domainkit 0.1.0-beta.0 → 0.1.0-beta.1

package/dist/effect.d.mts

@@ -1,45 +1,55 @@
-import { B as domain_name_d_exports, F as dns_record_d_exports, H as Error$3, N as Type, U as invalid_input_d_exports, d as Value, f as secret_d_exports, h as Error$2, l as TokenValidation, u as manifest_d_exports, v as provider_d_exports } from "./manifest-DjH3BVB9.mjs";
-import { t as index_d_exports } from "./index-D1KtyjuI.mjs";
-import { t as index_d_exports$1 } from "./index-DQAjUrZu.mjs";
-import { A as Service$1, B as Connection, C as types_d_exports, D as oauth_state_d_exports, F as connection_d_exports$1, I as Error$4, K as connection_d_exports, L as error_d_exports, P as Service, R as AuthorizationError, V as Grant, g as DnsPlan, j as credential_d_exports, l as resolver_d_exports, p as receipt_d_exports } from "./resolver-BjZwN2JE.mjs";
-import { _ as canonical_json_d_exports, d as zones_d_exports, f as selection_d_exports, g as CryptoError, h as oauth_d_exports, i as cloudflare_doh_d_exports, l as plan_d_exports, n as verify_d_exports, o as doh_d_exports, s as AuthorizeError } from "./verify-DPB1OfZ5.mjs";
+import { B as domain_name_d_exports, F as dns_record_d_exports, H as Error$3, N as Type, U as invalid_input_d_exports, d as Value, f as secret_d_exports, h as Error$2, l as TokenValidation, u as manifest_d_exports, v as provider_d_exports } from "./manifest-CP85ePFn.mjs";
+import { t as index_d_exports } from "./index-CS9Rl5LQ.mjs";
+import { t as index_d_exports$1 } from "./index-CEzk2gbZ.mjs";
+import { A as Service$2, B as Error$4, C as types_d_exports, D as oauth_state_d_exports, F as credential_d_exports, H as AuthorizationError, P as Service$1, Q as ProviderAuthorization, R as Service, U as Connection, V as error_d_exports, W as Grant, Y as connection_d_exports, et as authorization_d_exports, g as DnsPlan, j as authorization_d_exports$1, l as resolver_d_exports, p as receipt_d_exports, z as connection_d_exports$1 } from "./resolver-BHPsADzE.mjs";
+import { E as canonical_json_d_exports, T as CryptoError, b as zones_d_exports, g as AuthorizeError, h as deletion_d_exports, i as cloudflare_doh_d_exports, k as connection_lifecycle_d_exports, n as verify_d_exports, o as doh_d_exports, v as plan_d_exports, w as oauth_d_exports, x as selection_d_exports } from "./verify-B80xCBh2.mjs";
 import { Crypto, Effect } from "effect";
 declare namespace token_d_exports {
   export { Error$1 as Error, Input, Requirements$1 as Requirements, connect };
 }
 interface Input {
   readonly grant: Grant;
+  readonly ownerId: string;
   readonly providerId: string;
   readonly subjectId: string;
   readonly token: Value;
   readonly validate: (token: Value) => Effect.Effect<TokenValidation, Error$2 | Error$3>;
 }
 declare const connect: (input: Input) => Effect.Effect<{
-  readonly accountId: string;
-  readonly capabilities: readonly ("dns:read" | "dns:write")[];
-  readonly createdAt: Date;
-  readonly expiresAt: Date | null;
-  readonly grant: {
-    readonly _tag: "account";
-  } | {
-    readonly _tag: "domains";
-    readonly domains: readonly (string & import("effect/Brand").Brand<"DomainName">)[];
+  authorization: {
+    readonly accountId: string;
+    readonly capabilities: readonly ("dns:read" | "dns:write")[];
+    readonly createdAt: Date;
+    readonly expiresAt: Date | null;
+    readonly id: string;
+    readonly kind: "oauth2" | "token";
+    readonly providerId: string;
+    readonly scopes: readonly string[];
+    readonly subjectId: string;
   };
-  readonly id: string;
-  readonly kind: "oauth2" | "token";
-  readonly providerId: string;
-  readonly scopes: readonly string[];
-  readonly subjectId: string;
-}, CryptoError | Error$3 | Error$2 | Error$4, Crypto.Crypto | Service | Service$1>;
+  connection: {
+    readonly authorizationId: string;
+    readonly createdAt: Date;
+    readonly grant: {
+      readonly _tag: "account";
+    } | {
+      readonly _tag: "domains";
+      readonly domains: readonly (string & import("effect/Brand").Brand<"DomainName">)[];
+    };
+    readonly id: string;
+    readonly ownerId: string;
+  };
+}, CryptoError | Error$3 | Error$2 | Error$4, Crypto.Crypto | Service | Service$1 | Service$2>;
 type Error$1 = Error$2 | Error$3 | CryptoError | Error$4;
-type Requirements$1 = Service | Service$1 | Crypto.Crypto;
+type Requirements$1 = Service$2 | Service | Service$1 | Crypto.Crypto;
 declare namespace connection_authorization_d_exports {
   export { Error, Requirements, authorize };
 }
 declare const authorize: (input: {
-  readonly accountId: string;
   readonly allowPartial?: boolean;
+  readonly authorization: ProviderAuthorization;
   readonly connection: Connection;
+  readonly domain: string;
   readonly operationIds?: ReadonlyArray<string>;
   readonly plan: DnsPlan;
 }) => Effect.Effect<{
@@ -59,5 +69,5 @@ declare function parse(type: Type, input: unknown): string;
 /** The current package version from the package manifest. */
 declare const VERSION: string;
 //#endregion
-export { index_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, connection_authorization_d_exports as ConnectionAuthorization, connection_d_exports$1 as ConnectionStore, credential_d_exports as CredentialStore, canonical_json_d_exports as Digest, dns_data_d_exports as DnsData, doh_d_exports as DnsOverHttps, types_d_exports as DnsPlan, provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, resolver_d_exports as DnsResolver, domain_name_d_exports as DomainName, invalid_input_d_exports as InvalidInput, oauth_d_exports as OAuth, oauth_state_d_exports as OAuthStateStore, manifest_d_exports as ProviderAuth, selection_d_exports as ProviderDiscovery, plan_d_exports as Provisioning, receipt_d_exports as ReceiptStore, secret_d_exports as Secret, error_d_exports as Storage, token_d_exports as TokenConnection, VERSION, index_d_exports$1 as Vercel, verify_d_exports as Verification, zones_d_exports as Zones };
+export { index_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, connection_authorization_d_exports as ConnectionAuthorization, connection_lifecycle_d_exports as ConnectionLifecycle, connection_d_exports$1 as ConnectionStore, credential_d_exports as CredentialStore, deletion_d_exports as Deletion, canonical_json_d_exports as Digest, dns_data_d_exports as DnsData, doh_d_exports as DnsOverHttps, types_d_exports as DnsPlan, provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, resolver_d_exports as DnsResolver, domain_name_d_exports as DomainName, invalid_input_d_exports as InvalidInput, oauth_d_exports as OAuth, oauth_state_d_exports as OAuthStateStore, manifest_d_exports as ProviderAuth, authorization_d_exports as ProviderAuthorization, authorization_d_exports$1 as ProviderAuthorizationStore, selection_d_exports as ProviderDiscovery, plan_d_exports as Provisioning, receipt_d_exports as ReceiptStore, secret_d_exports as Secret, error_d_exports as Storage, token_d_exports as TokenConnection, VERSION, index_d_exports$1 as Vercel, verify_d_exports as Verification, zones_d_exports as Zones };
 //# sourceMappingURL=effect.d.mts.map

package/dist/effect.mjs

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { E as domain_name_exports, S as provider_exports, g as dns_record_exports, k as invalid_input_exports } from "./dns-record-Dzo4flM5.mjs";
-import { o as client_exports, s as make, t as auth_exports } from "./auth-Df9BuC25.mjs";
-import { C as types_exports, D as token_exports, L as canonical_json_exports, P as oauth_exports, T as zones_exports, W as connection_exports, a as doh_exports, j as manifest_exports, l as connection_authorization_exports, n as verify_exports, p as plan_exports, q as version, r as cloudflare_doh_exports, s as dns_data_exports, w as selection_exports } from "./verify-CeMW6XtK.mjs";
-import { c as oauth_state_exports, d as credential_exports, h as connection_exports$1, i as resolver_exports, v as error_exports } from "./resolver-D5nVrR10.mjs";
-import { l as secret_exports, n as make$1, r as auth_exports$1, t as client_exports$1 } from "./client-DvXfJx_E.mjs";
-import { n as receipt_exports } from "./receipt-C7PjnibZ.mjs";
+import { E as domain_name_exports, S as provider_exports, g as dns_record_exports, k as invalid_input_exports } from "./dns-record-C_KwGPLf.mjs";
+import { o as client_exports, s as make, t as auth_exports } from "./auth-Vi-hhXbV.mjs";
+import { C as plan_exports, F as zones_exports, L as token_exports, N as types_exports, P as selection_exports, V as manifest_exports, W as oauth_exports, Z as authorization_exports, _ as deletion_exports, a as doh_exports, ct as connection_exports, dt as version, n as verify_exports, q as canonical_json_exports, r as cloudflare_doh_exports, s as dns_data_exports, tt as connection_lifecycle_exports, y as connection_authorization_exports } from "./verify-Dvc-9Kgp.mjs";
+import { S as error_exports, c as oauth_state_exports, d as authorization_exports$1, h as credential_exports, i as resolver_exports, y as connection_exports$1 } from "./resolver-tEXpKxmH.mjs";
+import { l as secret_exports, n as make$1, r as auth_exports$1, t as client_exports$1 } from "./client-BnD7QLRF.mjs";
+import { n as receipt_exports } from "./receipt-CGSnfZQ6.mjs";
 //#region src/providers/cloudflare/index.ts
 var cloudflare_exports = /* @__PURE__ */ __exportAll({
 	Auth: () => auth_exports,
@@ -23,6 +23,6 @@ var vercel_exports = /* @__PURE__ */ __exportAll({
 /** The current package version from the package manifest. */
 const VERSION = version;
 //#endregion
-export { cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_exports as Connection, connection_authorization_exports as ConnectionAuthorization, connection_exports$1 as ConnectionStore, credential_exports as CredentialStore, canonical_json_exports as Digest, dns_data_exports as DnsData, doh_exports as DnsOverHttps, types_exports as DnsPlan, provider_exports as DnsProvider, dns_record_exports as DnsRecord, resolver_exports as DnsResolver, domain_name_exports as DomainName, invalid_input_exports as InvalidInput, oauth_exports as OAuth, oauth_state_exports as OAuthStateStore, manifest_exports as ProviderAuth, selection_exports as ProviderDiscovery, plan_exports as Provisioning, receipt_exports as ReceiptStore, secret_exports as Secret, error_exports as Storage, token_exports as TokenConnection, VERSION, vercel_exports as Vercel, verify_exports as Verification, zones_exports as Zones };
+export { cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_exports as Connection, connection_authorization_exports as ConnectionAuthorization, connection_lifecycle_exports as ConnectionLifecycle, connection_exports$1 as ConnectionStore, credential_exports as CredentialStore, deletion_exports as Deletion, canonical_json_exports as Digest, dns_data_exports as DnsData, doh_exports as DnsOverHttps, types_exports as DnsPlan, provider_exports as DnsProvider, dns_record_exports as DnsRecord, resolver_exports as DnsResolver, domain_name_exports as DomainName, invalid_input_exports as InvalidInput, oauth_exports as OAuth, oauth_state_exports as OAuthStateStore, manifest_exports as ProviderAuth, authorization_exports as ProviderAuthorization, authorization_exports$1 as ProviderAuthorizationStore, selection_exports as ProviderDiscovery, plan_exports as Provisioning, receipt_exports as ReceiptStore, secret_exports as Secret, error_exports as Storage, token_exports as TokenConnection, VERSION, vercel_exports as Vercel, verify_exports as Verification, zones_exports as Zones };
 
 //# sourceMappingURL=effect.mjs.map

package/dist/effect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection.ts\";\nexport * as OAuth from \"./auth/oauth.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as TokenConnection from \"./auth/token.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as ConnectionStore from \"./stores/connection.ts\";\nexport * as CredentialStore from \"./stores/credential.ts\";\nexport * as OAuthStateStore from \"./stores/oauth-state.ts\";\nexport * as ReceiptStore from \"./stores/receipt.ts\";\nexport * as Storage from \"./stores/error.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AEGA,MAAa,UAAUA"}
+{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection.ts\";\nexport * as ConnectionLifecycle from \"./auth/connection-lifecycle.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as OAuth from \"./auth/oauth.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as TokenConnection from \"./auth/token.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as ConnectionStore from \"./stores/connection.ts\";\nexport * as ProviderAuthorizationStore from \"./stores/authorization.ts\";\nexport * as CredentialStore from \"./stores/credential.ts\";\nexport * as OAuthStateStore from \"./stores/oauth-state.ts\";\nexport * as ReceiptStore from \"./stores/receipt.ts\";\nexport * as Storage from \"./stores/error.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AEGA,MAAa,UAAUA"}

package/dist/{index-DQAjUrZu.d.mts → index-CEzk2gbZ.d.mts}

@@ -1,4 +1,4 @@
-import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, n as IntegrationMethod, r as Manifest } from "./manifest-DjH3BVB9.mjs";
+import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, n as IntegrationMethod, r as Manifest } from "./manifest-CP85ePFn.mjs";
 import { Effect } from "effect";
 declare namespace client_d_exports {
   export { Account, AccountContext, Fetch, Interface, ListZonesInput, Options, Zone, make };
@@ -91,4 +91,4 @@ declare namespace index_d_exports {
 }
 //#endregion
 export { make as _, auth_d_exports as a, tokenMethod as c, Fetch as d, Interface as f, client_d_exports as g, Zone as h, IntegrationMethodOptions as i, Account as l, Options as m, ExchangeCodeOptions as n, integrationMethod as o, ListZonesInput as p, IntegrationCredential as r, manifest as s, index_d_exports as t, AccountContext as u };
-//# sourceMappingURL=index-DQAjUrZu.d.mts.map
+//# sourceMappingURL=index-CEzk2gbZ.d.mts.map

package/dist/{index-D1KtyjuI.d.mts → index-CS9Rl5LQ.d.mts}

@@ -1,4 +1,4 @@
-import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, o as OAuthMethod, r as Manifest, s as OAuthSubjectResolver } from "./manifest-DjH3BVB9.mjs";
+import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, o as OAuthMethod, r as Manifest, s as OAuthSubjectResolver } from "./manifest-CP85ePFn.mjs";
 import { Effect, Schema } from "effect";
 //#region src/providers/cloudflare/protocol.d.ts
 declare const Account$1: Schema.Struct<{
@@ -68,4 +68,4 @@ declare namespace index_d_exports {
 }
 //#endregion
 export { manifest as a, Account as c, ListZonesInput as d, Options as f, make as h, auth_d_exports as i, Fetch as l, client_d_exports as m, OAuthMethodOptions as n, oauthMethod as o, Zone as p, SubjectResolverOptions as r, tokenMethod as s, index_d_exports as t, Interface as u };
-//# sourceMappingURL=index-D1KtyjuI.d.mts.map
+//# sourceMappingURL=index-CS9Rl5LQ.d.mts.map

package/dist/index.d.mts

@@ -1,12 +1,31 @@
-import { A as Schema$1, C as DnsRecord, D as Observed, E as Ns, I as equals, L as parse, M as Txt, N as Type, O as Opaque, P as data, R as DomainName, S as Cname, T as Mx, U as invalid_input_d_exports, V as parse$1, a as OAuthClientConfiguration, b as Aaaa, c as Schema, d as Value, f as secret_d_exports, i as Method, j as Srv, k as RequirementMetadata, l as TokenValidation, m as CreateResult, o as OAuthMethod, p as AsyncInterface, r as Manifest, t as AsyncOAuthSubjectResolver, w as Encoded, x as Caa, y as A, z as Schema$2 } from "./manifest-DjH3BVB9.mjs";
-import { n as cloudflare_d_exports } from "./cloudflare-DClWuAm8.mjs";
-import { B as Connection, G as assertGrant, H as OAuthContinuation, M as AsyncInterface$3, O as AsyncInterface$4, R as AuthorizationError, S as encodeReceipt, U as Schema$3, V as Grant, W as StoredCredential, _ as Operation, b as Schema$4, g as DnsPlan, h as Authorization, m as ApplyReceipt, n as AsyncInterface$1, o as Query, q as encode, r as AsyncResolution, t as Answer, u as AsyncInterface$5, v as PlanAuthorization, w as AsyncInterface$2, x as encode$1, y as Receipt, z as Capability } from "./resolver-BjZwN2JE.mjs";
-import { a as Options$3, c as CreateInput$1, d as zones_d_exports, f as selection_d_exports, m as Fetch$1, p as BeginInput$1, r as Options$2, t as Result, u as renderManualInstructions$1 } from "./verify-DPB1OfZ5.mjs";
-import { r as vercel_d_exports } from "./vercel-Vc_K_87s.mjs";
+import { A as Schema$1, C as DnsRecord, D as Observed, E as Ns, I as equals, L as parse, M as Txt, N as Type, O as Opaque, P as data, R as DomainName, S as Cname, T as Mx, U as invalid_input_d_exports, V as parse$1, a as OAuthClientConfiguration, b as Aaaa, c as Schema, d as Value, f as secret_d_exports, i as Method, j as Srv, k as RequirementMetadata, l as TokenValidation, m as CreateResult, o as OAuthMethod, p as AsyncInterface, r as Manifest, t as AsyncOAuthSubjectResolver, w as Encoded, x as Caa, y as A, z as Schema$2 } from "./manifest-CP85ePFn.mjs";
+import { n as cloudflare_d_exports } from "./cloudflare-tdjNS8vE.mjs";
+import { $ as Schema$4, G as OAuthContinuation, H as AuthorizationError, I as AsyncInterface$1, J as assertGrant, K as Schema$3, M as AsyncInterface$3, O as AsyncInterface$2, Q as ProviderAuthorization, S as encodeReceipt, U as Connection, W as Grant, X as encode, Z as Capability, _ as Operation, b as Schema$5, g as DnsPlan, h as Authorization, m as ApplyReceipt, n as AsyncInterface$4, o as Query, q as StoredCredential, r as AsyncResolution, t as Answer, tt as encode$1, u as AsyncInterface$6, v as PlanAuthorization, w as AsyncInterface$5, x as encode$2, y as Receipt } from "./resolver-BHPsADzE.mjs";
+import { A as updateGrant$1, C as Fetch$1, D as DetachResult, O as Error, S as BeginInput$1, _ as CreateInput$1, a as Options$3, b as zones_d_exports, c as Authorization$1, d as Operation$1, f as PartialError, l as CreateError, m as Receipt$1, p as Plan, r as Options$2, s as ApplyError, t as Result, u as Error$1, x as selection_d_exports, y as renderManualInstructions$1 } from "./verify-B80xCBh2.mjs";
+import { r as vercel_d_exports } from "./vercel-D-E2aqb1.mjs";
 declare namespace connection_d_exports {
-  export { AuthorizationError, Capability, Connection, Grant, OAuthContinuation, Schema$3 as Schema, StoredCredential, assertGrant, decode$2 as decode, encode };
+  export { AuthorizationError, Connection, Grant, OAuthContinuation, Schema$3 as Schema, StoredCredential, assertGrant, decode$3 as decode, encode };
 }
-declare function decode$2(input: unknown): Promise<Connection>;
+declare function decode$3(input: unknown): Promise<Connection>;
+declare namespace connection_lifecycle_d_exports {
+  export { DetachResult, Error, detach, updateGrant };
+}
+declare function updateGrant(input: {
+  readonly connection: Parameters<typeof updateGrant$1>[0]["connection"];
+  readonly connectionStore: AsyncInterface$1;
+  readonly grant: Parameters<typeof updateGrant$1>[0]["grant"];
+}): Promise<Connection>;
+declare function detach(input: {
+  readonly authorizationStore: AsyncInterface$2;
+  readonly connectionId: string;
+  readonly connectionStore: AsyncInterface$1;
+  readonly credentialStore: AsyncInterface$3;
+  readonly revokeAuthorization: (authorization: ProviderAuthorization) => Promise<void>;
+}): Promise<DetachResult>;
+declare namespace provider_authorization_d_exports {
+  export { Capability, ProviderAuthorization, Schema$4 as Schema, decode$2 as decode, encode$1 as encode };
+}
+declare function decode$2(input: unknown): Promise<ProviderAuthorization>;
 declare namespace provider_auth_d_exports {
   export { Manifest, Method, OAuthClientConfiguration, OAuthMethod, AsyncOAuthSubjectResolver as OAuthSubjectResolver, Schema, TokenValidation, decode$1 as decode };
 }
@@ -18,21 +37,37 @@ declare namespace domain_name_d_exports {
   export { DomainName, Schema$2 as Schema, parse$1 as parse };
 }
 declare namespace dns_plan_d_exports {
-  export { ApplyReceipt, Authorization, DnsPlan, Operation, PlanAuthorization, Receipt, Schema$4 as Schema, decode, decodeReceipt, encode$1 as encode, encodeReceipt };
+  export { ApplyReceipt, Authorization, DnsPlan, Operation, PlanAuthorization, Receipt, Schema$5 as Schema, decode, decodeReceipt, encode$2 as encode, encodeReceipt };
 }
 declare function decode(input: unknown): Promise<DnsPlan>;
 declare function decodeReceipt(input: unknown): Promise<ApplyReceipt>;
+declare namespace deletion_d_exports {
+  export { ApplyError, Authorization$1 as Authorization, CreateError, Authorization$1 as DeletionAuthorization, Operation$1 as DeletionOperation, Plan as DeletionPlan, Receipt$1 as DeletionReceipt, Error$1 as Error, Operation$1 as Operation, PartialError, Plan, Receipt$1 as Receipt, apply$1 as apply, authorize$1 as authorize, create$1 as create };
+}
+declare function create$1(input: {
+  readonly plan: DnsPlan;
+  readonly provider: AsyncInterface;
+  readonly receipt: ApplyReceipt;
+  readonly ttlMs?: number;
+}): Promise<Plan>;
+declare function authorize$1(plan: Plan, operationIds?: ReadonlyArray<string>): Promise<Authorization$1>;
+declare function apply$1(input: {
+  readonly authorization: Authorization$1;
+  readonly plan: Plan;
+  readonly priorReceipt?: Receipt$1;
+  readonly provider: AsyncInterface;
+}): Promise<Receipt$1>;
 declare namespace dns_provider_d_exports {
   export { CreateResult, AsyncInterface as Interface };
 }
 declare namespace dns_resolver_d_exports {
-  export { Answer, AsyncInterface$1 as Interface, Query, AsyncResolution as Resolution };
+  export { Answer, AsyncInterface$4 as Interface, Query, AsyncResolution as Resolution };
 }
 declare namespace oauth_d_exports {
   export { BeginInput, Fetch, begin, complete, refresh, revoke };
 }
 interface BeginInput extends BeginInput$1 {
-  readonly stateStore: AsyncInterface$2;
+  readonly stateStore: AsyncInterface$5;
 }
 declare function begin(input: BeginInput): Promise<{
   readonly authorizationUrl: URL;
@@ -40,24 +75,28 @@ declare function begin(input: BeginInput): Promise<{
 declare function complete(input: {
   readonly callbackUrl: URL;
   readonly client: OAuthClientConfiguration;
-  readonly connectionStore: AsyncInterface$3;
-  readonly credentialStore: AsyncInterface$4;
+  readonly connectionStore: AsyncInterface$1;
+  readonly credentialStore: AsyncInterface$3;
+  readonly authorizationStore: AsyncInterface$2;
   readonly fetch?: Fetch$1;
   readonly providerId: string;
   readonly resolveSubject: AsyncOAuthSubjectResolver;
-  readonly stateStore: AsyncInterface$2;
-}): Promise<Connection>;
+  readonly stateStore: AsyncInterface$5;
+}): Promise<{
+  readonly authorization: ProviderAuthorization;
+  readonly connection: Connection;
+}>;
 declare function refresh(input: {
+  readonly authorization: ProviderAuthorization;
   readonly client: OAuthClientConfiguration;
-  readonly connection: Connection;
-  readonly credentialStore: AsyncInterface$4;
+  readonly credentialStore: AsyncInterface$3;
   readonly fetch?: Fetch$1;
   readonly method: OAuthMethod;
 }): Promise<void>;
 declare function revoke(input: {
+  readonly authorization: ProviderAuthorization;
   readonly client: OAuthClientConfiguration;
-  readonly connection: Connection;
-  readonly credentialStore: AsyncInterface$4;
+  readonly credentialStore: AsyncInterface$3;
   readonly fetch?: Fetch$1;
   readonly method: OAuthMethod;
 }): Promise<void>;
@@ -78,51 +117,57 @@ declare function apply(input: {
   readonly provider: AsyncInterface;
 }): Promise<ApplyReceipt>;
 declare function authorizeForConnection(input: {
-  readonly accountId: string;
   readonly allowPartial?: boolean;
+  readonly authorization: ProviderAuthorization;
   readonly connection: Connection;
+  readonly domain: string;
   readonly operationIds?: ReadonlyArray<string>;
   readonly plan: DnsPlan;
 }): Promise<PlanAuthorization>;
 declare const renderManualInstructions: typeof renderManualInstructions$1;
 declare namespace stores_d_exports {
-  export { AsyncInterface$3 as Connection, AsyncInterface$4 as Credential, AsyncInterface$2 as OAuthState, AsyncInterface$5 as Receipt };
+  export { AsyncInterface$1 as Connection, AsyncInterface$3 as Credential, AsyncInterface$5 as OAuthState, AsyncInterface$2 as ProviderAuthorization, AsyncInterface$6 as Receipt };
 }
 declare namespace token_d_exports {
   export { connect };
 }
 declare function connect(input: {
-  readonly connectionStore: AsyncInterface$3;
-  readonly credentialStore: AsyncInterface$4;
+  readonly connectionStore: AsyncInterface$1;
+  readonly credentialStore: AsyncInterface$3;
+  readonly authorizationStore: AsyncInterface$2;
   readonly grant: Grant;
+  readonly ownerId: string;
   readonly providerId: string;
   readonly subjectId: string;
   readonly token: Value;
   readonly validate: (token: Value) => Promise<TokenValidation>;
-}): Promise<Connection>;
+}): Promise<{
+  readonly authorization: ProviderAuthorization;
+  readonly connection: Connection;
+}>;
 declare namespace verification_d_exports {
   export { record };
 }
 declare function record(input: {
   readonly provider: AsyncInterface;
   readonly record: DnsRecord;
-  readonly resolver: AsyncInterface$1;
+  readonly resolver: AsyncInterface$4;
   readonly zone: DomainName;
 }): Promise<Result>;
 declare namespace cloudflare_doh_d_exports {
   export { Options$1 as Options, make$1 as make };
 }
 type Options$1 = Options$2;
-declare function make$1(options?: Options$1): AsyncInterface$1;
+declare function make$1(options?: Options$1): AsyncInterface$4;
 declare namespace doh_d_exports {
   export { Options, make };
 }
 type Options = Options$3;
-declare function make(options: Options): AsyncInterface$1;
+declare function make(options: Options): AsyncInterface$4;
 //#endregion
 //#region src/index.d.ts
 /** The current package version from the package manifest. */
 declare const VERSION: string;
 //#endregion
-export { cloudflare_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, doh_d_exports as DnsOverHttps, dns_plan_d_exports as DnsPlan, type dns_provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, type dns_resolver_d_exports as DnsResolver, domain_name_d_exports as DomainName, invalid_input_d_exports as InvalidInput, oauth_d_exports as OAuth, provider_auth_d_exports as ProviderAuth, selection_d_exports as ProviderDiscovery, provisioning_d_exports as Provisioning, secret_d_exports as Secret, type stores_d_exports as Stores, token_d_exports as TokenConnection, VERSION, vercel_d_exports as Vercel, verification_d_exports as Verification, zones_d_exports as Zones };
+export { cloudflare_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, connection_lifecycle_d_exports as ConnectionLifecycle, deletion_d_exports as Deletion, doh_d_exports as DnsOverHttps, dns_plan_d_exports as DnsPlan, type dns_provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, type dns_resolver_d_exports as DnsResolver, domain_name_d_exports as DomainName, invalid_input_d_exports as InvalidInput, oauth_d_exports as OAuth, provider_auth_d_exports as ProviderAuth, provider_authorization_d_exports as ProviderAuthorization, selection_d_exports as ProviderDiscovery, provisioning_d_exports as Provisioning, secret_d_exports as Secret, type stores_d_exports as Stores, token_d_exports as TokenConnection, VERSION, vercel_d_exports as Vercel, verification_d_exports as Verification, zones_d_exports as Zones };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,33 +1,65 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { D as parse$1, O as Error$1, _ as equals, a as Mx, c as Opaque, d as Srv, f as Txt, i as Cname, k as invalid_input_exports, l as RequirementMetadata, m as data, n as Aaaa, o as Ns, p as Type, r as Caa, s as Observed, t as A, u as Schema$1, v as parse, w as Schema$2, x as layerFromAsync, y as Error$2 } from "./dns-record-Dzo4flM5.mjs";
-import { t as cloudflare_exports } from "./cloudflare-C_ixZsJo.mjs";
-import { A as decode$4, B as Capability, E as connect$1, F as refresh$1, G as decode$3, H as Schema$3, I as revoke$1, K as encode, M as begin$1, N as complete$1, O as Method, R as webCryptoLayer, S as encodeReceipt, T as zones_exports, U as assertGrant, V as Grant, _ as Receipt, b as decodeReceipt$1, c as authorize$2, d as authorize$1, f as create$1, g as Operation, h as Authorization, i as toAsync, k as Schema$4, m as renderManualInstructions$1, o as toAsync$1, q as version, t as record$1, u as apply$1, v as Schema$5, w as selection_exports, x as encode$1, y as decode$5, z as AuthorizationError } from "./verify-CeMW6XtK.mjs";
-import { f as layerFromAsync$3, g as layerFromAsync$2, r as layerFromAsync$4, s as layerFromAsync$1 } from "./resolver-D5nVrR10.mjs";
-import { l as secret_exports } from "./client-DvXfJx_E.mjs";
-import { n as vercel_exports } from "./vercel-BWz_9Y1v.mjs";
+import { D as parse$1, O as Error$1, _ as equals, a as Mx, c as Opaque, d as Srv, f as Txt, i as Cname, k as invalid_input_exports, l as RequirementMetadata, m as data, n as Aaaa, o as Ns, p as Type, r as Caa, s as Observed, t as A, u as Schema$1, v as parse, w as Schema$2, x as layerFromAsync, y as Error$2 } from "./dns-record-C_KwGPLf.mjs";
+import { t as cloudflare_exports } from "./cloudflare-C6ryPlCZ.mjs";
+import { $ as encode$1, A as decodeReceipt$1, B as decode$6, D as Receipt, E as Operation, F as zones_exports, G as refresh$1, H as begin$1, I as connect$1, J as webCryptoLayer, K as revoke$1, M as encodeReceipt, O as Schema$6, P as selection_exports, Q as decode$5, R as Method, S as create$3, T as Authorization, U as complete$1, X as Schema$4, Y as Capability, at as Grant, b as apply$3, c as Authorization$1, d as PartialError, dt as version, et as Error$3, f as Plan, g as create$2, h as authorize$2, i as toAsync, it as AuthorizationError, j as encode$2, k as decode$7, l as Error$4, lt as decode$4, m as apply$2, nt as detach$1, o as toAsync$1, ot as Schema$3, p as Receipt$1, rt as updateGrant$1, st as assertGrant, t as record$1, u as Operation$1, ut as encode, v as authorize$4, w as renderManualInstructions$1, x as authorize$3, z as Schema$5 } from "./verify-Dvc-9Kgp.mjs";
+import { b as layerFromAsync$1, f as layerFromAsync$2, g as layerFromAsync$3, r as layerFromAsync$5, s as layerFromAsync$4 } from "./resolver-tEXpKxmH.mjs";
+import { l as secret_exports } from "./client-BnD7QLRF.mjs";
+import { n as vercel_exports } from "./vercel-DD89DCqH.mjs";
 import { Effect, Layer } from "effect";
 //#region src/promise/connection.ts
 var connection_exports = /* @__PURE__ */ __exportAll({
 	AuthorizationError: () => AuthorizationError,
-	Capability: () => Capability,
 	Grant: () => Grant,
 	Schema: () => Schema$3,
 	assertGrant: () => assertGrant,
-	decode: () => decode$2,
+	decode: () => decode$3,
 	encode: () => encode
 });
+function decode$3(input) {
+	return Effect.runPromise(decode$4(input));
+}
+//#endregion
+//#region src/promise/connection-lifecycle.ts
+var connection_lifecycle_exports = /* @__PURE__ */ __exportAll({
+	Error: () => Error$3,
+	detach: () => detach,
+	updateGrant: () => updateGrant
+});
+function updateGrant(input) {
+	return Effect.runPromise(updateGrant$1({
+		connection: input.connection,
+		grant: input.grant
+	}).pipe(Effect.provide(layerFromAsync$1(input.connectionStore))));
+}
+function detach(input) {
+	return Effect.runPromise(detach$1({
+		connectionId: input.connectionId,
+		revokeAuthorization: (authorization) => Effect.tryPromise({
+			try: () => input.revokeAuthorization(authorization),
+			catch: (cause) => new Error$3({ message: cause instanceof globalThis.Error ? cause.message : String(cause) })
+		})
+	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$2(input.authorizationStore), layerFromAsync$1(input.connectionStore), layerFromAsync$3(input.credentialStore)))));
+}
+//#endregion
+//#region src/promise/provider-authorization.ts
+var provider_authorization_exports = /* @__PURE__ */ __exportAll({
+	Capability: () => Capability,
+	Schema: () => Schema$4,
+	decode: () => decode$2,
+	encode: () => encode$1
+});
 function decode$2(input) {
-	return Effect.runPromise(decode$3(input));
+	return Effect.runPromise(decode$5(input));
 }
 //#endregion
 //#region src/promise/provider-auth.ts
 var provider_auth_exports = /* @__PURE__ */ __exportAll({
 	Method: () => Method,
-	Schema: () => Schema$4,
+	Schema: () => Schema$5,
 	decode: () => decode$1
 });
 function decode$1(input) {
-	return Effect.runPromise(decode$4(input));
+	return Effect.runPromise(decode$6(input));
 }
 //#endregion
 //#region src/promise/dns-record.ts
@@ -61,19 +93,49 @@ var dns_plan_exports = /* @__PURE__ */ __exportAll({
 	Authorization: () => Authorization,
 	Operation: () => Operation,
 	Receipt: () => Receipt,
-	Schema: () => Schema$5,
+	Schema: () => Schema$6,
 	decode: () => decode,
 	decodeReceipt: () => decodeReceipt,
-	encode: () => encode$1,
+	encode: () => encode$2,
 	encodeReceipt: () => encodeReceipt
 });
 function decode(input) {
-	return Effect.runPromise(decode$5(input));
+	return Effect.runPromise(decode$7(input));
 }
 function decodeReceipt(input) {
 	return Effect.runPromise(decodeReceipt$1(input));
 }
 //#endregion
+//#region src/promise/deletion.ts
+var deletion_exports = /* @__PURE__ */ __exportAll({
+	Authorization: () => Authorization$1,
+	Error: () => Error$4,
+	Operation: () => Operation$1,
+	PartialError: () => PartialError,
+	Plan: () => Plan,
+	Receipt: () => Receipt$1,
+	apply: () => apply$1,
+	authorize: () => authorize$1,
+	create: () => create$1
+});
+function create$1(input) {
+	return Effect.runPromise(create$2({
+		plan: input.plan,
+		receipt: input.receipt,
+		...input.ttlMs === void 0 ? {} : { ttlMs: input.ttlMs }
+	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), webCryptoLayer))));
+}
+function authorize$1(plan, operationIds) {
+	return Effect.runPromise(authorize$2(plan, operationIds).pipe(Effect.provide(webCryptoLayer)));
+}
+function apply$1(input) {
+	return Effect.runPromise(apply$2({
+		authorization: input.authorization,
+		plan: input.plan,
+		...input.priorReceipt === void 0 ? {} : { priorReceipt: input.priorReceipt }
+	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), webCryptoLayer))));
+}
+//#endregion
 //#region src/promise/oauth.ts
 var oauth_exports = /* @__PURE__ */ __exportAll({
 	begin: () => begin,
@@ -83,7 +145,7 @@ var oauth_exports = /* @__PURE__ */ __exportAll({
 });
 function begin(input) {
 	const { stateStore, ...programInput } = input;
-	return Effect.runPromise(begin$1(programInput).pipe(Effect.provide(Layer.merge(layerFromAsync$1(stateStore), webCryptoLayer))));
+	return Effect.runPromise(begin$1(programInput).pipe(Effect.provide(Layer.merge(layerFromAsync$4(stateStore), webCryptoLayer))));
 }
 function complete(input) {
 	return Effect.runPromise(complete$1({
@@ -95,12 +157,12 @@ function complete(input) {
 			try: () => input.resolveSubject(tokens, accessToken),
 			catch: (cause) => providerFailure(input.providerId, "resolveSubject", cause)
 		})
-	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$1(input.stateStore), layerFromAsync$2(input.connectionStore), layerFromAsync$3(input.credentialStore), webCryptoLayer))));
+	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$4(input.stateStore), layerFromAsync$2(input.authorizationStore), layerFromAsync$1(input.connectionStore), layerFromAsync$3(input.credentialStore), webCryptoLayer))));
 }
 function refresh(input) {
 	return Effect.runPromise(refresh$1({
 		client: input.client,
-		connection: input.connection,
+		authorization: input.authorization,
 		...input.fetch === void 0 ? {} : { fetch: input.fetch },
 		method: input.method
 	}).pipe(Effect.provide(layerFromAsync$3(input.credentialStore))));
@@ -108,7 +170,7 @@ function refresh(input) {
 function revoke(input) {
 	return Effect.runPromise(revoke$1({
 		client: input.client,
-		connection: input.connection,
+		authorization: input.authorization,
 		...input.fetch === void 0 ? {} : { fetch: input.fetch },
 		method: input.method
 	}).pipe(Effect.provide(layerFromAsync$3(input.credentialStore))));
@@ -132,19 +194,19 @@ var provisioning_exports = /* @__PURE__ */ __exportAll({
 });
 function create(input) {
 	const { provider, ...programInput } = input;
-	return Effect.runPromise(create$1(programInput).pipe(Effect.provide(Layer.merge(layerFromAsync(provider), webCryptoLayer))));
+	return Effect.runPromise(create$3(programInput).pipe(Effect.provide(Layer.merge(layerFromAsync(provider), webCryptoLayer))));
 }
 function authorize(plan, operationIds, options = {}) {
-	return Effect.runPromise(authorize$1(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)));
+	return Effect.runPromise(authorize$3(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)));
 }
 function apply(input) {
-	return Effect.runPromise(apply$1({
+	return Effect.runPromise(apply$3({
 		authorization: input.authorization,
 		plan: input.plan
 	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), webCryptoLayer))));
 }
 function authorizeForConnection(input) {
-	return Effect.runPromise(authorize$2(input).pipe(Effect.provide(webCryptoLayer)));
+	return Effect.runPromise(authorize$4(input).pipe(Effect.provide(webCryptoLayer)));
 }
 const renderManualInstructions = renderManualInstructions$1;
 //#endregion
@@ -153,6 +215,7 @@ var token_exports = /* @__PURE__ */ __exportAll({ connect: () => connect });
 function connect(input) {
 	return Effect.runPromise(connect$1({
 		grant: input.grant,
+		ownerId: input.ownerId,
 		providerId: input.providerId,
 		subjectId: input.subjectId,
 		token: input.token,
@@ -165,7 +228,7 @@ function connect(input) {
 				providerId: input.providerId
 			})
 		})
-	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$2(input.connectionStore), layerFromAsync$3(input.credentialStore), webCryptoLayer))));
+	}).pipe(Effect.provide(Layer.mergeAll(layerFromAsync$1(input.connectionStore), layerFromAsync$2(input.authorizationStore), layerFromAsync$3(input.credentialStore), webCryptoLayer))));
 }
 //#endregion
 //#region src/promise/verification.ts
@@ -174,7 +237,7 @@ function record(input) {
 	return Effect.runPromise(record$1({
 		record: input.record,
 		zone: input.zone
-	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), layerFromAsync$4(input.resolver)))));
+	}).pipe(Effect.provide(Layer.merge(layerFromAsync(input.provider), layerFromAsync$5(input.resolver)))));
 }
 //#endregion
 //#region src/promise/cloudflare-doh.ts
@@ -193,6 +256,6 @@ function make(options) {
 /** The current package version from the package manifest. */
 const VERSION = version;
 //#endregion
-export { cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_exports as Connection, doh_exports as DnsOverHttps, dns_plan_exports as DnsPlan, dns_record_exports as DnsRecord, domain_name_exports as DomainName, invalid_input_exports as InvalidInput, oauth_exports as OAuth, provider_auth_exports as ProviderAuth, selection_exports as ProviderDiscovery, provisioning_exports as Provisioning, secret_exports as Secret, token_exports as TokenConnection, VERSION, vercel_exports as Vercel, verification_exports as Verification, zones_exports as Zones };
+export { cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_exports as Connection, connection_lifecycle_exports as ConnectionLifecycle, deletion_exports as Deletion, doh_exports as DnsOverHttps, dns_plan_exports as DnsPlan, dns_record_exports as DnsRecord, domain_name_exports as DomainName, invalid_input_exports as InvalidInput, oauth_exports as OAuth, provider_auth_exports as ProviderAuth, provider_authorization_exports as ProviderAuthorization, selection_exports as ProviderDiscovery, provisioning_exports as Provisioning, secret_exports as Secret, token_exports as TokenConnection, VERSION, vercel_exports as Vercel, verification_exports as Verification, zones_exports as Zones };
 
 //# sourceMappingURL=index.mjs.map