cdk-turso 0.2.0 → 0.3.1

package/AGENTS.md

@@ -32,10 +32,13 @@ Most config files are **generated by projen** and must NOT be edited directly. T
 ```
 src/
   index.ts                 # Barrel exports — all public symbols re-exported here
-  turso-database.ts        # Main CDK construct
-  handler/index.ts         # Lambda handler for CloudFormation custom resource (bundled via esbuild)
+  turso-database.ts        # Main CDK construct for Turso databases
+  turso-auth-token.ts      # Auth token generation construct
+  turso-provider.ts        # Shared CloudFormation custom resource provider
+  handler/index.ts         # Lambda handler for custom resources (bundled via esbuild)
 test/
   turso-database.test.ts   # Construct unit tests (CDK assertions)
+  turso-auth-token.test.ts # Auth token construct tests
   handler.test.ts          # Handler unit tests (Jest mocks)
 lib/                       # Compiled output (generated, gitignored)
 dist/                      # Distribution packages (generated, gitignored)
@@ -109,13 +112,13 @@ Biome is the sole linter and formatter. ESLint is disabled.
 - Extend `Construct` from `constructs`, not from `aws-cdk-lib`
 - Constructor signature: `constructor(scope: Construct, id: string, props: XxxProps)`
 - Call `super(scope, id)` first
-- Validate inputs in constructor with `throw new Error(...)` for bad values
+- Validate inputs in constructor with `throw new Error(...)` for bad values (regex checks, length limits)
 - Custom resource pattern: Lambda Function → Provider → CustomResource
 - Expose outputs as `public readonly` properties via `cr.getAttString("AttrName")`
 
 ## Error Handling
 
-- **Constructor validation**: throw `new Error(...)` with clear messages for invalid props (regex checks, length limits)
+- **Constructor validation**: throw `new Error(...)` with clear messages for invalid props
 - **Handler errors**: include HTTP status and response text: `throw new Error(\`Failed to create: ${response.status} ${errorText}\`)`
 - **Environment checks**: throw early if required env vars are missing
 - **Idempotent deletes**: tolerate 404 on delete operations

package/API.md

@@ -62,7 +62,7 @@ Returns a string representation of this construct.
 
 ---
 
-##### ~~`isConstruct`~~ <a name="isConstruct" id="cdk-turso.TursoAuthToken.isConstruct"></a>
+##### `isConstruct` <a name="isConstruct" id="cdk-turso.TursoAuthToken.isConstruct"></a>
 
 ```typescript
 import { TursoAuthToken } from 'cdk-turso'
@@ -72,6 +72,20 @@ TursoAuthToken.isConstruct(x: any)
 
 Checks if `x` is a construct.
 
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+
 ###### `x`<sup>Required</sup> <a name="x" id="cdk-turso.TursoAuthToken.isConstruct.parameter.x"></a>
 
 - *Type:* any
@@ -174,7 +188,7 @@ Returns a string representation of this construct.
 
 ---
 
-##### ~~`isConstruct`~~ <a name="isConstruct" id="cdk-turso.TursoDatabase.isConstruct"></a>
+##### `isConstruct` <a name="isConstruct" id="cdk-turso.TursoDatabase.isConstruct"></a>
 
 ```typescript
 import { TursoDatabase } from 'cdk-turso'
@@ -184,6 +198,20 @@ TursoDatabase.isConstruct(x: any)
 
 Checks if `x` is a construct.
 
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+
 ###### `x`<sup>Required</sup> <a name="x" id="cdk-turso.TursoDatabase.isConstruct.parameter.x"></a>
 
 - *Type:* any
@@ -197,11 +225,9 @@ Any object.
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
 | <code><a href="#cdk-turso.TursoDatabase.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#cdk-turso.TursoDatabase.property.apiToken">apiToken</a></code> | <code>aws-cdk-lib.aws_ssm.IParameter</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabase.property.databaseName">databaseName</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabase.property.dbId">dbId</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabase.property.hostname">hostname</a></code> | <code>string</code> | DNS hostname for the database (e.g., `my-db-my-org.turso.io`). Use with libSQL or HTTP connections. |
-| <code><a href="#cdk-turso.TursoDatabase.property.organizationSlug">organizationSlug</a></code> | <code>string</code> | *No description.* |
 
 ---
 
@@ -217,16 +243,6 @@ The tree node.
 
 ---
 
-##### `apiToken`<sup>Required</sup> <a name="apiToken" id="cdk-turso.TursoDatabase.property.apiToken"></a>
-
-```typescript
-public readonly apiToken: IParameter;
-```
-
-- *Type:* aws-cdk-lib.aws_ssm.IParameter
-
----
-
 ##### `databaseName`<sup>Required</sup> <a name="databaseName" id="cdk-turso.TursoDatabase.property.databaseName"></a>
 
 ```typescript
@@ -259,14 +275,151 @@ DNS hostname for the database (e.g., `my-db-my-org.turso.io`). Use with libSQL o
 
 ---
 
-##### `organizationSlug`<sup>Required</sup> <a name="organizationSlug" id="cdk-turso.TursoDatabase.property.organizationSlug"></a>
+
+### TursoProvider <a name="TursoProvider" id="cdk-turso.TursoProvider"></a>
+
+Shared Lambda + CloudFormation custom-resource provider for all Turso resources.
+
+Create one per stack and pass it to every
+`TursoDatabase`, `TursoAuthToken`, etc.
+
+#### Initializers <a name="Initializers" id="cdk-turso.TursoProvider.Initializer"></a>
 
 ```typescript
-public readonly organizationSlug: string;
+import { TursoProvider } from 'cdk-turso'
+
+new TursoProvider(scope: Construct, id: string, props: TursoProviderProps)
+```
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#cdk-turso.TursoProvider.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
+| <code><a href="#cdk-turso.TursoProvider.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#cdk-turso.TursoProvider.Initializer.parameter.props">props</a></code> | <code><a href="#cdk-turso.TursoProviderProps">TursoProviderProps</a></code> | *No description.* |
+
+---
+
+##### `scope`<sup>Required</sup> <a name="scope" id="cdk-turso.TursoProvider.Initializer.parameter.scope"></a>
+
+- *Type:* constructs.Construct
+
+---
+
+##### `id`<sup>Required</sup> <a name="id" id="cdk-turso.TursoProvider.Initializer.parameter.id"></a>
+
+- *Type:* string
+
+---
+
+##### `props`<sup>Required</sup> <a name="props" id="cdk-turso.TursoProvider.Initializer.parameter.props"></a>
+
+- *Type:* <a href="#cdk-turso.TursoProviderProps">TursoProviderProps</a>
+
+---
+
+#### Methods <a name="Methods" id="Methods"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#cdk-turso.TursoProvider.toString">toString</a></code> | Returns a string representation of this construct. |
+
+---
+
+##### `toString` <a name="toString" id="cdk-turso.TursoProvider.toString"></a>
+
+```typescript
+public toString(): string
+```
+
+Returns a string representation of this construct.
+
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#cdk-turso.TursoProvider.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+
+---
+
+##### `isConstruct` <a name="isConstruct" id="cdk-turso.TursoProvider.isConstruct"></a>
+
+```typescript
+import { TursoProvider } from 'cdk-turso'
+
+TursoProvider.isConstruct(x: any)
+```
+
+Checks if `x` is a construct.
+
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+
+###### `x`<sup>Required</sup> <a name="x" id="cdk-turso.TursoProvider.isConstruct.parameter.x"></a>
+
+- *Type:* any
+
+Any object.
+
+---
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#cdk-turso.TursoProvider.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#cdk-turso.TursoProvider.property.handler">handler</a></code> | <code>aws-cdk-lib.aws_lambda.Function</code> | The Lambda function backing all Turso custom resources. |
+| <code><a href="#cdk-turso.TursoProvider.property.serviceToken">serviceToken</a></code> | <code>string</code> | The CDK custom-resource provider service token. |
+
+---
+
+##### `node`<sup>Required</sup> <a name="node" id="cdk-turso.TursoProvider.property.node"></a>
+
+```typescript
+public readonly node: Node;
+```
+
+- *Type:* constructs.Node
+
+The tree node.
+
+---
+
+##### `handler`<sup>Required</sup> <a name="handler" id="cdk-turso.TursoProvider.property.handler"></a>
+
+```typescript
+public readonly handler: Function;
+```
+
+- *Type:* aws-cdk-lib.aws_lambda.Function
+
+The Lambda function backing all Turso custom resources.
+
+Use this to attach additional IAM permissions when a resource
+type needs them (e.g. `ssm:PutParameter` for auth-token storage).
+
+---
+
+##### `serviceToken`<sup>Required</sup> <a name="serviceToken" id="cdk-turso.TursoProvider.property.serviceToken"></a>
+
+```typescript
+public readonly serviceToken: string;
 ```
 
 - *Type:* string
 
+The CDK custom-resource provider service token.
+
 ---
 
 
@@ -286,22 +439,36 @@ const tursoAuthTokenProps: TursoAuthTokenProps = { ... }
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#cdk-turso.TursoAuthTokenProps.property.database">database</a></code> | <code><a href="#cdk-turso.TursoDatabase">TursoDatabase</a></code> | The Turso database to create an auth token for. |
+| <code><a href="#cdk-turso.TursoAuthTokenProps.property.databaseName">databaseName</a></code> | <code>string</code> | The name of the Turso database to create an auth token for. |
+| <code><a href="#cdk-turso.TursoAuthTokenProps.property.organizationSlug">organizationSlug</a></code> | <code>string</code> | The Turso organization slug that owns the database. |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.parameterName">parameterName</a></code> | <code>string</code> | The SSM parameter name where the generated JWT will be stored as a SecureString. |
+| <code><a href="#cdk-turso.TursoAuthTokenProps.property.provider">provider</a></code> | <code><a href="#cdk-turso.TursoProvider">TursoProvider</a></code> | *No description.* |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.authorization">authorization</a></code> | <code>string</code> | Authorization level for the token. |
 | <code><a href="#cdk-turso.TursoAuthTokenProps.property.expiration">expiration</a></code> | <code>string</code> | Expiration time for the token (e.g., `"2w"`, `"1d30m"`). |
 
 ---
 
-##### `database`<sup>Required</sup> <a name="database" id="cdk-turso.TursoAuthTokenProps.property.database"></a>
+##### `databaseName`<sup>Required</sup> <a name="databaseName" id="cdk-turso.TursoAuthTokenProps.property.databaseName"></a>
+
+```typescript
+public readonly databaseName: string;
+```
+
+- *Type:* string
+
+The name of the Turso database to create an auth token for.
+
+---
+
+##### `organizationSlug`<sup>Required</sup> <a name="organizationSlug" id="cdk-turso.TursoAuthTokenProps.property.organizationSlug"></a>
 
 ```typescript
-public readonly database: TursoDatabase;
+public readonly organizationSlug: string;
 ```
 
-- *Type:* <a href="#cdk-turso.TursoDatabase">TursoDatabase</a>
+- *Type:* string
 
-The Turso database to create an auth token for.
+The Turso organization slug that owns the database.
 
 ---
 
@@ -317,6 +484,16 @@ The SSM parameter name where the generated JWT will be stored as a SecureString.
 
 ---
 
+##### `provider`<sup>Required</sup> <a name="provider" id="cdk-turso.TursoAuthTokenProps.property.provider"></a>
+
+```typescript
+public readonly provider: TursoProvider;
+```
+
+- *Type:* <a href="#cdk-turso.TursoProvider">TursoProvider</a>
+
+---
+
 ##### `authorization`<sup>Optional</sup> <a name="authorization" id="cdk-turso.TursoAuthTokenProps.property.authorization"></a>
 
 ```typescript
@@ -396,26 +573,16 @@ const tursoDatabaseProps: TursoDatabaseProps = { ... }
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#cdk-turso.TursoDatabaseProps.property.apiToken">apiToken</a></code> | <code>aws-cdk-lib.aws_ssm.IParameter</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.databaseName">databaseName</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.group">group</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.organizationSlug">organizationSlug</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#cdk-turso.TursoDatabaseProps.property.provider">provider</a></code> | <code><a href="#cdk-turso.TursoProvider">TursoProvider</a></code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.encryption">encryption</a></code> | <code><a href="#cdk-turso.TursoDatabaseEncryption">TursoDatabaseEncryption</a></code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.seed">seed</a></code> | <code><a href="#cdk-turso.TursoDatabaseSeed">TursoDatabaseSeed</a></code> | *No description.* |
 | <code><a href="#cdk-turso.TursoDatabaseProps.property.sizeLimit">sizeLimit</a></code> | <code>string</code> | *No description.* |
 
 ---
 
-##### `apiToken`<sup>Required</sup> <a name="apiToken" id="cdk-turso.TursoDatabaseProps.property.apiToken"></a>
-
-```typescript
-public readonly apiToken: IParameter;
-```
-
-- *Type:* aws-cdk-lib.aws_ssm.IParameter
-
----
-
 ##### `databaseName`<sup>Required</sup> <a name="databaseName" id="cdk-turso.TursoDatabaseProps.property.databaseName"></a>
 
 ```typescript
@@ -446,6 +613,16 @@ public readonly organizationSlug: string;
 
 ---
 
+##### `provider`<sup>Required</sup> <a name="provider" id="cdk-turso.TursoDatabaseProps.property.provider"></a>
+
+```typescript
+public readonly provider: TursoProvider;
+```
+
+- *Type:* <a href="#cdk-turso.TursoProvider">TursoProvider</a>
+
+---
+
 ##### `encryption`<sup>Optional</sup> <a name="encryption" id="cdk-turso.TursoDatabaseProps.property.encryption"></a>
 
 ```typescript
@@ -526,5 +703,50 @@ public readonly timestamp: string;
 
 ---
 
+### TursoProviderProps <a name="TursoProviderProps" id="cdk-turso.TursoProviderProps"></a>
+
+#### Initializer <a name="Initializer" id="cdk-turso.TursoProviderProps.Initializer"></a>
+
+```typescript
+import { TursoProviderProps } from 'cdk-turso'
+
+const tursoProviderProps: TursoProviderProps = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#cdk-turso.TursoProviderProps.property.apiToken">apiToken</a></code> | <code>aws-cdk-lib.aws_ssm.IParameter</code> | SSM parameter that holds the Turso platform API token (stored as SecureString). |
+| <code><a href="#cdk-turso.TursoProviderProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | Optional log group for the Lambda function. |
+
+---
+
+##### `apiToken`<sup>Required</sup> <a name="apiToken" id="cdk-turso.TursoProviderProps.property.apiToken"></a>
+
+```typescript
+public readonly apiToken: IParameter;
+```
+
+- *Type:* aws-cdk-lib.aws_ssm.IParameter
+
+SSM parameter that holds the Turso platform API token (stored as SecureString).
+
+---
+
+##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="cdk-turso.TursoProviderProps.property.logGroup"></a>
+
+```typescript
+public readonly logGroup: ILogGroup;
+```
+
+- *Type:* aws-cdk-lib.aws_logs.ILogGroup
+
+Optional log group for the Lambda function.
+
+If not provided, a log group will be automatically created.
+
+---
+
 
 

package/README.md

@@ -1,6 +1,6 @@
 # CDK Turso
 
-CDK construct to create a [Turso cloud](https://docs.turso.tech/turso-cloud) database.
+CDK constructs to create [Turso cloud](https://docs.turso.tech/turso-cloud) databases and manage auth tokens.
 
 ## Installation
 
@@ -10,30 +10,38 @@ npm install cdk-turso
 
 ## Usage
 
+First, create a `TursoProvider` with your API token:
+
 ```typescript
 import { Stack } from 'aws-cdk-lib';
 import { StringParameter } from 'aws-cdk-lib/aws-ssm';
-import { TursoDatabase } from 'cdk-turso';
+import { TursoProvider, TursoDatabase, TursoAuthToken } from 'cdk-turso';
 
 const stack = new Stack();
 
-// SSM Parameter containing your Turso API token
+// SSM Parameter containing your Turso API token (must be a SecureString)
 const apiToken = new StringParameter(stack, 'TursoApiToken', {
   parameterName: '/turso/api-token',
   stringValue: 'your-api-token',
+  type: ParameterType.SECURE_STRING,
+});
+
+// Create the provider (one per stack)
+const provider = new TursoProvider(stack, 'TursoProvider', {
+  apiToken,
 });
 
 const database = new TursoDatabase(stack, 'Database', {
+  provider,
   databaseName: 'my-database',
   group: 'group-name',
   organizationSlug: 'my-org',
-  apiToken,
 });
 
-// Use the database attributes
-database.dbId;     // Database ID
-database.hostname; // Database hostname
-database.databaseName; // Database name
+// Access database attributes
+database.dbId;      // Database ID
+database.hostname;  // Database hostname (e.g., my-database-my-org.turso.io)
+database.databaseName;  // Database name
 ```
 
 ### Auth Token
@@ -41,10 +49,10 @@ database.databaseName; // Database name
 Generate a database auth token and store it as a SecureString in SSM Parameter Store:
 
 ```typescript
-import { TursoAuthToken } from 'cdk-turso';
-
 const authToken = new TursoAuthToken(stack, 'AuthToken', {
-  database,
+  provider,
+  databaseName: database.databaseName,
+  organizationSlug: 'my-org',
   parameterName: '/turso/db-token',
   expiration: '2w',          // optional, default: 'never'
   authorization: 'read-only', // optional, default: 'full-access'
@@ -56,14 +64,28 @@ authToken.parameterName;
 
 ## API
 
+### TursoProviderProps
+
+| Prop | Type | Required | Description |
+|------|------|----------|-------------|
+| `apiToken` | `ssm.IParameter` | Yes | SSM Parameter containing the Turso platform API token (must be SecureString) |
+| `logGroup` | `ILogGroup` | No | Optional CloudWatch log group for the Lambda handler |
+
+### TursoProvider
+
+| Attribute | Type | Description |
+|-----------|------|-------------|
+| `handler` | `Function` | The Lambda function backing all Turso custom resources (for attaching IAM permissions) |
+| `serviceToken` | `string` | The CDK custom-resource provider service token |
+
 ### TursoDatabaseProps
 
 | Prop | Type | Required | Description |
 |------|------|----------|-------------|
+| `provider` | `TursoProvider` | Yes | The Turso provider to use for this database |
 | `databaseName` | `string` | Yes | Database name (lowercase, numbers, dashes only, max 64 chars) |
 | `group` | `string` | Yes | Turso group name (must already exist) |
 | `organizationSlug` | `string` | Yes | Organization slug |
-| `apiToken` | `ssm.IParameter` | Yes | SSM Parameter containing the Turso API token |
 | `sizeLimit` | `string` | No | Size limit (e.g., '256mb') |
 | `seed` | `TursoDatabaseSeed` | No | Database seed configuration |
 | `encryption` | `TursoDatabaseEncryption` | No | Encryption configuration |
@@ -92,16 +114,16 @@ interface TursoDatabaseEncryption {
 | Attribute | Type | Description |
 |-----------|------|-------------|
 | `dbId` | `string` | Turso database ID |
-| `hostname` | `string` | DNS hostname (e.g., `my-db-my-org.turso.io`) for libSQL/HTTP connections |
+| `hostname` | `string` | DNS hostname (e.g., `my-database-my-org.turso.io`) for libSQL/HTTP connections |
 | `databaseName` | `string` | Database name |
-| `organizationSlug` | `string` | Organization slug |
-| `apiToken` | `ssm.IParameter` | SSM Parameter containing the Turso API token |
 
 ### TursoAuthTokenProps
 
 | Prop | Type | Required | Description |
 |------|------|----------|-------------|
-| `database` | `TursoDatabase` | Yes | The Turso database to create an auth token for |
+| `provider` | `TursoProvider` | Yes | The Turso provider to use for this auth token |
+| `databaseName` | `string` | Yes | The name of the Turso database to create an auth token for |
+| `organizationSlug` | `string` | Yes | The Turso organization slug that owns the database |
 | `parameterName` | `string` | Yes | SSM parameter name where the generated JWT will be stored as a SecureString |
 | `expiration` | `string` | No | Token expiry (e.g., `'2w'`, `'1d30m'`). Default: `'never'` |
 | `authorization` | `string` | No | `'full-access'` or `'read-only'`. Default: `'full-access'` |

package/lib/handler/index.d.ts

@@ -3,31 +3,14 @@ export interface CloudFormationCustomResourceEvent {
     PhysicalResourceId?: string;
     ResourceProperties: {
         ServiceToken: string;
-        DatabaseName: string;
-        Group: string;
-        OrganizationSlug: string;
-        SizeLimit?: string;
-        Seed?: {
-            type: string;
-            name: string;
-            timestamp?: string;
-        };
-        Encryption?: {
-            encryptionKey: string;
-            encryptionCipher: string;
-        };
+        ResourceType: "Database" | "AuthToken";
+        [key: string]: unknown;
     };
     OldResourceProperties?: {
-        DatabaseName: string;
-        Group: string;
-        OrganizationSlug: string;
+        [key: string]: unknown;
     };
 }
 export declare function handler(event: CloudFormationCustomResourceEvent): Promise<{
     PhysicalResourceId: string;
-    Data?: {
-        DbId: string;
-        Hostname: string;
-        Name: string;
-    };
+    Data?: Record<string, string>;
 }>;