@microagi/alchemy-gcp 0.2.1 → 0.5.0

package/lib/Run/Validation.js

@@ -0,0 +1,129 @@
+import { ConfigError } from "@distilled.cloud/gcp";
+import * as Effect from "effect/Effect";
+/**
+ * Plan-time validation for Cloud Run resource props. Failing fast with
+ * a typed `ConfigError` is much friendlier than letting the user wait
+ * 30 s for the server to reject the request — and unlike server-side
+ * errors, these surface before any state mutation happens.
+ *
+ * Used by both `Service` and `Job` since the constraints are shared:
+ * resource naming, label namespacing, and the "at least one container"
+ * rule on the template.
+ */
+/**
+ * Cloud Run resource names must match the
+ * [RFC 1123](https://datatracker.ietf.org/doc/html/rfc1123) label
+ * subset:
+ * - lowercase letters, digits, and hyphens
+ * - begin with a letter, not end with a hyphen
+ * - <50 chars (server hard cap, distinct from the wider 63-char label
+ *   limit other GCP resources use)
+ *
+ * @internal
+ */
+const RUN_NAME_RE = /^[a-z]([-a-z0-9]{0,47}[a-z0-9])?$/;
+/**
+ * Cloud Run rejects labels and annotations with keys in any of these
+ * namespaces. Listed in `vendor/distilled/packages/gcp/src/services/run-v2.ts`
+ * doc comments next to every `labels` / `annotations` field. Failing
+ * fast here saves a 400 round-trip from the server.
+ */
+const RESERVED_LABEL_NAMESPACES = [
+    "run.googleapis.com/",
+    "cloud.googleapis.com/",
+    "serving.knative.dev/",
+    "autoscaling.knative.dev/",
+];
+const reservedNamespaceFor = (key) => RESERVED_LABEL_NAMESPACES.find((ns) => key.startsWith(ns));
+/**
+ * Validate a Cloud Run resource name (Service or Job). Returns a
+ * `ConfigError` Effect on the failure channel if the name is invalid,
+ * otherwise succeeds.
+ *
+ * The name comes from `props.name` (when the user supplied one) or
+ * `createPhysicalName({ id, maxLength: 49 })` (when defaulted). The
+ * defaulted path is already capped at 49; this guard mostly protects
+ * the user-supplied path against a server-side reject after a long
+ * deploy.
+ */
+export const validateRunName = (kind, name) => {
+    if (RUN_NAME_RE.test(name) && name.length < 50)
+        return Effect.void;
+    return Effect.fail(new ConfigError({
+        message: `Cloud Run ${kind} name ${JSON.stringify(name)} is invalid: must match /^[a-z]([-a-z0-9]{0,47}[a-z0-9])?$/ (lowercase letters/digits/hyphens, starts with letter, no trailing hyphen, <50 chars).`,
+    }));
+};
+/**
+ * Reject user labels in any of the Cloud Run reserved namespaces — the
+ * server's 400 message ("Labels with run.googleapis.com namespace are
+ * not allowed") is clear enough, but failing at plan time means the
+ * stack never starts a deploy that's guaranteed to fail.
+ *
+ * Alchemy internals are merged *on top* of user labels and are NOT
+ * subject to this check — they use the un-namespaced `alchemy_*` keys.
+ */
+export const validateLabels = (labels) => {
+    if (!labels)
+        return Effect.void;
+    for (const key of Object.keys(labels)) {
+        const ns = reservedNamespaceFor(key);
+        if (ns) {
+            return Effect.fail(new ConfigError({
+                message: `Label key ${JSON.stringify(key)} uses reserved namespace ${JSON.stringify(ns)} — Cloud Run will reject this on create/patch. Strip the prefix or pick a different key.`,
+            }));
+        }
+    }
+    return Effect.void;
+};
+/** Same check, applied to annotations (server has the same reservation). */
+export const validateAnnotations = (annotations) => validateLabels(annotations);
+/**
+ * Cloud Run requires every Service template and Job task template to
+ * declare at least one container. A `containers: []` body sails through
+ * client-side type checks but the server rejects with a generic 400.
+ */
+export const validateContainers = (kind, containers) => {
+    if (containers && containers.length > 0)
+        return Effect.void;
+    return Effect.fail(new ConfigError({
+        message: `Cloud Run ${kind} template must declare at least one container. Did you forget \`template.containers: [{ image: "…" }]\`?`,
+    }));
+};
+/**
+ * Reshape a `BadRequest` from a Cloud Run create or patch into a
+ * `ConfigError` with a remediation hint for the top failure modes:
+ *
+ * 1. **Billing not enabled** — the project's billing-account attach
+ *    was missing or detached. Common after a fresh project + ApiEnable
+ *    before billing reconciles.
+ * 2. **Image not in an approved registry** — Cloud Run defaults reject
+ *    Docker Hub and most non-Google registries when Binary Authorization
+ *    is on. Surface the registry-allow-list pointer.
+ * 3. **Reserved label/annotation namespace** — we catch user-supplied
+ *    cases in `validateLabels`, but server-side checks also fire for
+ *    fields nested inside `template` (we don't recurse) so leave this
+ *    as a passthrough hint.
+ *
+ * Anything else propagates verbatim — the underlying GCP message is
+ * usually clear ("invalid image reference", "memory limit too low").
+ */
+export const reshapeBadRequest = (kind, op) => (e) => {
+    const underlying = e.message ?? `unknown 400 from ${kind} ${op}`;
+    let hint = "";
+    if (/billing/i.test(underlying)) {
+        hint =
+            " Cloud Run requires billing to be enabled on the project. Attach a billing account (see `GCP.Project({ billingAccount })`) and retry.";
+    }
+    else if (/registry|image.*not.*allowed|disallowed.*image/i.test(underlying)) {
+        hint =
+            " Cloud Run rejects images from non-Google registries when Binary Authorization is on. Push to Artifact Registry (`*-docker.pkg.dev`) or relax the binary-auth policy.";
+    }
+    else if (/run\.googleapis\.com|knative\.dev|cloud\.googleapis\.com/i.test(underlying)) {
+        hint =
+            " A reserved label/annotation namespace is in use. Cloud Run forbids `run.googleapis.com/*`, `cloud.googleapis.com/*`, `serving.knative.dev/*`, and `autoscaling.knative.dev/*` on user fields.";
+    }
+    return Effect.fail(new ConfigError({
+        message: `Cloud Run ${kind} ${op} rejected: ${underlying}.${hint}`,
+    }));
+};
+//# sourceMappingURL=Validation.js.map

package/lib/Run/Validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Validation.js","sourceRoot":"","sources":["../../src/Run/Validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC;;;;;;;;;GASG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,GAAG,mCAAmC,CAAC;AAExD;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG;IAChC,qBAAqB;IACrB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;CAC3B,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAsB,EAAE,CAC/D,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAuB,EACvB,IAAY,EACsB,EAAE;IACpC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACnE,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,WAAW,CAAC;QACd,OAAO,EAAE,aAAa,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oJAAoJ;KAC5M,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAA0C,EACR,EAAE;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,WAAW,CAAC;gBACd,OAAO,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,0FAA0F;aAClL,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,WAA+C,EACb,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,IAAuB,EACvB,UAA8C,EACZ,EAAE;IACpC,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,WAAW,CAAC;QACd,OAAO,EAAE,aAAa,IAAI,0GAA0G;KACrI,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAC5B,CAAC,IAAuB,EAAE,EAAsB,EAAE,EAAE,CACpD,CAAC,CAAuB,EAAqC,EAAE;IAC7D,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,IAAI,oBAAoB,IAAI,IAAI,EAAE,EAAE,CAAC;IACjE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,IAAI;YACF,uIAAuI,CAAC;IAC5I,CAAC;SAAM,IAAI,iDAAiD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,IAAI;YACF,uKAAuK,CAAC;IAC5K,CAAC;SAAM,IAAI,2DAA2D,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,IAAI;YACF,gMAAgM,CAAC;IACrM,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,WAAW,CAAC;QACd,OAAO,EAAE,aAAa,IAAI,IAAI,EAAE,cAAc,UAAU,IAAI,IAAI,EAAE;KACnE,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}

package/lib/Run/index.d.ts

@@ -0,0 +1,51 @@
+import type * as run from "@distilled.cloud/gcp/run-v2";
+export { Job, JobProvider } from "./Job.ts";
+export type { JobAttributes, JobProps } from "./Job.ts";
+export { jobIamMember, serviceIamMember } from "./IamMember.ts";
+export type { RunIamBinding, RunIamBindingContract } from "./IamSync.ts";
+export { Service, ServiceProvider } from "./Service.ts";
+export type { ServiceAttributes, ServiceProps } from "./Service.ts";
+/**
+ * Clean aliases for the most commonly-used Cloud Run v2 SDK types,
+ * re-exported from `@distilled.cloud/gcp/run-v2` so consumers don't
+ * need to import from the underlying SDK directly. The aliases are
+ * type-only — they share identity with the distilled types, so values
+ * are interchangeable.
+ *
+ * The `GoogleCloudRunV2*` prefix on the SDK types is generated from
+ * the GCP Discovery Document and is awkward to consume; these aliases
+ * mirror the casing the GCP REST docs use ("RevisionTemplate",
+ * "Container", "TrafficTarget"), which is what most users will
+ * already have in their heads.
+ *
+ * @example
+ * ```typescript
+ * import * as GCP from "@microagi/alchemy-gcp";
+ *
+ * const template: GCP.RevisionTemplate = {
+ *   containers: [{ image: "..." }],
+ * };
+ * ```
+ */
+export type RevisionTemplate = run.GoogleCloudRunV2RevisionTemplate;
+export type ExecutionTemplate = run.GoogleCloudRunV2ExecutionTemplate;
+export type TaskTemplate = run.GoogleCloudRunV2TaskTemplate;
+export type Container = run.GoogleCloudRunV2Container;
+export type ContainerPort = run.GoogleCloudRunV2ContainerPort;
+export type EnvVar = run.GoogleCloudRunV2EnvVar;
+export type EnvVarSource = run.GoogleCloudRunV2EnvVarSource;
+export type ResourceRequirements = run.GoogleCloudRunV2ResourceRequirements;
+export type Probe = run.GoogleCloudRunV2Probe;
+export type VpcAccess = run.GoogleCloudRunV2VpcAccess;
+export type NetworkInterface = run.GoogleCloudRunV2NetworkInterface;
+export type NodeSelector = run.GoogleCloudRunV2NodeSelector;
+export type TrafficTarget = run.GoogleCloudRunV2TrafficTarget;
+export type TrafficTargetStatus = run.GoogleCloudRunV2TrafficTargetStatus;
+export type ServiceScaling = run.GoogleCloudRunV2ServiceScaling;
+export type BinaryAuthorization = run.GoogleCloudRunV2BinaryAuthorization;
+export type Volume = run.GoogleCloudRunV2Volume;
+export type VolumeMount = run.GoogleCloudRunV2VolumeMount;
+export type Condition = run.GoogleCloudRunV2Condition;
+export type ExecutionReference = run.GoogleCloudRunV2ExecutionReference;
+export type SecretKeySelector = run.GoogleCloudRunV2SecretKeySelector;
+//# sourceMappingURL=index.d.ts.map

package/lib/Run/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/Run/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,6BAA6B,CAAC;AAExD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,gBAAgB,GAAG,GAAG,CAAC,gCAAgC,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,GAAG,CAAC,iCAAiC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,4BAA4B,CAAC;AAC5D,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,yBAAyB,CAAC;AACtD,MAAM,MAAM,aAAa,GAAG,GAAG,CAAC,6BAA6B,CAAC;AAC9D,MAAM,MAAM,MAAM,GAAG,GAAG,CAAC,sBAAsB,CAAC;AAChD,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,4BAA4B,CAAC;AAC5D,MAAM,MAAM,oBAAoB,GAAG,GAAG,CAAC,oCAAoC,CAAC;AAC5E,MAAM,MAAM,KAAK,GAAG,GAAG,CAAC,qBAAqB,CAAC;AAC9C,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,yBAAyB,CAAC;AACtD,MAAM,MAAM,gBAAgB,GAAG,GAAG,CAAC,gCAAgC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,4BAA4B,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAG,GAAG,CAAC,6BAA6B,CAAC;AAC9D,MAAM,MAAM,mBAAmB,GAAG,GAAG,CAAC,mCAAmC,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,8BAA8B,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,GAAG,CAAC,mCAAmC,CAAC;AAC1E,MAAM,MAAM,MAAM,GAAG,GAAG,CAAC,sBAAsB,CAAC;AAChD,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC,2BAA2B,CAAC;AAC1D,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,yBAAyB,CAAC;AACtD,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAAC,kCAAkC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,GAAG,CAAC,iCAAiC,CAAC"}

package/lib/Run/index.js

@@ -0,0 +1,4 @@
+export { Job, JobProvider } from "./Job.js";
+export { jobIamMember, serviceIamMember } from "./IamMember.js";
+export { Service, ServiceProvider } from "./Service.js";
+//# sourceMappingURL=index.js.map

package/lib/Run/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/Run/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/lib/Sqladmin/Database.d.ts

@@ -0,0 +1,82 @@
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import type * as GCP from "../Providers.ts";
+/**
+ * A logical Postgres database inside a Cloud SQL instance.
+ *
+ * Cloud SQL `databases` resources are extremely thin — name, charset,
+ * collation, parent instance. Use this resource to declaratively
+ * create a tenant database (one per app, one per team, etc.) and let
+ * alchemy track its lifecycle.
+ *
+ * **Adoption.** Cloud SQL databases carry NO labels. There is no
+ * server-side adoption marker we can stamp without polluting the
+ * collation field, so `read` is best-effort: it returns the observed
+ * shape if the database exists at the same logical address, and
+ * `undefined` otherwise. The caller is responsible for `--adopt` if
+ * they want to take over an existing physical database; we do not
+ * gate on labels here.
+ *
+ * **Replace triggers.** `project`, `instance`, `name`. Charset and
+ * collation are immutable post-create in practice — the API accepts
+ * a `patch` but ignores collation/charset drift, so we treat them as
+ * "set once, then forgotten" and only diff name/parent.
+ *
+ * @example
+ * ```typescript
+ * const db = yield* GCP.SqlDatabase("AppDb", {
+ *   project: instance.project,
+ *   instance: instance.name,
+ *   name: "app",
+ * });
+ * ```
+ *
+ * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/databases
+ */
+export type SqlDatabaseProps = {
+    /**
+     * GCP project ID hosting the parent instance. Immutable — replace.
+     * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/databases#Database
+     */
+    project: string;
+    /**
+     * Parent Cloud SQL instance name (NOT the fully-qualified resource
+     * name; just the bare `name`). Immutable — replace.
+     */
+    instance: string;
+    /**
+     * Database name. 1–64 chars; Postgres-specific naming applies (no
+     * reserved words, etc.). Immutable — replace if changed.
+     */
+    name: string;
+    /**
+     * Server-side character set. Postgres-default is `UTF8`. Set at
+     * create; not honoured on patch.
+     * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/databases#Database.FIELDS.charset
+     */
+    charset?: string;
+    /**
+     * Collation. Postgres-default is `en_US.UTF8`. Set at create; not
+     * honoured on patch.
+     * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/databases#Database.FIELDS.collation
+     */
+    collation?: string;
+};
+export type SqlDatabaseAttributes = {
+    /** Database name. */
+    name: string;
+    /** Parent instance name. */
+    instance: string;
+    /** Project ID. */
+    project: string;
+    /** Server-defined URL. */
+    selfLink: string;
+    /** Effective charset (server may default to `UTF8`). */
+    charset: string | undefined;
+    /** Effective collation. */
+    collation: string | undefined;
+};
+export type SqlDatabase = Resource<"GCP.SqlDatabase", SqlDatabaseProps, SqlDatabaseAttributes, never, GCP.Providers>;
+export declare const SqlDatabase: import("alchemy").ResourceClass<SqlDatabase>;
+export declare const SqlDatabaseProvider: () => import("effect/Layer").Layer<Provider.Provider<SqlDatabase>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=Database.d.ts.map

package/lib/Sqladmin/Database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Database.d.ts","sourceRoot":"","sources":["../../src/Sqladmin/Database.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAI5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2BAA2B;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,QAAQ,CAChC,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,WAAW,8CAA2C,CAAC;AAcpE,eAAO,MAAM,mBAAmB,8KAqG7B,CAAC"}

package/lib/Sqladmin/Database.js

@@ -0,0 +1,87 @@
+import * as sql from "@distilled.cloud/gcp/sqladmin-v1";
+import { Resource } from "alchemy";
+import { isResolved, somePropsAreDifferent } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import * as Effect from "effect/Effect";
+import { makeAwaitOperation } from "./Operations.js";
+import { reshapeBadRequest, validateDatabaseName } from "./Validation.js";
+export const SqlDatabase = Resource("GCP.SqlDatabase");
+const toAttributes = (d, parent) => ({
+    name: parent.name,
+    instance: parent.instance,
+    project: parent.project,
+    selfLink: d.selfLink ?? "",
+    charset: d.charset,
+    collation: d.collation,
+});
+export const SqlDatabaseProvider = () => Provider.effect(SqlDatabase, Effect.gen(function* () {
+    const getDatabases = yield* sql.getDatabases;
+    const insertDatabases = yield* sql.insertDatabases;
+    const deleteDatabases = yield* sql.deleteDatabases;
+    const getOperations = yield* sql.getOperations;
+    const awaitOperation = makeAwaitOperation(getOperations);
+    const observe = (project, instance, database) => getDatabases({ project, instance, database }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)));
+    return {
+        stables: ["name", "instance", "project", "selfLink"],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            if (somePropsAreDifferent(olds, news, [
+                "project",
+                "instance",
+                "name",
+            ])) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        reconcile: Effect.fn(function* ({ news, session }) {
+            yield* validateDatabaseName(news.name);
+            let observed = yield* observe(news.project, news.instance, news.name);
+            if (!observed) {
+                const op = yield* insertDatabases({
+                    project: news.project,
+                    instance: news.instance,
+                    body: {
+                        name: news.name,
+                        ...(news.charset ? { charset: news.charset } : {}),
+                        ...(news.collation ? { collation: news.collation } : {}),
+                    },
+                }).pipe(Effect.catchTag("Conflict", () => Effect.succeed(undefined)), Effect.catchTag("BadRequest", reshapeBadRequest("Database", "insert")));
+                if (op?.name)
+                    yield* awaitOperation(news.project, op.name, session);
+                observed = yield* getDatabases({
+                    project: news.project,
+                    instance: news.instance,
+                    database: news.name,
+                });
+            }
+            return toAttributes(observed, {
+                project: news.project,
+                instance: news.instance,
+                name: news.name,
+            });
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            yield* deleteDatabases({
+                project: output.project,
+                instance: output.instance,
+                database: output.name,
+            }).pipe(Effect.flatMap((op) => op.name
+                ? awaitOperation(output.project, op.name, session)
+                : Effect.succeed(op)), Effect.catchTag("NotFound", () => Effect.void), Effect.catchTag("BadRequest", reshapeBadRequest("Database", "delete")));
+        }),
+        read: Effect.fn(function* ({ output, olds }) {
+            const project = output?.project ?? olds?.project;
+            const instance = output?.instance ?? olds?.instance;
+            const name = output?.name ?? olds?.name;
+            if (!project || !instance || !name)
+                return undefined;
+            const observed = yield* observe(project, instance, name);
+            if (!observed)
+                return undefined;
+            return toAttributes(observed, { project, instance, name });
+        }),
+    };
+}));
+//# sourceMappingURL=Database.js.map

package/lib/Sqladmin/Database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Database.js","sourceRoot":"","sources":["../../src/Sqladmin/Database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,kCAAkC,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAsF1E,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAc,iBAAiB,CAAC,CAAC;AAEpE,MAAM,YAAY,GAAG,CACnB,CAAe,EACf,MAA2D,EACpC,EAAE,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,SAAS,EAAE,CAAC,CAAC,SAAS;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,QAAQ,CAAC,MAAM,CACb,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IAC7C,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;IACnD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,MAAM,cAAc,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE,CACtE,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAAqC,CAAC,CACtD,EACD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAChC,MAAM,CAAC,OAAO,CAAC,SAAqC,CAAC,CACtD,CACF,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;QACpD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,qBAAqB,CAAC,IAAwB,EAAE,IAAI,EAAE;gBACpD,SAAS;gBACT,UAAU;gBACV,MAAM;aACP,CAAC,EACF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/C,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;oBAChC,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE;wBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzD;iBACF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAAsC,CAAC,CACvD,EACD,MAAM,CAAC,QAAQ,CACb,YAAY,EACZ,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CACxC,CACF,CAAC;gBACF,IAAI,EAAE,EAAE,IAAI;oBAAE,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACpE,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;oBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,YAAY,CAAC,QAAQ,EAAE;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,KAAK,CAAC,CAAC,eAAe,CAAC;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,IAAI;aACtB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE,CAAC,IAAI;gBACL,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;gBAClD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CACvB,EACD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC9C,MAAM,CAAC,QAAQ,CACb,YAAY,EACZ,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CACxC,CACF,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACzC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Sqladmin/Instance.d.ts

@@ -0,0 +1,234 @@
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import * as Redacted from "effect/Redacted";
+import type * as GCP from "../Providers.ts";
+import type { PostgresVersion, SqlActivationPolicy, SqlAvailabilityType, SqlDataDiskType, SqlEdition } from "./Types.ts";
+/**
+ * A Cloud SQL for Postgres instance.
+ *
+ * **Resource model.** A Cloud SQL instance bundles the storage volume,
+ * compute tier, networking (public IP / VPC private IP via PSA), and
+ * managed backups. Databases (`GCP.SqlDatabase`) and users
+ * (`GCP.SqlUser`) hang off it and are modelled as separate resources.
+ *
+ * **Lifecycle.** observe → ensure (insert; retry on the "API not yet
+ * enabled" 403 propagation race) → sync (patch top-level fields, with
+ * `settingsVersion` round-trip for optimistic concurrency) → return.
+ *
+ * **Replace triggers.** `project`, `region`, `name`, `databaseVersion`.
+ * Everything else — tier, disk size, IP config, backup config — is
+ * in-place via `patch`.
+ *
+ * **Optimistic concurrency.** Cloud SQL uses `settings.settingsVersion`
+ * (NOT `etag` — etag is deprecated). Every patch reads the live
+ * instance and threads the observed `settingsVersion` through the
+ * body. Concurrent edits surface as `Conflict`.
+ *
+ * **Adoption.** Label-gated: an instance whose `settings.userLabels`
+ * lack our `alchemy_*` keys is wrapped in `Unowned(attrs)` from
+ * `read`, forcing `--adopt` before takeover.
+ *
+ * **Deletion protection.** When `settings.deletionProtectionEnabled`
+ * is `true`, alchemy `destroy` will fail with a `BadRequest`. Set the
+ * flag to `false` in a separate deploy (which patches the instance),
+ * then re-run destroy.
+ *
+ * @example Minimal private-IP Postgres 17 instance on a Shared VPC
+ * ```typescript
+ * const db = yield* GCP.SqlInstance("Primary", {
+ *   project: project.projectId,
+ *   region: "europe-west4",
+ *   databaseVersion: "POSTGRES_17",
+ *   settings: {
+ *     tier: "db-custom-2-7680",
+ *     edition: "ENTERPRISE",
+ *     dataDiskSizeGb: 50,
+ *     ipConfiguration: {
+ *       ipv4Enabled: false,
+ *       privateNetwork: hostVpc.selfLink,
+ *     },
+ *     backupConfiguration: { enabled: true, pointInTimeRecoveryEnabled: true },
+ *   },
+ * });
+ * ```
+ *
+ * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/instances
+ */
+export type SqlInstanceProps = {
+    /**
+     * GCP project ID hosting the instance. Immutable — replace if changed.
+     * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/instances#SqlInstance
+     */
+    project: string;
+    /**
+     * Cloud SQL region (e.g. `europe-west4`). Cloud SQL is regional;
+     * zonality is configured inside `settings.availabilityType`.
+     * Immutable — replace if changed.
+     * @see https://cloud.google.com/sql/docs/postgres/locations
+     */
+    region: string;
+    /**
+     * Instance name. Defaults to `createPhysicalName({ id, lowercase:
+     * true, maxLength: 98 })`. Lowercase letters/digits/hyphens; begin
+     * with a letter, no trailing hyphen; 1–98 chars. Immutable — replace.
+     * @see https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/instances#SqlInstance
+     */
+    name?: string;
+    /**
+     * Postgres engine version. Immutable — Cloud SQL exposes major
+     * version *upgrades* via a separate `upgrade` operation, not via
+     * `patch`. Surfacing it as immutable here forces an explicit replace
+     * (or out-of-band upgrade) for clarity.
+     * @see https://cloud.google.com/sql/docs/postgres/db-versions
+     */
+    databaseVersion: PostgresVersion;
+    /**
+     * Initial Postgres `postgres` superuser password. Only set on
+     * insert; ignored on subsequent patches (Cloud SQL silently drops
+     * `rootPassword` on patch). Typically omitted on IAM-only stacks
+     * since the `postgres` role is unused.
+     * @see https://cloud.google.com/sql/docs/postgres/create-manage-users#user-root
+     */
+    rootPassword?: Redacted.Redacted<string>;
+    /**
+     * Resource labels. Alchemy internal labels (`alchemy_app`,
+     * `alchemy_stage`, `alchemy_id`) are merged on top automatically.
+     * Cloud SQL stores user labels under `settings.userLabels`; we
+     * surface them at the top level for symmetry with other GCP
+     * resources. Mutable via `patch`.
+     * @see https://cloud.google.com/sql/docs/postgres/label-instance
+     */
+    labels?: Record<string, string>;
+    /** Instance settings (tier, disk, IP, backups, …). Mostly mutable via `patch`. */
+    settings: {
+        /**
+         * Machine tier (`db-custom-{vCPU}-{memMiB}`, `db-f1-micro`,
+         * `db-perf-optimized-*`). Mutable via `patch` (causes a restart).
+         * @see https://cloud.google.com/sql/docs/postgres/instance-settings
+         */
+        tier: string;
+        /**
+         * Cloud SQL edition. `ENTERPRISE_PLUS` is required for
+         * Data Cache + the `db-perf-optimized-*` tiers. Mutable via
+         * `patch` (some transitions require a restart).
+         * @see https://cloud.google.com/sql/docs/postgres/editions-intro
+         */
+        edition?: SqlEdition;
+        /**
+         * Storage size in GB. Mutable via `patch`; can only grow, not
+         * shrink (shrink requires a side-channel operation).
+         * @see https://cloud.google.com/sql/docs/postgres/instance-settings#storage-capacity-2ndgen
+         */
+        dataDiskSizeGb?: number;
+        /**
+         * Disk type. `PD_SSD` is the default; `PD_HDD` is legacy.
+         * Immutable in practice — Cloud SQL rejects type changes on patch.
+         * @see https://cloud.google.com/sql/docs/postgres/instance-settings#storage-type-2ndgen
+         */
+        dataDiskType?: SqlDataDiskType;
+        /** Auto-grow the data disk when nearing full. Mutable via `patch`. */
+        diskAutoresize?: boolean;
+        /** Cap on auto-grown size, in GB. Mutable via `patch`. */
+        diskAutoresizeLimit?: number;
+        /** Networking — public IP, private IP via PSA, or both. Mutable via `patch`. */
+        ipConfiguration?: {
+            /**
+             * VPC selfLink (`https://www.googleapis.com/compute/v1/projects/{p}/global/networks/{n}`)
+             * to attach the private IP to. The VPC must already have a PSA
+             * peering with `servicenetworking.googleapis.com`. Immutable
+             * after first set (Cloud SQL refuses to change the private network).
+             * @see https://cloud.google.com/sql/docs/postgres/private-ip
+             */
+            privateNetwork?: string;
+            /** Enable a public IPv4 endpoint. Mutable via `patch`. */
+            ipv4Enabled?: boolean;
+            /**
+             * Allow Google-managed services (BigQuery, Vertex AI, etc.) to
+             * reach the private IP over Google's backbone. Mutable via `patch`.
+             */
+            enablePrivatePathForGoogleCloudServices?: boolean;
+            /** Require SSL/TLS on all connections. Mutable via `patch`. */
+            requireSsl?: boolean;
+        };
+        /** Backup window + retention settings. Mutable via `patch`. */
+        backupConfiguration?: {
+            /** Enable automated daily backups. Mutable via `patch`. */
+            enabled?: boolean;
+            /** Enable PITR (write-ahead log archiving). Mutable via `patch`. */
+            pointInTimeRecoveryEnabled?: boolean;
+            /** Backup start time in UTC, `HH:MM` 24-hour. Mutable via `patch`. */
+            startTime?: string;
+            /** WAL retention window (1–7 days). Mutable via `patch`. */
+            transactionLogRetentionDays?: number;
+        };
+        /**
+         * Postgres flags (e.g. `shared_buffers`, `max_connections`).
+         * Mutable via `patch`; some flags trigger a restart.
+         * @see https://cloud.google.com/sql/docs/postgres/flags
+         */
+        databaseFlags?: ReadonlyArray<{
+            name: string;
+            value: string;
+        }>;
+        /**
+         * Block alchemy from deleting the instance via the API. Disable
+         * before running destroy.
+         * @see https://cloud.google.com/sql/docs/postgres/deletion-protection
+         */
+        deletionProtectionEnabled?: boolean;
+        /** Park (`NEVER`) or run (`ALWAYS`) the instance. Mutable via `patch`. */
+        activationPolicy?: SqlActivationPolicy;
+        /**
+         * `ZONAL` = single zone; `REGIONAL` = HA standby in a second zone.
+         * Mutable via `patch` (transitions to/from `REGIONAL` take ~10 min).
+         * @see https://cloud.google.com/sql/docs/postgres/high-availability
+         */
+        availabilityType?: SqlAvailabilityType;
+    };
+};
+export type SqlInstanceIpAddress = {
+    /** Address class — `PRIMARY` (public), `PRIVATE`, or `OUTGOING`. */
+    type: string | undefined;
+    /** The IP itself. */
+    ipAddress: string | undefined;
+};
+export type SqlInstanceAttributes = {
+    /** Bare instance name (no `projects/.../instances/` prefix). */
+    name: string;
+    /** Server-defined URL for the instance. */
+    selfLink: string;
+    /** GCP project ID. */
+    project: string;
+    /** Region. */
+    region: string;
+    /**
+     * `project:region:name` — the canonical identifier the Cloud SQL
+     * Auth Proxy and the IAM authn token exchange both consume.
+     */
+    connectionName: string;
+    /** Echoed Postgres version (e.g. `POSTGRES_17`). */
+    databaseVersion: string;
+    /** Lifecycle state — `RUNNABLE` once ready. */
+    state: string;
+    /** All IPs Cloud SQL has assigned. */
+    ipAddresses: ReadonlyArray<SqlInstanceIpAddress>;
+    /** Convenience: first `PRIVATE` IP, if any. */
+    privateIpAddress: string | undefined;
+    /** Convenience: first `PRIMARY` (public) IP, if any. */
+    publicIpAddress: string | undefined;
+    /** Server CA cert; useful for pinning TLS roots from a client. */
+    serverCaCert: {
+        cert: string | undefined;
+        commonName: string | undefined;
+        expirationTime: string | undefined;
+        sha1Fingerprint: string | undefined;
+    } | undefined;
+    /** Monotonic optimistic-concurrency token — round-tripped on patch. */
+    settingsVersion: string | undefined;
+    /** Labels currently set, including alchemy internals. */
+    labels: Record<string, string>;
+};
+export type SqlInstance = Resource<"GCP.SqlInstance", SqlInstanceProps, SqlInstanceAttributes, never, GCP.Providers>;
+export declare const SqlInstance: import("alchemy").ResourceClass<SqlInstance>;
+export declare const SqlInstanceProvider: () => import("effect/Layer").Layer<Provider.Provider<SqlInstance>, never, import("effect/unstable/http/HttpClient").HttpClient | import("alchemy").Stage | import("alchemy").Stack | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=Instance.d.ts.map

package/lib/Sqladmin/Instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Instance.d.ts","sourceRoot":"","sources":["../../src/Sqladmin/Instance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAI7C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,UAAU,EACX,MAAM,YAAY,CAAC;AAGpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kFAAkF;IAClF,QAAQ,EAAE;QACR;;;;WAIG;QACH,IAAI,EAAE,MAAM,CAAC;QACb;;;;;WAKG;QACH,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;WAIG;QACH,YAAY,CAAC,EAAE,eAAe,CAAC;QAC/B,sEAAsE;QACtE,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,0DAA0D;QAC1D,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,gFAAgF;QAChF,eAAe,CAAC,EAAE;YAChB;;;;;;eAMG;YACH,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,0DAA0D;YAC1D,WAAW,CAAC,EAAE,OAAO,CAAC;YACtB;;;eAGG;YACH,uCAAuC,CAAC,EAAE,OAAO,CAAC;YAClD,+DAA+D;YAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;SACtB,CAAC;QACF,+DAA+D;QAC/D,mBAAmB,CAAC,EAAE;YACpB,2DAA2D;YAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;YAClB,oEAAoE;YACpE,0BAA0B,CAAC,EAAE,OAAO,CAAC;YACrC,sEAAsE;YACtE,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,4DAA4D;YAC5D,2BAA2B,CAAC,EAAE,MAAM,CAAC;SACtC,CAAC;QACF;;;;WAIG;QACH,aAAa,CAAC,EAAE,aAAa,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/D;;;;WAIG;QACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC,0EAA0E;QAC1E,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;QACvC;;;;WAIG;QACH,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,oEAAoE;IACpE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,qBAAqB;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc;IACd,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,WAAW,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACjD,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,wDAAwD;IACxD,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,kEAAkE;IAClE,YAAY,EACR;QACE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;KACrC,GACD,SAAS,CAAC;IACd,uEAAuE;IACvE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,QAAQ,CAChC,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,WAAW,8CAA2C,CAAC;AA8FpE,eAAO,MAAM,mBAAmB,kOA2Q7B,CAAC"}