alchemy 2.0.0-beta.52 → 2.0.0-beta.53

package/lib/Planetscale/Postgres/PostgresDefaultRole.js

@@ -1,5 +1,5 @@
 import { Credentials } from "@distilled.cloud/planetscale/Credentials";
-import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as planetscale from "@distilled.cloud/planetscale/Operations";
 import * as Effect from "effect/Effect";
 import * as Redacted from "effect/Redacted";
 import { isResolved } from "../../Diff.js";
@@ -7,6 +7,128 @@ import * as Provider from "../../Provider.js";
 import { Resource } from "../../Resource.js";
 import { PlanetscaleConflict, waitForBranchReady } from "../Util.js";
 export const PostgresDefaultRole = Resource("Planetscale.PostgresDefaultRole");
+export const PostgresDefaultRoleProvider = () => Provider.succeed(PostgresDefaultRole, {
+    stables: ["id"],
+    diff: Effect.fn(function* ({ news, olds = {} }) {
+        if (!isResolved(news))
+            return undefined;
+        const newDb = resolveDatabaseName(news.database);
+        const oldDb = olds.database
+            ? resolveDatabaseName(olds.database)
+            : undefined;
+        if (oldDb && newDb !== oldDb) {
+            return { action: "replace" };
+        }
+        const newBranch = resolveBranchName(news.branch);
+        const oldBranch = resolveBranchName(olds.branch);
+        if (newBranch !== oldBranch) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ output }) {
+        // Adoption (no cached output) is impossible without destroying
+        // existing credentials. The engine routes adoption through
+        // `read`, but here we always defer to reconcile so the
+        // `forceReset` props flag remains the user-facing switch for
+        // takeover. Returning undefined makes the engine treat the
+        // resource as greenfield; reconcile then observes live state
+        // and either fails (no forceReset) or resets (forceReset).
+        if (!output)
+            return undefined;
+        // Refresh — verify the default role still exists and re-emit
+        // the persisted output (with plaintext intact). If gone,
+        // return undefined so the engine routes through reconcile,
+        // which will recreate via reset.
+        return yield* planetscale
+            .getDefaultRole({
+            organization: output.organization,
+            database: output.database,
+            branch: output.branch,
+        })
+            .pipe(Effect.map(() => output), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+    }),
+    reconcile: Effect.fn(function* ({ news, output }) {
+        const { organization: envOrg } = yield* yield* Credentials;
+        const organization = resolveDatabaseOrg(news.database) ?? envOrg;
+        const databaseName = resolveDatabaseName(news.database);
+        const branchName = resolveBranchName(news.branch);
+        // 1. Observe — the default role is the singleton for this
+        //    (database, branch); we key on those rather than an id.
+        //    Observation runs unconditionally so the adoption guard
+        //    below fires on greenfield deploys against branches that
+        //    already have a default role (otherwise we would silently
+        //    `resetDefault` and destroy their credentials).
+        const observed = yield* planetscale
+            .getDefaultRole({
+            organization,
+            database: databaseName,
+            branch: branchName,
+        })
+            .pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+        // 2. Sync (no-op) — we own the role and it still exists in the
+        //    cloud. Default roles have nothing mutable in place: their
+        //    plaintext password isn't retrievable, so we re-emit the
+        //    persisted attributes unchanged. diff() forces a replace
+        //    when database/branch change.
+        if (output && observed) {
+            return output;
+        }
+        // 3. Adoption guard — observed exists but we have no prior
+        //    output (greenfield against a pre-existing default role).
+        //    Taking over requires a reset (which destroys the existing
+        //    password), so gate on an explicit forceReset opt-in.
+        if (observed && !news.forceReset) {
+            return yield* Effect.fail(new PlanetscaleConflict({
+                message: `Default role already exists for database "${databaseName}" branch "${branchName}". Use forceReset: true to reset.`,
+            }));
+        }
+        // 4. Ensure — (re)create the default role. This branch runs
+        //    for greenfield (no output, no observed), drift recovery
+        //    (output cached but cloud state gone), and authorised
+        //    adoption (observed present + forceReset).
+        yield* waitForBranchReady(organization, databaseName, branchName);
+        const data = yield* planetscale.resetDefaultRole({
+            organization,
+            database: databaseName,
+            branch: branchName,
+        });
+        if (!data.password) {
+            return yield* Effect.die(`Planetscale did not return a password for Default Role.`);
+        }
+        const password = Redacted.isRedacted(data.password)
+            ? Redacted.value(data.password)
+            : data.password;
+        const connectionUrl = `postgresql://${data.username}:${password}@${data.access_host_url}:5432/${data.database_name}?sslmode=verify-full`;
+        const connectionUrlPooled = `postgresql://${data.username}:${password}@${data.access_host_url}:6432/${data.database_name}?sslmode=verify-full`;
+        return {
+            id: data.id,
+            name: data.name,
+            expiresAt: data.expires_at,
+            host: data.access_host_url,
+            username: data.username,
+            password: Redacted.make(password),
+            ttl: data.ttl,
+            databaseName: data.database_name,
+            connectionUrl: Redacted.make(connectionUrl),
+            connectionUrlPooled: Redacted.make(connectionUrlPooled),
+            inheritedRoles: data.inherited_roles,
+            organization,
+            database: databaseName,
+            branch: branchName,
+        };
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        // No delete endpoint — reset to invalidate existing credentials.
+        yield* planetscale
+            .resetDefaultRole({
+            organization: output.organization,
+            database: output.database,
+            branch: output.branch,
+        })
+            .pipe(Effect.catchTag("NotFound", () => Effect.void));
+    }),
+});
 const resolveDatabaseName = (database) => {
     const ref = database;
     return typeof ref === "string" ? ref : ref.name;
@@ -19,124 +141,4 @@ const resolveBranchName = (branch) => {
     const ref = branch;
     return !ref ? "main" : typeof ref === "string" ? ref : ref.name;
 };
-export const PostgresDefaultRoleProvider = () => Provider.effect(PostgresDefaultRole, Effect.gen(function* () {
-    const getDefault = yield* ops.getDefaultRole;
-    const resetDefault = yield* ops.resetDefaultRole;
-    return {
-        stables: ["id"],
-        diff: Effect.fn(function* ({ news, olds = {} }) {
-            if (!isResolved(news))
-                return undefined;
-            const newDb = resolveDatabaseName(news.database);
-            const oldDb = olds.database
-                ? resolveDatabaseName(olds.database)
-                : undefined;
-            if (oldDb && newDb !== oldDb) {
-                return { action: "replace" };
-            }
-            const newBranch = resolveBranchName(news.branch);
-            const oldBranch = resolveBranchName(olds.branch);
-            if (newBranch !== oldBranch) {
-                return { action: "replace" };
-            }
-            return undefined;
-        }),
-        read: Effect.fn(function* ({ output }) {
-            // Adoption (no cached output) is impossible without destroying
-            // existing credentials. The engine routes adoption through
-            // `read`, but here we always defer to reconcile so the
-            // `forceReset` props flag remains the user-facing switch for
-            // takeover. Returning undefined makes the engine treat the
-            // resource as greenfield; reconcile then observes live state
-            // and either fails (no forceReset) or resets (forceReset).
-            if (!output)
-                return undefined;
-            // Refresh — verify the default role still exists and re-emit
-            // the persisted output (with plaintext intact). If gone,
-            // return undefined so the engine routes through reconcile,
-            // which will recreate via reset.
-            return yield* getDefault({
-                organization: output.organization,
-                database: output.database,
-                branch: output.branch,
-            }).pipe(Effect.map(() => output), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
-        }),
-        reconcile: Effect.fn(function* ({ news, output }) {
-            const { organization: envOrg } = yield* Credentials;
-            const organization = resolveDatabaseOrg(news.database) ?? envOrg;
-            const databaseName = resolveDatabaseName(news.database);
-            const branchName = resolveBranchName(news.branch);
-            // 1. Observe — the default role is the singleton for this
-            //    (database, branch); we key on those rather than an id.
-            //    Observation runs unconditionally so the adoption guard
-            //    below fires on greenfield deploys against branches that
-            //    already have a default role (otherwise we would silently
-            //    `resetDefault` and destroy their credentials).
-            const observed = yield* getDefault({
-                organization,
-                database: databaseName,
-                branch: branchName,
-            }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
-            // 2. Sync (no-op) — we own the role and it still exists in the
-            //    cloud. Default roles have nothing mutable in place: their
-            //    plaintext password isn't retrievable, so we re-emit the
-            //    persisted attributes unchanged. diff() forces a replace
-            //    when database/branch change.
-            if (output && observed) {
-                return output;
-            }
-            // 3. Adoption guard — observed exists but we have no prior
-            //    output (greenfield against a pre-existing default role).
-            //    Taking over requires a reset (which destroys the existing
-            //    password), so gate on an explicit forceReset opt-in.
-            if (observed && !news.forceReset) {
-                return yield* Effect.fail(new PlanetscaleConflict({
-                    message: `Default role already exists for database "${databaseName}" branch "${branchName}". Use forceReset: true to reset.`,
-                }));
-            }
-            // 4. Ensure — (re)create the default role. This branch runs
-            //    for greenfield (no output, no observed), drift recovery
-            //    (output cached but cloud state gone), and authorised
-            //    adoption (observed present + forceReset).
-            yield* waitForBranchReady(organization, databaseName, branchName);
-            const data = yield* resetDefault({
-                organization,
-                database: databaseName,
-                branch: branchName,
-            });
-            if (!data.password) {
-                return yield* Effect.die(`Planetscale did not return a password for Default Role.`);
-            }
-            const password = Redacted.isRedacted(data.password)
-                ? Redacted.value(data.password)
-                : data.password;
-            const connectionUrl = `postgresql://${data.username}:${password}@${data.access_host_url}:5432/${data.database_name}?sslmode=verify-full`;
-            const connectionUrlPooled = `postgresql://${data.username}:${password}@${data.access_host_url}:6432/${data.database_name}?sslmode=verify-full`;
-            return {
-                id: data.id,
-                name: data.name,
-                expiresAt: data.expires_at,
-                host: data.access_host_url,
-                username: data.username,
-                password: Redacted.make(password),
-                ttl: data.ttl,
-                databaseName: data.database_name,
-                connectionUrl: Redacted.make(connectionUrl),
-                connectionUrlPooled: Redacted.make(connectionUrlPooled),
-                inheritedRoles: data.inherited_roles,
-                organization,
-                database: databaseName,
-                branch: branchName,
-            };
-        }),
-        delete: Effect.fn(function* ({ output }) {
-            // No delete endpoint — reset to invalidate existing credentials.
-            yield* resetDefault({
-                organization: output.organization,
-                database: output.database,
-                branch: output.branch,
-            }).pipe(Effect.catchTag("NotFound", () => Effect.void));
-        }),
-    };
-}));
 //# sourceMappingURL=PostgresDefaultRole.js.map

package/lib/Planetscale/Postgres/PostgresDefaultRole.js.map

@@ -1 +1 @@
-{"version":3,"file":"PostgresDefaultRole.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresDefaultRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvE,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA0FrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CACzC,iCAAiC,CAClC,CAAC;AAOF,MAAM,mBAAmB,GAAG,CAAC,QAAmC,EAAU,EAAE;IAC1E,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAmC,EACf,EAAE;IACtB,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAA2C,EACnC,EAAE;IACV,MAAM,GAAG,GAAG,MAA0C,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,EAAE,CAC9C,QAAQ,CAAC,MAAM,CACb,mBAAmB,EACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,CAAC;QAEf,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAExC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;gBACzB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,+DAA+D;YAC/D,2DAA2D;YAC3D,uDAAuD;YACvD,6DAA6D;YAC7D,2DAA2D;YAC3D,6DAA6D;YAC7D,2DAA2D;YAC3D,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAE9B,6DAA6D;YAC7D,yDAAyD;YACzD,2DAA2D;YAC3D,iCAAiC;YACjC,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC9C,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;YACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAElD,0DAA0D;YAC1D,4DAA4D;YAC5D,4DAA4D;YAC5D,6DAA6D;YAC7D,8DAA8D;YAC9D,oDAAoD;YACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtE,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,6DAA6D;YAC7D,kCAAkC;YAClC,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACvB,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,2DAA2D;YAC3D,8DAA8D;YAC9D,+DAA+D;YAC/D,0DAA0D;YAC1D,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;oBACtB,OAAO,EAAE,6CAA6C,YAAY,aAAa,UAAU,mCAAmC;iBAC7H,CAAC,CACH,CAAC;YACJ,CAAC;YAED,4DAA4D;YAC5D,6DAA6D;YAC7D,0DAA0D;YAC1D,+CAA+C;YAC/C,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;gBAC/B,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC/B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAElB,MAAM,aAAa,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;YACzI,MAAM,mBAAmB,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;YAE/I,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,IAAI,EAAE,IAAI,CAAC,eAAe;gBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC3C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACvD,cAAc,EAAE,IAAI,CAAC,eAAkC;gBACvD,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;aACqB,CAAC;QAC5C,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,iEAAiE;YACjE,KAAK,CAAC,CAAC,YAAY,CAAC;gBAClB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"PostgresDefaultRole.js","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresDefaultRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvE,OAAO,KAAK,WAAW,MAAM,yCAAyC,CAAC;AACvE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA0FrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CACzC,iCAAiC,CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,EAAE,CAC9C,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE;IACpC,OAAO,EAAE,CAAC,IAAI,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAExC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;YACzB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,+DAA+D;QAC/D,2DAA2D;QAC3D,uDAAuD;QACvD,6DAA6D;QAC7D,2DAA2D;QAC3D,6DAA6D;QAC7D,2DAA2D;QAC3D,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,6DAA6D;QAC7D,yDAAyD;QACzD,2DAA2D;QAC3D,iCAAiC;QACjC,OAAO,KAAK,CAAC,CAAC,WAAW;aACtB,cAAc,CAAC;YACd,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;IACN,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9C,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;QAC3D,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;QACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAElD,0DAA0D;QAC1D,4DAA4D;QAC5D,4DAA4D;QAC5D,6DAA6D;QAC7D,8DAA8D;QAC9D,oDAAoD;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW;aAChC,cAAc,CAAC;YACd,YAAY;YACZ,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,UAAU;SACnB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtE,+DAA+D;QAC/D,+DAA+D;QAC/D,6DAA6D;QAC7D,6DAA6D;QAC7D,kCAAkC;QAClC,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,2DAA2D;QAC3D,8DAA8D;QAC9D,+DAA+D;QAC/D,0DAA0D;QAC1D,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,6CAA6C,YAAY,aAAa,UAAU,mCAAmC;aAC7H,CAAC,CACH,CAAC;QACJ,CAAC;QAED,4DAA4D;QAC5D,6DAA6D;QAC7D,0DAA0D;QAC1D,+CAA+C;QAC/C,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC;YAC/C,YAAY;YACZ,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YACjD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAElB,MAAM,aAAa,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;QACzI,MAAM,mBAAmB,GAAG,gBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,eAAe,SAAS,IAAI,CAAC,aAAa,sBAAsB,CAAC;QAE/I,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,IAAI,EAAE,IAAI,CAAC,eAAe;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;YAC3C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACvD,cAAc,EAAE,IAAI,CAAC,eAAkC;YACvD,YAAY;YACZ,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,UAAU;SACqB,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,iEAAiE;QACjE,KAAK,CAAC,CAAC,WAAW;aACf,gBAAgB,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;CACH,CAAC,CAAC;AAOL,MAAM,mBAAmB,GAAG,CAAC,QAAmC,EAAU,EAAE;IAC1E,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAmC,EACf,EAAE;IACtB,MAAM,GAAG,GAAG,QAAkC,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAA2C,EACnC,EAAE;IACV,MAAM,GAAG,GAAG,MAA0C,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAClE,CAAC,CAAC"}

package/lib/Planetscale/Postgres/PostgresMigrations.d.ts

@@ -12,7 +12,7 @@ export interface PostgresMigrationTarget {
     database: string;
     branch: string;
 }
-export declare const runPostgresMigrations: (target: PostgresMigrationTarget, migrationsDir: string, migrationsTable: string) => Effect.Effect<Record<string, string>, import("effect/PlatformError").PlatformError | import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden | PostgresMigrationError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("@distilled.cloud/planetscale/Credentials").Credentials>;
-export declare const runPostgresImports: (target: PostgresMigrationTarget, importFiles: ReadonlyArray<string>, rootDir: string, previous: Record<string, string>) => Effect.Effect<Record<string, string>, import("effect/PlatformError").PlatformError | import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden | PostgresMigrationError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("@distilled.cloud/planetscale/Credentials").Credentials>;
+export declare const runPostgresMigrations: (target: PostgresMigrationTarget, migrationsDir: string, migrationsTable: string) => Effect.Effect<Record<string, string>, import("effect/PlatformError").PlatformError | import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden | PostgresMigrationError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("@distilled.cloud/planetscale").Credentials>;
+export declare const runPostgresImports: (target: PostgresMigrationTarget, importFiles: ReadonlyArray<string>, rootDir: string, previous: Record<string, string>) => Effect.Effect<Record<string, string>, import("effect/PlatformError").PlatformError | import("@distilled.cloud/axiom").NotFound | import("@distilled.cloud/axiom").Forbidden | PostgresMigrationError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("@distilled.cloud/planetscale").Credentials>;
 export {};
 //# sourceMappingURL=PostgresMigrations.d.ts.map

package/lib/Planetscale/Postgres/PostgresMigrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostgresMigrations.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresMigrations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AAQxC,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;CAAG;AAEL,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,qBAAqB,GAChC,QAAQ,uBAAuB,EAC/B,eAAe,MAAM,EACrB,iBAAiB,MAAM,gVAcrB,CAAC;AAEL,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,uBAAuB,EAC/B,aAAa,aAAa,CAAC,MAAM,CAAC,EAClC,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,gVAkB9B,CAAC"}
+{"version":3,"file":"PostgresMigrations.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresMigrations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AAQxC,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;CAAG;AAEL,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,qBAAqB,GAChC,QAAQ,uBAAuB,EAC/B,eAAe,MAAM,EACrB,iBAAiB,MAAM,oUAcrB,CAAC;AAEL,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,uBAAuB,EAC/B,aAAa,aAAa,CAAC,MAAM,CAAC,EAClC,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,oUAkB9B,CAAC"}

package/lib/Planetscale/Postgres/PostgresRole.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostgresRole.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAGvE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAMjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,eAAe,GACf,wBAAwB,GACxB,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,6BAA6B,GAC7B,mBAAmB,GACnB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAiBlB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAEjC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,cAAc,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC;IAE/C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,MAAM,EAAE,cAAc,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,iEAAiE;IACjE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,uBAAuB;IACvB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,CACjC,0BAA0B,EAC1B,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,YAAY,yDAAqD,CAAC;AA0G/E,eAAO,MAAM,oBAAoB,2JA+L9B,CAAC"}
+{"version":3,"file":"PostgresRole.d.ts","sourceRoot":"","sources":["../../../src/Planetscale/Postgres/PostgresRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAGvE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAMjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,eAAe,GACf,wBAAwB,GACxB,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,6BAA6B,GAC7B,mBAAmB,GACnB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAiBlB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAEjC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,cAAc,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC;IAE/C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,MAAM,EAAE,cAAc,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,iEAAiE;IACjE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,uBAAuB;IACvB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,CACjC,0BAA0B,EAC1B,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,SAAS,CACV,CAAC;AAEF,eAAO,MAAM,YAAY,yDAAqD,CAAC;AAE/E,eAAO,MAAM,oBAAoB,2JAwL7B,CAAC"}

package/lib/Planetscale/Postgres/PostgresRole.js

@@ -1,13 +1,170 @@
 import { Credentials } from "@distilled.cloud/planetscale/Credentials";
-import * as ops from "@distilled.cloud/planetscale/Operations";
+import * as planetscale from "@distilled.cloud/planetscale/Operations";
 import * as Effect from "effect/Effect";
 import * as Redacted from "effect/Redacted";
 import { deepEqual, isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
 import * as Provider from "../../Provider.js";
 import { Resource } from "../../Resource.js";
 import { isKnownError, PlanetscaleConflict, waitForBranchReady, } from "../Util.js";
-import { createPhysicalName } from "../../PhysicalName.js";
 export const PostgresRole = Resource("Planetscale.PostgresRole");
+export const PostgresRoleProvider = () => Provider.succeed(PostgresRole, {
+    stables: ["id"],
+    diff: Effect.fn(function* ({ id, news, olds, output }) {
+        if (!isResolved(news))
+            return undefined;
+        // Successor is the only updatable property — everything else
+        // requires replacement.
+        if (news.ttl !== olds.ttl) {
+            return { action: "replace" };
+        }
+        const newDb = resolveDatabaseName(news.database);
+        const oldDb = olds.database
+            ? resolveDatabaseName(olds.database)
+            : undefined;
+        if (oldDb && newDb !== oldDb) {
+            return { action: "replace" };
+        }
+        const newBranch = resolveBranchName(news.branch);
+        const oldBranch = resolveBranchName(olds.branch);
+        if (newBranch !== oldBranch) {
+            return { action: "replace" };
+        }
+        const newRoles = resolveInheritedRoles(news.inheritedRoles);
+        const oldRoles = output?.inheritedRoles ?? [];
+        if (!deepEqual(newRoles, oldRoles)) {
+            return { action: "replace" };
+        }
+        const oldName = output?.name ?? (yield* resolveName(id, olds?.name));
+        const newName = yield* resolveName(id, news.name);
+        if (newName !== oldName) {
+            return { action: "update" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ output }) {
+        if (!output?.id)
+            return undefined;
+        return yield* planetscale
+            .getRole({
+            branch: output.branch,
+            database: output.database,
+            organization: output.organization,
+            id: output.id,
+        })
+            .pipe(Effect.map((token) => buildAttributes(token, output.password, {
+            inheritedRoles: token.inherited_roles,
+            successor: output.successor,
+            organization: output.organization,
+            database: output.database,
+            branch: token.branch.name,
+        })), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const { organization: envOrg } = yield* yield* Credentials;
+        const organization = resolveDatabaseOrg(news.database) ?? envOrg;
+        const databaseName = resolveDatabaseName(news.database);
+        const branchName = resolveBranchName(news.branch);
+        const inheritedRoles = resolveInheritedRoles(news.inheritedRoles);
+        const successor = resolveSuccessorName(news.successor);
+        const desiredName = yield* resolveName(id, news.name);
+        // 1. Observe — fetch live state if we know the role id. Roles
+        //    can only be looked up by id; without a cached id there is
+        //    no way to find the live role, so we fall through to ensure.
+        const observed = output?.id
+            ? yield* planetscale
+                .getRole({
+                id: output.id,
+                branch: branchName,
+                organization,
+                database: databaseName,
+            })
+                .pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)))
+            : undefined;
+        // 2. Ensure — create if missing. Single branch covers both
+        //    greenfield (no output) and out-of-band-deletion (output
+        //    cached but cloud lost it). The latter is structurally a
+        //    rotation: the new role has fresh id/host/username/plaintext
+        //    that propagate downstream through the dependency graph.
+        //    There is no path to recover the original plaintext, so
+        //    recreating is the only way to converge.
+        //
+        //    Planetscale returns the plaintext password value exactly
+        //    once on create; on an observe-hit we re-use the cached
+        //    plaintext from output (which is why adoption requires
+        //    pre-existing state — see `read`).
+        let live;
+        let plaintext;
+        if (observed) {
+            live = observed;
+            plaintext = output.password;
+        }
+        else {
+            const branchInfo = yield* planetscale.getBranch({
+                organization,
+                database: databaseName,
+                branch: branchName,
+            });
+            if (branchInfo.kind !== "postgresql") {
+                return yield* Effect.fail(new PlanetscaleConflict({
+                    message: `Cannot create a Role on MySQL database "${databaseName}". Roles are only supported on PostgreSQL. Use Password for MySQL.`,
+                }));
+            }
+            if (!branchInfo.ready) {
+                yield* waitForBranchReady(organization, databaseName, branchName);
+            }
+            const created = yield* planetscale.createRole({
+                name: desiredName,
+                branch: branchName,
+                organization,
+                database: databaseName,
+                ttl: news.ttl,
+                inherited_roles: inheritedRoles,
+            });
+            if (!created.password) {
+                return yield* Effect.die(`Planetscale did not return a password for Role "${desiredName}".`);
+            }
+            plaintext = created.password;
+            live = created;
+        }
+        // 3. Sync — only `name` is mutable in place; diff observed
+        //    against desired and skip the API call when nothing
+        //    changed. Everything else triggers a replace via diff().
+        if (live.name !== desiredName) {
+            live = yield* planetscale.updateRole({
+                id: live.id,
+                branch: branchName,
+                organization,
+                database: databaseName,
+                name: desiredName,
+            });
+        }
+        // 4. Return — fresh attrs sourced from observed cloud state,
+        //    with cached or freshly-issued plaintext.
+        return buildAttributes(live, plaintext, {
+            inheritedRoles: live.inherited_roles,
+            successor,
+            organization,
+            database: databaseName,
+            branch: branchName,
+        });
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* planetscale
+            .deleteRole({
+            organization: output.organization,
+            database: output.database,
+            branch: output.branch,
+            id: output.id,
+            successor: output.successor,
+        })
+            .pipe(Effect.catchTag("NotFound", () => Effect.void), 
+        // 422 (UnprocessableEntity): role is still referenced. Log a
+        // warning rather than failing — the role will be cleaned up
+        // when the database/branch is deleted.
+        Effect.catchIf(isKnownError("UnprocessableEntity", "Role is still referenced and cannot be dropped."), () => Effect.void));
+    }),
+});
 const resolveDatabaseName = (database) => {
     const ref = database;
     return typeof ref === "string" ? ref : ref.name;
@@ -67,162 +224,4 @@ const buildAttributes = (role, password, context) => {
         ttl: role.ttl,
     };
 };
-export const PostgresRoleProvider = () => Provider.effect(PostgresRole, Effect.gen(function* () {
-    const createRole = yield* ops.createRole;
-    const deleteRole = yield* ops.deleteRole;
-    const updateRole = yield* ops.updateRole;
-    const getRole = yield* ops.getRole;
-    const getBranch = yield* ops.getBranch;
-    return {
-        stables: ["id"],
-        diff: Effect.fn(function* ({ id, news, olds, output }) {
-            if (!isResolved(news))
-                return undefined;
-            // Successor is the only updatable property — everything else
-            // requires replacement.
-            if (news.ttl !== olds.ttl) {
-                return { action: "replace" };
-            }
-            const newDb = resolveDatabaseName(news.database);
-            const oldDb = olds.database
-                ? resolveDatabaseName(olds.database)
-                : undefined;
-            if (oldDb && newDb !== oldDb) {
-                return { action: "replace" };
-            }
-            const newBranch = resolveBranchName(news.branch);
-            const oldBranch = resolveBranchName(olds.branch);
-            if (newBranch !== oldBranch) {
-                return { action: "replace" };
-            }
-            const newRoles = resolveInheritedRoles(news.inheritedRoles);
-            const oldRoles = output?.inheritedRoles ?? [];
-            if (!deepEqual(newRoles, oldRoles)) {
-                return { action: "replace" };
-            }
-            const oldName = output?.name ?? (yield* resolveName(id, olds?.name));
-            const newName = yield* resolveName(id, news.name);
-            if (newName !== oldName) {
-                return { action: "update" };
-            }
-            return undefined;
-        }),
-        read: Effect.fn(function* ({ output }) {
-            if (!output?.id)
-                return undefined;
-            return yield* getRole({
-                branch: output.branch,
-                database: output.database,
-                organization: output.organization,
-                id: output.id,
-            }).pipe(Effect.map((token) => buildAttributes(token, output.password, {
-                inheritedRoles: token.inherited_roles,
-                successor: output.successor,
-                organization: output.organization,
-                database: output.database,
-                branch: token.branch.name,
-            })), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)), Effect.catchTag("NotFound", () => Effect.succeed(undefined)));
-        }),
-        reconcile: Effect.fn(function* ({ id, news, output }) {
-            const { organization: envOrg } = yield* Credentials;
-            const organization = resolveDatabaseOrg(news.database) ?? envOrg;
-            const databaseName = resolveDatabaseName(news.database);
-            const branchName = resolveBranchName(news.branch);
-            const inheritedRoles = resolveInheritedRoles(news.inheritedRoles);
-            const successor = resolveSuccessorName(news.successor);
-            const desiredName = yield* resolveName(id, news.name);
-            // 1. Observe — fetch live state if we know the role id. Roles
-            //    can only be looked up by id; without a cached id there is
-            //    no way to find the live role, so we fall through to ensure.
-            const observed = output?.id
-                ? yield* getRole({
-                    id: output.id,
-                    branch: branchName,
-                    organization,
-                    database: databaseName,
-                }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)))
-                : undefined;
-            // 2. Ensure — create if missing. Single branch covers both
-            //    greenfield (no output) and out-of-band-deletion (output
-            //    cached but cloud lost it). The latter is structurally a
-            //    rotation: the new role has fresh id/host/username/plaintext
-            //    that propagate downstream through the dependency graph.
-            //    There is no path to recover the original plaintext, so
-            //    recreating is the only way to converge.
-            //
-            //    Planetscale returns the plaintext password value exactly
-            //    once on create; on an observe-hit we re-use the cached
-            //    plaintext from output (which is why adoption requires
-            //    pre-existing state — see `read`).
-            let live;
-            let plaintext;
-            if (observed) {
-                live = observed;
-                plaintext = output.password;
-            }
-            else {
-                const branchInfo = yield* getBranch({
-                    organization,
-                    database: databaseName,
-                    branch: branchName,
-                });
-                if (branchInfo.kind !== "postgresql") {
-                    return yield* Effect.fail(new PlanetscaleConflict({
-                        message: `Cannot create a Role on MySQL database "${databaseName}". Roles are only supported on PostgreSQL. Use Password for MySQL.`,
-                    }));
-                }
-                if (!branchInfo.ready) {
-                    yield* waitForBranchReady(organization, databaseName, branchName);
-                }
-                const created = yield* createRole({
-                    name: desiredName,
-                    branch: branchName,
-                    organization,
-                    database: databaseName,
-                    ttl: news.ttl,
-                    inherited_roles: inheritedRoles,
-                });
-                if (!created.password) {
-                    return yield* Effect.die(`Planetscale did not return a password for Role "${desiredName}".`);
-                }
-                plaintext = created.password;
-                live = created;
-            }
-            // 3. Sync — only `name` is mutable in place; diff observed
-            //    against desired and skip the API call when nothing
-            //    changed. Everything else triggers a replace via diff().
-            if (live.name !== desiredName) {
-                live = yield* updateRole({
-                    id: live.id,
-                    branch: branchName,
-                    organization,
-                    database: databaseName,
-                    name: desiredName,
-                });
-            }
-            // 4. Return — fresh attrs sourced from observed cloud state,
-            //    with cached or freshly-issued plaintext.
-            return buildAttributes(live, plaintext, {
-                inheritedRoles: live.inherited_roles,
-                successor,
-                organization,
-                database: databaseName,
-                branch: branchName,
-            });
-        }),
-        delete: Effect.fn(function* ({ output }) {
-            yield* deleteRole({
-                organization: output.organization,
-                database: output.database,
-                branch: output.branch,
-                id: output.id,
-                successor: output.successor,
-            }).pipe(Effect.catchTag("NotFound", () => Effect.void), 
-            // 422 (UnprocessableEntity): role is still referenced. Log a
-            // warning rather than failing — the role will be cleaned up
-            // when the database/branch is deleted.
-            Effect.catchIf(isKnownError("UnprocessableEntity", "Role is still referenced and cannot be dropped."), () => Effect.void));
-        }),
-    };
-}));
 //# sourceMappingURL=PostgresRole.js.map