domainkit 0.1.1 → 0.2.1

package/dist/effect.mjs

@@ -1,21 +1,43 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { E as domain_name_exports, S as provider_exports, g as dns_record_exports, k as invalid_input_exports } from "./dns-record-C_KwGPLf.mjs";
-import { c as make, s as client_exports, t as auth_exports, u as zones_exports } from "./auth-B0owkrpk.mjs";
-import { B as manifest_exports, C as plan_exports, I as token_exports, K as canonical_json_exports, N as types_exports, P as selection_exports, U as oauth_exports, X as authorization_exports, _ as deletion_exports, a as doh_exports, et as connection_lifecycle_exports, n as verify_exports, r as cloudflare_doh_exports, s as dns_data_exports, st as connection_exports, ut as version, y as connection_authorization_exports } from "./verify-BXOvXE20.mjs";
-import { S as error_exports, c as oauth_state_exports, d as authorization_exports$1, h as credential_exports, i as resolver_exports, y as connection_exports$1 } from "./resolver-tEXpKxmH.mjs";
-import { l as secret_exports, n as make$1, r as auth_exports$1, t as client_exports$1 } from "./client-BnD7QLRF.mjs";
-import { n as receipt_exports } from "./receipt-CGSnfZQ6.mjs";
+import { A as invalid_input_exports, C as provider_exports, D as domain_name_exports, N as lifecycle_repository_exports, g as dns_record_exports } from "./dns-record-BLeqo56C.mjs";
+import { _ as StartResult, d as provider_context_exports, g as Method, h as Error, m as secret_exports, o as authorization_exports, v as complete, y as start } from "./authorization-CQSKKMrW.mjs";
+import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-B4jq3yk3.mjs";
+import { n as zones_exports } from "./zones-DKHTpX9C.mjs";
+import { a as authorizationError, c as validate, i as assertGrant, n as Grant, o as decode, r as Schema, s as encode, t as AuthorizationError } from "./connection-BXoSrhZs.mjs";
+import { t as canonical_json_exports } from "./canonical-json-CpvqGMcr.mjs";
+import { C as selection_exports, D as manifest_exports, O as diagnostic_exports, S as connection_authorization_exports, b as dns_data_exports, g as cloudflare_doh_exports, k as version, m as google_doh_exports, p as resolver_pool_exports, s as verify_exports, v as doh_exports } from "./verify-Q5RYpnuw.mjs";
+import { C as plan_exports, L as zone_discovery_exports, N as types_exports, m as deletion_exports, r as resolver_exports } from "./resolver-CxE-VDw4.mjs";
+import { c as client_exports$1, l as discovery$1, t as auth_exports$1, u as make$1 } from "./auth-6-KRy1gN.mjs";
 //#region src/providers/cloudflare/index.ts
 var cloudflare_exports = /* @__PURE__ */ __exportAll({
 	Auth: () => auth_exports,
 	Client: () => client_exports,
+	discovery: () => discovery,
 	make: () => make
 });
 //#endregion
+//#region src/auth/connection-api.ts
+var connection_api_exports = /* @__PURE__ */ __exportAll({
+	AuthorizationError: () => AuthorizationError,
+	Error: () => Error,
+	Grant: () => Grant,
+	Method: () => Method,
+	Schema: () => Schema,
+	StartResult: () => StartResult,
+	assertGrant: () => assertGrant,
+	authorizationError: () => authorizationError,
+	complete: () => complete,
+	decode: () => decode,
+	encode: () => encode,
+	start: () => start,
+	validate: () => validate
+});
+//#endregion
 //#region src/providers/vercel/index.ts
 var vercel_exports = /* @__PURE__ */ __exportAll({
 	Auth: () => auth_exports$1,
 	Client: () => client_exports$1,
+	discovery: () => discovery$1,
 	make: () => make$1
 });
 //#endregion
@@ -23,6 +45,6 @@ var vercel_exports = /* @__PURE__ */ __exportAll({
 /** The current package version from the package manifest. */
 const VERSION = version;
 //#endregion
-export { cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_exports as Connection, connection_authorization_exports as ConnectionAuthorization, connection_lifecycle_exports as ConnectionLifecycle, connection_exports$1 as ConnectionStore, credential_exports as CredentialStore, deletion_exports as Deletion, canonical_json_exports as Digest, dns_data_exports as DnsData, doh_exports as DnsOverHttps, types_exports as DnsPlan, provider_exports as DnsProvider, dns_record_exports as DnsRecord, resolver_exports as DnsResolver, domain_name_exports as DomainName, invalid_input_exports as InvalidInput, oauth_exports as OAuth, oauth_state_exports as OAuthStateStore, manifest_exports as ProviderAuth, authorization_exports as ProviderAuthorization, authorization_exports$1 as ProviderAuthorizationStore, selection_exports as ProviderDiscovery, plan_exports as Provisioning, receipt_exports as ReceiptStore, secret_exports as Secret, error_exports as Storage, token_exports as TokenConnection, VERSION, vercel_exports as Vercel, verify_exports as Verification, zones_exports as Zones };
+export { lifecycle_repository_exports as AuthorizationLifecycle, cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_api_exports as Connection, connection_authorization_exports as ConnectionAuthorization, deletion_exports as Deletion, diagnostic_exports as Diagnostic, canonical_json_exports as Digest, dns_data_exports as DnsData, doh_exports as DnsOverHttps, types_exports as DnsPlan, provider_exports as DnsProvider, dns_record_exports as DnsRecord, resolver_exports as DnsResolver, resolver_pool_exports as DnsResolverPool, domain_name_exports as DomainName, google_doh_exports as GoogleDnsOverHttps, invalid_input_exports as InvalidInput, manifest_exports as ProviderAuth, authorization_exports as ProviderAuthorization, provider_context_exports as ProviderContext, selection_exports as ProviderDiscovery, plan_exports as Provisioning, secret_exports as Secret, VERSION, vercel_exports as Vercel, verify_exports as Verification, zone_discovery_exports as ZoneDiscovery, zones_exports as Zones };
 
 //# sourceMappingURL=effect.mjs.map

package/dist/effect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection.ts\";\nexport * as ConnectionLifecycle from \"./auth/connection-lifecycle.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as OAuth from \"./auth/oauth.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as TokenConnection from \"./auth/token.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as ConnectionStore from \"./stores/connection.ts\";\nexport * as ProviderAuthorizationStore from \"./stores/authorization.ts\";\nexport * as CredentialStore from \"./stores/credential.ts\";\nexport * as OAuthStateStore from \"./stores/oauth-state.ts\";\nexport * as ReceiptStore from \"./stores/receipt.ts\";\nexport * as Storage from \"./stores/error.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AEGA,MAAa,UAAUA"}
+{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/auth/connection-api.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export {\n  assertGrant,\n  authorizationError,\n  AuthorizationError,\n  decode,\n  encode,\n  Grant,\n  Schema,\n  validate,\n} from \"./connection.ts\";\nexport type { Connection, StoredCredential } from \"./connection.ts\";\nexport { complete, Error, Method, start, StartResult } from \"./connect.ts\";\nexport type {\n  Authentication,\n  AuthenticationFailure,\n  BaseInput,\n  CompleteInput,\n  Continuation,\n  ContinuationStore,\n  Failure,\n  InteractiveFlow,\n  InteractiveStart,\n  Method as ConnectionMethod,\n  Requirements,\n  StartResult as ConnectionStartResult,\n} from \"./connect.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection-api.ts\";\nexport * as AuthorizationLifecycle from \"./auth/lifecycle-repository.ts\";\nexport * as Diagnostic from \"./auth/diagnostic.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as ProviderContext from \"./auth/provider-context.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as ZoneDiscovery from \"./discovery/zone-discovery.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as GoogleDnsOverHttps from \"./verification/google-doh.ts\";\nexport * as DnsResolverPool from \"./verification/resolver-pool.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGGA,MAAa,UAAUA"}

package/dist/{index-D2howbNz.d.mts → index-B1opsgls.d.mts}

@@ -1,5 +1,6 @@
-import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, o as OAuthMethod, r as Manifest, s as OAuthSubjectResolver } from "./manifest-CP85ePFn.mjs";
+import { Lt as Error$1, Nt as DomainName, Q as Manifest, b as Codec, dt as Interface$1, et as OAuthClientConfiguration, h as Method, it as TokenValidation, nt as OAuthSubjectResolver, ot as Value, p as InteractiveFlow, r as Source, tt as OAuthMethod, ut as Error, x as Envelope } from "./zone-discovery-BA5I24vu.mjs";
 import { Effect, Schema } from "effect";
+import * as oauth from "oauth4webapi";
 //#region src/providers/cloudflare/protocol.d.ts
 declare const Account$1: Schema.Struct<{
   readonly id: Schema.String;
@@ -7,7 +8,7 @@ declare const Account$1: Schema.Struct<{
 }>;
 interface Account$1 extends Schema.Schema.Type<typeof Account$1> {}
 declare namespace client_d_exports {
-  export { Account, Fetch, Interface, ListZonesInput, Options, Zone, discoverAuthorizationAccount, make, validateDomainToken };
+  export { Account, Fetch, Interface, ListZonesInput, Options, Zone, discoverAuthorizationAccount, discovery, make, validateDomainToken };
 }
 type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 /** Configuration for an Effect-native Cloudflare authoritative-DNS client. */
@@ -38,6 +39,8 @@ interface Interface extends Interface$1 {
   readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
   readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
 }
+/** Exposes Cloudflare zone lookup as the optional provider discovery capability. */
+declare function discovery(client: Interface): Source;
 interface CredentialOptions$1 {
   readonly baseUrl?: string;
   readonly fetch?: Fetch;
@@ -63,8 +66,15 @@ declare const validateDomainToken: (options: DomainCredentialOptions) => Effect.
 /** Creates an Effect-native Cloudflare client without owning the credential lifecycle. */
 declare function make(options: Options): Interface;
 declare namespace auth_d_exports {
-  export { CredentialTarget, OAuthMethodOptions, SubjectResolverOptions, TokenValidatorOptions, manifest, oauthMethod, subjectResolver, tokenMethod, tokenValidator };
+  export { Context$1 as Context, CredentialTarget, OAuthFlowOptions, OAuthMethodOptions, SubjectResolverOptions, TokenConnectionOptions, TokenValidatorOptions, contextCodec, manifest, oauthAuthentication, oauthFlow, oauthMethod, subjectResolver, tokenConnectionMethod, tokenMethod, tokenValidator };
 }
+declare const Context$1: Schema.Struct<{
+  readonly tokenKind: Schema.Literals<readonly ["account", "user"]>;
+}>;
+type Context$1 = typeof Context$1.Type;
+declare const contextCodec: Codec<{
+  readonly tokenKind: "account" | "user";
+}>;
 /** Describes Cloudflare's caller-created API-token authorization method. */
 declare function tokenMethod(capabilities: TokenValidation["capabilities"]): Extract<Manifest["methods"][number], {
   readonly _tag: "token";
@@ -104,9 +114,46 @@ type TokenValidatorOptions = CredentialOptions & ({
 declare function subjectResolver(options: SubjectResolverOptions): OAuthSubjectResolver;
 /** Creates a host callback that validates a Cloudflare API token. */
 declare function tokenValidator(options: TokenValidatorOptions): (token: Value) => ReturnType<Interface["validateToken"]>;
+type TokenConnectionOptions = TokenValidatorOptions & {
+  readonly token: Value;
+};
+/** Creates a provider-independent token connection method backed by Cloudflare validation. */
+declare function tokenConnectionMethod(options: TokenConnectionOptions): Extract<Method, {
+  readonly _tag: "Token";
+}>;
+/** Converts a completed Cloudflare OAuth grant into the canonical connection authentication. */
+declare const oauthAuthentication: (options: SubjectResolverOptions & {
+  readonly accessToken: Value;
+  readonly tokens: oauth.TokenEndpointResponse;
+}) => Effect.Effect<{
+  capabilityEvidence: {
+    capability: "dns:read" | "dns:write";
+    evidence: {
+      readonly _tag: "Introspected";
+      readonly observedAt: Date;
+    };
+  }[];
+  credential: {
+    accessToken: Value;
+    refreshToken: Value | null;
+    tokenType: Lowercase<string>;
+  };
+  expiresAt: Date | null;
+  providerAccountId: string;
+  providerContext: Envelope;
+  scopes: string[];
+}, Error$1 | Error, never>;
+type OAuthFlowOptions = SubjectResolverOptions & {
+  readonly client: OAuthClientConfiguration;
+  readonly clientAuth: OAuthMethod["clientAuth"];
+  readonly redirectUri: string;
+  readonly scopes: ReadonlyArray<string>;
+};
+/** Creates Cloudflare's OAuth implementation of the common interactive connection capability. */
+declare function oauthFlow(options: OAuthFlowOptions): InteractiveFlow;
 declare namespace index_d_exports {
-  export { Account, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, make };
+  export { Account, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
 }
 //#endregion
-export { make as _, TokenValidatorOptions as a, oauthMethod as c, Fetch as d, Interface as f, client_d_exports as g, Zone as h, SubjectResolverOptions as i, tokenMethod as l, Options as m, CredentialTarget as n, auth_d_exports as o, ListZonesInput as p, OAuthMethodOptions as r, manifest as s, index_d_exports as t, Account as u };
-//# sourceMappingURL=index-D2howbNz.d.mts.map
+export { Zone as _, SubjectResolverOptions as a, make as b, auth_d_exports as c, tokenMethod as d, Account as f, Options as g, ListZonesInput as h, OAuthMethodOptions as i, manifest as l, Interface as m, CredentialTarget as n, TokenConnectionOptions as o, Fetch as p, OAuthFlowOptions as r, TokenValidatorOptions as s, index_d_exports as t, oauthMethod as u, client_d_exports as v, discovery as y };
+//# sourceMappingURL=index-B1opsgls.d.mts.map

package/dist/{index-CEzk2gbZ.d.mts → index-Ewc__bQu.d.mts}

@@ -1,7 +1,7 @@
-import { R as DomainName, d as Value, g as Interface$1, h as Error, l as TokenValidation, n as IntegrationMethod, r as Manifest } from "./manifest-CP85ePFn.mjs";
-import { Effect } from "effect";
+import { B as Capability, Lt as Error$1, Nt as DomainName, Q as Manifest, Z as IntegrationMethod, b as Codec, dt as Interface$1, h as Method, it as TokenValidation, ot as Value, p as InteractiveFlow, r as Source, ut as Error, x as Envelope } from "./zone-discovery-BA5I24vu.mjs";
+import { Effect, Schema } from "effect";
 declare namespace client_d_exports {
-  export { Account, AccountContext, Fetch, Interface, ListZonesInput, Options, Zone, make };
+  export { Account, AccountContext, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
 }
 type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 /** Selects whether Vercel requests operate on a personal account or a team. */
@@ -42,11 +42,31 @@ interface Interface extends Interface$1 {
   readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
   readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
 }
+/** Exposes Vercel zone lookup as the optional provider discovery capability. */
+declare function discovery(client: Interface): Source;
 /** Creates an Effect-native Vercel client without owning the credential lifecycle. */
 declare function make(options: Options): Interface;
 declare namespace auth_d_exports {
-  export { ExchangeCodeOptions, IntegrationCredential, IntegrationMethodOptions, exchangeCode, integrationMethod, manifest, tokenMethod };
+  export { Context$1 as Context, ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, TokenConnectionOptions, contextCodec, exchangeCode, integrationAuthentication, integrationFlow, integrationMethod, manifest, tokenConnectionMethod, tokenMethod };
 }
+declare const Context$1: Schema.TaggedUnion<{
+  readonly personal: Schema.TaggedStruct<"personal", {
+    readonly installationId: Schema.NullOr<Schema.String>;
+  }>;
+  readonly team: Schema.TaggedStruct<"team", {
+    readonly installationId: Schema.NullOr<Schema.String>;
+    readonly teamId: Schema.String;
+  }>;
+}>;
+type Context$1 = typeof Context$1.Type;
+declare const contextCodec: Codec<{
+  readonly _tag: "personal";
+  readonly installationId: string | null;
+} | {
+  readonly _tag: "team";
+  readonly installationId: string | null;
+  readonly teamId: string;
+}>;
 /** Describes Vercel's caller-created personal access-token method. */
 declare function tokenMethod(capabilities: TokenValidation["capabilities"]): Extract<Manifest["methods"][number], {
   readonly _tag: "token";
@@ -86,9 +106,40 @@ declare const exchangeCode: (options: ExchangeCodeOptions) => Effect.Effect<{
   installationId: string | null;
   userId: string;
 }, Error, never>;
+interface TokenConnectionOptions extends Omit<Options, "token"> {
+  readonly token: Value;
+}
+/** Creates a provider-independent token connection method backed by Vercel validation. */
+declare function tokenConnectionMethod(options: TokenConnectionOptions): Extract<Method, {
+  readonly _tag: "Token";
+}>;
+/** Converts a completed Vercel Integration exchange into canonical connection authentication. */
+declare const integrationAuthentication: (options: ExchangeCodeOptions & {
+  readonly capabilities: ReadonlyArray<Capability>;
+}) => Effect.Effect<{
+  capabilityEvidence: {
+    capability: "dns:read" | "dns:write";
+    evidence: {
+      readonly _tag: "Introspected";
+      readonly observedAt: Date;
+    };
+  }[];
+  credential: {
+    accessToken: Value;
+    refreshToken: null;
+    tokenType: string;
+  };
+  expiresAt: null;
+  providerAccountId: string;
+  providerContext: Envelope;
+  scopes: never[];
+}, Error$1 | Error, never>;
+interface IntegrationFlowOptions extends Omit<ExchangeCodeOptions, "code">, IntegrationMethodOptions {}
+/** Creates Vercel Integration's implementation of the common interactive connection capability. */
+declare function integrationFlow(options: IntegrationFlowOptions): InteractiveFlow;
 declare namespace index_d_exports {
-  export { Account, AccountContext, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, make };
+  export { Account, AccountContext, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
 }
 //#endregion
-export { make as _, auth_d_exports as a, tokenMethod as c, Fetch as d, Interface as f, client_d_exports as g, Zone as h, IntegrationMethodOptions as i, Account as l, Options as m, ExchangeCodeOptions as n, integrationMethod as o, ListZonesInput as p, IntegrationCredential as r, manifest as s, index_d_exports as t, AccountContext as u };
-//# sourceMappingURL=index-CEzk2gbZ.d.mts.map
+export { Zone as _, IntegrationMethodOptions as a, make as b, integrationMethod as c, Account as d, AccountContext as f, Options as g, ListZonesInput as h, IntegrationFlowOptions as i, manifest as l, Interface as m, ExchangeCodeOptions as n, TokenConnectionOptions as o, Fetch as p, IntegrationCredential as r, auth_d_exports as s, index_d_exports as t, tokenMethod as u, client_d_exports as v, discovery as y };
+//# sourceMappingURL=index-Ewc__bQu.d.mts.map

package/dist/index.d.mts

@@ -1,48 +1,37 @@
-import { A as Schema$1, C as DnsRecord, D as Observed, E as Ns, I as equals, L as parse, M as Txt, N as Type, O as Opaque, P as data, R as DomainName, S as Cname, T as Mx, U as invalid_input_d_exports, V as parse$1, a as OAuthClientConfiguration, b as Aaaa, c as Schema, d as Value, f as secret_d_exports, i as Method, j as Srv, k as RequirementMetadata, l as TokenValidation, m as CreateResult, o as OAuthMethod, p as AsyncInterface, r as Manifest, t as AsyncOAuthSubjectResolver, w as Encoded, x as Caa, y as A, z as Schema$2 } from "./manifest-CP85ePFn.mjs";
-import { n as cloudflare_d_exports } from "./cloudflare-CprjjXfm.mjs";
-import { $ as Schema$4, G as OAuthContinuation, H as AuthorizationError, I as AsyncInterface$1, J as assertGrant, K as Schema$3, M as AsyncInterface$3, O as AsyncInterface$2, Q as ProviderAuthorization, S as encodeReceipt, U as Connection, W as Grant, X as encode, Z as Capability, _ as Operation, b as Schema$5, g as DnsPlan, h as Authorization, m as ApplyReceipt, n as AsyncInterface$4, o as Query, q as StoredCredential, r as AsyncResolution, t as Answer, tt as encode$1, u as AsyncInterface$6, v as PlanAuthorization, w as AsyncInterface$5, x as encode$2, y as Receipt } from "./resolver-BHPsADzE.mjs";
-import { A as updateGrant$1, C as Fetch$1, D as DetachResult, O as Error, S as BeginInput$1, _ as CreateInput$1, a as Options$3, b as zones_d_exports, c as Authorization$1, d as Operation$1, f as PartialError, l as CreateError, m as Receipt$1, p as Plan, r as Options$2, s as ApplyError, t as Result, u as Error$1, x as selection_d_exports, y as renderManualInstructions$1 } from "./verify-B80xCBh2.mjs";
-import { r as vercel_d_exports } from "./vercel-D-E2aqb1.mjs";
-declare namespace connection_d_exports {
-  export { AuthorizationError, Connection, Grant, OAuthContinuation, Schema$3 as Schema, StoredCredential, assertGrant, decode$3 as decode, encode };
-}
-declare function decode$3(input: unknown): Promise<Connection>;
-declare namespace connection_lifecycle_d_exports {
-  export { DetachResult, Error, detach, updateGrant };
-}
-declare function updateGrant(input: {
-  readonly connection: Parameters<typeof updateGrant$1>[0]["connection"];
-  readonly connectionStore: AsyncInterface$1;
-  readonly grant: Parameters<typeof updateGrant$1>[0]["grant"];
-}): Promise<Connection>;
-declare function detach(input: {
-  readonly authorizationStore: AsyncInterface$2;
-  readonly connectionId: string;
-  readonly connectionStore: AsyncInterface$1;
-  readonly credentialStore: AsyncInterface$3;
-  readonly revokeAuthorization: (authorization: ProviderAuthorization) => Promise<void>;
-}): Promise<DetachResult>;
-declare namespace provider_authorization_d_exports {
-  export { Capability, ProviderAuthorization, Schema$4 as Schema, decode$2 as decode, encode$1 as encode };
+import { $ as Method, A as Connection, B as Capability, Ct as Opaque, Dt as Txt, Et as Srv, G as Schema$2, H as Evidence, It as parse$1, Mt as parse, Nt as DomainName, Ot as Type, Pt as Schema$4, Q as Manifest, Rt as invalid_input_d_exports, S as provider_context_d_exports, St as Observed, Tt as Schema$3, U as EvidenceSchema, V as CapabilityEvidence, W as ProviderAuthorization, X as AsyncOAuthSubjectResolver, _t as Cname, bt as Mx, ct as AsyncInterface, et as OAuthClientConfiguration, gt as Caa, ht as Aaaa, it as TokenValidation, jt as equals, kt as data, lt as CreateResult, mt as A, q as encode, rt as Schema$1, st as secret_d_exports, tt as OAuthMethod, vt as DnsRecord, wt as RequirementMetadata, xt as Ns, yt as Encoded } from "./zone-discovery-BA5I24vu.mjs";
+import { a as Source, i as authorization_lifecycle_d_exports, o as zone_discovery_d_exports, r as connection_d_exports } from "./connection-CEqadXSm.mjs";
+import { n as cloudflare_d_exports } from "./cloudflare-FDl5q7Dm.mjs";
+import { _ as selection_d_exports, c as Policy, f as Options$3, g as zones_d_exports, i as Result, m as Options$4, n as PublicDns$1, o as DefaultOptions, r as PublicDnsObservation, s as Observation, t as ProviderObservation, u as Options$5, v as diagnostic_d_exports } from "./verify-7_EbKbFM.mjs";
+import { A as renderManualInstructions$1, C as DiscoverCreateInput$1, E as ResolvedCreateResult, F as PlanAuthorization, I as Receipt, L as Schema$5, M as Authorization, N as DnsPlan, O as Target, P as Operation, R as encode$1, S as CreateResult$1, _ as Receipt$1, d as Authorization$1, f as CreateError, g as Plan, h as PartialError, j as ApplyReceipt, m as Operation$1, n as AsyncInterface$1, o as Query, p as Error, r as AsyncResolution, t as Answer, u as ApplyError, w as ExactCreateInput$1, z as encodeReceipt } from "./resolver-BbVzTbCX.mjs";
+import { i as vercel_d_exports } from "./vercel-DgJaUX9D.mjs";
+import { Data } from "effect";
+declare namespace dns_provider_d_exports {
+  export { CreateResult, AsyncInterface as Interface };
+}
+declare namespace dns_resolver_d_exports {
+  export { Answer, AsyncInterface$1 as Interface, Query, AsyncResolution as Resolution };
 }
-declare function decode$2(input: unknown): Promise<ProviderAuthorization>;
 declare namespace provider_auth_d_exports {
-  export { Manifest, Method, OAuthClientConfiguration, OAuthMethod, AsyncOAuthSubjectResolver as OAuthSubjectResolver, Schema, TokenValidation, decode$1 as decode };
+  export { Manifest, Method, OAuthClientConfiguration, OAuthMethod, AsyncOAuthSubjectResolver as OAuthSubjectResolver, Schema$1 as Schema, TokenValidation, decode$2 as decode };
 }
-declare function decode$1(input: unknown): Promise<Manifest>;
+declare function decode$2(input: unknown): Promise<Manifest>;
+declare namespace provider_authorization_d_exports {
+  export { Capability, CapabilityEvidence, Evidence, EvidenceSchema, ProviderAuthorization, Schema$2 as Schema, decode$1 as decode, encode };
+}
+declare function decode$1(input: unknown): Promise<ProviderAuthorization>;
 declare namespace dns_record_d_exports {
-  export { A, Aaaa, Caa, Cname, DnsRecord, Encoded, Mx, Ns, Observed, Opaque, RequirementMetadata, Schema$1 as Schema, Srv, Txt, Type, data, equals, parse };
+  export { A, Aaaa, Caa, Cname, DnsRecord, Encoded, Mx, Ns, Observed, Opaque, RequirementMetadata, Schema$3 as Schema, Srv, Txt, Type, data, equals, parse };
 }
 declare namespace domain_name_d_exports {
-  export { DomainName, Schema$2 as Schema, parse$1 as parse };
+  export { DomainName, Schema$4 as Schema, parse$1 as parse };
 }
 declare namespace dns_plan_d_exports {
-  export { ApplyReceipt, Authorization, DnsPlan, Operation, PlanAuthorization, Receipt, Schema$5 as Schema, decode, decodeReceipt, encode$2 as encode, encodeReceipt };
+  export { ApplyReceipt, Authorization, DnsPlan, Operation, PlanAuthorization, Receipt, Schema$5 as Schema, decode, decodeReceipt, encode$1 as encode, encodeReceipt };
 }
 declare function decode(input: unknown): Promise<DnsPlan>;
 declare function decodeReceipt(input: unknown): Promise<ApplyReceipt>;
 declare namespace deletion_d_exports {
-  export { ApplyError, Authorization$1 as Authorization, CreateError, Authorization$1 as DeletionAuthorization, Operation$1 as DeletionOperation, Plan as DeletionPlan, Receipt$1 as DeletionReceipt, Error$1 as Error, Operation$1 as Operation, PartialError, Plan, Receipt$1 as Receipt, apply$1 as apply, authorize$1 as authorize, create$1 as create };
+  export { ApplyError, Authorization$1 as Authorization, CreateError, Authorization$1 as DeletionAuthorization, Operation$1 as DeletionOperation, Plan as DeletionPlan, Receipt$1 as DeletionReceipt, Error, Operation$1 as Operation, PartialError, Plan, Receipt$1 as Receipt, apply$1 as apply, authorize$1 as authorize, create$1 as create };
 }
 declare function create$1(input: {
   readonly plan: DnsPlan;
@@ -57,57 +46,17 @@ declare function apply$1(input: {
   readonly priorReceipt?: Receipt$1;
   readonly provider: AsyncInterface;
 }): Promise<Receipt$1>;
-declare namespace dns_provider_d_exports {
-  export { CreateResult, AsyncInterface as Interface };
-}
-declare namespace dns_resolver_d_exports {
-  export { Answer, AsyncInterface$4 as Interface, Query, AsyncResolution as Resolution };
-}
-declare namespace oauth_d_exports {
-  export { BeginInput, Fetch, begin, complete, refresh, revoke };
-}
-interface BeginInput extends BeginInput$1 {
-  readonly stateStore: AsyncInterface$5;
-}
-declare function begin(input: BeginInput): Promise<{
-  readonly authorizationUrl: URL;
-}>;
-declare function complete(input: {
-  readonly callbackUrl: URL;
-  readonly client: OAuthClientConfiguration;
-  readonly connectionStore: AsyncInterface$1;
-  readonly credentialStore: AsyncInterface$3;
-  readonly authorizationStore: AsyncInterface$2;
-  readonly fetch?: Fetch$1;
-  readonly providerId: string;
-  readonly resolveSubject: AsyncOAuthSubjectResolver;
-  readonly stateStore: AsyncInterface$5;
-}): Promise<{
-  readonly authorization: ProviderAuthorization;
-  readonly connection: Connection;
-}>;
-declare function refresh(input: {
-  readonly authorization: ProviderAuthorization;
-  readonly client: OAuthClientConfiguration;
-  readonly credentialStore: AsyncInterface$3;
-  readonly fetch?: Fetch$1;
-  readonly method: OAuthMethod;
-}): Promise<void>;
-declare function revoke(input: {
-  readonly authorization: ProviderAuthorization;
-  readonly client: OAuthClientConfiguration;
-  readonly credentialStore: AsyncInterface$3;
-  readonly fetch?: Fetch$1;
-  readonly method: OAuthMethod;
-}): Promise<void>;
-type Fetch = Fetch$1;
 declare namespace provisioning_d_exports {
-  export { CreateInput, apply, authorize, authorizeForConnection, create, renderManualInstructions };
+  export { CreateResult$1 as CreateResult, DiscoverCreateInput, ExactCreateInput, Target, apply, authorize, authorizeForConnection, create, renderManualInstructions };
 }
-interface CreateInput extends CreateInput$1 {
+interface ExactCreateInput extends ExactCreateInput$1 {
   readonly provider: AsyncInterface;
 }
-declare function create(input: CreateInput): Promise<DnsPlan>;
+interface DiscoverCreateInput extends DiscoverCreateInput$1 {
+  readonly sources: ReadonlyArray<Source>;
+}
+declare function create(input: ExactCreateInput): Promise<ResolvedCreateResult>;
+declare function create(input: DiscoverCreateInput): Promise<CreateResult$1>;
 declare function authorize(plan: DnsPlan, operationIds?: ReadonlyArray<string>, options?: {
   readonly allowPartial?: boolean;
 }): Promise<PlanAuthorization>;
@@ -125,49 +74,156 @@ declare function authorizeForConnection(input: {
   readonly plan: DnsPlan;
 }): Promise<PlanAuthorization>;
 declare const renderManualInstructions: typeof renderManualInstructions$1;
-declare namespace stores_d_exports {
-  export { AsyncInterface$1 as Connection, AsyncInterface$3 as Credential, AsyncInterface$5 as OAuthState, AsyncInterface$2 as ProviderAuthorization, AsyncInterface$6 as Receipt };
-}
-declare namespace token_d_exports {
-  export { connect };
-}
-declare function connect(input: {
-  readonly connectionStore: AsyncInterface$1;
-  readonly credentialStore: AsyncInterface$3;
-  readonly authorizationStore: AsyncInterface$2;
-  readonly grant: Grant;
-  readonly ownerId: string;
-  readonly providerId: string;
-  readonly subjectId: string;
-  readonly token: Value;
-  readonly validate: (token: Value) => Promise<TokenValidation>;
-}): Promise<{
-  readonly authorization: ProviderAuthorization;
-  readonly connection: Connection;
-}>;
-declare namespace verification_d_exports {
-  export { record };
+declare namespace resolver_pool_d_exports {
+  export { Entry, Interface, Observation, Policy, defaultMake, make$3 as make };
 }
-declare function record(input: {
-  readonly provider: AsyncInterface;
+interface Entry {
+  readonly id: string;
+  readonly resolver: AsyncInterface$1;
+  readonly timeoutMs?: number;
+}
+interface Interface {
+  readonly observe: (query: Query) => Promise<ReadonlyArray<Observation>>;
+}
+declare function make$3(entries: ReadonlyArray<Entry>): Interface;
+declare function defaultMake(options?: DefaultOptions): Interface;
+declare namespace verification_d_exports {
+  export { Config, Provider, ProviderObservation, PublicDns, PublicDnsObservation, Result, observe };
+}
+type PublicDns = PublicDns$1;
+declare const PublicDns: {
+  readonly $is: <Tag extends "Disabled" | "Enabled">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "Disabled";
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "Enabled";
+    readonly policy?: Policy;
+  }, {
+    readonly _tag: Tag;
+  }>;
+  readonly $match: {
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }) => import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+  };
+  readonly Disabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Disabled";
+  }, "_tag">;
+  readonly Enabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Enabled";
+    readonly policy?: Policy;
+  }, "_tag">;
+};
+type Provider = Data.TaggedEnum<{
+  Disabled: {};
+  Enabled: {
+    readonly provider: AsyncInterface;
+    readonly zone: DomainName;
+  };
+}>;
+declare const Provider: {
+  readonly $is: <Tag extends "Disabled" | "Enabled">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "Disabled";
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "Enabled";
+    readonly provider: AsyncInterface;
+    readonly zone: DomainName;
+  }, {
+    readonly _tag: Tag;
+  }>;
+  readonly $match: {
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }) => import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+  };
+  readonly Disabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Disabled";
+  }, "_tag">;
+  readonly Enabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Enabled";
+    readonly provider: AsyncInterface;
+    readonly zone: DomainName;
+  }, "_tag">;
+};
+interface Config {
+  readonly provider?: Provider;
+  readonly publicDns?: PublicDns;
   readonly record: DnsRecord;
-  readonly resolver: AsyncInterface$4;
-  readonly zone: DomainName;
-}): Promise<Result>;
+  readonly resolvers?: ReadonlyArray<Entry>;
+}
+declare function observe(input: Config): Promise<Result>;
 declare namespace cloudflare_doh_d_exports {
-  export { Options$1 as Options, make$1 as make };
+  export { Options$2 as Options, make$2 as make };
 }
-type Options$1 = Options$2;
-declare function make$1(options?: Options$1): AsyncInterface$4;
+type Options$2 = Options$3;
+declare function make$2(options?: Options$2): AsyncInterface$1;
 declare namespace doh_d_exports {
+  export { Options$1 as Options, make$1 as make };
+}
+type Options$1 = Options$4;
+declare function make$1(options: Options$1): AsyncInterface$1;
+declare namespace google_doh_d_exports {
   export { Options, make };
 }
-type Options = Options$3;
-declare function make(options: Options): AsyncInterface$4;
+type Options = Options$5;
+declare function make(options?: Options): AsyncInterface$1;
 //#endregion
 //#region src/index.d.ts
 /** The current package version from the package manifest. */
 declare const VERSION: string;
 //#endregion
-export { cloudflare_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, connection_lifecycle_d_exports as ConnectionLifecycle, deletion_d_exports as Deletion, doh_d_exports as DnsOverHttps, dns_plan_d_exports as DnsPlan, type dns_provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, type dns_resolver_d_exports as DnsResolver, domain_name_d_exports as DomainName, invalid_input_d_exports as InvalidInput, oauth_d_exports as OAuth, provider_auth_d_exports as ProviderAuth, provider_authorization_d_exports as ProviderAuthorization, selection_d_exports as ProviderDiscovery, provisioning_d_exports as Provisioning, secret_d_exports as Secret, type stores_d_exports as Stores, token_d_exports as TokenConnection, VERSION, vercel_d_exports as Vercel, verification_d_exports as Verification, zones_d_exports as Zones };
+export { authorization_lifecycle_d_exports as AuthorizationLifecycle, cloudflare_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, deletion_d_exports as Deletion, diagnostic_d_exports as Diagnostic, doh_d_exports as DnsOverHttps, dns_plan_d_exports as DnsPlan, type dns_provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, type dns_resolver_d_exports as DnsResolver, resolver_pool_d_exports as DnsResolverPool, domain_name_d_exports as DomainName, google_doh_d_exports as GoogleDnsOverHttps, invalid_input_d_exports as InvalidInput, provider_auth_d_exports as ProviderAuth, provider_authorization_d_exports as ProviderAuthorization, provider_context_d_exports as ProviderContext, selection_d_exports as ProviderDiscovery, provisioning_d_exports as Provisioning, secret_d_exports as Secret, VERSION, vercel_d_exports as Vercel, verification_d_exports as Verification, zone_discovery_d_exports as ZoneDiscovery, zones_d_exports as Zones };
 //# sourceMappingURL=index.d.mts.map