domainkit 0.0.1 → 0.1.0-beta.0

package/dist/index-D1KtyjuI.d.mts

@@ -0,0 +1,71 @@
+import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, o as OAuthMethod, r as Manifest, s as OAuthSubjectResolver } from "./manifest-DjH3BVB9.mjs";
+import { Effect, Schema } from "effect";
+//#region src/providers/cloudflare/protocol.d.ts
+declare const Account$1: Schema.Struct<{
+  readonly id: Schema.String;
+  readonly name: Schema.String;
+}>;
+interface Account$1 extends Schema.Schema.Type<typeof Account$1> {}
+declare namespace client_d_exports {
+  export { Account, Fetch, Interface, ListZonesInput, Options, Zone, make };
+}
+type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** Configuration for an Effect-native Cloudflare authoritative-DNS client. */
+interface Options {
+  readonly accountId: string;
+  readonly baseUrl?: string;
+  /** Capabilities the host required when issuing or authorizing this credential. */
+  readonly capabilities: TokenValidation["capabilities"];
+  readonly fetch?: Fetch;
+  readonly token: Value;
+  readonly tokenKind?: "account" | "user";
+}
+interface ListZonesInput {
+  readonly accountId?: string;
+  readonly name?: DomainName;
+}
+type Account = Account$1;
+/** A portable Cloudflare authoritative zone with normalized nameserver evidence. */
+interface Zone {
+  readonly accountId: string;
+  readonly id: string;
+  readonly name: DomainName;
+  readonly nameservers: ReadonlyArray<DomainName>;
+  readonly status: string | null;
+}
+interface Interface extends Interface$1 {
+  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account>, Error>;
+  readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
+  readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
+}
+/** Creates an Effect-native Cloudflare client without owning the credential lifecycle. */
+declare function make(options: Options): Interface;
+declare namespace auth_d_exports {
+  export { OAuthMethodOptions, SubjectResolverOptions, manifest, oauthMethod, subjectResolver, tokenMethod, tokenValidator };
+}
+/** Describes Cloudflare's caller-created API-token authorization method. */
+declare function tokenMethod(capabilities: TokenValidation["capabilities"]): Extract<Manifest["methods"][number], {
+  readonly _tag: "token";
+}>;
+interface OAuthMethodOptions {
+  /** Scope IDs assigned to the OAuth client by Cloudflare. */
+  readonly scopes: ReadonlyArray<string>;
+  /** Capabilities represented by those assigned scope IDs. */
+  readonly capabilities: TokenValidation["capabilities"];
+  readonly clientAuth: OAuthMethod["clientAuth"];
+}
+/** Describes a registered Cloudflare OAuth client and its assigned scope IDs. */
+declare function oauthMethod(options: OAuthMethodOptions): OAuthMethod;
+/** Creates the Cloudflare token and OAuth authorization manifest. */
+declare function manifest(options: OAuthMethodOptions): Manifest;
+interface SubjectResolverOptions extends Omit<Options, "token" | "tokenKind"> {}
+/** Resolves the Cloudflare account selected by a completed OAuth grant. */
+declare function subjectResolver(options: SubjectResolverOptions): OAuthSubjectResolver;
+/** Creates a host callback that validates a Cloudflare API token. */
+declare function tokenValidator(options: Omit<Options, "token">): (token: Value) => ReturnType<Interface["validateToken"]>;
+declare namespace index_d_exports {
+  export { Account, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, make };
+}
+//#endregion
+export { manifest as a, Account as c, ListZonesInput as d, Options as f, make as h, auth_d_exports as i, Fetch as l, client_d_exports as m, OAuthMethodOptions as n, oauthMethod as o, Zone as p, SubjectResolverOptions as r, tokenMethod as s, index_d_exports as t, Interface as u };
+//# sourceMappingURL=index-D1KtyjuI.d.mts.map

package/dist/index-DQAjUrZu.d.mts

@@ -0,0 +1,94 @@
+import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, n as IntegrationMethod, r as Manifest } from "./manifest-DjH3BVB9.mjs";
+import { Effect } from "effect";
+declare namespace client_d_exports {
+  export { Account, AccountContext, Fetch, Interface, ListZonesInput, Options, Zone, make };
+}
+type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** Selects whether Vercel requests operate on a personal account or a team. */
+type AccountContext = {
+  readonly _tag: "personal";
+} | {
+  readonly _tag: "team";
+  readonly teamId: string;
+};
+/** Configuration for an Effect-native Vercel authoritative-DNS client. */
+interface Options {
+  readonly baseUrl?: string;
+  /** Capabilities the host required when issuing or authorizing this credential. */
+  readonly capabilities: TokenValidation["capabilities"];
+  readonly context: AccountContext;
+  readonly fetch?: Fetch;
+  readonly token: Value;
+}
+interface ListZonesInput {
+  readonly name?: DomainName;
+}
+/** A Vercel account visible to the supplied credential. */
+interface Account {
+  readonly id: string;
+  readonly name: string;
+  readonly type: "personal" | "team";
+}
+/** A Vercel-managed authoritative zone with normalized nameserver evidence. */
+interface Zone {
+  readonly accountId: string;
+  readonly id: string;
+  readonly name: DomainName;
+  readonly nameservers: ReadonlyArray<DomainName>;
+  readonly status: "active" | "pending";
+}
+interface Interface extends Interface$1 {
+  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account>, Error>;
+  readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
+  readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
+}
+/** Creates an Effect-native Vercel client without owning the credential lifecycle. */
+declare function make(options: Options): Interface;
+declare namespace auth_d_exports {
+  export { ExchangeCodeOptions, IntegrationCredential, IntegrationMethodOptions, exchangeCode, integrationMethod, manifest, tokenMethod };
+}
+/** Describes Vercel's caller-created personal access-token method. */
+declare function tokenMethod(capabilities: TokenValidation["capabilities"]): Extract<Manifest["methods"][number], {
+  readonly _tag: "token";
+}>;
+interface IntegrationMethodOptions {
+  readonly capabilities: TokenValidation["capabilities"];
+  readonly slug: string;
+}
+/** Describes Vercel's provider-specific integration installation flow. */
+declare function integrationMethod(options: IntegrationMethodOptions): IntegrationMethod;
+/** Creates the Vercel token and integration authorization manifest. */
+declare function manifest(options: IntegrationMethodOptions): Manifest;
+interface ExchangeCodeOptions {
+  readonly baseUrl?: string;
+  readonly clientId: string;
+  readonly clientSecret: Value;
+  readonly code: Value;
+  readonly fetch?: Fetch;
+  readonly redirectUri: string;
+}
+interface IntegrationCredential {
+  readonly accessToken: Value;
+  readonly context: AccountContext;
+  readonly installationId: string | null;
+  readonly userId: string;
+}
+/** Exchanges Vercel's one-time integration code and preserves its account context. */
+declare const exchangeCode: (options: ExchangeCodeOptions) => Effect.Effect<{
+  accessToken: Value;
+  context: {
+    readonly _tag: "personal";
+    readonly teamId?: never;
+  } | {
+    readonly _tag: "team";
+    readonly teamId: string;
+  };
+  installationId: string | null;
+  userId: string;
+}, Error, never>;
+declare namespace index_d_exports {
+  export { Account, AccountContext, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, make };
+}
+//#endregion
+export { make as _, auth_d_exports as a, tokenMethod as c, Fetch as d, Interface as f, client_d_exports as g, Zone as h, IntegrationMethodOptions as i, Account as l, Options as m, ExchangeCodeOptions as n, integrationMethod as o, ListZonesInput as p, IntegrationCredential as r, manifest as s, index_d_exports as t, AccountContext as u };
+//# sourceMappingURL=index-DQAjUrZu.d.mts.map

package/dist/index.d.mts

@@ -0,0 +1,128 @@
+import { A as Schema$1, C as DnsRecord, D as Observed, E as Ns, I as equals, L as parse, M as Txt, N as Type, O as Opaque, P as data, R as DomainName, S as Cname, T as Mx, U as invalid_input_d_exports, V as parse$1, a as OAuthClientConfiguration, b as Aaaa, c as Schema, d as Value, f as secret_d_exports, i as Method, j as Srv, k as RequirementMetadata, l as TokenValidation, m as CreateResult, o as OAuthMethod, p as AsyncInterface, r as Manifest, t as AsyncOAuthSubjectResolver, w as Encoded, x as Caa, y as A, z as Schema$2 } from "./manifest-DjH3BVB9.mjs";
+import { n as cloudflare_d_exports } from "./cloudflare-DClWuAm8.mjs";
+import { B as Connection, G as assertGrant, H as OAuthContinuation, M as AsyncInterface$3, O as AsyncInterface$4, R as AuthorizationError, S as encodeReceipt, U as Schema$3, V as Grant, W as StoredCredential, _ as Operation, b as Schema$4, g as DnsPlan, h as Authorization, m as ApplyReceipt, n as AsyncInterface$1, o as Query, q as encode, r as AsyncResolution, t as Answer, u as AsyncInterface$5, v as PlanAuthorization, w as AsyncInterface$2, x as encode$1, y as Receipt, z as Capability } from "./resolver-BjZwN2JE.mjs";
+import { a as Options$3, c as CreateInput$1, d as zones_d_exports, f as selection_d_exports, m as Fetch$1, p as BeginInput$1, r as Options$2, t as Result, u as renderManualInstructions$1 } from "./verify-DPB1OfZ5.mjs";
+import { r as vercel_d_exports } from "./vercel-Vc_K_87s.mjs";
+declare namespace connection_d_exports {
+  export { AuthorizationError, Capability, Connection, Grant, OAuthContinuation, Schema$3 as Schema, StoredCredential, assertGrant, decode$2 as decode, encode };
+}
+declare function decode$2(input: unknown): Promise<Connection>;
+declare namespace provider_auth_d_exports {
+  export { Manifest, Method, OAuthClientConfiguration, OAuthMethod, AsyncOAuthSubjectResolver as OAuthSubjectResolver, Schema, TokenValidation, decode$1 as decode };
+}
+declare function decode$1(input: unknown): Promise<Manifest>;
+declare namespace dns_record_d_exports {
+  export { A, Aaaa, Caa, Cname, DnsRecord, Encoded, Mx, Ns, Observed, Opaque, RequirementMetadata, Schema$1 as Schema, Srv, Txt, Type, data, equals, parse };
+}
+declare namespace domain_name_d_exports {
+  export { DomainName, Schema$2 as Schema, parse$1 as parse };
+}
+declare namespace dns_plan_d_exports {
+  export { ApplyReceipt, Authorization, DnsPlan, Operation, PlanAuthorization, Receipt, Schema$4 as Schema, decode, decodeReceipt, encode$1 as encode, encodeReceipt };
+}
+declare function decode(input: unknown): Promise<DnsPlan>;
+declare function decodeReceipt(input: unknown): Promise<ApplyReceipt>;
+declare namespace dns_provider_d_exports {
+  export { CreateResult, AsyncInterface as Interface };
+}
+declare namespace dns_resolver_d_exports {
+  export { Answer, AsyncInterface$1 as Interface, Query, AsyncResolution as Resolution };
+}
+declare namespace oauth_d_exports {
+  export { BeginInput, Fetch, begin, complete, refresh, revoke };
+}
+interface BeginInput extends BeginInput$1 {
+  readonly stateStore: AsyncInterface$2;
+}
+declare function begin(input: BeginInput): Promise<{
+  readonly authorizationUrl: URL;
+}>;
+declare function complete(input: {
+  readonly callbackUrl: URL;
+  readonly client: OAuthClientConfiguration;
+  readonly connectionStore: AsyncInterface$3;
+  readonly credentialStore: AsyncInterface$4;
+  readonly fetch?: Fetch$1;
+  readonly providerId: string;
+  readonly resolveSubject: AsyncOAuthSubjectResolver;
+  readonly stateStore: AsyncInterface$2;
+}): Promise<Connection>;
+declare function refresh(input: {
+  readonly client: OAuthClientConfiguration;
+  readonly connection: Connection;
+  readonly credentialStore: AsyncInterface$4;
+  readonly fetch?: Fetch$1;
+  readonly method: OAuthMethod;
+}): Promise<void>;
+declare function revoke(input: {
+  readonly client: OAuthClientConfiguration;
+  readonly connection: Connection;
+  readonly credentialStore: AsyncInterface$4;
+  readonly fetch?: Fetch$1;
+  readonly method: OAuthMethod;
+}): Promise<void>;
+type Fetch = Fetch$1;
+declare namespace provisioning_d_exports {
+  export { CreateInput, apply, authorize, authorizeForConnection, create, renderManualInstructions };
+}
+interface CreateInput extends CreateInput$1 {
+  readonly provider: AsyncInterface;
+}
+declare function create(input: CreateInput): Promise<DnsPlan>;
+declare function authorize(plan: DnsPlan, operationIds?: ReadonlyArray<string>, options?: {
+  readonly allowPartial?: boolean;
+}): Promise<PlanAuthorization>;
+declare function apply(input: {
+  readonly authorization: PlanAuthorization;
+  readonly plan: DnsPlan;
+  readonly provider: AsyncInterface;
+}): Promise<ApplyReceipt>;
+declare function authorizeForConnection(input: {
+  readonly accountId: string;
+  readonly allowPartial?: boolean;
+  readonly connection: Connection;
+  readonly operationIds?: ReadonlyArray<string>;
+  readonly plan: DnsPlan;
+}): Promise<PlanAuthorization>;
+declare const renderManualInstructions: typeof renderManualInstructions$1;
+declare namespace stores_d_exports {
+  export { AsyncInterface$3 as Connection, AsyncInterface$4 as Credential, AsyncInterface$2 as OAuthState, AsyncInterface$5 as Receipt };
+}
+declare namespace token_d_exports {
+  export { connect };
+}
+declare function connect(input: {
+  readonly connectionStore: AsyncInterface$3;
+  readonly credentialStore: AsyncInterface$4;
+  readonly grant: Grant;
+  readonly providerId: string;
+  readonly subjectId: string;
+  readonly token: Value;
+  readonly validate: (token: Value) => Promise<TokenValidation>;
+}): Promise<Connection>;
+declare namespace verification_d_exports {
+  export { record };
+}
+declare function record(input: {
+  readonly provider: AsyncInterface;
+  readonly record: DnsRecord;
+  readonly resolver: AsyncInterface$1;
+  readonly zone: DomainName;
+}): Promise<Result>;
+declare namespace cloudflare_doh_d_exports {
+  export { Options$1 as Options, make$1 as make };
+}
+type Options$1 = Options$2;
+declare function make$1(options?: Options$1): AsyncInterface$1;
+declare namespace doh_d_exports {
+  export { Options, make };
+}
+type Options = Options$3;
+declare function make(options: Options): AsyncInterface$1;
+//#endregion
+//#region src/index.d.ts
+/** The current package version from the package manifest. */
+declare const VERSION: string;
+//#endregion
+export { cloudflare_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, doh_d_exports as DnsOverHttps, dns_plan_d_exports as DnsPlan, type dns_provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, type dns_resolver_d_exports as DnsResolver, domain_name_d_exports as DomainName, invalid_input_d_exports as InvalidInput, oauth_d_exports as OAuth, provider_auth_d_exports as ProviderAuth, selection_d_exports as ProviderDiscovery, provisioning_d_exports as Provisioning, secret_d_exports as Secret, type stores_d_exports as Stores, token_d_exports as TokenConnection, VERSION, vercel_d_exports as Vercel, verification_d_exports as Verification, zones_d_exports as Zones };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -0,0 +1,198 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { D as parse$1, O as Error$1, _ as equals, a as Mx, c as Opaque, d as Srv, f as Txt, i as Cname, k as invalid_input_exports, l as RequirementMetadata, m as data, n as Aaaa, o as Ns, p as Type, r as Caa, s as Observed, t as A, u as Schema$1, v as parse, w as Schema$2, x as layerFromAsync, y as Error$2 } from "./dns-record-Dzo4flM5.mjs";
+import { t as cloudflare_exports } from "./cloudflare-C_ixZsJo.mjs";
+import { A as decode$4, B as Capability, E as connect$1, F as refresh$1, G as decode$3, H as Schema$3, I as revoke$1, K as encode, M as begin$1, N as complete$1, O as Method, R as webCryptoLayer, S as encodeReceipt, T as zones_exports, U as assertGrant, V as Grant, _ as Receipt, b as decodeReceipt$1, c as authorize$2, d as authorize$1, f as create$1, g as Operation, h as Authorization, i as toAsync, k as Schema$4, m as renderManualInstructions$1, o as toAsync$1, q as version, t as record$1, u as apply$1, v as Schema$5, w as selection_exports, x as encode$1, y as decode$5, z as AuthorizationError } from "./verify-CeMW6XtK.mjs";
+import { f as layerFromAsync$3, g as layerFromAsync$2, r as layerFromAsync$4, s as layerFromAsync$1 } from "./resolver-D5nVrR10.mjs";
+import { l as secret_exports } from "./client-DvXfJx_E.mjs";
+import { n as vercel_exports } from "./vercel-BWz_9Y1v.mjs";
+import { Effect, Layer } from "effect";
+//#region src/promise/connection.ts
+var connection_exports = /* @__PURE__ */ __exportAll({
+	AuthorizationError: () => AuthorizationError,
+	Capability: () => Capability,
+	Grant: () => Grant,
+	Schema: () => Schema$3,
+	assertGrant: () => assertGrant,
+	decode: () => decode$2,
+	encode: () => encode
+});
+function decode$2(input) {
+	return Effect.runPromise(decode$3(input));
+}
+//#endregion
+//#region src/promise/provider-auth.ts
+var provider_auth_exports = /* @__PURE__ */ __exportAll({
+	Method: () => Method,
+	Schema: () => Schema$4,
+	decode: () => decode$1
+});
+function decode$1(input) {
+	return Effect.runPromise(decode$4(input));
+}
+//#endregion
+//#region src/promise/dns-record.ts
+var dns_record_exports = /* @__PURE__ */ __exportAll({
+	A: () => A,
+	Aaaa: () => Aaaa,
+	Caa: () => Caa,
+	Cname: () => Cname,
+	Mx: () => Mx,
+	Ns: () => Ns,
+	Observed: () => Observed,
+	Opaque: () => Opaque,
+	RequirementMetadata: () => RequirementMetadata,
+	Schema: () => Schema$1,
+	Srv: () => Srv,
+	Txt: () => Txt,
+	Type: () => Type,
+	data: () => data,
+	equals: () => equals,
+	parse: () => parse
+});
+//#endregion
+//#region src/promise/domain-name.ts
+var domain_name_exports = /* @__PURE__ */ __exportAll({
+	Schema: () => Schema$2,
+	parse: () => parse$1
+});
+//#endregion
+//#region src/promise/dns-plan.ts
+var dns_plan_exports = /* @__PURE__ */ __exportAll({
+	Authorization: () => Authorization,
+	Operation: () => Operation,
+	Receipt: () => Receipt,
+	Schema: () => Schema$5,
+	decode: () => decode,
+	decodeReceipt: () => decodeReceipt,
+	encode: () => encode$1,
+	encodeReceipt: () => encodeReceipt
+});
+function decode(input) {
+	return Effect.runPromise(decode$5(input));
+}
+function decodeReceipt(input) {
+	return Effect.runPromise(decodeReceipt$1(input));
+}
+//#endregion
+//#region src/promise/oauth.ts
+var oauth_exports = /* @__PURE__ */ __exportAll({
+	begin: () => begin,
+	complete: () => complete,
+	refresh: () => refresh,
+	revoke: () => revoke
+});
+function begin(input) {
+	const { stateStore, ...programInput } = input;
+	return Effect.runPromise(begin$1(programInput).pipe(Effect.provide(Layer.merge(layerFromAsync$1(stateStore), webCryptoLayer))));
+}
+function complete(input) {
+	return Effect.runPromise(complete$1({
+		callbackUrl: input.callbackUrl,
+		client: input.client,
+		...input.fetch === void 0 ? {} : { fetch: input.fetch },
+		providerId: input.providerId,
+		resolveSubject: (tokens, accessToken) => Effect.tryPromise({
+			try: () => input.resolveSubject(tokens, accessToken),
+			catch: (cause) => providerFailure(input.providerId, "resolveSubject", cause)
+		})
+	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$1(input.stateStore), layerFromAsync$2(input.connectionStore), layerFromAsync$3(input.credentialStore), webCryptoLayer))));
+}
+function refresh(input) {
+	return Effect.runPromise(refresh$1({
+		client: input.client,
+		connection: input.connection,
+		...input.fetch === void 0 ? {} : { fetch: input.fetch },
+		method: input.method
+	}).pipe(Effect.provide(layerFromAsync$3(input.credentialStore))));
+}
+function revoke(input) {
+	return Effect.runPromise(revoke$1({
+		client: input.client,
+		connection: input.connection,
+		...input.fetch === void 0 ? {} : { fetch: input.fetch },
+		method: input.method
+	}).pipe(Effect.provide(layerFromAsync$3(input.credentialStore))));
+}
+function providerFailure(providerId, operation, cause) {
+	return cause instanceof Error$1 || cause instanceof Error$2 ? cause : new Error$2({
+		cause,
+		message: cause instanceof Error ? cause.message : "Provider callback failed",
+		operation,
+		providerId
+	});
+}
+//#endregion
+//#region src/promise/provisioning.ts
+var provisioning_exports = /* @__PURE__ */ __exportAll({
+	apply: () => apply,
+	authorize: () => authorize,
+	authorizeForConnection: () => authorizeForConnection,
+	create: () => create,
+	renderManualInstructions: () => renderManualInstructions
+});
+function create(input) {
+	const { provider, ...programInput } = input;
+	return Effect.runPromise(create$1(programInput).pipe(Effect.provide(Layer.merge(layerFromAsync(provider), webCryptoLayer))));
+}
+function authorize(plan, operationIds, options = {}) {
+	return Effect.runPromise(authorize$1(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)));
+}
+function apply(input) {
+	return Effect.runPromise(apply$1({
+		authorization: input.authorization,
+		plan: input.plan
+	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), webCryptoLayer))));
+}
+function authorizeForConnection(input) {
+	return Effect.runPromise(authorize$2(input).pipe(Effect.provide(webCryptoLayer)));
+}
+const renderManualInstructions = renderManualInstructions$1;
+//#endregion
+//#region src/promise/token.ts
+var token_exports = /* @__PURE__ */ __exportAll({ connect: () => connect });
+function connect(input) {
+	return Effect.runPromise(connect$1({
+		grant: input.grant,
+		providerId: input.providerId,
+		subjectId: input.subjectId,
+		token: input.token,
+		validate: (token) => Effect.tryPromise({
+			try: () => input.validate(token),
+			catch: (cause) => cause instanceof Error$1 || cause instanceof Error$2 ? cause : new Error$2({
+				cause,
+				message: cause instanceof Error ? cause.message : "Token validation failed",
+				operation: "validateToken",
+				providerId: input.providerId
+			})
+		})
+	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$2(input.connectionStore), layerFromAsync$3(input.credentialStore), webCryptoLayer))));
+}
+//#endregion
+//#region src/promise/verification.ts
+var verification_exports = /* @__PURE__ */ __exportAll({ record: () => record });
+function record(input) {
+	return Effect.runPromise(record$1({
+		record: input.record,
+		zone: input.zone
+	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), layerFromAsync$4(input.resolver)))));
+}
+//#endregion
+//#region src/promise/cloudflare-doh.ts
+var cloudflare_doh_exports = /* @__PURE__ */ __exportAll({ make: () => make$1 });
+function make$1(options = {}) {
+	return toAsync(options);
+}
+//#endregion
+//#region src/promise/doh.ts
+var doh_exports = /* @__PURE__ */ __exportAll({ make: () => make });
+function make(options) {
+	return toAsync$1(options);
+}
+//#endregion
+//#region src/index.ts
+/** The current package version from the package manifest. */
+const VERSION = version;
+//#endregion
+export { cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_exports as Connection, doh_exports as DnsOverHttps, dns_plan_exports as DnsPlan, dns_record_exports as DnsRecord, domain_name_exports as DomainName, invalid_input_exports as InvalidInput, oauth_exports as OAuth, provider_auth_exports as ProviderAuth, selection_exports as ProviderDiscovery, provisioning_exports as Provisioning, secret_exports as Secret, token_exports as TokenConnection, VERSION, vercel_exports as Vercel, verification_exports as Verification, zones_exports as Zones };
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["decode","Connection.decode","decode","ProviderAuth.decode","DnsPlan.decode","DnsPlan.decodeReceipt","OAuthEffect.begin","OAuthStateStore.layerFromAsync","OAuthEffect.complete","ConnectionStore.layerFromAsync","CredentialStore.layerFromAsync","OAuthEffect.refresh","OAuthEffect.revoke","InvalidInputError","DnsProvider.Error","ProvisioningEffect.create","DnsProvider.layerFromAsync","ProvisioningEffect.authorize","ProvisioningEffect.apply","ConnectionAuthorization.authorize","ProvisioningEffect.renderManualInstructions","TokenEffect.connect","InvalidInputError","DnsProvider.Error","ConnectionStore.layerFromAsync","CredentialStore.layerFromAsync","VerificationEffect.record","DnsProvider.layerFromAsync","DnsResolver.layerFromAsync","make","CloudflareDnsOverHttps.toAsync","DnsOverHttps.toAsync","packageJson.version"],"sources":["../src/promise/connection.ts","../src/promise/provider-auth.ts","../src/promise/dns-record.ts","../src/promise/domain-name.ts","../src/promise/dns-plan.ts","../src/promise/oauth.ts","../src/promise/provisioning.ts","../src/promise/token.ts","../src/promise/verification.ts","../src/promise/cloudflare-doh.ts","../src/promise/doh.ts","../src/index.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\n\nexport {\n  assertGrant,\n  AuthorizationError,\n  Capability,\n  encode,\n  Grant,\n  Schema,\n} from \"../auth/connection.ts\";\nexport type { Connection, OAuthContinuation, StoredCredential } from \"../auth/connection.ts\";\n\nexport function decode(input: unknown): Promise<Connection.Connection> {\n  return Effect.runPromise(Connection.decode(input));\n}\n","import { Effect } from \"effect\";\n\nimport * as ProviderAuth from \"../auth/manifest.ts\";\n\nexport { Method, Schema } from \"../auth/manifest.ts\";\nexport type {\n  AsyncOAuthSubjectResolver as OAuthSubjectResolver,\n  Manifest,\n  OAuthClientConfiguration,\n  OAuthMethod,\n  TokenValidation,\n} from \"../auth/manifest.ts\";\n\nexport function decode(input: unknown): Promise<ProviderAuth.Manifest> {\n  return Effect.runPromise(ProviderAuth.decode(input));\n}\n","export {\n  A,\n  Aaaa,\n  Caa,\n  Cname,\n  data,\n  equals,\n  Mx,\n  Ns,\n  Opaque,\n  Observed,\n  parse,\n  RequirementMetadata,\n  Schema,\n  Srv,\n  Txt,\n  Type,\n} from \"../domain/dns-record.ts\";\nexport type { DnsRecord, Encoded } from \"../domain/dns-record.ts\";\n","export { parse, Schema } from \"../domain/domain-name.ts\";\nexport type { DomainName } from \"../domain/domain-name.ts\";\n","import { Effect } from \"effect\";\n\nimport * as DnsPlan from \"../plan/types.ts\";\n\nexport { Authorization, encode, encodeReceipt, Operation, Receipt, Schema } from \"../plan/types.ts\";\nexport type { ApplyReceipt, DnsPlan, PlanAuthorization } from \"../plan/types.ts\";\n\nexport function decode(input: unknown): Promise<DnsPlan.DnsPlan> {\n  return Effect.runPromise(DnsPlan.decode(input));\n}\n\nexport function decodeReceipt(input: unknown): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(DnsPlan.decodeReceipt(input));\n}\n","import { Effect, Layer } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\nimport * as OAuthEffect from \"../auth/oauth.ts\";\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\nimport * as OAuthStateStore from \"../stores/oauth-state.ts\";\n\nexport interface BeginInput extends OAuthEffect.BeginInput {\n  readonly stateStore: OAuthStateStore.AsyncInterface;\n}\n\nexport function begin(input: BeginInput): Promise<{ readonly authorizationUrl: URL }> {\n  const { stateStore, ...programInput } = input;\n  return Effect.runPromise(\n    OAuthEffect.begin(programInput).pipe(\n      Effect.provide(Layer.merge(OAuthStateStore.layerFromAsync(stateStore), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function complete(input: {\n  readonly callbackUrl: URL;\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly providerId: string;\n  readonly resolveSubject: ProviderAuth.AsyncOAuthSubjectResolver;\n  readonly stateStore: OAuthStateStore.AsyncInterface;\n}): Promise<Connection.Connection> {\n  return Effect.runPromise(\n    OAuthEffect.complete({\n      callbackUrl: input.callbackUrl,\n      client: input.client,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      providerId: input.providerId,\n      resolveSubject: (tokens, accessToken) =>\n        Effect.tryPromise({\n          try: () => input.resolveSubject(tokens, accessToken),\n          catch: (cause) => providerFailure(input.providerId, \"resolveSubject\", cause),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          OAuthStateStore.layerFromAsync(input.stateStore),\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n          webCryptoLayer,\n        ),\n      ),\n    ),\n  );\n}\n\nexport function refresh(input: {\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connection: Connection.Connection;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly method: ProviderAuth.OAuthMethod;\n}): Promise<void> {\n  return Effect.runPromise(\n    OAuthEffect.refresh({\n      client: input.client,\n      connection: input.connection,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      method: input.method,\n    }).pipe(Effect.provide(CredentialStore.layerFromAsync(input.credentialStore))),\n  );\n}\n\nexport function revoke(input: {\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connection: Connection.Connection;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly method: ProviderAuth.OAuthMethod;\n}): Promise<void> {\n  return Effect.runPromise(\n    OAuthEffect.revoke({\n      client: input.client,\n      connection: input.connection,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      method: input.method,\n    }).pipe(Effect.provide(CredentialStore.layerFromAsync(input.credentialStore))),\n  );\n}\n\nfunction providerFailure(\n  providerId: string,\n  operation: string,\n  cause: unknown,\n): DnsProvider.Error | InvalidInputError {\n  return cause instanceof InvalidInputError || cause instanceof DnsProvider.Error\n    ? cause\n    : new DnsProvider.Error({\n        cause,\n        message: cause instanceof Error ? cause.message : \"Provider callback failed\",\n        operation,\n        providerId,\n      });\n}\n\nexport type Fetch = OAuthEffect.Fetch;\n","import { Effect, Layer } from \"effect\";\n\nimport type * as Connection from \"../auth/connection.ts\";\nimport * as ConnectionAuthorization from \"../plan/connection-authorization.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as ProvisioningEffect from \"../plan/plan.ts\";\nimport type * as DnsPlan from \"../plan/types.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport interface CreateInput extends ProvisioningEffect.CreateInput {\n  readonly provider: DnsProvider.AsyncInterface;\n}\n\nexport function create(input: CreateInput): Promise<DnsPlan.DnsPlan> {\n  const { provider, ...programInput } = input;\n  return Effect.runPromise(\n    ProvisioningEffect.create(programInput).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorize(\n  plan: DnsPlan.DnsPlan,\n  operationIds?: ReadonlyArray<string>,\n  options: { readonly allowPartial?: boolean } = {},\n): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ProvisioningEffect.authorize(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport function apply(input: {\n  readonly authorization: DnsPlan.PlanAuthorization;\n  readonly plan: DnsPlan.DnsPlan;\n  readonly provider: DnsProvider.AsyncInterface;\n}): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(\n    ProvisioningEffect.apply({ authorization: input.authorization, plan: input.plan }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorizeForConnection(input: {\n  readonly accountId: string;\n  readonly allowPartial?: boolean;\n  readonly connection: Connection.Connection;\n  readonly operationIds?: ReadonlyArray<string>;\n  readonly plan: DnsPlan.DnsPlan;\n}): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ConnectionAuthorization.authorize(input).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport const renderManualInstructions = ProvisioningEffect.renderManualInstructions;\n","import { Effect, Layer } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport { Value as Secret } from \"../auth/secret.ts\";\nimport * as TokenEffect from \"../auth/token.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\n\nexport function connect(input: {\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly grant: Connection.Grant;\n  readonly providerId: string;\n  readonly subjectId: string;\n  readonly token: Secret;\n  readonly validate: (token: Secret) => Promise<ProviderAuth.TokenValidation>;\n}): Promise<Connection.Connection> {\n  return Effect.runPromise(\n    TokenEffect.connect({\n      grant: input.grant,\n      providerId: input.providerId,\n      subjectId: input.subjectId,\n      token: input.token,\n      validate: (token) =>\n        Effect.tryPromise({\n          try: () => input.validate(token),\n          catch: (cause) =>\n            cause instanceof InvalidInputError || cause instanceof DnsProvider.Error\n              ? cause\n              : new DnsProvider.Error({\n                  cause,\n                  message: cause instanceof Error ? cause.message : \"Token validation failed\",\n                  operation: \"validateToken\",\n                  providerId: input.providerId,\n                }),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n          webCryptoLayer,\n        ),\n      ),\n    ),\n  );\n}\n","import { Effect, Layer } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as DnsResolver from \"../verification/resolver.ts\";\nimport * as VerificationEffect from \"../verification/verify.ts\";\n\nexport function record(input: {\n  readonly provider: DnsProvider.AsyncInterface;\n  readonly record: DnsRecord.DnsRecord;\n  readonly resolver: DnsResolver.AsyncInterface;\n  readonly zone: DomainName.DomainName;\n}): Promise<VerificationEffect.Result> {\n  return Effect.runPromise(\n    VerificationEffect.record({ record: input.record, zone: input.zone }).pipe(\n      Effect.provide(\n        Layer.merge(\n          DnsProvider.layerFromAsync(input.provider),\n          DnsResolver.layerFromAsync(input.resolver),\n        ),\n      ),\n    ),\n  );\n}\n","import * as CloudflareDnsOverHttps from \"../verification/cloudflare-doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = CloudflareDnsOverHttps.Options;\n\nexport function make(options: Options = {}): DnsResolver.AsyncInterface {\n  return CloudflareDnsOverHttps.toAsync(options);\n}\n","import * as DnsOverHttps from \"../verification/doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = DnsOverHttps.Options;\n\nexport function make(options: Options): DnsResolver.AsyncInterface {\n  return DnsOverHttps.toAsync(options);\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./promise/connection.ts\";\nexport * as ProviderAuth from \"./promise/provider-auth.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./promise/dns-record.ts\";\nexport * as DomainName from \"./promise/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsPlan from \"./promise/dns-plan.ts\";\nexport type * as DnsProvider from \"./promise/dns-provider.ts\";\nexport * as Cloudflare from \"./promise/cloudflare.ts\";\nexport * as Vercel from \"./promise/vercel.ts\";\nexport type * as DnsResolver from \"./promise/dns-resolver.ts\";\nexport * as OAuth from \"./promise/oauth.ts\";\nexport * as Provisioning from \"./promise/provisioning.ts\";\nexport type * as Stores from \"./promise/stores.ts\";\nexport * as TokenConnection from \"./promise/token.ts\";\nexport * as Verification from \"./promise/verification.ts\";\nexport * as CloudflareDnsOverHttps from \"./promise/cloudflare-doh.ts\";\nexport * as DnsOverHttps from \"./promise/doh.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAcA,SAAgBA,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAkB,KAAK,CAAC;AACnD;;;;;;;;ACHA,SAAgBC,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAoB,KAAK,CAAC;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGRA,SAAgB,OAAO,OAA0C;CAC/D,OAAO,OAAO,WAAWC,SAAe,KAAK,CAAC;AAChD;AAEA,SAAgB,cAAc,OAA+C;CAC3E,OAAO,OAAO,WAAWC,gBAAsB,KAAK,CAAC;AACvD;;;;;;;;;ACGA,SAAgB,MAAM,OAAgE;CACpF,MAAM,EAAE,YAAY,GAAG,iBAAiB;CACxC,OAAO,OAAO,WACZC,QAAkB,YAAY,CAAC,CAAC,KAC9B,OAAO,QAAQ,MAAM,MAAMC,iBAA+B,UAAU,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,SAAS,OASU;CACjC,OAAO,OAAO,WACZC,WAAqB;EACnB,aAAa,MAAM;EACnB,QAAQ,MAAM;EACd,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,YAAY,MAAM;EAClB,iBAAiB,QAAQ,gBACvB,OAAO,WAAW;GAChB,WAAW,MAAM,eAAe,QAAQ,WAAW;GACnD,QAAQ,UAAU,gBAAgB,MAAM,YAAY,kBAAkB,KAAK;EAC7E,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJD,iBAA+B,MAAM,UAAU,GAC/CE,iBAA+B,MAAM,eAAe,GACpDC,iBAA+B,MAAM,eAAe,GACpD,cACF,CACF,CACF,CACF;AACF;AAEA,SAAgB,QAAQ,OAMN;CAChB,OAAO,OAAO,WACZC,UAAoB;EAClB,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,QAAQ,MAAM;CAChB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQD,iBAA+B,MAAM,eAAe,CAAC,CAAC,CAC/E;AACF;AAEA,SAAgB,OAAO,OAML;CAChB,OAAO,OAAO,WACZE,SAAmB;EACjB,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,QAAQ,MAAM;CAChB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQF,iBAA+B,MAAM,eAAe,CAAC,CAAC,CAC/E;AACF;AAEA,SAAS,gBACP,YACA,WACA,OACuC;CACvC,OAAO,iBAAiBG,WAAqB,iBAAiBC,UAC1D,QACA,IAAIA,QAAkB;EACpB;EACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU;EAClD;EACA;CACF,CAAC;AACP;;;;;;;;;;AC7FA,SAAgB,OAAO,OAA8C;CACnE,MAAM,EAAE,UAAU,GAAG,iBAAiB;CACtC,OAAO,OAAO,WACZC,SAA0B,YAAY,CAAC,CAAC,KACtC,OAAO,QAAQ,MAAM,MAAMC,eAA2B,QAAQ,GAAG,cAAc,CAAC,CAClF,CACF;AACF;AAEA,SAAgB,UACd,MACA,cACA,UAA+C,CAAC,GACZ;CACpC,OAAO,OAAO,WACZC,YAA6B,MAAM,cAAc,OAAO,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC/F;AACF;AAEA,SAAgB,MAAM,OAIY;CAChC,OAAO,OAAO,WACZC,QAAyB;EAAE,eAAe,MAAM;EAAe,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACjF,OAAO,QAAQ,MAAM,MAAMF,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,uBAAuB,OAMA;CACrC,OAAO,OAAO,WACZG,YAAkC,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC9E;AACF;AAEA,MAAa,2BAA2BC;;;;AC5CxC,SAAgB,QAAQ,OAQW;CACjC,OAAO,OAAO,WACZC,UAAoB;EAClB,OAAO,MAAM;EACb,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,WAAW,UACT,OAAO,WAAW;GAChB,WAAW,MAAM,SAAS,KAAK;GAC/B,QAAQ,UACN,iBAAiBC,WAAqB,iBAAiBC,UACnD,QACA,IAAIA,QAAkB;IACpB;IACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU;IAClD,WAAW;IACX,YAAY,MAAM;GACpB,CAAC;EACT,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJC,iBAA+B,MAAM,eAAe,GACpDC,iBAA+B,MAAM,eAAe,GACpD,cACF,CACF,CACF,CACF;AACF;;;;AC1CA,SAAgB,OAAO,OAKgB;CACrC,OAAO,OAAO,WACZC,SAA0B;EAAE,QAAQ,MAAM;EAAQ,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACpE,OAAO,QACL,MAAM,MACJC,eAA2B,MAAM,QAAQ,GACzCC,iBAA2B,MAAM,QAAQ,CAC3C,CACF,CACF,CACF;AACF;;;;ACnBA,SAAgBC,OAAK,UAAmB,CAAC,GAA+B;CACtE,OAAOC,QAA+B,OAAO;AAC/C;;;;ACFA,SAAgB,KAAK,SAA8C;CACjE,OAAOC,UAAqB,OAAO;AACrC;;;;ACJA,MAAa,UAAUC"}