alchemy 2.0.0-beta.42 → 2.0.0-beta.44

package/lib/Planetscale/Postgres/PostgresDatabase.d.ts

@@ -0,0 +1,73 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import { type PostgresClusterSize } from "./PostgresClusterSize.ts";
+import type { BaseDatabaseAttributes, BaseDatabaseProps } from "../Database.ts";
+import type { Providers } from "../Providers.ts";
+/**
+ * Properties for creating or updating a PostgreSQL PlanetScale database.
+ */
+export interface PostgresDatabaseProps extends BaseDatabaseProps {
+    /**
+     * The PostgreSQL database cluster size. Required.
+     * Short sizes are expanded using the target region and architecture.
+     * @see https://planetscale.com/docs/postgres/pricing
+     */
+    clusterSize: PostgresClusterSize;
+    /**
+     * PostgreSQL major version. Defaults to the latest available major
+     * version.
+     */
+    majorVersion?: string;
+    /**
+     * CPU architecture. Cannot be changed after creation.
+     * @default "x86"
+     */
+    arch?: "x86" | "arm";
+}
+/**
+ * Output attributes of a deployed PostgreSQL PlanetScale database.
+ */
+export interface PostgresDatabaseAttributes extends BaseDatabaseAttributes {
+    /** Engine kind discriminator. */
+    kind: "postgresql";
+    /** PostgreSQL CPU architecture. */
+    arch: "x86" | "arm";
+}
+/**
+ * A PostgreSQL PlanetScale database. For MySQL, use {@link MySQLDatabase}
+ * instead.
+ *
+ * @section Creating a PostgreSQL Database
+ * @example Basic PostgreSQL database
+ * ```typescript
+ * const db = yield* Planetscale.PostgresDatabase("MyDb", {
+ *   clusterSize: "PS_10",
+ * });
+ * ```
+ *
+ * @section Migrations and seed data
+ * @example Apply migrations and seed files
+ * ```typescript
+ * const db = yield* Planetscale.PostgresDatabase("MyDb", {
+ *   clusterSize: "PS_10",
+ *   migrationsDir: "./migrations/postgres",
+ *   importFiles: ["./seed/postgres.sql"],
+ * });
+ * ```
+ *
+ * @section Adoption
+ * @example Adopting an existing database
+ * ```typescript
+ * import { adopt } from "alchemy/AdoptPolicy";
+ *
+ * const db = yield* Planetscale.PostgresDatabase("Existing", {
+ *   name: "existing-db",
+ *   clusterSize: "PS_10",
+ * }).pipe(adopt());
+ * ```
+ */
+export type PostgresDatabase = Resource<"Planetscale.PostgresDatabase", PostgresDatabaseProps, PostgresDatabaseAttributes, never, Providers>;
+export declare const PostgresDatabase: import("../../Resource.ts").ResourceClass<PostgresDatabase>;
+export declare const PostgresDatabaseProvider: () => import("effect/Layer").Layer<Provider.Provider<PostgresDatabase>, never, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Credentials>;
+//# sourceMappingURL=PostgresDatabase.d.ts.map

package/lib/Planetscale/Postgres/PostgresDatabase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDatabase.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresDatabase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAKvE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMhF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AASjD;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D;;;;OAIG;IACH,WAAW,EAAE,mBAAmB,CAAC;IAEjC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,iCAAiC;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,mCAAmC;IACnC,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,8BAA8B,EAC9B,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,gBAAgB,6DAE5B,CAAC;AAUF,eAAO,MAAM,wBAAwB,qOAiSlC,CAAC"}

package/lib/Planetscale/Postgres/PostgresDatabase.js

@@ -0,0 +1,241 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { ensurePostgresProductionBranchClusterSize, toPostgresClusterSku, } from "./PostgresClusterSize.js";
+import { runPostgresImports, runPostgresMigrations, } from "./PostgresMigrations.js";
+import { hashImports, hashMigrations } from "../../Sql/SqlFile.js";
+import { DEFAULT_MIGRATIONS_TABLE, PlanetscaleConflict, recordsEqual, waitForBranchReady, waitForDatabaseReady, } from "../Util.js";
+export const PostgresDatabase = Resource("Planetscale.PostgresDatabase");
+const createDatabaseName = (id, name) => Effect.gen(function* () {
+    return (name ??
+        (yield* createPhysicalName({ id, lowercase: true, maxLength: 63 })));
+});
+export const PostgresDatabaseProvider = () => Provider.effect(PostgresDatabase, Effect.gen(function* () {
+    const rootDir = yield* Effect.sync(() => process.cwd());
+    const createDb = yield* ops.createDatabase;
+    const getDb = yield* ops.getDatabase;
+    const updateSettings = yield* ops.updateDatabaseSettings;
+    const deleteDb = yield* ops.deleteDatabase;
+    const getBr = yield* ops.getBranch;
+    const createBr = yield* ops.createBranch;
+    return {
+        stables: ["id", "organization", "kind", "region"],
+        diff: Effect.fn(function* ({ news, olds, output }) {
+            if (!isResolved(news))
+                return undefined;
+            if (news.region?.slug &&
+                output?.region?.slug &&
+                news.region.slug !== output.region.slug) {
+                return { action: "replace" };
+            }
+            if (news.replicas !== olds.replicas) {
+                return { action: "replace" };
+            }
+            const oldArch = output?.arch ?? olds.arch ?? "x86";
+            if (news.arch && news.arch !== oldArch) {
+                return { action: "replace" };
+            }
+            if (news.migrationsDir) {
+                const newHashes = yield* hashMigrations(news.migrationsDir);
+                if (!recordsEqual(newHashes, output?.migrationsHashes ?? {})) {
+                    return { action: "update" };
+                }
+                if ((news.migrationsTable ?? DEFAULT_MIGRATIONS_TABLE) !==
+                    (output?.migrationsTable ?? DEFAULT_MIGRATIONS_TABLE)) {
+                    return { action: "update" };
+                }
+            }
+            if (news.importFiles?.length) {
+                const newHashes = yield* hashImports(news.importFiles, rootDir);
+                if (!recordsEqual(newHashes, output?.importHashes ?? {})) {
+                    return { action: "update" };
+                }
+            }
+            // Otherwise allow the engine to apply the default update logic.
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ id, output, olds }) {
+            const { organization } = yield* Credentials;
+            const databaseName = output?.name ?? (yield* createDatabaseName(id, olds?.name));
+            const data = yield* getDb({
+                organization,
+                database: databaseName,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+            if (!data)
+                return undefined;
+            if (data.kind !== "postgresql") {
+                return yield* Effect.fail(new PlanetscaleConflict({
+                    message: `Planetscale database "${data.name}" has kind "${data.kind}" but this resource ` +
+                        `is a PostgresDatabase. Use Planetscale.${data.kind === "mysql" ? "MySQLDatabase" : data.kind}() instead, ` +
+                        `or delete the existing database and retry.`,
+                }));
+            }
+            const defaultBranch = data.default_branch ?? "main";
+            // Observe `arch` and `clusterSize` from the default branch rather
+            // than echoing input.
+            const branch = yield* getBr({
+                organization,
+                database: data.name,
+                branch: defaultBranch,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+            const arch = branch.cluster_architecture === "aarch64" ? "arm" : "x86";
+            const clusterSize = branch.cluster_name;
+            return {
+                id: data.id,
+                name: data.name,
+                organization,
+                state: data.state,
+                defaultBranch,
+                plan: data.plan ?? "hobby",
+                createdAt: data.created_at,
+                updatedAt: data.updated_at,
+                htmlUrl: data.html_url,
+                region: { slug: data.region.slug },
+                migrationsDir: output?.migrationsDir ?? olds?.migrationsDir,
+                migrationsTable: output?.migrationsTable ?? olds?.migrationsTable,
+                migrationsHashes: output?.migrationsHashes ?? {},
+                importHashes: output?.importHashes ?? {},
+                kind: "postgresql",
+                clusterSize,
+                arch,
+                requireApprovalForDeploy: data.require_approval_for_deploy ?? false,
+                restrictBranchRegion: data.restrict_branch_region ?? false,
+                productionBranchWebConsole: data.production_branch_web_console ?? false,
+            };
+        }),
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const { organization } = yield* Credentials;
+            const newName = yield* createDatabaseName(id, news.name);
+            const clusterSize = toPostgresClusterSku({
+                size: news.clusterSize,
+                arch: news.arch,
+                region: news.region?.slug,
+            });
+            // Observe — read live state under either the cached name (rename
+            // / refresh) or the freshly-derived name (greenfield). Observing
+            // unconditionally absorbs the race between `read` and `reconcile`
+            // — if a foreign actor (or a previously-failed-to-persist
+            // create) produced a database under the desired name in the
+            // meantime, we'll find it here and skip the duplicate create.
+            // Adoption routing has already been gated by `read` returning
+            // `Unowned`, so by the time we reach reconcile any observed
+            // database is fair game.
+            const observedName = output?.name ?? newName;
+            let observed = yield* getDb({
+                organization,
+                database: observedName,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+            // Ensure — if missing, create.
+            if (!observed) {
+                yield* session.note("Creating database...");
+                observed = yield* createDb({
+                    organization,
+                    name: newName,
+                    region: news.region?.slug,
+                    kind: "postgresql",
+                    cluster_size: clusterSize,
+                    replicas: news.replicas,
+                    major_version: news.majorVersion,
+                });
+            }
+            // Wait for the database to finish provisioning before any
+            // downstream sync runs. PlanetScale reports `state: "pending"`
+            // for a while after createDatabase returns, during which branch
+            // operations on this database (including our own settings PATCH)
+            // race against the provisioning fiber.
+            yield* waitForDatabaseReady(organization, observed.name, session);
+            if (observed.kind !== "postgresql") {
+                return yield* Effect.fail(new PlanetscaleConflict({
+                    message: `Planetscale database "${observed.name}" has kind "${observed.kind}" but this resource ` +
+                        `is a PostgresDatabase. Use Planetscale.${observed.kind === "mysql" ? "MySQLDatabase" : observed.kind}() instead, ` +
+                        `or delete the existing database and retry.`,
+                }));
+            }
+            // Sync — ensure a non-`main` default branch exists before
+            // referencing it via `default_branch`. The branch is created
+            // empty (no cluster size yet); we'll size it below.
+            if (news.defaultBranch && news.defaultBranch !== "main") {
+                yield* waitForDatabaseReady(organization, observed.name, session);
+                const branchExists = yield* getBr({
+                    organization,
+                    database: observed.name,
+                    branch: news.defaultBranch,
+                }).pipe(Effect.map(() => true), Effect.catchTag("NotFound", () => Effect.succeed(false)));
+                if (!branchExists) {
+                    yield* createBr({
+                        organization,
+                        database: observed.name,
+                        name: news.defaultBranch,
+                        parent_branch: "main",
+                    });
+                }
+            }
+            // Sync settings — `updateSettings` is upsert-shaped, so we can
+            // call it with the full desired payload on every reconcile.
+            // Folds the rename in via `new_name` so we don't pay for a
+            // separate PATCH.
+            const updated = yield* updateSettings({
+                organization,
+                database: observed.name,
+                new_name: newName !== observed.name ? newName : undefined,
+                require_approval_for_deploy: news.requireApprovalForDeploy,
+                restrict_branch_region: news.restrictBranchRegion,
+                production_branch_web_console: news.productionBranchWebConsole,
+                default_branch: news.defaultBranch,
+            });
+            // Sync cluster size on the active default branch.
+            const branch = news.defaultBranch ?? updated.default_branch ?? "main";
+            yield* ensurePostgresProductionBranchClusterSize(organization, updated.name, branch, news.clusterSize);
+            const migrationTarget = {
+                organization,
+                database: updated.name,
+                branch,
+            };
+            if (news.migrationsDir || news.importFiles?.length) {
+                yield* waitForBranchReady(organization, updated.name, branch, session);
+            }
+            const migrationsTable = news.migrationsTable ??
+                output?.migrationsTable ??
+                DEFAULT_MIGRATIONS_TABLE;
+            const migrationsHashes = news.migrationsDir
+                ? yield* runPostgresMigrations(migrationTarget, news.migrationsDir, migrationsTable)
+                : (output?.migrationsHashes ?? {});
+            const importHashes = news.importFiles?.length
+                ? yield* runPostgresImports(migrationTarget, news.importFiles, rootDir, output?.importHashes ?? {})
+                : {};
+            return {
+                id: updated.id,
+                name: updated.name,
+                organization,
+                state: updated.state,
+                defaultBranch: updated.default_branch ?? branch,
+                plan: updated.plan ?? output?.plan ?? "hobby",
+                createdAt: updated.created_at,
+                updatedAt: updated.updated_at,
+                htmlUrl: updated.html_url,
+                region: { slug: updated.region.slug },
+                kind: "postgresql",
+                clusterSize: clusterSize,
+                migrationsDir: news.migrationsDir,
+                migrationsTable: news.migrationsDir ? migrationsTable : undefined,
+                migrationsHashes,
+                importHashes,
+                arch: news.arch ?? output?.arch ?? "x86",
+                requireApprovalForDeploy: updated.require_approval_for_deploy ?? false,
+                restrictBranchRegion: updated.restrict_branch_region ?? false,
+                productionBranchWebConsole: updated.production_branch_web_console ?? false,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* deleteDb({
+                organization: output.organization,
+                database: output.name,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=PostgresDatabase.js.map

package/lib/Planetscale/Postgres/PostgresDatabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDatabase.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresDatabase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvE,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EACL,yCAAyC,EACzC,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEnE,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AA6EpB,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CACtC,8BAA8B,CAC/B,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,CACL,IAAI;QACJ,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,QAAQ,CAAC,MAAM,CACb,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IACrC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IAEzC,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC;QAEjD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAExC,IACE,IAAI,CAAC,MAAM,EAAE,IAAI;gBACjB,MAAM,EAAE,MAAM,EAAE,IAAI;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EACvC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;YACnD,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACvC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC5D,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;gBACD,IACE,CAAC,IAAI,CAAC,eAAe,IAAI,wBAAwB,CAAC;oBAClD,CAAC,MAAM,EAAE,eAAe,IAAI,wBAAwB,CAAC,EACrD,CAAC;oBACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAChE,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;oBACzD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,gEAAgE;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC7C,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YAC5C,MAAM,YAAY,GAChB,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAE9D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;gBACxB,YAAY;gBACZ,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtE,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;oBACtB,OAAO,EACL,yBAAyB,IAAI,CAAC,IAAI,eAAe,IAAI,CAAC,IAAI,sBAAsB;wBAChF,0CAA0C,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,cAAc;wBAC3G,4CAA4C;iBAC/C,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;YAEpD,kEAAkE;YAClE,sBAAsB;YACtB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;gBAC1B,YAAY;gBACZ,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtE,MAAM,IAAI,GACR,MAAO,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7D,MAAM,WAAW,GAAG,MAAO,CAAC,YAAY,CAAC;YAEzC,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,aAAa;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAClC,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,IAAI,EAAE,aAAa;gBAC3D,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI,EAAE,eAAe;gBACjE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;gBAChD,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE;gBACxC,IAAI,EAAE,YAAqB;gBAC3B,WAAW;gBACX,IAAI;gBACJ,wBAAwB,EAAE,IAAI,CAAC,2BAA2B,IAAI,KAAK;gBACnE,oBAAoB,EAAE,IAAI,CAAC,sBAAsB,IAAI,KAAK;gBAC1D,0BAA0B,EACxB,IAAI,CAAC,6BAA6B,IAAI,KAAK;aAC9C,CAAC;QACJ,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,oBAAoB,CAAC;gBACvC,IAAI,EAAE,IAAI,CAAC,WAAW;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;aAC1B,CAAC,CAAC;YAEH,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,0DAA0D;YAC1D,4DAA4D;YAC5D,8DAA8D;YAC9D,8DAA8D;YAC9D,4DAA4D;YAC5D,yBAAyB;YACzB,MAAM,YAAY,GAAG,MAAM,EAAE,IAAI,IAAI,OAAO,CAAC;YAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;gBAC1B,YAAY;gBACZ,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtE,+BAA+B;YAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBAC5C,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;oBACzB,YAAY;oBACZ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;oBACzB,IAAI,EAAE,YAAY;oBAClB,YAAY,EAAE,WAAW;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,aAAa,EAAE,IAAI,CAAC,YAAY;iBACjC,CAAC,CAAC;YACL,CAAC;YAED,0DAA0D;YAC1D,+DAA+D;YAC/D,gEAAgE;YAChE,iEAAiE;YACjE,uCAAuC;YACvC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAElE,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;oBACtB,OAAO,EACL,yBAAyB,QAAQ,CAAC,IAAI,eAAe,QAAQ,CAAC,IAAI,sBAAsB;wBACxF,0CAA0C,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,cAAc;wBACnH,4CAA4C;iBAC/C,CAAC,CACH,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,6DAA6D;YAC7D,oDAAoD;YACpD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;gBACxD,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;oBAChC,YAAY;oBACZ,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,MAAM,EAAE,IAAI,CAAC,aAAa;iBAC3B,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EACtB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACzD,CAAC;gBACF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,KAAK,CAAC,CAAC,QAAQ,CAAC;wBACd,YAAY;wBACZ,QAAQ,EAAE,QAAQ,CAAC,IAAI;wBACvB,IAAI,EAAE,IAAI,CAAC,aAAa;wBACxB,aAAa,EAAE,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,4DAA4D;YAC5D,2DAA2D;YAC3D,kBAAkB;YAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;gBACpC,YAAY;gBACZ,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACzD,2BAA2B,EAAE,IAAI,CAAC,wBAAwB;gBAC1D,sBAAsB,EAAE,IAAI,CAAC,oBAAoB;gBACjD,6BAA6B,EAAE,IAAI,CAAC,0BAA0B;gBAC9D,cAAc,EAAE,IAAI,CAAC,aAAa;aACnC,CAAC,CAAC;YAEH,kDAAkD;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;YACtE,KAAK,CAAC,CAAC,yCAAyC,CAC9C,YAAY,EACZ,OAAO,CAAC,IAAI,EACZ,MAAM,EACN,IAAI,CAAC,WAAW,CACjB,CAAC;YAEF,MAAM,eAAe,GAAG;gBACtB,YAAY;gBACZ,QAAQ,EAAE,OAAO,CAAC,IAAI;gBACtB,MAAM;aACP,CAAC;YACF,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBACnD,KAAK,CAAC,CAAC,kBAAkB,CACvB,YAAY,EACZ,OAAO,CAAC,IAAI,EACZ,MAAM,EACN,OAAO,CACR,CAAC;YACJ,CAAC;YACD,MAAM,eAAe,GACnB,IAAI,CAAC,eAAe;gBACpB,MAAM,EAAE,eAAe;gBACvB,wBAAwB,CAAC;YAC3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa;gBACzC,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAC1B,eAAe,EACf,IAAI,CAAC,aAAa,EAClB,eAAe,CAChB;gBACH,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM;gBAC3C,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CACvB,eAAe,EACf,IAAI,CAAC,WAAW,EAChB,OAAO,EACP,MAAM,EAAE,YAAY,IAAI,EAAE,CAC3B;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY;gBACZ,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM;gBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,IAAI,IAAI,OAAO;gBAC7C,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ;gBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,YAAqB;gBAC3B,WAAW,EAAE,WAAW;gBACxB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;gBACjE,gBAAgB;gBAChB,YAAY;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,EAAE,IAAI,IAAI,KAAK;gBACxC,wBAAwB,EACtB,OAAO,CAAC,2BAA2B,IAAI,KAAK;gBAC9C,oBAAoB,EAAE,OAAO,CAAC,sBAAsB,IAAI,KAAK;gBAC7D,0BAA0B,EACxB,OAAO,CAAC,6BAA6B,IAAI,KAAK;aACZ,CAAC;QACzC,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,QAAQ,CAAC;gBACd,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,IAAI;aACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Planetscale/Postgres/PostgresDefaultRole.d.ts

@@ -0,0 +1,85 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { PostgresBranch } from "./PostgresBranch.ts";
+import type { PostgresDatabase } from "./PostgresDatabase.ts";
+import type { InheritedRole } from "./PostgresRole.ts";
+/**
+ * Properties for creating or updating the default PlanetScale PostgreSQL
+ * role for a branch.
+ *
+ * Default roles are only meant for PostgreSQL databases. For MySQL,
+ * use {@link MySQLPassword} instead.
+ */
+export interface PostgresDefaultRoleProps {
+    /**
+     * PostgreSQL database — string name or {@link PostgresDatabase} resource.
+     */
+    database: string | PostgresDatabase;
+    /**
+     * Branch — string name or {@link PostgresBranch} resource.
+     * @default "main"
+     */
+    branch?: string | PostgresBranch;
+    /**
+     * Whether to force-reset the default role if it already exists.
+     * Adopting an existing default role is not supported because the
+     * password is only returned at create time.
+     * @default false
+     */
+    forceReset?: boolean;
+}
+/**
+ * Output attributes of a deployed PlanetScale default role.
+ */
+export interface PostgresDefaultRoleAttributes {
+    /** Unique identifier for the role (stable). */
+    id: string;
+    /** The Postgres role name. */
+    name: string;
+    /** ISO 8601 timestamp at which the role expires. */
+    expiresAt: string | null;
+    /** Hostname for the database connection. */
+    host: string;
+    /** Username for database authentication. */
+    username: string;
+    /** Password for database authentication (Redacted). */
+    password: Redacted.Redacted<string>;
+    /** TTL in seconds (if set). */
+    ttl: number | null;
+    /** The database name. */
+    databaseName: string;
+    /** Direct connection URL for the database (Redacted). */
+    connectionUrl: Redacted.Redacted<string>;
+    /** Pooled connection URL via PSBouncer (Redacted). */
+    connectionUrlPooled: Redacted.Redacted<string>;
+    /** Inherited roles. */
+    inheritedRoles: InheritedRole[];
+    /** Resolved organization slug. */
+    organization: string;
+    /** Resolved database name (for delete). */
+    database: string;
+    /** Resolved branch name. */
+    branch: string;
+}
+/**
+ * The default PlanetScale PostgreSQL role for a database branch.
+ *
+ * @section Creating a Default Role
+ * @example Default role on the main branch
+ * ```typescript
+ * const db = yield* Planetscale.PostgresDatabase("MyDb", {
+ *   clusterSize: "PS_10",
+ * });
+ * const defaultRole = yield* Planetscale.PostgresDefaultRole("MainRole", {
+ *   database: db,
+ *   forceReset: true,
+ * });
+ * ```
+ */
+export type PostgresDefaultRole = Resource<"Planetscale.PostgresDefaultRole", PostgresDefaultRoleProps, PostgresDefaultRoleAttributes, never, Providers>;
+export declare const PostgresDefaultRole: import("../../Resource.ts").ResourceClass<PostgresDefaultRole>;
+export declare const PostgresDefaultRoleProvider: () => import("effect/Layer").Layer<Provider.Provider<PostgresDefaultRole>, never, Credentials>;
+//# sourceMappingURL=PostgresDefaultRole.d.ts.map

package/lib/Planetscale/Postgres/PostgresDefaultRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDefaultRole.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresDefaultRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAGvE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAEjC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,+BAA+B;IAC/B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,yBAAyB;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,sDAAsD;IACtD,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,uBAAuB;IACvB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CACxC,iCAAiC,EACjC,wBAAwB,EACxB,6BAA6B,EAC7B,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,mBAAmB,gEAE/B,CAAC;AA0BF,eAAO,MAAM,2BAA2B,gGA+IrC,CAAC"}

package/lib/Planetscale/Postgres/PostgresDefaultRole.js

@@ -0,0 +1,142 @@
+import { Credentials } from "@distilled.cloud/planetscale/Credentials";
+import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { PlanetscaleConflict, waitForBranchReady } from "../Util.js";
+export const PostgresDefaultRole = Resource("Planetscale.PostgresDefaultRole");
+const resolveDatabaseName = (database) => {
+    const ref = database;
+    return typeof ref === "string" ? ref : ref.name;
+};
+const resolveDatabaseOrg = (database) => {
+    const ref = database;
+    return typeof ref === "string" ? undefined : ref.organization;
+};
+const resolveBranchName = (branch) => {
+    const ref = branch;
+    return !ref ? "main" : typeof ref === "string" ? ref : ref.name;
+};
+export const PostgresDefaultRoleProvider = () => Provider.effect(PostgresDefaultRole, Effect.gen(function* () {
+    const getDefault = yield* ops.getDefaultRole;
+    const resetDefault = yield* ops.resetDefaultRole;
+    return {
+        stables: ["id"],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            const newDb = resolveDatabaseName(news.database);
+            const oldDb = olds.database
+                ? resolveDatabaseName(olds.database)
+                : undefined;
+            if (oldDb && newDb !== oldDb) {
+                return { action: "replace" };
+            }
+            const newBranch = resolveBranchName(news.branch);
+            const oldBranch = resolveBranchName(olds.branch);
+            if (newBranch !== oldBranch) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        read: Effect.fn(function* ({ output }) {
+            // Adoption (no cached output) is impossible without destroying
+            // existing credentials. The engine routes adoption through
+            // `read`, but here we always defer to reconcile so the
+            // `forceReset` props flag remains the user-facing switch for
+            // takeover. Returning undefined makes the engine treat the
+            // resource as greenfield; reconcile then observes live state
+            // and either fails (no forceReset) or resets (forceReset).
+            if (!output)
+                return undefined;
+            // Refresh — verify the default role still exists and re-emit
+            // the persisted output (with plaintext intact). If gone,
+            // return undefined so the engine routes through reconcile,
+            // which will recreate via reset.
+            return yield* getDefault({
+                organization: output.organization,
+                database: output.database,
+                branch: output.branch,
+            }).pipe(Effect.map(() => output), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+        }),
+        reconcile: Effect.fn(function* ({ news, output }) {
+            const { organization: envOrg } = yield* Credentials;
+            const organization = resolveDatabaseOrg(news.database) ?? envOrg;
+            const databaseName = resolveDatabaseName(news.database);
+            const branchName = resolveBranchName(news.branch);
+            // 1. Observe — the default role is the singleton for this
+            //    (database, branch); we key on those rather than an id.
+            //    Observation runs unconditionally so the adoption guard
+            //    below fires on greenfield deploys against branches that
+            //    already have a default role (otherwise we would silently
+            //    `resetDefault` and destroy their credentials).
+            const observed = yield* getDefault({
+                organization,
+                database: databaseName,
+                branch: branchName,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+            // 2. Sync (no-op) — we own the role and it still exists in the
+            //    cloud. Default roles have nothing mutable in place: their
+            //    plaintext password isn't retrievable, so we re-emit the
+            //    persisted attributes unchanged. diff() forces a replace
+            //    when database/branch change.
+            if (output && observed) {
+                return output;
+            }
+            // 3. Adoption guard — observed exists but we have no prior
+            //    output (greenfield against a pre-existing default role).
+            //    Taking over requires a reset (which destroys the existing
+            //    password), so gate on an explicit forceReset opt-in.
+            if (observed && !news.forceReset) {
+                return yield* Effect.fail(new PlanetscaleConflict({
+                    message: `Default role already exists for database "${databaseName}" branch "${branchName}". Use forceReset: true to reset.`,
+                }));
+            }
+            // 4. Ensure — (re)create the default role. This branch runs
+            //    for greenfield (no output, no observed), drift recovery
+            //    (output cached but cloud state gone), and authorised
+            //    adoption (observed present + forceReset).
+            yield* waitForBranchReady(organization, databaseName, branchName);
+            const data = yield* resetDefault({
+                organization,
+                database: databaseName,
+                branch: branchName,
+            });
+            if (!data.password) {
+                return yield* Effect.die(`Planetscale did not return a password for Default Role.`);
+            }
+            const password = Redacted.isRedacted(data.password)
+                ? Redacted.value(data.password)
+                : data.password;
+            const connectionUrl = `postgresql://${data.username}:${password}@${data.access_host_url}:5432/${data.database_name}?sslmode=verify-full`;
+            const connectionUrlPooled = `postgresql://${data.username}:${password}@${data.access_host_url}:6432/${data.database_name}?sslmode=verify-full`;
+            return {
+                id: data.id,
+                name: data.name,
+                expiresAt: data.expires_at,
+                host: data.access_host_url,
+                username: data.username,
+                password: Redacted.make(password),
+                ttl: data.ttl,
+                databaseName: data.database_name,
+                connectionUrl: Redacted.make(connectionUrl),
+                connectionUrlPooled: Redacted.make(connectionUrlPooled),
+                inheritedRoles: data.inherited_roles,
+                organization,
+                database: databaseName,
+                branch: branchName,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            // No delete endpoint — reset to invalidate existing credentials.
+            yield* resetDefault({
+                organization: output.organization,
+                database: output.database,
+                branch: output.branch,
+            }).pipe(Effect.catchTag("NotFound", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=PostgresDefaultRole.js.map

package/lib/Planetscale/Postgres/PostgresDefaultRole.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDefaultRole.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresDefaultRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvE,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA0FrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CACzC,iCAAiC,CAClC,CAAC;AAOF,MAAM,mBAAmB,GAAG,CAAC,QAAmC,EAAU,EAAE;IAC1E,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAmC,EACf,EAAE;IACtB,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAA2C,EACnC,EAAE;IACV,MAAM,GAAG,GAAG,MAA0C,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,EAAE,CAC9C,QAAQ,CAAC,MAAM,CACb,mBAAmB,EACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,CAAC;QAEf,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAExC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;gBACzB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,+DAA+D;YAC/D,2DAA2D;YAC3D,uDAAuD;YACvD,6DAA6D;YAC7D,2DAA2D;YAC3D,6DAA6D;YAC7D,2DAA2D;YAC3D,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAE9B,6DAA6D;YAC7D,yDAAyD;YACzD,2DAA2D;YAC3D,iCAAiC;YACjC,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC9C,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;YACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAElD,0DAA0D;YAC1D,4DAA4D;YAC5D,4DAA4D;YAC5D,6DAA6D;YAC7D,8DAA8D;YAC9D,oDAAoD;YACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtE,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,6DAA6D;YAC7D,kCAAkC;YAClC,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACvB,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,2DAA2D;YAC3D,8DAA8D;YAC9D,+DAA+D;YAC/D,0DAA0D;YAC1D,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;oBACtB,OAAO,EAAE,6CAA6C,YAAY,aAAa,UAAU,mCAAmC;iBAC7H,CAAC,CACH,CAAC;YACJ,CAAC;YAED,4DAA4D;YAC5D,6DAA6D;YAC7D,0DAA0D;YAC1D,+CAA+C;YAC/C,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;gBAC/B,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC/B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAElB,MAAM,aAAa,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;YACzI,MAAM,mBAAmB,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;YAE/I,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,IAAI,EAAE,IAAI,CAAC,eAAe;gBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC3C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACvD,cAAc,EAAE,IAAI,CAAC,eAAkC;gBACvD,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACqB,CAAC;QAC5C,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,iEAAiE;YACjE,KAAK,CAAC,CAAC,YAAY,CAAC;gBAClB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Planetscale/Postgres/PostgresMigrations.d.ts

@@ -0,0 +1,18 @@
+import * as Effect from "effect/Effect";
+declare const PostgresMigrationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "Planetscale::PostgresMigrationError";
+} & Readonly<A>;
+export declare class PostgresMigrationError extends PostgresMigrationError_base<{
+    message: string;
+    cause?: unknown;
+}> {
+}
+export interface PostgresMigrationTarget {
+    organization: string;
+    database: string;
+    branch: string;
+}
+export declare const runPostgresMigrations: (target: PostgresMigrationTarget, migrationsDir: string, migrationsTable: string) => Effect.Effect<Record<string, string>, import("effect/PlatformError").PlatformError | import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden | PostgresMigrationError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("@distilled.cloud/planetscale/Credentials").Credentials>;
+export declare const runPostgresImports: (target: PostgresMigrationTarget, importFiles: ReadonlyArray<string>, rootDir: string, previous: Record<string, string>) => Effect.Effect<Record<string, string>, import("effect/PlatformError").PlatformError | import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden | PostgresMigrationError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("@distilled.cloud/planetscale/Credentials").Credentials>;
+export {};
+//# sourceMappingURL=PostgresMigrations.d.ts.map

package/lib/Planetscale/Postgres/PostgresMigrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresMigrations.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresMigrations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AAQxC,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;CAAG;AAEL,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,qBAAqB,GAChC,QAAQ,uBAAuB,EAC/B,eAAe,MAAM,EACrB,iBAAiB,MAAM,gVAcrB,CAAC;AAEL,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,uBAAuB,EAC/B,aAAa,aAAa,CAAC,MAAM,CAAC,EAClC,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,gVAkB9B,CAAC"}