alchemy 2.0.0-beta.41 → 2.0.0-beta.43

package/lib/Planetscale/Postgres/PostgresMigrations.js

@@ -0,0 +1,148 @@
+import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Schedule from "effect/Schedule";
+import { Client } from "pg";
+import { listSqlFiles, readSqlFile } from "../../Sql/SqlFile.js";
+const MIGRATION_ROLE_TTL_SECONDS = 600;
+export class PostgresMigrationError extends Data.TaggedError("Planetscale::PostgresMigrationError") {
+}
+export const runPostgresMigrations = (target, migrationsDir, migrationsTable) => Effect.gen(function* () {
+    const files = yield* listSqlFiles(migrationsDir);
+    if (files.length > 0) {
+        yield* applyPostgresMigrations({
+            target,
+            migrationsTable,
+            migrationsFiles: files,
+        });
+    }
+    const hashes = {};
+    for (const file of files)
+        hashes[file.id] = file.hash;
+    return hashes;
+});
+export const runPostgresImports = (target, importFiles, rootDir, previous) => Effect.gen(function* () {
+    const hashes = { ...previous };
+    for (const filePath of importFiles) {
+        const file = yield* readSqlFile(rootDir, filePath);
+        if (previous[filePath] === file.hash) {
+            hashes[filePath] = file.hash;
+            continue;
+        }
+        yield* runPostgresSql(target, file.sql);
+        hashes[filePath] = file.hash;
+    }
+    const tracked = new Set(importFiles);
+    for (const key of Object.keys(hashes)) {
+        if (!tracked.has(key))
+            delete hashes[key];
+    }
+    return hashes;
+});
+const applyPostgresMigrations = (options) => withPostgresClient(options.target, (client) => Effect.gen(function* () {
+    const table = quotePgIdentifier(options.migrationsTable);
+    yield* pgExec(client, `CREATE TABLE IF NOT EXISTS ${table} (
+           id TEXT PRIMARY KEY,
+           name TEXT NOT NULL,
+           applied_at TIMESTAMPTZ NOT NULL DEFAULT now()
+         );`);
+    const applied = yield* pgRows(client, `SELECT name FROM ${table};`).pipe(Effect.map((rows) => new Set(rows.map((row) => row.name))));
+    let nextSeq = yield* getNextPgSeq(client, table);
+    for (const file of options.migrationsFiles) {
+        if (applied.has(file.id))
+            continue;
+        const migrationId = nextSeq.toString().padStart(5, "0");
+        nextSeq += 1;
+        yield* Effect.gen(function* () {
+            yield* pgExec(client, "BEGIN");
+            yield* pgExec(client, file.sql);
+            yield* pgExec(client, `INSERT INTO ${table} (id, name) VALUES ($1, $2);`, [migrationId, file.id]);
+            yield* pgExec(client, "COMMIT");
+        }).pipe(Effect.catch((error) => pgExec(client, "ROLLBACK").pipe(Effect.catch(() => Effect.void), Effect.andThen(Effect.fail(error)))));
+    }
+}));
+const runPostgresSql = (target, sql) => withPostgresClient(target, (client) => pgExec(client, sql));
+const getNextPgSeq = (client, table) => pgRows(client, `SELECT id FROM ${table};`).pipe(Effect.map((rows) => {
+    let max = 0;
+    for (const { id } of rows) {
+        if (/^\d+$/.test(id)) {
+            max = Math.max(max, Number.parseInt(id, 10));
+        }
+    }
+    return max + 1;
+}));
+const withPostgresClient = (target, use) => withTemporaryPostgresRole(target, (role) => Effect.acquireUseRelease(Effect.gen(function* () {
+    const client = yield* Effect.sync(() => new Client({
+        connectionString: stripPgSslQueryParams(Redacted.value(role.connectionUrl)),
+        ssl: { rejectUnauthorized: true },
+    }));
+    yield* Effect.tryPromise({
+        try: () => client.connect(),
+        catch: toMigrationError,
+    });
+    return client;
+}), use, (client) => Effect.tryPromise({
+    try: () => client.end(),
+    catch: toMigrationError,
+}).pipe(Effect.catch(() => Effect.void))));
+const withTemporaryPostgresRole = (target, use) => Effect.acquireUseRelease(Effect.gen(function* () {
+    const created = yield* ops.createRole({
+        organization: target.organization,
+        database: target.database,
+        branch: target.branch,
+        ttl: MIGRATION_ROLE_TTL_SECONDS,
+        inherited_roles: ["postgres"],
+    });
+    const password = created.password;
+    const value = Redacted.value(password);
+    const connectionUrl = yield* Effect.sync(() => `postgresql://${encodeURIComponent(created.username)}:${encodeURIComponent(value)}@${created.access_host_url}:5432/${created.database_name}?sslmode=verify-full`);
+    return {
+        id: created.id,
+        connectionUrl: Redacted.make(connectionUrl),
+    };
+}), use, (role) => ops
+    .deleteRole({
+    organization: target.organization,
+    database: target.database,
+    branch: target.branch,
+    id: role.id,
+    successor: "postgres",
+})
+    .pipe(
+// Already-deleted roles are a success: nothing to clean up.
+Effect.catchTag("NotFound", () => Effect.void), Effect.retry({
+    schedule: Schedule.exponential("500 millis").pipe(Schedule.both(Schedule.recurs(5))),
+}), 
+// Migrations succeeded; don't fail the parent over a release-step
+// hiccup. The role's TTL bounds the orphan window; log loudly so
+// an operator can clean it up manually if needed.
+Effect.catch((cause) => Effect.logWarning(`Failed to delete temporary Planetscale migration role after retries. ` +
+    `It will expire via TTL (~${MIGRATION_ROLE_TTL_SECONDS}s). ` +
+    `organization=${target.organization} database=${target.database} ` +
+    `branch=${target.branch} id=${role.id}`, cause))));
+const pgExec = (client, sql, values) => Effect.tryPromise({
+    try: () => client.query(sql, values).then(() => undefined),
+    catch: toMigrationError,
+});
+const pgRows = (client, sql) => Effect.tryPromise({
+    try: () => client.query(sql).then((result) => result.rows),
+    catch: toMigrationError,
+});
+const toMigrationError = (cause) => new PostgresMigrationError({
+    message: cause instanceof Error ? cause.message : String(cause),
+    cause,
+});
+const quotePgIdentifier = (identifier) => `"${identifier.replaceAll('"', '""')}"`;
+const stripPgSslQueryParams = (uri) => {
+    try {
+        const url = new URL(uri);
+        url.searchParams.delete("sslmode");
+        url.searchParams.delete("channel_binding");
+        return url.toString();
+    }
+    catch {
+        return uri;
+    }
+};
+//# sourceMappingURL=PostgresMigrations.js.map

package/lib/Planetscale/Postgres/PostgresMigrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresMigrations.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresMigrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAgB,MAAM,sBAAsB,CAAC;AAE/E,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAC1D,qCAAqC,CAIrC;CAAG;AAQL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,MAA+B,EAC/B,aAAqB,EACrB,eAAuB,EACvB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,CAAC,uBAAuB,CAAC;YAC7B,MAAM;YACN,eAAe;YACf,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,MAA+B,EAC/B,WAAkC,EAClC,OAAe,EACf,QAAgC,EAChC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAA2B,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvD,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAQL,MAAM,uBAAuB,GAAG,CAAC,OAA+B,EAAE,EAAE,CAClE,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,KAAK,CAAC,CAAC,MAAM,CACX,MAAM,EACN,8BAA8B,KAAK;;;;YAI/B,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAC3B,MAAM,EACN,oBAAoB,KAAK,GAAG,CAC7B,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,CAAC;QACb,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/B,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,KAAK,CAAC,CAAC,MAAM,CACX,MAAM,EACN,eAAe,KAAK,8BAA8B,EAClD,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CACvB,CAAC;YACF,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACnC,CACF,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,cAAc,GAAG,CAAC,MAA+B,EAAE,GAAW,EAAE,EAAE,CACtE,kBAAkB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CACrD,MAAM,CAAiB,MAAM,EAAE,kBAAkB,KAAK,GAAG,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;IAClB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CACzB,MAA+B,EAC/B,GAA+C,EAC/C,EAAE,CACF,yBAAyB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACzC,MAAM,CAAC,iBAAiB,CACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAC/B,GAAG,EAAE,CACH,IAAI,MAAM,CAAC;QACT,gBAAgB,EAAE,qBAAqB,CACrC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CACnC;QACD,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;KAClC,CAAC,CACL,CAAC;IACF,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QAC3B,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,EACF,GAAG,EACH,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;IACvB,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC3C,CACF,CAAC;AAEJ,MAAM,yBAAyB,GAAG,CAChC,MAA+B,EAC/B,GAG4B,EAC5B,EAAE,CACF,MAAM,CAAC,iBAAiB,CACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,0BAA0B;QAC/B,eAAe,EAAE,CAAC,UAAU,CAAC;KAC9B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAS,CAAC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACtC,GAAG,EAAE,CACH,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,eAAe,SAAS,OAAO,CAAC,aAAa,sBAAsB,CACnK,CAAC;IACF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;KAC5C,CAAC;AACJ,CAAC,CAAC,EACF,GAAG,EACH,CAAC,IAAI,EAAE,EAAE,CACP,GAAG;KACA,UAAU,CAAC;IACV,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE;IACX,SAAS,EAAE,UAAU;CACtB,CAAC;KACD,IAAI;AACH,4DAA4D;AAC5D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC9C,MAAM,CAAC,KAAK,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAC/C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAClC;CACF,CAAC;AACF,kEAAkE;AAClE,iEAAiE;AACjE,kDAAkD;AAClD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC9B,MAAM,CAAC,UAAU,CACf,uEAAuE;IACrE,4BAA4B,0BAA0B,MAAM;IAC5D,gBAAgB,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,QAAQ,GAAG;IAClE,UAAU,MAAM,CAAC,MAAM,OAAO,IAAI,CAAC,EAAE,EAAE,EACzC,KAAK,CACN,CACF,CACF,CACN,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,GAAW,EAAE,MAA+B,EAAE,EAAE,CAC9E,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CACR,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAwB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;IACnE,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,CAAI,MAAc,EAAE,GAAW,EAAE,EAAE,CAChD,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAW,CAAC;IACjE,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,EAAE,CAC1C,IAAI,sBAAsB,CAAC;IACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IAC/D,KAAK;CACN,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,EAAE,CAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAE1C,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAU,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC,CAAC"}

package/lib/Planetscale/Postgres/PostgresOrigin.d.ts

@@ -0,0 +1,15 @@
+import * as Redacted from "effect/Redacted";
+/**
+ * The shape `Cloudflare.Hyperdrive` and other Postgres consumers accept as an
+ * origin. Materialized on `Planetscale.PostgresRole` so callers can wire role
+ * credentials into Hyperdrive directly.
+ */
+export type PostgresOrigin = {
+    scheme: "postgres" | "postgresql";
+    host: string;
+    port: number;
+    database: string;
+    user: string;
+    password: Redacted.Redacted<string>;
+};
+//# sourceMappingURL=PostgresOrigin.d.ts.map

package/lib/Planetscale/Postgres/PostgresOrigin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresOrigin.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACrC,CAAC"}

package/lib/Planetscale/Postgres/PostgresOrigin.js

@@ -0,0 +1,2 @@
+import * as Redacted from "effect/Redacted";
+//# sourceMappingURL=PostgresOrigin.js.map

package/lib/Planetscale/Postgres/PostgresOrigin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresOrigin.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC"}

package/lib/Planetscale/Postgres/PostgresRole.d.ts

@@ -0,0 +1,121 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { PostgresBranch } from "./PostgresBranch.ts";
+import type { PostgresDatabase } from "./PostgresDatabase.ts";
+import type { PostgresOrigin } from "./PostgresOrigin.ts";
+/**
+ * Built-in PostgreSQL roles that can be inherited from. Custom role names
+ * (referencing other Role resources) are also accepted.
+ */
+export type InheritedRole = "pscale_managed" | "pg_checkpoint" | "pg_create_subscription" | "pg_maintain" | "pg_monitor" | "pg_read_all_data" | "pg_read_all_settings" | "pg_read_all_stats" | "pg_signal_backend" | "pg_stat_scan_tables" | "pg_use_reserved_connections" | "pg_write_all_data" | "postgres" | (string & {});
+/**
+ * Properties for creating or updating a PlanetScale PostgreSQL role.
+ *
+ * Roles are only meant for PostgreSQL databases. For MySQL,
+ * use {@link MySQLPassword} instead.
+ */
+export interface PostgresRoleProps {
+    /**
+     * Role name. If not provided, a physical name will be generated.
+     */
+    name?: string;
+    /**
+     * PostgreSQL database — string name or {@link PostgresDatabase} resource.
+     */
+    database: string | PostgresDatabase;
+    /**
+     * Branch — string name or {@link PostgresBranch} resource.
+     * @default "main"
+     */
+    branch?: string | PostgresBranch;
+    /**
+     * Time to live in seconds.
+     */
+    ttl?: number;
+    /**
+     * Roles to inherit from. Either a list of built-in role names, or
+     * another {@link PostgresRole} resource (whose `inheritedRoles` are reused).
+     */
+    inheritedRoles: InheritedRole[] | PostgresRole;
+    /**
+     * Successor role to reassign ownership to before dropping. Used during
+     * delete.
+     * @default "postgres"
+     */
+    successor?: string | PostgresRole;
+}
+/**
+ * Output attributes of a deployed PlanetScale role.
+ */
+export interface PostgresRoleAttributes {
+    /** Unique identifier for the role (stable). */
+    id: string;
+    /** The Postgres role name (assigned by PlanetScale). */
+    name: string;
+    /** ISO 8601 timestamp at which the role expires. */
+    expiresAt: string | null;
+    /** Hostname for the database connection. */
+    host: string;
+    /** Username for database authentication. */
+    username: string;
+    /** Password for database authentication (Redacted). */
+    password: Redacted.Redacted<string>;
+    /** The database name. */
+    database: string;
+    /** The Postgres database name inside the branch. */
+    databaseName: string;
+    /** Parsed connection components ready to feed into Cloudflare Hyperdrive. */
+    origin: PostgresOrigin;
+    /** Direct connection URL for the database (Redacted). */
+    connectionUrl: Redacted.Redacted<string>;
+    /** Pooled connection URL via PSBouncer (port 6432, Redacted). */
+    connectionUrlPooled: Redacted.Redacted<string>;
+    /** Inherited roles. */
+    inheritedRoles: InheritedRole[];
+    /** The successor role used during delete. */
+    successor: string;
+    /** Resolved organization slug. */
+    organization: string;
+    /** Resolved branch name. */
+    branch: string;
+    /** Time-to-live for the role in seconds. */
+    ttl: number | null;
+}
+/**
+ * A PlanetScale role for accessing a PostgreSQL database branch.
+ *
+ * For MySQL databases, use {@link MySQLPassword} instead.
+ *
+ * @section Creating a Role
+ * @example Postgres admin role
+ * ```typescript
+ * const admin = yield* Planetscale.PostgresRole("Admin", {
+ *   database: "my-db",
+ *   inheritedRoles: ["postgres"],
+ * });
+ * ```
+ *
+ * @example Read-only role
+ * ```typescript
+ * const reader = yield* Planetscale.PostgresRole("Reader", {
+ *   database: "my-db",
+ *   inheritedRoles: ["pg_read_all_data", "pg_read_all_settings"],
+ * });
+ * ```
+ *
+ * @example Role with TTL
+ * ```typescript
+ * const tempReader = yield* Planetscale.PostgresRole("TempReader", {
+ *   database: "my-db",
+ *   inheritedRoles: ["pg_read_all_data"],
+ *   ttl: 3600,
+ * });
+ * ```
+ */
+export type PostgresRole = Resource<"Planetscale.PostgresRole", PostgresRoleProps, PostgresRoleAttributes, never, Providers>;
+export declare const PostgresRole: import("../../Resource.ts").ResourceClass<PostgresRole>;
+export declare const PostgresRoleProvider: () => import("effect/Layer").Layer<Provider.Provider<PostgresRole>, never, import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Credentials>;
+//# sourceMappingURL=PostgresRole.d.ts.map

package/lib/Planetscale/Postgres/PostgresRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresRole.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAGvE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAMjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,eAAe,GACf,wBAAwB,GACxB,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,6BAA6B,GAC7B,mBAAmB,GACnB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAiBlB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAEjC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,cAAc,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC;IAE/C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,MAAM,EAAE,cAAc,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,iEAAiE;IACjE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,uBAAuB;IACvB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,CACjC,0BAA0B,EAC1B,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,YAAY,yDAAqD,CAAC;AA0G/E,eAAO,MAAM,oBAAoB,2JA+L9B,CAAC"}

package/lib/Planetscale/Postgres/PostgresRole.js

@@ -0,0 +1,228 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { deepEqual, isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { isKnownError, PlanetscaleConflict, waitForBranchReady, } from "../Util.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+export const PostgresRole = Resource("Planetscale.PostgresRole");
+const resolveDatabaseName = (database) => {
+    const ref = database;
+    return typeof ref === "string" ? ref : ref.name;
+};
+const resolveDatabaseOrg = (database) => {
+    const ref = database;
+    return typeof ref === "string" ? undefined : ref.organization;
+};
+const resolveBranchName = (branch) => {
+    const ref = branch;
+    return !ref ? "main" : typeof ref === "string" ? ref : ref.name;
+};
+const resolveSuccessorName = (successor) => {
+    const ref = successor;
+    return !ref ? "postgres" : typeof ref === "string" ? ref : ref.name;
+};
+const resolveInheritedRoles = (inheritedRoles) => {
+    if (Array.isArray(inheritedRoles)) {
+        return inheritedRoles;
+    }
+    // At runtime, a Role passed in is its resolved attributes (with
+    // `inheritedRoles` as a plain array); statically `Role.inheritedRoles`
+    // is `Output<InheritedRole[]>`.
+    return inheritedRoles.inheritedRoles;
+};
+const resolveName = (id, name) => Effect.gen(function* () {
+    return (name ??
+        (yield* createPhysicalName({ id, lowercase: true, maxLength: 63 })));
+});
+const buildAttributes = (role, password, context) => {
+    const passwordValue = Redacted.value(password);
+    const connectionUrl = `postgresql://${role.username}:${passwordValue}@${role.access_host_url}:5432/${role.database_name}?sslmode=verify-full`;
+    const connectionUrlPooled = `postgresql://${role.username}:${passwordValue}@${role.access_host_url}:6432/${role.database_name}?sslmode=verify-full`;
+    return {
+        id: role.id,
+        name: role.name,
+        expiresAt: role.expires_at,
+        host: role.access_host_url,
+        username: role.username,
+        password,
+        connectionUrl: Redacted.make(connectionUrl),
+        connectionUrlPooled: Redacted.make(connectionUrlPooled),
+        inheritedRoles: context.inheritedRoles,
+        successor: context.successor,
+        organization: context.organization,
+        database: context.database,
+        databaseName: role.database_name,
+        origin: {
+            scheme: "postgres",
+            host: role.access_host_url,
+            port: 5432,
+            database: role.database_name,
+            user: role.username,
+            password,
+        },
+        branch: context.branch,
+        ttl: role.ttl,
+    };
+};
+export const PostgresRoleProvider = () => Provider.effect(PostgresRole, Effect.gen(function* () {
+    const createRole = yield* ops.createRole;
+    const deleteRole = yield* ops.deleteRole;
+    const updateRole = yield* ops.updateRole;
+    const getRole = yield* ops.getRole;
+    const getBranch = yield* ops.getBranch;
+    return {
+        stables: ["id"],
+        diff: Effect.fn(function* ({ id, news, olds, output }) {
+            if (!isResolved(news))
+                return undefined;
+            // Successor is the only updatable property — everything else
+            // requires replacement.
+            if (news.ttl !== olds.ttl) {
+                return { action: "replace" };
+            }
+            const newDb = resolveDatabaseName(news.database);
+            const oldDb = olds.database
+                ? resolveDatabaseName(olds.database)
+                : undefined;
+            if (oldDb && newDb !== oldDb) {
+                return { action: "replace" };
+            }
+            const newBranch = resolveBranchName(news.branch);
+            const oldBranch = resolveBranchName(olds.branch);
+            if (newBranch !== oldBranch) {
+                return { action: "replace" };
+            }
+            const newRoles = resolveInheritedRoles(news.inheritedRoles);
+            const oldRoles = output?.inheritedRoles ?? [];
+            if (!deepEqual(newRoles, oldRoles)) {
+                return { action: "replace" };
+            }
+            const oldName = output?.name ?? (yield* resolveName(id, olds?.name));
+            const newName = yield* resolveName(id, news.name);
+            if (newName !== oldName) {
+                return { action: "update" };
+            }
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (!output?.id)
+                return undefined;
+            return yield* getRole({
+                branch: output.branch,
+                database: output.database,
+                organization: output.organization,
+                id: output.id,
+            }).pipe(Effect.map((token) => buildAttributes(token, output.password, {
+                inheritedRoles: token.inherited_roles,
+                successor: output.successor,
+                organization: output.organization,
+                database: output.database,
+                branch: token.branch.name,
+            })), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output }) {
+            const { organization: envOrg } = yield* Credentials;
+            const organization = resolveDatabaseOrg(news.database) ?? envOrg;
+            const databaseName = resolveDatabaseName(news.database);
+            const branchName = resolveBranchName(news.branch);
+            const inheritedRoles = resolveInheritedRoles(news.inheritedRoles);
+            const successor = resolveSuccessorName(news.successor);
+            const desiredName = yield* resolveName(id, news.name);
+            // 1. Observe — fetch live state if we know the role id. Roles
+            //    can only be looked up by id; without a cached id there is
+            //    no way to find the live role, so we fall through to ensure.
+            const observed = output?.id
+                ? yield* getRole({
+                    id: output.id,
+                    branch: branchName,
+                    organization,
+                    database: databaseName,
+                }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)))
+                : undefined;
+            // 2. Ensure — create if missing. Single branch covers both
+            //    greenfield (no output) and out-of-band-deletion (output
+            //    cached but cloud lost it). The latter is structurally a
+            //    rotation: the new role has fresh id/host/username/plaintext
+            //    that propagate downstream through the dependency graph.
+            //    There is no path to recover the original plaintext, so
+            //    recreating is the only way to converge.
+            //
+            //    Planetscale returns the plaintext password value exactly
+            //    once on create; on an observe-hit we re-use the cached
+            //    plaintext from output (which is why adoption requires
+            //    pre-existing state — see `read`).
+            let live;
+            let plaintext;
+            if (observed) {
+                live = observed;
+                plaintext = output.password;
+            }
+            else {
+                const branchInfo = yield* getBranch({
+                    organization,
+                    database: databaseName,
+                    branch: branchName,
+                });
+                if (branchInfo.kind !== "postgresql") {
+                    return yield* Effect.fail(new PlanetscaleConflict({
+                        message: `Cannot create a Role on MySQL database "${databaseName}". Roles are only supported on PostgreSQL. Use Password for MySQL.`,
+                    }));
+                }
+                if (!branchInfo.ready) {
+                    yield* waitForBranchReady(organization, databaseName, branchName);
+                }
+                const created = yield* createRole({
+                    name: desiredName,
+                    branch: branchName,
+                    organization,
+                    database: databaseName,
+                    ttl: news.ttl,
+                    inherited_roles: inheritedRoles,
+                });
+                if (!created.password) {
+                    return yield* Effect.die(`Planetscale did not return a password for Role "${desiredName}".`);
+                }
+                plaintext = created.password;
+                live = created;
+            }
+            // 3. Sync — only `name` is mutable in place; diff observed
+            //    against desired and skip the API call when nothing
+            //    changed. Everything else triggers a replace via diff().
+            if (live.name !== desiredName) {
+                live = yield* updateRole({
+                    id: live.id,
+                    branch: branchName,
+                    organization,
+                    database: databaseName,
+                    name: desiredName,
+                });
+            }
+            // 4. Return — fresh attrs sourced from observed cloud state,
+            //    with cached or freshly-issued plaintext.
+            return buildAttributes(live, plaintext, {
+                inheritedRoles: live.inherited_roles,
+                successor,
+                organization,
+                database: databaseName,
+                branch: branchName,
+            });
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* deleteRole({
+                organization: output.organization,
+                database: output.database,
+                branch: output.branch,
+                id: output.id,
+                successor: output.successor,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.void), 
+            // 422 (UnprocessableEntity): role is still referenced. Log a
+            // warning rather than failing — the role will be cleaned up
+            // when the database/branch is deleted.
+            Effect.catchIf(isKnownError("UnprocessableEntity", "Role is still referenced and cannot be dropped."), () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=PostgresRole.js.map

package/lib/Planetscale/Postgres/PostgresRole.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresRole.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvE,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AA2J3D,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAe,0BAA0B,CAAC,CAAC;AAQ/E,MAAM,mBAAmB,GAAG,CAAC,QAAmC,EAAU,EAAE;IAC1E,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAmC,EACf,EAAE;IACtB,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAA2C,EACnC,EAAE;IACV,MAAM,GAAG,GAAG,MAA0C,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,SAA4C,EACpC,EAAE;IACV,MAAM,GAAG,GAAG,SAA2C,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,cAA8C,EAC7B,EAAE;IACnB,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,gEAAgE;IAChE,uEAAuE;IACvE,gCAAgC;IAChC,OACE,cACD,CAAC,cAAc,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAC3D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,CACL,IAAI;QACJ,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CACtB,IAQC,EACD,QAAmC,EACnC,OAMC,EACuB,EAAE;IAC1B,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,aAAa,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;IAC9I,MAAM,mBAAmB,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,aAAa,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;IAEpJ,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,IAAI,EAAE,IAAI,CAAC,eAAe;QAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ;QACR,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QAC3C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACvD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,MAAM,EAAE;YACN,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,IAAI,CAAC,eAAe;YAC1B,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,QAAQ;SACT;QACD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,EAAE,CACvC,QAAQ,CAAC,MAAM,CACb,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IAEvC,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,CAAC;QAEf,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAExC,6DAA6D;YAC7D,wBAAwB;YACxB,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;gBACzB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAElD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;YACvC,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,EAAE;gBAAE,OAAO,SAAS,CAAC;YAElC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,EAAE,EAAE,MAAM,CAAC,EAAE;aACd,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACtC,cAAc,EAAE,KAAK,CAAC,eAAkC;gBACxD,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;aAC1B,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAC7D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAClD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;YACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtD,8DAA8D;YAC9D,+DAA+D;YAC/D,iEAAiE;YACjE,MAAM,QAAQ,GAAG,MAAM,EAAE,EAAE;gBACzB,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;oBACb,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,MAAM,EAAE,UAAU;oBAClB,YAAY;oBACZ,QAAQ,EAAE,YAAY;iBACvB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,2DAA2D;YAC3D,6DAA6D;YAC7D,6DAA6D;YAC7D,iEAAiE;YACjE,6DAA6D;YAC7D,4DAA4D;YAC5D,6CAA6C;YAC7C,EAAE;YACF,8DAA8D;YAC9D,4DAA4D;YAC5D,2DAA2D;YAC3D,uCAAuC;YACvC,IAAI,IAA8C,CAAC;YACnD,IAAI,SAAoC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,GAAG,QAAQ,CAAC;gBAChB,SAAS,GAAG,MAAO,CAAC,QAAQ,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;oBAClC,YAAY;oBACZ,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACrC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;wBACtB,OAAO,EAAE,2CAA2C,YAAY,oEAAoE;qBACrI,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtB,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;oBAChC,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,UAAU;oBAClB,YAAY;oBACZ,QAAQ,EAAE,YAAY;oBACtB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,eAAe,EAAE,cAAoC;iBACtD,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACtB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,mDAAmD,WAAW,IAAI,CACnE,CAAC;gBACJ,CAAC;gBACD,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC7B,IAAI,GAAG,OAAO,CAAC;YACjB,CAAC;YAED,2DAA2D;YAC3D,wDAAwD;YACxD,6DAA6D;YAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;oBACvB,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,MAAM,EAAE,UAAU;oBAClB,YAAY;oBACZ,QAAQ,EAAE,YAAY;oBACtB,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;YAED,6DAA6D;YAC7D,8CAA8C;YAC9C,OAAO,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE;gBACtC,cAAc,EAAE,IAAI,CAAC,eAAkC;gBACvD,SAAS;gBACT,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,UAAU,CAAC;gBAChB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9C,6DAA6D;YAC7D,4DAA4D;YAC5D,uCAAuC;YACvC,MAAM,CAAC,OAAO,CACZ,YAAY,CACV,qBAAqB,EACrB,iDAAiD,CAClD,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Planetscale/Postgres/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./PostgresClusterSize.ts";
+export * from "./PostgresBranch.ts";
+export * from "./PostgresDatabase.ts";
+export * from "./PostgresDefaultRole.ts";
+export * from "./PostgresOrigin.ts";
+export * from "./PostgresRole.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/Planetscale/Postgres/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}

package/lib/Planetscale/Postgres/index.js

@@ -0,0 +1,7 @@
+export * from "./PostgresClusterSize.js";
+export * from "./PostgresBranch.js";
+export * from "./PostgresDatabase.js";
+export * from "./PostgresDefaultRole.js";
+export * from "./PostgresOrigin.js";
+export * from "./PostgresRole.js";
+//# sourceMappingURL=index.js.map

package/lib/Planetscale/Postgres/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}

package/lib/Planetscale/Providers.d.ts

@@ -0,0 +1,25 @@
+import * as Layer from "effect/Layer";
+import * as Provider from "../Provider.ts";
+import type { StackServices } from "../Stack.ts";
+import * as Credentials from "./Credentials.ts";
+declare const Providers_base: Provider.ProviderCollection<Providers, "Planetscale">;
+/**
+ * Service tag bundling all PlanetScale providers + auth + credentials. Use
+ * `Planetscale.providers()` to materialize the full layer.
+ */
+export declare class Providers extends Providers_base {
+}
+export type ProviderRequirements = Layer.Services<ReturnType<typeof providers>>;
+/**
+ * Build the complete PlanetScale providers Layer. Provide this on a Stack
+ * (or via `Effect.provide` at test time) to enable all PlanetScale
+ * resources, the AuthProvider registration, and credential resolution.
+ *
+ * @example
+ * ```ts
+ * Effect.provide(Planetscale.providers())
+ * ```
+ */
+export declare const providers: () => Layer.Layer<Providers | Credentials.Credentials, never, StackServices>;
+export {};
+//# sourceMappingURL=Providers.d.ts.map

package/lib/Planetscale/Providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Providers.d.ts","sourceRoot":"","sources":["../../src/Planetscale/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAItC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;;AAkBhD;;;GAGG;AACH,qBAAa,SAAU,SAAQ,cAE9B;CAAG;AAEJ,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AAEhF;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,QAAO,KAAK,CAAC,KAAK,CACtC,SAAS,GAAG,WAAW,CAAC,WAAW,EACnC,KAAK,EACL,aAAa,CA+B8D,CAAC"}