domainkit 0.1.0-beta.0 → 0.1.0

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["decode","Connection.decode","decode","ProviderAuth.decode","DnsPlan.decode","DnsPlan.decodeReceipt","OAuthEffect.begin","OAuthStateStore.layerFromAsync","OAuthEffect.complete","ConnectionStore.layerFromAsync","CredentialStore.layerFromAsync","OAuthEffect.refresh","OAuthEffect.revoke","InvalidInputError","DnsProvider.Error","ProvisioningEffect.create","DnsProvider.layerFromAsync","ProvisioningEffect.authorize","ProvisioningEffect.apply","ConnectionAuthorization.authorize","ProvisioningEffect.renderManualInstructions","TokenEffect.connect","InvalidInputError","DnsProvider.Error","ConnectionStore.layerFromAsync","CredentialStore.layerFromAsync","VerificationEffect.record","DnsProvider.layerFromAsync","DnsResolver.layerFromAsync","make","CloudflareDnsOverHttps.toAsync","DnsOverHttps.toAsync","packageJson.version"],"sources":["../src/promise/connection.ts","../src/promise/provider-auth.ts","../src/promise/dns-record.ts","../src/promise/domain-name.ts","../src/promise/dns-plan.ts","../src/promise/oauth.ts","../src/promise/provisioning.ts","../src/promise/token.ts","../src/promise/verification.ts","../src/promise/cloudflare-doh.ts","../src/promise/doh.ts","../src/index.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\n\nexport {\n  assertGrant,\n  AuthorizationError,\n  Capability,\n  encode,\n  Grant,\n  Schema,\n} from \"../auth/connection.ts\";\nexport type { Connection, OAuthContinuation, StoredCredential } from \"../auth/connection.ts\";\n\nexport function decode(input: unknown): Promise<Connection.Connection> {\n  return Effect.runPromise(Connection.decode(input));\n}\n","import { Effect } from \"effect\";\n\nimport * as ProviderAuth from \"../auth/manifest.ts\";\n\nexport { Method, Schema } from \"../auth/manifest.ts\";\nexport type {\n  AsyncOAuthSubjectResolver as OAuthSubjectResolver,\n  Manifest,\n  OAuthClientConfiguration,\n  OAuthMethod,\n  TokenValidation,\n} from \"../auth/manifest.ts\";\n\nexport function decode(input: unknown): Promise<ProviderAuth.Manifest> {\n  return Effect.runPromise(ProviderAuth.decode(input));\n}\n","export {\n  A,\n  Aaaa,\n  Caa,\n  Cname,\n  data,\n  equals,\n  Mx,\n  Ns,\n  Opaque,\n  Observed,\n  parse,\n  RequirementMetadata,\n  Schema,\n  Srv,\n  Txt,\n  Type,\n} from \"../domain/dns-record.ts\";\nexport type { DnsRecord, Encoded } from \"../domain/dns-record.ts\";\n","export { parse, Schema } from \"../domain/domain-name.ts\";\nexport type { DomainName } from \"../domain/domain-name.ts\";\n","import { Effect } from \"effect\";\n\nimport * as DnsPlan from \"../plan/types.ts\";\n\nexport { Authorization, encode, encodeReceipt, Operation, Receipt, Schema } from \"../plan/types.ts\";\nexport type { ApplyReceipt, DnsPlan, PlanAuthorization } from \"../plan/types.ts\";\n\nexport function decode(input: unknown): Promise<DnsPlan.DnsPlan> {\n  return Effect.runPromise(DnsPlan.decode(input));\n}\n\nexport function decodeReceipt(input: unknown): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(DnsPlan.decodeReceipt(input));\n}\n","import { Effect, Layer } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\nimport * as OAuthEffect from \"../auth/oauth.ts\";\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\nimport * as OAuthStateStore from \"../stores/oauth-state.ts\";\n\nexport interface BeginInput extends OAuthEffect.BeginInput {\n  readonly stateStore: OAuthStateStore.AsyncInterface;\n}\n\nexport function begin(input: BeginInput): Promise<{ readonly authorizationUrl: URL }> {\n  const { stateStore, ...programInput } = input;\n  return Effect.runPromise(\n    OAuthEffect.begin(programInput).pipe(\n      Effect.provide(Layer.merge(OAuthStateStore.layerFromAsync(stateStore), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function complete(input: {\n  readonly callbackUrl: URL;\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly providerId: string;\n  readonly resolveSubject: ProviderAuth.AsyncOAuthSubjectResolver;\n  readonly stateStore: OAuthStateStore.AsyncInterface;\n}): Promise<Connection.Connection> {\n  return Effect.runPromise(\n    OAuthEffect.complete({\n      callbackUrl: input.callbackUrl,\n      client: input.client,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      providerId: input.providerId,\n      resolveSubject: (tokens, accessToken) =>\n        Effect.tryPromise({\n          try: () => input.resolveSubject(tokens, accessToken),\n          catch: (cause) => providerFailure(input.providerId, \"resolveSubject\", cause),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          OAuthStateStore.layerFromAsync(input.stateStore),\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n          webCryptoLayer,\n        ),\n      ),\n    ),\n  );\n}\n\nexport function refresh(input: {\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connection: Connection.Connection;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly method: ProviderAuth.OAuthMethod;\n}): Promise<void> {\n  return Effect.runPromise(\n    OAuthEffect.refresh({\n      client: input.client,\n      connection: input.connection,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      method: input.method,\n    }).pipe(Effect.provide(CredentialStore.layerFromAsync(input.credentialStore))),\n  );\n}\n\nexport function revoke(input: {\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connection: Connection.Connection;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly method: ProviderAuth.OAuthMethod;\n}): Promise<void> {\n  return Effect.runPromise(\n    OAuthEffect.revoke({\n      client: input.client,\n      connection: input.connection,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      method: input.method,\n    }).pipe(Effect.provide(CredentialStore.layerFromAsync(input.credentialStore))),\n  );\n}\n\nfunction providerFailure(\n  providerId: string,\n  operation: string,\n  cause: unknown,\n): DnsProvider.Error | InvalidInputError {\n  return cause instanceof InvalidInputError || cause instanceof DnsProvider.Error\n    ? cause\n    : new DnsProvider.Error({\n        cause,\n        message: cause instanceof Error ? cause.message : \"Provider callback failed\",\n        operation,\n        providerId,\n      });\n}\n\nexport type Fetch = OAuthEffect.Fetch;\n","import { Effect, Layer } from \"effect\";\n\nimport type * as Connection from \"../auth/connection.ts\";\nimport * as ConnectionAuthorization from \"../plan/connection-authorization.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as ProvisioningEffect from \"../plan/plan.ts\";\nimport type * as DnsPlan from \"../plan/types.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport interface CreateInput extends ProvisioningEffect.CreateInput {\n  readonly provider: DnsProvider.AsyncInterface;\n}\n\nexport function create(input: CreateInput): Promise<DnsPlan.DnsPlan> {\n  const { provider, ...programInput } = input;\n  return Effect.runPromise(\n    ProvisioningEffect.create(programInput).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorize(\n  plan: DnsPlan.DnsPlan,\n  operationIds?: ReadonlyArray<string>,\n  options: { readonly allowPartial?: boolean } = {},\n): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ProvisioningEffect.authorize(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport function apply(input: {\n  readonly authorization: DnsPlan.PlanAuthorization;\n  readonly plan: DnsPlan.DnsPlan;\n  readonly provider: DnsProvider.AsyncInterface;\n}): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(\n    ProvisioningEffect.apply({ authorization: input.authorization, plan: input.plan }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorizeForConnection(input: {\n  readonly accountId: string;\n  readonly allowPartial?: boolean;\n  readonly connection: Connection.Connection;\n  readonly operationIds?: ReadonlyArray<string>;\n  readonly plan: DnsPlan.DnsPlan;\n}): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ConnectionAuthorization.authorize(input).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport const renderManualInstructions = ProvisioningEffect.renderManualInstructions;\n","import { Effect, Layer } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport { Value as Secret } from \"../auth/secret.ts\";\nimport * as TokenEffect from \"../auth/token.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\n\nexport function connect(input: {\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly grant: Connection.Grant;\n  readonly providerId: string;\n  readonly subjectId: string;\n  readonly token: Secret;\n  readonly validate: (token: Secret) => Promise<ProviderAuth.TokenValidation>;\n}): Promise<Connection.Connection> {\n  return Effect.runPromise(\n    TokenEffect.connect({\n      grant: input.grant,\n      providerId: input.providerId,\n      subjectId: input.subjectId,\n      token: input.token,\n      validate: (token) =>\n        Effect.tryPromise({\n          try: () => input.validate(token),\n          catch: (cause) =>\n            cause instanceof InvalidInputError || cause instanceof DnsProvider.Error\n              ? cause\n              : new DnsProvider.Error({\n                  cause,\n                  message: cause instanceof Error ? cause.message : \"Token validation failed\",\n                  operation: \"validateToken\",\n                  providerId: input.providerId,\n                }),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n          webCryptoLayer,\n        ),\n      ),\n    ),\n  );\n}\n","import { Effect, Layer } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as DnsResolver from \"../verification/resolver.ts\";\nimport * as VerificationEffect from \"../verification/verify.ts\";\n\nexport function record(input: {\n  readonly provider: DnsProvider.AsyncInterface;\n  readonly record: DnsRecord.DnsRecord;\n  readonly resolver: DnsResolver.AsyncInterface;\n  readonly zone: DomainName.DomainName;\n}): Promise<VerificationEffect.Result> {\n  return Effect.runPromise(\n    VerificationEffect.record({ record: input.record, zone: input.zone }).pipe(\n      Effect.provide(\n        Layer.merge(\n          DnsProvider.layerFromAsync(input.provider),\n          DnsResolver.layerFromAsync(input.resolver),\n        ),\n      ),\n    ),\n  );\n}\n","import * as CloudflareDnsOverHttps from \"../verification/cloudflare-doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = CloudflareDnsOverHttps.Options;\n\nexport function make(options: Options = {}): DnsResolver.AsyncInterface {\n  return CloudflareDnsOverHttps.toAsync(options);\n}\n","import * as DnsOverHttps from \"../verification/doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = DnsOverHttps.Options;\n\nexport function make(options: Options): DnsResolver.AsyncInterface {\n  return DnsOverHttps.toAsync(options);\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./promise/connection.ts\";\nexport * as ProviderAuth from \"./promise/provider-auth.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./promise/dns-record.ts\";\nexport * as DomainName from \"./promise/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsPlan from \"./promise/dns-plan.ts\";\nexport type * as DnsProvider from \"./promise/dns-provider.ts\";\nexport * as Cloudflare from \"./promise/cloudflare.ts\";\nexport * as Vercel from \"./promise/vercel.ts\";\nexport type * as DnsResolver from \"./promise/dns-resolver.ts\";\nexport * as OAuth from \"./promise/oauth.ts\";\nexport * as Provisioning from \"./promise/provisioning.ts\";\nexport type * as Stores from \"./promise/stores.ts\";\nexport * as TokenConnection from \"./promise/token.ts\";\nexport * as Verification from \"./promise/verification.ts\";\nexport * as CloudflareDnsOverHttps from \"./promise/cloudflare-doh.ts\";\nexport * as DnsOverHttps from \"./promise/doh.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAcA,SAAgBA,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAkB,KAAK,CAAC;AACnD;;;;;;;;ACHA,SAAgBC,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAoB,KAAK,CAAC;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGRA,SAAgB,OAAO,OAA0C;CAC/D,OAAO,OAAO,WAAWC,SAAe,KAAK,CAAC;AAChD;AAEA,SAAgB,cAAc,OAA+C;CAC3E,OAAO,OAAO,WAAWC,gBAAsB,KAAK,CAAC;AACvD;;;;;;;;;ACGA,SAAgB,MAAM,OAAgE;CACpF,MAAM,EAAE,YAAY,GAAG,iBAAiB;CACxC,OAAO,OAAO,WACZC,QAAkB,YAAY,CAAC,CAAC,KAC9B,OAAO,QAAQ,MAAM,MAAMC,iBAA+B,UAAU,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,SAAS,OASU;CACjC,OAAO,OAAO,WACZC,WAAqB;EACnB,aAAa,MAAM;EACnB,QAAQ,MAAM;EACd,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,YAAY,MAAM;EAClB,iBAAiB,QAAQ,gBACvB,OAAO,WAAW;GAChB,WAAW,MAAM,eAAe,QAAQ,WAAW;GACnD,QAAQ,UAAU,gBAAgB,MAAM,YAAY,kBAAkB,KAAK;EAC7E,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJD,iBAA+B,MAAM,UAAU,GAC/CE,iBAA+B,MAAM,eAAe,GACpDC,iBAA+B,MAAM,eAAe,GACpD,cACF,CACF,CACF,CACF;AACF;AAEA,SAAgB,QAAQ,OAMN;CAChB,OAAO,OAAO,WACZC,UAAoB;EAClB,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,QAAQ,MAAM;CAChB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQD,iBAA+B,MAAM,eAAe,CAAC,CAAC,CAC/E;AACF;AAEA,SAAgB,OAAO,OAML;CAChB,OAAO,OAAO,WACZE,SAAmB;EACjB,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,QAAQ,MAAM;CAChB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQF,iBAA+B,MAAM,eAAe,CAAC,CAAC,CAC/E;AACF;AAEA,SAAS,gBACP,YACA,WACA,OACuC;CACvC,OAAO,iBAAiBG,WAAqB,iBAAiBC,UAC1D,QACA,IAAIA,QAAkB;EACpB;EACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU;EAClD;EACA;CACF,CAAC;AACP;;;;;;;;;;AC7FA,SAAgB,OAAO,OAA8C;CACnE,MAAM,EAAE,UAAU,GAAG,iBAAiB;CACtC,OAAO,OAAO,WACZC,SAA0B,YAAY,CAAC,CAAC,KACtC,OAAO,QAAQ,MAAM,MAAMC,eAA2B,QAAQ,GAAG,cAAc,CAAC,CAClF,CACF;AACF;AAEA,SAAgB,UACd,MACA,cACA,UAA+C,CAAC,GACZ;CACpC,OAAO,OAAO,WACZC,YAA6B,MAAM,cAAc,OAAO,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC/F;AACF;AAEA,SAAgB,MAAM,OAIY;CAChC,OAAO,OAAO,WACZC,QAAyB;EAAE,eAAe,MAAM;EAAe,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACjF,OAAO,QAAQ,MAAM,MAAMF,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,uBAAuB,OAMA;CACrC,OAAO,OAAO,WACZG,YAAkC,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC9E;AACF;AAEA,MAAa,2BAA2BC;;;;AC5CxC,SAAgB,QAAQ,OAQW;CACjC,OAAO,OAAO,WACZC,UAAoB;EAClB,OAAO,MAAM;EACb,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,WAAW,UACT,OAAO,WAAW;GAChB,WAAW,MAAM,SAAS,KAAK;GAC/B,QAAQ,UACN,iBAAiBC,WAAqB,iBAAiBC,UACnD,QACA,IAAIA,QAAkB;IACpB;IACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU;IAClD,WAAW;IACX,YAAY,MAAM;GACpB,CAAC;EACT,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJC,iBAA+B,MAAM,eAAe,GACpDC,iBAA+B,MAAM,eAAe,GACpD,cACF,CACF,CACF,CACF;AACF;;;;AC1CA,SAAgB,OAAO,OAKgB;CACrC,OAAO,OAAO,WACZC,SAA0B;EAAE,QAAQ,MAAM;EAAQ,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACpE,OAAO,QACL,MAAM,MACJC,eAA2B,MAAM,QAAQ,GACzCC,iBAA2B,MAAM,QAAQ,CAC3C,CACF,CACF,CACF;AACF;;;;ACnBA,SAAgBC,OAAK,UAAmB,CAAC,GAA+B;CACtE,OAAOC,QAA+B,OAAO;AAC/C;;;;ACFA,SAAgB,KAAK,SAA8C;CACjE,OAAOC,UAAqB,OAAO;AACrC;;;;ACJA,MAAa,UAAUC"}
+{"version":3,"file":"index.mjs","names":["decode","Connection.decode","Lifecycle.updateGrant","ConnectionStore.layerFromAsync","Lifecycle.detach","Lifecycle.Error","ProviderAuthorizationStore.layerFromAsync","CredentialStore.layerFromAsync","decode","ProviderAuthorization.decode","decode","ProviderAuth.decode","DnsPlan.decode","DnsPlan.decodeReceipt","create","DeletionEffect.create","DnsProvider.layerFromAsync","authorize","DeletionEffect.authorize","apply","DeletionEffect.apply","OAuthEffect.begin","OAuthStateStore.layerFromAsync","OAuthEffect.complete","ProviderAuthorizationStore.layerFromAsync","ConnectionStore.layerFromAsync","CredentialStore.layerFromAsync","OAuthEffect.refresh","OAuthEffect.revoke","InvalidInputError","DnsProvider.Error","ProvisioningEffect.create","DnsProvider.layerFromAsync","ProvisioningEffect.authorize","ProvisioningEffect.apply","ConnectionAuthorization.authorize","ProvisioningEffect.renderManualInstructions","TokenEffect.connect","InvalidInputError","DnsProvider.Error","ConnectionStore.layerFromAsync","ProviderAuthorizationStore.layerFromAsync","CredentialStore.layerFromAsync","VerificationEffect.record","DnsProvider.layerFromAsync","DnsResolver.layerFromAsync","make","CloudflareDnsOverHttps.toAsync","DnsOverHttps.toAsync","packageJson.version"],"sources":["../src/promise/connection.ts","../src/promise/connection-lifecycle.ts","../src/promise/provider-authorization.ts","../src/promise/provider-auth.ts","../src/promise/dns-record.ts","../src/promise/domain-name.ts","../src/promise/dns-plan.ts","../src/promise/deletion.ts","../src/promise/oauth.ts","../src/promise/provisioning.ts","../src/promise/token.ts","../src/promise/verification.ts","../src/promise/cloudflare-doh.ts","../src/promise/doh.ts","../src/index.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\n\nexport { assertGrant, AuthorizationError, encode, Grant, Schema } from \"../auth/connection.ts\";\nexport type { Connection, OAuthContinuation, StoredCredential } from \"../auth/connection.ts\";\n\nexport function decode(input: unknown): Promise<Connection.Connection> {\n  return Effect.runPromise(Connection.decode(input));\n}\n","import { Effect, Layer } from \"effect\";\n\nimport type * as Connection from \"../auth/connection.ts\";\nimport type * as ProviderAuthorization from \"../auth/authorization.ts\";\nimport * as Lifecycle from \"../auth/connection-lifecycle.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\nimport * as ProviderAuthorizationStore from \"../stores/authorization.ts\";\n\nexport function updateGrant(input: {\n  readonly connection: Parameters<typeof Lifecycle.updateGrant>[0][\"connection\"];\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly grant: Parameters<typeof Lifecycle.updateGrant>[0][\"grant\"];\n}): Promise<Connection.Connection> {\n  return Effect.runPromise(\n    Lifecycle.updateGrant({ connection: input.connection, grant: input.grant }).pipe(\n      Effect.provide(ConnectionStore.layerFromAsync(input.connectionStore)),\n    ),\n  );\n}\n\nexport function detach(input: {\n  readonly authorizationStore: ProviderAuthorizationStore.AsyncInterface;\n  readonly connectionId: string;\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly revokeAuthorization: (\n    authorization: ProviderAuthorization.ProviderAuthorization,\n  ) => Promise<void>;\n}): Promise<Lifecycle.DetachResult> {\n  return Effect.runPromise(\n    Lifecycle.detach({\n      connectionId: input.connectionId,\n      revokeAuthorization: (authorization) =>\n        Effect.tryPromise({\n          try: () => input.revokeAuthorization(authorization),\n          catch: (cause) =>\n            new Lifecycle.Error({\n              message: cause instanceof globalThis.Error ? cause.message : String(cause),\n            }),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          ProviderAuthorizationStore.layerFromAsync(input.authorizationStore),\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n        ),\n      ),\n    ),\n  );\n}\n\nexport { Error } from \"../auth/connection-lifecycle.ts\";\nexport type { DetachResult } from \"../auth/connection-lifecycle.ts\";\n","import { Effect } from \"effect\";\n\nimport * as ProviderAuthorization from \"../auth/authorization.ts\";\n\nexport { Capability, encode, Schema } from \"../auth/authorization.ts\";\nexport type { ProviderAuthorization } from \"../auth/authorization.ts\";\n\nexport function decode(input: unknown): Promise<ProviderAuthorization.ProviderAuthorization> {\n  return Effect.runPromise(ProviderAuthorization.decode(input));\n}\n","import { Effect } from \"effect\";\n\nimport * as ProviderAuth from \"../auth/manifest.ts\";\n\nexport { Method, Schema } from \"../auth/manifest.ts\";\nexport type {\n  AsyncOAuthSubjectResolver as OAuthSubjectResolver,\n  Manifest,\n  OAuthClientConfiguration,\n  OAuthMethod,\n  TokenValidation,\n} from \"../auth/manifest.ts\";\n\nexport function decode(input: unknown): Promise<ProviderAuth.Manifest> {\n  return Effect.runPromise(ProviderAuth.decode(input));\n}\n","export {\n  A,\n  Aaaa,\n  Caa,\n  Cname,\n  data,\n  equals,\n  Mx,\n  Ns,\n  Opaque,\n  Observed,\n  parse,\n  RequirementMetadata,\n  Schema,\n  Srv,\n  Txt,\n  Type,\n} from \"../domain/dns-record.ts\";\nexport type { DnsRecord, Encoded } from \"../domain/dns-record.ts\";\n","export { parse, Schema } from \"../domain/domain-name.ts\";\nexport type { DomainName } from \"../domain/domain-name.ts\";\n","import { Effect } from \"effect\";\n\nimport * as DnsPlan from \"../plan/types.ts\";\n\nexport { Authorization, encode, encodeReceipt, Operation, Receipt, Schema } from \"../plan/types.ts\";\nexport type { ApplyReceipt, DnsPlan, PlanAuthorization } from \"../plan/types.ts\";\n\nexport function decode(input: unknown): Promise<DnsPlan.DnsPlan> {\n  return Effect.runPromise(DnsPlan.decode(input));\n}\n\nexport function decodeReceipt(input: unknown): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(DnsPlan.decodeReceipt(input));\n}\n","import { Effect, Layer } from \"effect\";\n\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DeletionEffect from \"../plan/deletion.ts\";\nimport type * as DnsPlan from \"../plan/types.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport function create(input: {\n  readonly plan: DnsPlan.DnsPlan;\n  readonly provider: DnsProvider.AsyncInterface;\n  readonly receipt: DnsPlan.ApplyReceipt;\n  readonly ttlMs?: number;\n}): Promise<DeletionEffect.Plan> {\n  return Effect.runPromise(\n    DeletionEffect.create({\n      plan: input.plan,\n      receipt: input.receipt,\n      ...(input.ttlMs === undefined ? {} : { ttlMs: input.ttlMs }),\n    }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorize(\n  plan: DeletionEffect.Plan,\n  operationIds?: ReadonlyArray<string>,\n): Promise<DeletionEffect.Authorization> {\n  return Effect.runPromise(\n    DeletionEffect.authorize(plan, operationIds).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport function apply(input: {\n  readonly authorization: DeletionEffect.Authorization;\n  readonly plan: DeletionEffect.Plan;\n  readonly priorReceipt?: DeletionEffect.Receipt;\n  readonly provider: DnsProvider.AsyncInterface;\n}): Promise<DeletionEffect.Receipt> {\n  return Effect.runPromise(\n    DeletionEffect.apply({\n      authorization: input.authorization,\n      plan: input.plan,\n      ...(input.priorReceipt === undefined ? {} : { priorReceipt: input.priorReceipt }),\n    }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport { Authorization, Error, Operation, PartialError, Plan, Receipt } from \"../plan/deletion.ts\";\nexport type {\n  ApplyError,\n  Authorization as DeletionAuthorization,\n  CreateError,\n  Operation as DeletionOperation,\n  Plan as DeletionPlan,\n  Receipt as DeletionReceipt,\n} from \"../plan/deletion.ts\";\n","import { Effect, Layer } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\nimport * as ProviderAuthorization from \"../auth/authorization.ts\";\nimport * as OAuthEffect from \"../auth/oauth.ts\";\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\nimport * as ProviderAuthorizationStore from \"../stores/authorization.ts\";\nimport * as OAuthStateStore from \"../stores/oauth-state.ts\";\n\nexport interface BeginInput extends OAuthEffect.BeginInput {\n  readonly stateStore: OAuthStateStore.AsyncInterface;\n}\n\nexport function begin(input: BeginInput): Promise<{ readonly authorizationUrl: URL }> {\n  const { stateStore, ...programInput } = input;\n  return Effect.runPromise(\n    OAuthEffect.begin(programInput).pipe(\n      Effect.provide(Layer.merge(OAuthStateStore.layerFromAsync(stateStore), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function complete(input: {\n  readonly callbackUrl: URL;\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly authorizationStore: ProviderAuthorizationStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly providerId: string;\n  readonly resolveSubject: ProviderAuth.AsyncOAuthSubjectResolver;\n  readonly stateStore: OAuthStateStore.AsyncInterface;\n}): Promise<{\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly connection: Connection.Connection;\n}> {\n  return Effect.runPromise(\n    OAuthEffect.complete({\n      callbackUrl: input.callbackUrl,\n      client: input.client,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      providerId: input.providerId,\n      resolveSubject: (tokens, accessToken) =>\n        Effect.tryPromise({\n          try: () => input.resolveSubject(tokens, accessToken),\n          catch: (cause) => providerFailure(input.providerId, \"resolveSubject\", cause),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          OAuthStateStore.layerFromAsync(input.stateStore),\n          ProviderAuthorizationStore.layerFromAsync(input.authorizationStore),\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n          webCryptoLayer,\n        ),\n      ),\n    ),\n  );\n}\n\nexport function refresh(input: {\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly method: ProviderAuth.OAuthMethod;\n}): Promise<void> {\n  return Effect.runPromise(\n    OAuthEffect.refresh({\n      client: input.client,\n      authorization: input.authorization,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      method: input.method,\n    }).pipe(Effect.provide(CredentialStore.layerFromAsync(input.credentialStore))),\n  );\n}\n\nexport function revoke(input: {\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly client: ProviderAuth.OAuthClientConfiguration;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly fetch?: OAuthEffect.Fetch;\n  readonly method: ProviderAuth.OAuthMethod;\n}): Promise<void> {\n  return Effect.runPromise(\n    OAuthEffect.revoke({\n      client: input.client,\n      authorization: input.authorization,\n      ...(input.fetch === undefined ? {} : { fetch: input.fetch }),\n      method: input.method,\n    }).pipe(Effect.provide(CredentialStore.layerFromAsync(input.credentialStore))),\n  );\n}\n\nfunction providerFailure(\n  providerId: string,\n  operation: string,\n  cause: unknown,\n): DnsProvider.Error | InvalidInputError {\n  return cause instanceof InvalidInputError || cause instanceof DnsProvider.Error\n    ? cause\n    : new DnsProvider.Error({\n        cause,\n        message: cause instanceof Error ? cause.message : \"Provider callback failed\",\n        operation,\n        providerId,\n      });\n}\n\nexport type Fetch = OAuthEffect.Fetch;\n","import { Effect, Layer } from \"effect\";\n\nimport type * as Connection from \"../auth/connection.ts\";\nimport type * as ProviderAuthorization from \"../auth/authorization.ts\";\nimport * as ConnectionAuthorization from \"../plan/connection-authorization.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as ProvisioningEffect from \"../plan/plan.ts\";\nimport type * as DnsPlan from \"../plan/types.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport interface CreateInput extends ProvisioningEffect.CreateInput {\n  readonly provider: DnsProvider.AsyncInterface;\n}\n\nexport function create(input: CreateInput): Promise<DnsPlan.DnsPlan> {\n  const { provider, ...programInput } = input;\n  return Effect.runPromise(\n    ProvisioningEffect.create(programInput).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorize(\n  plan: DnsPlan.DnsPlan,\n  operationIds?: ReadonlyArray<string>,\n  options: { readonly allowPartial?: boolean } = {},\n): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ProvisioningEffect.authorize(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport function apply(input: {\n  readonly authorization: DnsPlan.PlanAuthorization;\n  readonly plan: DnsPlan.DnsPlan;\n  readonly provider: DnsProvider.AsyncInterface;\n}): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(\n    ProvisioningEffect.apply({ authorization: input.authorization, plan: input.plan }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorizeForConnection(input: {\n  readonly allowPartial?: boolean;\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly connection: Connection.Connection;\n  readonly domain: string;\n  readonly operationIds?: ReadonlyArray<string>;\n  readonly plan: DnsPlan.DnsPlan;\n}): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ConnectionAuthorization.authorize(input).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport const renderManualInstructions = ProvisioningEffect.renderManualInstructions;\n","import { Effect, Layer } from \"effect\";\n\nimport * as Connection from \"../auth/connection.ts\";\nimport * as ProviderAuthorization from \"../auth/authorization.ts\";\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport { Value as Secret } from \"../auth/secret.ts\";\nimport * as TokenEffect from \"../auth/token.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ConnectionStore from \"../stores/connection.ts\";\nimport * as CredentialStore from \"../stores/credential.ts\";\nimport * as ProviderAuthorizationStore from \"../stores/authorization.ts\";\n\nexport function connect(input: {\n  readonly connectionStore: ConnectionStore.AsyncInterface;\n  readonly credentialStore: CredentialStore.AsyncInterface;\n  readonly authorizationStore: ProviderAuthorizationStore.AsyncInterface;\n  readonly grant: Connection.Grant;\n  readonly ownerId: string;\n  readonly providerId: string;\n  readonly subjectId: string;\n  readonly token: Secret;\n  readonly validate: (token: Secret) => Promise<ProviderAuth.TokenValidation>;\n}): Promise<{\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly connection: Connection.Connection;\n}> {\n  return Effect.runPromise(\n    TokenEffect.connect({\n      grant: input.grant,\n      ownerId: input.ownerId,\n      providerId: input.providerId,\n      subjectId: input.subjectId,\n      token: input.token,\n      validate: (token) =>\n        Effect.tryPromise({\n          try: () => input.validate(token),\n          catch: (cause) =>\n            cause instanceof InvalidInputError || cause instanceof DnsProvider.Error\n              ? cause\n              : new DnsProvider.Error({\n                  cause,\n                  message: cause instanceof Error ? cause.message : \"Token validation failed\",\n                  operation: \"validateToken\",\n                  providerId: input.providerId,\n                }),\n        }),\n    }).pipe(\n      Effect.provide(\n        Layer.mergeAll(\n          ConnectionStore.layerFromAsync(input.connectionStore),\n          ProviderAuthorizationStore.layerFromAsync(input.authorizationStore),\n          CredentialStore.layerFromAsync(input.credentialStore),\n          webCryptoLayer,\n        ),\n      ),\n    ),\n  );\n}\n","import { Effect, Layer } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as DnsResolver from \"../verification/resolver.ts\";\nimport * as VerificationEffect from \"../verification/verify.ts\";\n\nexport function record(input: {\n  readonly provider: DnsProvider.AsyncInterface;\n  readonly record: DnsRecord.DnsRecord;\n  readonly resolver: DnsResolver.AsyncInterface;\n  readonly zone: DomainName.DomainName;\n}): Promise<VerificationEffect.Result> {\n  return Effect.runPromise(\n    VerificationEffect.record({ record: input.record, zone: input.zone }).pipe(\n      Effect.provide(\n        Layer.merge(\n          DnsProvider.layerFromAsync(input.provider),\n          DnsResolver.layerFromAsync(input.resolver),\n        ),\n      ),\n    ),\n  );\n}\n","import * as CloudflareDnsOverHttps from \"../verification/cloudflare-doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = CloudflareDnsOverHttps.Options;\n\nexport function make(options: Options = {}): DnsResolver.AsyncInterface {\n  return CloudflareDnsOverHttps.toAsync(options);\n}\n","import * as DnsOverHttps from \"../verification/doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = DnsOverHttps.Options;\n\nexport function make(options: Options): DnsResolver.AsyncInterface {\n  return DnsOverHttps.toAsync(options);\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./promise/connection.ts\";\nexport * as ConnectionLifecycle from \"./promise/connection-lifecycle.ts\";\nexport * as ProviderAuthorization from \"./promise/provider-authorization.ts\";\nexport * as ProviderAuth from \"./promise/provider-auth.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./promise/dns-record.ts\";\nexport * as DomainName from \"./promise/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsPlan from \"./promise/dns-plan.ts\";\nexport * as Deletion from \"./promise/deletion.ts\";\nexport type * as DnsProvider from \"./promise/dns-provider.ts\";\nexport * as Cloudflare from \"./promise/cloudflare.ts\";\nexport * as Vercel from \"./promise/vercel.ts\";\nexport type * as DnsResolver from \"./promise/dns-resolver.ts\";\nexport * as OAuth from \"./promise/oauth.ts\";\nexport * as Provisioning from \"./promise/provisioning.ts\";\nexport type * as Stores from \"./promise/stores.ts\";\nexport * as TokenConnection from \"./promise/token.ts\";\nexport * as Verification from \"./promise/verification.ts\";\nexport * as CloudflareDnsOverHttps from \"./promise/cloudflare-doh.ts\";\nexport * as DnsOverHttps from \"./promise/doh.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;AAOA,SAAgBA,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAkB,KAAK,CAAC;AACnD;;;;;;;;ACAA,SAAgB,YAAY,OAIO;CACjC,OAAO,OAAO,WACZC,cAAsB;EAAE,YAAY,MAAM;EAAY,OAAO,MAAM;CAAM,CAAC,CAAC,CAAC,KAC1E,OAAO,QAAQC,iBAA+B,MAAM,eAAe,CAAC,CACtE,CACF;AACF;AAEA,SAAgB,OAAO,OAQa;CAClC,OAAO,OAAO,WACZC,SAAiB;EACf,cAAc,MAAM;EACpB,sBAAsB,kBACpB,OAAO,WAAW;GAChB,WAAW,MAAM,oBAAoB,aAAa;GAClD,QAAQ,UACN,IAAIC,QAAgB,EAClB,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC3E,CAAC;EACL,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJC,iBAA0C,MAAM,kBAAkB,GAClEH,iBAA+B,MAAM,eAAe,GACpDI,iBAA+B,MAAM,eAAe,CACtD,CACF,CACF,CACF;AACF;;;;;;;;;AC5CA,SAAgBC,SAAO,OAAsE;CAC3F,OAAO,OAAO,WAAWC,SAA6B,KAAK,CAAC;AAC9D;;;;;;;;ACIA,SAAgBC,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAoB,KAAK,CAAC;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGRA,SAAgB,OAAO,OAA0C;CAC/D,OAAO,OAAO,WAAWC,SAAe,KAAK,CAAC;AAChD;AAEA,SAAgB,cAAc,OAA+C;CAC3E,OAAO,OAAO,WAAWC,gBAAsB,KAAK,CAAC;AACvD;;;;;;;;;;;;;;ACNA,SAAgBC,SAAO,OAKU;CAC/B,OAAO,OAAO,WACZC,SAAsB;EACpB,MAAM,MAAM;EACZ,SAAS,MAAM;EACf,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;CAC5D,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,MAAM,MAAMC,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgBC,YACd,MACA,cACuC;CACvC,OAAO,OAAO,WACZC,YAAyB,MAAM,YAAY,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAClF;AACF;AAEA,SAAgBC,QAAM,OAKc;CAClC,OAAO,OAAO,WACZC,QAAqB;EACnB,eAAe,MAAM;EACrB,MAAM,MAAM;EACZ,GAAI,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;CACjF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,MAAM,MAAMJ,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;;;;;;;;;AC9BA,SAAgB,MAAM,OAAgE;CACpF,MAAM,EAAE,YAAY,GAAG,iBAAiB;CACxC,OAAO,OAAO,WACZK,QAAkB,YAAY,CAAC,CAAC,KAC9B,OAAO,QAAQ,MAAM,MAAMC,iBAA+B,UAAU,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,SAAS,OAatB;CACD,OAAO,OAAO,WACZC,WAAqB;EACnB,aAAa,MAAM;EACnB,QAAQ,MAAM;EACd,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,YAAY,MAAM;EAClB,iBAAiB,QAAQ,gBACvB,OAAO,WAAW;GAChB,WAAW,MAAM,eAAe,QAAQ,WAAW;GACnD,QAAQ,UAAU,gBAAgB,MAAM,YAAY,kBAAkB,KAAK;EAC7E,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJD,iBAA+B,MAAM,UAAU,GAC/CE,iBAA0C,MAAM,kBAAkB,GAClEC,iBAA+B,MAAM,eAAe,GACpDC,iBAA+B,MAAM,eAAe,GACpD,cACF,CACF,CACF,CACF;AACF;AAEA,SAAgB,QAAQ,OAMN;CAChB,OAAO,OAAO,WACZC,UAAoB;EAClB,QAAQ,MAAM;EACd,eAAe,MAAM;EACrB,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,QAAQ,MAAM;CAChB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQD,iBAA+B,MAAM,eAAe,CAAC,CAAC,CAC/E;AACF;AAEA,SAAgB,OAAO,OAML;CAChB,OAAO,OAAO,WACZE,SAAmB;EACjB,QAAQ,MAAM;EACd,eAAe,MAAM;EACrB,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,QAAQ,MAAM;CAChB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQF,iBAA+B,MAAM,eAAe,CAAC,CAAC,CAC/E;AACF;AAEA,SAAS,gBACP,YACA,WACA,OACuC;CACvC,OAAO,iBAAiBG,WAAqB,iBAAiBC,UAC1D,QACA,IAAIA,QAAkB;EACpB;EACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU;EAClD;EACA;CACF,CAAC;AACP;;;;;;;;;;ACnGA,SAAgB,OAAO,OAA8C;CACnE,MAAM,EAAE,UAAU,GAAG,iBAAiB;CACtC,OAAO,OAAO,WACZC,SAA0B,YAAY,CAAC,CAAC,KACtC,OAAO,QAAQ,MAAM,MAAMC,eAA2B,QAAQ,GAAG,cAAc,CAAC,CAClF,CACF;AACF;AAEA,SAAgB,UACd,MACA,cACA,UAA+C,CAAC,GACZ;CACpC,OAAO,OAAO,WACZC,YAA6B,MAAM,cAAc,OAAO,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC/F;AACF;AAEA,SAAgB,MAAM,OAIY;CAChC,OAAO,OAAO,WACZC,QAAyB;EAAE,eAAe,MAAM;EAAe,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACjF,OAAO,QAAQ,MAAM,MAAMF,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,uBAAuB,OAOA;CACrC,OAAO,OAAO,WACZG,YAAkC,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC9E;AACF;AAEA,MAAa,2BAA2BC;;;;AC5CxC,SAAgB,QAAQ,OAarB;CACD,OAAO,OAAO,WACZC,UAAoB;EAClB,OAAO,MAAM;EACb,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,WAAW,UACT,OAAO,WAAW;GAChB,WAAW,MAAM,SAAS,KAAK;GAC/B,QAAQ,UACN,iBAAiBC,WAAqB,iBAAiBC,UACnD,QACA,IAAIA,QAAkB;IACpB;IACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU;IAClD,WAAW;IACX,YAAY,MAAM;GACpB,CAAC;EACT,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,QACL,MAAM,SACJC,iBAA+B,MAAM,eAAe,GACpDC,iBAA0C,MAAM,kBAAkB,GAClEC,iBAA+B,MAAM,eAAe,GACpD,cACF,CACF,CACF,CACF;AACF;;;;ACnDA,SAAgB,OAAO,OAKgB;CACrC,OAAO,OAAO,WACZC,SAA0B;EAAE,QAAQ,MAAM;EAAQ,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACpE,OAAO,QACL,MAAM,MACJC,eAA2B,MAAM,QAAQ,GACzCC,iBAA2B,MAAM,QAAQ,CAC3C,CACF,CACF,CACF;AACF;;;;ACnBA,SAAgBC,OAAK,UAAmB,CAAC,GAA+B;CACtE,OAAOC,QAA+B,OAAO;AAC/C;;;;ACFA,SAAgB,KAAK,SAA8C;CACjE,OAAOC,UAAqB,OAAO;AACrC;;;;ACJA,MAAa,UAAUC"}

package/dist/{manifest-DjH3BVB9.d.mts → manifest-CP85ePFn.d.mts}

@@ -445,6 +445,8 @@ declare class Error extends Error_base {}
 interface Interface {
   readonly id: string;
   readonly createRecord: (zone: DomainName, record: DnsRecord) => Effect.Effect<CreateResult, Error>;
+  readonly deleteRecord: (zone: DomainName, providerRecordId: string) => Effect.Effect<void, Error>;
+  readonly getRecord: (zone: DomainName, providerRecordId: string) => Effect.Effect<Observed | null, Error>;
   readonly listRecords: (zone: DomainName) => Effect.Effect<ReadonlyArray<Observed>, Error>;
 }
 declare const Service_base: Context.ServiceClass<Service, "@domainkit/DnsProvider", Interface>;
@@ -453,6 +455,8 @@ declare class Service extends Service_base {}
 interface AsyncInterface {
   readonly id: string;
   readonly createRecord: (zone: DomainName, record: DnsRecord) => Promise<CreateResult>;
+  readonly deleteRecord: (zone: DomainName, providerRecordId: string) => Promise<void>;
+  readonly getRecord: (zone: DomainName, providerRecordId: string) => Promise<Observed | null>;
   readonly listRecords: (zone: DomainName) => Promise<ReadonlyArray<Observed>>;
 }
 declare const layerFromAsync: (provider: AsyncInterface) => Layer.Layer<Service>;
@@ -576,4 +580,4 @@ interface AsyncOAuthSubjectResolver {
 }
 //#endregion
 export { Schema$2 as A, domain_name_d_exports as B, DnsRecord as C, Observed as D, Ns as E, dns_record_d_exports as F, Error$1 as H, equals as I, parse as L, Txt as M, Type as N, Opaque as O, data as P, DomainName as R, Cname as S, Mx as T, invalid_input_d_exports as U, parse$1 as V, Service as _, OAuthClientConfiguration as a, Aaaa as b, Schema$1 as c, Value as d, secret_d_exports as f, Interface as g, Error as h, Method as i, Srv as j, RequirementMetadata as k, TokenValidation as l, CreateResult as m, IntegrationMethod as n, OAuthMethod as o, AsyncInterface as p, Manifest as r, OAuthSubjectResolver as s, AsyncOAuthSubjectResolver as t, manifest_d_exports as u, provider_d_exports as v, Encoded as w, Caa as x, A as y, Schema$3 as z };
-//# sourceMappingURL=manifest-DjH3BVB9.d.mts.map
+//# sourceMappingURL=manifest-CP85ePFn.d.mts.map

package/dist/{receipt-C7PjnibZ.mjs → receipt-CGSnfZQ6.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { y as fromCause } from "./resolver-D5nVrR10.mjs";
+import { C as fromCause } from "./resolver-tEXpKxmH.mjs";
 import { Context, Effect, Layer } from "effect";
 //#region src/stores/receipt.ts
 var receipt_exports = /* @__PURE__ */ __exportAll({
@@ -25,4 +25,4 @@ const layerFromAsync = (store) => Layer.succeed(Service, {
 //#endregion
 export { receipt_exports as n, toAsync as r, Service as t };
 
-//# sourceMappingURL=receipt-C7PjnibZ.mjs.map
+//# sourceMappingURL=receipt-CGSnfZQ6.mjs.map

package/dist/{receipt-C7PjnibZ.mjs.map → receipt-CGSnfZQ6.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"receipt-C7PjnibZ.mjs","names":[],"sources":["../src/stores/receipt.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport type { ApplyReceipt } from \"../plan/types.ts\";\nimport { type Error, fromCause } from \"./error.ts\";\n\nexport interface Interface {\n  readonly get: (planDigest: string) => Effect.Effect<ApplyReceipt | null, Error>;\n  readonly put: (receipt: ApplyReceipt) => Effect.Effect<void, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/ReceiptStore\") {}\n\nexport interface AsyncInterface {\n  readonly get: (planDigest: string) => Promise<ApplyReceipt | null>;\n  readonly put: (receipt: ApplyReceipt) => Promise<void>;\n}\n\nexport const toAsync = (store: Interface): AsyncInterface => ({\n  get: (planDigest) => Effect.runPromise(store.get(planDigest)),\n  put: (receipt) => Effect.runPromise(store.put(receipt)),\n});\n\nexport const layerFromAsync = (store: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    get: Effect.fn(\"ReceiptStore.get\")((planDigest) =>\n      Effect.tryPromise({\n        try: () => store.get(planDigest),\n        catch: (cause) => fromCause(\"receipt.get\", cause),\n      }),\n    ),\n    put: Effect.fn(\"ReceiptStore.put\")((receipt) =>\n      Effect.tryPromise({\n        try: () => store.put(receipt),\n        catch: (cause) => fromCause(\"receipt.put\", cause),\n      }),\n    ),\n  });\n"],"mappings":";;;;;;;;;AAUA,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAO/F,MAAa,WAAW,WAAsC;CAC5D,MAAM,eAAe,OAAO,WAAW,MAAM,IAAI,UAAU,CAAC;CAC5D,MAAM,YAAY,OAAO,WAAW,MAAM,IAAI,OAAO,CAAC;AACxD;AAEA,MAAa,kBAAkB,UAC7B,MAAM,QAAQ,SAAS;CACrB,KAAK,OAAO,GAAG,kBAAkB,CAAC,EAAE,eAClC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,UAAU;EAC/B,QAAQ,UAAU,UAAU,eAAe,KAAK;CAClD,CAAC,CACH;CACA,KAAK,OAAO,GAAG,kBAAkB,CAAC,EAAE,YAClC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,OAAO;EAC5B,QAAQ,UAAU,UAAU,eAAe,KAAK;CAClD,CAAC,CACH;AACF,CAAC"}
+{"version":3,"file":"receipt-CGSnfZQ6.mjs","names":[],"sources":["../src/stores/receipt.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport type { ApplyReceipt } from \"../plan/types.ts\";\nimport { type Error, fromCause } from \"./error.ts\";\n\nexport interface Interface {\n  readonly get: (planDigest: string) => Effect.Effect<ApplyReceipt | null, Error>;\n  readonly put: (receipt: ApplyReceipt) => Effect.Effect<void, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/ReceiptStore\") {}\n\nexport interface AsyncInterface {\n  readonly get: (planDigest: string) => Promise<ApplyReceipt | null>;\n  readonly put: (receipt: ApplyReceipt) => Promise<void>;\n}\n\nexport const toAsync = (store: Interface): AsyncInterface => ({\n  get: (planDigest) => Effect.runPromise(store.get(planDigest)),\n  put: (receipt) => Effect.runPromise(store.put(receipt)),\n});\n\nexport const layerFromAsync = (store: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    get: Effect.fn(\"ReceiptStore.get\")((planDigest) =>\n      Effect.tryPromise({\n        try: () => store.get(planDigest),\n        catch: (cause) => fromCause(\"receipt.get\", cause),\n      }),\n    ),\n    put: Effect.fn(\"ReceiptStore.put\")((receipt) =>\n      Effect.tryPromise({\n        try: () => store.put(receipt),\n        catch: (cause) => fromCause(\"receipt.put\", cause),\n      }),\n    ),\n  });\n"],"mappings":";;;;;;;;;AAUA,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAO/F,MAAa,WAAW,WAAsC;CAC5D,MAAM,eAAe,OAAO,WAAW,MAAM,IAAI,UAAU,CAAC;CAC5D,MAAM,YAAY,OAAO,WAAW,MAAM,IAAI,OAAO,CAAC;AACxD;AAEA,MAAa,kBAAkB,UAC7B,MAAM,QAAQ,SAAS;CACrB,KAAK,OAAO,GAAG,kBAAkB,CAAC,EAAE,eAClC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,UAAU;EAC/B,QAAQ,UAAU,UAAU,eAAe,KAAK;CAClD,CAAC,CACH;CACA,KAAK,OAAO,GAAG,kBAAkB,CAAC,EAAE,YAClC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,OAAO;EAC5B,QAAQ,UAAU,UAAU,eAAe,KAAK;CAClD,CAAC,CACH;AACF,CAAC"}

package/dist/{resolver-BjZwN2JE.d.mts → resolver-BHPsADzE.d.mts}

@@ -1,10 +1,69 @@
-import { H as Error$2, N as Type, R as DomainName, d as Value, o as OAuthMethod } from "./manifest-DjH3BVB9.mjs";
+import { H as Error$2, N as Type, R as DomainName, d as Value, o as OAuthMethod } from "./manifest-CP85ePFn.mjs";
 import { Context, Effect, Layer, Schema } from "effect";
-declare namespace connection_d_exports$1 {
-  export { AuthorizationError, Capability, Connection, Grant, OAuthContinuation, Schema$2 as Schema, StoredCredential, assertGrant, decode$1 as decode, encode$1 as encode, validate };
+declare namespace authorization_d_exports$1 {
+  export { Capability, ProviderAuthorization, Schema$3 as Schema, decode$2 as decode, encode$2 as encode, validate$1 as validate };
 }
 declare const Capability: Schema.Literals<readonly ["dns:read", "dns:write"]>;
 type Capability = typeof Capability.Type;
+/** A provider credential authorization shared by one or more owner connections. */
+declare const Schema$3: Schema.Struct<{
+  readonly accountId: Schema.String;
+  readonly capabilities: Schema.$Array<Schema.Literals<readonly ["dns:read", "dns:write"]>>;
+  readonly createdAt: Schema.DateFromString;
+  readonly expiresAt: Schema.NullOr<Schema.DateFromString>;
+  readonly id: Schema.String;
+  readonly kind: Schema.Literals<readonly ["oauth2", "token"]>;
+  readonly providerId: Schema.String;
+  readonly scopes: Schema.$Array<Schema.String>;
+  readonly subjectId: Schema.String;
+}>;
+interface ProviderAuthorization extends Schema.Schema.Type<typeof Schema$3> {}
+declare const decode$2: (input: unknown) => Effect.Effect<{
+  readonly accountId: string;
+  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly createdAt: Date;
+  readonly expiresAt: Date | null;
+  readonly id: string;
+  readonly kind: "oauth2" | "token";
+  readonly providerId: string;
+  readonly scopes: readonly string[];
+  readonly subjectId: string;
+}, Error$2, never>;
+declare const validate$1: (input: unknown) => Effect.Effect<{
+  readonly accountId: string;
+  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly createdAt: Date;
+  readonly expiresAt: Date | null;
+  readonly id: string;
+  readonly kind: "oauth2" | "token";
+  readonly providerId: string;
+  readonly scopes: readonly string[];
+  readonly subjectId: string;
+}, Error$2, never>;
+declare const encode$2: (input: {
+  readonly accountId: string;
+  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly createdAt: Date;
+  readonly expiresAt: Date | null;
+  readonly id: string;
+  readonly kind: "oauth2" | "token";
+  readonly providerId: string;
+  readonly scopes: readonly string[];
+  readonly subjectId: string;
+}, options?: import("effect/SchemaAST").ParseOptions) => {
+  readonly accountId: string;
+  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly createdAt: string;
+  readonly expiresAt: string | null;
+  readonly id: string;
+  readonly kind: "oauth2" | "token";
+  readonly providerId: string;
+  readonly scopes: readonly string[];
+  readonly subjectId: string;
+};
+declare namespace connection_d_exports$1 {
+  export { AuthorizationError, Connection, Grant, OAuthContinuation, Schema$2 as Schema, StoredCredential, assertGrant, decode$1 as decode, encode$1 as encode, validate };
+}
 declare const Grant: Schema.TaggedUnion<{
   readonly account: Schema.TaggedStruct<"account", {}>;
   readonly domains: Schema.TaggedStruct<"domains", {
@@ -12,11 +71,10 @@ declare const Grant: Schema.TaggedUnion<{
   }>;
 }>;
 type Grant = typeof Grant.Type;
+/** An owner-scoped grant bound to one provider authorization. */
 declare const Schema$2: Schema.Struct<{
-  readonly accountId: Schema.String;
-  readonly capabilities: Schema.$Array<Schema.Literals<readonly ["dns:read", "dns:write"]>>;
+  readonly authorizationId: Schema.String;
   readonly createdAt: Schema.DateFromString;
-  readonly expiresAt: Schema.NullOr<Schema.DateFromString>;
   readonly grant: Schema.TaggedUnion<{
     readonly account: Schema.TaggedStruct<"account", {}>;
     readonly domains: Schema.TaggedStruct<"domains", {
@@ -24,17 +82,12 @@ declare const Schema$2: Schema.Struct<{
     }>;
   }>;
   readonly id: Schema.String;
-  readonly kind: Schema.Literals<readonly ["oauth2", "token"]>;
-  readonly providerId: Schema.String;
-  readonly scopes: Schema.$Array<Schema.String>;
-  readonly subjectId: Schema.String;
+  readonly ownerId: Schema.String;
 }>;
 interface Connection extends Schema.Schema.Type<typeof Schema$2> {}
 declare const decode$1: (input: unknown) => Effect.Effect<{
-  readonly accountId: string;
-  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly authorizationId: string;
   readonly createdAt: Date;
-  readonly expiresAt: Date | null;
   readonly grant: {
     readonly _tag: "account";
   } | {
@@ -42,16 +95,11 @@ declare const decode$1: (input: unknown) => Effect.Effect<{
     readonly domains: readonly (string & import("effect/Brand").Brand<"DomainName">)[];
   };
   readonly id: string;
-  readonly kind: "oauth2" | "token";
-  readonly providerId: string;
-  readonly scopes: readonly string[];
-  readonly subjectId: string;
+  readonly ownerId: string;
 }, Error$2, never>;
 declare const validate: (input: unknown) => Effect.Effect<{
-  readonly accountId: string;
-  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly authorizationId: string;
   readonly createdAt: Date;
-  readonly expiresAt: Date | null;
   readonly grant: {
     readonly _tag: "account";
   } | {
@@ -59,16 +107,11 @@ declare const validate: (input: unknown) => Effect.Effect<{
     readonly domains: readonly (string & import("effect/Brand").Brand<"DomainName">)[];
   };
   readonly id: string;
-  readonly kind: "oauth2" | "token";
-  readonly providerId: string;
-  readonly scopes: readonly string[];
-  readonly subjectId: string;
+  readonly ownerId: string;
 }, Error$2, never>;
 declare const encode$1: (input: {
-  readonly accountId: string;
-  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly authorizationId: string;
   readonly createdAt: Date;
-  readonly expiresAt: Date | null;
   readonly grant: {
     readonly _tag: "account";
   } | {
@@ -76,15 +119,10 @@ declare const encode$1: (input: {
     readonly domains: readonly (string & import("effect/Brand").Brand<"DomainName">)[];
   };
   readonly id: string;
-  readonly kind: "oauth2" | "token";
-  readonly providerId: string;
-  readonly scopes: readonly string[];
-  readonly subjectId: string;
+  readonly ownerId: string;
 }, options?: import("effect/SchemaAST").ParseOptions) => {
-  readonly accountId: string;
-  readonly capabilities: readonly ("dns:read" | "dns:write")[];
+  readonly authorizationId: string;
   readonly createdAt: string;
-  readonly expiresAt: string | null;
   readonly grant: {
     readonly _tag: "account";
   } | {
@@ -92,10 +130,7 @@ declare const encode$1: (input: {
     readonly domains: readonly string[];
   };
   readonly id: string;
-  readonly kind: "oauth2" | "token";
-  readonly providerId: string;
-  readonly scopes: readonly string[];
-  readonly subjectId: string;
+  readonly ownerId: string;
 };
 interface OAuthContinuation {
   readonly clientId: string;
@@ -103,6 +138,7 @@ interface OAuthContinuation {
   readonly expiresAt: Date;
   readonly grant: Grant;
   readonly method: OAuthMethod;
+  readonly ownerId: string;
   readonly redirectUri: string;
   readonly stateHash: string;
   readonly subjectId: string;
@@ -116,8 +152,7 @@ declare const AuthorizationError_base: Schema.Class<AuthorizationError, Schema.T
   readonly message: Schema.String;
 }>, import("effect/Cause").YieldableError>;
 declare class AuthorizationError extends AuthorizationError_base {}
-declare function assertGrant(connection: Connection, request: {
-  readonly accountId: string;
+declare function assertGrant(connection: Connection, authorization: ProviderAuthorization, request: {
   readonly capability: Capability;
   readonly domain: string;
   readonly now?: Date;
@@ -134,34 +169,59 @@ declare const Error_base$1: Schema.Class<Error$1, Schema.TaggedStruct<"StorageEr
 declare class Error$1 extends Error_base$1 {}
 declare function fromCause(operation: string, cause: unknown): Error$1;
 declare namespace connection_d_exports {
-  export { AsyncInterface$4 as AsyncInterface, Interface$4 as Interface, Service$4 as Service, layerFromAsync$4 as layerFromAsync, toAsync$4 as toAsync };
+  export { AsyncInterface$5 as AsyncInterface, Interface$5 as Interface, Service$5 as Service, layerFromAsync$5 as layerFromAsync, toAsync$5 as toAsync };
 }
-interface Interface$4 {
+interface Interface$5 {
+  readonly delete: (connectionId: string) => Effect.Effect<void, Error$1>;
+  readonly find: (ownerId: string, authorizationId: string) => Effect.Effect<Connection | null, Error$1>;
   readonly get: (connectionId: string) => Effect.Effect<Connection | null, Error$1>;
+  readonly listByAuthorizationId: (authorizationId: string) => Effect.Effect<ReadonlyArray<Connection>, Error$1>;
   readonly put: (connection: Connection) => Effect.Effect<void, Error$1>;
 }
-declare const Service_base$4: Context.ServiceClass<Service$4, "@domainkit/ConnectionStore", Interface$4>;
-declare class Service$4 extends Service_base$4 {}
-interface AsyncInterface$4 {
+declare const Service_base$5: Context.ServiceClass<Service$5, "@domainkit/ConnectionStore", Interface$5>;
+declare class Service$5 extends Service_base$5 {}
+interface AsyncInterface$5 {
+  readonly delete: (connectionId: string) => Promise<void>;
+  readonly find: (ownerId: string, authorizationId: string) => Promise<Connection | null>;
   readonly get: (connectionId: string) => Promise<Connection | null>;
+  readonly listByAuthorizationId: (authorizationId: string) => Promise<ReadonlyArray<Connection>>;
   readonly put: (connection: Connection) => Promise<void>;
 }
+declare const toAsync$5: (store: Interface$5) => AsyncInterface$5;
+declare const layerFromAsync$5: (store: AsyncInterface$5) => Layer.Layer<Service$5>;
+declare namespace credential_d_exports {
+  export { AsyncInterface$4 as AsyncInterface, Interface$4 as Interface, Service$4 as Service, layerFromAsync$4 as layerFromAsync, toAsync$4 as toAsync };
+}
+interface Interface$4 {
+  readonly delete: (authorizationId: string) => Effect.Effect<void, Error$1>;
+  readonly get: (authorizationId: string) => Effect.Effect<StoredCredential | null, Error$1>;
+  readonly put: (authorizationId: string, credential: StoredCredential) => Effect.Effect<void, Error$1>;
+}
+declare const Service_base$4: Context.ServiceClass<Service$4, "@domainkit/CredentialStore", Interface$4>;
+declare class Service$4 extends Service_base$4 {}
+interface AsyncInterface$4 {
+  readonly delete: (authorizationId: string) => Promise<void>;
+  readonly get: (authorizationId: string) => Promise<StoredCredential | null>;
+  readonly put: (authorizationId: string, credential: StoredCredential) => Promise<void>;
+}
 declare const toAsync$4: (store: Interface$4) => AsyncInterface$4;
 declare const layerFromAsync$4: (store: AsyncInterface$4) => Layer.Layer<Service$4>;
-declare namespace credential_d_exports {
+declare namespace authorization_d_exports {
   export { AsyncInterface$3 as AsyncInterface, Interface$3 as Interface, Service$3 as Service, layerFromAsync$3 as layerFromAsync, toAsync$3 as toAsync };
 }
 interface Interface$3 {
-  readonly delete: (connectionId: string) => Effect.Effect<void, Error$1>;
-  readonly get: (connectionId: string) => Effect.Effect<StoredCredential | null, Error$1>;
-  readonly put: (connectionId: string, credential: StoredCredential) => Effect.Effect<void, Error$1>;
+  readonly delete: (authorizationId: string) => Effect.Effect<void, Error$1>;
+  readonly findByProviderAccount: (providerId: string, accountId: string) => Effect.Effect<ProviderAuthorization | null, Error$1>;
+  readonly get: (authorizationId: string) => Effect.Effect<ProviderAuthorization | null, Error$1>;
+  readonly put: (authorization: ProviderAuthorization) => Effect.Effect<void, Error$1>;
 }
-declare const Service_base$3: Context.ServiceClass<Service$3, "@domainkit/CredentialStore", Interface$3>;
+declare const Service_base$3: Context.ServiceClass<Service$3, "@domainkit/ProviderAuthorizationStore", Interface$3>;
 declare class Service$3 extends Service_base$3 {}
 interface AsyncInterface$3 {
-  readonly delete: (connectionId: string) => Promise<void>;
-  readonly get: (connectionId: string) => Promise<StoredCredential | null>;
-  readonly put: (connectionId: string, credential: StoredCredential) => Promise<void>;
+  readonly delete: (authorizationId: string) => Promise<void>;
+  readonly findByProviderAccount: (providerId: string, accountId: string) => Promise<ProviderAuthorization | null>;
+  readonly get: (authorizationId: string) => Promise<ProviderAuthorization | null>;
+  readonly put: (authorization: ProviderAuthorization) => Promise<void>;
 }
 declare const toAsync$3: (store: Interface$3) => AsyncInterface$3;
 declare const layerFromAsync$3: (store: AsyncInterface$3) => Layer.Layer<Service$3>;
@@ -2323,5 +2383,5 @@ interface AsyncInterface {
 declare const layerFromAsync: (resolver: AsyncInterface) => Layer.Layer<Service>;
 declare const toAsync: (resolver: Interface) => AsyncInterface;
 //#endregion
-export { Service$3 as A, Connection as B, types_d_exports as C, oauth_state_d_exports as D, Service$2 as E, connection_d_exports as F, assertGrant as G, OAuthContinuation as H, Error$1 as I, connection_d_exports$1 as K, error_d_exports as L, AsyncInterface$4 as M, Interface$4 as N, AsyncInterface$3 as O, Service$4 as P, AuthorizationError as R, encodeReceipt as S, Interface$2 as T, Schema$2 as U, Grant as V, StoredCredential as W, Operation as _, Interface as a, Schema$1 as b, Service as c, Interface$1 as d, Service$1 as f, DnsPlan as g, Authorization as h, Error as i, credential_d_exports as j, Interface$3 as k, resolver_d_exports as l, ApplyReceipt as m, AsyncInterface as n, Query as o, receipt_d_exports as p, encode$1 as q, AsyncResolution as r, Resolution as s, Answer as t, AsyncInterface$1 as u, PlanAuthorization as v, AsyncInterface$2 as w, encode as x, Receipt as y, Capability as z };
-//# sourceMappingURL=resolver-BjZwN2JE.d.mts.map
+export { Schema$3 as $, Service$3 as A, Error$1 as B, types_d_exports as C, oauth_state_d_exports as D, Service$2 as E, credential_d_exports as F, OAuthContinuation as G, AuthorizationError as H, AsyncInterface$5 as I, assertGrant as J, Schema$2 as K, Interface$5 as L, AsyncInterface$4 as M, Interface$4 as N, AsyncInterface$3 as O, Service$4 as P, ProviderAuthorization as Q, Service$5 as R, encodeReceipt as S, Interface$2 as T, Connection as U, error_d_exports as V, Grant as W, encode$1 as X, connection_d_exports$1 as Y, Capability as Z, Operation as _, Interface as a, Schema$1 as b, Service as c, Interface$1 as d, authorization_d_exports$1 as et, Service$1 as f, DnsPlan as g, Authorization as h, Error as i, authorization_d_exports as j, Interface$3 as k, resolver_d_exports as l, ApplyReceipt as m, AsyncInterface as n, Query as o, receipt_d_exports as p, StoredCredential as q, AsyncResolution as r, Resolution as s, Answer as t, encode$2 as tt, AsyncInterface$1 as u, PlanAuthorization as v, AsyncInterface$2 as w, encode as x, Receipt as y, connection_d_exports as z };
+//# sourceMappingURL=resolver-BHPsADzE.d.mts.map

package/dist/{resolver-D5nVrR10.mjs → resolver-tEXpKxmH.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { p as Type, w as Schema$1 } from "./dns-record-Dzo4flM5.mjs";
+import { p as Type, w as Schema$1 } from "./dns-record-C_KwGPLf.mjs";
 import { Context, Effect, Layer, Schema } from "effect";
 //#region src/stores/error.ts
 var error_exports = /* @__PURE__ */ __exportAll({
@@ -21,20 +21,35 @@ function fromCause(operation, cause) {
 //#endregion
 //#region src/stores/connection.ts
 var connection_exports = /* @__PURE__ */ __exportAll({
-	Service: () => Service$3,
-	layerFromAsync: () => layerFromAsync$3,
-	toAsync: () => toAsync$3
+	Service: () => Service$4,
+	layerFromAsync: () => layerFromAsync$4,
+	toAsync: () => toAsync$4
 });
-var Service$3 = class extends Context.Service()("@domainkit/ConnectionStore") {};
-const toAsync$3 = (store) => ({
+var Service$4 = class extends Context.Service()("@domainkit/ConnectionStore") {};
+const toAsync$4 = (store) => ({
+	delete: (connectionId) => Effect.runPromise(store.delete(connectionId)),
+	find: (ownerId, authorizationId) => Effect.runPromise(store.find(ownerId, authorizationId)),
 	get: (connectionId) => Effect.runPromise(store.get(connectionId)),
+	listByAuthorizationId: (authorizationId) => Effect.runPromise(store.listByAuthorizationId(authorizationId)),
 	put: (connection) => Effect.runPromise(store.put(connection))
 });
-const layerFromAsync$3 = (store) => Layer.succeed(Service$3, {
+const layerFromAsync$4 = (store) => Layer.succeed(Service$4, {
+	delete: Effect.fn("ConnectionStore.delete")((connectionId) => Effect.tryPromise({
+		try: () => store.delete(connectionId),
+		catch: (cause) => fromCause("connection.delete", cause)
+	})),
+	find: Effect.fn("ConnectionStore.find")((ownerId, authorizationId) => Effect.tryPromise({
+		try: () => store.find(ownerId, authorizationId),
+		catch: (cause) => fromCause("connection.find", cause)
+	})),
 	get: Effect.fn("ConnectionStore.get")((connectionId) => Effect.tryPromise({
 		try: () => store.get(connectionId),
 		catch: (cause) => fromCause("connection.get", cause)
 	})),
+	listByAuthorizationId: Effect.fn("ConnectionStore.listByAuthorizationId")((authorizationId) => Effect.tryPromise({
+		try: () => store.listByAuthorizationId(authorizationId),
+		catch: (cause) => fromCause("connection.listByAuthorizationId", cause)
+	})),
 	put: Effect.fn("ConnectionStore.put")((connection) => Effect.tryPromise({
 		try: () => store.put(connection),
 		catch: (cause) => fromCause("connection.put", cause)
@@ -43,28 +58,60 @@ const layerFromAsync$3 = (store) => Layer.succeed(Service$3, {
 //#endregion
 //#region src/stores/credential.ts
 var credential_exports = /* @__PURE__ */ __exportAll({
+	Service: () => Service$3,
+	layerFromAsync: () => layerFromAsync$3,
+	toAsync: () => toAsync$3
+});
+var Service$3 = class extends Context.Service()("@domainkit/CredentialStore") {};
+const toAsync$3 = (store) => ({
+	delete: (authorizationId) => Effect.runPromise(store.delete(authorizationId)),
+	get: (authorizationId) => Effect.runPromise(store.get(authorizationId)),
+	put: (authorizationId, credential) => Effect.runPromise(store.put(authorizationId, credential))
+});
+const layerFromAsync$3 = (store) => Layer.succeed(Service$3, {
+	delete: Effect.fn("CredentialStore.delete")((authorizationId) => Effect.tryPromise({
+		try: () => store.delete(authorizationId),
+		catch: (cause) => fromCause("credential.delete", cause)
+	})),
+	get: Effect.fn("CredentialStore.get")((authorizationId) => Effect.tryPromise({
+		try: () => store.get(authorizationId),
+		catch: (cause) => fromCause("credential.get", cause)
+	})),
+	put: Effect.fn("CredentialStore.put")((authorizationId, credential) => Effect.tryPromise({
+		try: () => store.put(authorizationId, credential),
+		catch: (cause) => fromCause("credential.put", cause)
+	}))
+});
+//#endregion
+//#region src/stores/authorization.ts
+var authorization_exports = /* @__PURE__ */ __exportAll({
 	Service: () => Service$2,
 	layerFromAsync: () => layerFromAsync$2,
 	toAsync: () => toAsync$2
 });
-var Service$2 = class extends Context.Service()("@domainkit/CredentialStore") {};
+var Service$2 = class extends Context.Service()("@domainkit/ProviderAuthorizationStore") {};
 const toAsync$2 = (store) => ({
-	delete: (connectionId) => Effect.runPromise(store.delete(connectionId)),
-	get: (connectionId) => Effect.runPromise(store.get(connectionId)),
-	put: (connectionId, credential) => Effect.runPromise(store.put(connectionId, credential))
+	delete: (authorizationId) => Effect.runPromise(store.delete(authorizationId)),
+	findByProviderAccount: (providerId, accountId) => Effect.runPromise(store.findByProviderAccount(providerId, accountId)),
+	get: (authorizationId) => Effect.runPromise(store.get(authorizationId)),
+	put: (authorization) => Effect.runPromise(store.put(authorization))
 });
 const layerFromAsync$2 = (store) => Layer.succeed(Service$2, {
-	delete: Effect.fn("CredentialStore.delete")((connectionId) => Effect.tryPromise({
-		try: () => store.delete(connectionId),
-		catch: (cause) => fromCause("credential.delete", cause)
+	delete: Effect.fn("ProviderAuthorizationStore.delete")((authorizationId) => Effect.tryPromise({
+		try: () => store.delete(authorizationId),
+		catch: (cause) => fromCause("providerAuthorization.delete", cause)
 	})),
-	get: Effect.fn("CredentialStore.get")((connectionId) => Effect.tryPromise({
-		try: () => store.get(connectionId),
-		catch: (cause) => fromCause("credential.get", cause)
+	findByProviderAccount: Effect.fn("ProviderAuthorizationStore.findByProviderAccount")((providerId, accountId) => Effect.tryPromise({
+		try: () => store.findByProviderAccount(providerId, accountId),
+		catch: (cause) => fromCause("providerAuthorization.findByProviderAccount", cause)
 	})),
-	put: Effect.fn("CredentialStore.put")((connectionId, credential) => Effect.tryPromise({
-		try: () => store.put(connectionId, credential),
-		catch: (cause) => fromCause("credential.put", cause)
+	get: Effect.fn("ProviderAuthorizationStore.get")((authorizationId) => Effect.tryPromise({
+		try: () => store.get(authorizationId),
+		catch: (cause) => fromCause("providerAuthorization.get", cause)
+	})),
+	put: Effect.fn("ProviderAuthorizationStore.put")((authorization) => Effect.tryPromise({
+		try: () => store.put(authorization),
+		catch: (cause) => fromCause("providerAuthorization.put", cause)
 	}))
 });
 //#endregion
@@ -148,6 +195,6 @@ const toAsync = (resolver) => ({ resolve: (query) => Effect.runPromise(resolver.
 	onSuccess: (resolution) => resolution
 }))) });
 //#endregion
-export { toAsync$3 as _, toAsync as a, oauth_state_exports as c, credential_exports as d, layerFromAsync$2 as f, layerFromAsync$3 as g, connection_exports as h, resolver_exports as i, toAsync$1 as l, Service$3 as m, Service as n, Service$1 as o, toAsync$2 as p, layerFromAsync as r, layerFromAsync$1 as s, Error as t, Service$2 as u, error_exports as v, fromCause as y };
+export { fromCause as C, error_exports as S, toAsync$3 as _, toAsync as a, layerFromAsync$4 as b, oauth_state_exports as c, authorization_exports as d, layerFromAsync$2 as f, layerFromAsync$3 as g, credential_exports as h, resolver_exports as i, toAsync$1 as l, Service$3 as m, Service as n, Service$1 as o, toAsync$2 as p, layerFromAsync as r, layerFromAsync$1 as s, Error as t, Service$2 as u, Service$4 as v, toAsync$4 as x, connection_exports as y };
 
-//# sourceMappingURL=resolver-D5nVrR10.mjs.map
+//# sourceMappingURL=resolver-tEXpKxmH.mjs.map

package/dist/resolver-tEXpKxmH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-tEXpKxmH.mjs","names":["Error","Service","toAsync","layerFromAsync","Service","toAsync","layerFromAsync","Service","toAsync","layerFromAsync","Service","toAsync","layerFromAsync","DomainName.Schema","DnsRecord.Type"],"sources":["../src/stores/error.ts","../src/stores/connection.ts","../src/stores/credential.ts","../src/stores/authorization.ts","../src/stores/oauth-state.ts","../src/verification/resolver.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\nexport class Error extends Schema.TaggedError<Error>()(\"StorageError\", {\n  cause: Schema.optionalKey(Schema.Unknown),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\nexport function fromCause(operation: string, cause: unknown): Error {\n  return cause instanceof Error\n    ? cause\n    : new Error({\n        cause,\n        message: cause instanceof globalThis.Error ? cause.message : String(cause),\n        operation,\n      });\n}\n","import { Context, Effect, Layer } from \"effect\";\n\nimport type { Connection } from \"../auth/connection.ts\";\nimport { type Error, fromCause } from \"./error.ts\";\n\nexport interface Interface {\n  readonly delete: (connectionId: string) => Effect.Effect<void, Error>;\n  readonly find: (\n    ownerId: string,\n    authorizationId: string,\n  ) => Effect.Effect<Connection | null, Error>;\n  readonly get: (connectionId: string) => Effect.Effect<Connection | null, Error>;\n  readonly listByAuthorizationId: (\n    authorizationId: string,\n  ) => Effect.Effect<ReadonlyArray<Connection>, Error>;\n  readonly put: (connection: Connection) => Effect.Effect<void, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/ConnectionStore\") {}\n\nexport interface AsyncInterface {\n  readonly delete: (connectionId: string) => Promise<void>;\n  readonly find: (ownerId: string, authorizationId: string) => Promise<Connection | null>;\n  readonly get: (connectionId: string) => Promise<Connection | null>;\n  readonly listByAuthorizationId: (authorizationId: string) => Promise<ReadonlyArray<Connection>>;\n  readonly put: (connection: Connection) => Promise<void>;\n}\n\nexport const toAsync = (store: Interface): AsyncInterface => ({\n  delete: (connectionId) => Effect.runPromise(store.delete(connectionId)),\n  find: (ownerId, authorizationId) => Effect.runPromise(store.find(ownerId, authorizationId)),\n  get: (connectionId) => Effect.runPromise(store.get(connectionId)),\n  listByAuthorizationId: (authorizationId) =>\n    Effect.runPromise(store.listByAuthorizationId(authorizationId)),\n  put: (connection) => Effect.runPromise(store.put(connection)),\n});\n\nexport const layerFromAsync = (store: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    delete: Effect.fn(\"ConnectionStore.delete\")((connectionId) =>\n      Effect.tryPromise({\n        try: () => store.delete(connectionId),\n        catch: (cause) => fromCause(\"connection.delete\", cause),\n      }),\n    ),\n    find: Effect.fn(\"ConnectionStore.find\")((ownerId, authorizationId) =>\n      Effect.tryPromise({\n        try: () => store.find(ownerId, authorizationId),\n        catch: (cause) => fromCause(\"connection.find\", cause),\n      }),\n    ),\n    get: Effect.fn(\"ConnectionStore.get\")((connectionId) =>\n      Effect.tryPromise({\n        try: () => store.get(connectionId),\n        catch: (cause) => fromCause(\"connection.get\", cause),\n      }),\n    ),\n    listByAuthorizationId: Effect.fn(\"ConnectionStore.listByAuthorizationId\")((authorizationId) =>\n      Effect.tryPromise({\n        try: () => store.listByAuthorizationId(authorizationId),\n        catch: (cause) => fromCause(\"connection.listByAuthorizationId\", cause),\n      }),\n    ),\n    put: Effect.fn(\"ConnectionStore.put\")((connection) =>\n      Effect.tryPromise({\n        try: () => store.put(connection),\n        catch: (cause) => fromCause(\"connection.put\", cause),\n      }),\n    ),\n  });\n","import { Context, Effect, Layer } from \"effect\";\n\nimport type { StoredCredential } from \"../auth/connection.ts\";\nimport { type Error, fromCause } from \"./error.ts\";\n\nexport interface Interface {\n  readonly delete: (authorizationId: string) => Effect.Effect<void, Error>;\n  readonly get: (authorizationId: string) => Effect.Effect<StoredCredential | null, Error>;\n  readonly put: (\n    authorizationId: string,\n    credential: StoredCredential,\n  ) => Effect.Effect<void, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/CredentialStore\") {}\n\nexport interface AsyncInterface {\n  readonly delete: (authorizationId: string) => Promise<void>;\n  readonly get: (authorizationId: string) => Promise<StoredCredential | null>;\n  readonly put: (authorizationId: string, credential: StoredCredential) => Promise<void>;\n}\n\nexport const toAsync = (store: Interface): AsyncInterface => ({\n  delete: (authorizationId) => Effect.runPromise(store.delete(authorizationId)),\n  get: (authorizationId) => Effect.runPromise(store.get(authorizationId)),\n  put: (authorizationId, credential) => Effect.runPromise(store.put(authorizationId, credential)),\n});\n\nexport const layerFromAsync = (store: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    delete: Effect.fn(\"CredentialStore.delete\")((authorizationId) =>\n      Effect.tryPromise({\n        try: () => store.delete(authorizationId),\n        catch: (cause) => fromCause(\"credential.delete\", cause),\n      }),\n    ),\n    get: Effect.fn(\"CredentialStore.get\")((authorizationId) =>\n      Effect.tryPromise({\n        try: () => store.get(authorizationId),\n        catch: (cause) => fromCause(\"credential.get\", cause),\n      }),\n    ),\n    put: Effect.fn(\"CredentialStore.put\")((authorizationId, credential) =>\n      Effect.tryPromise({\n        try: () => store.put(authorizationId, credential),\n        catch: (cause) => fromCause(\"credential.put\", cause),\n      }),\n    ),\n  });\n","import { Context, Effect, Layer } from \"effect\";\n\nimport type { ProviderAuthorization } from \"../auth/authorization.ts\";\nimport { type Error, fromCause } from \"./error.ts\";\n\nexport interface Interface {\n  readonly delete: (authorizationId: string) => Effect.Effect<void, Error>;\n  readonly findByProviderAccount: (\n    providerId: string,\n    accountId: string,\n  ) => Effect.Effect<ProviderAuthorization | null, Error>;\n  readonly get: (authorizationId: string) => Effect.Effect<ProviderAuthorization | null, Error>;\n  readonly put: (authorization: ProviderAuthorization) => Effect.Effect<void, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\n  \"@domainkit/ProviderAuthorizationStore\",\n) {}\n\nexport interface AsyncInterface {\n  readonly delete: (authorizationId: string) => Promise<void>;\n  readonly findByProviderAccount: (\n    providerId: string,\n    accountId: string,\n  ) => Promise<ProviderAuthorization | null>;\n  readonly get: (authorizationId: string) => Promise<ProviderAuthorization | null>;\n  readonly put: (authorization: ProviderAuthorization) => Promise<void>;\n}\n\nexport const toAsync = (store: Interface): AsyncInterface => ({\n  delete: (authorizationId) => Effect.runPromise(store.delete(authorizationId)),\n  findByProviderAccount: (providerId, accountId) =>\n    Effect.runPromise(store.findByProviderAccount(providerId, accountId)),\n  get: (authorizationId) => Effect.runPromise(store.get(authorizationId)),\n  put: (authorization) => Effect.runPromise(store.put(authorization)),\n});\n\nexport const layerFromAsync = (store: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    delete: Effect.fn(\"ProviderAuthorizationStore.delete\")((authorizationId) =>\n      Effect.tryPromise({\n        try: () => store.delete(authorizationId),\n        catch: (cause) => fromCause(\"providerAuthorization.delete\", cause),\n      }),\n    ),\n    findByProviderAccount: Effect.fn(\"ProviderAuthorizationStore.findByProviderAccount\")(\n      (providerId, accountId) =>\n        Effect.tryPromise({\n          try: () => store.findByProviderAccount(providerId, accountId),\n          catch: (cause) => fromCause(\"providerAuthorization.findByProviderAccount\", cause),\n        }),\n    ),\n    get: Effect.fn(\"ProviderAuthorizationStore.get\")((authorizationId) =>\n      Effect.tryPromise({\n        try: () => store.get(authorizationId),\n        catch: (cause) => fromCause(\"providerAuthorization.get\", cause),\n      }),\n    ),\n    put: Effect.fn(\"ProviderAuthorizationStore.put\")((authorization) =>\n      Effect.tryPromise({\n        try: () => store.put(authorization),\n        catch: (cause) => fromCause(\"providerAuthorization.put\", cause),\n      }),\n    ),\n  });\n","import { Context, Effect, Layer } from \"effect\";\n\nimport type { OAuthContinuation } from \"../auth/connection.ts\";\nimport { type Error, fromCause } from \"./error.ts\";\n\nexport interface Interface {\n  readonly consume: (\n    stateHash: string,\n    now: Date,\n  ) => Effect.Effect<OAuthContinuation | null, Error>;\n  readonly put: (continuation: OAuthContinuation) => Effect.Effect<void, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/OAuthStateStore\") {}\n\nexport interface AsyncInterface {\n  readonly consume: (stateHash: string, now: Date) => Promise<OAuthContinuation | null>;\n  readonly put: (continuation: OAuthContinuation) => Promise<void>;\n}\n\nexport const toAsync = (store: Interface): AsyncInterface => ({\n  consume: (stateHash, now) => Effect.runPromise(store.consume(stateHash, now)),\n  put: (continuation) => Effect.runPromise(store.put(continuation)),\n});\n\nexport const layerFromAsync = (store: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    consume: Effect.fn(\"OAuthStateStore.consume\")((stateHash, now) =>\n      Effect.tryPromise({\n        try: () => store.consume(stateHash, now),\n        catch: (cause) => fromCause(\"oauthState.consume\", cause),\n      }),\n    ),\n    put: Effect.fn(\"OAuthStateStore.put\")((continuation) =>\n      Effect.tryPromise({\n        try: () => store.put(continuation),\n        catch: (cause) => fromCause(\"oauthState.put\", cause),\n      }),\n    ),\n  });\n","import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\n\nexport interface Query {\n  readonly name: DomainName.DomainName;\n  readonly signal?: AbortSignal;\n  readonly type: DnsRecord.Type;\n}\n\nexport const Answer = Schema.Struct({\n  data: Schema.String,\n  name: DomainName.Schema,\n  ttl: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),\n  type: DnsRecord.Type,\n});\nexport interface Answer extends Schema.Schema.Type<typeof Answer> {}\n\nexport const Resolution = Schema.TaggedUnion({\n  answer: { answers: Schema.Array(Answer) },\n  nodata: {},\n});\nexport type Resolution = typeof Resolution.Type;\n\nexport class Error extends Schema.TaggedError<Error>()(\"ResolverError\", {\n  cause: Schema.optionalKey(Schema.Unknown),\n  message: Schema.String,\n  reason: Schema.Literals([\"response\", \"timeout\", \"transport\"]),\n}) {}\n\nexport interface Interface {\n  readonly resolve: (query: Query) => Effect.Effect<Resolution, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/DnsResolver\") {}\n\nexport type AsyncResolution =\n  | Resolution\n  | { readonly _tag: \"timeout\" }\n  | { readonly _tag: \"failure\"; readonly message: string };\n\nexport interface AsyncInterface {\n  readonly resolve: (query: Query) => Promise<AsyncResolution>;\n}\n\nexport const layerFromAsync = (resolver: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    resolve: Effect.fn(\"DnsResolver.resolve\")((query) =>\n      Effect.tryPromise({\n        try: () => resolver.resolve(query),\n        catch: (cause) =>\n          new Error({\n            cause,\n            message: cause instanceof globalThis.Error ? cause.message : String(cause),\n            reason: \"transport\",\n          }),\n      }).pipe(\n        Effect.flatMap((resolution) => {\n          switch (resolution._tag) {\n            case \"answer\":\n            case \"nodata\":\n              return Effect.succeed(resolution);\n            case \"timeout\":\n              return Effect.fail(new Error({ message: \"DNS query timed out\", reason: \"timeout\" }));\n            case \"failure\":\n              return Effect.fail(new Error({ message: resolution.message, reason: \"transport\" }));\n          }\n        }),\n      ),\n    ),\n  });\n\nexport const toAsync = (resolver: Interface): AsyncInterface => ({\n  resolve: (query) =>\n    Effect.runPromise(\n      resolver.resolve(query).pipe(\n        Effect.match({\n          onFailure: (failure): AsyncResolution =>\n            failure.reason === \"timeout\"\n              ? { _tag: \"timeout\" }\n              : { _tag: \"failure\", message: failure.message },\n          onSuccess: (resolution) => resolution,\n        }),\n      ),\n    ),\n});\n"],"mappings":";;;;;;;;AAEA,IAAaA,UAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,gBAAgB;CACrE,OAAO,OAAO,YAAY,OAAO,OAAO;CACxC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,SAAgB,UAAU,WAAmB,OAAuB;CAClE,OAAO,iBAAiBA,UACpB,QACA,IAAIA,QAAM;EACR;EACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;EACzE;CACF,CAAC;AACP;;;;;;;;ACEA,IAAaC,YAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAUlG,MAAaC,aAAW,WAAsC;CAC5D,SAAS,iBAAiB,OAAO,WAAW,MAAM,OAAO,YAAY,CAAC;CACtE,OAAO,SAAS,oBAAoB,OAAO,WAAW,MAAM,KAAK,SAAS,eAAe,CAAC;CAC1F,MAAM,iBAAiB,OAAO,WAAW,MAAM,IAAI,YAAY,CAAC;CAChE,wBAAwB,oBACtB,OAAO,WAAW,MAAM,sBAAsB,eAAe,CAAC;CAChE,MAAM,eAAe,OAAO,WAAW,MAAM,IAAI,UAAU,CAAC;AAC9D;AAEA,MAAaC,oBAAkB,UAC7B,MAAM,QAAQF,WAAS;CACrB,QAAQ,OAAO,GAAG,wBAAwB,CAAC,EAAE,iBAC3C,OAAO,WAAW;EAChB,WAAW,MAAM,OAAO,YAAY;EACpC,QAAQ,UAAU,UAAU,qBAAqB,KAAK;CACxD,CAAC,CACH;CACA,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,SAAS,oBAChD,OAAO,WAAW;EAChB,WAAW,MAAM,KAAK,SAAS,eAAe;EAC9C,QAAQ,UAAU,UAAU,mBAAmB,KAAK;CACtD,CAAC,CACH;CACA,KAAK,OAAO,GAAG,qBAAqB,CAAC,EAAE,iBACrC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,YAAY;EACjC,QAAQ,UAAU,UAAU,kBAAkB,KAAK;CACrD,CAAC,CACH;CACA,uBAAuB,OAAO,GAAG,uCAAuC,CAAC,EAAE,oBACzE,OAAO,WAAW;EAChB,WAAW,MAAM,sBAAsB,eAAe;EACtD,QAAQ,UAAU,UAAU,oCAAoC,KAAK;CACvE,CAAC,CACH;CACA,KAAK,OAAO,GAAG,qBAAqB,CAAC,EAAE,eACrC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,UAAU;EAC/B,QAAQ,UAAU,UAAU,kBAAkB,KAAK;CACrD,CAAC,CACH;AACF,CAAC;;;;;;;;ACvDH,IAAaG,YAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAQlG,MAAaC,aAAW,WAAsC;CAC5D,SAAS,oBAAoB,OAAO,WAAW,MAAM,OAAO,eAAe,CAAC;CAC5E,MAAM,oBAAoB,OAAO,WAAW,MAAM,IAAI,eAAe,CAAC;CACtE,MAAM,iBAAiB,eAAe,OAAO,WAAW,MAAM,IAAI,iBAAiB,UAAU,CAAC;AAChG;AAEA,MAAaC,oBAAkB,UAC7B,MAAM,QAAQF,WAAS;CACrB,QAAQ,OAAO,GAAG,wBAAwB,CAAC,EAAE,oBAC3C,OAAO,WAAW;EAChB,WAAW,MAAM,OAAO,eAAe;EACvC,QAAQ,UAAU,UAAU,qBAAqB,KAAK;CACxD,CAAC,CACH;CACA,KAAK,OAAO,GAAG,qBAAqB,CAAC,EAAE,oBACrC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,eAAe;EACpC,QAAQ,UAAU,UAAU,kBAAkB,KAAK;CACrD,CAAC,CACH;CACA,KAAK,OAAO,GAAG,qBAAqB,CAAC,EAAE,iBAAiB,eACtD,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,iBAAiB,UAAU;EAChD,QAAQ,UAAU,UAAU,kBAAkB,KAAK;CACrD,CAAC,CACH;AACF,CAAC;;;;;;;;ACjCH,IAAaG,YAAb,cAA6B,QAAQ,QAA4B,CAAC,CAChE,uCACF,CAAC,CAAC,CAAC;AAYH,MAAaC,aAAW,WAAsC;CAC5D,SAAS,oBAAoB,OAAO,WAAW,MAAM,OAAO,eAAe,CAAC;CAC5E,wBAAwB,YAAY,cAClC,OAAO,WAAW,MAAM,sBAAsB,YAAY,SAAS,CAAC;CACtE,MAAM,oBAAoB,OAAO,WAAW,MAAM,IAAI,eAAe,CAAC;CACtE,MAAM,kBAAkB,OAAO,WAAW,MAAM,IAAI,aAAa,CAAC;AACpE;AAEA,MAAaC,oBAAkB,UAC7B,MAAM,QAAQF,WAAS;CACrB,QAAQ,OAAO,GAAG,mCAAmC,CAAC,EAAE,oBACtD,OAAO,WAAW;EAChB,WAAW,MAAM,OAAO,eAAe;EACvC,QAAQ,UAAU,UAAU,gCAAgC,KAAK;CACnE,CAAC,CACH;CACA,uBAAuB,OAAO,GAAG,kDAAkD,CAAC,EACjF,YAAY,cACX,OAAO,WAAW;EAChB,WAAW,MAAM,sBAAsB,YAAY,SAAS;EAC5D,QAAQ,UAAU,UAAU,+CAA+C,KAAK;CAClF,CAAC,CACL;CACA,KAAK,OAAO,GAAG,gCAAgC,CAAC,EAAE,oBAChD,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,eAAe;EACpC,QAAQ,UAAU,UAAU,6BAA6B,KAAK;CAChE,CAAC,CACH;CACA,KAAK,OAAO,GAAG,gCAAgC,CAAC,EAAE,kBAChD,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,aAAa;EAClC,QAAQ,UAAU,UAAU,6BAA6B,KAAK;CAChE,CAAC,CACH;AACF,CAAC;;;;;;;;ACnDH,IAAaG,YAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAOlG,MAAaC,aAAW,WAAsC;CAC5D,UAAU,WAAW,QAAQ,OAAO,WAAW,MAAM,QAAQ,WAAW,GAAG,CAAC;CAC5E,MAAM,iBAAiB,OAAO,WAAW,MAAM,IAAI,YAAY,CAAC;AAClE;AAEA,MAAaC,oBAAkB,UAC7B,MAAM,QAAQF,WAAS;CACrB,SAAS,OAAO,GAAG,yBAAyB,CAAC,EAAE,WAAW,QACxD,OAAO,WAAW;EAChB,WAAW,MAAM,QAAQ,WAAW,GAAG;EACvC,QAAQ,UAAU,UAAU,sBAAsB,KAAK;CACzD,CAAC,CACH;CACA,KAAK,OAAO,GAAG,qBAAqB,CAAC,EAAE,iBACrC,OAAO,WAAW;EAChB,WAAW,MAAM,IAAI,YAAY;EACjC,QAAQ,UAAU,UAAU,kBAAkB,KAAK;CACrD,CAAC,CACH;AACF,CAAC;;;;;;;;;;;AC5BH,MAAa,SAAS,OAAO,OAAO;CAClC,MAAM,OAAO;CACb,MAAMG;CACN,KAAK,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;CACtD,MAAMC;AACR,CAAC;AAGD,MAAa,aAAa,OAAO,YAAY;CAC3C,QAAQ,EAAE,SAAS,OAAO,MAAM,MAAM,EAAE;CACxC,QAAQ,CAAC;AACX,CAAC;AAGD,IAAa,QAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,iBAAiB;CACtE,OAAO,OAAO,YAAY,OAAO,OAAO;CACxC,SAAS,OAAO;CAChB,QAAQ,OAAO,SAAS;EAAC;EAAY;EAAW;CAAW,CAAC;AAC9D,CAAC,CAAC,CAAC,CAAC;AAMJ,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAW9F,MAAa,kBAAkB,aAC7B,MAAM,QAAQ,SAAS,EACrB,SAAS,OAAO,GAAG,qBAAqB,CAAC,EAAE,UACzC,OAAO,WAAW;CAChB,WAAW,SAAS,QAAQ,KAAK;CACjC,QAAQ,UACN,IAAI,MAAM;EACR;EACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;EACzE,QAAQ;CACV,CAAC;AACL,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,eAAe;CAC7B,QAAQ,WAAW,MAAnB;EACE,KAAK;EACL,KAAK,UACH,OAAO,OAAO,QAAQ,UAAU;EAClC,KAAK,WACH,OAAO,OAAO,KAAK,IAAI,MAAM;GAAE,SAAS;GAAuB,QAAQ;EAAU,CAAC,CAAC;EACrF,KAAK,WACH,OAAO,OAAO,KAAK,IAAI,MAAM;GAAE,SAAS,WAAW;GAAS,QAAQ;EAAY,CAAC,CAAC;CACtF;AACF,CAAC,CACH,CACF,EACF,CAAC;AAEH,MAAa,WAAW,cAAyC,EAC/D,UAAU,UACR,OAAO,WACL,SAAS,QAAQ,KAAK,CAAC,CAAC,KACtB,OAAO,MAAM;CACX,YAAY,YACV,QAAQ,WAAW,YACf,EAAE,MAAM,UAAU,IAClB;EAAE,MAAM;EAAW,SAAS,QAAQ;CAAQ;CAClD,YAAY,eAAe;AAC7B,CAAC,CACH,CACF,EACJ"}