@highstate/cloudflare 0.9.18 → 0.9.19

package/dist/connection/index.js

@@ -3,7 +3,7 @@ import { forUnit } from '@highstate/pulumi';
 import { Provider, getZones } from '@pulumi/cloudflare';
 
 // src/connection/index.ts
-var { name, secrets, outputs } = forUnit(cloudflare.connection);
+var { secrets, outputs } = forUnit(cloudflare.connection);
 var provider = new Provider("cloudflare", { apiToken: secrets.apiToken });
 var { results: zones } = await getZones({}, { provider });
 if (!zones.length) {
@@ -24,12 +24,14 @@ if (!zones[0].name) {
 }
 var connection_default = outputs({
   dnsProvider: {
-    name,
-    type: "cloudflare",
+    id: `cloudflare.${zones[0].id}`,
     domain: zones[0].name,
-    data: {
-      zoneId: zones[0].id,
-      apiToken: secrets.apiToken
+    implRef: {
+      package: "@highstate/cloudflare",
+      data: {
+        zoneId: zones[0].id,
+        apiToken: secrets.apiToken
+      }
     }
   },
   $statusFields: {

package/dist/connection/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/connection/index.ts"],"names":[],"mappings":";;;;;AAIA,IAAM,EAAE,IAAA,EAAM,OAAA,EAAS,SAAQ,GAAI,OAAA,CAAQ,WAAW,UAAU,CAAA;AAEhE,IAAM,QAAA,GAAW,IAAI,QAAA,CAAS,YAAA,EAAc,EAAE,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA;AAC1E,IAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,SAAS,EAAC,EAAG,EAAE,QAAA,EAAU,CAAA;AAE1D,IAAI,CAAC,MAAM,MAAA,EAAQ;AACjB,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,CAAE,EAAA,EAAI;AAChB,EAAA,MAAM,IAAI,MAAM,qBAAqB,CAAA;AACvC;AAEA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,EAAM;AAClB,EAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACzC;AAEA,IAAO,qBAAQ,OAAA,CAAQ;AAAA,EACrB,WAAA,EAAa;AAAA,IACX,IAAA;AAAA,IACA,IAAA,EAAM,YAAA;AAAA,IACN,MAAA,EAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,IACjB,IAAA,EAAM;AAAA,MACJ,MAAA,EAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,EAAA;AAAA,MACjB,UAAU,OAAA,CAAQ;AAAA;AACpB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA;AAClB;AAEJ,CAAC","file":"index.js","sourcesContent":["import { cloudflare } from \"@highstate/library\"\nimport { forUnit } from \"@highstate/pulumi\"\nimport { getZones, Provider } from \"@pulumi/cloudflare\"\n\nconst { name, secrets, outputs } = forUnit(cloudflare.connection)\n\nconst provider = new Provider(\"cloudflare\", { apiToken: secrets.apiToken })\nconst { results: zones } = await getZones({}, { provider })\n\nif (!zones.length) {\n  throw new Error(\n    \"No zones found with the provided API token. Ensure the token has Zone.Zone:Read permission on the zone.\",\n  )\n}\n\nif (zones.length > 1) {\n  throw new Error(\n    \"Multiple zones found with the provided API token, please use separate tokens and connections for each zone.\",\n  )\n}\n\nif (!zones[0].id) {\n  throw new Error(\"Zone ID is missing.\")\n}\n\nif (!zones[0].name) {\n  throw new Error(\"Zone name is missing.\")\n}\n\nexport default outputs({\n  dnsProvider: {\n    name,\n    type: \"cloudflare\",\n    domain: zones[0].name,\n    data: {\n      zoneId: zones[0].id,\n      apiToken: secrets.apiToken,\n    },\n  },\n  $statusFields: {\n    domain: {\n      value: zones[0].name,\n    },\n    zoneId: {\n      value: zones[0].id,\n    },\n  },\n})\n"]}
+{"version":3,"sources":["../../src/connection/index.ts"],"names":[],"mappings":";;;;;AAIA,IAAM,EAAE,OAAA,EAAS,OAAA,EAAQ,GAAI,OAAA,CAAQ,WAAW,UAAU,CAAA;AAE1D,IAAM,QAAA,GAAW,IAAI,QAAA,CAAS,YAAA,EAAc,EAAE,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA;AAC1E,IAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,SAAS,EAAC,EAAG,EAAE,QAAA,EAAU,CAAA;AAE1D,IAAI,CAAC,MAAM,MAAA,EAAQ;AACjB,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,CAAE,EAAA,EAAI;AAChB,EAAA,MAAM,IAAI,MAAM,qBAAqB,CAAA;AACvC;AAEA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,EAAM;AAClB,EAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACzC;AAEA,IAAO,qBAAQ,OAAA,CAAQ;AAAA,EACrB,WAAA,EAAa;AAAA,IACX,EAAA,EAAI,CAAA,WAAA,EAAc,KAAA,CAAM,CAAC,EAAE,EAAE,CAAA,CAAA;AAAA,IAC7B,MAAA,EAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,IAEjB,OAAA,EAAS;AAAA,MACP,OAAA,EAAS,uBAAA;AAAA,MACT,IAAA,EAAM;AAAA,QACJ,MAAA,EAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,EAAA;AAAA,QACjB,UAAU,OAAA,CAAQ;AAAA;AACpB;AACF,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA;AAClB;AAEJ,CAAC","file":"index.js","sourcesContent":["import { cloudflare } from \"@highstate/library\"\nimport { forUnit } from \"@highstate/pulumi\"\nimport { getZones, Provider } from \"@pulumi/cloudflare\"\n\nconst { secrets, outputs } = forUnit(cloudflare.connection)\n\nconst provider = new Provider(\"cloudflare\", { apiToken: secrets.apiToken })\nconst { results: zones } = await getZones({}, { provider })\n\nif (!zones.length) {\n  throw new Error(\n    \"No zones found with the provided API token. Ensure the token has Zone.Zone:Read permission on the zone.\",\n  )\n}\n\nif (zones.length > 1) {\n  throw new Error(\n    \"Multiple zones found with the provided API token, please use separate tokens and connections for each zone.\",\n  )\n}\n\nif (!zones[0].id) {\n  throw new Error(\"Zone ID is missing.\")\n}\n\nif (!zones[0].name) {\n  throw new Error(\"Zone name is missing.\")\n}\n\nexport default outputs({\n  dnsProvider: {\n    id: `cloudflare.${zones[0].id}`,\n    domain: zones[0].name,\n\n    implRef: {\n      package: \"@highstate/cloudflare\",\n      data: {\n        zoneId: zones[0].id,\n        apiToken: secrets.apiToken,\n      },\n    },\n  },\n  $statusFields: {\n    domain: {\n      value: zones[0].name,\n    },\n    zoneId: {\n      value: zones[0].id,\n    },\n  },\n})\n"]}

package/dist/highstate.manifest.json

@@ -1,6 +1,7 @@
 {
   "sourceHashes": {
-    "./dist/index.js": 2776017349,
-    "./dist/connection/index.js": 1509857255
+    "./dist/impl/dns-record.js": 4257221977,
+    "./dist/impl/dns01-solver.js": 3438987121,
+    "./dist/connection/index.js": 2589591392
   }
 }

package/dist/impl/dns-record.js

@@ -0,0 +1,52 @@
+import { dnsRecordMediator } from '@highstate/common';
+import { cloudflare } from '@highstate/library';
+import { getResourceComment } from '@highstate/pulumi';
+import { Provider, DnsRecord } from '@pulumi/cloudflare';
+import { ComponentResource } from '@pulumi/pulumi';
+import { getOrCreate } from '@highstate/contract';
+
+// src/impl/dns-record.ts
+var providers = /* @__PURE__ */ new Map();
+function getProvider(data) {
+  return getOrCreate(
+    providers,
+    data.zoneId,
+    () => new Provider(data.zoneId, { apiToken: data.apiToken })
+  );
+}
+
+// src/impl/dns-record.ts
+var CloudflareDnsRecord = class extends ComponentResource {
+  /**
+   * The underlying Cloudflare DNS record resource.
+   */
+  dnsRecord;
+  constructor(name, args, opts) {
+    super("highstate:cloudflare:DnsRecord", name, args, opts);
+    this.dnsRecord = new DnsRecord(
+      name,
+      {
+        name: args.name ?? name,
+        zoneId: args.zoneId,
+        type: args.type,
+        content: args.value,
+        proxied: args.proxied,
+        comment: getResourceComment(),
+        ttl: args.ttl ?? 1,
+        priority: args.priority
+      },
+      opts
+    );
+  }
+};
+var createDnsRecord = dnsRecordMediator.implement(
+  cloudflare.providerDataSchema,
+  ({ name, args }, data) => {
+    const provider = getProvider(data);
+    return new CloudflareDnsRecord(name, { ...args, zoneId: data.zoneId }, { provider });
+  }
+);
+
+export { createDnsRecord };
+//# sourceMappingURL=dns-record.js.map
+//# sourceMappingURL=dns-record.js.map

package/dist/impl/dns-record.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/provider.ts","../../src/impl/dns-record.ts"],"names":[],"mappings":";;;;;;;;AAIA,IAAM,SAAA,uBAAgB,GAAA,EAAsB;AAErC,SAAS,YAAY,IAAA,EAAyC;AACnE,EAAA,OAAO,WAAA;AAAA,IACL,SAAA;AAAA,IACA,IAAA,CAAK,MAAA;AAAA,IACL,MAAM,IAAI,QAAA,CAAS,IAAA,CAAK,QAAQ,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU;AAAA,GAC7D;AACF;;;ACDA,IAAM,mBAAA,GAAN,cAAkC,iBAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAIzC,SAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA+B,IAAA,EAAwB;AAC/E,IAAA,KAAA,CAAM,gCAAA,EAAkC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAExD,IAAA,IAAA,CAAK,YAAY,IAAI,SAAA;AAAA,MACnB,IAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,QACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,SAAS,IAAA,CAAK,KAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,kBAAA,EAAmB;AAAA,QAC5B,GAAA,EAAK,KAAK,GAAA,IAAO,CAAA;AAAA,QACjB,UAAU,IAAA,CAAK;AAAA,OACjB;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,kBAAkB,iBAAA,CAAkB,SAAA;AAAA,EAC/C,UAAA,CAAW,kBAAA;AAAA,EACX,CAAC,EAAE,IAAA,EAAM,IAAA,IAAQ,IAAA,KAAS;AACxB,IAAA,MAAM,QAAA,GAAW,YAAY,IAAI,CAAA;AAEjC,IAAA,OAAO,IAAI,mBAAA,CAAoB,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAO,EAAG,EAAE,QAAA,EAAU,CAAA;AAAA,EACrF;AACF","file":"dns-record.js","sourcesContent":["import type { cloudflare } from \"@highstate/library\"\nimport { getOrCreate } from \"@highstate/contract\"\nimport { Provider } from \"@pulumi/cloudflare\"\n\nconst providers = new Map<string, Provider>()\n\nexport function getProvider(data: cloudflare.ProviderData): Provider {\n  return getOrCreate(\n    providers,\n    data.zoneId,\n    () => new Provider(data.zoneId, { apiToken: data.apiToken }),\n  )\n}\n","import { dnsRecordMediator, type ResolvedDnsRecordArgs } from \"@highstate/common\"\nimport { cloudflare } from \"@highstate/library\"\nimport { getResourceComment } from \"@highstate/pulumi\"\nimport { DnsRecord } from \"@pulumi/cloudflare\"\nimport { ComponentResource, type ResourceOptions } from \"@pulumi/pulumi\"\nimport { getProvider } from \"../provider\"\n\ntype CloudflareDnsRecordArgs = ResolvedDnsRecordArgs & {\n  zoneId: string\n}\n\nclass CloudflareDnsRecord extends ComponentResource {\n  /**\n   * The underlying Cloudflare DNS record resource.\n   */\n  readonly dnsRecord: DnsRecord\n\n  constructor(name: string, args: CloudflareDnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:cloudflare:DnsRecord\", name, args, opts)\n\n    this.dnsRecord = new DnsRecord(\n      name,\n      {\n        name: args.name ?? name,\n        zoneId: args.zoneId,\n        type: args.type,\n        content: args.value,\n        proxied: args.proxied,\n        comment: getResourceComment(),\n        ttl: args.ttl ?? 1,\n        priority: args.priority,\n      },\n      opts,\n    )\n  }\n}\n\nexport const createDnsRecord = dnsRecordMediator.implement(\n  cloudflare.providerDataSchema,\n  ({ name, args }, data) => {\n    const provider = getProvider(data)\n\n    return new CloudflareDnsRecord(name, { ...args, zoneId: data.zoneId }, { provider })\n  },\n)\n"]}

package/dist/impl/dns01-solver.js

@@ -0,0 +1,27 @@
+import { dns01SolverMediator, Secret } from '@highstate/k8s';
+import { cloudflare } from '@highstate/library';
+
+// src/impl/dns01-solver.ts
+var createCloudflareDns01Solver = dns01SolverMediator.implement(
+  cloudflare.providerDataSchema,
+  ({ namespace }, data) => {
+    const secret = Secret.create(`cloudflare.${data.zoneId}`, {
+      namespace,
+      stringData: {
+        apiToken: data.apiToken
+      }
+    });
+    return {
+      cloudflare: {
+        apiTokenSecretRef: {
+          name: secret.metadata.name,
+          key: "apiToken"
+        }
+      }
+    };
+  }
+);
+
+export { createCloudflareDns01Solver };
+//# sourceMappingURL=dns01-solver.js.map
+//# sourceMappingURL=dns01-solver.js.map

package/dist/impl/dns01-solver.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/impl/dns01-solver.ts"],"names":[],"mappings":";;;;AAGO,IAAM,8BAA8B,mBAAA,CAAoB,SAAA;AAAA,EAC7D,UAAA,CAAW,kBAAA;AAAA,EACX,CAAC,EAAE,SAAA,EAAU,EAAG,IAAA,KAAS;AACvB,IAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,CAAA,WAAA,EAAc,IAAA,CAAK,MAAM,CAAA,CAAA,EAAI;AAAA,MACxD,SAAA;AAAA,MAEA,UAAA,EAAY;AAAA,QACV,UAAU,IAAA,CAAK;AAAA;AACjB,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,UAAA,EAAY;AAAA,QACV,iBAAA,EAAmB;AAAA,UACjB,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,GAAA,EAAK;AAAA;AACP;AACF,KACF;AAAA,EACF;AACF","file":"dns01-solver.js","sourcesContent":["import { dns01SolverMediator, Secret } from \"@highstate/k8s\"\nimport { cloudflare } from \"@highstate/library\"\n\nexport const createCloudflareDns01Solver = dns01SolverMediator.implement(\n  cloudflare.providerDataSchema,\n  ({ namespace }, data) => {\n    const secret = Secret.create(`cloudflare.${data.zoneId}`, {\n      namespace,\n\n      stringData: {\n        apiToken: data.apiToken,\n      },\n    })\n\n    return {\n      cloudflare: {\n        apiTokenSecretRef: {\n          name: secret.metadata.name,\n          key: \"apiToken\",\n        },\n      },\n    }\n  },\n)\n"]}

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@highstate/cloudflare",
-  "version": "0.9.18",
+  "version": "0.9.19",
   "type": "module",
   "files": [
     "dist"
   ],
   "exports": {
-    ".": "./dist/index.js",
+    "./impl/dns-record": "./dist/impl/dns-record.js",
+    "./impl/dns01-solver": "./dist/impl/dns01-solver.js",
     "./connection": "./dist/connection/index.js"
   },
   "publishConfig": {
@@ -16,12 +17,12 @@
     "build": "highstate build"
   },
   "dependencies": {
-    "@highstate/cert-manager": "^0.9.18",
-    "@highstate/common": "^0.9.18",
-    "@highstate/contract": "^0.9.18",
-    "@highstate/k8s": "^0.9.18",
-    "@highstate/library": "^0.9.18",
-    "@highstate/pulumi": "^0.9.18",
+    "@highstate/cert-manager": "^0.9.19",
+    "@highstate/common": "^0.9.19",
+    "@highstate/contract": "^0.9.19",
+    "@highstate/k8s": "^0.9.19",
+    "@highstate/library": "^0.9.19",
+    "@highstate/pulumi": "^0.9.19",
     "@pulumi/cloudflare": "^6.1.1",
     "@pulumi/command": "^1.0.2",
     "@pulumi/kubernetes": "^4.18.0",
@@ -30,7 +31,7 @@
     "ajv": "^8.17.1"
   },
   "devDependencies": {
-    "@highstate/cli": "^0.9.18"
+    "@highstate/cli": "^0.9.19"
   },
-  "gitHead": "9ebcd7da56b00b8ca08bf52cc8438f527338cd64"
+  "gitHead": "e77d292335556c6e5b6275acda1a3d1609d786a1"
 }

package/dist/index.js

@@ -1,77 +0,0 @@
-import { getResourceComment } from '@highstate/pulumi';
-import { DnsRecord } from '@highstate/common';
-import { DnsRecord as DnsRecord$1, Provider } from '@pulumi/cloudflare';
-import { core } from '@pulumi/kubernetes';
-import { Type } from '@highstate/contract';
-import { Ajv } from 'ajv';
-
-// src/dns.ts
-var providers = /* @__PURE__ */ new Map();
-function getProvider(domain, apiToken) {
-  const existingProvider = providers.get(domain);
-  if (existingProvider) {
-    return existingProvider;
-  }
-  const provider = new Provider(domain, { apiToken });
-  providers.set(domain, provider);
-  return provider;
-}
-
-// src/dns.ts
-var dnsProviderDataSchema = Type.Object({
-  zoneId: Type.String(),
-  apiToken: Type.String()
-});
-var CloudflareDnsRecord = class extends DnsRecord {
-  create(name, args, opts) {
-    const data = getDnsProviderData(args.provider);
-    const provider = getProvider(args.provider.domain, data.apiToken);
-    return new DnsRecord$1(
-      name,
-      {
-        name: args.name ?? name,
-        zoneId: data.zoneId,
-        type: args.type,
-        content: args.value,
-        proxied: args.proxied,
-        comment: getResourceComment(),
-        ttl: args.ttl ?? 1,
-        priority: args.priority
-      },
-      { ...opts, provider }
-    );
-  }
-};
-function createCloudflareDns01Solver(dnsProvider, provider) {
-  const data = getDnsProviderData(dnsProvider);
-  const name = `cloudflare-credentials-${dnsProvider.name}`;
-  const secret = new core.v1.Secret(
-    name,
-    {
-      metadata: { name, namespace: "cert-manager" },
-      stringData: {
-        apiToken: data.apiToken
-      }
-    },
-    { provider }
-  );
-  return {
-    cloudflare: {
-      apiTokenSecretRef: {
-        name: secret.metadata.name,
-        key: "apiToken"
-      }
-    }
-  };
-}
-function getDnsProviderData(dnsProvider) {
-  const ajv = new Ajv();
-  if (!ajv.validate(dnsProviderDataSchema, dnsProvider.data)) {
-    throw new Error(`Invalid DNS provider data: ${ajv.errorsText()}`);
-  }
-  return dnsProvider.data;
-}
-
-export { CloudflareDnsRecord, createCloudflareDns01Solver };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/provider.ts","../src/dns.ts"],"names":["Record"],"mappings":";;;;;;;;AAEA,IAAM,SAAA,uBAAgB,GAAA,EAAsB;AAErC,SAAS,WAAA,CAAY,QAAgB,QAAA,EAA4B;AACtE,EAAA,MAAM,gBAAA,GAAmB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC7C,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,OAAO,gBAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAW,IAAI,QAAA,CAAS,MAAA,EAAQ,EAAE,UAAU,CAAA;AAClD,EAAA,SAAA,CAAU,GAAA,CAAI,QAAQ,QAAQ,CAAA;AAE9B,EAAA,OAAO,QAAA;AACT;;;ACJO,IAAM,qBAAA,GAAwB,KAAK,MAAA,CAAO;AAAA,EAC/C,MAAA,EAAQ,KAAK,MAAA,EAAO;AAAA,EACpB,QAAA,EAAU,KAAK,MAAA;AACjB,CAAC,CAAA;AAIM,IAAM,mBAAA,GAAN,cAAkC,SAAA,CAAU;AAAA,EACvC,MAAA,CAAO,IAAA,EAAc,IAAA,EAA6B,IAAA,EAAkC;AAC5F,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAA;AAC7C,IAAA,MAAM,WAAW,WAAA,CAAY,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,KAAK,QAAQ,CAAA;AAEhE,IAAA,OAAO,IAAIA,WAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,QACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,SAAS,IAAA,CAAK,KAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,kBAAA,EAAmB;AAAA,QAC5B,GAAA,EAAK,KAAK,GAAA,IAAO,CAAA;AAAA,QACjB,UAAU,IAAA,CAAK;AAAA,OACjB;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,QAAA;AAAS,KACtB;AAAA,EACF;AACF;AAEO,SAAS,2BAAA,CACd,aACA,QAAA,EAC+D;AAC/D,EAAA,MAAM,IAAA,GAAO,mBAAmB,WAAW,CAAA;AAC3C,EAAA,MAAM,IAAA,GAAO,CAAA,uBAAA,EAA0B,WAAA,CAAY,IAAI,CAAA,CAAA;AAEvD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,CAAK,EAAA,CAAG,MAAA;AAAA,IACzB,IAAA;AAAA,IACA;AAAA,MACE,QAAA,EAAU,EAAE,IAAA,EAAM,SAAA,EAAW,cAAA,EAAe;AAAA,MAC5C,UAAA,EAAY;AAAA,QACV,UAAU,IAAA,CAAK;AAAA;AACjB,KACF;AAAA,IACA,EAAE,QAAA;AAAS,GACb;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY;AAAA,MACV,iBAAA,EAAmB;AAAA,QACjB,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,QACtB,GAAA,EAAK;AAAA;AACP;AACF,GACF;AACF;AAEA,SAAS,mBAAmB,WAAA,EAA4C;AACtE,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,EAAI;AAEpB,EAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAA0B,qBAAA,EAAuB,WAAA,CAAY,IAAI,CAAA,EAAG;AAC3E,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,GAAA,CAAI,UAAA,EAAY,CAAA,CAAE,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,WAAA,CAAY,IAAA;AACrB","file":"index.js","sourcesContent":["import { Provider } from \"@pulumi/cloudflare\"\n\nconst providers = new Map<string, Provider>()\n\nexport function getProvider(domain: string, apiToken: string): Provider {\n  const existingProvider = providers.get(domain)\n  if (existingProvider) {\n    return existingProvider\n  }\n\n  const provider = new Provider(domain, { apiToken })\n  providers.set(domain, provider)\n\n  return provider\n}\n","import type { types } from \"@highstate/cert-manager\"\nimport type { dns } from \"@highstate/library\"\nimport { type ResourceOptions, type Resource, getResourceComment } from \"@highstate/pulumi\"\nimport { DnsRecord, type ResolvedDnsRecordArgs } from \"@highstate/common\"\nimport { DnsRecord as Record } from \"@pulumi/cloudflare\"\nimport { core, Provider as K8sProvider } from \"@pulumi/kubernetes\"\nimport { Type, type Static } from \"@highstate/contract\"\nimport { Ajv } from \"ajv\"\nimport { getProvider } from \"./provider\"\n\nexport const dnsProviderDataSchema = Type.Object({\n  zoneId: Type.String(),\n  apiToken: Type.String(),\n})\n\nexport type DnsProviderData = Static<typeof dnsProviderDataSchema>\n\nexport class CloudflareDnsRecord extends DnsRecord {\n  protected create(name: string, args: ResolvedDnsRecordArgs, opts?: ResourceOptions): Resource {\n    const data = getDnsProviderData(args.provider)\n    const provider = getProvider(args.provider.domain, data.apiToken)\n\n    return new Record(\n      name,\n      {\n        name: args.name ?? name,\n        zoneId: data.zoneId,\n        type: args.type,\n        content: args.value,\n        proxied: args.proxied,\n        comment: getResourceComment(),\n        ttl: args.ttl ?? 1,\n        priority: args.priority,\n      },\n      { ...opts, provider },\n    )\n  }\n}\n\nexport function createCloudflareDns01Solver(\n  dnsProvider: dns.Provider,\n  provider: K8sProvider,\n): types.input.cert_manager.v1.ClusterIssuerSpecAcmeSolversDns01 {\n  const data = getDnsProviderData(dnsProvider)\n  const name = `cloudflare-credentials-${dnsProvider.name}`\n\n  const secret = new core.v1.Secret(\n    name,\n    {\n      metadata: { name, namespace: \"cert-manager\" },\n      stringData: {\n        apiToken: data.apiToken,\n      },\n    },\n    { provider },\n  )\n\n  return {\n    cloudflare: {\n      apiTokenSecretRef: {\n        name: secret.metadata.name,\n        key: \"apiToken\",\n      },\n    },\n  }\n}\n\nfunction getDnsProviderData(dnsProvider: dns.Provider): DnsProviderData {\n  const ajv = new Ajv()\n\n  if (!ajv.validate<DnsProviderData>(dnsProviderDataSchema, dnsProvider.data)) {\n    throw new Error(`Invalid DNS provider data: ${ajv.errorsText()}`)\n  }\n\n  return dnsProvider.data\n}\n"]}