-2xx HTTP status\n\t */\n\tasync delete(path: string): Promise<void> {\n\t\tawait this.request<void>(\"DELETE\", path);\n\t}\n\n\tprivate async request<T>(\n\t\tmethod: string,\n\t\tpath: string,\n\t\tbody?: unknown,\n\t): Promise<T> {\n\t\tlet response: Response;\n\n\t\tfor (let attempt = 1; ; attempt++) {\n\t\t\tresponse = await resilientFetch(`${NEON_API_URL}${path}`, {\n\t\t\t\tmethod,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\tAuthorization: `Bearer ${this.apiKey}`,\n\t\t\t\t},\n\t\t\t\tbody: body ? JSON.stringify(body) : undefined,\n\t\t\t});\n\n\t\t\tif (\n\t\t\t\tresponse.status !== 423 ||\n\t\t\t\tattempt >= OPERATION_LOCK_WAIT.maxAttempts\n\t\t\t) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tpulumi.log.info(\n\t\t\t\t`[infracraft] Neon project operations still settling (423) — waiting ${OPERATION_LOCK_WAIT.intervalMs / 1000}s (attempt ${attempt}/${OPERATION_LOCK_WAIT.maxAttempts})`,\n\t\t\t);\n\n\t\t\tawait sleep(OPERATION_LOCK_WAIT.intervalMs);\n\t\t}\n\n\t\tif (response.status === 404) {\n\t\t\tthrow new ApiNotFoundError(\"neon\", path);\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\tconst errorText = await response.text();\n\n\t\t\tthrow new Error(`Neon API error (${response.status}): ${errorText}`);\n\t\t}\n\n\t\tif (method === \"DELETE\") {\n\t\t\treturn undefined as T;\n\t\t}\n\n\t\treturn (await response.json()) as T;\n\t}\n}\n"],"mappings":";;;;;;AAIA,MAAM,eAAe;;;;;;;;;;AAWrB,MAAM,sBAAsB;;CAE3B,YAAY;;CAEZ,aAAa;AACd;AAEA,SAAS,MAAM,IAA2B;CACzC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;AACxD;;;;;;;;;;;;AAaA,IAAa,aAAb,MAAwB;;;;CAOvB,YAAY,QAAgB;EAC3B,KAAK,SAAS;CACf;;;;;;;;;CAUA,MAAM,IAAO,MAA0B;EACtC,OAAO,KAAK,QAAW,OAAO,IAAI;CACnC;;;;;;;;;;CAWA,MAAM,KAAQ,MAAc,MAA4B;EACvD,OAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;CAC1C;;;;;;;;;;CAWA,MAAM,MAAS,MAAc,MAA4B;EACxD,OAAO,KAAK,QAAW,SAAS,MAAM,IAAI;CAC3C;;;;;;;;CASA,MAAM,OAAO,MAA6B;EACzC,MAAM,KAAK,QAAc,UAAU,IAAI;CACxC;CAEA,MAAc,QACb,QACA,MACA,MACa;EACb,IAAI;EAEJ,KAAK,IAAI,UAAU,IAAK,WAAW;GAClC,WAAW,MAAM,eAAe,GAAG,eAAe,QAAQ;IACzD;IACA,SAAS;KACR,gBAAgB;KAChB,eAAe,UAAU,KAAK;IAC/B;IACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;GACrC,CAAC;GAED,IACC,SAAS,WAAW,OACpB,WAAW,oBAAoB,aAE/B;GAGD,OAAO,IAAI,KACV,uEAAuE,oBAAoB,aAAa,IAAK,aAAa,QAAQ,GAAG,oBAAoB,YAAY,EACtK;GAEA,MAAM,MAAM,oBAAoB,UAAU;EAC3C;EAEA,IAAI,SAAS,WAAW,KACvB,MAAM,IAAI,iBAAiB,QAAQ,IAAI;EAGxC,IAAI,CAAC,SAAS,IAAI;GACjB,MAAM,YAAY,MAAM,SAAS,KAAK;GAEtC,MAAM,IAAI,MAAM,mBAAmB,SAAS,OAAO,KAAK,WAAW;EACpE;EAEA,IAAI,WAAW,UACd;EAGD,OAAQ,MAAM,SAAS,KAAK;CAC7B;AACD"}

package/dist/neon/database.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_neon_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/neon/database.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { NeonClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/neon/endpoint.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_neon_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/neon/endpoint.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { NeonClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/neon/project.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_neon_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/neon/project.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { NeonClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/neon/role.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_dynamic_is_resolved_string = require('../dynamic/is-resolved-string.cjs');
 const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
-const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_neon_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/neon/role.mjs

@@ -1,7 +1,7 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { isResolvedString } from "../dynamic/is-resolved-string.mjs";
 import { resolveCredential } from "../dynamic/resolve-credential.mjs";
-import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { NeonClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/vercel/domain.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_vercel_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/vercel/domain.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { VercelClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/vercel/project.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
+const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_dynamic_is_resolved_string = require('../dynamic/is-resolved-string.cjs');
 const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
-const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
 const require_vercel_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);

package/dist/vercel/project.mjs

@@ -1,7 +1,7 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
+import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { isResolvedString } from "../dynamic/is-resolved-string.mjs";
 import { resolveCredential, resolveCredentialOutput } from "../dynamic/resolve-credential.mjs";
-import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
 import { VercelClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 

package/dist/vercel/variable.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_chunk = require('../chunk-BVYJZCqc.cjs');
-const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_errors_api_not_found_error = require('../errors/api-not-found-error.cjs');
+const require_dynamic_resolve_credential = require('../dynamic/resolve-credential.cjs');
 const require_vercel_client = require('./client.cjs');
 let _pulumi_pulumi = require("@pulumi/pulumi");
 _pulumi_pulumi = require_chunk.__toESM(_pulumi_pulumi, 1);
@@ -164,11 +164,7 @@ var VercelVariableResourceProvider = class {
 /** Internal dynamic resource — not part of the public API. */
 var VercelVariableResource = class extends _pulumi_pulumi.dynamic.Resource {
 	constructor(name, args, opts) {
-		super(new VercelVariableResourceProvider(), name, {
-			...args,
-			envIds: void 0,
-			contentHash: void 0
-		}, {
+		super(new VercelVariableResourceProvider(), name, args, {
 			...opts,
 			additionalSecretOutputs: ["token"]
 		});
@@ -193,15 +189,14 @@ var VercelVariable = class extends _pulumi_pulumi.ComponentResource {
 		super("infracraft:vercel:Variable", name, {}, pulumiOpts);
 		const projectId = project ? project.id : args.projectId;
 		if (!projectId) throw new Error("VercelVariable: either `args.projectId` or `opts.project` must be provided");
-		const resource = new VercelVariableResource(`${name}-resource`, {
+		new VercelVariableResource(`${name}-resource`, {
 			token: provider.token,
 			tokenEnvVar: provider.tokenEnvVar,
 			teamId: provider.teamId,
 			projectId,
 			variables: args.variables
 		}, { parent: this });
-		this.contentHash = resource.contentHash;
-		this.registerOutputs({ contentHash: this.contentHash });
+		this.registerOutputs({});
 	}
 };
 

package/dist/vercel/variable.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"variable.cjs","names":["ApiNotFoundError","VercelClient","resolveCredential","pulumi"],"sources":["../../src/vercel/variable.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { resolveCredential } from \"../dynamic/resolve-credential\";\nimport { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { VercelClient } from \"./client\";\nimport type { VercelProject } from \"./project\";\nimport type { VercelProvider } from \"./provider\";\n\n/** Resolved inputs for the Vercel variable dynamic provider. */\ninterface VercelVariableInputs {\n\t/** Vercel API bearer token. Absent when `tokenEnvVar` is used instead. */\n\ttoken?: string;\n\n\t/** Env var name resolved to the token when `token` is absent (see `VercelProviderArgs.tokenEnvVar`). */\n\ttokenEnvVar?: string;\n\n\t/** Vercel team/org ID. */\n\tteamId: string;\n\n\t/** Vercel project ID. */\n\tprojectId: string;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: Record<string, string>;\n}\n\n/** Persisted state for Vercel variables. */\ninterface VercelVariableOutputs extends VercelVariableInputs {\n\t/** Map of env var keys to their Vercel-assigned IDs (for updates and deletes). */\n\tenvIds: Record<string, string>;\n\n\t/** SHA-256 hash of all key-value pairs. Changes when any value is modified (including drift fixes). */\n\tcontentHash: string;\n}\n\n/**\n * Computes a deterministic content hash of a variables map.\n */\nasync function hashVariables(\n\tvariables: Record<string, string>,\n): Promise<string> {\n\tconst crypto = await import(\"node:crypto\");\n\tconst hash = crypto.createHash(\"sha256\");\n\n\tconst sorted = Object.entries(variables).sort(([a], [b]) =>\n\t\ta.localeCompare(b),\n\t);\n\n\tfor (const [key, value] of sorted) {\n\t\thash.update(key);\n\t\thash.update(value);\n\t}\n\n\treturn hash.digest(\"hex\");\n}\n\n/** Vercel API response for a single env var. */\ninterface VercelEnvVar {\n\tid: string;\n\tkey: string;\n\tvalue: string;\n\ttype: string;\n\ttarget: string[];\n}\n\n/**\n * Fetches all environment variables for a Vercel project with decrypted values.\n * A variable that vanishes between the list and its decrypt read is skipped.\n */\nasync function fetchEnvVars(\n\tclient: VercelClient,\n\tprojectId: string,\n): Promise<VercelEnvVar[]> {\n\tconst list = await client.get<{ envs: VercelEnvVar[] }>(\n\t\t`/v9/projects/${projectId}/env`,\n\t);\n\n\tconst decrypted: VercelEnvVar[] = [];\n\n\tfor (const env of list.envs) {\n\t\tconst decryptedVar = await client.tryGet<VercelEnvVar>(\n\t\t\t`/v9/projects/${projectId}/env/${env.id}?decrypt=true`,\n\t\t);\n\n\t\tif (decryptedVar) {\n\t\t\tdecrypted.push(decryptedVar);\n\t\t}\n\t}\n\n\treturn decrypted;\n}\n\n/**\n * Creates a single Vercel env var targeting all environments.\n * An already-existing key (ENV_CONFLICT) is updated in place instead.\n */\nasync function createEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tkey: string,\n\tvalue: string,\n): Promise<VercelEnvVar> {\n\ttry {\n\t\treturn await client.post<VercelEnvVar>(`/v10/projects/${projectId}/env`, {\n\t\t\tkey,\n\t\t\tvalue,\n\t\t\ttype: \"encrypted\",\n\t\t\ttarget: [\"production\", \"preview\", \"development\"],\n\t\t});\n\t} catch (error) {\n\t\t// ENV_CONFLICT is Vercel's error code for \"key already exists\"; the client\n\t\t// surfaces the API error body in the message, so it is matched there.\n\t\tif (error instanceof Error && error.message.includes(\"ENV_CONFLICT\")) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Vercel env var \"${key}\" already exists, will update instead`,\n\t\t\t);\n\n\t\t\tconst existing = await fetchEnvVars(client, projectId);\n\t\t\tconst match = existing.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tawait updateEnvVar(client, projectId, match.id, value);\n\n\t\t\t\treturn { ...match, value };\n\t\t\t}\n\t\t}\n\n\t\tthrow error;\n\t}\n}\n\n/**\n * Updates a single Vercel env var value.\n */\nasync function updateEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n\tvalue: string,\n): Promise<void> {\n\tawait client.patch(`/v9/projects/${projectId}/env/${envId}`, { value });\n}\n\n/**\n * Deletes a single Vercel env var. Tolerates 404 (already gone) —\n * deletion is idempotent.\n */\nasync function deleteEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n): Promise<void> {\n\ttry {\n\t\tawait client.delete(`/v9/projects/${projectId}/env/${envId}`);\n\t} catch (error) {\n\t\tif (!(error instanceof ApiNotFoundError)) {\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\n/**\n * Dynamic provider implementing CRUD for Vercel project environment variables.\n *\n * @internal Exported only for unit testing; not part of the public API surface.\n */\nexport class VercelVariableResourceProvider\n\timplements pulumi.dynamic.ResourceProvider\n{\n\tasync create(\n\t\tinputs: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(inputs.token, inputs.tokenEnvVar),\n\t\t\tinputs.teamId,\n\t\t);\n\n\t\tconst envIds: Record<string, string> = {};\n\n\t\tfor (const [key, value] of Object.entries(inputs.variables)) {\n\t\t\tconst result = await createEnvVar(client, inputs.projectId, key, value);\n\n\t\t\tenvIds[key] = result.id;\n\t\t}\n\n\t\treturn {\n\t\t\tid: `${inputs.projectId}:variables`,\n\t\t\touts: {\n\t\t\t\t...inputs,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(inputs.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync update(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(news.token, news.tokenEnvVar),\n\t\t\tnews.teamId,\n\t\t);\n\n\t\tconst envIds = { ...olds.envIds };\n\n\t\tconst removedKeys = Object.keys(olds.variables).filter(\n\t\t\t(key) => !(key in news.variables),\n\t\t);\n\n\t\tfor (const key of removedKeys) {\n\t\t\tconst envId = envIds[key];\n\n\t\t\tif (envId) {\n\t\t\t\ttry {\n\t\t\t\t\tawait deleteEnvVar(client, news.projectId, envId);\n\t\t\t\t} catch {\n\t\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tdelete envIds[key];\n\t\t\t}\n\t\t}\n\n\t\tfor (const [key, value] of Object.entries(news.variables)) {\n\t\t\tconst existingId = envIds[key];\n\n\t\t\tif (existingId && olds.variables[key] !== value) {\n\t\t\t\tawait updateEnvVar(client, news.projectId, existingId, value);\n\t\t\t} else if (!existingId) {\n\t\t\t\tconst result = await createEnvVar(client, news.projectId, key, value);\n\n\t\t\t\tenvIds[key] = result.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\touts: {\n\t\t\t\t...news,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(news.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: VercelVariableOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tconst actual = await fetchEnvVars(client, props.projectId);\n\n\t\tconst actualVariables: Record<string, string> = {};\n\t\tconst actualEnvIds: Record<string, string> = {};\n\n\t\tfor (const [key] of Object.entries(props.variables)) {\n\t\t\tconst match = actual.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tactualVariables[key] = match.value;\n\t\t\t\tactualEnvIds[key] = match.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tvariables: actualVariables,\n\t\t\t\tenvIds: actualEnvIds,\n\t\t\t\tcontentHash: await hashVariables(actualVariables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync delete(_id: string, props: VercelVariableOutputs): Promise<void> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tfor (const [key, envId] of Object.entries(props.envIds)) {\n\t\t\ttry {\n\t\t\t\tawait deleteEnvVar(client, props.projectId, envId);\n\t\t\t} catch {\n\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst oldKeys = Object.keys(olds.variables).sort().join(\",\");\n\t\tconst newKeys = Object.keys(news.variables).sort().join(\",\");\n\n\t\tconst valuesChanged = Object.entries(news.variables).some(\n\t\t\t([key, value]) => olds.variables[key] !== value,\n\t\t);\n\n\t\treturn {\n\t\t\tchanges: oldKeys !== newKeys || valuesChanged,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass VercelVariableResource extends pulumi.dynamic.Resource {\n\tpublic declare readonly contentHash: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken?: pulumi.Input<string>;\n\t\t\ttokenEnvVar?: pulumi.Input<string>;\n\t\t\tteamId: pulumi.Input<string>;\n\t\t\tprojectId: pulumi.Input<string>;\n\t\t\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew VercelVariableResourceProvider(),\n\t\t\tname,\n\t\t\t{ ...args, envIds: undefined, contentHash: undefined },\n\t\t\t// The API token flows into dynamic-provider state with the outputs — mark it secret there.\n\t\t\t{ ...opts, additionalSecretOutputs: [\"token\"] },\n\t\t);\n\t}\n}\n\n/** Options type for VercelVariable — replaces Pulumi's native `provider` field. */\ntype VercelVariableOptions = Omit<\n\tpulumi.ComponentResourceOptions,\n\t\"provider\"\n> & {\n\t/** Vercel authentication context. */\n\tprovider: VercelProvider;\n\n\t/**\n\t * VercelProject resource to source the project ID from.\n\t * When provided, `args.projectId` is optional and ignored if both are given.\n\t */\n\tproject?: VercelProject;\n};\n\n/** Args for VercelVariable. */\nexport interface VercelVariableArgs {\n\t/**\n\t * Vercel project ID.\n\t * Required when `opts.project` is not provided.\n\t */\n\tprojectId?: pulumi.Input<string>;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n}\n\n/**\n * Manages Vercel project environment variables as a batch with drift detection.\n *\n * @example\n * ```typescript\n * new VercelVariable(\"nexus-vars\", {\n *   projectId: vercelProject.id,\n *   variables: {\n *     NEXT_PUBLIC_API_URL: meshUrl,\n *   },\n * }, { provider });\n * ```\n */\nexport class VercelVariable extends pulumi.ComponentResource {\n\t/** SHA-256 hash of all key-value pairs. Use as a deploy trigger for drift-aware redeployment. */\n\tpublic readonly contentHash: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: VercelVariableArgs,\n\t\topts: VercelVariableOptions,\n\t) {\n\t\tconst { provider, project, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:vercel:Variable\", name, {}, pulumiOpts);\n\n\t\tconst projectId = project\n\t\t\t? project.id\n\t\t\t: (args.projectId as pulumi.Input<string>);\n\n\t\tif (!projectId) {\n\t\t\tthrow new Error(\n\t\t\t\t\"VercelVariable: either `args.projectId` or `opts.project` must be provided\",\n\t\t\t);\n\t\t}\n\n\t\tconst resource = new VercelVariableResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\ttokenEnvVar: provider.tokenEnvVar,\n\t\t\t\tteamId: provider.teamId,\n\t\t\t\tprojectId,\n\t\t\t\tvariables: args.variables,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.contentHash = resource.contentHash;\n\n\t\tthis.registerOutputs({ contentHash: this.contentHash });\n\t}\n}\n"],"mappings":";;;;;;;;;;;;AAqCA,eAAe,cACd,WACkB;CAElB,MAAM,QAAO,MADQ,OAAO,gBACR,WAAW,QAAQ;CAEvC,MAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OACpD,EAAE,cAAc,CAAC,CAClB;CAEA,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ;EAClC,KAAK,OAAO,GAAG;EACf,KAAK,OAAO,KAAK;CAClB;CAEA,OAAO,KAAK,OAAO,KAAK;AACzB;;;;;AAeA,eAAe,aACd,QACA,WAC0B;CAC1B,MAAM,OAAO,MAAM,OAAO,IACzB,gBAAgB,UAAU,KAC3B;CAEA,MAAM,YAA4B,CAAC;CAEnC,KAAK,MAAM,OAAO,KAAK,MAAM;EAC5B,MAAM,eAAe,MAAM,OAAO,OACjC,gBAAgB,UAAU,OAAO,IAAI,GAAG,cACzC;EAEA,IAAI,cACH,UAAU,KAAK,YAAY;CAE7B;CAEA,OAAO;AACR;;;;;AAMA,eAAe,aACd,QACA,WACA,KACA,OACwB;CACxB,IAAI;EACH,OAAO,MAAM,OAAO,KAAmB,iBAAiB,UAAU,OAAO;GACxE;GACA;GACA,MAAM;GACN,QAAQ;IAAC;IAAc;IAAW;GAAa;EAChD,CAAC;CACF,SAAS,OAAO;EAGf,IAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,cAAc,GAAG;GACrE,eAAO,IAAI,KACV,mBAAmB,IAAI,sCACxB;GAGA,MAAM,SAAQ,MADS,aAAa,QAAQ,SAAS,GAC9B,MAAM,MAAM,EAAE,QAAQ,GAAG;GAEhD,IAAI,OAAO;IACV,MAAM,aAAa,QAAQ,WAAW,MAAM,IAAI,KAAK;IAErD,OAAO;KAAE,GAAG;KAAO;IAAM;GAC1B;EACD;EAEA,MAAM;CACP;AACD;;;;AAKA,eAAe,aACd,QACA,WACA,OACA,OACgB;CAChB,MAAM,OAAO,MAAM,gBAAgB,UAAU,OAAO,SAAS,EAAE,MAAM,CAAC;AACvE;;;;;AAMA,eAAe,aACd,QACA,WACA,OACgB;CAChB,IAAI;EACH,MAAM,OAAO,OAAO,gBAAgB,UAAU,OAAO,OAAO;CAC7D,SAAS,OAAO;EACf,IAAI,EAAE,iBAAiBA,sDACtB,MAAM;CAER;AACD;;;;;;AAOA,IAAa,iCAAb,MAEA;CACC,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAIC,mCAClBC,qDAAkB,OAAO,OAAO,OAAO,WAAW,GAClD,OAAO,MACR;EAEA,MAAM,SAAiC,CAAC;EAExC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,SAAS,GAGzD,OAAO,QAAO,MAFO,aAAa,QAAQ,OAAO,WAAW,KAAK,KAAK,GAEjD;EAGtB,OAAO;GACN,IAAI,GAAG,OAAO,UAAU;GACxB,MAAM;IACL,GAAG;IACH;IACA,aAAa,MAAM,cAAc,OAAO,SAAS;GAClD;EACD;CACD;CAEA,MAAM,OACL,KACA,MACA,MACuC;EACvC,MAAM,SAAS,IAAID,mCAClBC,qDAAkB,KAAK,OAAO,KAAK,WAAW,GAC9C,KAAK,MACN;EAEA,MAAM,SAAS,EAAE,GAAG,KAAK,OAAO;EAEhC,MAAM,cAAc,OAAO,KAAK,KAAK,SAAS,EAAE,QAC9C,QAAQ,EAAE,OAAO,KAAK,UACxB;EAEA,KAAK,MAAM,OAAO,aAAa;GAC9B,MAAM,QAAQ,OAAO;GAErB,IAAI,OAAO;IACV,IAAI;KACH,MAAM,aAAa,QAAQ,KAAK,WAAW,KAAK;IACjD,QAAQ;KACP,eAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;IACD;IAEA,OAAO,OAAO;GACf;EACD;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,SAAS,GAAG;GAC1D,MAAM,aAAa,OAAO;GAE1B,IAAI,cAAc,KAAK,UAAU,SAAS,OACzC,MAAM,aAAa,QAAQ,KAAK,WAAW,YAAY,KAAK;QACtD,IAAI,CAAC,YAGX,OAAO,QAAO,MAFO,aAAa,QAAQ,KAAK,WAAW,KAAK,KAAK,GAE/C;EAEvB;EAEA,OAAO,EACN,MAAM;GACL,GAAG;GACH;GACA,aAAa,MAAM,cAAc,KAAK,SAAS;EAChD,EACD;CACD;CAEA,MAAM,KACL,IACA,OACqC;EAMrC,MAAM,SAAS,MAAM,aAAa,IALfD,mCAClBC,qDAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MAGgC,GAAG,MAAM,SAAS;EAEzD,MAAM,kBAA0C,CAAC;EACjD,MAAM,eAAuC,CAAC;EAE9C,KAAK,MAAM,CAAC,QAAQ,OAAO,QAAQ,MAAM,SAAS,GAAG;GACpD,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,QAAQ,GAAG;GAE9C,IAAI,OAAO;IACV,gBAAgB,OAAO,MAAM;IAC7B,aAAa,OAAO,MAAM;GAC3B;EACD;EAEA,OAAO;GACN;GACA,OAAO;IACN,GAAG;IACH,WAAW;IACX,QAAQ;IACR,aAAa,MAAM,cAAc,eAAe;GACjD;EACD;CACD;CAEA,MAAM,OAAO,KAAa,OAA6C;EACtE,MAAM,SAAS,IAAID,mCAClBC,qDAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MACP;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,MAAM,GACrD,IAAI;GACH,MAAM,aAAa,QAAQ,MAAM,WAAW,KAAK;EAClD,QAAQ;GACP,eAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;EACD;CAEF;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAC3D,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAE3D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,SAAS,EAAE,MACnD,CAAC,KAAK,WAAW,KAAK,UAAU,SAAS,KAC3C;EAEA,OAAO,EACN,SAAS,YAAY,WAAW,cACjC;CACD;AACD;;AAGA,IAAM,yBAAN,cAAqCC,eAAO,QAAQ,SAAS;CAG5D,YACC,MACA,MAOA,MACC;EACD,MACC,IAAI,+BAA+B,GACnC,MACA;GAAE,GAAG;GAAM,QAAQ;GAAW,aAAa;EAAU,GAErD;GAAE,GAAG;GAAM,yBAAyB,CAAC,OAAO;EAAE,CAC/C;CACD;AACD;;;;;;;;;;;;;;AA0CA,IAAa,iBAAb,cAAoCA,eAAO,kBAAkB;CAI5D,YACC,MACA,MACA,MACC;EACD,MAAM,EAAE,UAAU,SAAS,GAAG,eAAe;EAE7C,MAAM,8BAA8B,MAAM,CAAC,GAAG,UAAU;EAExD,MAAM,YAAY,UACf,QAAQ,KACP,KAAK;EAET,IAAI,CAAC,WACJ,MAAM,IAAI,MACT,4EACD;EAGD,MAAM,WAAW,IAAI,uBACpB,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,aAAa,SAAS;GACtB,QAAQ,SAAS;GACjB;GACA,WAAW,KAAK;EACjB,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,cAAc,SAAS;EAE5B,KAAK,gBAAgB,EAAE,aAAa,KAAK,YAAY,CAAC;CACvD;AACD"}
+{"version":3,"file":"variable.cjs","names":["ApiNotFoundError","VercelClient","resolveCredential","pulumi"],"sources":["../../src/vercel/variable.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { resolveCredential } from \"../dynamic/resolve-credential\";\nimport { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { VercelClient } from \"./client\";\nimport type { VercelProject } from \"./project\";\nimport type { VercelProvider } from \"./provider\";\n\n/** Resolved inputs for the Vercel variable dynamic provider. */\ninterface VercelVariableInputs {\n\t/** Vercel API bearer token. Absent when `tokenEnvVar` is used instead. */\n\ttoken?: string;\n\n\t/** Env var name resolved to the token when `token` is absent (see `VercelProviderArgs.tokenEnvVar`). */\n\ttokenEnvVar?: string;\n\n\t/** Vercel team/org ID. */\n\tteamId: string;\n\n\t/** Vercel project ID. */\n\tprojectId: string;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: Record<string, string>;\n}\n\n/** Persisted state for Vercel variables. */\ninterface VercelVariableOutputs extends VercelVariableInputs {\n\t/** Map of env var keys to their Vercel-assigned IDs (for updates and deletes). */\n\tenvIds: Record<string, string>;\n\n\t/** SHA-256 hash of all key-value pairs. Changes when any value is modified (including drift fixes). */\n\tcontentHash: string;\n}\n\n/**\n * Computes a deterministic content hash of a variables map.\n */\nasync function hashVariables(\n\tvariables: Record<string, string>,\n): Promise<string> {\n\tconst crypto = await import(\"node:crypto\");\n\tconst hash = crypto.createHash(\"sha256\");\n\n\tconst sorted = Object.entries(variables).sort(([a], [b]) =>\n\t\ta.localeCompare(b),\n\t);\n\n\tfor (const [key, value] of sorted) {\n\t\thash.update(key);\n\t\thash.update(value);\n\t}\n\n\treturn hash.digest(\"hex\");\n}\n\n/** Vercel API response for a single env var. */\ninterface VercelEnvVar {\n\tid: string;\n\tkey: string;\n\tvalue: string;\n\ttype: string;\n\ttarget: string[];\n}\n\n/**\n * Fetches all environment variables for a Vercel project with decrypted values.\n * A variable that vanishes between the list and its decrypt read is skipped.\n */\nasync function fetchEnvVars(\n\tclient: VercelClient,\n\tprojectId: string,\n): Promise<VercelEnvVar[]> {\n\tconst list = await client.get<{ envs: VercelEnvVar[] }>(\n\t\t`/v9/projects/${projectId}/env`,\n\t);\n\n\tconst decrypted: VercelEnvVar[] = [];\n\n\tfor (const env of list.envs) {\n\t\tconst decryptedVar = await client.tryGet<VercelEnvVar>(\n\t\t\t`/v9/projects/${projectId}/env/${env.id}?decrypt=true`,\n\t\t);\n\n\t\tif (decryptedVar) {\n\t\t\tdecrypted.push(decryptedVar);\n\t\t}\n\t}\n\n\treturn decrypted;\n}\n\n/**\n * Creates a single Vercel env var targeting all environments.\n * An already-existing key (ENV_CONFLICT) is updated in place instead.\n */\nasync function createEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tkey: string,\n\tvalue: string,\n): Promise<VercelEnvVar> {\n\ttry {\n\t\treturn await client.post<VercelEnvVar>(`/v10/projects/${projectId}/env`, {\n\t\t\tkey,\n\t\t\tvalue,\n\t\t\ttype: \"encrypted\",\n\t\t\ttarget: [\"production\", \"preview\", \"development\"],\n\t\t});\n\t} catch (error) {\n\t\t// ENV_CONFLICT is Vercel's error code for \"key already exists\"; the client\n\t\t// surfaces the API error body in the message, so it is matched there.\n\t\tif (error instanceof Error && error.message.includes(\"ENV_CONFLICT\")) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Vercel env var \"${key}\" already exists, will update instead`,\n\t\t\t);\n\n\t\t\tconst existing = await fetchEnvVars(client, projectId);\n\t\t\tconst match = existing.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tawait updateEnvVar(client, projectId, match.id, value);\n\n\t\t\t\treturn { ...match, value };\n\t\t\t}\n\t\t}\n\n\t\tthrow error;\n\t}\n}\n\n/**\n * Updates a single Vercel env var value.\n */\nasync function updateEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n\tvalue: string,\n): Promise<void> {\n\tawait client.patch(`/v9/projects/${projectId}/env/${envId}`, { value });\n}\n\n/**\n * Deletes a single Vercel env var. Tolerates 404 (already gone) —\n * deletion is idempotent.\n */\nasync function deleteEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n): Promise<void> {\n\ttry {\n\t\tawait client.delete(`/v9/projects/${projectId}/env/${envId}`);\n\t} catch (error) {\n\t\tif (!(error instanceof ApiNotFoundError)) {\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\n/**\n * Dynamic provider implementing CRUD for Vercel project environment variables.\n *\n * @internal Exported only for unit testing; not part of the public API surface.\n */\nexport class VercelVariableResourceProvider\n\timplements pulumi.dynamic.ResourceProvider\n{\n\tasync create(\n\t\tinputs: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(inputs.token, inputs.tokenEnvVar),\n\t\t\tinputs.teamId,\n\t\t);\n\n\t\tconst envIds: Record<string, string> = {};\n\n\t\tfor (const [key, value] of Object.entries(inputs.variables)) {\n\t\t\tconst result = await createEnvVar(client, inputs.projectId, key, value);\n\n\t\t\tenvIds[key] = result.id;\n\t\t}\n\n\t\treturn {\n\t\t\tid: `${inputs.projectId}:variables`,\n\t\t\touts: {\n\t\t\t\t...inputs,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(inputs.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync update(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(news.token, news.tokenEnvVar),\n\t\t\tnews.teamId,\n\t\t);\n\n\t\tconst envIds = { ...olds.envIds };\n\n\t\tconst removedKeys = Object.keys(olds.variables).filter(\n\t\t\t(key) => !(key in news.variables),\n\t\t);\n\n\t\tfor (const key of removedKeys) {\n\t\t\tconst envId = envIds[key];\n\n\t\t\tif (envId) {\n\t\t\t\ttry {\n\t\t\t\t\tawait deleteEnvVar(client, news.projectId, envId);\n\t\t\t\t} catch {\n\t\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tdelete envIds[key];\n\t\t\t}\n\t\t}\n\n\t\tfor (const [key, value] of Object.entries(news.variables)) {\n\t\t\tconst existingId = envIds[key];\n\n\t\t\tif (existingId && olds.variables[key] !== value) {\n\t\t\t\tawait updateEnvVar(client, news.projectId, existingId, value);\n\t\t\t} else if (!existingId) {\n\t\t\t\tconst result = await createEnvVar(client, news.projectId, key, value);\n\n\t\t\t\tenvIds[key] = result.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\touts: {\n\t\t\t\t...news,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(news.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: VercelVariableOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tconst actual = await fetchEnvVars(client, props.projectId);\n\n\t\tconst actualVariables: Record<string, string> = {};\n\t\tconst actualEnvIds: Record<string, string> = {};\n\n\t\tfor (const [key] of Object.entries(props.variables)) {\n\t\t\tconst match = actual.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tactualVariables[key] = match.value;\n\t\t\t\tactualEnvIds[key] = match.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tvariables: actualVariables,\n\t\t\t\tenvIds: actualEnvIds,\n\t\t\t\tcontentHash: await hashVariables(actualVariables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync delete(_id: string, props: VercelVariableOutputs): Promise<void> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tfor (const [key, envId] of Object.entries(props.envIds)) {\n\t\t\ttry {\n\t\t\t\tawait deleteEnvVar(client, props.projectId, envId);\n\t\t\t} catch {\n\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst oldKeys = Object.keys(olds.variables).sort().join(\",\");\n\t\tconst newKeys = Object.keys(news.variables).sort().join(\",\");\n\n\t\tconst valuesChanged = Object.entries(news.variables).some(\n\t\t\t([key, value]) => olds.variables[key] !== value,\n\t\t);\n\n\t\treturn {\n\t\t\tchanges: oldKeys !== newKeys || valuesChanged,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass VercelVariableResource extends pulumi.dynamic.Resource {\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken?: pulumi.Input<string>;\n\t\t\ttokenEnvVar?: pulumi.Input<string>;\n\t\t\tteamId: pulumi.Input<string>;\n\t\t\tprojectId: pulumi.Input<string>;\n\t\t\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\t// envIds/contentHash are state-only bookkeeping (read back by update());\n\t\t// they are deliberately NOT declared via `<name>: undefined` input\n\t\t// placeholders — undefined placeholders next to an Output-valued map input\n\t\t// deterministically failed engine serialization with \"Unexpected struct\n\t\t// type\" on this resource's create AND update (three from-zero runs,\n\t\t// 2026-07-06), the same class the project-token secret-placeholder\n\t\t// incident documented. Nothing consumes them as Outputs.\n\t\tsuper(\n\t\t\tnew VercelVariableResourceProvider(),\n\t\t\tname,\n\t\t\targs,\n\t\t\t// The API token flows into dynamic-provider state with the outputs — mark it secret there.\n\t\t\t{ ...opts, additionalSecretOutputs: [\"token\"] },\n\t\t);\n\t}\n}\n\n/** Options type for VercelVariable — replaces Pulumi's native `provider` field. */\ntype VercelVariableOptions = Omit<\n\tpulumi.ComponentResourceOptions,\n\t\"provider\"\n> & {\n\t/** Vercel authentication context. */\n\tprovider: VercelProvider;\n\n\t/**\n\t * VercelProject resource to source the project ID from.\n\t * When provided, `args.projectId` is optional and ignored if both are given.\n\t */\n\tproject?: VercelProject;\n};\n\n/** Args for VercelVariable. */\nexport interface VercelVariableArgs {\n\t/**\n\t * Vercel project ID.\n\t * Required when `opts.project` is not provided.\n\t */\n\tprojectId?: pulumi.Input<string>;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n}\n\n/**\n * Manages Vercel project environment variables as a batch with drift detection.\n *\n * @example\n * ```typescript\n * new VercelVariable(\"nexus-vars\", {\n *   projectId: vercelProject.id,\n *   variables: {\n *     NEXT_PUBLIC_API_URL: meshUrl,\n *   },\n * }, { provider });\n * ```\n */\nexport class VercelVariable extends pulumi.ComponentResource {\n\tconstructor(\n\t\tname: string,\n\t\targs: VercelVariableArgs,\n\t\topts: VercelVariableOptions,\n\t) {\n\t\tconst { provider, project, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:vercel:Variable\", name, {}, pulumiOpts);\n\n\t\tconst projectId = project\n\t\t\t? project.id\n\t\t\t: (args.projectId as pulumi.Input<string>);\n\n\t\tif (!projectId) {\n\t\t\tthrow new Error(\n\t\t\t\t\"VercelVariable: either `args.projectId` or `opts.project` must be provided\",\n\t\t\t);\n\t\t}\n\n\t\tnew VercelVariableResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\ttokenEnvVar: provider.tokenEnvVar,\n\t\t\t\tteamId: provider.teamId,\n\t\t\t\tprojectId,\n\t\t\t\tvariables: args.variables,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.registerOutputs({});\n\t}\n}\n"],"mappings":";;;;;;;;;;;;AAqCA,eAAe,cACd,WACkB;CAElB,MAAM,QAAO,MADQ,OAAO,gBACR,WAAW,QAAQ;CAEvC,MAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OACpD,EAAE,cAAc,CAAC,CAClB;CAEA,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ;EAClC,KAAK,OAAO,GAAG;EACf,KAAK,OAAO,KAAK;CAClB;CAEA,OAAO,KAAK,OAAO,KAAK;AACzB;;;;;AAeA,eAAe,aACd,QACA,WAC0B;CAC1B,MAAM,OAAO,MAAM,OAAO,IACzB,gBAAgB,UAAU,KAC3B;CAEA,MAAM,YAA4B,CAAC;CAEnC,KAAK,MAAM,OAAO,KAAK,MAAM;EAC5B,MAAM,eAAe,MAAM,OAAO,OACjC,gBAAgB,UAAU,OAAO,IAAI,GAAG,cACzC;EAEA,IAAI,cACH,UAAU,KAAK,YAAY;CAE7B;CAEA,OAAO;AACR;;;;;AAMA,eAAe,aACd,QACA,WACA,KACA,OACwB;CACxB,IAAI;EACH,OAAO,MAAM,OAAO,KAAmB,iBAAiB,UAAU,OAAO;GACxE;GACA;GACA,MAAM;GACN,QAAQ;IAAC;IAAc;IAAW;GAAa;EAChD,CAAC;CACF,SAAS,OAAO;EAGf,IAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,cAAc,GAAG;GACrE,eAAO,IAAI,KACV,mBAAmB,IAAI,sCACxB;GAGA,MAAM,SAAQ,MADS,aAAa,QAAQ,SAAS,GAC9B,MAAM,MAAM,EAAE,QAAQ,GAAG;GAEhD,IAAI,OAAO;IACV,MAAM,aAAa,QAAQ,WAAW,MAAM,IAAI,KAAK;IAErD,OAAO;KAAE,GAAG;KAAO;IAAM;GAC1B;EACD;EAEA,MAAM;CACP;AACD;;;;AAKA,eAAe,aACd,QACA,WACA,OACA,OACgB;CAChB,MAAM,OAAO,MAAM,gBAAgB,UAAU,OAAO,SAAS,EAAE,MAAM,CAAC;AACvE;;;;;AAMA,eAAe,aACd,QACA,WACA,OACgB;CAChB,IAAI;EACH,MAAM,OAAO,OAAO,gBAAgB,UAAU,OAAO,OAAO;CAC7D,SAAS,OAAO;EACf,IAAI,EAAE,iBAAiBA,sDACtB,MAAM;CAER;AACD;;;;;;AAOA,IAAa,iCAAb,MAEA;CACC,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAIC,mCAClBC,qDAAkB,OAAO,OAAO,OAAO,WAAW,GAClD,OAAO,MACR;EAEA,MAAM,SAAiC,CAAC;EAExC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,SAAS,GAGzD,OAAO,QAAO,MAFO,aAAa,QAAQ,OAAO,WAAW,KAAK,KAAK,GAEjD;EAGtB,OAAO;GACN,IAAI,GAAG,OAAO,UAAU;GACxB,MAAM;IACL,GAAG;IACH;IACA,aAAa,MAAM,cAAc,OAAO,SAAS;GAClD;EACD;CACD;CAEA,MAAM,OACL,KACA,MACA,MACuC;EACvC,MAAM,SAAS,IAAID,mCAClBC,qDAAkB,KAAK,OAAO,KAAK,WAAW,GAC9C,KAAK,MACN;EAEA,MAAM,SAAS,EAAE,GAAG,KAAK,OAAO;EAEhC,MAAM,cAAc,OAAO,KAAK,KAAK,SAAS,EAAE,QAC9C,QAAQ,EAAE,OAAO,KAAK,UACxB;EAEA,KAAK,MAAM,OAAO,aAAa;GAC9B,MAAM,QAAQ,OAAO;GAErB,IAAI,OAAO;IACV,IAAI;KACH,MAAM,aAAa,QAAQ,KAAK,WAAW,KAAK;IACjD,QAAQ;KACP,eAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;IACD;IAEA,OAAO,OAAO;GACf;EACD;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,SAAS,GAAG;GAC1D,MAAM,aAAa,OAAO;GAE1B,IAAI,cAAc,KAAK,UAAU,SAAS,OACzC,MAAM,aAAa,QAAQ,KAAK,WAAW,YAAY,KAAK;QACtD,IAAI,CAAC,YAGX,OAAO,QAAO,MAFO,aAAa,QAAQ,KAAK,WAAW,KAAK,KAAK,GAE/C;EAEvB;EAEA,OAAO,EACN,MAAM;GACL,GAAG;GACH;GACA,aAAa,MAAM,cAAc,KAAK,SAAS;EAChD,EACD;CACD;CAEA,MAAM,KACL,IACA,OACqC;EAMrC,MAAM,SAAS,MAAM,aAAa,IALfD,mCAClBC,qDAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MAGgC,GAAG,MAAM,SAAS;EAEzD,MAAM,kBAA0C,CAAC;EACjD,MAAM,eAAuC,CAAC;EAE9C,KAAK,MAAM,CAAC,QAAQ,OAAO,QAAQ,MAAM,SAAS,GAAG;GACpD,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,QAAQ,GAAG;GAE9C,IAAI,OAAO;IACV,gBAAgB,OAAO,MAAM;IAC7B,aAAa,OAAO,MAAM;GAC3B;EACD;EAEA,OAAO;GACN;GACA,OAAO;IACN,GAAG;IACH,WAAW;IACX,QAAQ;IACR,aAAa,MAAM,cAAc,eAAe;GACjD;EACD;CACD;CAEA,MAAM,OAAO,KAAa,OAA6C;EACtE,MAAM,SAAS,IAAID,mCAClBC,qDAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MACP;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,MAAM,GACrD,IAAI;GACH,MAAM,aAAa,QAAQ,MAAM,WAAW,KAAK;EAClD,QAAQ;GACP,eAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;EACD;CAEF;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAC3D,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAE3D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,SAAS,EAAE,MACnD,CAAC,KAAK,WAAW,KAAK,UAAU,SAAS,KAC3C;EAEA,OAAO,EACN,SAAS,YAAY,WAAW,cACjC;CACD;AACD;;AAGA,IAAM,yBAAN,cAAqCC,eAAO,QAAQ,SAAS;CAC5D,YACC,MACA,MAOA,MACC;EAQD,MACC,IAAI,+BAA+B,GACnC,MACA,MAEA;GAAE,GAAG;GAAM,yBAAyB,CAAC,OAAO;EAAE,CAC/C;CACD;AACD;;;;;;;;;;;;;;AA0CA,IAAa,iBAAb,cAAoCA,eAAO,kBAAkB;CAC5D,YACC,MACA,MACA,MACC;EACD,MAAM,EAAE,UAAU,SAAS,GAAG,eAAe;EAE7C,MAAM,8BAA8B,MAAM,CAAC,GAAG,UAAU;EAExD,MAAM,YAAY,UACf,QAAQ,KACP,KAAK;EAET,IAAI,CAAC,WACJ,MAAM,IAAI,MACT,4EACD;EAGD,IAAI,uBACH,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,aAAa,SAAS;GACtB,QAAQ,SAAS;GACjB;GACA,WAAW,KAAK;EACjB,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,gBAAgB,CAAC,CAAC;CACxB;AACD"}

package/dist/vercel/variable.d.cts

@@ -69,8 +69,6 @@ interface VercelVariableArgs {
  * ```
  */
 declare class VercelVariable extends pulumi.ComponentResource {
-  /** SHA-256 hash of all key-value pairs. Use as a deploy trigger for drift-aware redeployment. */
-  readonly contentHash: pulumi.Output<string>;
   constructor(name: string, args: VercelVariableArgs, opts: VercelVariableOptions);
 }
 //#endregion

package/dist/vercel/variable.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"variable.d.cts","names":[],"sources":["../../src/vercel/variable.ts"],"mappings":";;;;;;;UAQU,oBAAA;;EAET,KAAA;EAF6B;EAK7B,WAAA;EASiB;EANjB,MAAA;EAHA;EAMA,SAAA;EAAA;EAGA,SAAA,EAAW,MAAM;AAAA;;UAIR,qBAAA,SAA8B,oBAAoB;EAAlD;EAET,MAAA,EAAQ,MAAA;;EAGR,WAAA;AAAA;;;;;AAAW;cAsIC,8BAAA,YACD,MAAA,CAAO,OAAA,CAAQ,gBAAA;EAEpB,MAAA,CACL,MAAA,EAAQ,oBAAA,GACN,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAwBpB,MAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAiDpB,IAAA,CACL,EAAA,UACA,KAAA,EAAO,qBAAA,GACL,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;EA+BpB,MAAA,CAAO,GAAA,UAAa,KAAA,EAAO,qBAAA,GAAwB,OAAA;EAiBnD,IAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;AAAA;;KAwCtB,qBAAA,GAAwB,IAAA,CAC5B,MAAA,CAAO,wBAAA;EAjJJ,qCAqJH,QAAA,EAAU,cAAA;EAjGC;;;;EAuGX,OAAA,GAAU,aAAA;AAAA;;UAIM,kBAAA;EA/LL;;;;EAoMX,SAAA,GAAY,MAAA,CAAO,KAAA;EApMO;EAuM1B,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,MAAA,SAAe,MAAA,CAAO,KAAA;AAAA;;;;;;;;;;;;;;cAgBlC,cAAA,SAAuB,MAAA,CAAO,iBAAA;EAvLhB;EAAA,SAyLV,WAAA,EAAa,MAAA,CAAO,MAAA;cAGnC,IAAA,UACA,IAAA,EAAM,kBAAA,EACN,IAAA,EAAM,qBAAA;AAAA"}
+{"version":3,"file":"variable.d.cts","names":[],"sources":["../../src/vercel/variable.ts"],"mappings":";;;;;;;UAQU,oBAAA;;EAET,KAAA;EAF6B;EAK7B,WAAA;EASiB;EANjB,MAAA;EAHA;EAMA,SAAA;EAAA;EAGA,SAAA,EAAW,MAAM;AAAA;;UAIR,qBAAA,SAA8B,oBAAoB;EAAlD;EAET,MAAA,EAAQ,MAAA;;EAGR,WAAA;AAAA;;;;;AAAW;cAsIC,8BAAA,YACD,MAAA,CAAO,OAAA,CAAQ,gBAAA;EAEpB,MAAA,CACL,MAAA,EAAQ,oBAAA,GACN,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAwBpB,MAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAiDpB,IAAA,CACL,EAAA,UACA,KAAA,EAAO,qBAAA,GACL,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;EA+BpB,MAAA,CAAO,GAAA,UAAa,KAAA,EAAO,qBAAA,GAAwB,OAAA;EAiBnD,IAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;AAAA;;KA6CtB,qBAAA,GAAwB,IAAA,CAC5B,MAAA,CAAO,wBAAA;EAtJJ,qCA0JH,QAAA,EAAU,cAAA;EAtGC;;;;EA4GX,OAAA,GAAU,aAAA;AAAA;;UAIM,kBAAA;EApML;;;;EAyMX,SAAA,GAAY,MAAA,CAAO,KAAA;EAzMO;EA4M1B,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,MAAA,SAAe,MAAA,CAAO,KAAA;AAAA;;;;;;;;;;;;;;cAgBlC,cAAA,SAAuB,MAAA,CAAO,iBAAA;cAEzC,IAAA,UACA,IAAA,EAAM,kBAAA,EACN,IAAA,EAAM,qBAAA;AAAA"}

package/dist/vercel/variable.d.mts

@@ -69,8 +69,6 @@ interface VercelVariableArgs {
  * ```
  */
 declare class VercelVariable extends pulumi.ComponentResource {
-  /** SHA-256 hash of all key-value pairs. Use as a deploy trigger for drift-aware redeployment. */
-  readonly contentHash: pulumi.Output<string>;
   constructor(name: string, args: VercelVariableArgs, opts: VercelVariableOptions);
 }
 //#endregion

package/dist/vercel/variable.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"variable.d.mts","names":[],"sources":["../../src/vercel/variable.ts"],"mappings":";;;;;;;UAQU,oBAAA;;EAET,KAAA;EAF6B;EAK7B,WAAA;EASiB;EANjB,MAAA;EAHA;EAMA,SAAA;EAAA;EAGA,SAAA,EAAW,MAAM;AAAA;;UAIR,qBAAA,SAA8B,oBAAoB;EAAlD;EAET,MAAA,EAAQ,MAAA;;EAGR,WAAA;AAAA;;;;;AAAW;cAsIC,8BAAA,YACD,MAAA,CAAO,OAAA,CAAQ,gBAAA;EAEpB,MAAA,CACL,MAAA,EAAQ,oBAAA,GACN,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAwBpB,MAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAiDpB,IAAA,CACL,EAAA,UACA,KAAA,EAAO,qBAAA,GACL,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;EA+BpB,MAAA,CAAO,GAAA,UAAa,KAAA,EAAO,qBAAA,GAAwB,OAAA;EAiBnD,IAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;AAAA;;KAwCtB,qBAAA,GAAwB,IAAA,CAC5B,MAAA,CAAO,wBAAA;EAjJJ,qCAqJH,QAAA,EAAU,cAAA;EAjGC;;;;EAuGX,OAAA,GAAU,aAAA;AAAA;;UAIM,kBAAA;EA/LL;;;;EAoMX,SAAA,GAAY,MAAA,CAAO,KAAA;EApMO;EAuM1B,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,MAAA,SAAe,MAAA,CAAO,KAAA;AAAA;;;;;;;;;;;;;;cAgBlC,cAAA,SAAuB,MAAA,CAAO,iBAAA;EAvLhB;EAAA,SAyLV,WAAA,EAAa,MAAA,CAAO,MAAA;cAGnC,IAAA,UACA,IAAA,EAAM,kBAAA,EACN,IAAA,EAAM,qBAAA;AAAA"}
+{"version":3,"file":"variable.d.mts","names":[],"sources":["../../src/vercel/variable.ts"],"mappings":";;;;;;;UAQU,oBAAA;;EAET,KAAA;EAF6B;EAK7B,WAAA;EASiB;EANjB,MAAA;EAHA;EAMA,SAAA;EAAA;EAGA,SAAA,EAAW,MAAM;AAAA;;UAIR,qBAAA,SAA8B,oBAAoB;EAAlD;EAET,MAAA,EAAQ,MAAA;;EAGR,WAAA;AAAA;;;;;AAAW;cAsIC,8BAAA,YACD,MAAA,CAAO,OAAA,CAAQ,gBAAA;EAEpB,MAAA,CACL,MAAA,EAAQ,oBAAA,GACN,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAwBpB,MAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,YAAA;EAiDpB,IAAA,CACL,EAAA,UACA,KAAA,EAAO,qBAAA,GACL,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;EA+BpB,MAAA,CAAO,GAAA,UAAa,KAAA,EAAO,qBAAA,GAAwB,OAAA;EAiBnD,IAAA,CACL,GAAA,UACA,IAAA,EAAM,qBAAA,EACN,IAAA,EAAM,oBAAA,GACJ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,UAAA;AAAA;;KA6CtB,qBAAA,GAAwB,IAAA,CAC5B,MAAA,CAAO,wBAAA;EAtJJ,qCA0JH,QAAA,EAAU,cAAA;EAtGC;;;;EA4GX,OAAA,GAAU,aAAA;AAAA;;UAIM,kBAAA;EApML;;;;EAyMX,SAAA,GAAY,MAAA,CAAO,KAAA;EAzMO;EA4M1B,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,MAAA,SAAe,MAAA,CAAO,KAAA;AAAA;;;;;;;;;;;;;;cAgBlC,cAAA,SAAuB,MAAA,CAAO,iBAAA;cAEzC,IAAA,UACA,IAAA,EAAM,kBAAA,EACN,IAAA,EAAM,qBAAA;AAAA"}

package/dist/vercel/variable.mjs

@@ -1,6 +1,6 @@
 import { t as __name } from "../chunk-OPjESj5l.mjs";
-import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { ApiNotFoundError } from "../errors/api-not-found-error.mjs";
+import { resolveCredential } from "../dynamic/resolve-credential.mjs";
 import { VercelClient } from "./client.mjs";
 import * as pulumi from "@pulumi/pulumi";
 
@@ -162,11 +162,7 @@ var VercelVariableResourceProvider = class {
 /** Internal dynamic resource — not part of the public API. */
 var VercelVariableResource = class extends pulumi.dynamic.Resource {
 	constructor(name, args, opts) {
-		super(new VercelVariableResourceProvider(), name, {
-			...args,
-			envIds: void 0,
-			contentHash: void 0
-		}, {
+		super(new VercelVariableResourceProvider(), name, args, {
 			...opts,
 			additionalSecretOutputs: ["token"]
 		});
@@ -191,15 +187,14 @@ var VercelVariable = class extends pulumi.ComponentResource {
 		super("infracraft:vercel:Variable", name, {}, pulumiOpts);
 		const projectId = project ? project.id : args.projectId;
 		if (!projectId) throw new Error("VercelVariable: either `args.projectId` or `opts.project` must be provided");
-		const resource = new VercelVariableResource(`${name}-resource`, {
+		new VercelVariableResource(`${name}-resource`, {
 			token: provider.token,
 			tokenEnvVar: provider.tokenEnvVar,
 			teamId: provider.teamId,
 			projectId,
 			variables: args.variables
 		}, { parent: this });
-		this.contentHash = resource.contentHash;
-		this.registerOutputs({ contentHash: this.contentHash });
+		this.registerOutputs({});
 	}
 };
 

package/dist/vercel/variable.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"variable.mjs","names":[],"sources":["../../src/vercel/variable.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { resolveCredential } from \"../dynamic/resolve-credential\";\nimport { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { VercelClient } from \"./client\";\nimport type { VercelProject } from \"./project\";\nimport type { VercelProvider } from \"./provider\";\n\n/** Resolved inputs for the Vercel variable dynamic provider. */\ninterface VercelVariableInputs {\n\t/** Vercel API bearer token. Absent when `tokenEnvVar` is used instead. */\n\ttoken?: string;\n\n\t/** Env var name resolved to the token when `token` is absent (see `VercelProviderArgs.tokenEnvVar`). */\n\ttokenEnvVar?: string;\n\n\t/** Vercel team/org ID. */\n\tteamId: string;\n\n\t/** Vercel project ID. */\n\tprojectId: string;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: Record<string, string>;\n}\n\n/** Persisted state for Vercel variables. */\ninterface VercelVariableOutputs extends VercelVariableInputs {\n\t/** Map of env var keys to their Vercel-assigned IDs (for updates and deletes). */\n\tenvIds: Record<string, string>;\n\n\t/** SHA-256 hash of all key-value pairs. Changes when any value is modified (including drift fixes). */\n\tcontentHash: string;\n}\n\n/**\n * Computes a deterministic content hash of a variables map.\n */\nasync function hashVariables(\n\tvariables: Record<string, string>,\n): Promise<string> {\n\tconst crypto = await import(\"node:crypto\");\n\tconst hash = crypto.createHash(\"sha256\");\n\n\tconst sorted = Object.entries(variables).sort(([a], [b]) =>\n\t\ta.localeCompare(b),\n\t);\n\n\tfor (const [key, value] of sorted) {\n\t\thash.update(key);\n\t\thash.update(value);\n\t}\n\n\treturn hash.digest(\"hex\");\n}\n\n/** Vercel API response for a single env var. */\ninterface VercelEnvVar {\n\tid: string;\n\tkey: string;\n\tvalue: string;\n\ttype: string;\n\ttarget: string[];\n}\n\n/**\n * Fetches all environment variables for a Vercel project with decrypted values.\n * A variable that vanishes between the list and its decrypt read is skipped.\n */\nasync function fetchEnvVars(\n\tclient: VercelClient,\n\tprojectId: string,\n): Promise<VercelEnvVar[]> {\n\tconst list = await client.get<{ envs: VercelEnvVar[] }>(\n\t\t`/v9/projects/${projectId}/env`,\n\t);\n\n\tconst decrypted: VercelEnvVar[] = [];\n\n\tfor (const env of list.envs) {\n\t\tconst decryptedVar = await client.tryGet<VercelEnvVar>(\n\t\t\t`/v9/projects/${projectId}/env/${env.id}?decrypt=true`,\n\t\t);\n\n\t\tif (decryptedVar) {\n\t\t\tdecrypted.push(decryptedVar);\n\t\t}\n\t}\n\n\treturn decrypted;\n}\n\n/**\n * Creates a single Vercel env var targeting all environments.\n * An already-existing key (ENV_CONFLICT) is updated in place instead.\n */\nasync function createEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tkey: string,\n\tvalue: string,\n): Promise<VercelEnvVar> {\n\ttry {\n\t\treturn await client.post<VercelEnvVar>(`/v10/projects/${projectId}/env`, {\n\t\t\tkey,\n\t\t\tvalue,\n\t\t\ttype: \"encrypted\",\n\t\t\ttarget: [\"production\", \"preview\", \"development\"],\n\t\t});\n\t} catch (error) {\n\t\t// ENV_CONFLICT is Vercel's error code for \"key already exists\"; the client\n\t\t// surfaces the API error body in the message, so it is matched there.\n\t\tif (error instanceof Error && error.message.includes(\"ENV_CONFLICT\")) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Vercel env var \"${key}\" already exists, will update instead`,\n\t\t\t);\n\n\t\t\tconst existing = await fetchEnvVars(client, projectId);\n\t\t\tconst match = existing.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tawait updateEnvVar(client, projectId, match.id, value);\n\n\t\t\t\treturn { ...match, value };\n\t\t\t}\n\t\t}\n\n\t\tthrow error;\n\t}\n}\n\n/**\n * Updates a single Vercel env var value.\n */\nasync function updateEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n\tvalue: string,\n): Promise<void> {\n\tawait client.patch(`/v9/projects/${projectId}/env/${envId}`, { value });\n}\n\n/**\n * Deletes a single Vercel env var. Tolerates 404 (already gone) —\n * deletion is idempotent.\n */\nasync function deleteEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n): Promise<void> {\n\ttry {\n\t\tawait client.delete(`/v9/projects/${projectId}/env/${envId}`);\n\t} catch (error) {\n\t\tif (!(error instanceof ApiNotFoundError)) {\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\n/**\n * Dynamic provider implementing CRUD for Vercel project environment variables.\n *\n * @internal Exported only for unit testing; not part of the public API surface.\n */\nexport class VercelVariableResourceProvider\n\timplements pulumi.dynamic.ResourceProvider\n{\n\tasync create(\n\t\tinputs: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(inputs.token, inputs.tokenEnvVar),\n\t\t\tinputs.teamId,\n\t\t);\n\n\t\tconst envIds: Record<string, string> = {};\n\n\t\tfor (const [key, value] of Object.entries(inputs.variables)) {\n\t\t\tconst result = await createEnvVar(client, inputs.projectId, key, value);\n\n\t\t\tenvIds[key] = result.id;\n\t\t}\n\n\t\treturn {\n\t\t\tid: `${inputs.projectId}:variables`,\n\t\t\touts: {\n\t\t\t\t...inputs,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(inputs.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync update(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(news.token, news.tokenEnvVar),\n\t\t\tnews.teamId,\n\t\t);\n\n\t\tconst envIds = { ...olds.envIds };\n\n\t\tconst removedKeys = Object.keys(olds.variables).filter(\n\t\t\t(key) => !(key in news.variables),\n\t\t);\n\n\t\tfor (const key of removedKeys) {\n\t\t\tconst envId = envIds[key];\n\n\t\t\tif (envId) {\n\t\t\t\ttry {\n\t\t\t\t\tawait deleteEnvVar(client, news.projectId, envId);\n\t\t\t\t} catch {\n\t\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tdelete envIds[key];\n\t\t\t}\n\t\t}\n\n\t\tfor (const [key, value] of Object.entries(news.variables)) {\n\t\t\tconst existingId = envIds[key];\n\n\t\t\tif (existingId && olds.variables[key] !== value) {\n\t\t\t\tawait updateEnvVar(client, news.projectId, existingId, value);\n\t\t\t} else if (!existingId) {\n\t\t\t\tconst result = await createEnvVar(client, news.projectId, key, value);\n\n\t\t\t\tenvIds[key] = result.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\touts: {\n\t\t\t\t...news,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(news.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: VercelVariableOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tconst actual = await fetchEnvVars(client, props.projectId);\n\n\t\tconst actualVariables: Record<string, string> = {};\n\t\tconst actualEnvIds: Record<string, string> = {};\n\n\t\tfor (const [key] of Object.entries(props.variables)) {\n\t\t\tconst match = actual.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tactualVariables[key] = match.value;\n\t\t\t\tactualEnvIds[key] = match.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tvariables: actualVariables,\n\t\t\t\tenvIds: actualEnvIds,\n\t\t\t\tcontentHash: await hashVariables(actualVariables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync delete(_id: string, props: VercelVariableOutputs): Promise<void> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tfor (const [key, envId] of Object.entries(props.envIds)) {\n\t\t\ttry {\n\t\t\t\tawait deleteEnvVar(client, props.projectId, envId);\n\t\t\t} catch {\n\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst oldKeys = Object.keys(olds.variables).sort().join(\",\");\n\t\tconst newKeys = Object.keys(news.variables).sort().join(\",\");\n\n\t\tconst valuesChanged = Object.entries(news.variables).some(\n\t\t\t([key, value]) => olds.variables[key] !== value,\n\t\t);\n\n\t\treturn {\n\t\t\tchanges: oldKeys !== newKeys || valuesChanged,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass VercelVariableResource extends pulumi.dynamic.Resource {\n\tpublic declare readonly contentHash: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken?: pulumi.Input<string>;\n\t\t\ttokenEnvVar?: pulumi.Input<string>;\n\t\t\tteamId: pulumi.Input<string>;\n\t\t\tprojectId: pulumi.Input<string>;\n\t\t\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\tsuper(\n\t\t\tnew VercelVariableResourceProvider(),\n\t\t\tname,\n\t\t\t{ ...args, envIds: undefined, contentHash: undefined },\n\t\t\t// The API token flows into dynamic-provider state with the outputs — mark it secret there.\n\t\t\t{ ...opts, additionalSecretOutputs: [\"token\"] },\n\t\t);\n\t}\n}\n\n/** Options type for VercelVariable — replaces Pulumi's native `provider` field. */\ntype VercelVariableOptions = Omit<\n\tpulumi.ComponentResourceOptions,\n\t\"provider\"\n> & {\n\t/** Vercel authentication context. */\n\tprovider: VercelProvider;\n\n\t/**\n\t * VercelProject resource to source the project ID from.\n\t * When provided, `args.projectId` is optional and ignored if both are given.\n\t */\n\tproject?: VercelProject;\n};\n\n/** Args for VercelVariable. */\nexport interface VercelVariableArgs {\n\t/**\n\t * Vercel project ID.\n\t * Required when `opts.project` is not provided.\n\t */\n\tprojectId?: pulumi.Input<string>;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n}\n\n/**\n * Manages Vercel project environment variables as a batch with drift detection.\n *\n * @example\n * ```typescript\n * new VercelVariable(\"nexus-vars\", {\n *   projectId: vercelProject.id,\n *   variables: {\n *     NEXT_PUBLIC_API_URL: meshUrl,\n *   },\n * }, { provider });\n * ```\n */\nexport class VercelVariable extends pulumi.ComponentResource {\n\t/** SHA-256 hash of all key-value pairs. Use as a deploy trigger for drift-aware redeployment. */\n\tpublic readonly contentHash: pulumi.Output<string>;\n\n\tconstructor(\n\t\tname: string,\n\t\targs: VercelVariableArgs,\n\t\topts: VercelVariableOptions,\n\t) {\n\t\tconst { provider, project, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:vercel:Variable\", name, {}, pulumiOpts);\n\n\t\tconst projectId = project\n\t\t\t? project.id\n\t\t\t: (args.projectId as pulumi.Input<string>);\n\n\t\tif (!projectId) {\n\t\t\tthrow new Error(\n\t\t\t\t\"VercelVariable: either `args.projectId` or `opts.project` must be provided\",\n\t\t\t);\n\t\t}\n\n\t\tconst resource = new VercelVariableResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\ttokenEnvVar: provider.tokenEnvVar,\n\t\t\t\tteamId: provider.teamId,\n\t\t\t\tprojectId,\n\t\t\t\tvariables: args.variables,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.contentHash = resource.contentHash;\n\n\t\tthis.registerOutputs({ contentHash: this.contentHash });\n\t}\n}\n"],"mappings":";;;;;;;;;;AAqCA,eAAe,cACd,WACkB;CAElB,MAAM,QAAO,MADQ,OAAO,gBACR,WAAW,QAAQ;CAEvC,MAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OACpD,EAAE,cAAc,CAAC,CAClB;CAEA,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ;EAClC,KAAK,OAAO,GAAG;EACf,KAAK,OAAO,KAAK;CAClB;CAEA,OAAO,KAAK,OAAO,KAAK;AACzB;;;;;AAeA,eAAe,aACd,QACA,WAC0B;CAC1B,MAAM,OAAO,MAAM,OAAO,IACzB,gBAAgB,UAAU,KAC3B;CAEA,MAAM,YAA4B,CAAC;CAEnC,KAAK,MAAM,OAAO,KAAK,MAAM;EAC5B,MAAM,eAAe,MAAM,OAAO,OACjC,gBAAgB,UAAU,OAAO,IAAI,GAAG,cACzC;EAEA,IAAI,cACH,UAAU,KAAK,YAAY;CAE7B;CAEA,OAAO;AACR;;;;;AAMA,eAAe,aACd,QACA,WACA,KACA,OACwB;CACxB,IAAI;EACH,OAAO,MAAM,OAAO,KAAmB,iBAAiB,UAAU,OAAO;GACxE;GACA;GACA,MAAM;GACN,QAAQ;IAAC;IAAc;IAAW;GAAa;EAChD,CAAC;CACF,SAAS,OAAO;EAGf,IAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,cAAc,GAAG;GACrE,OAAO,IAAI,KACV,mBAAmB,IAAI,sCACxB;GAGA,MAAM,SAAQ,MADS,aAAa,QAAQ,SAAS,GAC9B,MAAM,MAAM,EAAE,QAAQ,GAAG;GAEhD,IAAI,OAAO;IACV,MAAM,aAAa,QAAQ,WAAW,MAAM,IAAI,KAAK;IAErD,OAAO;KAAE,GAAG;KAAO;IAAM;GAC1B;EACD;EAEA,MAAM;CACP;AACD;;;;AAKA,eAAe,aACd,QACA,WACA,OACA,OACgB;CAChB,MAAM,OAAO,MAAM,gBAAgB,UAAU,OAAO,SAAS,EAAE,MAAM,CAAC;AACvE;;;;;AAMA,eAAe,aACd,QACA,WACA,OACgB;CAChB,IAAI;EACH,MAAM,OAAO,OAAO,gBAAgB,UAAU,OAAO,OAAO;CAC7D,SAAS,OAAO;EACf,IAAI,EAAE,iBAAiB,mBACtB,MAAM;CAER;AACD;;;;;;AAOA,IAAa,iCAAb,MAEA;CACC,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAI,aAClB,kBAAkB,OAAO,OAAO,OAAO,WAAW,GAClD,OAAO,MACR;EAEA,MAAM,SAAiC,CAAC;EAExC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,SAAS,GAGzD,OAAO,QAAO,MAFO,aAAa,QAAQ,OAAO,WAAW,KAAK,KAAK,GAEjD;EAGtB,OAAO;GACN,IAAI,GAAG,OAAO,UAAU;GACxB,MAAM;IACL,GAAG;IACH;IACA,aAAa,MAAM,cAAc,OAAO,SAAS;GAClD;EACD;CACD;CAEA,MAAM,OACL,KACA,MACA,MACuC;EACvC,MAAM,SAAS,IAAI,aAClB,kBAAkB,KAAK,OAAO,KAAK,WAAW,GAC9C,KAAK,MACN;EAEA,MAAM,SAAS,EAAE,GAAG,KAAK,OAAO;EAEhC,MAAM,cAAc,OAAO,KAAK,KAAK,SAAS,EAAE,QAC9C,QAAQ,EAAE,OAAO,KAAK,UACxB;EAEA,KAAK,MAAM,OAAO,aAAa;GAC9B,MAAM,QAAQ,OAAO;GAErB,IAAI,OAAO;IACV,IAAI;KACH,MAAM,aAAa,QAAQ,KAAK,WAAW,KAAK;IACjD,QAAQ;KACP,OAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;IACD;IAEA,OAAO,OAAO;GACf;EACD;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,SAAS,GAAG;GAC1D,MAAM,aAAa,OAAO;GAE1B,IAAI,cAAc,KAAK,UAAU,SAAS,OACzC,MAAM,aAAa,QAAQ,KAAK,WAAW,YAAY,KAAK;QACtD,IAAI,CAAC,YAGX,OAAO,QAAO,MAFO,aAAa,QAAQ,KAAK,WAAW,KAAK,KAAK,GAE/C;EAEvB;EAEA,OAAO,EACN,MAAM;GACL,GAAG;GACH;GACA,aAAa,MAAM,cAAc,KAAK,SAAS;EAChD,EACD;CACD;CAEA,MAAM,KACL,IACA,OACqC;EAMrC,MAAM,SAAS,MAAM,aAAa,IALf,aAClB,kBAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MAGgC,GAAG,MAAM,SAAS;EAEzD,MAAM,kBAA0C,CAAC;EACjD,MAAM,eAAuC,CAAC;EAE9C,KAAK,MAAM,CAAC,QAAQ,OAAO,QAAQ,MAAM,SAAS,GAAG;GACpD,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,QAAQ,GAAG;GAE9C,IAAI,OAAO;IACV,gBAAgB,OAAO,MAAM;IAC7B,aAAa,OAAO,MAAM;GAC3B;EACD;EAEA,OAAO;GACN;GACA,OAAO;IACN,GAAG;IACH,WAAW;IACX,QAAQ;IACR,aAAa,MAAM,cAAc,eAAe;GACjD;EACD;CACD;CAEA,MAAM,OAAO,KAAa,OAA6C;EACtE,MAAM,SAAS,IAAI,aAClB,kBAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MACP;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,MAAM,GACrD,IAAI;GACH,MAAM,aAAa,QAAQ,MAAM,WAAW,KAAK;EAClD,QAAQ;GACP,OAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;EACD;CAEF;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAC3D,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAE3D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,SAAS,EAAE,MACnD,CAAC,KAAK,WAAW,KAAK,UAAU,SAAS,KAC3C;EAEA,OAAO,EACN,SAAS,YAAY,WAAW,cACjC;CACD;AACD;;AAGA,IAAM,yBAAN,cAAqC,OAAO,QAAQ,SAAS;CAG5D,YACC,MACA,MAOA,MACC;EACD,MACC,IAAI,+BAA+B,GACnC,MACA;GAAE,GAAG;GAAM,QAAQ;GAAW,aAAa;EAAU,GAErD;GAAE,GAAG;GAAM,yBAAyB,CAAC,OAAO;EAAE,CAC/C;CACD;AACD;;;;;;;;;;;;;;AA0CA,IAAa,iBAAb,cAAoC,OAAO,kBAAkB;CAI5D,YACC,MACA,MACA,MACC;EACD,MAAM,EAAE,UAAU,SAAS,GAAG,eAAe;EAE7C,MAAM,8BAA8B,MAAM,CAAC,GAAG,UAAU;EAExD,MAAM,YAAY,UACf,QAAQ,KACP,KAAK;EAET,IAAI,CAAC,WACJ,MAAM,IAAI,MACT,4EACD;EAGD,MAAM,WAAW,IAAI,uBACpB,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,aAAa,SAAS;GACtB,QAAQ,SAAS;GACjB;GACA,WAAW,KAAK;EACjB,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,cAAc,SAAS;EAE5B,KAAK,gBAAgB,EAAE,aAAa,KAAK,YAAY,CAAC;CACvD;AACD"}
+{"version":3,"file":"variable.mjs","names":[],"sources":["../../src/vercel/variable.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { resolveCredential } from \"../dynamic/resolve-credential\";\nimport { ApiNotFoundError } from \"../errors/api-not-found-error\";\nimport { VercelClient } from \"./client\";\nimport type { VercelProject } from \"./project\";\nimport type { VercelProvider } from \"./provider\";\n\n/** Resolved inputs for the Vercel variable dynamic provider. */\ninterface VercelVariableInputs {\n\t/** Vercel API bearer token. Absent when `tokenEnvVar` is used instead. */\n\ttoken?: string;\n\n\t/** Env var name resolved to the token when `token` is absent (see `VercelProviderArgs.tokenEnvVar`). */\n\ttokenEnvVar?: string;\n\n\t/** Vercel team/org ID. */\n\tteamId: string;\n\n\t/** Vercel project ID. */\n\tprojectId: string;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: Record<string, string>;\n}\n\n/** Persisted state for Vercel variables. */\ninterface VercelVariableOutputs extends VercelVariableInputs {\n\t/** Map of env var keys to their Vercel-assigned IDs (for updates and deletes). */\n\tenvIds: Record<string, string>;\n\n\t/** SHA-256 hash of all key-value pairs. Changes when any value is modified (including drift fixes). */\n\tcontentHash: string;\n}\n\n/**\n * Computes a deterministic content hash of a variables map.\n */\nasync function hashVariables(\n\tvariables: Record<string, string>,\n): Promise<string> {\n\tconst crypto = await import(\"node:crypto\");\n\tconst hash = crypto.createHash(\"sha256\");\n\n\tconst sorted = Object.entries(variables).sort(([a], [b]) =>\n\t\ta.localeCompare(b),\n\t);\n\n\tfor (const [key, value] of sorted) {\n\t\thash.update(key);\n\t\thash.update(value);\n\t}\n\n\treturn hash.digest(\"hex\");\n}\n\n/** Vercel API response for a single env var. */\ninterface VercelEnvVar {\n\tid: string;\n\tkey: string;\n\tvalue: string;\n\ttype: string;\n\ttarget: string[];\n}\n\n/**\n * Fetches all environment variables for a Vercel project with decrypted values.\n * A variable that vanishes between the list and its decrypt read is skipped.\n */\nasync function fetchEnvVars(\n\tclient: VercelClient,\n\tprojectId: string,\n): Promise<VercelEnvVar[]> {\n\tconst list = await client.get<{ envs: VercelEnvVar[] }>(\n\t\t`/v9/projects/${projectId}/env`,\n\t);\n\n\tconst decrypted: VercelEnvVar[] = [];\n\n\tfor (const env of list.envs) {\n\t\tconst decryptedVar = await client.tryGet<VercelEnvVar>(\n\t\t\t`/v9/projects/${projectId}/env/${env.id}?decrypt=true`,\n\t\t);\n\n\t\tif (decryptedVar) {\n\t\t\tdecrypted.push(decryptedVar);\n\t\t}\n\t}\n\n\treturn decrypted;\n}\n\n/**\n * Creates a single Vercel env var targeting all environments.\n * An already-existing key (ENV_CONFLICT) is updated in place instead.\n */\nasync function createEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tkey: string,\n\tvalue: string,\n): Promise<VercelEnvVar> {\n\ttry {\n\t\treturn await client.post<VercelEnvVar>(`/v10/projects/${projectId}/env`, {\n\t\t\tkey,\n\t\t\tvalue,\n\t\t\ttype: \"encrypted\",\n\t\t\ttarget: [\"production\", \"preview\", \"development\"],\n\t\t});\n\t} catch (error) {\n\t\t// ENV_CONFLICT is Vercel's error code for \"key already exists\"; the client\n\t\t// surfaces the API error body in the message, so it is matched there.\n\t\tif (error instanceof Error && error.message.includes(\"ENV_CONFLICT\")) {\n\t\t\tpulumi.log.info(\n\t\t\t\t`Vercel env var \"${key}\" already exists, will update instead`,\n\t\t\t);\n\n\t\t\tconst existing = await fetchEnvVars(client, projectId);\n\t\t\tconst match = existing.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tawait updateEnvVar(client, projectId, match.id, value);\n\n\t\t\t\treturn { ...match, value };\n\t\t\t}\n\t\t}\n\n\t\tthrow error;\n\t}\n}\n\n/**\n * Updates a single Vercel env var value.\n */\nasync function updateEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n\tvalue: string,\n): Promise<void> {\n\tawait client.patch(`/v9/projects/${projectId}/env/${envId}`, { value });\n}\n\n/**\n * Deletes a single Vercel env var. Tolerates 404 (already gone) —\n * deletion is idempotent.\n */\nasync function deleteEnvVar(\n\tclient: VercelClient,\n\tprojectId: string,\n\tenvId: string,\n): Promise<void> {\n\ttry {\n\t\tawait client.delete(`/v9/projects/${projectId}/env/${envId}`);\n\t} catch (error) {\n\t\tif (!(error instanceof ApiNotFoundError)) {\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\n/**\n * Dynamic provider implementing CRUD for Vercel project environment variables.\n *\n * @internal Exported only for unit testing; not part of the public API surface.\n */\nexport class VercelVariableResourceProvider\n\timplements pulumi.dynamic.ResourceProvider\n{\n\tasync create(\n\t\tinputs: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.CreateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(inputs.token, inputs.tokenEnvVar),\n\t\t\tinputs.teamId,\n\t\t);\n\n\t\tconst envIds: Record<string, string> = {};\n\n\t\tfor (const [key, value] of Object.entries(inputs.variables)) {\n\t\t\tconst result = await createEnvVar(client, inputs.projectId, key, value);\n\n\t\t\tenvIds[key] = result.id;\n\t\t}\n\n\t\treturn {\n\t\t\tid: `${inputs.projectId}:variables`,\n\t\t\touts: {\n\t\t\t\t...inputs,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(inputs.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync update(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.UpdateResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(news.token, news.tokenEnvVar),\n\t\t\tnews.teamId,\n\t\t);\n\n\t\tconst envIds = { ...olds.envIds };\n\n\t\tconst removedKeys = Object.keys(olds.variables).filter(\n\t\t\t(key) => !(key in news.variables),\n\t\t);\n\n\t\tfor (const key of removedKeys) {\n\t\t\tconst envId = envIds[key];\n\n\t\t\tif (envId) {\n\t\t\t\ttry {\n\t\t\t\t\tawait deleteEnvVar(client, news.projectId, envId);\n\t\t\t\t} catch {\n\t\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tdelete envIds[key];\n\t\t\t}\n\t\t}\n\n\t\tfor (const [key, value] of Object.entries(news.variables)) {\n\t\t\tconst existingId = envIds[key];\n\n\t\t\tif (existingId && olds.variables[key] !== value) {\n\t\t\t\tawait updateEnvVar(client, news.projectId, existingId, value);\n\t\t\t} else if (!existingId) {\n\t\t\t\tconst result = await createEnvVar(client, news.projectId, key, value);\n\n\t\t\t\tenvIds[key] = result.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\touts: {\n\t\t\t\t...news,\n\t\t\t\tenvIds,\n\t\t\t\tcontentHash: await hashVariables(news.variables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync read(\n\t\tid: string,\n\t\tprops: VercelVariableOutputs,\n\t): Promise<pulumi.dynamic.ReadResult> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tconst actual = await fetchEnvVars(client, props.projectId);\n\n\t\tconst actualVariables: Record<string, string> = {};\n\t\tconst actualEnvIds: Record<string, string> = {};\n\n\t\tfor (const [key] of Object.entries(props.variables)) {\n\t\t\tconst match = actual.find((e) => e.key === key);\n\n\t\t\tif (match) {\n\t\t\t\tactualVariables[key] = match.value;\n\t\t\t\tactualEnvIds[key] = match.id;\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tid,\n\t\t\tprops: {\n\t\t\t\t...props,\n\t\t\t\tvariables: actualVariables,\n\t\t\t\tenvIds: actualEnvIds,\n\t\t\t\tcontentHash: await hashVariables(actualVariables),\n\t\t\t},\n\t\t};\n\t}\n\n\tasync delete(_id: string, props: VercelVariableOutputs): Promise<void> {\n\t\tconst client = new VercelClient(\n\t\t\tresolveCredential(props.token, props.tokenEnvVar),\n\t\t\tprops.teamId,\n\t\t);\n\n\t\tfor (const [key, envId] of Object.entries(props.envIds)) {\n\t\t\ttry {\n\t\t\t\tawait deleteEnvVar(client, props.projectId, envId);\n\t\t\t} catch {\n\t\t\t\tpulumi.log.warn(\n\t\t\t\t\t`Failed to delete Vercel env var \"${key}\" (may already be deleted)`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync diff(\n\t\t_id: string,\n\t\tolds: VercelVariableOutputs,\n\t\tnews: VercelVariableInputs,\n\t): Promise<pulumi.dynamic.DiffResult> {\n\t\tconst oldKeys = Object.keys(olds.variables).sort().join(\",\");\n\t\tconst newKeys = Object.keys(news.variables).sort().join(\",\");\n\n\t\tconst valuesChanged = Object.entries(news.variables).some(\n\t\t\t([key, value]) => olds.variables[key] !== value,\n\t\t);\n\n\t\treturn {\n\t\t\tchanges: oldKeys !== newKeys || valuesChanged,\n\t\t};\n\t}\n}\n\n/** Internal dynamic resource — not part of the public API. */\nclass VercelVariableResource extends pulumi.dynamic.Resource {\n\tconstructor(\n\t\tname: string,\n\t\targs: {\n\t\t\ttoken?: pulumi.Input<string>;\n\t\t\ttokenEnvVar?: pulumi.Input<string>;\n\t\t\tteamId: pulumi.Input<string>;\n\t\t\tprojectId: pulumi.Input<string>;\n\t\t\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n\t\t},\n\t\topts?: pulumi.CustomResourceOptions,\n\t) {\n\t\t// envIds/contentHash are state-only bookkeeping (read back by update());\n\t\t// they are deliberately NOT declared via `<name>: undefined` input\n\t\t// placeholders — undefined placeholders next to an Output-valued map input\n\t\t// deterministically failed engine serialization with \"Unexpected struct\n\t\t// type\" on this resource's create AND update (three from-zero runs,\n\t\t// 2026-07-06), the same class the project-token secret-placeholder\n\t\t// incident documented. Nothing consumes them as Outputs.\n\t\tsuper(\n\t\t\tnew VercelVariableResourceProvider(),\n\t\t\tname,\n\t\t\targs,\n\t\t\t// The API token flows into dynamic-provider state with the outputs — mark it secret there.\n\t\t\t{ ...opts, additionalSecretOutputs: [\"token\"] },\n\t\t);\n\t}\n}\n\n/** Options type for VercelVariable — replaces Pulumi's native `provider` field. */\ntype VercelVariableOptions = Omit<\n\tpulumi.ComponentResourceOptions,\n\t\"provider\"\n> & {\n\t/** Vercel authentication context. */\n\tprovider: VercelProvider;\n\n\t/**\n\t * VercelProject resource to source the project ID from.\n\t * When provided, `args.projectId` is optional and ignored if both are given.\n\t */\n\tproject?: VercelProject;\n};\n\n/** Args for VercelVariable. */\nexport interface VercelVariableArgs {\n\t/**\n\t * Vercel project ID.\n\t * Required when `opts.project` is not provided.\n\t */\n\tprojectId?: pulumi.Input<string>;\n\n\t/** Key-value map of environment variable names to their values. */\n\tvariables: pulumi.Input<Record<string, pulumi.Input<string>>>;\n}\n\n/**\n * Manages Vercel project environment variables as a batch with drift detection.\n *\n * @example\n * ```typescript\n * new VercelVariable(\"nexus-vars\", {\n *   projectId: vercelProject.id,\n *   variables: {\n *     NEXT_PUBLIC_API_URL: meshUrl,\n *   },\n * }, { provider });\n * ```\n */\nexport class VercelVariable extends pulumi.ComponentResource {\n\tconstructor(\n\t\tname: string,\n\t\targs: VercelVariableArgs,\n\t\topts: VercelVariableOptions,\n\t) {\n\t\tconst { provider, project, ...pulumiOpts } = opts;\n\n\t\tsuper(\"infracraft:vercel:Variable\", name, {}, pulumiOpts);\n\n\t\tconst projectId = project\n\t\t\t? project.id\n\t\t\t: (args.projectId as pulumi.Input<string>);\n\n\t\tif (!projectId) {\n\t\t\tthrow new Error(\n\t\t\t\t\"VercelVariable: either `args.projectId` or `opts.project` must be provided\",\n\t\t\t);\n\t\t}\n\n\t\tnew VercelVariableResource(\n\t\t\t`${name}-resource`,\n\t\t\t{\n\t\t\t\ttoken: provider.token,\n\t\t\t\ttokenEnvVar: provider.tokenEnvVar,\n\t\t\t\tteamId: provider.teamId,\n\t\t\t\tprojectId,\n\t\t\t\tvariables: args.variables,\n\t\t\t},\n\t\t\t{ parent: this },\n\t\t);\n\n\t\tthis.registerOutputs({});\n\t}\n}\n"],"mappings":";;;;;;;;;;AAqCA,eAAe,cACd,WACkB;CAElB,MAAM,QAAO,MADQ,OAAO,gBACR,WAAW,QAAQ;CAEvC,MAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OACpD,EAAE,cAAc,CAAC,CAClB;CAEA,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ;EAClC,KAAK,OAAO,GAAG;EACf,KAAK,OAAO,KAAK;CAClB;CAEA,OAAO,KAAK,OAAO,KAAK;AACzB;;;;;AAeA,eAAe,aACd,QACA,WAC0B;CAC1B,MAAM,OAAO,MAAM,OAAO,IACzB,gBAAgB,UAAU,KAC3B;CAEA,MAAM,YAA4B,CAAC;CAEnC,KAAK,MAAM,OAAO,KAAK,MAAM;EAC5B,MAAM,eAAe,MAAM,OAAO,OACjC,gBAAgB,UAAU,OAAO,IAAI,GAAG,cACzC;EAEA,IAAI,cACH,UAAU,KAAK,YAAY;CAE7B;CAEA,OAAO;AACR;;;;;AAMA,eAAe,aACd,QACA,WACA,KACA,OACwB;CACxB,IAAI;EACH,OAAO,MAAM,OAAO,KAAmB,iBAAiB,UAAU,OAAO;GACxE;GACA;GACA,MAAM;GACN,QAAQ;IAAC;IAAc;IAAW;GAAa;EAChD,CAAC;CACF,SAAS,OAAO;EAGf,IAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,cAAc,GAAG;GACrE,OAAO,IAAI,KACV,mBAAmB,IAAI,sCACxB;GAGA,MAAM,SAAQ,MADS,aAAa,QAAQ,SAAS,GAC9B,MAAM,MAAM,EAAE,QAAQ,GAAG;GAEhD,IAAI,OAAO;IACV,MAAM,aAAa,QAAQ,WAAW,MAAM,IAAI,KAAK;IAErD,OAAO;KAAE,GAAG;KAAO;IAAM;GAC1B;EACD;EAEA,MAAM;CACP;AACD;;;;AAKA,eAAe,aACd,QACA,WACA,OACA,OACgB;CAChB,MAAM,OAAO,MAAM,gBAAgB,UAAU,OAAO,SAAS,EAAE,MAAM,CAAC;AACvE;;;;;AAMA,eAAe,aACd,QACA,WACA,OACgB;CAChB,IAAI;EACH,MAAM,OAAO,OAAO,gBAAgB,UAAU,OAAO,OAAO;CAC7D,SAAS,OAAO;EACf,IAAI,EAAE,iBAAiB,mBACtB,MAAM;CAER;AACD;;;;;;AAOA,IAAa,iCAAb,MAEA;CACC,MAAM,OACL,QACuC;EACvC,MAAM,SAAS,IAAI,aAClB,kBAAkB,OAAO,OAAO,OAAO,WAAW,GAClD,OAAO,MACR;EAEA,MAAM,SAAiC,CAAC;EAExC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,SAAS,GAGzD,OAAO,QAAO,MAFO,aAAa,QAAQ,OAAO,WAAW,KAAK,KAAK,GAEjD;EAGtB,OAAO;GACN,IAAI,GAAG,OAAO,UAAU;GACxB,MAAM;IACL,GAAG;IACH;IACA,aAAa,MAAM,cAAc,OAAO,SAAS;GAClD;EACD;CACD;CAEA,MAAM,OACL,KACA,MACA,MACuC;EACvC,MAAM,SAAS,IAAI,aAClB,kBAAkB,KAAK,OAAO,KAAK,WAAW,GAC9C,KAAK,MACN;EAEA,MAAM,SAAS,EAAE,GAAG,KAAK,OAAO;EAEhC,MAAM,cAAc,OAAO,KAAK,KAAK,SAAS,EAAE,QAC9C,QAAQ,EAAE,OAAO,KAAK,UACxB;EAEA,KAAK,MAAM,OAAO,aAAa;GAC9B,MAAM,QAAQ,OAAO;GAErB,IAAI,OAAO;IACV,IAAI;KACH,MAAM,aAAa,QAAQ,KAAK,WAAW,KAAK;IACjD,QAAQ;KACP,OAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;IACD;IAEA,OAAO,OAAO;GACf;EACD;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,SAAS,GAAG;GAC1D,MAAM,aAAa,OAAO;GAE1B,IAAI,cAAc,KAAK,UAAU,SAAS,OACzC,MAAM,aAAa,QAAQ,KAAK,WAAW,YAAY,KAAK;QACtD,IAAI,CAAC,YAGX,OAAO,QAAO,MAFO,aAAa,QAAQ,KAAK,WAAW,KAAK,KAAK,GAE/C;EAEvB;EAEA,OAAO,EACN,MAAM;GACL,GAAG;GACH;GACA,aAAa,MAAM,cAAc,KAAK,SAAS;EAChD,EACD;CACD;CAEA,MAAM,KACL,IACA,OACqC;EAMrC,MAAM,SAAS,MAAM,aAAa,IALf,aAClB,kBAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MAGgC,GAAG,MAAM,SAAS;EAEzD,MAAM,kBAA0C,CAAC;EACjD,MAAM,eAAuC,CAAC;EAE9C,KAAK,MAAM,CAAC,QAAQ,OAAO,QAAQ,MAAM,SAAS,GAAG;GACpD,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,QAAQ,GAAG;GAE9C,IAAI,OAAO;IACV,gBAAgB,OAAO,MAAM;IAC7B,aAAa,OAAO,MAAM;GAC3B;EACD;EAEA,OAAO;GACN;GACA,OAAO;IACN,GAAG;IACH,WAAW;IACX,QAAQ;IACR,aAAa,MAAM,cAAc,eAAe;GACjD;EACD;CACD;CAEA,MAAM,OAAO,KAAa,OAA6C;EACtE,MAAM,SAAS,IAAI,aAClB,kBAAkB,MAAM,OAAO,MAAM,WAAW,GAChD,MAAM,MACP;EAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,MAAM,GACrD,IAAI;GACH,MAAM,aAAa,QAAQ,MAAM,WAAW,KAAK;EAClD,QAAQ;GACP,OAAO,IAAI,KACV,oCAAoC,IAAI,2BACzC;EACD;CAEF;CAEA,MAAM,KACL,KACA,MACA,MACqC;EACrC,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAC3D,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG;EAE3D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,SAAS,EAAE,MACnD,CAAC,KAAK,WAAW,KAAK,UAAU,SAAS,KAC3C;EAEA,OAAO,EACN,SAAS,YAAY,WAAW,cACjC;CACD;AACD;;AAGA,IAAM,yBAAN,cAAqC,OAAO,QAAQ,SAAS;CAC5D,YACC,MACA,MAOA,MACC;EAQD,MACC,IAAI,+BAA+B,GACnC,MACA,MAEA;GAAE,GAAG;GAAM,yBAAyB,CAAC,OAAO;EAAE,CAC/C;CACD;AACD;;;;;;;;;;;;;;AA0CA,IAAa,iBAAb,cAAoC,OAAO,kBAAkB;CAC5D,YACC,MACA,MACA,MACC;EACD,MAAM,EAAE,UAAU,SAAS,GAAG,eAAe;EAE7C,MAAM,8BAA8B,MAAM,CAAC,GAAG,UAAU;EAExD,MAAM,YAAY,UACf,QAAQ,KACP,KAAK;EAET,IAAI,CAAC,WACJ,MAAM,IAAI,MACT,4EACD;EAGD,IAAI,uBACH,GAAG,KAAK,YACR;GACC,OAAO,SAAS;GAChB,aAAa,SAAS;GACtB,QAAQ,SAAS;GACjB;GACA,WAAW,KAAK;EACjB,GACA,EAAE,QAAQ,KAAK,CAChB;EAEA,KAAK,gBAAgB,CAAC,CAAC;CACxB;AACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@infracraft/pulumi",
-	"version": "1.30.0",
+	"version": "1.30.2",
 	"type": "module",
 	"license": "MIT",
 	"description": "Native Pulumi providers for Railway, Neon, Vercel, and Fly.io with adopt-or-create semantics and deploy orchestration. No Terraform bridge.",