alchemy 2.0.0-beta.41 → 2.0.0-beta.43

package/lib/Planetscale/MySQL/MySQLMigrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MySQLMigrations.js","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/MySQLMigrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAmB,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAgB,MAAM,sBAAsB,CAAC;AAE/E,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,kCAAkC,CAIlC;CAAG;AAQL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,MAA4B,EAC5B,aAAqB,EACrB,eAAuB,EACvB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,CAAC,oBAAoB,CAAC;YAC1B,MAAM;YACN,eAAe;YACf,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAA4B,EAC5B,WAAkC,EAClC,OAAe,EACf,QAAgC,EAChC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAA2B,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvD,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAQL,MAAM,oBAAoB,GAAG,CAAC,OAA+B,EAAE,EAAE,CAC/D,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5D,KAAK,CAAC,CAAC,UAAU,CACf,UAAU,EACV,8BAA8B,KAAK;;;;YAI/B,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CACnC,UAAU,EACV,oBAAoB,KAAK,GAAG,CAC7B,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAExD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,CAAC;QACb,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YACnD,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,KAAK,CAAC,CAAC,YAAY,CACjB,UAAU,EACV,eAAe,KAAK,4BAA4B,EAChD,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CACvB,CAAC;YACF,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,IAAI,CACrC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACnC,CACF,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC,MAA4B,EAAE,GAAW,EAAE,EAAE,CAChE,mBAAmB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AAEJ,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,oEAAoE;AACpE,mEAAmE;AACnE,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAY,EAAE,CACrD,GAAG;KACA,KAAK,CAAC,oBAAoB,CAAC;KAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEjC,MAAM,eAAe,GAAG,CAAC,UAAsB,EAAE,KAAa,EAAE,EAAE,CAChE,cAAc,CAAiB,UAAU,EAAE,kBAAkB,KAAK,GAAG,CAAC,CAAC,IAAI,CACzE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;IAClB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,mBAAmB,GAAG,CAC1B,MAA4B,EAC5B,GAAuD,EACvD,EAAE,CACF,0BAA0B,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC9C,MAAM,CAAC,iBAAiB,CACtB,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CACR,gBAAgB,CAAC;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,QAAQ;QACvB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,kBAAkB,EAAE,IAAI;QACxB,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;KAClC,CAAC;IACJ,KAAK,EAAE,gBAAgB;CACxB,CAAC,EACF,GAAG,EACH,CAAC,UAAU,EAAE,EAAE,CACb,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;IAC3B,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC3C,CACF,CAAC;AAEJ,MAAM,0BAA0B,GAAG,CACjC,MAA4B,EAC5B,GAK4B,EAC5B,EAAE,CACF,MAAM,CAAC,iBAAiB,CACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;QACxC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,8BAA8B;KACpC,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,eAAe;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC,CAAC,EACF,GAAG,EACH,CAAC,QAAQ,EAAE,EAAE,CACX,GAAG;KACA,cAAc,CAAC;IACd,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;CAChB,CAAC;KACD,IAAI;AACH,gEAAgE;AAChE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC9C,MAAM,CAAC,KAAK,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAC/C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAClC;CACF,CAAC;AACF,kEAAkE;AAClE,kEAAkE;AAClE,qDAAqD;AACrD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC9B,MAAM,CAAC,UAAU,CACf,2EAA2E;IACzE,4BAA4B,8BAA8B,MAAM;IAChE,gBAAgB,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,QAAQ,GAAG;IAClE,UAAU,MAAM,CAAC,MAAM,OAAO,QAAQ,CAAC,EAAE,EAAE,EAC7C,KAAK,CACN,CACF,CACF,CACN,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,UAAsB,EAAE,GAAW,EAAE,EAAE,CACzD,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;IACtD,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,UAAsB,EACtB,GAAW,EACX,MAA8B,EAC9B,EAAE,CACF,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CACR,UAAU;SACP,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;SAC9C,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;IAC1B,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAI,UAAsB,EAAE,GAAW,EAAE,EAAE,CAChE,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAW,CAAC;IAC9D,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,EAAE,CAC1C,IAAI,mBAAmB,CAAC;IACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IAC/D,KAAK;CACN,CAAC,CAAC;AAEL,MAAM,oBAAoB,GAAG,CAAC,UAAkB,EAAE,EAAE,CAClD,KAAK,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC"}

package/lib/Planetscale/MySQL/MySQLOrigin.d.ts

@@ -0,0 +1,15 @@
+import * as Redacted from "effect/Redacted";
+/**
+ * The shape `Cloudflare.Hyperdrive` and other MySQL consumers accept as an
+ * origin. Materialized on `Planetscale.MySQLPassword` so callers can wire
+ * password credentials into Hyperdrive directly.
+ */
+export type MySQLOrigin = {
+    scheme: "mysql";
+    host: string;
+    port: number;
+    database: string;
+    user: string;
+    password: Redacted.Redacted<string>;
+};
+//# sourceMappingURL=MySQLOrigin.d.ts.map

package/lib/Planetscale/MySQL/MySQLOrigin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MySQLOrigin.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/MySQLOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACrC,CAAC"}

package/lib/Planetscale/MySQL/MySQLOrigin.js

@@ -0,0 +1,2 @@
+import * as Redacted from "effect/Redacted";
+//# sourceMappingURL=MySQLOrigin.js.map

package/lib/Planetscale/MySQL/MySQLOrigin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MySQLOrigin.js","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/MySQLOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC"}

package/lib/Planetscale/MySQL/MySQLPassword.d.ts

@@ -0,0 +1,115 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { MySQLBranch } from "./MySQLBranch.ts";
+import type { MySQLDatabase } from "./MySQLDatabase.ts";
+import type { MySQLOrigin } from "./MySQLOrigin.ts";
+/**
+ * Properties for creating or updating a PlanetScale MySQL password.
+ *
+ * Passwords are only meant for MySQL databases. For PostgreSQL,
+ * use {@link PostgresRole} instead.
+ */
+export interface MySQLPasswordProps {
+    /**
+     * Password name. If omitted, a unique name is generated from
+     * `${app}-${stage}-${id}`.
+     */
+    name?: string;
+    /**
+     * MySQL database — string name or {@link MySQLDatabase} resource.
+     */
+    database: string | MySQLDatabase;
+    /**
+     * Branch — string name or {@link MySQLBranch} resource.
+     * @default "main"
+     */
+    branch?: string | MySQLBranch;
+    /**
+     * The MySQL role granted to the password.
+     */
+    role: "reader" | "writer" | "admin" | "readwriter";
+    /**
+     * Whether the password is for a read replica.
+     */
+    replica?: boolean;
+    /**
+     * Time to live (seconds). The password is invalidated after this period.
+     */
+    ttl?: number;
+    /**
+     * IP CIDR ranges allowed to use this password.
+     */
+    cidrs?: string[];
+}
+/**
+ * Output attributes of a deployed PlanetScale password.
+ */
+export interface MySQLPasswordAttributes {
+    /** Unique identifier for the password (stable). */
+    id: string;
+    /** Password name. If omitted, a unique name is generated from `${app}-${stage}-${id}`. */
+    name: string;
+    /** ISO 8601 timestamp at which the password expires. `null` if no TTL. */
+    expiresAt: string | null;
+    /** Hostname for the database connection. */
+    host: string;
+    /** Username for database authentication. */
+    username: string;
+    /** Password for database authentication (Redacted). */
+    password: Redacted.Redacted<string>;
+    /** Parsed connection components ready to feed into Cloudflare Hyperdrive. */
+    origin: MySQLOrigin;
+    /** Resolved organization slug. */
+    organization: string;
+    /** Resolved database name. */
+    database: string;
+    /** Resolved branch name. */
+    branch: string;
+    /** The role granted. */
+    role: "reader" | "writer" | "admin" | "readwriter";
+    /** Whether this password is for a read replica. */
+    replica: boolean | undefined;
+    /** TTL in seconds (if set). */
+    ttl: number | undefined;
+    /** IP CIDR ranges allowed to use this password. */
+    cidrs: readonly string[] | undefined;
+}
+/**
+ * A PlanetScale password for accessing a MySQL database branch.
+ *
+ * For PostgreSQL databases, use {@link PostgresRole} instead.
+ *
+ * @section Creating a Password
+ * @example Reader password
+ * ```typescript
+ * const reader = yield* Planetscale.MySQLPassword("AppReader", {
+ *   database: "my-db",
+ *   role: "reader",
+ * });
+ * ```
+ *
+ * @example Writer password with TTL
+ * ```typescript
+ * const writer = yield* Planetscale.MySQLPassword("AppWriter", {
+ *   database: "my-db",
+ *   role: "writer",
+ *   ttl: 86400,
+ * });
+ * ```
+ *
+ * @example Admin password with IP allowlist
+ * ```typescript
+ * const admin = yield* Planetscale.MySQLPassword("Admin", {
+ *   database: "my-db",
+ *   role: "admin",
+ *   cidrs: ["203.0.113.0/24", "198.51.100.0/24"],
+ * });
+ * ```
+ */
+export type MySQLPassword = Resource<"Planetscale.MySQLPassword", MySQLPasswordProps, MySQLPasswordAttributes, never, Providers>;
+export declare const MySQLPassword: import("../../Resource.ts").ResourceClass<MySQLPassword>;
+export declare const MySQLPasswordProvider: () => import("effect/Layer").Layer<Provider.Provider<MySQLPassword>, never, import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Credentials>;
+//# sourceMappingURL=MySQLPassword.d.ts.map

package/lib/Planetscale/MySQL/MySQLPassword.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MySQLPassword.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/MySQLPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAGvE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC;IAEjC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAE9B;;OAEG;IACH,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,CAAC;IAEnD;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,6EAA6E;IAC7E,MAAM,EAAE,WAAW,CAAC;IACpB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,CAAC;IACnD,mDAAmD;IACnD,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,+BAA+B;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,mDAAmD;IACnD,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAClC,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,aAAa,0DAEzB,CAAC;AAuFF,eAAO,MAAM,qBAAqB,4JAqK/B,CAAC"}

package/lib/Planetscale/MySQL/MySQLPassword.js

@@ -0,0 +1,197 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { deepEqual, isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+export const MySQLPassword = Resource("Planetscale.MySQLPassword");
+const resolveDatabaseName = (database) => {
+    const ref = database;
+    return typeof ref === "string" ? ref : ref.name;
+};
+const resolveDatabaseOrg = (database) => {
+    const ref = database;
+    return typeof ref === "string" ? undefined : ref.organization;
+};
+const resolveBranchName = (branch) => {
+    const ref = branch;
+    return !ref ? "main" : typeof ref === "string" ? ref : ref.name;
+};
+const createPasswordName = (id, name) => Effect.gen(function* () {
+    return (name ??
+        (yield* createPhysicalName({ id, lowercase: true, maxLength: 63 })));
+});
+// Normalize the API's nullable `cidrs` field into the `string[] | undefined`
+// shape we persist so downstream comparisons line up regardless of the
+// API returning `null` vs `[]` vs an actual list.
+const normalizeCidrs = (cidrs) => cidrs == null || cidrs.length === 0 ? undefined : cidrs;
+const buildAttributes = (password, plaintext, context) => ({
+    id: password.id,
+    name: password.name,
+    expiresAt: password.expires_at,
+    host: password.access_host_url,
+    username: password.username,
+    password: plaintext,
+    origin: {
+        scheme: "mysql",
+        host: password.access_host_url,
+        port: 3306,
+        database: context.database,
+        user: password.username,
+        password: plaintext,
+    },
+    organization: context.organization,
+    database: context.database,
+    branch: context.branch,
+    role: password.role,
+    replica: password.replica,
+    ttl: password.ttl_seconds ?? undefined,
+    cidrs: normalizeCidrs(password.cidrs),
+});
+export const MySQLPasswordProvider = () => Provider.effect(MySQLPassword, Effect.gen(function* () {
+    const createPwd = yield* ops.createPassword;
+    const getPwd = yield* ops.getPassword;
+    const updatePwd = yield* ops.updatePassword;
+    const deletePwd = yield* ops.deletePassword;
+    return {
+        stables: ["id"],
+        diff: Effect.fn(function* ({ olds = {}, news }) {
+            if (!isResolved(news))
+                return undefined;
+            // Replace on any immutable-in-place change; engine falls through
+            // to reconcile for everything else (which authoritatively diffs
+            // against observed cloud state).
+            if (news.role !== olds.role)
+                return { action: "replace" };
+            if (news.replica !== olds.replica) {
+                return { action: "replace" };
+            }
+            if (news.ttl !== olds.ttl)
+                return { action: "replace" };
+            const newDb = resolveDatabaseName(news.database);
+            const oldDb = olds.database
+                ? resolveDatabaseName(olds.database)
+                : undefined;
+            if (oldDb && newDb !== oldDb) {
+                return { action: "replace" };
+            }
+            const newBranch = resolveBranchName(news.branch);
+            const oldBranch = resolveBranchName(olds.branch);
+            if (newBranch !== oldBranch) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ output }) {
+            // Adoption (no cached output) is impossible: the PlanetScale API
+            // never re-issues plaintext, so even if we found a matching live
+            // password by listing+name we couldn't deliver the `password`
+            // attribute. Fall through to greenfield create in `reconcile`.
+            if (!output)
+                return undefined;
+            // Refresh — verify the cached password still exists and
+            // re-emit the persisted output (with plaintext intact).
+            // If it's gone, return undefined so the engine routes to
+            // reconcile, which will surface the unrecoverable-rotation
+            // condition explicitly.
+            return yield* getPwd({
+                organization: output.organization,
+                database: output.database,
+                branch: output.branch,
+                id: output.id,
+            }).pipe(Effect.map((password) => buildAttributes(password, output.password, {
+                organization: output.organization,
+                database: output.database,
+                branch: output.branch,
+            })), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output }) {
+            const newName = yield* createPasswordName(id, news.name);
+            // Identifiers — stable across update (diff replaces on
+            // database/branch changes), so we can pull from `output` first
+            // and fall back to `news` for greenfield.
+            const { organization: envOrg } = yield* Credentials;
+            const organization = output?.organization ?? resolveDatabaseOrg(news.database) ?? envOrg;
+            const databaseName = output?.database ?? resolveDatabaseName(news.database);
+            const branchName = output?.branch ?? resolveBranchName(news.branch);
+            // 1. Observe — read live state. The PlanetScale API has no
+            //    "lookup by name" path (names aren't unique within a branch)
+            //    so the only way to find the live password is by id. Without
+            //    a cached output we cannot observe and fall straight through
+            //    to ensure (greenfield create).
+            const observed = output
+                ? yield* getPwd({
+                    organization,
+                    database: databaseName,
+                    branch: branchName,
+                    id: output.id,
+                }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)))
+                : undefined;
+            // 2. Ensure — create the password if it doesn't exist live.
+            //    This single branch covers greenfield (no output) AND the
+            //    out-of-band-deletion case (output cached but cloud lost it).
+            //    The latter is structurally a rotation: the new password
+            //    has a fresh id/host/username/plaintext that propagate
+            //    downstream through the dependency graph. There is no path
+            //    to recover the original plaintext, so recreating is the
+            //    only way to converge.
+            let live;
+            let plaintext;
+            if (observed) {
+                live = observed;
+                // We re-use the cached plaintext: the API never re-issues it.
+                plaintext = output.password;
+            }
+            else {
+                const created = yield* createPwd({
+                    organization,
+                    database: databaseName,
+                    branch: branchName,
+                    name: newName,
+                    role: news.role,
+                    replica: news.replica,
+                    ttl: news.ttl,
+                    cidrs: news.cidrs,
+                });
+                plaintext = created.plain_text;
+                live = created;
+            }
+            // 3. Sync — diff observed cloud state against desired and patch
+            //    only what changed. Only `name` and `cidrs` are mutable in
+            //    place; everything else triggers a replace via diff().
+            //    Skip the API entirely when there's no delta.
+            const wantsRename = newName !== live.name;
+            const observedCidrs = normalizeCidrs(live.cidrs);
+            const desiredCidrs = normalizeCidrs(news.cidrs);
+            const wantsCidrs = !deepEqual(desiredCidrs, observedCidrs);
+            if (wantsRename || wantsCidrs) {
+                live = yield* updatePwd({
+                    organization,
+                    database: databaseName,
+                    branch: branchName,
+                    id: live.id,
+                    name: wantsRename ? newName : undefined,
+                    cidrs: wantsCidrs ? news.cidrs : undefined,
+                });
+            }
+            // 4. Return — fresh attrs sourced from observed cloud state,
+            //    re-using cached plaintext when we didn't just create.
+            return buildAttributes(live, plaintext, {
+                organization,
+                database: databaseName,
+                branch: branchName,
+            });
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* deletePwd({
+                organization: output.organization,
+                database: output.database,
+                branch: output.branch,
+                id: output.id,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=MySQLPassword.js.map

package/lib/Planetscale/MySQL/MySQLPassword.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MySQLPassword.js","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/MySQLPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvE,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA6H7C,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CACnC,2BAA2B,CAC5B,CAAC;AAUF,MAAM,mBAAmB,GAAG,CAAC,QAAgC,EAAU,EAAE;IACvE,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAgC,EACZ,EAAE;IACtB,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAAwC,EAChC,EAAE;IACV,MAAM,GAAG,GAAG,MAA0C,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,CACL,IAAI;QACJ,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAC7E,uEAAuE;AACvE,kDAAkD;AAClD,MAAM,cAAc,GAAG,CACrB,KAA2C,EACZ,EAAE,CACjC,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAE1D,MAAM,eAAe,GAAG,CACtB,QAUC,EACD,SAAoC,EACpC,OAIC,EACwB,EAAE,CAAC,CAAC;IAC7B,EAAE,EAAE,QAAQ,CAAC,EAAE;IACf,IAAI,EAAE,QAAQ,CAAC,IAAI;IACnB,SAAS,EAAE,QAAQ,CAAC,UAAU;IAC9B,IAAI,EAAE,QAAQ,CAAC,eAAe;IAC9B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE;QACN,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,QAAQ,CAAC,eAAe;QAC9B,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,QAAQ,CAAC,QAAQ;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;IACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,GAAG,EAAE,QAAQ,CAAC,WAAW,IAAI,SAAS;IACtC,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACxC,QAAQ,CAAC,MAAM,CACb,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAE5C,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,CAAC;QAEf,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAExC,iEAAiE;YACjE,gEAAgE;YAChE,iCAAiC;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACnE,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YAEjE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;gBACzB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,iEAAiE;YACjE,iEAAiE;YACjE,8DAA8D;YAC9D,+DAA+D;YAC/D,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAE9B,wDAAwD;YACxD,wDAAwD;YACxD,yDAAyD;YACzD,2DAA2D;YAC3D,wBAAwB;YACxB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC;gBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,EAAE,EAAE,MAAM,CAAC,EAAE;aACd,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtB,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAEzD,uDAAuD;YACvD,+DAA+D;YAC/D,0CAA0C;YAC1C,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,YAAY,GAChB,MAAM,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;YACtE,MAAM,YAAY,GAChB,MAAM,EAAE,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEpE,2DAA2D;YAC3D,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,oCAAoC;YACpC,MAAM,QAAQ,GAAG,MAAM;gBACrB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;oBACZ,YAAY;oBACZ,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,UAAU;oBAClB,EAAE,EAAE,MAAM,CAAC,EAAE;iBACd,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,4DAA4D;YAC5D,8DAA8D;YAC9D,kEAAkE;YAClE,6DAA6D;YAC7D,2DAA2D;YAC3D,+DAA+D;YAC/D,6DAA6D;YAC7D,2BAA2B;YAC3B,IAAI,IAA2B,CAAC;YAChC,IAAI,SAAoC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,GAAG,QAAQ,CAAC;gBAChB,8DAA8D;gBAC9D,SAAS,GAAG,MAAO,CAAC,QAAQ,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;oBAC/B,YAAY;oBACZ,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,UAAU;oBAClB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;gBACH,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;gBAC/B,IAAI,GAAG,OAAO,CAAC;YACjB,CAAC;YAED,gEAAgE;YAChE,+DAA+D;YAC/D,2DAA2D;YAC3D,kDAAkD;YAClD,MAAM,WAAW,GAAG,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC;YAC1C,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAE3D,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;oBACtB,YAAY;oBACZ,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,UAAU;oBAClB,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACvC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBAC3C,CAAC,CAAC;YACL,CAAC;YAED,6DAA6D;YAC7D,2DAA2D;YAC3D,OAAO,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE;gBACtC,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,SAAS,CAAC;gBACf,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,EAAE,EAAE,MAAM,CAAC,EAAE;aACd,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Planetscale/MySQL/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./MySQLClusterSize.ts";
+export * from "./MySQLBranch.ts";
+export * from "./MySQLDatabase.ts";
+export * from "./MySQLOrigin.ts";
+export * from "./MySQLPassword.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/Planetscale/MySQL/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC"}

package/lib/Planetscale/MySQL/index.js

@@ -0,0 +1,6 @@
+export * from "./MySQLClusterSize.js";
+export * from "./MySQLBranch.js";
+export * from "./MySQLDatabase.js";
+export * from "./MySQLOrigin.js";
+export * from "./MySQLPassword.js";
+//# sourceMappingURL=index.js.map

package/lib/Planetscale/MySQL/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Planetscale/MySQL/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC"}

package/lib/Planetscale/Postgres/PostgresBranch.d.ts

@@ -0,0 +1,67 @@
+import { Resource } from "../../Resource.ts";
+import { type BaseBranchAttributes, type BaseBranchProps } from "../Branch.ts";
+import type { Providers } from "../Providers.ts";
+import type { PostgresClusterSize } from "./PostgresClusterSize.ts";
+import type { PostgresDatabase } from "./PostgresDatabase.ts";
+/**
+ * Properties for creating or updating a {@link PostgresBranch}.
+ */
+export interface PostgresBranchProps extends BaseBranchProps {
+    /**
+     * The Postgres database. Either a string database name or a
+     * {@link PostgresDatabase} resource.
+     */
+    database: string | PostgresDatabase;
+    /**
+     * PostgreSQL cluster size for the branch. Required if `backupId` is provided.
+     * Short sizes are expanded using the target branch region.
+     */
+    clusterSize?: PostgresClusterSize;
+    /**
+     * Parent branch — either a string name or another {@link PostgresBranch}.
+     * @default "main"
+     */
+    parentBranch?: string | PostgresBranch;
+}
+/**
+ * Output attributes of a deployed {@link PostgresBranch}.
+ */
+export interface PostgresBranchAttributes extends BaseBranchAttributes {
+}
+/**
+ * A PlanetScale branch of a {@link PostgresDatabase}. For MySQL branches
+ * use {@link MySQLBranch} instead.
+ *
+ * @section Creating a Branch
+ * @example Branch from main
+ * ```typescript
+ * const branch = yield* Planetscale.PostgresBranch("Feature123", {
+ *   database: "my-db",
+ *   parentBranch: "main",
+ * });
+ * ```
+ *
+ * @example Branch from a PostgresDatabase resource
+ * ```typescript
+ * const db = yield* Planetscale.PostgresDatabase("MyDb", { clusterSize: "PS_10" });
+ * const branch = yield* Planetscale.PostgresBranch("Feature456", {
+ *   database: db,
+ *   parentBranch: "main",
+ * });
+ * ```
+ *
+ * @section Migrations and seed data
+ * @example Apply migrations on a branch
+ * ```typescript
+ * const branch = yield* Planetscale.PostgresBranch("Feature123", {
+ *   database: db,
+ *   parentBranch: "main",
+ *   migrationsDir: "./migrations",
+ *   importFiles: ["./seed.sql"],
+ * });
+ * ```
+ */
+export type PostgresBranch = Resource<"Planetscale.PostgresBranch", PostgresBranchProps, PostgresBranchAttributes, never, Providers>;
+export declare const PostgresBranch: import("../../Resource.ts").ResourceClass<PostgresBranch>;
+export declare const PostgresBranchProvider: () => import("effect/Layer").Layer<import("../../Provider.ts").Provider<PostgresBranch>, never, import("@distilled.cloud/planetscale/Credentials").Credentials>;
+//# sourceMappingURL=PostgresBranch.d.ts.map

package/lib/Planetscale/Postgres/PostgresBranch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresBranch.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresBranch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EAErB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAM9D;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,oBAAoB;CAAG;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,CACnC,4BAA4B,EAC5B,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,cAAc,2DAE1B,CAAC;AAEF,eAAO,MAAM,sBAAsB,iKAS/B,CAAC"}

package/lib/Planetscale/Postgres/PostgresBranch.js

@@ -0,0 +1,14 @@
+import { Resource } from "../../Resource.js";
+import { makeBranchProvider, } from "../Branch.js";
+import { runPostgresImports, runPostgresMigrations, } from "./PostgresMigrations.js";
+export const PostgresBranch = Resource("Planetscale.PostgresBranch");
+export const PostgresBranchProvider = () => makeBranchProvider({
+    resource: PostgresBranch,
+    expectedKind: "postgresql",
+    engineLabel: "PostgresBranch",
+    runners: {
+        runMigrations: runPostgresMigrations,
+        runImports: runPostgresImports,
+    },
+});
+//# sourceMappingURL=PostgresBranch.js.map

package/lib/Planetscale/Postgres/PostgresBranch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresBranch.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresBranch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAGL,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAItB,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAuEjC,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CACpC,4BAA4B,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE,CACzC,kBAAkB,CAAC;IACjB,QAAQ,EAAE,cAAc;IACxB,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE;QACP,aAAa,EAAE,qBAAqB;QACpC,UAAU,EAAE,kBAAkB;KAC/B;CACF,CAAC,CAAC"}

package/lib/Planetscale/Postgres/PostgresClusterSize.d.ts

@@ -0,0 +1,44 @@
+import * as Effect from "effect/Effect";
+/**
+ * Available PlanetScale PostgreSQL cluster sizes.
+ *
+ * `PS_*` sizes are backed by network-attached storage (NAS) and can be
+ * specified either as the short size (`"PS_10"`) or the API SKU
+ * (`"PS_10_AWS_X86"`). Short NAS sizes are expanded to a SKU by
+ * {@link toPostgresClusterSku} using the target region and arch.
+ *
+ * @see https://planetscale.com/docs/postgres/pricing
+ */
+export type PostgresClusterSize = "PS_DEV" | "PS_5" | "PS_10" | "PS_20" | "PS_40" | "PS_80" | "PS_160" | "PS_320" | "PS_640" | "PS_1280" | "PS_2560" | (string & {});
+/**
+ * Converts a {@link PostgresClusterSize} into the SKU string expected by
+ * the PlanetScale API.
+ *
+ * For NAS-backed clusters, the API expects a suffixed name like
+ * `PS_<size>_<provider>_<arch>`. Short `PS_*` sizes are expanded using the
+ * supplied region and arch.
+ *
+ * Metal-backed sizes (anything starting with `M`) are passed through
+ * unchanged. The short `M_*` form is not a valid SKU on its own — the API
+ * requires the full Metal SKU (e.g. `M6_640_AWS_INTEL_D_METAL_474`), which
+ * encodes the CPU series, provider, arch, and storage size
+ *
+ * Already-suffixed NAS sizes are also passed through unchanged.
+ */
+export declare function toPostgresClusterSku(input: {
+    size: PostgresClusterSize;
+    arch?: "x86" | "arm";
+    region?: string;
+}): string;
+/**
+ * Polls branch change requests until all visible changes are in a terminal
+ * state (`completed` or `canceled`), or — if `changeId` is provided — until
+ * that specific change reaches a terminal state.
+ */
+export declare const waitForPendingPostgresChanges: (organization: string, database: string, branch: string, changeId?: string | undefined) => Effect.Effect<void, import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden, import("@distilled.cloud/planetscale/Credentials").Credentials>;
+/**
+ * Ensures a PostgreSQL production branch has the expected cluster size,
+ * queuing the change via the change-request API if it doesn't.
+ */
+export declare const ensurePostgresProductionBranchClusterSize: (organization: string, database: string, branch: string, expectedClusterSize: PostgresClusterSize) => Effect.Effect<void, import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden, import("@distilled.cloud/planetscale/Credentials").Credentials>;
+//# sourceMappingURL=PostgresClusterSize.d.ts.map

package/lib/Planetscale/Postgres/PostgresClusterSize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresClusterSize.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresClusterSize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,MAAM,GACN,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAOT;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,wQA2BxC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,yCAAyC,mRA8BpD,CAAC"}

package/lib/Planetscale/Postgres/PostgresClusterSize.js

@@ -0,0 +1,72 @@
+import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as Effect from "effect/Effect";
+import { pollUntil } from "../Util.js";
+/**
+ * Converts a {@link PostgresClusterSize} into the SKU string expected by
+ * the PlanetScale API.
+ *
+ * For NAS-backed clusters, the API expects a suffixed name like
+ * `PS_<size>_<provider>_<arch>`. Short `PS_*` sizes are expanded using the
+ * supplied region and arch.
+ *
+ * Metal-backed sizes (anything starting with `M`) are passed through
+ * unchanged. The short `M_*` form is not a valid SKU on its own — the API
+ * requires the full Metal SKU (e.g. `M6_640_AWS_INTEL_D_METAL_474`), which
+ * encodes the CPU series, provider, arch, and storage size
+ *
+ * Already-suffixed NAS sizes are also passed through unchanged.
+ */
+export function toPostgresClusterSku(input) {
+    const size = input.size;
+    if (!size.startsWith("PS_") || size.match(/(AWS|GCP)/))
+        return size;
+    // Not all AWS regions start with "aws-", but all GCP regions start with "gcp-".
+    const provider = input.region?.startsWith("gcp") ? "GCP" : "AWS";
+    const arch = (input.arch ?? "x86").toUpperCase();
+    return `${size}_${provider}_${arch}`;
+}
+/**
+ * Polls branch change requests until all visible changes are in a terminal
+ * state (`completed` or `canceled`), or — if `changeId` is provided — until
+ * that specific change reaches a terminal state.
+ */
+export const waitForPendingPostgresChanges = Effect.fn(function* (organization, database, branch, changeId) {
+    yield* pollUntil(`changes for branch "${branch}"`, ops.listBranchChangeRequests({
+        organization,
+        database,
+        branch,
+        page: 1,
+        per_page: 25,
+    }), (page) => {
+        const isTerminal = (state) => state === "completed" || state === "canceled";
+        if (changeId) {
+            const change = page.data.find((change) => change.id === changeId);
+            return change ? isTerminal(change.state) : false;
+        }
+        return page.data.every((change) => isTerminal(change.state));
+    });
+});
+/**
+ * Ensures a PostgreSQL production branch has the expected cluster size,
+ * queuing the change via the change-request API if it doesn't.
+ */
+export const ensurePostgresProductionBranchClusterSize = Effect.fn(function* (organization, database, branch, expectedClusterSize) {
+    const data = yield* ops.getBranch({ organization, database, branch });
+    const sku = toPostgresClusterSku({
+        size: expectedClusterSize,
+        arch: data.cluster_architecture === "aarch64" ? "arm" : "x86",
+        region: data.region.slug,
+    });
+    if (data.cluster_name === sku) {
+        return;
+    }
+    yield* waitForPendingPostgresChanges(organization, database, branch);
+    const change = yield* ops.updateBranchChangeRequest({
+        organization,
+        database,
+        branch,
+        cluster_size: sku,
+    });
+    yield* waitForPendingPostgresChanges(organization, database, branch, change.id);
+});
+//# sourceMappingURL=PostgresClusterSize.js.map

package/lib/Planetscale/Postgres/PostgresClusterSize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresClusterSize.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresClusterSize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA0BvC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAIpC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,gFAAgF;IAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC9D,YAAoB,EACpB,QAAgB,EAChB,MAAc,EACd,QAAiB;IAEjB,KAAK,CAAC,CAAC,SAAS,CACd,uBAAuB,MAAM,GAAG,EAChC,GAAG,CAAC,wBAAwB,CAAC;QAC3B,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,EAAE;KACb,CAAC,EACF,CAAC,IAAI,EAAE,EAAE;QACP,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CACnC,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,UAAU,CAAC;QAEhD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC1E,YAAoB,EACpB,QAAgB,EAChB,MAAc,EACd,mBAAwC;IAExC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAEtE,MAAM,GAAG,GAAG,oBAAoB,CAAC;QAC/B,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;QAC7D,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;KACzB,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,KAAK,CAAC,CAAC,6BAA6B,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAClD,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,YAAY,EAAE,GAAG;KAClB,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,6BAA6B,CAClC,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,MAAM,CAAC,EAAE,CACV,CAAC;AACJ,CAAC,CAAC,CAAC"}