alchemy 2.0.0-beta.55 → 2.0.0-beta.56

package/lib/Cloudflare/Rum/Site.js

@@ -0,0 +1,206 @@
+import * as rum from "@distilled.cloud/cloudflare/rum";
+import * as Effect from "effect/Effect";
+import * as Predicate from "effect/Predicate";
+import * as Schedule from "effect/Schedule";
+import * as Stream from "effect/Stream";
+import { Unowned } from "../../AdoptPolicy.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+const RumSiteTypeId = "Cloudflare.Rum.Site";
+/**
+ * A Cloudflare Web Analytics (RUM) site.
+ *
+ * A site measures real-user performance for either a plain hostname
+ * (gray-clouded — embed the produced `snippet` yourself) or a Cloudflare
+ * zone (orange-clouded — set `autoInstall` to inject the snippet at the
+ * edge). The site is identified by its auto-assigned `siteTag`; `host` and
+ * `autoInstall` are mutable in place, while switching between `host` and
+ * `zoneTag` identity models (or changing `zoneTag`) triggers a replacement.
+ *
+ * Web Analytics is available on free accounts.
+ *
+ * @section Measuring a hostname
+ * @example Gray-clouded site (manual snippet embed)
+ * ```typescript
+ * const site = yield* Cloudflare.RumSite("Analytics", {
+ *   host: "example.com",
+ * });
+ *
+ * // Embed in your HTML — contains the site token:
+ * const snippet = site.snippet;
+ * ```
+ *
+ * @section Measuring a zone
+ * @example Orange-clouded site with automatic snippet injection
+ * ```typescript
+ * const zone = yield* Cloudflare.Zone("Zone", { name: "example.com" });
+ *
+ * yield* Cloudflare.RumSite("ZoneAnalytics", {
+ *   zoneTag: zone.zoneId,
+ *   autoInstall: true,
+ * });
+ * ```
+ *
+ * @example Skip injection for EU visitors
+ * ```typescript
+ * yield* Cloudflare.RumSite("ZoneAnalytics", {
+ *   zoneTag: zone.zoneId,
+ *   autoInstall: true,
+ *   lite: true,
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/web-analytics/
+ */
+export const RumSite = Resource(RumSiteTypeId);
+/**
+ * Returns true if the given value is a RumSite resource.
+ */
+export const isRumSite = (value) => Predicate.hasProperty(value, "Type") && value.Type === RumSiteTypeId;
+export const RumSiteProvider = () => Provider.succeed(RumSite, {
+    stables: ["siteTag", "siteToken", "accountId", "rulesetId", "created"],
+    diff: Effect.fn(function* ({ olds = {}, news, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const o = olds;
+        const n = news;
+        if ((output?.accountId ?? accountId) !== accountId) {
+            return { action: "replace" };
+        }
+        // Switching between host-based (gray-clouded) and zone-based
+        // (orange-clouded) measurement changes the site's identity model.
+        if ((o.zoneTag === undefined) !== (n.zoneTag === undefined)) {
+            return { action: "replace" };
+        }
+        // zoneTag is Input<string>; compare only once both are concrete.
+        if (typeof o.zoneTag === "string" &&
+            typeof n.zoneTag === "string" &&
+            o.zoneTag !== n.zoneTag) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ output, olds }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const acct = output?.accountId ?? accountId;
+        // Owned path: refresh by our persisted site tag.
+        if (output?.siteTag) {
+            const observed = yield* getSite(acct, output.siteTag);
+            if (observed)
+                return toAttributes(observed, acct);
+        }
+        // Adoption path: a site measuring the same host/zone may already
+        // exist. Web Analytics sites carry no ownership markers (and
+        // Cloudflare happily creates duplicates), so we cannot prove we
+        // created it — brand it `Unowned` so the engine refuses to take
+        // over unless `adopt` is set.
+        const host = output?.host ?? olds?.host;
+        const zoneTag = output?.zoneTag ??
+            (typeof olds?.zoneTag === "string" ? olds.zoneTag : undefined);
+        if (host !== undefined || zoneTag !== undefined) {
+            const match = yield* findSite(acct, host, zoneTag);
+            if (match)
+                return Unowned(toAttributes(match, acct));
+        }
+        return undefined;
+    }),
+    reconcile: Effect.fn(function* ({ news, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        // Inputs have been resolved to concrete strings by Plan.
+        const zoneTag = news.zoneTag;
+        // 1. Observe — the siteTag cached on `output` is a hint, not a
+        //    guarantee: a missing site falls through to create.
+        let observed = output?.siteTag
+            ? yield* getSite(output.accountId ?? accountId, output.siteTag)
+            : undefined;
+        // 2. Ensure — create when missing. Cloudflare allows duplicate
+        //    sites for the same host/zone, so there is no AlreadyExists
+        //    race to tolerate. The create response omits `snippet` and
+        //    `ruleset`, so re-read the full site state afterwards (riding
+        //    out read-after-write lag on the freshly minted siteTag).
+        if (!observed) {
+            const created = yield* rum.createSiteInfo({
+                accountId,
+                host: news.host,
+                zoneTag,
+                autoInstall: news.autoInstall,
+            });
+            const siteTag = created.siteTag ?? "";
+            observed = yield* rum.getSiteInfo({ accountId, siteId: siteTag }).pipe(Effect.retry({
+                while: (e) => e._tag === "SiteNotFound",
+                schedule: Schedule.exponential("250 millis"),
+                times: 5,
+            }));
+            // Greenfield with no post-create settings to apply — done.
+            if (news.enabled === undefined && news.lite === undefined) {
+                return toAttributes(observed, accountId);
+            }
+        }
+        // 3. Sync — diff observed cloud state against desired. The update
+        //    API is a PUT that requires the full body (host/zoneTag/
+        //    autoInstall must be re-sent). `enabled` and `lite` are write-
+        //    only (never echoed back by the API), so they are applied
+        //    whenever specified — observation cannot prove them converged.
+        const dirty = (news.host !== undefined && observed.host !== news.host) ||
+            (observed.autoInstall ?? false) !== (news.autoInstall ?? false) ||
+            news.enabled !== undefined ||
+            news.lite !== undefined;
+        if (!dirty) {
+            return toAttributes(observed, accountId);
+        }
+        const updated = yield* rum.updateSiteInfo({
+            accountId,
+            siteId: observed.siteTag ?? "",
+            host: news.host,
+            zoneTag,
+            autoInstall: news.autoInstall,
+            enabled: news.enabled,
+            lite: news.lite,
+        });
+        return toAttributes(updated, accountId);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* rum
+            .deleteSiteInfo({
+            accountId: output.accountId,
+            siteId: output.siteTag,
+        })
+            .pipe(Effect.catchTag("SiteNotFound", () => Effect.void));
+    }),
+    // Account collection: Web Analytics sites are enumerated account-wide
+    // via the paginated site-info list. Hydrate each row into the exact
+    // `read` Attributes shape — the list response carries the same fields
+    // (siteTag/siteToken/snippet/ruleset/host) so no per-item re-read is
+    // needed.
+    list: Effect.fn(function* () {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        return yield* rum.listSiteInfos.pages({ accountId }).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.result ?? []).map((site) => toAttributes(site, accountId)))));
+    }),
+});
+/**
+ * Read a site by tag, mapping "gone" (`SiteNotFound`, Cloudflare error code
+ * 10015 `web_analytics.configuration.api.notFound`) to `undefined`.
+ */
+const getSite = (accountId, siteTag) => rum.getSiteInfo({ accountId, siteId: siteTag }).pipe(Effect.map((site) => site), Effect.catchTag("SiteNotFound", () => Effect.succeed(undefined)));
+/**
+ * Find a site measuring the given host (gray-clouded) or zone
+ * (orange-clouded). Cloudflare allows several sites for the same target, so
+ * pick the oldest for determinism.
+ */
+const findSite = (accountId, host, zoneTag) => rum.listSiteInfos.items({ accountId }).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk)
+    .filter((site) => (host !== undefined && site.host === host) ||
+    (zoneTag !== undefined && site.ruleset?.zoneTag === zoneTag))
+    .sort((a, b) => (a.created ?? "").localeCompare(b.created ?? ""))
+    .at(0)));
+const toAttributes = (site, accountId) => ({
+    siteTag: site.siteTag ?? "",
+    siteToken: site.siteToken ?? "",
+    snippet: site.snippet ?? undefined,
+    rulesetId: site.ruleset?.id ?? undefined,
+    accountId,
+    host: site.host ?? undefined,
+    zoneTag: site.ruleset?.zoneTag ?? undefined,
+    autoInstall: site.autoInstall ?? false,
+    created: site.created ?? undefined,
+});
+//# sourceMappingURL=Site.js.map

package/lib/Cloudflare/Rum/Site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Site.js","sourceRoot":"","sources":["../../../src/Cloudflare/Rum/Site.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,iCAAiC,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,aAAa,GAAG,qBAA8B,CAAC;AA0FrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAU,aAAa,CAAC,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAoB,EAAE,CAC5D,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;AAEvE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE;IACxB,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC;IAEtE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACpD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,CAAC,GAAG,IAAoB,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAoB,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,6DAA6D;QAC7D,kEAAkE;QAClE,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,iEAAiE;QACjE,IACE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EACvB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAE5C,iDAAiD;QACjD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACtD,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,iEAAiE;QACjE,6DAA6D;QAC7D,gEAAgE;QAChE,gEAAgE;QAChE,8BAA8B;QAC9B,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC;QACxC,MAAM,OAAO,GACX,MAAM,EAAE,OAAO;YACf,CAAC,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK;gBAAE,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,yDAAyD;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;QAEnD,+DAA+D;QAC/D,wDAAwD;QACxD,IAAI,QAAQ,GAAG,MAAM,EAAE,OAAO;YAC5B,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;YAC/D,CAAC,CAAC,SAAS,CAAC;QAEd,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,kEAAkE;QAClE,8DAA8D;QAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;gBACxC,SAAS;gBACT,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO;gBACP,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;YACtC,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc;gBACvC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;gBAC5C,KAAK,EAAE,CAAC;aACT,CAAC,CACH,CAAC;YACF,2DAA2D;YAC3D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1D,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,8DAA8D;QAC9D,mEAAmE;QACnE,MAAM,KAAK,GACT,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YACxD,CAAC,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;YAC/D,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YACxC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO;YACP,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,cAAc,CAAC;YACd,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,UAAU;IACV,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CACjE,CACF,CACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC;AAOL;;;GAGG;AACH,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,EAAE,CACrD,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAClD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAA4B,EAAE,CAAC,IAAI,CAAC,EACpD,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACjE,CAAC;AAEJ;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CACf,SAAiB,EACjB,IAAwB,EACxB,OAA2B,EAC3B,EAAE,CACF,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;KACd,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAC1C,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAC/D;KACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;KAChE,EAAE,CAAC,CAAC,CAAC,CACT,CACF,CAAC;AAEJ,MAAM,YAAY,GAAG,CACnB,IAAkB,EAClB,SAAiB,EACE,EAAE,CAAC,CAAC;IACvB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;IAC3B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;IAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;IAClC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS;IACxC,SAAS;IACT,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;IAC5B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,SAAS;IAC3C,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK;IACtC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;CACnC,CAAC,CAAC"}

package/lib/Cloudflare/Rum/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./Rule.ts";
+export * from "./Site.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/Cloudflare/Rum/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Rum/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC"}

package/lib/Cloudflare/Rum/index.js

@@ -0,0 +1,3 @@
+export * from "./Rule.js";
+export * from "./Site.js";
+//# sourceMappingURL=index.js.map

package/lib/Cloudflare/Rum/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Cloudflare/Rum/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC"}

package/lib/Cloudflare/SchemaValidation/OperationSetting.d.ts

@@ -0,0 +1,91 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
+import type { Providers } from "../Providers.ts";
+declare const SchemaValidationOperationSettingTypeId: "Cloudflare.SchemaValidation.OperationSetting";
+type SchemaValidationOperationSettingTypeId = typeof SchemaValidationOperationSettingTypeId;
+/**
+ * Per-operation mitigation action for schema validation: `log` records
+ * non-conforming requests, `block` denies them, `none` does nothing.
+ */
+export type SchemaValidationOperationMitigationAction = "log" | "block" | "none";
+export interface SchemaValidationOperationSettingProps {
+    /**
+     * Zone the operation belongs to.
+     *
+     * Immutable — changing the zone triggers a replacement.
+     */
+    zoneId: string;
+    /**
+     * UUID of the API Shield operation the override applies to (cross-resource
+     * reference to `Cloudflare.ApiShield.Operation`).
+     *
+     * Immutable — the operation is the override's identity, so changing it
+     * triggers a replacement.
+     */
+    operationId: string;
+    /**
+     * The mitigation action applied to this operation, superseding the zone
+     * default just for this operation: `log` records non-conforming requests,
+     * `block` denies them, `none` disables validation for the operation.
+     * Mutable in place (the PUT is a true upsert). `log` may be plan-gated
+     * (API Shield entitlement).
+     */
+    mitigationAction: SchemaValidationOperationMitigationAction;
+}
+export interface SchemaValidationOperationSettingAttributes {
+    /** Zone the operation belongs to. */
+    zoneId: string;
+    /** UUID of the API Shield operation the override applies to. */
+    operationId: string;
+    /** The mitigation action applied to this operation. */
+    mitigationAction: SchemaValidationOperationMitigationAction;
+}
+export type SchemaValidationOperationSetting = Resource<SchemaValidationOperationSettingTypeId, SchemaValidationOperationSettingProps, SchemaValidationOperationSettingAttributes, never, Providers>;
+/**
+ * A per-operation schema validation override
+ * (`/zones/{zone_id}/schema_validation/settings/operations/{operation_id}`)
+ * — pins a mitigation action for a single API Shield operation, superseding
+ * the zone-level default just for that operation.
+ *
+ * The override is keyed by the operation's UUID; deleting the resource
+ * clears the override so the operation falls back to the zone default.
+ * Deleting the underlying API Shield operation cascades the override away.
+ *
+ * @section Overriding an operation
+ * @example Block non-conforming requests on one operation
+ * ```typescript
+ * const op = yield* Cloudflare.ApiShieldOperation("GetUser", {
+ *   zoneId: zone.zoneId,
+ *   method: "GET",
+ *   host: "api.example.com",
+ *   endpoint: "/users/{id}",
+ * });
+ *
+ * yield* Cloudflare.SchemaValidationOperationSetting("BlockGetUser", {
+ *   zoneId: zone.zoneId,
+ *   operationId: op.operationId,
+ *   mitigationAction: "block",
+ * });
+ * ```
+ *
+ * @example Exempt an operation from validation
+ * ```typescript
+ * yield* Cloudflare.SchemaValidationOperationSetting("SkipWebhook", {
+ *   zoneId: zone.zoneId,
+ *   operationId: webhookOp.operationId,
+ *   mitigationAction: "none",
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/api-shield/security/schema-validation/
+ */
+export declare const SchemaValidationOperationSetting: import("../../Resource.ts").ResourceClass<SchemaValidationOperationSetting>;
+/**
+ * Returns true if the given value is a SchemaValidationOperationSetting
+ * resource.
+ */
+export declare const isSchemaValidationOperationSetting: (value: unknown) => value is SchemaValidationOperationSetting;
+export declare const SchemaValidationOperationSettingProvider: () => import("effect/Layer").Layer<Provider.Provider<SchemaValidationOperationSetting>, never, CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+export {};
+//# sourceMappingURL=OperationSetting.d.ts.map

package/lib/Cloudflare/SchemaValidation/OperationSetting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OperationSetting.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/SchemaValidation/OperationSetting.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,QAAA,MAAM,sCAAsC,EAC1C,8CAAuD,CAAC;AAC1D,KAAK,sCAAsC,GACzC,OAAO,sCAAsC,CAAC;AAEhD;;;GAGG;AACH,MAAM,MAAM,yCAAyC,GACjD,KAAK,GACL,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,qCAAqC;IACpD;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,gBAAgB,EAAE,yCAAyC,CAAC;CAC7D;AAED,MAAM,WAAW,0CAA0C;IACzD,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,gBAAgB,EAAE,yCAAyC,CAAC;CAC7D;AAED,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CACrD,sCAAsC,EACtC,qCAAqC,EACrC,0CAA0C,EAC1C,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,gCAAgC,6EAG1C,CAAC;AAEJ;;;GAGG;AACH,eAAO,MAAM,kCAAkC,UACtC,OAAO,KACb,KAAK,IAAI,gCAE2C,CAAC;AAExD,eAAO,MAAM,wCAAwC,kOAyHjD,CAAC"}

package/lib/Cloudflare/SchemaValidation/OperationSetting.js

@@ -0,0 +1,169 @@
+import * as schemaValidation from "@distilled.cloud/cloudflare/schema-validation";
+import * as Effect from "effect/Effect";
+import * as Predicate from "effect/Predicate";
+import * as Stream from "effect/Stream";
+import { Unowned } from "../../AdoptPolicy.js";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+import { listAllZones } from "../Zone/lookup.js";
+const SchemaValidationOperationSettingTypeId = "Cloudflare.SchemaValidation.OperationSetting";
+/**
+ * A per-operation schema validation override
+ * (`/zones/{zone_id}/schema_validation/settings/operations/{operation_id}`)
+ * — pins a mitigation action for a single API Shield operation, superseding
+ * the zone-level default just for that operation.
+ *
+ * The override is keyed by the operation's UUID; deleting the resource
+ * clears the override so the operation falls back to the zone default.
+ * Deleting the underlying API Shield operation cascades the override away.
+ *
+ * @section Overriding an operation
+ * @example Block non-conforming requests on one operation
+ * ```typescript
+ * const op = yield* Cloudflare.ApiShieldOperation("GetUser", {
+ *   zoneId: zone.zoneId,
+ *   method: "GET",
+ *   host: "api.example.com",
+ *   endpoint: "/users/{id}",
+ * });
+ *
+ * yield* Cloudflare.SchemaValidationOperationSetting("BlockGetUser", {
+ *   zoneId: zone.zoneId,
+ *   operationId: op.operationId,
+ *   mitigationAction: "block",
+ * });
+ * ```
+ *
+ * @example Exempt an operation from validation
+ * ```typescript
+ * yield* Cloudflare.SchemaValidationOperationSetting("SkipWebhook", {
+ *   zoneId: zone.zoneId,
+ *   operationId: webhookOp.operationId,
+ *   mitigationAction: "none",
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/api-shield/security/schema-validation/
+ */
+export const SchemaValidationOperationSetting = Resource(SchemaValidationOperationSettingTypeId);
+/**
+ * Returns true if the given value is a SchemaValidationOperationSetting
+ * resource.
+ */
+export const isSchemaValidationOperationSetting = (value) => Predicate.hasProperty(value, "Type") &&
+    value.Type === SchemaValidationOperationSettingTypeId;
+export const SchemaValidationOperationSettingProvider = () => Provider.succeed(SchemaValidationOperationSetting, {
+    stables: ["zoneId", "operationId"],
+    list: Effect.fn(function* () {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        // Per-operation overrides live inside a zone with no account-wide
+        // enumeration API — fan out over every zone and list its operation
+        // settings, exhaustively paginated.
+        const zones = yield* listAllZones(accountId);
+        const rows = yield* Effect.forEach(zones, (zone) => schemaValidation.listSettingOperations
+            .pages({ zoneId: zone.id })
+            .pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.result ?? [])
+            // An operation with no override reports a nullish action;
+            // skip it so the result mirrors what `read` returns.
+            .filter((op) => op.mitigationAction != null)
+            .map((op) => toAttributes(zone.id, {
+            operationId: op.operationId,
+            // Distilled widens the generated enum to an open union.
+            mitigationAction: op.mitigationAction,
+        })))), 
+        // A zone with no API Shield / schema-validation entitlement
+        // rejects the route — skip it, keep the rest. (Transient
+        // code-10000 "Authentication error" blips under concurrency are
+        // retried globally by the Cloudflare retry policy, so they never
+        // reach here as a real failure.)
+        Effect.catchTag("InvalidRoute", () => Effect.succeed([]))), { concurrency: 10 });
+        return rows.flat();
+    }),
+    diff: Effect.fn(function* ({ news, output }) {
+        if (!isResolved(news))
+            return undefined;
+        // The (zoneId, operationId) pair is the override's identity.
+        if (output?.zoneId !== undefined &&
+            typeof news.zoneId === "string" &&
+            news.zoneId !== output.zoneId) {
+            return { action: "replace" };
+        }
+        if (output?.operationId !== undefined &&
+            typeof news.operationId === "string" &&
+            news.operationId !== output.operationId) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ output, olds }) {
+        const zoneId = output?.zoneId ??
+            (typeof olds?.zoneId === "string" ? olds.zoneId : undefined);
+        const operationId = output?.operationId ??
+            (typeof olds?.operationId === "string" ? olds.operationId : undefined);
+        if (zoneId === undefined || operationId === undefined)
+            return undefined;
+        const observed = yield* getOperationSetting(zoneId, operationId);
+        if (observed === undefined)
+            return undefined;
+        const attrs = toAttributes(zoneId, observed);
+        // An override carries no ownership marker. When we have no prior
+        // output (cold read), an existing override was set out-of-band —
+        // brand it `Unowned` so the engine gates takeover behind adoption.
+        return output !== undefined ? attrs : Unowned(attrs);
+    }),
+    reconcile: Effect.fn(function* ({ news }) {
+        // Inputs have been resolved to concrete strings by Plan.
+        const zoneId = news.zoneId;
+        const operationId = news.operationId;
+        // 1. Observe — an absent override (`OperationNotFound` on an
+        //    operation with no override) simply means "not set yet".
+        const observed = yield* getOperationSetting(zoneId, operationId);
+        // 2/3. Ensure + Sync — the PUT is a true upsert, so a single call
+        //    converges both the greenfield and the drifted case. Skip it
+        //    entirely on a no-op.
+        if (observed?.mitigationAction === news.mitigationAction) {
+            return toAttributes(zoneId, observed);
+        }
+        const updated = yield* schemaValidation.putSettingOperation({
+            zoneId,
+            operationId,
+            mitigationAction: news.mitigationAction,
+        });
+        return toAttributes(zoneId, {
+            operationId: updated.operationId,
+            // Distilled widens the generated enum to an open union.
+            mitigationAction: updated.mitigationAction,
+        });
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        // Idempotent — clearing an already-cleared override (or one that
+        // cascaded away with its operation) is success.
+        yield* schemaValidation
+            .deleteSettingOperation({
+            zoneId: output.zoneId,
+            operationId: output.operationId,
+        })
+            .pipe(Effect.catchTag("OperationNotFound", () => Effect.void));
+    }),
+});
+/**
+ * Read an operation override, mapping both "gone" shapes to `undefined`:
+ * `OperationNotFound` (code 10404) when the operation itself does not
+ * exist, and a 200 response without `mitigation_action` when the operation
+ * exists but carries no override.
+ */
+const getOperationSetting = (zoneId, operationId) => schemaValidation.getSettingOperation({ zoneId, operationId }).pipe(Effect.map((setting) => setting.mitigationAction == null
+    ? undefined
+    : {
+        operationId: setting.operationId,
+        // Distilled widens the generated enum to an open union.
+        mitigationAction: setting.mitigationAction,
+    }), Effect.catchTag("OperationNotFound", () => Effect.succeed(undefined)));
+const toAttributes = (zoneId, setting) => ({
+    zoneId,
+    operationId: setting.operationId,
+    mitigationAction: setting.mitigationAction,
+});
+//# sourceMappingURL=OperationSetting.js.map

package/lib/Cloudflare/SchemaValidation/OperationSetting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OperationSetting.js","sourceRoot":"","sources":["../../../src/Cloudflare/SchemaValidation/OperationSetting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,gBAAgB,MAAM,+CAA+C,CAAC;AAClF,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,sCAAsC,GAC1C,8CAAuD,CAAC;AAuD1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,QAAQ,CACN,sCAAsC,CACvC,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAChD,KAAc,EAC6B,EAAE,CAC7C,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;IACpC,KAAK,CAAC,IAAI,KAAK,sCAAsC,CAAC;AAExD,MAAM,CAAC,MAAM,wCAAwC,GAAG,GAAG,EAAE,CAC3D,QAAQ,CAAC,OAAO,CAAC,gCAAgC,EAAE;IACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;IAElC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,kEAAkE;QAClE,mEAAmE;QACnE,oCAAoC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAChC,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CACP,gBAAgB,CAAC,qBAAqB;aACnC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC1B,IAAI,CACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACjB,0DAA0D;YAC1D,qDAAqD;aACpD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,gBAAgB,IAAI,IAAI,CAAC;aAC3C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACV,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE;YACpB,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,wDAAwD;YACxD,gBAAgB,EACd,EAAE,CAAC,gBAA6D;SACnE,CAAC,CACH,CACJ,CACF;QACD,4DAA4D;QAC5D,yDAAyD;QACzD,gEAAgE;QAChE,iEAAiE;QACjE,iCAAiC;QACjC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC1D,EACL,EAAE,WAAW,EAAE,EAAE,EAAE,CACpB,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,6DAA6D;QAC7D,IACE,MAAM,EAAE,MAAM,KAAK,SAAS;YAC5B,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAC7B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,IACE,MAAM,EAAE,WAAW,KAAK,SAAS;YACjC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EACvC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACzC,MAAM,MAAM,GACV,MAAM,EAAE,MAAM;YACd,CAAC,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,WAAW,GACf,MAAM,EAAE,WAAW;YACnB,CAAC,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,MAAM,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAExE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,iEAAiE;QACjE,iEAAiE;QACjE,mEAAmE;QACnE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;QACtC,yDAAyD;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAqB,CAAC;QAE/C,6DAA6D;QAC7D,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAEjE,kEAAkE;QAClE,iEAAiE;QACjE,0BAA0B;QAC1B,IAAI,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzD,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;YAC1D,MAAM;YACN,WAAW;YACX,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,EAAE;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,wDAAwD;YACxD,gBAAgB,EACd,OAAO,CAAC,gBAA6D;SACxE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,iEAAiE;QACjE,gDAAgD;QAChD,KAAK,CAAC,CAAC,gBAAgB;aACpB,sBAAsB,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC;CACH,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,WAAmB,EAAE,EAAE,CAClE,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,OAAO,CAAC,gBAAgB,IAAI,IAAI;IAC9B,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,wDAAwD;QACxD,gBAAgB,EACd,OAAO,CAAC,gBAA6D;KACxE,CACN,EACD,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;AAEJ,MAAM,YAAY,GAAG,CACnB,MAAc,EACd,OAGC,EAC2C,EAAE,CAAC,CAAC;IAChD,MAAM;IACN,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;CAC3C,CAAC,CAAC"}

package/lib/Cloudflare/SchemaValidation/Schema.d.ts

@@ -0,0 +1,130 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
+import type { Providers } from "../Providers.ts";
+declare const SchemaValidationSchemaTypeId: "Cloudflare.SchemaValidation.Schema";
+type SchemaValidationSchemaTypeId = typeof SchemaValidationSchemaTypeId;
+export interface SchemaValidationSchemaProps {
+    /**
+     * Zone the schema is uploaded to.
+     *
+     * Immutable — moving a schema between zones triggers a replacement.
+     */
+    zoneId: string;
+    /**
+     * Human-readable name for the schema. Cloudflare does not enforce
+     * uniqueness, but Alchemy uses the name as the cold-read identity, so it
+     * should be unique within the zone. If omitted, a unique name is
+     * generated from the app, stage, and logical ID.
+     *
+     * Immutable — there is no rename API, so changing the name triggers a
+     * replacement.
+     * @default ${app}-${stage}-${id}
+     */
+    name?: string;
+    /**
+     * The kind of the schema. Only OpenAPI v3 is supported.
+     *
+     * Immutable — changing the kind triggers a replacement.
+     * @default "openapi_v3"
+     */
+    kind?: "openapi_v3";
+    /**
+     * The raw OpenAPI v3 schema, as a JSON or YAML string. Cloudflare
+     * validates the document on upload and rejects invalid specs.
+     *
+     * Immutable — the uploaded source cannot be modified, so changing it
+     * triggers a replacement (a new schema is uploaded, then the old one is
+     * deleted).
+     */
+    source: string;
+    /**
+     * Whether the schema is enabled for validation.
+     *
+     * Enabling a disabled schema is an in-place update, but Cloudflare does
+     * not allow disabling an enabled schema ("delete schema instead"), so
+     * changing `true` → `false` triggers a replacement.
+     * @default true
+     */
+    validationEnabled?: boolean;
+}
+export interface SchemaValidationSchemaAttributes {
+    /** Cloudflare-assigned UUID of the schema. */
+    schemaId: string;
+    /** Zone the schema is uploaded to. */
+    zoneId: string;
+    /** Human-readable name of the schema. */
+    name: string;
+    /** The kind of the schema. */
+    kind: "openapi_v3";
+    /** The raw schema source as stored by Cloudflare. */
+    source: string;
+    /** Whether the schema is enabled for validation. */
+    validationEnabled: boolean;
+    /** When the schema was uploaded. */
+    createdAt: string;
+}
+export type SchemaValidationSchema = Resource<SchemaValidationSchemaTypeId, SchemaValidationSchemaProps, SchemaValidationSchemaAttributes, never, Providers>;
+/**
+ * An OpenAPI v3 schema uploaded to a zone for API Shield schema validation
+ * (`/zones/{zone_id}/schema_validation/schemas`).
+ *
+ * Uploading a schema registers the endpoints it describes as API Shield
+ * operations (a server-side side effect — deleting the schema does not
+ * delete those operations). The schema body is immutable: changing `source`
+ * uploads a new schema and deletes the old one (replacement). Only the
+ * `validationEnabled` flag is mutable in place.
+ *
+ * @section Uploading a Schema
+ * @example Upload an OpenAPI v3 schema
+ * ```typescript
+ * const schema = yield* Cloudflare.SchemaValidationSchema("ApiSchema", {
+ *   zoneId: zone.zoneId,
+ *   source: JSON.stringify({
+ *     openapi: "3.0.0",
+ *     info: { title: "my-api", version: "1.0.0" },
+ *     servers: [{ url: "https://api.example.com" }],
+ *     paths: {
+ *       "/users": {
+ *         get: {
+ *           operationId: "listUsers",
+ *           responses: { "200": { description: "ok" } },
+ *         },
+ *       },
+ *     },
+ *   }),
+ * });
+ * ```
+ *
+ * @example Upload a schema without enabling validation
+ * ```typescript
+ * const schema = yield* Cloudflare.SchemaValidationSchema("DraftSchema", {
+ *   zoneId: zone.zoneId,
+ *   source: openApiDocument,
+ *   validationEnabled: false,
+ * });
+ * ```
+ *
+ * @section Toggling validation
+ * @example Enable a previously-disabled schema in place
+ * ```typescript
+ * // Enabling (false → true) patches the schema in place. Disabling an
+ * // enabled schema is rejected by Cloudflare, so `true` → `false` (like a
+ * // `source` change) replaces the schema instead.
+ * yield* Cloudflare.SchemaValidationSchema("DraftSchema", {
+ *   zoneId: zone.zoneId,
+ *   source: openApiDocument,
+ *   validationEnabled: true,
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/api-shield/security/schema-validation/
+ */
+export declare const SchemaValidationSchema: import("../../Resource.ts").ResourceClass<SchemaValidationSchema>;
+/**
+ * Returns true if the given value is a SchemaValidationSchema resource.
+ */
+export declare const isSchemaValidationSchema: (value: unknown) => value is SchemaValidationSchema;
+export declare const SchemaValidationSchemaProvider: () => import("effect/Layer").Layer<Provider.Provider<SchemaValidationSchema>, never, CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient | import("../../Stack.ts").Stack | import("../../Stage.ts").Stage>;
+export {};
+//# sourceMappingURL=Schema.d.ts.map

package/lib/Cloudflare/SchemaValidation/Schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Schema.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/SchemaValidation/Schema.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,QAAA,MAAM,4BAA4B,EAChC,oCAA6C,CAAC;AAChD,KAAK,4BAA4B,GAAG,OAAO,4BAA4B,CAAC;AAExE,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;;;;;OAOG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,gCAAgC;IAC/C,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAC3C,4BAA4B,EAC5B,2BAA2B,EAC3B,gCAAgC,EAChC,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,eAAO,MAAM,sBAAsB,mEAElC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,UAC5B,OAAO,KACb,KAAK,IAAI,sBAEiC,CAAC;AAE9C,eAAO,MAAM,8BAA8B,0RAsJvC,CAAC"}