@hasna/domains 0.0.37 → 0.0.38

package/dist/cli/commands/dns.d.ts

@@ -1,4 +1,5 @@
 import type { Command } from "commander";
+import { type DnsProvider } from "../../lib/registrar.js";
 /** Record types the store (local sqlite CHECK + cloud API) accepts on write. */
 export declare const SUPPORTED_DNS_TYPES: Set<string>;
 /**
@@ -13,5 +14,7 @@ export declare function partitionPullableRecords<T extends {
     keep: T[];
     skipped: Map<string, number>;
 };
-export declare function registerDnsCommands(program: Command): void;
+export declare function registerDnsCommands(program: Command, deps?: {
+    getDnsProvider?: (name: string) => DnsProvider;
+}): void;
 //# sourceMappingURL=dns.d.ts.map

package/dist/cli/commands/dns.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dns.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/dns.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBzC,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,aAA4D,CAAC;AAE7F;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACjE,OAAO,EAAE,CAAC,EAAE,GACX;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAW7C;AAoBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkY1D"}
+{"version":3,"file":"dns.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/dns.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAa1E,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,aAA4D,CAAC;AAE7F;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACjE,OAAO,EAAE,CAAC,EAAE,GACX;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAW7C;AAyBD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW,CAAA;CAAO,GAC5D,IAAI,CAsYN"}

package/dist/cli/index.js

@@ -28946,7 +28946,7 @@ var init_bowser = __esm(() => {
 
 // node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
 var require_client2 = __commonJS((exports) => {
-  var __dirname = "/home/hasna/.hasna/repos/worktrees/open-domains/2a0dcf21-d730-4a74-bfc3-12e59e51ecd5/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
+  var __dirname = "/home/hasna/.hasna/repos/worktrees/domains/0a933b3e-a459-4bcb-b94d-6ab12a2ec235/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
   var retry = require_retry();
   var protocols = require_protocols();
   var lambdaInvokeStore = require_invoke_store();
@@ -50215,6 +50215,7 @@ function createRoute53Provider(config2) {
   }
   return {
     name: "route53",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       return listDomainInventory();
     },
@@ -50584,16 +50585,51 @@ async function listRecordsByNameType(zoneId, type, name, config2) {
     proxied: r4.proxied
   }));
 }
-async function replaceRecordsByNameType(zoneId, records, config2) {
+function sameRecordIdentity(a4, b4) {
+  return a4.type === b4.type && a4.name === b4.name && a4.content === b4.content && (a4.priority ?? undefined) === (b4.priority ?? undefined);
+}
+function resolveDesiredProxied(records, existing) {
+  const omitted = records.filter((record) => record.proxied === undefined);
+  if (omitted.length === 0)
+    return records;
+  const { type, name } = records[0];
+  if (omitted.length === records.length) {
+    const proxyStates = new Set(existing.map((record) => record.proxied));
+    if (proxyStates.size > 1) {
+      throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name}: ` + "existing records have mixed proxied values while desired records omit proxied; " + "set proxied explicitly on every desired record");
+    }
+    const inherited = existing[0]?.proxied;
+    return inherited === undefined ? records : records.map((record) => ({ ...record, proxied: inherited }));
+  }
+  const existingHasProxyState = existing.some((record) => record.proxied !== undefined);
+  return records.map((record) => {
+    if (record.proxied !== undefined)
+      return record;
+    const matches = existing.filter((candidate) => sameRecordIdentity(candidate, record));
+    if (matches.length === 1 && matches[0].proxied !== undefined) {
+      return { ...record, proxied: matches[0].proxied };
+    }
+    if (!existingHasProxyState)
+      return record;
+    throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name} record ${record.content}: ` + "omitted proxied does not resolve to exactly one existing value; " + "set proxied explicitly on this desired record");
+  });
+}
+async function prepareRecordsByNameType(zoneId, records, config2) {
   if (records.length === 0)
     return;
   const { type, name } = records[0];
   const existing = await listRecordsByNameType(zoneId, type, name, config2);
-  for (const record of existing) {
+  if (existing.length === records.length && records.every((record) => existing.some((candidate) => sameRecordIdentity(candidate, record) && candidate.ttl === record.ttl && (record.proxied === undefined || candidate.proxied === record.proxied)))) {
+    return;
+  }
+  return { existing, desired: resolveDesiredProxied(records, existing) };
+}
+async function replaceRecordsByNameType(zoneId, replacement, config2) {
+  for (const record of replacement.existing) {
     if (record.id)
       await deleteRecord2(zoneId, record.id, config2);
   }
-  for (const record of records) {
+  for (const record of replacement.desired) {
     await cfFetch(`/zones/${zoneId}/dns_records`, {
       method: "POST",
       body: {
@@ -50602,7 +50638,7 @@ async function replaceRecordsByNameType(zoneId, records, config2) {
         content: record.content,
         ttl: record.ttl ?? 1,
         priority: record.priority,
-        proxied: record.proxied ?? false
+        ...record.proxied === undefined ? {} : { proxied: record.proxied }
       },
       config: config2
     });
@@ -50637,6 +50673,7 @@ function createCloudflareProvider(config2) {
   const cfg = config2 ?? getConfig3();
   return {
     name: "cloudflare",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       const zones = await listZones(cfg);
       return zones.map(zoneToDomainInfo);
@@ -50687,7 +50724,8 @@ function createCloudflareProvider(config2) {
         name: r4.name,
         value: r4.content,
         ttl: r4.ttl === 1 ? 0 : r4.ttl,
-        priority: r4.priority
+        priority: r4.priority,
+        ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
       }));
     },
     async setDnsRecords(domain, records) {
@@ -50698,11 +50736,24 @@ function createCloudflareProvider(config2) {
       for (const r4 of records) {
         const key = `${r4.type}|${r4.name}`;
         const existing = grouped.get(key) ?? [];
-        existing.push({ type: r4.type, name: r4.name, content: r4.value, ttl: r4.ttl || 1, priority: r4.priority });
+        existing.push({
+          type: r4.type,
+          name: r4.name,
+          content: r4.value,
+          ttl: r4.ttl || 1,
+          priority: r4.priority,
+          ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
+        });
         grouped.set(key, existing);
       }
+      const replacements = [];
       for (const group of grouped.values()) {
-        await replaceRecordsByNameType(zone.id, group, cfg);
+        const replacement = await prepareRecordsByNameType(zone.id, group, cfg);
+        if (replacement)
+          replacements.push(replacement);
+      }
+      for (const replacement of replacements) {
+        await replaceRecordsByNameType(zone.id, replacement, cfg);
       }
       return true;
     }
@@ -56457,13 +56508,16 @@ function normalizeDnsRecord(record, domain) {
   } else if (lowerName.endsWith(`.${normalizedDomain}`)) {
     name = name.replace(/\.$/, "").slice(0, -(normalizedDomain.length + 1));
   }
-  return {
+  const normalized = {
     type,
     name,
     value: String(record.value).trim(),
     ttl: Number.isFinite(record.ttl) && record.ttl > 0 ? Math.trunc(record.ttl) : 300,
     priority: record.priority
   };
+  if (record.proxied !== undefined)
+    normalized.proxied = record.proxied;
+  return normalized;
 }
 function parseDesiredDnsState(input, domainHint) {
   let parsed;
@@ -56494,7 +56548,8 @@ function parseDesiredDnsState(input, domainHint) {
         name: r4["name"],
         value: r4["value"],
         ttl: typeof r4["ttl"] === "number" ? r4["ttl"] : Number(r4["ttl"] ?? 300),
-        priority: r4["priority"] == null ? undefined : Number(r4["priority"])
+        priority: r4["priority"] == null ? undefined : Number(r4["priority"]),
+        proxied: typeof r4["proxied"] === "boolean" ? r4["proxied"] : undefined
       }, domain);
     })
   };
@@ -56503,7 +56558,7 @@ function identity(record) {
   return [record.type, record.name, record.value, record.priority ?? ""].join("\x00");
 }
 function sameMutableFields(a4, b4) {
-  return a4.ttl === b4.ttl;
+  return a4.ttl === b4.ttl && (b4.proxied === undefined || a4.proxied === b4.proxied);
 }
 function createDnsPlan(domain, current, desired) {
   const normalizedCurrent = current.map((record) => normalizeDnsRecord(record, domain));
@@ -56538,6 +56593,13 @@ function createDnsPlan(domain, current, desired) {
 function planHasChanges(plan) {
   return plan.creates + plan.updates + plan.deletes > 0;
 }
+function dnsRecordGroupKey(record) {
+  return `${record.type}\x00${record.name}`;
+}
+function selectChangedDnsRecords(plan, desired) {
+  const changedGroups = new Set(plan.operations.filter((operation) => operation.op !== "unchanged").map((operation) => dnsRecordGroupKey(operation.record)));
+  return desired.filter((record) => changedGroups.has(dnsRecordGroupKey(normalizeDnsRecord(record, plan.domain))));
+}
 function getDnsApplyBlockReason(plan, opts) {
   if (!planHasChanges(plan))
     return;
@@ -56575,19 +56637,20 @@ function printDnsPlan(plan) {
     printLine(`  ${op.op.toUpperCase()} ${op.record.type} ${op.record.name} ${op.record.value} ttl=${op.record.ttl}${priority}${currentTtl}`);
   }
 }
-async function loadDnsPlan(domain, providerName, file) {
+async function loadDnsPlan(domain, providerName, file, resolveDnsProvider = getDnsProvider) {
   const desired = parseDesiredDnsState(readFileSync4(file, "utf-8"), domain);
   const planDomain = desired.domain ?? domain;
-  const provider = getDnsProvider(providerName);
+  const provider = resolveDnsProvider(providerName);
   const current = await provider.getDnsRecords(planDomain);
   return createDnsPlan(planDomain, current, desired.records);
 }
-function registerDnsCommands(program2) {
+function registerDnsCommands(program2, deps = {}) {
+  const resolveDnsProvider = deps.getDnsProvider ?? getDnsProvider;
   const dnsCmd = program2.command("dns").description("DNS record management");
   dnsCmd.command("plan <domain>").description("Preview desired DNS state changes from a JSON file without mutating provider records").requiredOption("--file <path>", "Desired DNS state JSON file").option("--provider <name>", "DNS provider \u2014 defaults to config default-dns").option("--json", "Output as JSON", false).action(async (domain, opts) => {
     const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
     try {
-      const plan = await loadDnsPlan(domain, providerName, opts.file);
+      const plan = await loadDnsPlan(domain, providerName, opts.file, resolveDnsProvider);
       if (opts.json)
         printLine(JSON.stringify(plan, null, 2));
       else
@@ -56600,7 +56663,7 @@ function registerDnsCommands(program2) {
   dnsCmd.command("diff <domain>").description("Alias of dns plan: show live provider DNS drift against desired JSON state").requiredOption("--file <path>", "Desired DNS state JSON file").option("--provider <name>", "DNS provider \u2014 defaults to config default-dns").option("--json", "Output as JSON", false).action(async (domain, opts) => {
     const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
     try {
-      const plan = await loadDnsPlan(domain, providerName, opts.file);
+      const plan = await loadDnsPlan(domain, providerName, opts.file, resolveDnsProvider);
       if (opts.json)
         printLine(JSON.stringify(plan, null, 2));
       else
@@ -56617,7 +56680,7 @@ function registerDnsCommands(program2) {
     try {
       const desired = parseDesiredDnsState(readFileSync4(opts.file, "utf-8"), domain);
       const planDomain = desired.domain ?? domain;
-      const provider = getDnsProvider(providerName);
+      const provider = resolveDnsProvider(providerName);
       const current = await provider.getDnsRecords(planDomain);
       const plan = createDnsPlan(planDomain, current, desired.records);
       if (!planHasChanges(plan)) {
@@ -56642,7 +56705,8 @@ function registerDnsCommands(program2) {
         }
         process.exit(1);
       }
-      await provider.setDnsRecords(planDomain, desired.records);
+      const recordsToApply = provider.dnsWriteScope === "changed-groups" ? selectChangedDnsRecords(plan, desired.records) : desired.records;
+      await provider.setDnsRecords(planDomain, recordsToApply);
       const verified = createDnsPlan(planDomain, await provider.getDnsRecords(planDomain), desired.records);
       if (planHasChanges(verified)) {
         if (opts.json)
@@ -56832,7 +56896,7 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
   dnsCmd.command("pull <domain>").description("Pull live DNS records from provider into local DB").option("--provider <name>", "DNS provider (route53, cloudflare) \u2014 defaults to config default-dns").action(async (domain, opts) => {
     const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
     try {
-      const provider = getDnsProvider(providerName);
+      const provider = resolveDnsProvider(providerName);
       const records = await provider.getDnsRecords(domain);
       const dbDomain = await getDomainByName2(domain);
       if (!dbDomain) {
@@ -56866,7 +56930,7 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
       const dbDomain = await getDomain2(domainId) ?? (() => {
         throw new Error(`Domain '${domainId}' not found`);
       })();
-      const provider = getDnsProvider(providerName);
+      const provider = resolveDnsProvider(providerName);
       await provider.setDnsRecords(dbDomain.name, records.map((r4) => ({
         type: r4.type,
         name: r4.name,

package/dist/index.js

@@ -12578,7 +12578,7 @@ var init_bowser = __esm(() => {
 
 // node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
 var require_client2 = __commonJS((exports) => {
-  var __dirname = "/home/hasna/.hasna/repos/worktrees/open-domains/2a0dcf21-d730-4a74-bfc3-12e59e51ecd5/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
+  var __dirname = "/home/hasna/.hasna/repos/worktrees/domains/0a933b3e-a459-4bcb-b94d-6ab12a2ec235/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
   var retry = require_retry();
   var protocols = require_protocols();
   var lambdaInvokeStore = require_invoke_store();
@@ -46786,6 +46786,7 @@ function createRoute53Provider(config2) {
   }
   return {
     name: "route53",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       return listDomainInventory();
     },
@@ -47159,16 +47160,51 @@ async function upsertRecord2(zoneId, record, config2) {
     await cfFetch(`/zones/${zoneId}/dns_records`, { method: "POST", body, config: config2 });
   }
 }
-async function replaceRecordsByNameType(zoneId, records, config2) {
+function sameRecordIdentity(a4, b4) {
+  return a4.type === b4.type && a4.name === b4.name && a4.content === b4.content && (a4.priority ?? undefined) === (b4.priority ?? undefined);
+}
+function resolveDesiredProxied(records, existing) {
+  const omitted = records.filter((record) => record.proxied === undefined);
+  if (omitted.length === 0)
+    return records;
+  const { type, name } = records[0];
+  if (omitted.length === records.length) {
+    const proxyStates = new Set(existing.map((record) => record.proxied));
+    if (proxyStates.size > 1) {
+      throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name}: ` + "existing records have mixed proxied values while desired records omit proxied; " + "set proxied explicitly on every desired record");
+    }
+    const inherited = existing[0]?.proxied;
+    return inherited === undefined ? records : records.map((record) => ({ ...record, proxied: inherited }));
+  }
+  const existingHasProxyState = existing.some((record) => record.proxied !== undefined);
+  return records.map((record) => {
+    if (record.proxied !== undefined)
+      return record;
+    const matches = existing.filter((candidate) => sameRecordIdentity(candidate, record));
+    if (matches.length === 1 && matches[0].proxied !== undefined) {
+      return { ...record, proxied: matches[0].proxied };
+    }
+    if (!existingHasProxyState)
+      return record;
+    throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name} record ${record.content}: ` + "omitted proxied does not resolve to exactly one existing value; " + "set proxied explicitly on this desired record");
+  });
+}
+async function prepareRecordsByNameType(zoneId, records, config2) {
   if (records.length === 0)
     return;
   const { type, name } = records[0];
   const existing = await listRecordsByNameType(zoneId, type, name, config2);
-  for (const record of existing) {
+  if (existing.length === records.length && records.every((record) => existing.some((candidate) => sameRecordIdentity(candidate, record) && candidate.ttl === record.ttl && (record.proxied === undefined || candidate.proxied === record.proxied)))) {
+    return;
+  }
+  return { existing, desired: resolveDesiredProxied(records, existing) };
+}
+async function replaceRecordsByNameType(zoneId, replacement, config2) {
+  for (const record of replacement.existing) {
     if (record.id)
       await deleteRecord2(zoneId, record.id, config2);
   }
-  for (const record of records) {
+  for (const record of replacement.desired) {
     await cfFetch(`/zones/${zoneId}/dns_records`, {
       method: "POST",
       body: {
@@ -47177,7 +47213,7 @@ async function replaceRecordsByNameType(zoneId, records, config2) {
         content: record.content,
         ttl: record.ttl ?? 1,
         priority: record.priority,
-        proxied: record.proxied ?? false
+        ...record.proxied === undefined ? {} : { proxied: record.proxied }
       },
       config: config2
     });
@@ -47212,6 +47248,7 @@ function createCloudflareProvider(config2) {
   const cfg = config2 ?? getConfig3();
   return {
     name: "cloudflare",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       const zones = await listZones(cfg);
       return zones.map(zoneToDomainInfo);
@@ -47262,7 +47299,8 @@ function createCloudflareProvider(config2) {
         name: r4.name,
         value: r4.content,
         ttl: r4.ttl === 1 ? 0 : r4.ttl,
-        priority: r4.priority
+        priority: r4.priority,
+        ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
       }));
     },
     async setDnsRecords(domain, records) {
@@ -47273,11 +47311,24 @@ function createCloudflareProvider(config2) {
       for (const r4 of records) {
         const key = `${r4.type}|${r4.name}`;
         const existing = grouped.get(key) ?? [];
-        existing.push({ type: r4.type, name: r4.name, content: r4.value, ttl: r4.ttl || 1, priority: r4.priority });
+        existing.push({
+          type: r4.type,
+          name: r4.name,
+          content: r4.value,
+          ttl: r4.ttl || 1,
+          priority: r4.priority,
+          ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
+        });
         grouped.set(key, existing);
       }
+      const replacements = [];
       for (const group of grouped.values()) {
-        await replaceRecordsByNameType(zone.id, group, cfg);
+        const replacement = await prepareRecordsByNameType(zone.id, group, cfg);
+        if (replacement)
+          replacements.push(replacement);
+      }
+      for (const replacement of replacements) {
+        await replaceRecordsByNameType(zone.id, replacement, cfg);
       }
       return true;
     }

package/dist/lib/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/lib/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EAIxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAIjC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAqCD,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAkBpF;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQvG;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAUnG;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE;IACL,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1E,GACA,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF;AAID,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkBxG;AAkBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrH;AAyBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7G;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjI;AA4BD,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,WAAW,GAAG,uBAAuB,CA+EzG"}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/lib/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EAIxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAIjC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAqCD,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAkBpF;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQvG;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAUnG;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE;IACL,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1E,GACA,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF;AAID,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkBxG;AAkBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrH;AA+FD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7G;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjI;AA4BD,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,WAAW,GAAG,uBAAuB,CA6FzG"}

package/dist/lib/cloudflare.js

@@ -249,16 +249,51 @@ async function upsertRecord(zoneId, record, config) {
     await cfFetch(`/zones/${zoneId}/dns_records`, { method: "POST", body, config });
   }
 }
-async function replaceRecordsByNameType(zoneId, records, config) {
+function sameRecordIdentity(a, b) {
+  return a.type === b.type && a.name === b.name && a.content === b.content && (a.priority ?? undefined) === (b.priority ?? undefined);
+}
+function resolveDesiredProxied(records, existing) {
+  const omitted = records.filter((record) => record.proxied === undefined);
+  if (omitted.length === 0)
+    return records;
+  const { type, name } = records[0];
+  if (omitted.length === records.length) {
+    const proxyStates = new Set(existing.map((record) => record.proxied));
+    if (proxyStates.size > 1) {
+      throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name}: ` + "existing records have mixed proxied values while desired records omit proxied; " + "set proxied explicitly on every desired record");
+    }
+    const inherited = existing[0]?.proxied;
+    return inherited === undefined ? records : records.map((record) => ({ ...record, proxied: inherited }));
+  }
+  const existingHasProxyState = existing.some((record) => record.proxied !== undefined);
+  return records.map((record) => {
+    if (record.proxied !== undefined)
+      return record;
+    const matches = existing.filter((candidate) => sameRecordIdentity(candidate, record));
+    if (matches.length === 1 && matches[0].proxied !== undefined) {
+      return { ...record, proxied: matches[0].proxied };
+    }
+    if (!existingHasProxyState)
+      return record;
+    throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name} record ${record.content}: ` + "omitted proxied does not resolve to exactly one existing value; " + "set proxied explicitly on this desired record");
+  });
+}
+async function prepareRecordsByNameType(zoneId, records, config) {
   if (records.length === 0)
     return;
   const { type, name } = records[0];
   const existing = await listRecordsByNameType(zoneId, type, name, config);
-  for (const record of existing) {
+  if (existing.length === records.length && records.every((record) => existing.some((candidate) => sameRecordIdentity(candidate, record) && candidate.ttl === record.ttl && (record.proxied === undefined || candidate.proxied === record.proxied)))) {
+    return;
+  }
+  return { existing, desired: resolveDesiredProxied(records, existing) };
+}
+async function replaceRecordsByNameType(zoneId, replacement, config) {
+  for (const record of replacement.existing) {
     if (record.id)
       await deleteRecord(zoneId, record.id, config);
   }
-  for (const record of records) {
+  for (const record of replacement.desired) {
     await cfFetch(`/zones/${zoneId}/dns_records`, {
       method: "POST",
       body: {
@@ -267,7 +302,7 @@ async function replaceRecordsByNameType(zoneId, records, config) {
         content: record.content,
         ttl: record.ttl ?? 1,
         priority: record.priority,
-        proxied: record.proxied ?? false
+        ...record.proxied === undefined ? {} : { proxied: record.proxied }
       },
       config
     });
@@ -308,6 +343,7 @@ function createCloudflareProvider(config) {
   const cfg = config ?? getConfig();
   return {
     name: "cloudflare",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       const zones = await listZones(cfg);
       return zones.map(zoneToDomainInfo);
@@ -358,7 +394,8 @@ function createCloudflareProvider(config) {
         name: r.name,
         value: r.content,
         ttl: r.ttl === 1 ? 0 : r.ttl,
-        priority: r.priority
+        priority: r.priority,
+        ...r.proxied === undefined ? {} : { proxied: r.proxied }
       }));
     },
     async setDnsRecords(domain, records) {
@@ -369,11 +406,24 @@ function createCloudflareProvider(config) {
       for (const r of records) {
         const key = `${r.type}|${r.name}`;
         const existing = grouped.get(key) ?? [];
-        existing.push({ type: r.type, name: r.name, content: r.value, ttl: r.ttl || 1, priority: r.priority });
+        existing.push({
+          type: r.type,
+          name: r.name,
+          content: r.value,
+          ttl: r.ttl || 1,
+          priority: r.priority,
+          ...r.proxied === undefined ? {} : { proxied: r.proxied }
+        });
         grouped.set(key, existing);
       }
+      const replacements = [];
       for (const group of grouped.values()) {
-        await replaceRecordsByNameType(zone.id, group, cfg);
+        const replacement = await prepareRecordsByNameType(zone.id, group, cfg);
+        if (replacement)
+          replacements.push(replacement);
+      }
+      for (const replacement of replacements) {
+        await replaceRecordsByNameType(zone.id, replacement, cfg);
       }
       return true;
     }

package/dist/lib/dns-plan.d.ts

@@ -22,6 +22,7 @@ export declare function normalizeDnsRecord(record: ProviderDnsRecord, domain: st
 export declare function parseDesiredDnsState(input: string, domainHint?: string): DesiredDnsState;
 export declare function createDnsPlan(domain: string, current: ProviderDnsRecord[], desired: ProviderDnsRecord[]): DnsPlan;
 export declare function planHasChanges(plan: DnsPlan): boolean;
+export declare function selectChangedDnsRecords(plan: DnsPlan, desired: ProviderDnsRecord[]): ProviderDnsRecord[];
 export declare function getDnsApplyBlockReason(plan: DnsPlan, opts: {
     yes?: boolean;
     allowDelete?: boolean;

package/dist/lib/dns-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dns-plan.d.ts","sourceRoot":"","sources":["../../src/lib/dns-plan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,oBAAoB,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,GAAG,8BAA8B,GAAG,0BAA0B,CAAC;AAMxH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAiB/F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,eAAe,CA6BxF;AAUD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAgCjH;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAErD;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,mBAAmB,GAAG,SAAS,CAMrI"}
+{"version":3,"file":"dns-plan.d.ts","sourceRoot":"","sources":["../../src/lib/dns-plan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,oBAAoB,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,GAAG,8BAA8B,GAAG,0BAA0B,CAAC;AAMxH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAmB/F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,eAAe,CA8BxF;AAUD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAgCjH;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAErD;AAMD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,iBAAiB,EAAE,CASxG;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,mBAAmB,GAAG,SAAS,CAMrI"}

package/dist/lib/registrar.d.ts

@@ -10,6 +10,7 @@ export interface ProviderDnsRecord {
     value: string;
     ttl: number;
     priority?: number;
+    proxied?: boolean;
 }
 export interface ProviderDomainInfo {
     domain: string;
@@ -92,8 +93,11 @@ export interface RegistrarProvider extends DomainInventoryProvider {
     updateNameservers?(domain: string, nameservers: string[]): Promise<ProviderNameserverUpdateResult>;
 }
 /** Handles DNS zone and record management */
+export type DnsWriteScope = "full-zone" | "changed-groups";
 export interface DnsProvider {
     name: string;
+    /** Omission is conservative: setDnsRecords receives the complete desired zone. */
+    dnsWriteScope?: DnsWriteScope;
     getDnsRecords(domain: string): Promise<ProviderDnsRecord[]>;
     setDnsRecords(domain: string, records: ProviderDnsRecord[]): Promise<boolean>;
 }

package/dist/lib/registrar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registrar.d.ts","sourceRoot":"","sources":["../../src/lib/registrar.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAYrF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1D,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChF,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChE;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAkB,SAAQ,uBAAuB;IAChE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3D,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1E,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjE,cAAc,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAClJ,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACpG;AAED,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED,gDAAgD;AAChD,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,aAAa,CAAC;IACnD,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAmND,UAAU,aAAa;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,uBAAuB,CAAC;IAChD,eAAe,CAAC,EAAE,MAAM,iBAAiB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,WAAW,CAAC;CAC/B;AAiED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAE3D;AAED,wBAAgB,qBAAqB,IAAI,YAAY,EAAE,CAMtD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAIjE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAIhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAIpE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAIxD;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAE3D;AAED,wBAAsB,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAsBxE;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GACxD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYxB"}
+{"version":3,"file":"registrar.d.ts","sourceRoot":"","sources":["../../src/lib/registrar.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAYrF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1D,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChF,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChE;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAkB,SAAQ,uBAAuB;IAChE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3D,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1E,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjE,cAAc,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAClJ,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACpG;AAED,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED,gDAAgD;AAChD,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,aAAa,CAAC;IACnD,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAmND,UAAU,aAAa;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,uBAAuB,CAAC;IAChD,eAAe,CAAC,EAAE,MAAM,iBAAiB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,WAAW,CAAC;CAC/B;AAiED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAE3D;AAED,wBAAgB,qBAAqB,IAAI,YAAY,EAAE,CAMtD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAIjE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAIhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAIpE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAIxD;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAE3D;AAED,wBAAsB,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAsBxE;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GACxD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYxB"}

package/dist/lib/registrar.js

@@ -249,16 +249,51 @@ async function upsertRecord(zoneId, record, config) {
     await cfFetch(`/zones/${zoneId}/dns_records`, { method: "POST", body, config });
   }
 }
-async function replaceRecordsByNameType(zoneId, records, config) {
+function sameRecordIdentity(a, b) {
+  return a.type === b.type && a.name === b.name && a.content === b.content && (a.priority ?? undefined) === (b.priority ?? undefined);
+}
+function resolveDesiredProxied(records, existing) {
+  const omitted = records.filter((record) => record.proxied === undefined);
+  if (omitted.length === 0)
+    return records;
+  const { type, name } = records[0];
+  if (omitted.length === records.length) {
+    const proxyStates = new Set(existing.map((record) => record.proxied));
+    if (proxyStates.size > 1) {
+      throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name}: ` + "existing records have mixed proxied values while desired records omit proxied; " + "set proxied explicitly on every desired record");
+    }
+    const inherited = existing[0]?.proxied;
+    return inherited === undefined ? records : records.map((record) => ({ ...record, proxied: inherited }));
+  }
+  const existingHasProxyState = existing.some((record) => record.proxied !== undefined);
+  return records.map((record) => {
+    if (record.proxied !== undefined)
+      return record;
+    const matches = existing.filter((candidate) => sameRecordIdentity(candidate, record));
+    if (matches.length === 1 && matches[0].proxied !== undefined) {
+      return { ...record, proxied: matches[0].proxied };
+    }
+    if (!existingHasProxyState)
+      return record;
+    throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name} record ${record.content}: ` + "omitted proxied does not resolve to exactly one existing value; " + "set proxied explicitly on this desired record");
+  });
+}
+async function prepareRecordsByNameType(zoneId, records, config) {
   if (records.length === 0)
     return;
   const { type, name } = records[0];
   const existing = await listRecordsByNameType(zoneId, type, name, config);
-  for (const record of existing) {
+  if (existing.length === records.length && records.every((record) => existing.some((candidate) => sameRecordIdentity(candidate, record) && candidate.ttl === record.ttl && (record.proxied === undefined || candidate.proxied === record.proxied)))) {
+    return;
+  }
+  return { existing, desired: resolveDesiredProxied(records, existing) };
+}
+async function replaceRecordsByNameType(zoneId, replacement, config) {
+  for (const record of replacement.existing) {
     if (record.id)
       await deleteRecord(zoneId, record.id, config);
   }
-  for (const record of records) {
+  for (const record of replacement.desired) {
     await cfFetch(`/zones/${zoneId}/dns_records`, {
       method: "POST",
       body: {
@@ -267,7 +302,7 @@ async function replaceRecordsByNameType(zoneId, records, config) {
         content: record.content,
         ttl: record.ttl ?? 1,
         priority: record.priority,
-        proxied: record.proxied ?? false
+        ...record.proxied === undefined ? {} : { proxied: record.proxied }
       },
       config
     });
@@ -308,6 +343,7 @@ function createCloudflareProvider(config) {
   const cfg = config ?? getConfig();
   return {
     name: "cloudflare",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       const zones = await listZones(cfg);
       return zones.map(zoneToDomainInfo);
@@ -358,7 +394,8 @@ function createCloudflareProvider(config) {
         name: r.name,
         value: r.content,
         ttl: r.ttl === 1 ? 0 : r.ttl,
-        priority: r.priority
+        priority: r.priority,
+        ...r.proxied === undefined ? {} : { proxied: r.proxied }
       }));
     },
     async setDnsRecords(domain, records) {
@@ -369,11 +406,24 @@ function createCloudflareProvider(config) {
       for (const r of records) {
         const key = `${r.type}|${r.name}`;
         const existing = grouped.get(key) ?? [];
-        existing.push({ type: r.type, name: r.name, content: r.value, ttl: r.ttl || 1, priority: r.priority });
+        existing.push({
+          type: r.type,
+          name: r.name,
+          content: r.value,
+          ttl: r.ttl || 1,
+          priority: r.priority,
+          ...r.proxied === undefined ? {} : { proxied: r.proxied }
+        });
         grouped.set(key, existing);
       }
+      const replacements = [];
       for (const group of grouped.values()) {
-        await replaceRecordsByNameType(zone.id, group, cfg);
+        const replacement = await prepareRecordsByNameType(zone.id, group, cfg);
+        if (replacement)
+          replacements.push(replacement);
+      }
+      for (const replacement of replacements) {
+        await replaceRecordsByNameType(zone.id, replacement, cfg);
       }
       return true;
     }
@@ -910,6 +960,7 @@ function createRoute53Provider(config) {
   }
   return {
     name: "route53",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       return listDomainInventory();
     },

package/dist/lib/route53.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route53.d.ts","sourceRoot":"","sources":["../../src/lib/route53.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA6BH,OAAO,KAAK,EACV,YAAY,EAOb,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,OAAO,CAAC;IAChC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iFAAiF;IACjF,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kGAAkG;IAClG,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,SAAS,IAAI,aAAa,CAQzC;AAoBD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6B3G;AA0BD,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQjC;AAED,wBAAsB,aAAa,CACjC,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,eAAe,EAAE,CAAC,CAgB5B;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,aAAa,SAAI,EACjB,SAAS,UAAO,EAChB,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBlC;AAmBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,iBAAiB,EAC1B,aAAa,SAAI,EACjB,SAAS,UAAO,EAChB,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBlC;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAUjC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;CACnC;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA6BnG;AA4BD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,0BAA0B,CAAC,CA0BrC;AAED,gFAAgF;AAChF,KAAK,kBAAkB,GAAG;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAExF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,CAAC,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAmB/F;AA4BD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GACrC,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAsB,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAoBvF;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,GAAG;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAatD;AAED,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ClG;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAWnH;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqBhC;AA6CD,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA2BxG;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAY9B;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAY9B;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAiB9B;AAID,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,YAAY,CAqM1E"}
+{"version":3,"file":"route53.d.ts","sourceRoot":"","sources":["../../src/lib/route53.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA6BH,OAAO,KAAK,EACV,YAAY,EAOb,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,OAAO,CAAC;IAChC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iFAAiF;IACjF,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kGAAkG;IAClG,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,SAAS,IAAI,aAAa,CAQzC;AAoBD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6B3G;AA0BD,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQjC;AAED,wBAAsB,aAAa,CACjC,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,eAAe,EAAE,CAAC,CAgB5B;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,aAAa,SAAI,EACjB,SAAS,UAAO,EAChB,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBlC;AAmBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,iBAAiB,EAC1B,aAAa,SAAI,EACjB,SAAS,UAAO,EAChB,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBlC;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAUjC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;CACnC;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA6BnG;AA4BD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,0BAA0B,CAAC,CA0BrC;AAED,gFAAgF;AAChF,KAAK,kBAAkB,GAAG;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAExF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,CAAC,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAmB/F;AA4BD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GACrC,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAsB,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAoBvF;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,GAAG;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAatD;AAED,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ClG;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAWnH;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqBhC;AA6CD,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA2BxG;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAY9B;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAY9B;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,MAAM,CAAC,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAiB9B;AAID,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,YAAY,CAsM1E"}

package/dist/lib/route53.js

@@ -528,6 +528,7 @@ function createRoute53Provider(config) {
   }
   return {
     name: "route53",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       return listDomainInventory();
     },

package/dist/mcp/index.js

@@ -15752,7 +15752,7 @@ var init_bowser = __esm(() => {
 
 // node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
 var require_client2 = __commonJS((exports) => {
-  var __dirname = "/home/hasna/.hasna/repos/worktrees/open-domains/2a0dcf21-d730-4a74-bfc3-12e59e51ecd5/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
+  var __dirname = "/home/hasna/.hasna/repos/worktrees/domains/0a933b3e-a459-4bcb-b94d-6ab12a2ec235/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
   var retry = require_retry();
   var protocols = require_protocols();
   var lambdaInvokeStore = require_invoke_store();
@@ -50615,6 +50615,7 @@ function createRoute53Provider(config2) {
   }
   return {
     name: "route53",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       return listDomainInventory();
     },
@@ -50971,16 +50972,51 @@ async function listRecordsByNameType(zoneId, type, name, config2) {
     proxied: r4.proxied
   }));
 }
-async function replaceRecordsByNameType(zoneId, records, config2) {
+function sameRecordIdentity(a4, b4) {
+  return a4.type === b4.type && a4.name === b4.name && a4.content === b4.content && (a4.priority ?? undefined) === (b4.priority ?? undefined);
+}
+function resolveDesiredProxied(records, existing) {
+  const omitted = records.filter((record) => record.proxied === undefined);
+  if (omitted.length === 0)
+    return records;
+  const { type, name } = records[0];
+  if (omitted.length === records.length) {
+    const proxyStates = new Set(existing.map((record) => record.proxied));
+    if (proxyStates.size > 1) {
+      throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name}: ` + "existing records have mixed proxied values while desired records omit proxied; " + "set proxied explicitly on every desired record");
+    }
+    const inherited = existing[0]?.proxied;
+    return inherited === undefined ? records : records.map((record) => ({ ...record, proxied: inherited }));
+  }
+  const existingHasProxyState = existing.some((record) => record.proxied !== undefined);
+  return records.map((record) => {
+    if (record.proxied !== undefined)
+      return record;
+    const matches = existing.filter((candidate) => sameRecordIdentity(candidate, record));
+    if (matches.length === 1 && matches[0].proxied !== undefined) {
+      return { ...record, proxied: matches[0].proxied };
+    }
+    if (!existingHasProxyState)
+      return record;
+    throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name} record ${record.content}: ` + "omitted proxied does not resolve to exactly one existing value; " + "set proxied explicitly on this desired record");
+  });
+}
+async function prepareRecordsByNameType(zoneId, records, config2) {
   if (records.length === 0)
     return;
   const { type, name } = records[0];
   const existing = await listRecordsByNameType(zoneId, type, name, config2);
-  for (const record of existing) {
+  if (existing.length === records.length && records.every((record) => existing.some((candidate) => sameRecordIdentity(candidate, record) && candidate.ttl === record.ttl && (record.proxied === undefined || candidate.proxied === record.proxied)))) {
+    return;
+  }
+  return { existing, desired: resolveDesiredProxied(records, existing) };
+}
+async function replaceRecordsByNameType(zoneId, replacement, config2) {
+  for (const record of replacement.existing) {
     if (record.id)
       await deleteRecord2(zoneId, record.id, config2);
   }
-  for (const record of records) {
+  for (const record of replacement.desired) {
     await cfFetch(`/zones/${zoneId}/dns_records`, {
       method: "POST",
       body: {
@@ -50989,7 +51025,7 @@ async function replaceRecordsByNameType(zoneId, records, config2) {
         content: record.content,
         ttl: record.ttl ?? 1,
         priority: record.priority,
-        proxied: record.proxied ?? false
+        ...record.proxied === undefined ? {} : { proxied: record.proxied }
       },
       config: config2
     });
@@ -51024,6 +51060,7 @@ function createCloudflareProvider(config2) {
   const cfg = config2 ?? getConfig3();
   return {
     name: "cloudflare",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       const zones = await listZones(cfg);
       return zones.map(zoneToDomainInfo);
@@ -51074,7 +51111,8 @@ function createCloudflareProvider(config2) {
         name: r4.name,
         value: r4.content,
         ttl: r4.ttl === 1 ? 0 : r4.ttl,
-        priority: r4.priority
+        priority: r4.priority,
+        ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
       }));
     },
     async setDnsRecords(domain, records) {
@@ -51085,11 +51123,24 @@ function createCloudflareProvider(config2) {
       for (const r4 of records) {
         const key = `${r4.type}|${r4.name}`;
         const existing = grouped.get(key) ?? [];
-        existing.push({ type: r4.type, name: r4.name, content: r4.value, ttl: r4.ttl || 1, priority: r4.priority });
+        existing.push({
+          type: r4.type,
+          name: r4.name,
+          content: r4.value,
+          ttl: r4.ttl || 1,
+          priority: r4.priority,
+          ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
+        });
         grouped.set(key, existing);
       }
+      const replacements = [];
       for (const group of grouped.values()) {
-        await replaceRecordsByNameType(zone.id, group, cfg);
+        const replacement = await prepareRecordsByNameType(zone.id, group, cfg);
+        if (replacement)
+          replacements.push(replacement);
+      }
+      for (const replacement of replacements) {
+        await replaceRecordsByNameType(zone.id, replacement, cfg);
       }
       return true;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/domains",
-  "version": "0.0.37",
+  "version": "0.0.38",
   "description": "Domain portfolio, registrar, marketplace, and DNS management for AI agents — CLI + MCP + HTTP API + SDK, local SQLite or cloud Postgres",
   "type": "module",
   "main": "dist/index.js",