domainkit 0.12.2 → 0.14.0

package/dist/Storage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Storage.mjs","names":["Plan.PlanId","Plan.Kind","Plan.Model","Approval.Model","Receipt.Model","Receipt.ReceiptId","Plan.OperationId","DnsRecord.Model","Errors.isDomainKitError","Errors.DomainKitError","Reason.StorageFailed","Principal.Service","Errors.fail","Reason.Busy"],"sources":["../src/Storage.ts"],"sourcesContent":["/**\n * Everything DomainKit persists, behind one service the host installs once. Every method requires\n * `Principal` and is scoped by it. `@domainkit/capsuledb` ships the Postgres implementation;\n * `domainkit/testing` ships the memory one; both pass `Testing.conformance.storage`.\n *\n * Storage never sees plaintext credentials: `Connect` seals secrets through `Custody` before\n * writing a `Credential` row and opens them after reading one.\n *\n * Grouped by noun so the 25-odd methods stay navigable. Implementations must satisfy the\n * invariants documented per group; the conformance suite checks them.\n */\nimport { Context, DateTime, Effect, Layer, Option, Schema } from \"effect\";\n\nimport * as Approval from \"./Approval.ts\";\nimport * as DnsRecord from \"./DnsRecord.ts\";\nimport * as Errors from \"./internal/error.ts\";\nimport * as Reason from \"./Reason.ts\";\nimport { makeMemory } from \"./internal/storage-memory.ts\";\nimport * as Plan from \"./Plan.ts\";\nimport * as Principal from \"./Principal.ts\";\nimport * as Receipt from \"./Receipt.ts\";\n\nexport type Fx<A> = Effect.Effect<A, Errors.DomainKitError, Principal.Service>;\n\n// ---------------------------------------------------------------------------------------------\n// Rows\n// ---------------------------------------------------------------------------------------------\n\nexport const Capability = Schema.Literals([\"dns:read\", \"dns:write\"]);\nexport type Capability = typeof Capability.Type;\n\nexport const AuthMethod = Schema.Literals([\"token\", \"oauth\", \"integration\"]);\nexport type AuthMethod = typeof AuthMethod.Type;\n\n/** Sealed provider credential plus the metadata needed without unsealing it. */\nexport class Credential extends Schema.Class<Credential>(\"@domainkit/Storage/Credential\")({\n  ciphertext: Schema.String,\n  expiresAt: Schema.NullOr(Schema.DateTimeUtcFromString),\n  rotatedAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/** One provider authorization (an OAuth grant or a token) owned by a principal. */\nexport class Authorization extends Schema.Class<Authorization>(\"@domainkit/Storage/Authorization\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  provider: Schema.String,\n  method: AuthMethod,\n  capabilities: Schema.Array(Capability),\n  /** Provider-specific account context (account id, team id, ...) decoded by the provider's `context` schema. */\n  context: Schema.Unknown,\n  revocation: Schema.Literals([\"active\", \"pending\", \"revoked\"]),\n  createdBy: Schema.String,\n  createdAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/** A connection is the principal-facing handle over an authorization; one authorization, many domains. */\nexport class Connection extends Schema.Class<Connection>(\"@domainkit/Storage/Connection\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  authorizationId: Schema.String,\n  createdAt: Schema.DateTimeUtcFromString,\n}) {}\n\nexport class Attachment extends Schema.Class<Attachment>(\"@domainkit/Storage/Attachment\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  connectionId: Schema.String,\n  domain: Schema.String,\n  zone: Schema.String,\n  /** The target's label as the provider gave it at attach time, so a UI names the account without a provider call. */\n  label: Schema.String,\n  /** Provider zone identity (zone id, account id) decoded by the provider's `context` schema. */\n  target: Schema.Unknown,\n  createdAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/** Interactive-flow state between `Connect.start` and `Connect.complete`. */\nexport class Continuation extends Schema.Class<Continuation>(\"@domainkit/Storage/Continuation\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  actorId: Schema.String,\n  provider: Schema.String,\n  payload: Schema.Unknown,\n  returnTo: Schema.NullOr(Schema.String),\n  expiresAt: Schema.DateTimeUtcFromString,\n}) {}\n\nexport const AttemptStatus = Schema.Literals([\n  \"planned\",\n  \"approved\",\n  \"applying\",\n  \"complete\",\n  \"partial\",\n  \"failed\",\n  \"expired\",\n  \"rejected\",\n]);\nexport type AttemptStatus = typeof AttemptStatus.Type;\n\n/** Who declined the plan, why, and when. Terminal: the domain needs a new plan. */\nexport const Rejection = Schema.Struct({\n  actorId: Schema.String,\n  reason: Schema.NullOr(Schema.String),\n  at: Schema.DateTimeUtcFromString,\n});\nexport type Rejection = typeof Rejection.Type;\n\n/** One durable plan -> approval -> receipt lifecycle. */\nexport class Attempt extends Schema.Class<Attempt>(\"@domainkit/Storage/Attempt\")({\n  id: Plan.PlanId,\n  ownerId: Schema.String,\n  attachmentId: Schema.String,\n  kind: Plan.Kind,\n  status: AttemptStatus,\n  plan: Plan.Model,\n  approval: Schema.NullOr(Approval.Model),\n  receipt: Schema.NullOr(Receipt.Model),\n  rejection: Schema.NullOr(Rejection),\n  /** Cleanup attempts point at the provisioning receipt they undo. */\n  sourceReceiptId: Schema.NullOr(Receipt.ReceiptId),\n  leaseExpiresAt: Schema.NullOr(Schema.DateTimeUtcFromString),\n  /** Why the last apply stopped before any write; cleared on the next claim. */\n  failure: Schema.NullOr(Schema.String),\n  updatedAt: Schema.DateTimeUtcFromString,\n}) {}\n\nexport const RequirementStatus = Schema.Literals([\"satisfied\", \"missing\", \"mismatch\", \"unknown\"]);\nexport type RequirementStatus = typeof RequirementStatus.Type;\n\nexport const Overall = Schema.Literals([\"ready\", \"pending\", \"failed\"]);\nexport type Overall = typeof Overall.Type;\n\n/**\n * Latest observed readiness for one domain, written by `Verify.observe`. Keyed by domain so\n * observe-only hosts (no attachment, public DNS alone) get the same row; `attachmentId` links the\n * attachment when one exists.\n */\nexport class Readiness extends Schema.Class<Readiness>(\"@domainkit/Storage/Readiness\")({\n  domain: Schema.String,\n  attachmentId: Schema.NullOr(Schema.String),\n  ownerId: Schema.String,\n  overall: Overall,\n  requirements: Schema.Array(\n    Schema.Struct({\n      operationId: Schema.NullOr(Plan.OperationId),\n      record: DnsRecord.Model,\n      status: RequirementStatus,\n      /** Encoded `Verify.Evidence` values. */\n      evidence: Schema.Array(Schema.Unknown),\n    }),\n  ),\n  /** Encoded `Verify.HostEvidence` values, keyed by `source` on merge. */\n  host: Schema.Array(Schema.Unknown),\n  /** When the current pending streak began; drives the backoff ladder. */\n  pendingSince: Schema.NullOr(Schema.DateTimeUtcFromString),\n  checkedAt: Schema.DateTimeUtcFromString,\n  nextCheckAt: Schema.NullOr(Schema.DateTimeUtcFromString),\n}) {}\n\n// ---------------------------------------------------------------------------------------------\n// Service\n// ---------------------------------------------------------------------------------------------\n\nexport interface Interface {\n  readonly authorizations: {\n    /**\n     * Insert, or CAS-replace when `expectedId` is set: the row must exist under this owner with an\n     * active revocation state, else `NotFound` / `Busy`.\n     */\n    readonly upsert: (input: {\n      readonly authorization: Authorization;\n      readonly credential: Credential;\n      readonly expectedId?: string;\n    }) => Fx<Authorization>;\n    readonly get: (id: string) => Fx<Authorization>;\n    readonly credential: (id: string) => Fx<Credential>;\n    readonly rotate: (id: string, credential: Credential) => Fx<void>;\n    readonly promoteCapabilities: (id: string, capabilities: ReadonlyArray<Capability>) => Fx<void>;\n    /**\n     * Two-phase: mark `pending`, run `revoke` outside any transaction, then delete. A failed\n     * `revoke` leaves the row pending; `recoverRevocations` finishes it later.\n     */\n    readonly revoke: <E, R>(\n      id: string,\n      revoke: Effect.Effect<void, E, R>,\n    ) => Effect.Effect<void, Errors.DomainKitError | E, Principal.Service | R>;\n    readonly recoverRevocations: <E, R>(\n      revoke: (authorization: Authorization) => Effect.Effect<void, E, R>,\n    ) => Effect.Effect<number, Errors.DomainKitError | E, Principal.Service | R>;\n  };\n  readonly connections: {\n    readonly create: (authorizationId: string) => Fx<Connection>;\n    readonly get: (id: string) => Fx<Connection>;\n    readonly list: (filter?: { readonly provider?: string }) => Fx<ReadonlyArray<Connection>>;\n    /** Fails `InvalidInput` while attachments still reference the connection. */\n    readonly remove: (id: string) => Fx<void>;\n  };\n  readonly attachments: {\n    /** One attachment per (owner, domain); a duplicate fails `InvalidInput`. */\n    readonly create: (input: {\n      readonly connectionId: string;\n      readonly domain: string;\n      readonly zone: string;\n      readonly label: string;\n      readonly target: unknown;\n    }) => Fx<Attachment>;\n    readonly get: (id: string) => Fx<Attachment>;\n    readonly byDomain: (domain: string) => Fx<Option.Option<Attachment>>;\n    readonly list: (connectionId: string) => Fx<ReadonlyArray<Attachment>>;\n    readonly remove: (id: string) => Fx<void>;\n  };\n  readonly continuations: {\n    readonly put: (continuation: Continuation) => Fx<void>;\n    /** Read without spending; a late read fails `Expired`. */\n    readonly get: (id: string) => Fx<Continuation>;\n    /** Exactly-once: the second consume of the same id fails `NotFound`; a late one fails `Expired`. */\n    readonly consume: (id: string) => Fx<Continuation>;\n  };\n  readonly attempts: {\n    readonly create: (attempt: Attempt) => Fx<Attempt>;\n    readonly get: (id: Plan.PlanId) => Fx<Attempt>;\n    readonly byApproval: (id: Approval.ApprovalId) => Fx<Attempt>;\n    readonly byReceipt: (id: Receipt.ReceiptId) => Fx<Attempt>;\n    readonly latest: (attachmentId: string, kind: Plan.Kind) => Fx<Option.Option<Attempt>>;\n    /** `planned` -> `approved`; approving again with the same approval id is a no-op, anything else fails `Stale`. */\n    readonly approve: (id: Plan.PlanId, approval: Approval.Model) => Fx<Attempt>;\n    /**\n     * `planned` -> `rejected` (terminal). Rejecting again returns the row unchanged; any other\n     * status fails `Stale`, `expired` fails `Expired`, and a digest mismatch fails `Stale`.\n     */\n    readonly reject: (\n      id: Plan.PlanId,\n      input: {\n        readonly digest: Plan.Digest;\n        readonly actorId: string;\n        readonly reason: string | null;\n      },\n    ) => Fx<Attempt>;\n    /**\n     * Atomic transition to `applying` with a lease from `approved`, `failed`, or an expired\n     * `applying`; fails `Busy` while a lease is live and `Stale` from any other status.\n     */\n    readonly claim: (id: Plan.PlanId, lease: DateTime.Utc) => Fx<Attempt>;\n    readonly complete: (id: Plan.PlanId, receipt: Receipt.Model) => Fx<Attempt>;\n    readonly fail: (id: Plan.PlanId, message: string) => Fx<Attempt>;\n  };\n  readonly readiness: {\n    /** One row per (owner, domain); `attachmentId`, when set, must exist for the owner. */\n    readonly put: (readiness: Readiness) => Fx<void>;\n    readonly get: (domain: string) => Fx<Option.Option<Readiness>>;\n  };\n  /** Single-flight guard keyed by string (credential refresh, apply). Fails `Busy` rather than waiting. */\n  readonly withLock: <A, E, R>(\n    key: string,\n    effect: Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | Errors.DomainKitError, R | Principal.Service>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/Storage\") {}\n\nexport interface MemoryOptions {\n  /** Fault injection: runs before every mutation commits; failing here leaves state untouched. */\n  readonly beforeCommit?: (operation: string) => Effect.Effect<void, Errors.DomainKitError>;\n}\n\n/** In-memory implementation for tests and local development. Not for production. */\nexport const layerMemory: Layer.Layer<Service> = Layer.sync(Service)(() => makeMemory());\n\n/** `layerMemory` with fault injection for storage-failure tests. */\nexport const layerMemoryWith = (options: MemoryOptions): Layer.Layer<Service> =>\n  Layer.sync(Service)(() => makeMemory(options));\n\nexport { makeMemory };\n\n// ---------------------------------------------------------------------------------------------\n// Async adapter\n// ---------------------------------------------------------------------------------------------\n\n/**\n * A Promise-shaped implementation for hosts that persist without Effect. Every method takes the\n * principal explicitly. Rejections become `StorageFailed`; reject with a `DomainKit.Error` to keep\n * a typed reason. Two-phase revocation and locking are split into plain steps so no callback has\n * to run an Effect.\n */\nexport interface AsyncInterface {\n  readonly authorizations: {\n    readonly upsert: (\n      principal: Principal.Interface,\n      input: {\n        readonly authorization: Authorization;\n        readonly credential: Credential;\n        readonly expectedId?: string;\n      },\n    ) => Promise<Authorization>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Authorization>;\n    readonly credential: (principal: Principal.Interface, id: string) => Promise<Credential>;\n    readonly rotate: (\n      principal: Principal.Interface,\n      id: string,\n      credential: Credential,\n    ) => Promise<void>;\n    readonly promoteCapabilities: (\n      principal: Principal.Interface,\n      id: string,\n      capabilities: ReadonlyArray<Capability>,\n    ) => Promise<void>;\n    /** Mark `pending` durably; must be idempotent. */\n    readonly prepareRevocation: (\n      principal: Principal.Interface,\n      id: string,\n    ) => Promise<Authorization>;\n    /** Delete the authorization after the provider confirmed revocation. */\n    readonly completeRevocation: (principal: Principal.Interface, id: string) => Promise<void>;\n    readonly pendingRevocations: (\n      principal: Principal.Interface,\n    ) => Promise<ReadonlyArray<Authorization>>;\n  };\n  readonly connections: {\n    readonly create: (\n      principal: Principal.Interface,\n      authorizationId: string,\n    ) => Promise<Connection>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Connection>;\n    readonly list: (\n      principal: Principal.Interface,\n      filter?: { readonly provider?: string },\n    ) => Promise<ReadonlyArray<Connection>>;\n    readonly remove: (principal: Principal.Interface, id: string) => Promise<void>;\n  };\n  readonly attachments: {\n    readonly create: (\n      principal: Principal.Interface,\n      input: {\n        readonly connectionId: string;\n        readonly domain: string;\n        readonly zone: string;\n        readonly label: string;\n        readonly target: unknown;\n      },\n    ) => Promise<Attachment>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Attachment>;\n    readonly byDomain: (\n      principal: Principal.Interface,\n      domain: string,\n    ) => Promise<Attachment | null>;\n    readonly list: (\n      principal: Principal.Interface,\n      connectionId: string,\n    ) => Promise<ReadonlyArray<Attachment>>;\n    readonly remove: (principal: Principal.Interface, id: string) => Promise<void>;\n  };\n  readonly continuations: {\n    readonly put: (principal: Principal.Interface, continuation: Continuation) => Promise<void>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Continuation>;\n    readonly consume: (principal: Principal.Interface, id: string) => Promise<Continuation>;\n  };\n  readonly attempts: {\n    readonly create: (principal: Principal.Interface, attempt: Attempt) => Promise<Attempt>;\n    readonly get: (principal: Principal.Interface, id: Plan.PlanId) => Promise<Attempt>;\n    readonly byApproval: (\n      principal: Principal.Interface,\n      id: Approval.ApprovalId,\n    ) => Promise<Attempt>;\n    readonly byReceipt: (principal: Principal.Interface, id: Receipt.ReceiptId) => Promise<Attempt>;\n    readonly latest: (\n      principal: Principal.Interface,\n      attachmentId: string,\n      kind: Plan.Kind,\n    ) => Promise<Attempt | null>;\n    readonly approve: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      approval: Approval.Model,\n    ) => Promise<Attempt>;\n    readonly reject: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      input: {\n        readonly digest: Plan.Digest;\n        readonly actorId: string;\n        readonly reason: string | null;\n      },\n    ) => Promise<Attempt>;\n    readonly claim: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      lease: DateTime.Utc,\n    ) => Promise<Attempt>;\n    readonly complete: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      receipt: Receipt.Model,\n    ) => Promise<Attempt>;\n    readonly fail: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      message: string,\n    ) => Promise<Attempt>;\n  };\n  readonly readiness: {\n    readonly put: (principal: Principal.Interface, readiness: Readiness) => Promise<void>;\n    readonly get: (principal: Principal.Interface, domain: string) => Promise<Readiness | null>;\n  };\n  /** Return `false` when another holder has the key. */\n  readonly acquireLock: (principal: Principal.Interface, key: string) => Promise<boolean>;\n  readonly releaseLock: (principal: Principal.Interface, key: string) => Promise<void>;\n}\n\nconst storageFailed = (operation: string) => (cause: unknown) =>\n  Errors.isDomainKitError(cause)\n    ? cause\n    : new Errors.DomainKitError({\n        reason: new Reason.StorageFailed({\n          operation,\n          message: cause instanceof Error ? cause.message : String(cause),\n        }),\n      });\n\n/** Wraps a Promise-shaped implementation. Rejections become `StorageFailed`. */\nexport const fromAsync = (service: AsyncInterface): Interface => {\n  const call = <A>(operation: string, run: (principal: Principal.Interface) => Promise<A>): Fx<A> =>\n    Effect.flatMap(Principal.Service, (principal) =>\n      Effect.tryPromise({ try: () => run(principal), catch: storageFailed(operation) }),\n    );\n  const option = <A>(\n    operation: string,\n    run: (principal: Principal.Interface) => Promise<A | null>,\n  ) => call(operation, run).pipe(Effect.map(Option.fromNullishOr));\n  return {\n    authorizations: {\n      upsert: (input) =>\n        call(\"authorizations.upsert\", (p) => service.authorizations.upsert(p, input)),\n      get: (id) => call(\"authorizations.get\", (p) => service.authorizations.get(p, id)),\n      credential: (id) =>\n        call(\"authorizations.credential\", (p) => service.authorizations.credential(p, id)),\n      rotate: (id, credential) =>\n        call(\"authorizations.rotate\", (p) => service.authorizations.rotate(p, id, credential)),\n      promoteCapabilities: (id, capabilities) =>\n        call(\"authorizations.promoteCapabilities\", (p) =>\n          service.authorizations.promoteCapabilities(p, id, capabilities),\n        ),\n      revoke: (id, revoke) =>\n        call(\"authorizations.prepareRevocation\", (p) =>\n          service.authorizations.prepareRevocation(p, id),\n        ).pipe(\n          Effect.flatMap(() => revoke),\n          Effect.flatMap(() =>\n            call(\"authorizations.completeRevocation\", (p) =>\n              service.authorizations.completeRevocation(p, id),\n            ),\n          ),\n        ),\n      recoverRevocations: (revoke) =>\n        call(\"authorizations.pendingRevocations\", (p) =>\n          service.authorizations.pendingRevocations(p),\n        ).pipe(\n          Effect.flatMap((pending) =>\n            Effect.forEach(pending, (authorization) =>\n              revoke(authorization).pipe(\n                Effect.flatMap(() =>\n                  call(\"authorizations.completeRevocation\", (p) =>\n                    service.authorizations.completeRevocation(p, authorization.id),\n                  ),\n                ),\n              ),\n            ),\n          ),\n          Effect.map((completed) => completed.length),\n        ),\n    },\n    connections: {\n      create: (authorizationId) =>\n        call(\"connections.create\", (p) => service.connections.create(p, authorizationId)),\n      get: (id) => call(\"connections.get\", (p) => service.connections.get(p, id)),\n      list: (filter) => call(\"connections.list\", (p) => service.connections.list(p, filter)),\n      remove: (id) => call(\"connections.remove\", (p) => service.connections.remove(p, id)),\n    },\n    attachments: {\n      create: (input) => call(\"attachments.create\", (p) => service.attachments.create(p, input)),\n      get: (id) => call(\"attachments.get\", (p) => service.attachments.get(p, id)),\n      byDomain: (domain) =>\n        option(\"attachments.byDomain\", (p) => service.attachments.byDomain(p, domain)),\n      list: (connectionId) =>\n        call(\"attachments.list\", (p) => service.attachments.list(p, connectionId)),\n      remove: (id) => call(\"attachments.remove\", (p) => service.attachments.remove(p, id)),\n    },\n    continuations: {\n      put: (continuation) =>\n        call(\"continuations.put\", (p) => service.continuations.put(p, continuation)),\n      get: (id) => call(\"continuations.get\", (p) => service.continuations.get(p, id)),\n      consume: (id) => call(\"continuations.consume\", (p) => service.continuations.consume(p, id)),\n    },\n    attempts: {\n      create: (attempt) => call(\"attempts.create\", (p) => service.attempts.create(p, attempt)),\n      get: (id) => call(\"attempts.get\", (p) => service.attempts.get(p, id)),\n      byApproval: (id) => call(\"attempts.byApproval\", (p) => service.attempts.byApproval(p, id)),\n      byReceipt: (id) => call(\"attempts.byReceipt\", (p) => service.attempts.byReceipt(p, id)),\n      latest: (attachmentId, kind) =>\n        option(\"attempts.latest\", (p) => service.attempts.latest(p, attachmentId, kind)),\n      approve: (id, approval) =>\n        call(\"attempts.approve\", (p) => service.attempts.approve(p, id, approval)),\n      reject: (id, input) => call(\"attempts.reject\", (p) => service.attempts.reject(p, id, input)),\n      claim: (id, lease) => call(\"attempts.claim\", (p) => service.attempts.claim(p, id, lease)),\n      complete: (id, receipt) =>\n        call(\"attempts.complete\", (p) => service.attempts.complete(p, id, receipt)),\n      fail: (id, message) => call(\"attempts.fail\", (p) => service.attempts.fail(p, id, message)),\n    },\n    readiness: {\n      put: (readiness) => call(\"readiness.put\", (p) => service.readiness.put(p, readiness)),\n      get: (domain) => option(\"readiness.get\", (p) => service.readiness.get(p, domain)),\n    },\n    withLock: (key, effect) =>\n      Effect.acquireRelease(\n        call(\"acquireLock\", (p) => service.acquireLock(p, key)).pipe(\n          Effect.flatMap((acquired) =>\n            acquired ? Effect.void : Errors.fail(new Reason.Busy({ key })),\n          ),\n        ),\n        () => call(\"releaseLock\", (p) => service.releaseLock(p, key)).pipe(Effect.ignore),\n      ).pipe(\n        Effect.flatMap(() => effect),\n        Effect.scoped,\n      ),\n  };\n};\n\nexport const layerFromAsync = (service: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service)(fromAsync(service));\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,aAAa,OAAO,SAAS,CAAC,YAAY,WAAW,CAAC;AAGnE,MAAa,aAAa,OAAO,SAAS;CAAC;CAAS;CAAS;AAAa,CAAC;;AAI3E,IAAa,aAAb,cAAgC,OAAO,MAAkB,+BAA+B,CAAC,CAAC;CACxF,YAAY,OAAO;CACnB,WAAW,OAAO,OAAO,OAAO,qBAAqB;CACrD,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,gBAAb,cAAmC,OAAO,MAAqB,kCAAkC,CAAC,CAAC;CACjG,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,UAAU,OAAO;CACjB,QAAQ;CACR,cAAc,OAAO,MAAM,UAAU;;CAErC,SAAS,OAAO;CAChB,YAAY,OAAO,SAAS;EAAC;EAAU;EAAW;CAAS,CAAC;CAC5D,WAAW,OAAO;CAClB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,aAAb,cAAgC,OAAO,MAAkB,+BAA+B,CAAC,CAAC;CACxF,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,iBAAiB,OAAO;CACxB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,aAAb,cAAgC,OAAO,MAAkB,+BAA+B,CAAC,CAAC;CACxF,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,cAAc,OAAO;CACrB,QAAQ,OAAO;CACf,MAAM,OAAO;;CAEb,OAAO,OAAO;;CAEd,QAAQ,OAAO;CACf,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,eAAb,cAAkC,OAAO,MAAoB,iCAAiC,CAAC,CAAC;CAC9F,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,SAAS,OAAO;CAChB,UAAU,OAAO;CACjB,SAAS,OAAO;CAChB,UAAU,OAAO,OAAO,OAAO,MAAM;CACrC,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,gBAAgB,OAAO,SAAS;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAID,MAAa,YAAY,OAAO,OAAO;CACrC,SAAS,OAAO;CAChB,QAAQ,OAAO,OAAO,OAAO,MAAM;CACnC,IAAI,OAAO;AACb,CAAC;;AAID,IAAa,UAAb,cAA6B,OAAO,MAAe,4BAA4B,CAAC,CAAC;CAC/E,IAAIA;CACJ,SAAS,OAAO;CAChB,cAAc,OAAO;CACrB,MAAMC;CACN,QAAQ;CACR,MAAMC;CACN,UAAU,OAAO,OAAOC,OAAc;CACtC,SAAS,OAAO,OAAOC,OAAa;CACpC,WAAW,OAAO,OAAO,SAAS;;CAElC,iBAAiB,OAAO,OAAOC,SAAiB;CAChD,gBAAgB,OAAO,OAAO,OAAO,qBAAqB;;CAE1D,SAAS,OAAO,OAAO,OAAO,MAAM;CACpC,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,oBAAoB,OAAO,SAAS;CAAC;CAAa;CAAW;CAAY;AAAS,CAAC;AAGhG,MAAa,UAAU,OAAO,SAAS;CAAC;CAAS;CAAW;AAAQ,CAAC;;;;;;AAQrE,IAAa,YAAb,cAA+B,OAAO,MAAiB,8BAA8B,CAAC,CAAC;CACrF,QAAQ,OAAO;CACf,cAAc,OAAO,OAAO,OAAO,MAAM;CACzC,SAAS,OAAO;CAChB,SAAS;CACT,cAAc,OAAO,MACnB,OAAO,OAAO;EACZ,aAAa,OAAO,OAAOC,WAAgB;EAC3C,QAAQC;EACR,QAAQ;;EAER,UAAU,OAAO,MAAM,OAAO,OAAO;CACvC,CAAC,CACH;;CAEA,MAAM,OAAO,MAAM,OAAO,OAAO;;CAEjC,cAAc,OAAO,OAAO,OAAO,qBAAqB;CACxD,WAAW,OAAO;CAClB,aAAa,OAAO,OAAO,OAAO,qBAAqB;AACzD,CAAC,CAAC,CAAC,CAAC;AAqGJ,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;;AAQ1F,MAAa,cAAoC,MAAM,KAAK,OAAO,CAAC,OAAO,WAAW,CAAC;;AAGvF,MAAa,mBAAmB,YAC9B,MAAM,KAAK,OAAO,CAAC,OAAO,WAAW,OAAO,CAAC;AA0I/C,MAAM,iBAAiB,eAAuB,UAC5CC,iBAAwB,KAAK,IACzB,QACA,IAAIC,eAAsB,EACxB,QAAQ,IAAIC,cAAqB;CAC/B;CACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAChE,CAAC,EACH,CAAC;;AAGP,MAAa,aAAa,YAAuC;CAC/D,MAAM,QAAW,WAAmB,QAClC,OAAO,QAAQC,YAAoB,cACjC,OAAO,WAAW;EAAE,WAAW,IAAI,SAAS;EAAG,OAAO,cAAc,SAAS;CAAE,CAAC,CAClF;CACF,MAAM,UACJ,WACA,QACG,KAAK,WAAW,GAAG,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,aAAa,CAAC;CAC/D,OAAO;EACL,gBAAgB;GACd,SAAS,UACP,KAAK,0BAA0B,MAAM,QAAQ,eAAe,OAAO,GAAG,KAAK,CAAC;GAC9E,MAAM,OAAO,KAAK,uBAAuB,MAAM,QAAQ,eAAe,IAAI,GAAG,EAAE,CAAC;GAChF,aAAa,OACX,KAAK,8BAA8B,MAAM,QAAQ,eAAe,WAAW,GAAG,EAAE,CAAC;GACnF,SAAS,IAAI,eACX,KAAK,0BAA0B,MAAM,QAAQ,eAAe,OAAO,GAAG,IAAI,UAAU,CAAC;GACvF,sBAAsB,IAAI,iBACxB,KAAK,uCAAuC,MAC1C,QAAQ,eAAe,oBAAoB,GAAG,IAAI,YAAY,CAChE;GACF,SAAS,IAAI,WACX,KAAK,qCAAqC,MACxC,QAAQ,eAAe,kBAAkB,GAAG,EAAE,CAChD,CAAC,CAAC,KACA,OAAO,cAAc,MAAM,GAC3B,OAAO,cACL,KAAK,sCAAsC,MACzC,QAAQ,eAAe,mBAAmB,GAAG,EAAE,CACjD,CACF,CACF;GACF,qBAAqB,WACnB,KAAK,sCAAsC,MACzC,QAAQ,eAAe,mBAAmB,CAAC,CAC7C,CAAC,CAAC,KACA,OAAO,SAAS,YACd,OAAO,QAAQ,UAAU,kBACvB,OAAO,aAAa,CAAC,CAAC,KACpB,OAAO,cACL,KAAK,sCAAsC,MACzC,QAAQ,eAAe,mBAAmB,GAAG,cAAc,EAAE,CAC/D,CACF,CACF,CACF,CACF,GACA,OAAO,KAAK,cAAc,UAAU,MAAM,CAC5C;EACJ;EACA,aAAa;GACX,SAAS,oBACP,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,eAAe,CAAC;GAClF,MAAM,OAAO,KAAK,oBAAoB,MAAM,QAAQ,YAAY,IAAI,GAAG,EAAE,CAAC;GAC1E,OAAO,WAAW,KAAK,qBAAqB,MAAM,QAAQ,YAAY,KAAK,GAAG,MAAM,CAAC;GACrF,SAAS,OAAO,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,EAAE,CAAC;EACrF;EACA,aAAa;GACX,SAAS,UAAU,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,KAAK,CAAC;GACzF,MAAM,OAAO,KAAK,oBAAoB,MAAM,QAAQ,YAAY,IAAI,GAAG,EAAE,CAAC;GAC1E,WAAW,WACT,OAAO,yBAAyB,MAAM,QAAQ,YAAY,SAAS,GAAG,MAAM,CAAC;GAC/E,OAAO,iBACL,KAAK,qBAAqB,MAAM,QAAQ,YAAY,KAAK,GAAG,YAAY,CAAC;GAC3E,SAAS,OAAO,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,EAAE,CAAC;EACrF;EACA,eAAe;GACb,MAAM,iBACJ,KAAK,sBAAsB,MAAM,QAAQ,cAAc,IAAI,GAAG,YAAY,CAAC;GAC7E,MAAM,OAAO,KAAK,sBAAsB,MAAM,QAAQ,cAAc,IAAI,GAAG,EAAE,CAAC;GAC9E,UAAU,OAAO,KAAK,0BAA0B,MAAM,QAAQ,cAAc,QAAQ,GAAG,EAAE,CAAC;EAC5F;EACA,UAAU;GACR,SAAS,YAAY,KAAK,oBAAoB,MAAM,QAAQ,SAAS,OAAO,GAAG,OAAO,CAAC;GACvF,MAAM,OAAO,KAAK,iBAAiB,MAAM,QAAQ,SAAS,IAAI,GAAG,EAAE,CAAC;GACpE,aAAa,OAAO,KAAK,wBAAwB,MAAM,QAAQ,SAAS,WAAW,GAAG,EAAE,CAAC;GACzF,YAAY,OAAO,KAAK,uBAAuB,MAAM,QAAQ,SAAS,UAAU,GAAG,EAAE,CAAC;GACtF,SAAS,cAAc,SACrB,OAAO,oBAAoB,MAAM,QAAQ,SAAS,OAAO,GAAG,cAAc,IAAI,CAAC;GACjF,UAAU,IAAI,aACZ,KAAK,qBAAqB,MAAM,QAAQ,SAAS,QAAQ,GAAG,IAAI,QAAQ,CAAC;GAC3E,SAAS,IAAI,UAAU,KAAK,oBAAoB,MAAM,QAAQ,SAAS,OAAO,GAAG,IAAI,KAAK,CAAC;GAC3F,QAAQ,IAAI,UAAU,KAAK,mBAAmB,MAAM,QAAQ,SAAS,MAAM,GAAG,IAAI,KAAK,CAAC;GACxF,WAAW,IAAI,YACb,KAAK,sBAAsB,MAAM,QAAQ,SAAS,SAAS,GAAG,IAAI,OAAO,CAAC;GAC5E,OAAO,IAAI,YAAY,KAAK,kBAAkB,MAAM,QAAQ,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC;EAC3F;EACA,WAAW;GACT,MAAM,cAAc,KAAK,kBAAkB,MAAM,QAAQ,UAAU,IAAI,GAAG,SAAS,CAAC;GACpF,MAAM,WAAW,OAAO,kBAAkB,MAAM,QAAQ,UAAU,IAAI,GAAG,MAAM,CAAC;EAClF;EACA,WAAW,KAAK,WACd,OAAO,eACL,KAAK,gBAAgB,MAAM,QAAQ,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,KACtD,OAAO,SAAS,aACd,WAAW,OAAO,OAAOC,KAAY,IAAIC,KAAY,EAAE,IAAI,CAAC,CAAC,CAC/D,CACF,SACM,KAAK,gBAAgB,MAAM,QAAQ,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM,CAClF,CAAC,CAAC,KACA,OAAO,cAAc,MAAM,GAC3B,OAAO,MACT;CACJ;AACF;AAEA,MAAa,kBAAkB,YAC7B,MAAM,QAAQ,OAAO,CAAC,CAAC,UAAU,OAAO,CAAC"}
+{"version":3,"file":"Storage.mjs","names":["Plan.PlanId","Plan.Kind","Plan.Model","Approval.Model","Receipt.Model","Receipt.ReceiptId","Plan.OperationId","DnsRecord.Model","Errors.isDomainKitError","Errors.DomainKitError","Reason.StorageFailed","Principal.Service","Errors.fail","Reason.Busy"],"sources":["../src/Storage.ts"],"sourcesContent":["/**\n * Everything DomainKit persists, behind one service the host installs once. Every method requires\n * `Principal` and is scoped by it. `@domainkit/capsuledb` ships the Postgres implementation;\n * `domainkit/testing` ships the memory one; both pass `Testing.conformance.storage`.\n *\n * Storage never sees plaintext credentials: `Connect` seals secrets through `Custody` before\n * writing a `Credential` row and opens them after reading one.\n *\n * Grouped by noun so the 25-odd methods stay navigable. Implementations must satisfy the\n * invariants documented per group; the conformance suite checks them.\n */\nimport { Context, DateTime, Effect, Layer, Option, Schema } from \"effect\";\n\nimport * as Approval from \"./Approval.ts\";\nimport * as DnsRecord from \"./DnsRecord.ts\";\nimport * as Errors from \"./internal/error.ts\";\nimport * as Reason from \"./Reason.ts\";\nimport { makeMemory } from \"./internal/storage-memory.ts\";\nimport * as Plan from \"./Plan.ts\";\nimport * as Principal from \"./Principal.ts\";\nimport * as Receipt from \"./Receipt.ts\";\n\nexport type Fx<A> = Effect.Effect<A, Errors.DomainKitError, Principal.Service>;\n\n// ---------------------------------------------------------------------------------------------\n// Rows\n// ---------------------------------------------------------------------------------------------\n\nexport const Capability = Schema.Literals([\"dns:read\", \"dns:write\"]);\nexport type Capability = typeof Capability.Type;\n\nexport const AuthMethod = Schema.Literals([\"token\", \"oauth\", \"integration\"]);\nexport type AuthMethod = typeof AuthMethod.Type;\n\n/** Sealed provider credential plus the metadata needed without unsealing it. */\nexport class Credential extends Schema.Class<Credential>(\"@domainkit/Storage/Credential\")({\n  ciphertext: Schema.String,\n  expiresAt: Schema.NullOr(Schema.DateTimeUtcFromString),\n  rotatedAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/** One provider authorization (an OAuth grant or a token) owned by a principal. */\nexport class Authorization extends Schema.Class<Authorization>(\"@domainkit/Storage/Authorization\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  provider: Schema.String,\n  method: AuthMethod,\n  capabilities: Schema.Array(Capability),\n  /** Provider-specific account context (account id, team id, ...) decoded by the provider's `context` schema. */\n  context: Schema.Unknown,\n  revocation: Schema.Literals([\"active\", \"pending\", \"revoked\"]),\n  createdBy: Schema.String,\n  createdAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/** A connection is the principal-facing handle over an authorization; one authorization, many domains. */\nexport class Connection extends Schema.Class<Connection>(\"@domainkit/Storage/Connection\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  authorizationId: Schema.String,\n  createdAt: Schema.DateTimeUtcFromString,\n}) {}\n\nexport class Attachment extends Schema.Class<Attachment>(\"@domainkit/Storage/Attachment\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  connectionId: Schema.String,\n  domain: Schema.String,\n  zone: Schema.String,\n  /** The target's label as the provider gave it at attach time, so a UI names the account without a provider call. */\n  label: Schema.String,\n  /** Provider zone identity (zone id, account id) decoded by the provider's `context` schema. */\n  target: Schema.Unknown,\n  createdAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/** Interactive-flow state between `Connect.start` and `Connect.complete`. */\nexport class Continuation extends Schema.Class<Continuation>(\"@domainkit/Storage/Continuation\")({\n  id: Schema.String,\n  ownerId: Schema.String,\n  actorId: Schema.String,\n  provider: Schema.String,\n  payload: Schema.Unknown,\n  returnTo: Schema.NullOr(Schema.String),\n  expiresAt: Schema.DateTimeUtcFromString,\n}) {}\n\n/**\n * Who a continuation belongs to, without the continuation itself. `payload` has no place here: it\n * carries the PKCE `codeVerifier`, which only the owner-scoped read may reach.\n */\nexport class ContinuationHeader extends Schema.Class<ContinuationHeader>(\n  \"@domainkit/Storage/ContinuationHeader\",\n)({\n  ownerId: Schema.String,\n  actorId: Schema.String,\n  provider: Schema.String,\n  expiresAt: Schema.DateTimeUtcFromString,\n}) {}\n\nexport const AttemptStatus = Schema.Literals([\n  \"planned\",\n  \"approved\",\n  \"applying\",\n  \"complete\",\n  \"partial\",\n  \"failed\",\n  \"expired\",\n  \"rejected\",\n]);\nexport type AttemptStatus = typeof AttemptStatus.Type;\n\n/** Who declined the plan, why, and when. Terminal: the domain needs a new plan. */\nexport const Rejection = Schema.Struct({\n  actorId: Schema.String,\n  reason: Schema.NullOr(Schema.String),\n  at: Schema.DateTimeUtcFromString,\n});\nexport type Rejection = typeof Rejection.Type;\n\n/** One durable plan -> approval -> receipt lifecycle. */\nexport class Attempt extends Schema.Class<Attempt>(\"@domainkit/Storage/Attempt\")({\n  id: Plan.PlanId,\n  ownerId: Schema.String,\n  attachmentId: Schema.String,\n  kind: Plan.Kind,\n  status: AttemptStatus,\n  plan: Plan.Model,\n  approval: Schema.NullOr(Approval.Model),\n  receipt: Schema.NullOr(Receipt.Model),\n  rejection: Schema.NullOr(Rejection),\n  /** Cleanup attempts point at the provisioning receipt they undo. */\n  sourceReceiptId: Schema.NullOr(Receipt.ReceiptId),\n  leaseExpiresAt: Schema.NullOr(Schema.DateTimeUtcFromString),\n  /** Why the last apply stopped before any write; cleared on the next claim. */\n  failure: Schema.NullOr(Schema.String),\n  updatedAt: Schema.DateTimeUtcFromString,\n}) {}\n\nexport const RequirementStatus = Schema.Literals([\"satisfied\", \"missing\", \"mismatch\", \"unknown\"]);\nexport type RequirementStatus = typeof RequirementStatus.Type;\n\nexport const Overall = Schema.Literals([\"ready\", \"pending\", \"failed\"]);\nexport type Overall = typeof Overall.Type;\n\n/**\n * Latest observed readiness for one domain, written by `Verify.observe`. Keyed by domain so\n * observe-only hosts (no attachment, public DNS alone) get the same row; `attachmentId` links the\n * attachment when one exists.\n */\nexport class Readiness extends Schema.Class<Readiness>(\"@domainkit/Storage/Readiness\")({\n  domain: Schema.String,\n  attachmentId: Schema.NullOr(Schema.String),\n  ownerId: Schema.String,\n  overall: Overall,\n  requirements: Schema.Array(\n    Schema.Struct({\n      operationId: Schema.NullOr(Plan.OperationId),\n      record: DnsRecord.Model,\n      status: RequirementStatus,\n      /** Encoded `Verify.Evidence` values. */\n      evidence: Schema.Array(Schema.Unknown),\n    }),\n  ),\n  /** Encoded `Verify.HostEvidence` values, keyed by `source` on merge. */\n  host: Schema.Array(Schema.Unknown),\n  /** When the current pending streak began; drives the backoff ladder. */\n  pendingSince: Schema.NullOr(Schema.DateTimeUtcFromString),\n  checkedAt: Schema.DateTimeUtcFromString,\n  nextCheckAt: Schema.NullOr(Schema.DateTimeUtcFromString),\n}) {}\n\n// ---------------------------------------------------------------------------------------------\n// Service\n// ---------------------------------------------------------------------------------------------\n\nexport interface Interface {\n  readonly authorizations: {\n    /**\n     * Insert, or CAS-replace when `expectedId` is set: the row must exist under this owner with an\n     * active revocation state, else `NotFound` / `Busy`.\n     */\n    readonly upsert: (input: {\n      readonly authorization: Authorization;\n      readonly credential: Credential;\n      readonly expectedId?: string;\n    }) => Fx<Authorization>;\n    readonly get: (id: string) => Fx<Authorization>;\n    readonly credential: (id: string) => Fx<Credential>;\n    readonly rotate: (id: string, credential: Credential) => Fx<void>;\n    readonly promoteCapabilities: (id: string, capabilities: ReadonlyArray<Capability>) => Fx<void>;\n    /**\n     * Two-phase: mark `pending`, run `revoke` outside any transaction, then delete. A failed\n     * `revoke` leaves the row pending; `recoverRevocations` finishes it later.\n     */\n    readonly revoke: <E, R>(\n      id: string,\n      revoke: Effect.Effect<void, E, R>,\n    ) => Effect.Effect<void, Errors.DomainKitError | E, Principal.Service | R>;\n    readonly recoverRevocations: <E, R>(\n      revoke: (authorization: Authorization) => Effect.Effect<void, E, R>,\n    ) => Effect.Effect<number, Errors.DomainKitError | E, Principal.Service | R>;\n  };\n  readonly connections: {\n    readonly create: (authorizationId: string) => Fx<Connection>;\n    readonly get: (id: string) => Fx<Connection>;\n    readonly list: (filter?: { readonly provider?: string }) => Fx<ReadonlyArray<Connection>>;\n    /** Fails `InvalidInput` while attachments still reference the connection. */\n    readonly remove: (id: string) => Fx<void>;\n  };\n  readonly attachments: {\n    /** One attachment per (owner, domain); a duplicate fails `InvalidInput`. */\n    readonly create: (input: {\n      readonly connectionId: string;\n      readonly domain: string;\n      readonly zone: string;\n      readonly label: string;\n      readonly target: unknown;\n    }) => Fx<Attachment>;\n    readonly get: (id: string) => Fx<Attachment>;\n    readonly byDomain: (domain: string) => Fx<Option.Option<Attachment>>;\n    readonly list: (connectionId: string) => Fx<ReadonlyArray<Attachment>>;\n    readonly remove: (id: string) => Fx<void>;\n  };\n  readonly continuations: {\n    readonly put: (continuation: Continuation) => Fx<void>;\n    /** Read without spending; a late read fails `Expired`. */\n    readonly get: (id: string) => Fx<Continuation>;\n    /**\n     * The flow's owner, actor, provider, and expiry, without a principal and without spending the\n     * row. The one read in this interface that is not tenant-scoped, because `domainkit/server`\n     * has to learn whose flow a provider callback finishes before it can resolve the principal to\n     * scope by; the callback carries a continuation id and a session cookie and nothing else.\n     *\n     * A missing row fails `NotFound` and a stale one fails `Expired`, exactly as `get` does, so an\n     * expired id never reaches a host. `payload` is out of reach here by construction.\n     */\n    readonly header: (id: string) => Effect.Effect<ContinuationHeader, Errors.DomainKitError>;\n    /** Exactly-once: the second consume of the same id fails `NotFound`; a late one fails `Expired`. */\n    readonly consume: (id: string) => Fx<Continuation>;\n  };\n  readonly attempts: {\n    readonly create: (attempt: Attempt) => Fx<Attempt>;\n    readonly get: (id: Plan.PlanId) => Fx<Attempt>;\n    readonly byApproval: (id: Approval.ApprovalId) => Fx<Attempt>;\n    readonly byReceipt: (id: Receipt.ReceiptId) => Fx<Attempt>;\n    readonly latest: (attachmentId: string, kind: Plan.Kind) => Fx<Option.Option<Attempt>>;\n    /** `planned` -> `approved`; approving again with the same approval id is a no-op, anything else fails `Stale`. */\n    readonly approve: (id: Plan.PlanId, approval: Approval.Model) => Fx<Attempt>;\n    /**\n     * `planned` -> `rejected` (terminal). Rejecting again returns the row unchanged; any other\n     * status fails `Stale`, `expired` fails `Expired`, and a digest mismatch fails `Stale`.\n     */\n    readonly reject: (\n      id: Plan.PlanId,\n      input: {\n        readonly digest: Plan.Digest;\n        readonly actorId: string;\n        readonly reason: string | null;\n      },\n    ) => Fx<Attempt>;\n    /**\n     * Atomic transition to `applying` with a lease from `approved`, `failed`, or an expired\n     * `applying`; fails `Busy` while a lease is live and `Stale` from any other status.\n     */\n    readonly claim: (id: Plan.PlanId, lease: DateTime.Utc) => Fx<Attempt>;\n    readonly complete: (id: Plan.PlanId, receipt: Receipt.Model) => Fx<Attempt>;\n    readonly fail: (id: Plan.PlanId, message: string) => Fx<Attempt>;\n  };\n  readonly readiness: {\n    /** One row per (owner, domain); `attachmentId`, when set, must exist for the owner. */\n    readonly put: (readiness: Readiness) => Fx<void>;\n    readonly get: (domain: string) => Fx<Option.Option<Readiness>>;\n  };\n  /** Single-flight guard keyed by string (credential refresh, apply). Fails `Busy` rather than waiting. */\n  readonly withLock: <A, E, R>(\n    key: string,\n    effect: Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | Errors.DomainKitError, R | Principal.Service>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/Storage\") {}\n\nexport interface MemoryOptions {\n  /** Fault injection: runs before every mutation commits; failing here leaves state untouched. */\n  readonly beforeCommit?: (operation: string) => Effect.Effect<void, Errors.DomainKitError>;\n}\n\n/** In-memory implementation for tests and local development. Not for production. */\nexport const layerMemory: Layer.Layer<Service> = Layer.sync(Service)(() => makeMemory());\n\n/** `layerMemory` with fault injection for storage-failure tests. */\nexport const layerMemoryWith = (options: MemoryOptions): Layer.Layer<Service> =>\n  Layer.sync(Service)(() => makeMemory(options));\n\nexport { makeMemory };\n\n// ---------------------------------------------------------------------------------------------\n// Async adapter\n// ---------------------------------------------------------------------------------------------\n\n/**\n * A Promise-shaped implementation for hosts that persist without Effect. Every method takes the\n * principal explicitly. Rejections become `StorageFailed`; reject with a `DomainKit.Error` to keep\n * a typed reason. Two-phase revocation and locking are split into plain steps so no callback has\n * to run an Effect.\n */\nexport interface AsyncInterface {\n  readonly authorizations: {\n    readonly upsert: (\n      principal: Principal.Interface,\n      input: {\n        readonly authorization: Authorization;\n        readonly credential: Credential;\n        readonly expectedId?: string;\n      },\n    ) => Promise<Authorization>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Authorization>;\n    readonly credential: (principal: Principal.Interface, id: string) => Promise<Credential>;\n    readonly rotate: (\n      principal: Principal.Interface,\n      id: string,\n      credential: Credential,\n    ) => Promise<void>;\n    readonly promoteCapabilities: (\n      principal: Principal.Interface,\n      id: string,\n      capabilities: ReadonlyArray<Capability>,\n    ) => Promise<void>;\n    /** Mark `pending` durably; must be idempotent. */\n    readonly prepareRevocation: (\n      principal: Principal.Interface,\n      id: string,\n    ) => Promise<Authorization>;\n    /** Delete the authorization after the provider confirmed revocation. */\n    readonly completeRevocation: (principal: Principal.Interface, id: string) => Promise<void>;\n    readonly pendingRevocations: (\n      principal: Principal.Interface,\n    ) => Promise<ReadonlyArray<Authorization>>;\n  };\n  readonly connections: {\n    readonly create: (\n      principal: Principal.Interface,\n      authorizationId: string,\n    ) => Promise<Connection>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Connection>;\n    readonly list: (\n      principal: Principal.Interface,\n      filter?: { readonly provider?: string },\n    ) => Promise<ReadonlyArray<Connection>>;\n    readonly remove: (principal: Principal.Interface, id: string) => Promise<void>;\n  };\n  readonly attachments: {\n    readonly create: (\n      principal: Principal.Interface,\n      input: {\n        readonly connectionId: string;\n        readonly domain: string;\n        readonly zone: string;\n        readonly label: string;\n        readonly target: unknown;\n      },\n    ) => Promise<Attachment>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Attachment>;\n    readonly byDomain: (\n      principal: Principal.Interface,\n      domain: string,\n    ) => Promise<Attachment | null>;\n    readonly list: (\n      principal: Principal.Interface,\n      connectionId: string,\n    ) => Promise<ReadonlyArray<Attachment>>;\n    readonly remove: (principal: Principal.Interface, id: string) => Promise<void>;\n  };\n  readonly continuations: {\n    readonly put: (principal: Principal.Interface, continuation: Continuation) => Promise<void>;\n    readonly get: (principal: Principal.Interface, id: string) => Promise<Continuation>;\n    /** Takes no principal: see `Interface.continuations.header`. Never returns `payload`. */\n    readonly header: (id: string) => Promise<ContinuationHeader>;\n    readonly consume: (principal: Principal.Interface, id: string) => Promise<Continuation>;\n  };\n  readonly attempts: {\n    readonly create: (principal: Principal.Interface, attempt: Attempt) => Promise<Attempt>;\n    readonly get: (principal: Principal.Interface, id: Plan.PlanId) => Promise<Attempt>;\n    readonly byApproval: (\n      principal: Principal.Interface,\n      id: Approval.ApprovalId,\n    ) => Promise<Attempt>;\n    readonly byReceipt: (principal: Principal.Interface, id: Receipt.ReceiptId) => Promise<Attempt>;\n    readonly latest: (\n      principal: Principal.Interface,\n      attachmentId: string,\n      kind: Plan.Kind,\n    ) => Promise<Attempt | null>;\n    readonly approve: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      approval: Approval.Model,\n    ) => Promise<Attempt>;\n    readonly reject: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      input: {\n        readonly digest: Plan.Digest;\n        readonly actorId: string;\n        readonly reason: string | null;\n      },\n    ) => Promise<Attempt>;\n    readonly claim: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      lease: DateTime.Utc,\n    ) => Promise<Attempt>;\n    readonly complete: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      receipt: Receipt.Model,\n    ) => Promise<Attempt>;\n    readonly fail: (\n      principal: Principal.Interface,\n      id: Plan.PlanId,\n      message: string,\n    ) => Promise<Attempt>;\n  };\n  readonly readiness: {\n    readonly put: (principal: Principal.Interface, readiness: Readiness) => Promise<void>;\n    readonly get: (principal: Principal.Interface, domain: string) => Promise<Readiness | null>;\n  };\n  /** Return `false` when another holder has the key. */\n  readonly acquireLock: (principal: Principal.Interface, key: string) => Promise<boolean>;\n  readonly releaseLock: (principal: Principal.Interface, key: string) => Promise<void>;\n}\n\nconst storageFailed = (operation: string) => (cause: unknown) =>\n  Errors.isDomainKitError(cause)\n    ? cause\n    : new Errors.DomainKitError({\n        reason: new Reason.StorageFailed({\n          operation,\n          message: cause instanceof Error ? cause.message : String(cause),\n        }),\n      });\n\n/** Wraps a Promise-shaped implementation. Rejections become `StorageFailed`. */\nexport const fromAsync = (service: AsyncInterface): Interface => {\n  const call = <A>(operation: string, run: (principal: Principal.Interface) => Promise<A>): Fx<A> =>\n    Effect.flatMap(Principal.Service, (principal) =>\n      Effect.tryPromise({ try: () => run(principal), catch: storageFailed(operation) }),\n    );\n  const option = <A>(\n    operation: string,\n    run: (principal: Principal.Interface) => Promise<A | null>,\n  ) => call(operation, run).pipe(Effect.map(Option.fromNullishOr));\n  return {\n    authorizations: {\n      upsert: (input) =>\n        call(\"authorizations.upsert\", (p) => service.authorizations.upsert(p, input)),\n      get: (id) => call(\"authorizations.get\", (p) => service.authorizations.get(p, id)),\n      credential: (id) =>\n        call(\"authorizations.credential\", (p) => service.authorizations.credential(p, id)),\n      rotate: (id, credential) =>\n        call(\"authorizations.rotate\", (p) => service.authorizations.rotate(p, id, credential)),\n      promoteCapabilities: (id, capabilities) =>\n        call(\"authorizations.promoteCapabilities\", (p) =>\n          service.authorizations.promoteCapabilities(p, id, capabilities),\n        ),\n      revoke: (id, revoke) =>\n        call(\"authorizations.prepareRevocation\", (p) =>\n          service.authorizations.prepareRevocation(p, id),\n        ).pipe(\n          Effect.flatMap(() => revoke),\n          Effect.flatMap(() =>\n            call(\"authorizations.completeRevocation\", (p) =>\n              service.authorizations.completeRevocation(p, id),\n            ),\n          ),\n        ),\n      recoverRevocations: (revoke) =>\n        call(\"authorizations.pendingRevocations\", (p) =>\n          service.authorizations.pendingRevocations(p),\n        ).pipe(\n          Effect.flatMap((pending) =>\n            Effect.forEach(pending, (authorization) =>\n              revoke(authorization).pipe(\n                Effect.flatMap(() =>\n                  call(\"authorizations.completeRevocation\", (p) =>\n                    service.authorizations.completeRevocation(p, authorization.id),\n                  ),\n                ),\n              ),\n            ),\n          ),\n          Effect.map((completed) => completed.length),\n        ),\n    },\n    connections: {\n      create: (authorizationId) =>\n        call(\"connections.create\", (p) => service.connections.create(p, authorizationId)),\n      get: (id) => call(\"connections.get\", (p) => service.connections.get(p, id)),\n      list: (filter) => call(\"connections.list\", (p) => service.connections.list(p, filter)),\n      remove: (id) => call(\"connections.remove\", (p) => service.connections.remove(p, id)),\n    },\n    attachments: {\n      create: (input) => call(\"attachments.create\", (p) => service.attachments.create(p, input)),\n      get: (id) => call(\"attachments.get\", (p) => service.attachments.get(p, id)),\n      byDomain: (domain) =>\n        option(\"attachments.byDomain\", (p) => service.attachments.byDomain(p, domain)),\n      list: (connectionId) =>\n        call(\"attachments.list\", (p) => service.attachments.list(p, connectionId)),\n      remove: (id) => call(\"attachments.remove\", (p) => service.attachments.remove(p, id)),\n    },\n    continuations: {\n      put: (continuation) =>\n        call(\"continuations.put\", (p) => service.continuations.put(p, continuation)),\n      get: (id) => call(\"continuations.get\", (p) => service.continuations.get(p, id)),\n      header: (id) =>\n        Effect.tryPromise({\n          try: () => service.continuations.header(id),\n          catch: storageFailed(\"continuations.header\"),\n        }),\n      consume: (id) => call(\"continuations.consume\", (p) => service.continuations.consume(p, id)),\n    },\n    attempts: {\n      create: (attempt) => call(\"attempts.create\", (p) => service.attempts.create(p, attempt)),\n      get: (id) => call(\"attempts.get\", (p) => service.attempts.get(p, id)),\n      byApproval: (id) => call(\"attempts.byApproval\", (p) => service.attempts.byApproval(p, id)),\n      byReceipt: (id) => call(\"attempts.byReceipt\", (p) => service.attempts.byReceipt(p, id)),\n      latest: (attachmentId, kind) =>\n        option(\"attempts.latest\", (p) => service.attempts.latest(p, attachmentId, kind)),\n      approve: (id, approval) =>\n        call(\"attempts.approve\", (p) => service.attempts.approve(p, id, approval)),\n      reject: (id, input) => call(\"attempts.reject\", (p) => service.attempts.reject(p, id, input)),\n      claim: (id, lease) => call(\"attempts.claim\", (p) => service.attempts.claim(p, id, lease)),\n      complete: (id, receipt) =>\n        call(\"attempts.complete\", (p) => service.attempts.complete(p, id, receipt)),\n      fail: (id, message) => call(\"attempts.fail\", (p) => service.attempts.fail(p, id, message)),\n    },\n    readiness: {\n      put: (readiness) => call(\"readiness.put\", (p) => service.readiness.put(p, readiness)),\n      get: (domain) => option(\"readiness.get\", (p) => service.readiness.get(p, domain)),\n    },\n    withLock: (key, effect) =>\n      Effect.acquireRelease(\n        call(\"acquireLock\", (p) => service.acquireLock(p, key)).pipe(\n          Effect.flatMap((acquired) =>\n            acquired ? Effect.void : Errors.fail(new Reason.Busy({ key })),\n          ),\n        ),\n        () => call(\"releaseLock\", (p) => service.releaseLock(p, key)).pipe(Effect.ignore),\n      ).pipe(\n        Effect.flatMap(() => effect),\n        Effect.scoped,\n      ),\n  };\n};\n\nexport const layerFromAsync = (service: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service)(fromAsync(service));\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,aAAa,OAAO,SAAS,CAAC,YAAY,WAAW,CAAC;AAGnE,MAAa,aAAa,OAAO,SAAS;CAAC;CAAS;CAAS;AAAa,CAAC;;AAI3E,IAAa,aAAb,cAAgC,OAAO,MAAkB,+BAA+B,CAAC,CAAC;CACxF,YAAY,OAAO;CACnB,WAAW,OAAO,OAAO,OAAO,qBAAqB;CACrD,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,gBAAb,cAAmC,OAAO,MAAqB,kCAAkC,CAAC,CAAC;CACjG,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,UAAU,OAAO;CACjB,QAAQ;CACR,cAAc,OAAO,MAAM,UAAU;;CAErC,SAAS,OAAO;CAChB,YAAY,OAAO,SAAS;EAAC;EAAU;EAAW;CAAS,CAAC;CAC5D,WAAW,OAAO;CAClB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,aAAb,cAAgC,OAAO,MAAkB,+BAA+B,CAAC,CAAC;CACxF,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,iBAAiB,OAAO;CACxB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,aAAb,cAAgC,OAAO,MAAkB,+BAA+B,CAAC,CAAC;CACxF,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,cAAc,OAAO;CACrB,QAAQ,OAAO;CACf,MAAM,OAAO;;CAEb,OAAO,OAAO;;CAEd,QAAQ,OAAO;CACf,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,eAAb,cAAkC,OAAO,MAAoB,iCAAiC,CAAC,CAAC;CAC9F,IAAI,OAAO;CACX,SAAS,OAAO;CAChB,SAAS,OAAO;CAChB,UAAU,OAAO;CACjB,SAAS,OAAO;CAChB,UAAU,OAAO,OAAO,OAAO,MAAM;CACrC,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;AAMJ,IAAa,qBAAb,cAAwC,OAAO,MAC7C,uCACF,CAAC,CAAC;CACA,SAAS,OAAO;CAChB,SAAS,OAAO;CAChB,UAAU,OAAO;CACjB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,gBAAgB,OAAO,SAAS;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAID,MAAa,YAAY,OAAO,OAAO;CACrC,SAAS,OAAO;CAChB,QAAQ,OAAO,OAAO,OAAO,MAAM;CACnC,IAAI,OAAO;AACb,CAAC;;AAID,IAAa,UAAb,cAA6B,OAAO,MAAe,4BAA4B,CAAC,CAAC;CAC/E,IAAIA;CACJ,SAAS,OAAO;CAChB,cAAc,OAAO;CACrB,MAAMC;CACN,QAAQ;CACR,MAAMC;CACN,UAAU,OAAO,OAAOC,OAAc;CACtC,SAAS,OAAO,OAAOC,OAAa;CACpC,WAAW,OAAO,OAAO,SAAS;;CAElC,iBAAiB,OAAO,OAAOC,SAAiB;CAChD,gBAAgB,OAAO,OAAO,OAAO,qBAAqB;;CAE1D,SAAS,OAAO,OAAO,OAAO,MAAM;CACpC,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,oBAAoB,OAAO,SAAS;CAAC;CAAa;CAAW;CAAY;AAAS,CAAC;AAGhG,MAAa,UAAU,OAAO,SAAS;CAAC;CAAS;CAAW;AAAQ,CAAC;;;;;;AAQrE,IAAa,YAAb,cAA+B,OAAO,MAAiB,8BAA8B,CAAC,CAAC;CACrF,QAAQ,OAAO;CACf,cAAc,OAAO,OAAO,OAAO,MAAM;CACzC,SAAS,OAAO;CAChB,SAAS;CACT,cAAc,OAAO,MACnB,OAAO,OAAO;EACZ,aAAa,OAAO,OAAOC,WAAgB;EAC3C,QAAQC;EACR,QAAQ;;EAER,UAAU,OAAO,MAAM,OAAO,OAAO;CACvC,CAAC,CACH;;CAEA,MAAM,OAAO,MAAM,OAAO,OAAO;;CAEjC,cAAc,OAAO,OAAO,OAAO,qBAAqB;CACxD,WAAW,OAAO;CAClB,aAAa,OAAO,OAAO,OAAO,qBAAqB;AACzD,CAAC,CAAC,CAAC,CAAC;AA+GJ,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;;AAQ1F,MAAa,cAAoC,MAAM,KAAK,OAAO,CAAC,OAAO,WAAW,CAAC;;AAGvF,MAAa,mBAAmB,YAC9B,MAAM,KAAK,OAAO,CAAC,OAAO,WAAW,OAAO,CAAC;AA4I/C,MAAM,iBAAiB,eAAuB,UAC5CC,iBAAwB,KAAK,IACzB,QACA,IAAIC,eAAsB,EACxB,QAAQ,IAAIC,cAAqB;CAC/B;CACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAChE,CAAC,EACH,CAAC;;AAGP,MAAa,aAAa,YAAuC;CAC/D,MAAM,QAAW,WAAmB,QAClC,OAAO,QAAQC,YAAoB,cACjC,OAAO,WAAW;EAAE,WAAW,IAAI,SAAS;EAAG,OAAO,cAAc,SAAS;CAAE,CAAC,CAClF;CACF,MAAM,UACJ,WACA,QACG,KAAK,WAAW,GAAG,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,aAAa,CAAC;CAC/D,OAAO;EACL,gBAAgB;GACd,SAAS,UACP,KAAK,0BAA0B,MAAM,QAAQ,eAAe,OAAO,GAAG,KAAK,CAAC;GAC9E,MAAM,OAAO,KAAK,uBAAuB,MAAM,QAAQ,eAAe,IAAI,GAAG,EAAE,CAAC;GAChF,aAAa,OACX,KAAK,8BAA8B,MAAM,QAAQ,eAAe,WAAW,GAAG,EAAE,CAAC;GACnF,SAAS,IAAI,eACX,KAAK,0BAA0B,MAAM,QAAQ,eAAe,OAAO,GAAG,IAAI,UAAU,CAAC;GACvF,sBAAsB,IAAI,iBACxB,KAAK,uCAAuC,MAC1C,QAAQ,eAAe,oBAAoB,GAAG,IAAI,YAAY,CAChE;GACF,SAAS,IAAI,WACX,KAAK,qCAAqC,MACxC,QAAQ,eAAe,kBAAkB,GAAG,EAAE,CAChD,CAAC,CAAC,KACA,OAAO,cAAc,MAAM,GAC3B,OAAO,cACL,KAAK,sCAAsC,MACzC,QAAQ,eAAe,mBAAmB,GAAG,EAAE,CACjD,CACF,CACF;GACF,qBAAqB,WACnB,KAAK,sCAAsC,MACzC,QAAQ,eAAe,mBAAmB,CAAC,CAC7C,CAAC,CAAC,KACA,OAAO,SAAS,YACd,OAAO,QAAQ,UAAU,kBACvB,OAAO,aAAa,CAAC,CAAC,KACpB,OAAO,cACL,KAAK,sCAAsC,MACzC,QAAQ,eAAe,mBAAmB,GAAG,cAAc,EAAE,CAC/D,CACF,CACF,CACF,CACF,GACA,OAAO,KAAK,cAAc,UAAU,MAAM,CAC5C;EACJ;EACA,aAAa;GACX,SAAS,oBACP,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,eAAe,CAAC;GAClF,MAAM,OAAO,KAAK,oBAAoB,MAAM,QAAQ,YAAY,IAAI,GAAG,EAAE,CAAC;GAC1E,OAAO,WAAW,KAAK,qBAAqB,MAAM,QAAQ,YAAY,KAAK,GAAG,MAAM,CAAC;GACrF,SAAS,OAAO,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,EAAE,CAAC;EACrF;EACA,aAAa;GACX,SAAS,UAAU,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,KAAK,CAAC;GACzF,MAAM,OAAO,KAAK,oBAAoB,MAAM,QAAQ,YAAY,IAAI,GAAG,EAAE,CAAC;GAC1E,WAAW,WACT,OAAO,yBAAyB,MAAM,QAAQ,YAAY,SAAS,GAAG,MAAM,CAAC;GAC/E,OAAO,iBACL,KAAK,qBAAqB,MAAM,QAAQ,YAAY,KAAK,GAAG,YAAY,CAAC;GAC3E,SAAS,OAAO,KAAK,uBAAuB,MAAM,QAAQ,YAAY,OAAO,GAAG,EAAE,CAAC;EACrF;EACA,eAAe;GACb,MAAM,iBACJ,KAAK,sBAAsB,MAAM,QAAQ,cAAc,IAAI,GAAG,YAAY,CAAC;GAC7E,MAAM,OAAO,KAAK,sBAAsB,MAAM,QAAQ,cAAc,IAAI,GAAG,EAAE,CAAC;GAC9E,SAAS,OACP,OAAO,WAAW;IAChB,WAAW,QAAQ,cAAc,OAAO,EAAE;IAC1C,OAAO,cAAc,sBAAsB;GAC7C,CAAC;GACH,UAAU,OAAO,KAAK,0BAA0B,MAAM,QAAQ,cAAc,QAAQ,GAAG,EAAE,CAAC;EAC5F;EACA,UAAU;GACR,SAAS,YAAY,KAAK,oBAAoB,MAAM,QAAQ,SAAS,OAAO,GAAG,OAAO,CAAC;GACvF,MAAM,OAAO,KAAK,iBAAiB,MAAM,QAAQ,SAAS,IAAI,GAAG,EAAE,CAAC;GACpE,aAAa,OAAO,KAAK,wBAAwB,MAAM,QAAQ,SAAS,WAAW,GAAG,EAAE,CAAC;GACzF,YAAY,OAAO,KAAK,uBAAuB,MAAM,QAAQ,SAAS,UAAU,GAAG,EAAE,CAAC;GACtF,SAAS,cAAc,SACrB,OAAO,oBAAoB,MAAM,QAAQ,SAAS,OAAO,GAAG,cAAc,IAAI,CAAC;GACjF,UAAU,IAAI,aACZ,KAAK,qBAAqB,MAAM,QAAQ,SAAS,QAAQ,GAAG,IAAI,QAAQ,CAAC;GAC3E,SAAS,IAAI,UAAU,KAAK,oBAAoB,MAAM,QAAQ,SAAS,OAAO,GAAG,IAAI,KAAK,CAAC;GAC3F,QAAQ,IAAI,UAAU,KAAK,mBAAmB,MAAM,QAAQ,SAAS,MAAM,GAAG,IAAI,KAAK,CAAC;GACxF,WAAW,IAAI,YACb,KAAK,sBAAsB,MAAM,QAAQ,SAAS,SAAS,GAAG,IAAI,OAAO,CAAC;GAC5E,OAAO,IAAI,YAAY,KAAK,kBAAkB,MAAM,QAAQ,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC;EAC3F;EACA,WAAW;GACT,MAAM,cAAc,KAAK,kBAAkB,MAAM,QAAQ,UAAU,IAAI,GAAG,SAAS,CAAC;GACpF,MAAM,WAAW,OAAO,kBAAkB,MAAM,QAAQ,UAAU,IAAI,GAAG,MAAM,CAAC;EAClF;EACA,WAAW,KAAK,WACd,OAAO,eACL,KAAK,gBAAgB,MAAM,QAAQ,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,KACtD,OAAO,SAAS,aACd,WAAW,OAAO,OAAOC,KAAY,IAAIC,KAAY,EAAE,IAAI,CAAC,CAAC,CAC/D,CACF,SACM,KAAK,gBAAgB,MAAM,QAAQ,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM,CAClF,CAAC,CAAC,KACA,OAAO,cAAc,MAAM,GAC3B,OAAO,MACT;CACJ;AACF;AAEA,MAAa,kBAAkB,YAC7B,MAAM,QAAQ,OAAO,CAAC,CAAC,UAAU,OAAO,CAAC"}

package/dist/Transport.mjs

@@ -162,12 +162,19 @@ const fromFetch = (baseUrl, options = {}) => {
 				success: Model$2
 			})
 		},
-		verification: { observe: (domain, input) => request({
-			method: "POST",
-			path: `/domains/${encodeURIComponent(domain)}/observations`,
-			body: Schema.encodeSync(ObservePayload)(input?.requirements === void 0 ? {} : { requirements: input.requirements }),
-			success: Readiness
-		}) },
+		verification: {
+			observe: (domain, input) => request({
+				method: "POST",
+				path: `/domains/${encodeURIComponent(domain)}/observations`,
+				body: Schema.encodeSync(ObservePayload)(input?.requirements === void 0 ? {} : { requirements: input.requirements }),
+				success: Readiness
+			}),
+			latest: (domain) => request({
+				method: "GET",
+				path: `/domains/${encodeURIComponent(domain)}/readiness`,
+				success: Schema.NullOr(Readiness)
+			})
+		},
 		cleanup: {
 			plan: (receiptId) => request({
 				method: "POST",

package/dist/Transport.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Transport.mjs","names":["Server.Token","Server.OAuth","Server.Integration","Http.headersFrom","Http.requestJson","Errors.decode","Errors.DomainKitError","Http.classify","Server.ApprovePayload","Approval.Model","Server.RejectPayload","Server.Attempt","Receipt.Model","Server.Snapshot","Server.Discovery","Server.Zones","Server.StartPayload","Server.Started","Server.ReconnectPayload","Server.AttachPayload","Server.PlanPayload","Plan.Model","Server.ObservePayload","Server.Readiness","Errors.isDomainKitError","Reason.ProviderUnavailable"],"sources":["../src/Transport.ts"],"sourcesContent":["/**\n * domainkit/client — the browser-side transport `@domainkit/react` consumes. Capability groups are\n * optional: a host that only exposes connection routes declares just `connection`, and the parts\n * of the UI that plan or clean up do not render.\n *\n *   const transport = Transport.fromFetch(\"/api/domainkit\")\n *\n * Every method decodes the same wire schemas `domainkit/server` encodes, so a failure arrives as\n * the `DomainKit.Error` the lifecycle raised, reason intact.\n */\nimport { Effect, Schema } from \"effect\";\n\nimport * as Approval from \"./Approval.ts\";\nimport type * as DnsRecord from \"./DnsRecord.ts\";\nimport * as Errors from \"./internal/error.ts\";\nimport * as Http from \"./internal/http.ts\";\nimport * as Plan from \"./Plan.ts\";\nimport * as Reason from \"./Reason.ts\";\nimport * as Receipt from \"./Receipt.ts\";\nimport * as Server from \"./Server.ts\";\n\ntype Fx<A> = Effect.Effect<A, Errors.DomainKitError>;\n\nexport type Snapshot = Server.Snapshot;\nexport type Started = Server.Started;\nexport type Readiness = Server.Readiness;\nexport type Attempt = Server.Attempt;\nexport type Candidate = Server.Candidate;\nexport type Discovery = Server.Discovery;\nexport type Zone = Server.Zone;\nexport type Zones = Server.Zones;\nexport type Attachment = Server.Attachment;\nexport type Field = Server.Field;\nexport type MethodDescriptor = Server.MethodDescriptor;\nexport type Method = Server.Method;\n\n/** How a client asks to connect. Mirrors `Connect.Method`, over the wire. */\nexport const Method = {\n  /** A lone string for the common one-field provider, or the values its descriptor names. */\n  token: (values: string | Readonly<Record<string, string>>): Method =>\n    new Server.Token({ values: typeof values === \"string\" ? { token: values } : values }),\n  oauth: (options: { readonly returnTo?: string } = {}): Method => new Server.OAuth(options),\n  integration: (options: { readonly returnTo?: string } = {}): Method =>\n    new Server.Integration(options),\n} as const;\n\nexport interface ConnectionGroup {\n  readonly inspect: (domain: string) => Fx<Snapshot>;\n  /** Which of this owner's existing connections already reaches the domain. */\n  readonly discover: (domain: string) => Fx<Discovery>;\n  /** Every zone this owner's connections reach, and where each connection stands. */\n  readonly zones: (options?: { readonly provider?: string }) => Fx<Zones>;\n  /** Connect a provider. Without a domain the account connects alone and attaches nothing. */\n  readonly start: (input: {\n    readonly domain?: string;\n    readonly provider: string;\n    readonly method: Method;\n  }) => Fx<Started>;\n  /** Prove an account again for a connection this owner holds, keeping its domains. */\n  readonly reconnect: (input: {\n    readonly connectionId: string;\n    readonly method: Method;\n  }) => Fx<Started>;\n  readonly attach: (input: {\n    readonly connectionId: string;\n    readonly domain: string;\n    readonly zone?: string;\n  }) => Fx<Started>;\n  readonly detach: (attachmentId: string) => Fx<void>;\n  readonly disconnect: (connectionId: string) => Fx<void>;\n}\n\nexport interface ProvisioningGroup {\n  readonly plan: (input: {\n    readonly domain: string;\n    readonly requirements: ReadonlyArray<DnsRecord.Model>;\n  }) => Fx<Plan.Model>;\n  readonly approve: (input: {\n    readonly planId: Plan.PlanId;\n    readonly operationIds?: ReadonlyArray<Plan.OperationId>;\n  }) => Fx<Approval.Model>;\n  /** Decline the plan; terminal, and approving it afterwards fails `Stale`. */\n  readonly reject: (input: {\n    readonly planId: Plan.PlanId;\n    readonly reason?: string;\n  }) => Fx<Attempt>;\n  readonly apply: (approvalId: Approval.ApprovalId) => Fx<Receipt.Model>;\n  /** The stored plan with its status, approval, receipt, and rejection. */\n  readonly attempt: (planId: Plan.PlanId) => Fx<Attempt>;\n  /** What one apply landed, by receipt id, for a surface that holds the id and not the attempt. */\n  readonly receipt: (receiptId: Receipt.ReceiptId) => Fx<Receipt.Model>;\n}\n\nexport interface VerificationGroup {\n  /**\n   * Observe the domain's provisioning receipt, or `options.requirements` when supplied (required\n   * for a domain with no attachment).\n   */\n  readonly observe: (\n    domain: string,\n    options?: { readonly requirements?: ReadonlyArray<DnsRecord.Model> },\n  ) => Fx<Readiness>;\n}\n\nexport interface CleanupGroup {\n  readonly plan: (receiptId: Receipt.ReceiptId) => Fx<Plan.Model>;\n  readonly approve: (input: {\n    readonly planId: Plan.PlanId;\n    readonly operationIds?: ReadonlyArray<Plan.OperationId>;\n  }) => Fx<Approval.Model>;\n  readonly reject: (input: {\n    readonly planId: Plan.PlanId;\n    readonly reason?: string;\n  }) => Fx<Attempt>;\n  readonly apply: (approvalId: Approval.ApprovalId) => Fx<Receipt.Model>;\n}\n\nexport interface Interface {\n  readonly connection?: ConnectionGroup;\n  readonly provisioning?: ProvisioningGroup;\n  readonly verification?: VerificationGroup;\n  readonly cleanup?: CleanupGroup;\n}\n\nexport type Capability = keyof Interface;\n\nexport const allCapabilities: ReadonlyArray<Capability> = [\n  \"connection\",\n  \"provisioning\",\n  \"verification\",\n  \"cleanup\",\n];\n\n/** Which groups this transport actually carries, in declaration order. */\nexport const capabilities = (transport: Interface): ReadonlyArray<Capability> =>\n  allCapabilities.filter((capability) => transport[capability] !== undefined);\n\nexport interface FetchOptions {\n  readonly fetch?: Http.Fetch;\n  readonly headers?: HeadersInit | (() => HeadersInit | Promise<HeadersInit>);\n  /** Which groups the server exposes. Default: all. */\n  readonly capabilities?: ReadonlyArray<Capability>;\n}\n\n// ---------------------------------------------------------------------------------------------\n// fetch\n// ---------------------------------------------------------------------------------------------\n\n/** A transport over `domainkit/server` routes mounted at `baseUrl`. */\nexport const fromFetch = (baseUrl: string, options: FetchOptions = {}): Interface => {\n  const base = baseUrl.replace(/\\/+$/, \"\");\n  const source = safeOrigin(base);\n  // Resolved at call time and invoked as a free function: a browser `fetch` throws \"Illegal\n  // invocation\" when called as a method of anything but `window`, and a host may polyfill later.\n  const call: Http.Fetch = options.fetch ?? ((input, init) => globalThis.fetch(input, init));\n  const declared = options.capabilities ?? allCapabilities;\n\n  const request = <A>(input: {\n    readonly method: \"GET\" | \"POST\" | \"DELETE\";\n    readonly path: string;\n    readonly body?: unknown;\n    readonly success: Schema.Codec<A, unknown> | null;\n  }): Fx<A> =>\n    Effect.gen(function* () {\n      const headers = yield* Http.headersFrom(options.headers);\n      if (input.body !== undefined) headers.set(\"content-type\", \"application/json\");\n      const reply = yield* Http.requestJson({\n        fetch: call,\n        provider: source,\n        url: `${base}${input.path}`,\n        init: {\n          method: input.method,\n          headers,\n          ...(input.body === undefined ? {} : { body: JSON.stringify(input.body) }),\n        },\n      });\n      if (!reply.ok) {\n        // The server answers failures with the `DomainKit.Error` value itself. Anything else came\n        // from in front of it: a proxy, a login page, a maintenance window.\n        const decoded = yield* Effect.result(\n          Errors.decode(Errors.DomainKitError, reply.body, \"response\"),\n        );\n        return yield* decoded._tag === \"Success\"\n          ? Effect.fail(decoded.success)\n          : Effect.fail(\n              new Errors.DomainKitError({\n                reason: Http.classify(\n                  source,\n                  reply.status,\n                  reply.headers,\n                  `${input.method} ${input.path} answered ${reply.status}`,\n                ),\n              }),\n            );\n      }\n      if (input.success === null) return undefined as A;\n      return yield* Errors.decode(input.success, reply.body, \"response\");\n    });\n\n  /** Provisioning and cleanup share these routes; the attempt knows its kind. */\n  const approve = (input: {\n    readonly planId: Plan.PlanId;\n    readonly operationIds?: ReadonlyArray<Plan.OperationId>;\n  }) =>\n    request({\n      method: \"POST\",\n      path: `/plans/${encodeURIComponent(input.planId)}/approvals`,\n      body: Schema.encodeSync(Server.ApprovePayload)(\n        input.operationIds === undefined ? {} : { operationIds: input.operationIds },\n      ),\n      success: Approval.Model,\n    });\n\n  const reject = (input: { readonly planId: Plan.PlanId; readonly reason?: string }) =>\n    request({\n      method: \"POST\",\n      path: `/plans/${encodeURIComponent(input.planId)}/rejections`,\n      body: Schema.encodeSync(Server.RejectPayload)(\n        input.reason === undefined ? {} : { reason: input.reason },\n      ),\n      success: Server.Attempt,\n    });\n\n  const apply = (approvalId: Approval.ApprovalId) =>\n    request({\n      method: \"POST\",\n      path: `/approvals/${encodeURIComponent(approvalId)}/apply`,\n      success: Receipt.Model,\n    });\n\n  const connection: ConnectionGroup = {\n    inspect: (domain) =>\n      request({\n        method: \"GET\",\n        path: `/domains/${encodeURIComponent(domain)}`,\n        success: Server.Snapshot,\n      }),\n    discover: (domain) =>\n      request({\n        method: \"GET\",\n        path: `/domains/${encodeURIComponent(domain)}/discovery`,\n        success: Server.Discovery,\n      }),\n    zones: (filter) =>\n      request({\n        method: \"GET\",\n        path:\n          filter?.provider === undefined\n            ? \"/zones\"\n            : `/zones?provider=${encodeURIComponent(filter.provider)}`,\n        success: Server.Zones,\n      }),\n    start: (input) =>\n      request({\n        method: \"POST\",\n        path: \"/connections\",\n        body: Schema.encodeSync(Server.StartPayload)(\n          input.domain === undefined\n            ? { provider: input.provider, method: input.method }\n            : { domain: input.domain, provider: input.provider, method: input.method },\n        ),\n        success: Server.Started,\n      }),\n    reconnect: (input) =>\n      request({\n        method: \"POST\",\n        path: `/connections/${encodeURIComponent(input.connectionId)}/reconnections`,\n        body: Schema.encodeSync(Server.ReconnectPayload)({ method: input.method }),\n        success: Server.Started,\n      }),\n    attach: (input) =>\n      request({\n        method: \"POST\",\n        path: `/connections/${encodeURIComponent(input.connectionId)}/attachments`,\n        body: Schema.encodeSync(Server.AttachPayload)(\n          input.zone === undefined\n            ? { domain: input.domain }\n            : { domain: input.domain, zone: input.zone },\n        ),\n        success: Server.Started,\n      }),\n    detach: (attachmentId) =>\n      request({\n        method: \"DELETE\",\n        path: `/attachments/${encodeURIComponent(attachmentId)}`,\n        success: null,\n      }),\n    disconnect: (connectionId) =>\n      request({\n        method: \"DELETE\",\n        path: `/connections/${encodeURIComponent(connectionId)}`,\n        success: null,\n      }),\n  };\n\n  const provisioning: ProvisioningGroup = {\n    plan: (input) =>\n      request({\n        method: \"POST\",\n        path: `/domains/${encodeURIComponent(input.domain)}/plans`,\n        body: Schema.encodeSync(Server.PlanPayload)({ requirements: input.requirements }),\n        success: Plan.Model,\n      }),\n    approve,\n    reject,\n    apply,\n    attempt: (planId) =>\n      request({\n        method: \"GET\",\n        path: `/plans/${encodeURIComponent(planId)}`,\n        success: Server.Attempt,\n      }),\n    receipt: (receiptId) =>\n      request({\n        method: \"GET\",\n        path: `/receipts/${encodeURIComponent(receiptId)}`,\n        success: Receipt.Model,\n      }),\n  };\n\n  const verification: VerificationGroup = {\n    observe: (domain, input) =>\n      request({\n        method: \"POST\",\n        path: `/domains/${encodeURIComponent(domain)}/observations`,\n        body: Schema.encodeSync(Server.ObservePayload)(\n          input?.requirements === undefined ? {} : { requirements: input.requirements },\n        ),\n        success: Server.Readiness,\n      }),\n  };\n\n  const cleanup: CleanupGroup = {\n    plan: (receiptId) =>\n      request({\n        method: \"POST\",\n        path: `/receipts/${encodeURIComponent(receiptId)}/cleanup-plans`,\n        success: Plan.Model,\n      }),\n    approve,\n    reject,\n    apply,\n  };\n\n  const groups = { connection, provisioning, verification, cleanup };\n  return Object.fromEntries(\n    allCapabilities\n      .filter((capability) => declared.includes(capability))\n      .map((capability) => [capability, groups[capability]]),\n  );\n};\n\n// ---------------------------------------------------------------------------------------------\n// Promise adapters\n// ---------------------------------------------------------------------------------------------\n\n/** The same transport in Promises, for hosts and tests that do not run Effect. */\nexport type AsyncTransport = {\n  readonly [K in keyof Interface]?: {\n    readonly [M in keyof NonNullable<Interface[K]>]: NonNullable<Interface[K]>[M] extends (\n      ...args: infer A\n    ) => Effect.Effect<infer R, Errors.DomainKitError>\n      ? (...args: A) => Promise<R>\n      : never;\n  };\n};\n\n/** Adapt a Promise-shaped transport; a rejection that is not a `DomainKit.Error` becomes one. */\nexport const fromAsync = (transport: AsyncTransport): Interface =>\n  mapGroups(\n    transport,\n    (method) =>\n      (...args: ReadonlyArray<never>) =>\n        Effect.tryPromise({\n          try: () => method(...args) as Promise<unknown>,\n          catch: (cause) =>\n            Errors.isDomainKitError(cause)\n              ? cause\n              : new Errors.DomainKitError({\n                  reason: new Reason.ProviderUnavailable({\n                    provider: \"domainkit\",\n                    message: `The transport rejected: ${String(cause)}`,\n                  }),\n                }),\n        }),\n  ) as Interface;\n\n/** Adapt to Promises; every rejection is the `DomainKit.Error` the lifecycle raised. */\nexport const toAsync = (transport: Interface): AsyncTransport =>\n  mapGroups(\n    transport,\n    (method) =>\n      (...args: ReadonlyArray<never>) =>\n        Effect.runPromise(method(...args) as Effect.Effect<unknown, Errors.DomainKitError>),\n  ) as AsyncTransport;\n\ntype AnyMethod = (...args: ReadonlyArray<never>) => unknown;\ntype AnyGroups = { readonly [key: string]: Record<string, AnyMethod> | undefined };\n\n/** Rebuild every declared group with each method wrapped; the two adapters differ only in `wrap`. */\nconst mapGroups = (source: object, wrap: (method: AnyMethod) => AnyMethod): unknown =>\n  Object.fromEntries(\n    allCapabilities.flatMap((capability) => {\n      const group = (source as AnyGroups)[capability];\n      if (group === undefined) return [];\n      return [\n        [\n          capability,\n          Object.fromEntries(Object.entries(group).map(([name, method]) => [name, wrap(method)])),\n        ],\n      ];\n    }),\n  );\n\n// ---------------------------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------------------------\n\nconst safeOrigin = (base: string): string => {\n  try {\n    return new URL(base).origin;\n  } catch {\n    return base === \"\" ? \"domainkit\" : base;\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAa,SAAS;;CAEpB,QAAQ,WACN,IAAIA,MAAa,EAAE,QAAQ,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAI,OAAO,CAAC;CACtF,QAAQ,UAA0C,CAAC,MAAc,IAAIC,MAAa,OAAO;CACzF,cAAc,UAA0C,CAAC,MACvD,IAAIC,YAAmB,OAAO;AAClC;AAkFA,MAAa,kBAA6C;CACxD;CACA;CACA;CACA;AACF;;AAGA,MAAa,gBAAgB,cAC3B,gBAAgB,QAAQ,eAAe,UAAU,gBAAgB,KAAA,CAAS;;AAc5E,MAAa,aAAa,SAAiB,UAAwB,CAAC,MAAiB;CACnF,MAAM,OAAO,QAAQ,QAAQ,QAAQ,EAAE;CACvC,MAAM,SAAS,WAAW,IAAI;CAG9B,MAAM,OAAmB,QAAQ,WAAW,OAAO,SAAS,WAAW,MAAM,OAAO,IAAI;CACxF,MAAM,WAAW,QAAQ,gBAAgB;CAEzC,MAAM,WAAc,UAMlB,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAOC,YAAiB,QAAQ,OAAO;EACvD,IAAI,MAAM,SAAS,KAAA,GAAW,QAAQ,IAAI,gBAAgB,kBAAkB;EAC5E,MAAM,QAAQ,OAAOC,YAAiB;GACpC,OAAO;GACP,UAAU;GACV,KAAK,GAAG,OAAO,MAAM;GACrB,MAAM;IACJ,QAAQ,MAAM;IACd;IACA,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,MAAM,IAAI,EAAE;GACzE;EACF,CAAC;EACD,IAAI,CAAC,MAAM,IAAI;GAGb,MAAM,UAAU,OAAO,OAAO,OAC5BC,OAAcC,gBAAuB,MAAM,MAAM,UAAU,CAC7D;GACA,OAAO,OAAO,QAAQ,SAAS,YAC3B,OAAO,KAAK,QAAQ,OAAO,IAC3B,OAAO,KACL,IAAIA,eAAsB,EACxB,QAAQC,SACN,QACA,MAAM,QACN,MAAM,SACN,GAAG,MAAM,OAAO,GAAG,MAAM,KAAK,YAAY,MAAM,QAClD,EACF,CAAC,CACH;EACN;EACA,IAAI,MAAM,YAAY,MAAM,OAAO,KAAA;EACnC,OAAO,OAAOF,OAAc,MAAM,SAAS,MAAM,MAAM,UAAU;CACnE,CAAC;;CAGH,MAAM,WAAW,UAIf,QAAQ;EACN,QAAQ;EACR,MAAM,UAAU,mBAAmB,MAAM,MAAM,EAAE;EACjD,MAAM,OAAO,WAAWG,cAAqB,CAAC,CAC5C,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa,CAC7E;EACA,SAASC;CACX,CAAC;CAEH,MAAM,UAAU,UACd,QAAQ;EACN,QAAQ;EACR,MAAM,UAAU,mBAAmB,MAAM,MAAM,EAAE;EACjD,MAAM,OAAO,WAAWC,aAAoB,CAAC,CAC3C,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO,CAC3D;EACA,SAASC;CACX,CAAC;CAEH,MAAM,SAAS,eACb,QAAQ;EACN,QAAQ;EACR,MAAM,cAAc,mBAAmB,UAAU,EAAE;EACnD,SAASC;CACX,CAAC;CAoHH,MAAM,SAAS;EAAE,YAAA;GAjHf,UAAU,WACR,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM;IAC3C,SAASC;GACX,CAAC;GACH,WAAW,WACT,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM,EAAE;IAC7C,SAASC;GACX,CAAC;GACH,QAAQ,WACN,QAAQ;IACN,QAAQ;IACR,MACE,QAAQ,aAAa,KAAA,IACjB,WACA,mBAAmB,mBAAmB,OAAO,QAAQ;IAC3D,SAASC;GACX,CAAC;GACH,QAAQ,UACN,QAAQ;IACN,QAAQ;IACR,MAAM;IACN,MAAM,OAAO,WAAWC,YAAmB,CAAC,CAC1C,MAAM,WAAW,KAAA,IACb;KAAE,UAAU,MAAM;KAAU,QAAQ,MAAM;IAAO,IACjD;KAAE,QAAQ,MAAM;KAAQ,UAAU,MAAM;KAAU,QAAQ,MAAM;IAAO,CAC7E;IACA,SAASC;GACX,CAAC;GACH,YAAY,UACV,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,MAAM,YAAY,EAAE;IAC7D,MAAM,OAAO,WAAWC,gBAAuB,CAAC,CAAC,EAAE,QAAQ,MAAM,OAAO,CAAC;IACzE,SAASD;GACX,CAAC;GACH,SAAS,UACP,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,MAAM,YAAY,EAAE;IAC7D,MAAM,OAAO,WAAWE,aAAoB,CAAC,CAC3C,MAAM,SAAS,KAAA,IACX,EAAE,QAAQ,MAAM,OAAO,IACvB;KAAE,QAAQ,MAAM;KAAQ,MAAM,MAAM;IAAK,CAC/C;IACA,SAASF;GACX,CAAC;GACH,SAAS,iBACP,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,YAAY;IACrD,SAAS;GACX,CAAC;GACH,aAAa,iBACX,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,YAAY;IACrD,SAAS;GACX,CAAC;EAoDqB;EAAG,cAAA;GAhD3B,OAAO,UACL,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM,MAAM,EAAE;IACnD,MAAM,OAAO,WAAWG,WAAkB,CAAC,CAAC,EAAE,cAAc,MAAM,aAAa,CAAC;IAChF,SAASC;GACX,CAAC;GACH;GACA;GACA;GACA,UAAU,WACR,QAAQ;IACN,QAAQ;IACR,MAAM,UAAU,mBAAmB,MAAM;IACzC,SAASV;GACX,CAAC;GACH,UAAU,cACR,QAAQ;IACN,QAAQ;IACR,MAAM,aAAa,mBAAmB,SAAS;IAC/C,SAASC;GACX,CAAC;EA2BmC;EAAG,cAAA,EAvBzC,UAAU,QAAQ,UAChB,QAAQ;GACN,QAAQ;GACR,MAAM,YAAY,mBAAmB,MAAM,EAAE;GAC7C,MAAM,OAAO,WAAWU,cAAqB,CAAC,CAC5C,OAAO,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa,CAC9E;GACA,SAASC;EACX,CAAC,EAeiD;EAAG,SAAA;GAXvD,OAAO,cACL,QAAQ;IACN,QAAQ;IACR,MAAM,aAAa,mBAAmB,SAAS,EAAE;IACjD,SAASF;GACX,CAAC;GACH;GACA;GACA;EAG6D;CAAE;CACjE,OAAO,OAAO,YACZ,gBACG,QAAQ,eAAe,SAAS,SAAS,UAAU,CAAC,CAAC,CACrD,KAAK,eAAe,CAAC,YAAY,OAAO,WAAW,CAAC,CACzD;AACF;;AAkBA,MAAa,aAAa,cACxB,UACE,YACC,YACE,GAAG,SACF,OAAO,WAAW;CAChB,WAAW,OAAO,GAAG,IAAI;CACzB,QAAQ,UACNG,iBAAwB,KAAK,IACzB,QACA,IAAIlB,eAAsB,EACxB,QAAQ,IAAImB,oBAA2B;EACrC,UAAU;EACV,SAAS,2BAA2B,OAAO,KAAK;CAClD,CAAC,EACH,CAAC;AACT,CAAC,CACP;;AAGF,MAAa,WAAW,cACtB,UACE,YACC,YACE,GAAG,SACF,OAAO,WAAW,OAAO,GAAG,IAAI,CAAkD,CACxF;;AAMF,MAAM,aAAa,QAAgB,SACjC,OAAO,YACL,gBAAgB,SAAS,eAAe;CACtC,MAAM,QAAS,OAAqB;CACpC,IAAI,UAAU,KAAA,GAAW,OAAO,CAAC;CACjC,OAAO,CACL,CACE,YACA,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CACxF,CACF;AACF,CAAC,CACH;AAMF,MAAM,cAAc,SAAyB;CAC3C,IAAI;EACF,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC;CACvB,QAAQ;EACN,OAAO,SAAS,KAAK,cAAc;CACrC;AACF"}
+{"version":3,"file":"Transport.mjs","names":["Server.Token","Server.OAuth","Server.Integration","Http.headersFrom","Http.requestJson","Errors.decode","Errors.DomainKitError","Http.classify","Server.ApprovePayload","Approval.Model","Server.RejectPayload","Server.Attempt","Receipt.Model","Server.Snapshot","Server.Discovery","Server.Zones","Server.StartPayload","Server.Started","Server.ReconnectPayload","Server.AttachPayload","Server.PlanPayload","Plan.Model","Server.ObservePayload","Server.Readiness","Errors.isDomainKitError","Reason.ProviderUnavailable"],"sources":["../src/Transport.ts"],"sourcesContent":["/**\n * domainkit/client — the browser-side transport `@domainkit/react` consumes. Capability groups are\n * optional: a host that only exposes connection routes declares just `connection`, and the parts\n * of the UI that plan or clean up do not render.\n *\n *   const transport = Transport.fromFetch(\"/api/domainkit\")\n *\n * Every method decodes the same wire schemas `domainkit/server` encodes, so a failure arrives as\n * the `DomainKit.Error` the lifecycle raised, reason intact.\n */\nimport { Effect, Schema } from \"effect\";\n\nimport * as Approval from \"./Approval.ts\";\nimport type * as DnsRecord from \"./DnsRecord.ts\";\nimport * as Errors from \"./internal/error.ts\";\nimport * as Http from \"./internal/http.ts\";\nimport * as Plan from \"./Plan.ts\";\nimport * as Reason from \"./Reason.ts\";\nimport * as Receipt from \"./Receipt.ts\";\nimport * as Server from \"./Server.ts\";\n\ntype Fx<A> = Effect.Effect<A, Errors.DomainKitError>;\n\nexport type Snapshot = Server.Snapshot;\nexport type Started = Server.Started;\nexport type Readiness = Server.Readiness;\nexport type Attempt = Server.Attempt;\nexport type Candidate = Server.Candidate;\nexport type Discovery = Server.Discovery;\nexport type Zone = Server.Zone;\nexport type Zones = Server.Zones;\nexport type Attachment = Server.Attachment;\nexport type Field = Server.Field;\nexport type MethodDescriptor = Server.MethodDescriptor;\nexport type Method = Server.Method;\n\n/** How a client asks to connect. Mirrors `Connect.Method`, over the wire. */\nexport const Method = {\n  /** A lone string for the common one-field provider, or the values its descriptor names. */\n  token: (values: string | Readonly<Record<string, string>>): Method =>\n    new Server.Token({ values: typeof values === \"string\" ? { token: values } : values }),\n  oauth: (options: { readonly returnTo?: string } = {}): Method => new Server.OAuth(options),\n  integration: (options: { readonly returnTo?: string } = {}): Method =>\n    new Server.Integration(options),\n} as const;\n\nexport interface ConnectionGroup {\n  readonly inspect: (domain: string) => Fx<Snapshot>;\n  /** Which of this owner's existing connections already reaches the domain. */\n  readonly discover: (domain: string) => Fx<Discovery>;\n  /** Every zone this owner's connections reach, and where each connection stands. */\n  readonly zones: (options?: { readonly provider?: string }) => Fx<Zones>;\n  /** Connect a provider. Without a domain the account connects alone and attaches nothing. */\n  readonly start: (input: {\n    readonly domain?: string;\n    readonly provider: string;\n    readonly method: Method;\n  }) => Fx<Started>;\n  /** Prove an account again for a connection this owner holds, keeping its domains. */\n  readonly reconnect: (input: {\n    readonly connectionId: string;\n    readonly method: Method;\n  }) => Fx<Started>;\n  readonly attach: (input: {\n    readonly connectionId: string;\n    readonly domain: string;\n    readonly zone?: string;\n  }) => Fx<Started>;\n  readonly detach: (attachmentId: string) => Fx<void>;\n  readonly disconnect: (connectionId: string) => Fx<void>;\n}\n\nexport interface ProvisioningGroup {\n  readonly plan: (input: {\n    readonly domain: string;\n    readonly requirements: ReadonlyArray<DnsRecord.Model>;\n  }) => Fx<Plan.Model>;\n  readonly approve: (input: {\n    readonly planId: Plan.PlanId;\n    readonly operationIds?: ReadonlyArray<Plan.OperationId>;\n  }) => Fx<Approval.Model>;\n  /** Decline the plan; terminal, and approving it afterwards fails `Stale`. */\n  readonly reject: (input: {\n    readonly planId: Plan.PlanId;\n    readonly reason?: string;\n  }) => Fx<Attempt>;\n  readonly apply: (approvalId: Approval.ApprovalId) => Fx<Receipt.Model>;\n  /** The stored plan with its status, approval, receipt, and rejection. */\n  readonly attempt: (planId: Plan.PlanId) => Fx<Attempt>;\n  /** What one apply landed, by receipt id, for a surface that holds the id and not the attempt. */\n  readonly receipt: (receiptId: Receipt.ReceiptId) => Fx<Receipt.Model>;\n}\n\nexport interface VerificationGroup {\n  /**\n   * Observe the domain's provisioning receipt, or `options.requirements` when supplied (required\n   * for a domain with no attachment).\n   */\n  readonly observe: (\n    domain: string,\n    options?: { readonly requirements?: ReadonlyArray<DnsRecord.Model> },\n  ) => Fx<Readiness>;\n  /** The stored readiness, without observing. `null` until the domain has been observed once. */\n  readonly latest: (domain: string) => Fx<Readiness | null>;\n}\n\nexport interface CleanupGroup {\n  readonly plan: (receiptId: Receipt.ReceiptId) => Fx<Plan.Model>;\n  readonly approve: (input: {\n    readonly planId: Plan.PlanId;\n    readonly operationIds?: ReadonlyArray<Plan.OperationId>;\n  }) => Fx<Approval.Model>;\n  readonly reject: (input: {\n    readonly planId: Plan.PlanId;\n    readonly reason?: string;\n  }) => Fx<Attempt>;\n  readonly apply: (approvalId: Approval.ApprovalId) => Fx<Receipt.Model>;\n}\n\nexport interface Interface {\n  readonly connection?: ConnectionGroup;\n  readonly provisioning?: ProvisioningGroup;\n  readonly verification?: VerificationGroup;\n  readonly cleanup?: CleanupGroup;\n}\n\nexport type Capability = keyof Interface;\n\nexport const allCapabilities: ReadonlyArray<Capability> = [\n  \"connection\",\n  \"provisioning\",\n  \"verification\",\n  \"cleanup\",\n];\n\n/** Which groups this transport actually carries, in declaration order. */\nexport const capabilities = (transport: Interface): ReadonlyArray<Capability> =>\n  allCapabilities.filter((capability) => transport[capability] !== undefined);\n\nexport interface FetchOptions {\n  readonly fetch?: Http.Fetch;\n  readonly headers?: HeadersInit | (() => HeadersInit | Promise<HeadersInit>);\n  /** Which groups the server exposes. Default: all. */\n  readonly capabilities?: ReadonlyArray<Capability>;\n}\n\n// ---------------------------------------------------------------------------------------------\n// fetch\n// ---------------------------------------------------------------------------------------------\n\n/** A transport over `domainkit/server` routes mounted at `baseUrl`. */\nexport const fromFetch = (baseUrl: string, options: FetchOptions = {}): Interface => {\n  const base = baseUrl.replace(/\\/+$/, \"\");\n  const source = safeOrigin(base);\n  // Resolved at call time and invoked as a free function: a browser `fetch` throws \"Illegal\n  // invocation\" when called as a method of anything but `window`, and a host may polyfill later.\n  const call: Http.Fetch = options.fetch ?? ((input, init) => globalThis.fetch(input, init));\n  const declared = options.capabilities ?? allCapabilities;\n\n  const request = <A>(input: {\n    readonly method: \"GET\" | \"POST\" | \"DELETE\";\n    readonly path: string;\n    readonly body?: unknown;\n    readonly success: Schema.Codec<A, unknown> | null;\n  }): Fx<A> =>\n    Effect.gen(function* () {\n      const headers = yield* Http.headersFrom(options.headers);\n      if (input.body !== undefined) headers.set(\"content-type\", \"application/json\");\n      const reply = yield* Http.requestJson({\n        fetch: call,\n        provider: source,\n        url: `${base}${input.path}`,\n        init: {\n          method: input.method,\n          headers,\n          ...(input.body === undefined ? {} : { body: JSON.stringify(input.body) }),\n        },\n      });\n      if (!reply.ok) {\n        // The server answers failures with the `DomainKit.Error` value itself. Anything else came\n        // from in front of it: a proxy, a login page, a maintenance window.\n        const decoded = yield* Effect.result(\n          Errors.decode(Errors.DomainKitError, reply.body, \"response\"),\n        );\n        return yield* decoded._tag === \"Success\"\n          ? Effect.fail(decoded.success)\n          : Effect.fail(\n              new Errors.DomainKitError({\n                reason: Http.classify(\n                  source,\n                  reply.status,\n                  reply.headers,\n                  `${input.method} ${input.path} answered ${reply.status}`,\n                ),\n              }),\n            );\n      }\n      if (input.success === null) return undefined as A;\n      return yield* Errors.decode(input.success, reply.body, \"response\");\n    });\n\n  /** Provisioning and cleanup share these routes; the attempt knows its kind. */\n  const approve = (input: {\n    readonly planId: Plan.PlanId;\n    readonly operationIds?: ReadonlyArray<Plan.OperationId>;\n  }) =>\n    request({\n      method: \"POST\",\n      path: `/plans/${encodeURIComponent(input.planId)}/approvals`,\n      body: Schema.encodeSync(Server.ApprovePayload)(\n        input.operationIds === undefined ? {} : { operationIds: input.operationIds },\n      ),\n      success: Approval.Model,\n    });\n\n  const reject = (input: { readonly planId: Plan.PlanId; readonly reason?: string }) =>\n    request({\n      method: \"POST\",\n      path: `/plans/${encodeURIComponent(input.planId)}/rejections`,\n      body: Schema.encodeSync(Server.RejectPayload)(\n        input.reason === undefined ? {} : { reason: input.reason },\n      ),\n      success: Server.Attempt,\n    });\n\n  const apply = (approvalId: Approval.ApprovalId) =>\n    request({\n      method: \"POST\",\n      path: `/approvals/${encodeURIComponent(approvalId)}/apply`,\n      success: Receipt.Model,\n    });\n\n  const connection: ConnectionGroup = {\n    inspect: (domain) =>\n      request({\n        method: \"GET\",\n        path: `/domains/${encodeURIComponent(domain)}`,\n        success: Server.Snapshot,\n      }),\n    discover: (domain) =>\n      request({\n        method: \"GET\",\n        path: `/domains/${encodeURIComponent(domain)}/discovery`,\n        success: Server.Discovery,\n      }),\n    zones: (filter) =>\n      request({\n        method: \"GET\",\n        path:\n          filter?.provider === undefined\n            ? \"/zones\"\n            : `/zones?provider=${encodeURIComponent(filter.provider)}`,\n        success: Server.Zones,\n      }),\n    start: (input) =>\n      request({\n        method: \"POST\",\n        path: \"/connections\",\n        body: Schema.encodeSync(Server.StartPayload)(\n          input.domain === undefined\n            ? { provider: input.provider, method: input.method }\n            : { domain: input.domain, provider: input.provider, method: input.method },\n        ),\n        success: Server.Started,\n      }),\n    reconnect: (input) =>\n      request({\n        method: \"POST\",\n        path: `/connections/${encodeURIComponent(input.connectionId)}/reconnections`,\n        body: Schema.encodeSync(Server.ReconnectPayload)({ method: input.method }),\n        success: Server.Started,\n      }),\n    attach: (input) =>\n      request({\n        method: \"POST\",\n        path: `/connections/${encodeURIComponent(input.connectionId)}/attachments`,\n        body: Schema.encodeSync(Server.AttachPayload)(\n          input.zone === undefined\n            ? { domain: input.domain }\n            : { domain: input.domain, zone: input.zone },\n        ),\n        success: Server.Started,\n      }),\n    detach: (attachmentId) =>\n      request({\n        method: \"DELETE\",\n        path: `/attachments/${encodeURIComponent(attachmentId)}`,\n        success: null,\n      }),\n    disconnect: (connectionId) =>\n      request({\n        method: \"DELETE\",\n        path: `/connections/${encodeURIComponent(connectionId)}`,\n        success: null,\n      }),\n  };\n\n  const provisioning: ProvisioningGroup = {\n    plan: (input) =>\n      request({\n        method: \"POST\",\n        path: `/domains/${encodeURIComponent(input.domain)}/plans`,\n        body: Schema.encodeSync(Server.PlanPayload)({ requirements: input.requirements }),\n        success: Plan.Model,\n      }),\n    approve,\n    reject,\n    apply,\n    attempt: (planId) =>\n      request({\n        method: \"GET\",\n        path: `/plans/${encodeURIComponent(planId)}`,\n        success: Server.Attempt,\n      }),\n    receipt: (receiptId) =>\n      request({\n        method: \"GET\",\n        path: `/receipts/${encodeURIComponent(receiptId)}`,\n        success: Receipt.Model,\n      }),\n  };\n\n  const verification: VerificationGroup = {\n    observe: (domain, input) =>\n      request({\n        method: \"POST\",\n        path: `/domains/${encodeURIComponent(domain)}/observations`,\n        body: Schema.encodeSync(Server.ObservePayload)(\n          input?.requirements === undefined ? {} : { requirements: input.requirements },\n        ),\n        success: Server.Readiness,\n      }),\n    latest: (domain) =>\n      request({\n        method: \"GET\",\n        path: `/domains/${encodeURIComponent(domain)}/readiness`,\n        success: Schema.NullOr(Server.Readiness),\n      }),\n  };\n\n  const cleanup: CleanupGroup = {\n    plan: (receiptId) =>\n      request({\n        method: \"POST\",\n        path: `/receipts/${encodeURIComponent(receiptId)}/cleanup-plans`,\n        success: Plan.Model,\n      }),\n    approve,\n    reject,\n    apply,\n  };\n\n  const groups = { connection, provisioning, verification, cleanup };\n  return Object.fromEntries(\n    allCapabilities\n      .filter((capability) => declared.includes(capability))\n      .map((capability) => [capability, groups[capability]]),\n  );\n};\n\n// ---------------------------------------------------------------------------------------------\n// Promise adapters\n// ---------------------------------------------------------------------------------------------\n\n/** The same transport in Promises, for hosts and tests that do not run Effect. */\nexport type AsyncTransport = {\n  readonly [K in keyof Interface]?: {\n    readonly [M in keyof NonNullable<Interface[K]>]: NonNullable<Interface[K]>[M] extends (\n      ...args: infer A\n    ) => Effect.Effect<infer R, Errors.DomainKitError>\n      ? (...args: A) => Promise<R>\n      : never;\n  };\n};\n\n/** Adapt a Promise-shaped transport; a rejection that is not a `DomainKit.Error` becomes one. */\nexport const fromAsync = (transport: AsyncTransport): Interface =>\n  mapGroups(\n    transport,\n    (method) =>\n      (...args: ReadonlyArray<never>) =>\n        Effect.tryPromise({\n          try: () => method(...args) as Promise<unknown>,\n          catch: (cause) =>\n            Errors.isDomainKitError(cause)\n              ? cause\n              : new Errors.DomainKitError({\n                  reason: new Reason.ProviderUnavailable({\n                    provider: \"domainkit\",\n                    message: `The transport rejected: ${String(cause)}`,\n                  }),\n                }),\n        }),\n  ) as Interface;\n\n/** Adapt to Promises; every rejection is the `DomainKit.Error` the lifecycle raised. */\nexport const toAsync = (transport: Interface): AsyncTransport =>\n  mapGroups(\n    transport,\n    (method) =>\n      (...args: ReadonlyArray<never>) =>\n        Effect.runPromise(method(...args) as Effect.Effect<unknown, Errors.DomainKitError>),\n  ) as AsyncTransport;\n\ntype AnyMethod = (...args: ReadonlyArray<never>) => unknown;\ntype AnyGroups = { readonly [key: string]: Record<string, AnyMethod> | undefined };\n\n/** Rebuild every declared group with each method wrapped; the two adapters differ only in `wrap`. */\nconst mapGroups = (source: object, wrap: (method: AnyMethod) => AnyMethod): unknown =>\n  Object.fromEntries(\n    allCapabilities.flatMap((capability) => {\n      const group = (source as AnyGroups)[capability];\n      if (group === undefined) return [];\n      return [\n        [\n          capability,\n          Object.fromEntries(Object.entries(group).map(([name, method]) => [name, wrap(method)])),\n        ],\n      ];\n    }),\n  );\n\n// ---------------------------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------------------------\n\nconst safeOrigin = (base: string): string => {\n  try {\n    return new URL(base).origin;\n  } catch {\n    return base === \"\" ? \"domainkit\" : base;\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAa,SAAS;;CAEpB,QAAQ,WACN,IAAIA,MAAa,EAAE,QAAQ,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAI,OAAO,CAAC;CACtF,QAAQ,UAA0C,CAAC,MAAc,IAAIC,MAAa,OAAO;CACzF,cAAc,UAA0C,CAAC,MACvD,IAAIC,YAAmB,OAAO;AAClC;AAoFA,MAAa,kBAA6C;CACxD;CACA;CACA;CACA;AACF;;AAGA,MAAa,gBAAgB,cAC3B,gBAAgB,QAAQ,eAAe,UAAU,gBAAgB,KAAA,CAAS;;AAc5E,MAAa,aAAa,SAAiB,UAAwB,CAAC,MAAiB;CACnF,MAAM,OAAO,QAAQ,QAAQ,QAAQ,EAAE;CACvC,MAAM,SAAS,WAAW,IAAI;CAG9B,MAAM,OAAmB,QAAQ,WAAW,OAAO,SAAS,WAAW,MAAM,OAAO,IAAI;CACxF,MAAM,WAAW,QAAQ,gBAAgB;CAEzC,MAAM,WAAc,UAMlB,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAOC,YAAiB,QAAQ,OAAO;EACvD,IAAI,MAAM,SAAS,KAAA,GAAW,QAAQ,IAAI,gBAAgB,kBAAkB;EAC5E,MAAM,QAAQ,OAAOC,YAAiB;GACpC,OAAO;GACP,UAAU;GACV,KAAK,GAAG,OAAO,MAAM;GACrB,MAAM;IACJ,QAAQ,MAAM;IACd;IACA,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,MAAM,IAAI,EAAE;GACzE;EACF,CAAC;EACD,IAAI,CAAC,MAAM,IAAI;GAGb,MAAM,UAAU,OAAO,OAAO,OAC5BC,OAAcC,gBAAuB,MAAM,MAAM,UAAU,CAC7D;GACA,OAAO,OAAO,QAAQ,SAAS,YAC3B,OAAO,KAAK,QAAQ,OAAO,IAC3B,OAAO,KACL,IAAIA,eAAsB,EACxB,QAAQC,SACN,QACA,MAAM,QACN,MAAM,SACN,GAAG,MAAM,OAAO,GAAG,MAAM,KAAK,YAAY,MAAM,QAClD,EACF,CAAC,CACH;EACN;EACA,IAAI,MAAM,YAAY,MAAM,OAAO,KAAA;EACnC,OAAO,OAAOF,OAAc,MAAM,SAAS,MAAM,MAAM,UAAU;CACnE,CAAC;;CAGH,MAAM,WAAW,UAIf,QAAQ;EACN,QAAQ;EACR,MAAM,UAAU,mBAAmB,MAAM,MAAM,EAAE;EACjD,MAAM,OAAO,WAAWG,cAAqB,CAAC,CAC5C,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa,CAC7E;EACA,SAASC;CACX,CAAC;CAEH,MAAM,UAAU,UACd,QAAQ;EACN,QAAQ;EACR,MAAM,UAAU,mBAAmB,MAAM,MAAM,EAAE;EACjD,MAAM,OAAO,WAAWC,aAAoB,CAAC,CAC3C,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO,CAC3D;EACA,SAASC;CACX,CAAC;CAEH,MAAM,SAAS,eACb,QAAQ;EACN,QAAQ;EACR,MAAM,cAAc,mBAAmB,UAAU,EAAE;EACnD,SAASC;CACX,CAAC;CA0HH,MAAM,SAAS;EAAE,YAAA;GAvHf,UAAU,WACR,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM;IAC3C,SAASC;GACX,CAAC;GACH,WAAW,WACT,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM,EAAE;IAC7C,SAASC;GACX,CAAC;GACH,QAAQ,WACN,QAAQ;IACN,QAAQ;IACR,MACE,QAAQ,aAAa,KAAA,IACjB,WACA,mBAAmB,mBAAmB,OAAO,QAAQ;IAC3D,SAASC;GACX,CAAC;GACH,QAAQ,UACN,QAAQ;IACN,QAAQ;IACR,MAAM;IACN,MAAM,OAAO,WAAWC,YAAmB,CAAC,CAC1C,MAAM,WAAW,KAAA,IACb;KAAE,UAAU,MAAM;KAAU,QAAQ,MAAM;IAAO,IACjD;KAAE,QAAQ,MAAM;KAAQ,UAAU,MAAM;KAAU,QAAQ,MAAM;IAAO,CAC7E;IACA,SAASC;GACX,CAAC;GACH,YAAY,UACV,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,MAAM,YAAY,EAAE;IAC7D,MAAM,OAAO,WAAWC,gBAAuB,CAAC,CAAC,EAAE,QAAQ,MAAM,OAAO,CAAC;IACzE,SAASD;GACX,CAAC;GACH,SAAS,UACP,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,MAAM,YAAY,EAAE;IAC7D,MAAM,OAAO,WAAWE,aAAoB,CAAC,CAC3C,MAAM,SAAS,KAAA,IACX,EAAE,QAAQ,MAAM,OAAO,IACvB;KAAE,QAAQ,MAAM;KAAQ,MAAM,MAAM;IAAK,CAC/C;IACA,SAASF;GACX,CAAC;GACH,SAAS,iBACP,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,YAAY;IACrD,SAAS;GACX,CAAC;GACH,aAAa,iBACX,QAAQ;IACN,QAAQ;IACR,MAAM,gBAAgB,mBAAmB,YAAY;IACrD,SAAS;GACX,CAAC;EA0DqB;EAAG,cAAA;GAtD3B,OAAO,UACL,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM,MAAM,EAAE;IACnD,MAAM,OAAO,WAAWG,WAAkB,CAAC,CAAC,EAAE,cAAc,MAAM,aAAa,CAAC;IAChF,SAASC;GACX,CAAC;GACH;GACA;GACA;GACA,UAAU,WACR,QAAQ;IACN,QAAQ;IACR,MAAM,UAAU,mBAAmB,MAAM;IACzC,SAASV;GACX,CAAC;GACH,UAAU,cACR,QAAQ;IACN,QAAQ;IACR,MAAM,aAAa,mBAAmB,SAAS;IAC/C,SAASC;GACX,CAAC;EAiCmC;EAAG,cAAA;GA7BzC,UAAU,QAAQ,UAChB,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM,EAAE;IAC7C,MAAM,OAAO,WAAWU,cAAqB,CAAC,CAC5C,OAAO,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa,CAC9E;IACA,SAASC;GACX,CAAC;GACH,SAAS,WACP,QAAQ;IACN,QAAQ;IACR,MAAM,YAAY,mBAAmB,MAAM,EAAE;IAC7C,SAAS,OAAO,OAAOA,SAAgB;GACzC,CAAC;EAeiD;EAAG,SAAA;GAXvD,OAAO,cACL,QAAQ;IACN,QAAQ;IACR,MAAM,aAAa,mBAAmB,SAAS,EAAE;IACjD,SAASF;GACX,CAAC;GACH;GACA;GACA;EAG6D;CAAE;CACjE,OAAO,OAAO,YACZ,gBACG,QAAQ,eAAe,SAAS,SAAS,UAAU,CAAC,CAAC,CACrD,KAAK,eAAe,CAAC,YAAY,OAAO,WAAW,CAAC,CACzD;AACF;;AAkBA,MAAa,aAAa,cACxB,UACE,YACC,YACE,GAAG,SACF,OAAO,WAAW;CAChB,WAAW,OAAO,GAAG,IAAI;CACzB,QAAQ,UACNG,iBAAwB,KAAK,IACzB,QACA,IAAIlB,eAAsB,EACxB,QAAQ,IAAImB,oBAA2B;EACrC,UAAU;EACV,SAAS,2BAA2B,OAAO,KAAK;CAClD,CAAC,EACH,CAAC;AACT,CAAC,CACP;;AAGF,MAAa,WAAW,cACtB,UACE,YACC,YACE,GAAG,SACF,OAAO,WAAW,OAAO,GAAG,IAAI,CAAkD,CACxF;;AAMF,MAAM,aAAa,QAAgB,SACjC,OAAO,YACL,gBAAgB,SAAS,eAAe;CACtC,MAAM,QAAS,OAAqB;CACpC,IAAI,UAAU,KAAA,GAAW,OAAO,CAAC;CACjC,OAAO,CACL,CACE,YACA,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CACxF,CACF;AACF,CAAC,CACH;AAMF,MAAM,cAAc,SAAyB;CAC3C,IAAI;EACF,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC;CACvB,QAAQ;EACN,OAAO,SAAS,KAAK,cAAc;CACrC;AACF"}

package/dist/Verify.mjs

@@ -17,6 +17,7 @@ import { Context, DateTime, Duration, Effect, Layer, Option, Schema } from "effe
 var Verify_exports = /* @__PURE__ */ __exportAll({
 	Evidence: () => Evidence,
 	HostEvidence: () => HostEvidence,
+	Observer: () => Observer,
 	Policy: () => Policy,
 	ProviderEvidence: () => ProviderEvidence,
 	PublicDnsEvidence: () => PublicDnsEvidence,
@@ -27,7 +28,9 @@ var Verify_exports = /* @__PURE__ */ __exportAll({
 	layer: () => layer,
 	make: () => make,
 	observe: () => observe,
-	statusAgainst: () => statusAgainst
+	requirementKey: () => requirementKey,
+	statusAgainst: () => statusAgainst,
+	summary: () => summary
 });
 /**
 * Every piece of evidence carries `values`, what the observer returned for the requirement's name
@@ -69,11 +72,49 @@ const Evidence = Schema.Union([
 	HostEvidence
 ]);
 var Service = class extends Context.Service()("@domainkit/Verify") {};
+/**
+* A requirement's identity: the record's type, name, and data, and nothing else. It is what a host
+* pairs its own rows against readiness by, instead of trusting the order of the array.
+* `@domainkit/react`'s `Records.identity` is this function.
+*/
+const requirementKey = (record) => [
+	record._tag,
+	record.name,
+	data(record)
+].join(":");
+/**
+* How a readiness stands, as counts. Pure and total: a host renders "3 of 4 found" from the stored
+* fact without deciding what an absent readiness means, because `observed` says so.
+*/
+const summary = (readiness) => {
+	const statuses = readiness?.requirements.map(({ status }) => status) ?? [];
+	const count = (status) => statuses.filter((candidate) => candidate === status).length;
+	return {
+		observed: readiness !== null,
+		total: statuses.length,
+		satisfied: count("satisfied"),
+		missing: count("missing"),
+		mismatch: count("mismatch"),
+		unknown: count("unknown")
+	};
+};
 const defaults = {
 	backoff: (pendingForMs) => pendingForMs < 6e4 ? 15e3 : pendingForMs < 6e5 ? 6e4 : pendingForMs < 36e5 ? 3e5 : 18e5,
 	quorum: "any"
 };
 var Policy = class extends Context.Reference("@domainkit/Verify/Policy", { defaultValue: () => defaults }) {};
+/**
+* The host seam for "DomainKit wrote readiness". The default does nothing; provide one with
+* `Effect.provideService(Verify.Observer, ...)` or `Layer.succeed(Verify.Observer, ...)` over
+* `DomainKit.layer`, the same way `Policy` is overridden.
+*
+* It runs after `storage.readiness.put` returns, outside any transaction, because `Storage`
+* exposes none. A failure or defect in the observer is logged and swallowed: the observation is
+* already durable, and losing it because a projection failed would make the stored fact depend on
+* the host's side effects. A host that needs the projection to be reliable enqueues durable work
+* here rather than doing the work inline.
+*/
+var Observer = class extends Context.Reference("@domainkit/Verify/Observer", { defaultValue: () => ({ readinessChanged: () => Effect.void }) }) {};
 const StoredEvidence = Schema.Array(Evidence);
 const StoredHost = Schema.Array(HostEvidence);
 /** A requirement is satisfied by an exact match; an exclusive one is contradicted by any same-set record. */
@@ -112,7 +153,7 @@ const overallOf = (requirements, host) => {
 	return requirements.length + host.length > 0 && requirements.every(({ status }) => status === "satisfied") && host.every(({ status }) => status === "ok") ? "ready" : "pending";
 };
 /** The identity of a requirement set: type, name, data, and policy, independent of labels and order. */
-const requirementKey = (requirements) => requirements.map(({ record }) => `${record._tag} ${record.name} ${data(record)} ${record.policy}`).sort().join("\n");
+const requirementSetKey = (requirements) => requirements.map(({ record }) => `${record._tag} ${record.name} ${data(record)} ${record.policy}`).sort().join("\n");
 const make = Effect.gen(function* () {
 	const storage = yield* Service$3;
 	const connect = yield* Service$4;
@@ -127,6 +168,7 @@ const make = Effect.gen(function* () {
 	});
 	const decodeRow = (row) => Effect.gen(function* () {
 		const requirements = yield* Effect.forEach(row.requirements, (requirement) => decode$1(StoredEvidence, requirement.evidence, "evidence").pipe(Effect.map((evidence) => ({
+			key: requirementKey(requirement.record),
 			operationId: requirement.operationId,
 			record: requirement.record,
 			status: requirement.status,
@@ -147,9 +189,10 @@ const make = Effect.gen(function* () {
 	const store = (input) => Effect.gen(function* () {
 		const principal = yield* Service$1;
 		const policy = yield* Policy;
+		const observer = yield* Observer;
 		const now = yield* DateTime.now;
 		const overall = overallOf(input.requirements, input.host);
-		const sameRequirements = Option.isSome(input.previous) && requirementKey(input.previous.value.requirements) === requirementKey(input.requirements);
+		const sameRequirements = Option.isSome(input.previous) && requirementSetKey(input.previous.value.requirements) === requirementSetKey(input.requirements);
 		const pendingSince = overall === "ready" ? null : sameRequirements && Option.isSome(input.previous) && input.previous.value.pendingSince !== null ? input.previous.value.pendingSince : now;
 		const nextCheckAt = pendingSince === null ? null : DateTime.addDuration(now, Duration.millis(policy.backoff(DateTime.toEpochMillis(now) - DateTime.toEpochMillis(pendingSince))));
 		const row = new Readiness({
@@ -169,7 +212,7 @@ const make = Effect.gen(function* () {
 			nextCheckAt
 		});
 		yield* storage.readiness.put(row);
-		return {
+		const readiness = {
 			domain: row.domain,
 			attachmentId: row.attachmentId,
 			overall,
@@ -178,6 +221,12 @@ const make = Effect.gen(function* () {
 			checkedAt: now,
 			nextCheckAt
 		};
+		yield* observer.readinessChanged({
+			domain: row.domain,
+			readiness,
+			cause: input.cause
+		}).pipe(Effect.catchCause((cause) => Effect.logWarning(`Verify.Observer failed for ${row.domain}`, cause)));
+		return readiness;
 	});
 	const defaultRequirements = (attachment) => Effect.gen(function* () {
 		const latest = yield* storage.attempts.latest(attachment.id, "provisioning");
@@ -236,10 +285,12 @@ const make = Effect.gen(function* () {
 				observedAt: now
 			}));
 			const publicStatus = quorumStatus(policy.quorum, publicEvidence.map(({ status }) => status));
+			const status = combine([...providerEvidence.map((evidence) => evidence.status), publicStatus]);
 			return {
+				key: requirementKey(record),
 				operationId,
 				record,
-				status: combine([...providerEvidence.map((evidence) => evidence.status), publicStatus]),
+				status,
 				evidence: [...providerEvidence, ...publicEvidence]
 			};
 		}), { concurrency: "unbounded" });
@@ -250,7 +301,8 @@ const make = Effect.gen(function* () {
 			attachment,
 			requirements: observed,
 			host,
-			previous
+			previous,
+			cause: "observe"
 		});
 	});
 	const attachEvidence = (input) => Effect.gen(function* () {
@@ -267,7 +319,8 @@ const make = Effect.gen(function* () {
 			attachment,
 			requirements: current.requirements,
 			host: [...bySource.values()],
-			previous
+			previous,
+			cause: "evidence"
 		});
 	});
 	const latest = (domain) => Effect.gen(function* () {
@@ -287,6 +340,6 @@ const observe = accessor((service) => service.observe);
 const attachEvidence = accessor((service) => service.attachEvidence);
 const latest = accessor((service) => service.latest);
 //#endregion
-export { Evidence, HostEvidence, Policy, ProviderEvidence, PublicDnsEvidence, Service, Verify_exports, attachEvidence, defaults, latest, layer, make, observe, statusAgainst };
+export { Evidence, HostEvidence, Observer, Policy, ProviderEvidence, PublicDnsEvidence, Service, Verify_exports, attachEvidence, defaults, latest, layer, make, observe, requirementKey, statusAgainst, summary };
 
 //# sourceMappingURL=Verify.mjs.map

package/dist/Verify.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Verify.mjs","names":["Storage.RequirementStatus","DnsRecord.equals","DnsRecord.sameSet","DnsRecord.data","Storage.Service","Connect.Service","Resolver.Service","DomainName.decode","Errors.decode","Principal.Service","Storage.Readiness","Errors.fail","Reason.InvalidInput"],"sources":["../src/Verify.ts"],"sourcesContent":["/**\n * Observe provider and public DNS for an attachment, persist per-requirement readiness, and say\n * when to look again. The host keeps its own state machine (and any provider-side verification\n * such as SES) and feeds that in as `HostEvidence`.\n */\nimport { Context, DateTime, Duration, Effect, Layer, Option, Schema } from \"effect\";\n\nimport * as Connect from \"./Connect.ts\";\nimport * as DnsRecord from \"./DnsRecord.ts\";\nimport * as Errors from \"./internal/error.ts\";\nimport * as Reason from \"./Reason.ts\";\nimport * as DomainName from \"./DomainName.ts\";\nimport type * as Plan from \"./Plan.ts\";\nimport * as Principal from \"./Principal.ts\";\nimport * as Resolver from \"./Resolver.ts\";\nimport * as Storage from \"./Storage.ts\";\n\n/**\n * Every piece of evidence carries `values`, what the observer returned for the requirement's name\n * and type (empty when nothing was found, the lookup timed out, or the resolver failed), and\n * `detail`, `null` when the requirement is satisfied and otherwise the mismatch summary or the\n * resolver's error text, so a host can render \"found X, expected Y\".\n */\n// Rows written before these fields existed decode with the empty values.\nconst Values = Schema.Array(Schema.String).pipe(Schema.withDecodingDefaultKey(Effect.succeed([])));\nconst Detail = Schema.NullOr(Schema.String).pipe(\n  Schema.withDecodingDefaultKey(Effect.succeed(null)),\n);\n\nexport class ProviderEvidence extends Schema.TaggedClass<ProviderEvidence>(\n  \"@domainkit/Evidence/Provider\",\n)(\"Provider\", {\n  provider: Schema.String,\n  status: Storage.RequirementStatus,\n  values: Values,\n  detail: Detail,\n  observedAt: Schema.DateTimeUtcFromString,\n}) {}\nexport class PublicDnsEvidence extends Schema.TaggedClass<PublicDnsEvidence>(\n  \"@domainkit/Evidence/PublicDns\",\n)(\"PublicDns\", {\n  resolver: Schema.String,\n  status: Storage.RequirementStatus,\n  values: Values,\n  detail: Detail,\n  observedAt: Schema.DateTimeUtcFromString,\n}) {}\n/** Anything the host knows that DomainKit cannot observe: SES identity status, a CDN cert, ... */\nexport class HostEvidence extends Schema.TaggedClass<HostEvidence>(\"@domainkit/Evidence/Host\")(\n  \"Host\",\n  {\n    source: Schema.String,\n    status: Schema.Literals([\"ok\", \"pending\", \"failed\"]),\n    label: Schema.String,\n    detail: Detail,\n    observedAt: Schema.DateTimeUtcFromString,\n  },\n) {}\nexport const Evidence = Schema.Union([ProviderEvidence, PublicDnsEvidence, HostEvidence]);\nexport type Evidence = typeof Evidence.Type;\n\nexport interface Requirement {\n  readonly operationId: Plan.OperationId | null;\n  readonly record: DnsRecord.Model;\n  readonly status: Storage.RequirementStatus;\n  readonly evidence: ReadonlyArray<Evidence>;\n}\n\nexport interface Readiness {\n  readonly domain: string;\n  /** `null` for observe-only domains that have no attachment. */\n  readonly attachmentId: string | null;\n  readonly overall: Storage.Overall;\n  readonly requirements: ReadonlyArray<Requirement>;\n  readonly host: ReadonlyArray<HostEvidence>;\n  readonly checkedAt: DateTime.Utc;\n  readonly nextCheckAt: DateTime.Utc | null;\n}\n\ntype Fx<A> = Effect.Effect<A, Errors.DomainKitError, Principal.Service>;\n\nexport interface Interface {\n  /**\n   * What to observe, in order of precedence: `requirements` when supplied (an attached domain\n   * without a provisioning receipt, or a domain with no attachment whose records the customer\n   * applies by hand), else the latest provisioning receipt of the domain's attachment (records it\n   * applied or found in place). Neither is `InvalidInput`. Provider evidence is added when the\n   * attachment's session can be built; public DNS is always observed, and readiness is stored\n   * per domain either way.\n   */\n  readonly observe: (input: {\n    readonly domain: string;\n    readonly requirements?: ReadonlyArray<DnsRecord.Model>;\n  }) => Fx<Readiness>;\n  /** Merge host evidence into stored readiness without re-observing DNS. */\n  readonly attachEvidence: (input: {\n    readonly domain: string;\n    readonly evidence: ReadonlyArray<HostEvidence>;\n  }) => Fx<Readiness>;\n  readonly latest: (domain: string) => Fx<Readiness | null>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/Verify\") {}\n\nexport interface PolicyShape {\n  /** Delay before the next check, given time since the first pending observation. Default ladder: 15s, 1m, 5m, 30m. */\n  readonly backoff: (pendingForMs: number) => number;\n  /** Which resolvers must agree for `satisfied`: default `any`. */\n  readonly quorum: \"any\" | \"all\" | { readonly minimum: number };\n}\nexport const defaults: PolicyShape = {\n  backoff: (pendingForMs) =>\n    pendingForMs < 60_000\n      ? 15_000\n      : pendingForMs < 10 * 60_000\n        ? 60_000\n        : pendingForMs < 60 * 60_000\n          ? 5 * 60_000\n          : 30 * 60_000,\n  quorum: \"any\",\n};\nexport class Policy extends Context.Reference<PolicyShape>(\"@domainkit/Verify/Policy\", {\n  defaultValue: () => defaults,\n}) {}\n\n// ---------------------------------------------------------------------------------------------\n// Implementation\n// ---------------------------------------------------------------------------------------------\n\nconst StoredEvidence = Schema.Array(Evidence);\n\ninterface ProviderSide {\n  readonly provider: string;\n  readonly records: ReadonlyArray<DnsRecord.Observed>;\n}\nconst StoredHost = Schema.Array(HostEvidence);\n\n/** A requirement is satisfied by an exact match; an exclusive one is contradicted by any same-set record. */\nexport const statusAgainst = (\n  record: DnsRecord.Model,\n  observed: ReadonlyArray<DnsRecord.Observed>,\n): Storage.RequirementStatus => {\n  if (observed.some((candidate) => DnsRecord.equals(candidate, record))) return \"satisfied\";\n  if (\n    record.policy === \"exclusive\" &&\n    observed.some((candidate) => DnsRecord.sameSet(candidate, record))\n  ) {\n    return \"mismatch\";\n  }\n  return \"missing\";\n};\n\ninterface Observation {\n  readonly status: Storage.RequirementStatus;\n  readonly values: ReadonlyArray<string>;\n  readonly detail: string | null;\n}\n\nconst render = (observed: DnsRecord.Observed): string =>\n  observed._tag === \"Opaque\" ? JSON.stringify(observed.raw) : DnsRecord.data(observed);\n\n/** Status plus what the observer holds for the requirement's name and type. */\nconst observation = (\n  record: DnsRecord.Model,\n  observed: ReadonlyArray<DnsRecord.Observed>,\n): Observation => {\n  const status = statusAgainst(record, observed);\n  const values = observed.filter((candidate) => DnsRecord.sameSet(candidate, record)).map(render);\n  const detail =\n    status === \"satisfied\"\n      ? null\n      : values.length === 0\n        ? `no ${record._tag} record at ${record.name}`\n        : `expected ${DnsRecord.data(record)}; found ${values.join(\", \")}`;\n  return { status, values, detail };\n};\n\nconst combine = (statuses: ReadonlyArray<Storage.RequirementStatus>): Storage.RequirementStatus => {\n  const known = statuses.filter((status) => status !== \"unknown\");\n  if (known.length === 0) return \"unknown\";\n  if (known.includes(\"mismatch\")) return \"mismatch\";\n  return known.every((status) => status === \"satisfied\") ? \"satisfied\" : \"missing\";\n};\n\nconst quorumStatus = (\n  quorum: PolicyShape[\"quorum\"],\n  statuses: ReadonlyArray<Storage.RequirementStatus>,\n): Storage.RequirementStatus => {\n  const known = statuses.filter((status) => status !== \"unknown\");\n  const satisfied = known.filter((status) => status === \"satisfied\").length;\n  const needed =\n    quorum === \"any\" ? 1 : quorum === \"all\" ? Math.max(1, known.length) : quorum.minimum;\n  if (known.includes(\"mismatch\")) return \"mismatch\";\n  if (known.length > 0 && satisfied >= needed) return \"satisfied\";\n  return known.length === 0 ? \"unknown\" : \"missing\";\n};\n\nconst overallOf = (\n  requirements: ReadonlyArray<{ readonly status: Storage.RequirementStatus }>,\n  host: ReadonlyArray<HostEvidence>,\n): Storage.Overall => {\n  if (\n    requirements.some(({ status }) => status === \"mismatch\") ||\n    host.some(({ status }) => status === \"failed\")\n  ) {\n    return \"failed\";\n  }\n  const ready =\n    requirements.length + host.length > 0 &&\n    requirements.every(({ status }) => status === \"satisfied\") &&\n    host.every(({ status }) => status === \"ok\");\n  return ready ? \"ready\" : \"pending\";\n};\n\n/** The identity of a requirement set: type, name, data, and policy, independent of labels and order. */\nconst requirementKey = (requirements: ReadonlyArray<{ readonly record: DnsRecord.Model }>) =>\n  requirements\n    .map(({ record }) => `${record._tag} ${record.name} ${DnsRecord.data(record)} ${record.policy}`)\n    .sort()\n    .join(\"\\n\");\n\nexport const make: Effect.Effect<\n  Interface,\n  never,\n  Storage.Service | Connect.Service | Resolver.Service\n> = Effect.gen(function* () {\n  const storage = yield* Storage.Service;\n  const connect = yield* Connect.Service;\n  const resolver = yield* Resolver.Service;\n\n  const attachmentFor = (\n    input: string,\n  ): Fx<{\n    readonly domain: DomainName.Model;\n    readonly attachment: Storage.Attachment | null;\n  }> =>\n    Effect.gen(function* () {\n      const domain = yield* DomainName.decode(input);\n      const attachment = yield* storage.attachments.byDomain(domain);\n      return { domain, attachment: Option.getOrNull(attachment) };\n    });\n\n  const decodeRow = (row: Storage.Readiness): Effect.Effect<Readiness, Errors.DomainKitError> =>\n    Effect.gen(function* () {\n      const requirements = yield* Effect.forEach(row.requirements, (requirement) =>\n        Errors.decode(StoredEvidence, requirement.evidence, \"evidence\").pipe(\n          Effect.map((evidence): Requirement => ({\n            operationId: requirement.operationId,\n            record: requirement.record,\n            status: requirement.status,\n            evidence,\n          })),\n        ),\n      );\n      const host = yield* Errors.decode(StoredHost, row.host, \"host\");\n      return {\n        domain: row.domain,\n        attachmentId: row.attachmentId,\n        overall: row.overall,\n        requirements,\n        host,\n        checkedAt: row.checkedAt,\n        nextCheckAt: row.nextCheckAt,\n      };\n    });\n\n  /** Persist readiness, carrying the pending streak forward for the backoff ladder. */\n  const store = (input: {\n    readonly domain: string;\n    readonly attachment: Storage.Attachment | null;\n    readonly requirements: ReadonlyArray<Requirement>;\n    readonly host: ReadonlyArray<HostEvidence>;\n    readonly previous: Option.Option<Storage.Readiness>;\n  }): Fx<Readiness> =>\n    Effect.gen(function* () {\n      const principal = yield* Principal.Service;\n      const policy = yield* Policy;\n      const now = yield* DateTime.now;\n      const overall = overallOf(input.requirements, input.host);\n      const sameRequirements =\n        Option.isSome(input.previous) &&\n        requirementKey(input.previous.value.requirements) === requirementKey(input.requirements);\n      const pendingSince =\n        overall === \"ready\"\n          ? null\n          : sameRequirements &&\n              Option.isSome(input.previous) &&\n              input.previous.value.pendingSince !== null\n            ? input.previous.value.pendingSince\n            : now;\n      const nextCheckAt =\n        pendingSince === null\n          ? null\n          : DateTime.addDuration(\n              now,\n              Duration.millis(\n                policy.backoff(DateTime.toEpochMillis(now) - DateTime.toEpochMillis(pendingSince)),\n              ),\n            );\n      const row = new Storage.Readiness({\n        domain: input.domain,\n        attachmentId: input.attachment?.id ?? null,\n        ownerId: principal.ownerId,\n        overall,\n        requirements: input.requirements.map((requirement) => ({\n          operationId: requirement.operationId,\n          record: requirement.record,\n          status: requirement.status,\n          evidence: Schema.encodeSync(StoredEvidence)(requirement.evidence),\n        })),\n        host: Schema.encodeSync(StoredHost)(input.host),\n        pendingSince,\n        checkedAt: now,\n        nextCheckAt,\n      });\n      yield* storage.readiness.put(row);\n      return {\n        domain: row.domain,\n        attachmentId: row.attachmentId,\n        overall,\n        requirements: input.requirements,\n        host: input.host,\n        checkedAt: now,\n        nextCheckAt,\n      };\n    });\n\n  const defaultRequirements = (\n    attachment: Storage.Attachment,\n  ): Fx<\n    ReadonlyArray<{\n      readonly operationId: Plan.OperationId | null;\n      readonly record: DnsRecord.Model;\n    }>\n  > =>\n    Effect.gen(function* () {\n      const latest = yield* storage.attempts.latest(attachment.id, \"provisioning\");\n      if (Option.isNone(latest) || latest.value.receipt === null) {\n        return yield* Errors.fail(\n          new Reason.InvalidInput({\n            message: `${attachment.domain} has no provisioning receipt; pass requirements to observe`,\n            field: \"requirements\",\n          }),\n        );\n      }\n      const receipt = latest.value.receipt;\n      const inPlace = new Set(\n        receipt.outcomes.flatMap((outcome) =>\n          outcome._tag === \"Applied\" || (outcome._tag === \"Skipped\" && outcome.reason === \"noop\")\n            ? [outcome.operationId]\n            : [],\n        ),\n      );\n      return latest.value.plan.operations\n        .filter((operation) => inPlace.has(operation.id))\n        .map((operation) => ({ operationId: operation.id, record: operation.record }));\n    });\n\n  const observe: Interface[\"observe\"] = (input) =>\n    Effect.gen(function* () {\n      const policy = yield* Policy;\n      const { domain, attachment } = yield* attachmentFor(input.domain);\n      if (input.requirements === undefined && attachment === null) {\n        return yield* Errors.fail(\n          new Reason.InvalidInput({\n            message: `${domain} is not attached; pass requirements to observe public DNS`,\n            field: \"requirements\",\n          }),\n        );\n      }\n      const requirements =\n        input.requirements === undefined && attachment !== null\n          ? yield* defaultRequirements(attachment)\n          : (input.requirements ?? []).map((record) => ({ operationId: null, record }));\n      if (requirements.length === 0) {\n        return yield* Errors.fail(\n          new Reason.InvalidInput({\n            message: \"Nothing to observe: pass at least one requirement\",\n            field: \"requirements\",\n          }),\n        );\n      }\n      const now = yield* DateTime.now;\n      // Provider readback is evidence when the attachment's session can be built; when it\n      // cannot (no attachment, revoked credential, provider outage) public DNS stands alone.\n      const providerSide = yield* attachment === null\n        ? Effect.succeed(Option.none<ProviderSide>())\n        : Effect.gen(function* () {\n            const connection = yield* storage.connections.get(attachment.connectionId);\n            const authorization = yield* storage.authorizations.get(connection.authorizationId);\n            const { session, target } = yield* connect.session(attachment.id);\n            const observed = yield* session.dns(target).list(target.zone);\n            return Option.some<ProviderSide>({\n              provider: authorization.provider,\n              records: observed.map(({ record }) => record),\n            });\n          }).pipe(Effect.catch(() => Effect.succeed(Option.none<ProviderSide>())));\n      const observed = yield* Effect.forEach(\n        requirements,\n        ({ operationId, record }) =>\n          Effect.gen(function* () {\n            const providerEvidence = Option.isSome(providerSide)\n              ? [\n                  new ProviderEvidence({\n                    provider: providerSide.value.provider,\n                    ...observation(record, providerSide.value.records),\n                    observedAt: now,\n                  }),\n                ]\n              : [];\n            const outcomes = yield* resolver.resolve(record.name, record._tag);\n            const publicEvidence = outcomes.map((outcome) =>\n              outcome._tag === \"Answered\"\n                ? new PublicDnsEvidence({\n                    resolver: outcome.answer.resolver,\n                    ...observation(record, outcome.answer.records),\n                    observedAt: now,\n                  })\n                : new PublicDnsEvidence({\n                    resolver: outcome.resolver,\n                    status: \"unknown\",\n                    values: [],\n                    detail:\n                      outcome._tag === \"TimedOut\"\n                        ? `${outcome.resolver} timed out`\n                        : outcome.message,\n                    observedAt: now,\n                  }),\n            );\n            const publicStatus = quorumStatus(\n              policy.quorum,\n              publicEvidence.map(({ status }) => status),\n            );\n            const status = combine([\n              ...providerEvidence.map((evidence) => evidence.status),\n              publicStatus,\n            ]);\n            return {\n              operationId,\n              record,\n              status,\n              evidence: [...providerEvidence, ...publicEvidence],\n            } satisfies Requirement;\n          }),\n        { concurrency: \"unbounded\" },\n      );\n      const previous = yield* storage.readiness.get(domain);\n      const host = Option.isSome(previous)\n        ? yield* Errors.decode(StoredHost, previous.value.host, \"host\")\n        : [];\n      return yield* store({ domain, attachment, requirements: observed, host, previous });\n    });\n\n  const attachEvidence: Interface[\"attachEvidence\"] = (input) =>\n    Effect.gen(function* () {\n      const { domain, attachment } = yield* attachmentFor(input.domain);\n      const previous = yield* storage.readiness.get(domain);\n      const current = Option.isSome(previous)\n        ? yield* decodeRow(previous.value)\n        : {\n            requirements: [] as ReadonlyArray<Requirement>,\n            host: [] as ReadonlyArray<HostEvidence>,\n          };\n      const bySource = new Map(current.host.map((evidence) => [evidence.source, evidence]));\n      for (const evidence of input.evidence) bySource.set(evidence.source, evidence);\n      return yield* store({\n        domain,\n        attachment,\n        requirements: current.requirements,\n        host: [...bySource.values()],\n        previous,\n      });\n    });\n\n  const latest: Interface[\"latest\"] = (domain) =>\n    Effect.gen(function* () {\n      const { domain: name } = yield* attachmentFor(domain);\n      const stored = yield* storage.readiness.get(name);\n      return Option.isSome(stored) ? yield* decodeRow(stored.value) : null;\n    });\n\n  return { observe, attachEvidence, latest };\n});\n\nexport const layer: Layer.Layer<\n  Service,\n  never,\n  Storage.Service | Connect.Service | Resolver.Service\n> = Layer.effect(Service)(make);\n\nconst accessor =\n  <Args extends ReadonlyArray<unknown>, A>(\n    pick: (service: Interface) => (...args: Args) => Fx<A>,\n  ): ((...args: Args) => Effect.Effect<A, Errors.DomainKitError, Principal.Service | Service>) =>\n  (...args) =>\n    Effect.flatMap(Service, (service) => pick(service)(...args));\n\nexport const observe = accessor((service) => service.observe);\nexport const attachEvidence = accessor((service) => service.attachEvidence);\nexport const latest = accessor((service) => service.latest);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,uBAAuB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAC1C,OAAO,uBAAuB,OAAO,QAAQ,IAAI,CAAC,CACpD;AAEA,IAAa,mBAAb,cAAsC,OAAO,YAC3C,8BACF,CAAC,CAAC,YAAY;CACZ,UAAU,OAAO;CACjB,QAAQA;CACR,QAAQ;CACR,QAAQ;CACR,YAAY,OAAO;AACrB,CAAC,CAAC,CAAC,CAAC;AACJ,IAAa,oBAAb,cAAuC,OAAO,YAC5C,+BACF,CAAC,CAAC,aAAa;CACb,UAAU,OAAO;CACjB,QAAQA;CACR,QAAQ;CACR,QAAQ;CACR,YAAY,OAAO;AACrB,CAAC,CAAC,CAAC,CAAC;;AAEJ,IAAa,eAAb,cAAkC,OAAO,YAA0B,0BAA0B,CAAC,CAC5F,QACA;CACE,QAAQ,OAAO;CACf,QAAQ,OAAO,SAAS;EAAC;EAAM;EAAW;CAAQ,CAAC;CACnD,OAAO,OAAO;CACd,QAAQ;CACR,YAAY,OAAO;AACrB,CACF,CAAC,CAAC,CAAC;AACH,MAAa,WAAW,OAAO,MAAM;CAAC;CAAkB;CAAmB;AAAY,CAAC;AA4CxF,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAQzF,MAAa,WAAwB;CACnC,UAAU,iBACR,eAAe,MACX,OACA,eAAe,MACb,MACA,eAAe,OACb,MACA;CACV,QAAQ;AACV;AACA,IAAa,SAAb,cAA4B,QAAQ,UAAuB,4BAA4B,EACrF,oBAAoB,SACtB,CAAC,CAAC,CAAC,CAAC;AAMJ,MAAM,iBAAiB,OAAO,MAAM,QAAQ;AAM5C,MAAM,aAAa,OAAO,MAAM,YAAY;;AAG5C,MAAa,iBACX,QACA,aAC8B;CAC9B,IAAI,SAAS,MAAM,cAAcC,OAAiB,WAAW,MAAM,CAAC,GAAG,OAAO;CAC9E,IACE,OAAO,WAAW,eAClB,SAAS,MAAM,cAAcC,QAAkB,WAAW,MAAM,CAAC,GAEjE,OAAO;CAET,OAAO;AACT;AAQA,MAAM,UAAU,aACd,SAAS,SAAS,WAAW,KAAK,UAAU,SAAS,GAAG,IAAIC,KAAe,QAAQ;;AAGrF,MAAM,eACJ,QACA,aACgB;CAChB,MAAM,SAAS,cAAc,QAAQ,QAAQ;CAC7C,MAAM,SAAS,SAAS,QAAQ,cAAcD,QAAkB,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM;CAO9F,OAAO;EAAE;EAAQ;EAAQ,QALvB,WAAW,cACP,OACA,OAAO,WAAW,IAChB,MAAM,OAAO,KAAK,aAAa,OAAO,SACtC,YAAYC,KAAe,MAAM,EAAE,UAAU,OAAO,KAAK,IAAI;CACrC;AAClC;AAEA,MAAM,WAAW,aAAkF;CACjG,MAAM,QAAQ,SAAS,QAAQ,WAAW,WAAW,SAAS;CAC9D,IAAI,MAAM,WAAW,GAAG,OAAO;CAC/B,IAAI,MAAM,SAAS,UAAU,GAAG,OAAO;CACvC,OAAO,MAAM,OAAO,WAAW,WAAW,WAAW,IAAI,cAAc;AACzE;AAEA,MAAM,gBACJ,QACA,aAC8B;CAC9B,MAAM,QAAQ,SAAS,QAAQ,WAAW,WAAW,SAAS;CAC9D,MAAM,YAAY,MAAM,QAAQ,WAAW,WAAW,WAAW,CAAC,CAAC;CACnE,MAAM,SACJ,WAAW,QAAQ,IAAI,WAAW,QAAQ,KAAK,IAAI,GAAG,MAAM,MAAM,IAAI,OAAO;CAC/E,IAAI,MAAM,SAAS,UAAU,GAAG,OAAO;CACvC,IAAI,MAAM,SAAS,KAAK,aAAa,QAAQ,OAAO;CACpD,OAAO,MAAM,WAAW,IAAI,YAAY;AAC1C;AAEA,MAAM,aACJ,cACA,SACoB;CACpB,IACE,aAAa,MAAM,EAAE,aAAa,WAAW,UAAU,KACvD,KAAK,MAAM,EAAE,aAAa,WAAW,QAAQ,GAE7C,OAAO;CAMT,OAHE,aAAa,SAAS,KAAK,SAAS,KACpC,aAAa,OAAO,EAAE,aAAa,WAAW,WAAW,KACzD,KAAK,OAAO,EAAE,aAAa,WAAW,IAAI,IAC7B,UAAU;AAC3B;;AAGA,MAAM,kBAAkB,iBACtB,aACG,KAAK,EAAE,aAAa,GAAG,OAAO,KAAK,GAAG,OAAO,KAAK,GAAGA,KAAe,MAAM,EAAE,GAAG,OAAO,QAAQ,CAAC,CAC/F,KAAK,CAAC,CACN,KAAK,IAAI;AAEd,MAAa,OAIT,OAAO,IAAI,aAAa;CAC1B,MAAM,UAAU,OAAOC;CACvB,MAAM,UAAU,OAAOC;CACvB,MAAM,WAAW,OAAOC;CAExB,MAAM,iBACJ,UAKA,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAOC,OAAkB,KAAK;EAC7C,MAAM,aAAa,OAAO,QAAQ,YAAY,SAAS,MAAM;EAC7D,OAAO;GAAE;GAAQ,YAAY,OAAO,UAAU,UAAU;EAAE;CAC5D,CAAC;CAEH,MAAM,aAAa,QACjB,OAAO,IAAI,aAAa;EACtB,MAAM,eAAe,OAAO,OAAO,QAAQ,IAAI,eAAe,gBAC5DC,SAAc,gBAAgB,YAAY,UAAU,UAAU,CAAC,CAAC,KAC9D,OAAO,KAAK,cAA2B;GACrC,aAAa,YAAY;GACzB,QAAQ,YAAY;GACpB,QAAQ,YAAY;GACpB;EACF,EAAE,CACJ,CACF;EACA,MAAM,OAAO,OAAOA,SAAc,YAAY,IAAI,MAAM,MAAM;EAC9D,OAAO;GACL,QAAQ,IAAI;GACZ,cAAc,IAAI;GAClB,SAAS,IAAI;GACb;GACA;GACA,WAAW,IAAI;GACf,aAAa,IAAI;EACnB;CACF,CAAC;;CAGH,MAAM,SAAS,UAOb,OAAO,IAAI,aAAa;EACtB,MAAM,YAAY,OAAOC;EACzB,MAAM,SAAS,OAAO;EACtB,MAAM,MAAM,OAAO,SAAS;EAC5B,MAAM,UAAU,UAAU,MAAM,cAAc,MAAM,IAAI;EACxD,MAAM,mBACJ,OAAO,OAAO,MAAM,QAAQ,KAC5B,eAAe,MAAM,SAAS,MAAM,YAAY,MAAM,eAAe,MAAM,YAAY;EACzF,MAAM,eACJ,YAAY,UACR,OACA,oBACE,OAAO,OAAO,MAAM,QAAQ,KAC5B,MAAM,SAAS,MAAM,iBAAiB,OACtC,MAAM,SAAS,MAAM,eACrB;EACR,MAAM,cACJ,iBAAiB,OACb,OACA,SAAS,YACP,KACA,SAAS,OACP,OAAO,QAAQ,SAAS,cAAc,GAAG,IAAI,SAAS,cAAc,YAAY,CAAC,CACnF,CACF;EACN,MAAM,MAAM,IAAIC,UAAkB;GAChC,QAAQ,MAAM;GACd,cAAc,MAAM,YAAY,MAAM;GACtC,SAAS,UAAU;GACnB;GACA,cAAc,MAAM,aAAa,KAAK,iBAAiB;IACrD,aAAa,YAAY;IACzB,QAAQ,YAAY;IACpB,QAAQ,YAAY;IACpB,UAAU,OAAO,WAAW,cAAc,CAAC,CAAC,YAAY,QAAQ;GAClE,EAAE;GACF,MAAM,OAAO,WAAW,UAAU,CAAC,CAAC,MAAM,IAAI;GAC9C;GACA,WAAW;GACX;EACF,CAAC;EACD,OAAO,QAAQ,UAAU,IAAI,GAAG;EAChC,OAAO;GACL,QAAQ,IAAI;GACZ,cAAc,IAAI;GAClB;GACA,cAAc,MAAM;GACpB,MAAM,MAAM;GACZ,WAAW;GACX;EACF;CACF,CAAC;CAEH,MAAM,uBACJ,eAOA,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,QAAQ,SAAS,OAAO,WAAW,IAAI,cAAc;EAC3E,IAAI,OAAO,OAAO,MAAM,KAAK,OAAO,MAAM,YAAY,MACpD,OAAO,OAAOC,KACZ,IAAIC,aAAoB;GACtB,SAAS,GAAG,WAAW,OAAO;GAC9B,OAAO;EACT,CAAC,CACH;EAEF,MAAM,UAAU,OAAO,MAAM;EAC7B,MAAM,UAAU,IAAI,IAClB,QAAQ,SAAS,SAAS,YACxB,QAAQ,SAAS,aAAc,QAAQ,SAAS,aAAa,QAAQ,WAAW,SAC5E,CAAC,QAAQ,WAAW,IACpB,CAAC,CACP,CACF;EACA,OAAO,OAAO,MAAM,KAAK,WACtB,QAAQ,cAAc,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC,CAChD,KAAK,eAAe;GAAE,aAAa,UAAU;GAAI,QAAQ,UAAU;EAAO,EAAE;CACjF,CAAC;CAEH,MAAM,WAAiC,UACrC,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO;EACtB,MAAM,EAAE,QAAQ,eAAe,OAAO,cAAc,MAAM,MAAM;EAChE,IAAI,MAAM,iBAAiB,KAAA,KAAa,eAAe,MACrD,OAAO,OAAOD,KACZ,IAAIC,aAAoB;GACtB,SAAS,GAAG,OAAO;GACnB,OAAO;EACT,CAAC,CACH;EAEF,MAAM,eACJ,MAAM,iBAAiB,KAAA,KAAa,eAAe,OAC/C,OAAO,oBAAoB,UAAU,KACpC,MAAM,gBAAgB,CAAC,EAAA,CAAG,KAAK,YAAY;GAAE,aAAa;GAAM;EAAO,EAAE;EAChF,IAAI,aAAa,WAAW,GAC1B,OAAO,OAAOD,KACZ,IAAIC,aAAoB;GACtB,SAAS;GACT,OAAO;EACT,CAAC,CACH;EAEF,MAAM,MAAM,OAAO,SAAS;EAG5B,MAAM,eAAe,OAAO,eAAe,OACvC,OAAO,QAAQ,OAAO,KAAmB,CAAC,IAC1C,OAAO,IAAI,aAAa;GACtB,MAAM,aAAa,OAAO,QAAQ,YAAY,IAAI,WAAW,YAAY;GACzE,MAAM,gBAAgB,OAAO,QAAQ,eAAe,IAAI,WAAW,eAAe;GAClF,MAAM,EAAE,SAAS,WAAW,OAAO,QAAQ,QAAQ,WAAW,EAAE;GAChE,MAAM,WAAW,OAAO,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,OAAO,IAAI;GAC5D,OAAO,OAAO,KAAmB;IAC/B,UAAU,cAAc;IACxB,SAAS,SAAS,KAAK,EAAE,aAAa,MAAM;GAC9C,CAAC;EACH,CAAC,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,OAAO,KAAmB,CAAC,CAAC,CAAC;EAC3E,MAAM,WAAW,OAAO,OAAO,QAC7B,eACC,EAAE,aAAa,aACd,OAAO,IAAI,aAAa;GACtB,MAAM,mBAAmB,OAAO,OAAO,YAAY,IAC/C,CACE,IAAI,iBAAiB;IACnB,UAAU,aAAa,MAAM;IAC7B,GAAG,YAAY,QAAQ,aAAa,MAAM,OAAO;IACjD,YAAY;GACd,CAAC,CACH,IACA,CAAC;GAEL,MAAM,kBAAiB,OADC,SAAS,QAAQ,OAAO,MAAM,OAAO,IAAI,EAAA,CACjC,KAAK,YACnC,QAAQ,SAAS,aACb,IAAI,kBAAkB;IACpB,UAAU,QAAQ,OAAO;IACzB,GAAG,YAAY,QAAQ,QAAQ,OAAO,OAAO;IAC7C,YAAY;GACd,CAAC,IACD,IAAI,kBAAkB;IACpB,UAAU,QAAQ;IAClB,QAAQ;IACR,QAAQ,CAAC;IACT,QACE,QAAQ,SAAS,aACb,GAAG,QAAQ,SAAS,cACpB,QAAQ;IACd,YAAY;GACd,CAAC,CACP;GACA,MAAM,eAAe,aACnB,OAAO,QACP,eAAe,KAAK,EAAE,aAAa,MAAM,CAC3C;GAKA,OAAO;IACL;IACA;IACA,QAPa,QAAQ,CACrB,GAAG,iBAAiB,KAAK,aAAa,SAAS,MAAM,GACrD,YACF,CAIO;IACL,UAAU,CAAC,GAAG,kBAAkB,GAAG,cAAc;GACnD;EACF,CAAC,GACH,EAAE,aAAa,YAAY,CAC7B;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,IAAI,MAAM;EACpD,MAAM,OAAO,OAAO,OAAO,QAAQ,IAC/B,OAAOJ,SAAc,YAAY,SAAS,MAAM,MAAM,MAAM,IAC5D,CAAC;EACL,OAAO,OAAO,MAAM;GAAE;GAAQ;GAAY,cAAc;GAAU;GAAM;EAAS,CAAC;CACpF,CAAC;CAEH,MAAM,kBAA+C,UACnD,OAAO,IAAI,aAAa;EACtB,MAAM,EAAE,QAAQ,eAAe,OAAO,cAAc,MAAM,MAAM;EAChE,MAAM,WAAW,OAAO,QAAQ,UAAU,IAAI,MAAM;EACpD,MAAM,UAAU,OAAO,OAAO,QAAQ,IAClC,OAAO,UAAU,SAAS,KAAK,IAC/B;GACE,cAAc,CAAC;GACf,MAAM,CAAC;EACT;EACJ,MAAM,WAAW,IAAI,IAAI,QAAQ,KAAK,KAAK,aAAa,CAAC,SAAS,QAAQ,QAAQ,CAAC,CAAC;EACpF,KAAK,MAAM,YAAY,MAAM,UAAU,SAAS,IAAI,SAAS,QAAQ,QAAQ;EAC7E,OAAO,OAAO,MAAM;GAClB;GACA;GACA,cAAc,QAAQ;GACtB,MAAM,CAAC,GAAG,SAAS,OAAO,CAAC;GAC3B;EACF,CAAC;CACH,CAAC;CAEH,MAAM,UAA+B,WACnC,OAAO,IAAI,aAAa;EACtB,MAAM,EAAE,QAAQ,SAAS,OAAO,cAAc,MAAM;EACpD,MAAM,SAAS,OAAO,QAAQ,UAAU,IAAI,IAAI;EAChD,OAAO,OAAO,OAAO,MAAM,IAAI,OAAO,UAAU,OAAO,KAAK,IAAI;CAClE,CAAC;CAEH,OAAO;EAAE;EAAS;EAAgB;CAAO;AAC3C,CAAC;AAED,MAAa,QAIT,MAAM,OAAO,OAAO,CAAC,CAAC,IAAI;AAE9B,MAAM,YAEF,UAED,GAAG,SACF,OAAO,QAAQ,UAAU,YAAY,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;AAE/D,MAAa,UAAU,UAAU,YAAY,QAAQ,OAAO;AAC5D,MAAa,iBAAiB,UAAU,YAAY,QAAQ,cAAc;AAC1E,MAAa,SAAS,UAAU,YAAY,QAAQ,MAAM"}
+{"version":3,"file":"Verify.mjs","names":["Storage.RequirementStatus","DnsRecord.data","DnsRecord.equals","DnsRecord.sameSet","Storage.Service","Connect.Service","Resolver.Service","DomainName.decode","Errors.decode","Principal.Service","Storage.Readiness","Errors.fail","Reason.InvalidInput"],"sources":["../src/Verify.ts"],"sourcesContent":["/**\n * Observe provider and public DNS for an attachment, persist per-requirement readiness, and say\n * when to look again. The host keeps its own state machine (and any provider-side verification\n * such as SES) and feeds that in as `HostEvidence`.\n */\nimport { Context, DateTime, Duration, Effect, Layer, Option, Schema } from \"effect\";\n\nimport * as Connect from \"./Connect.ts\";\nimport * as DnsRecord from \"./DnsRecord.ts\";\nimport * as Errors from \"./internal/error.ts\";\nimport * as Reason from \"./Reason.ts\";\nimport * as DomainName from \"./DomainName.ts\";\nimport type * as Plan from \"./Plan.ts\";\nimport * as Principal from \"./Principal.ts\";\nimport * as Resolver from \"./Resolver.ts\";\nimport * as Storage from \"./Storage.ts\";\n\n/**\n * Every piece of evidence carries `values`, what the observer returned for the requirement's name\n * and type (empty when nothing was found, the lookup timed out, or the resolver failed), and\n * `detail`, `null` when the requirement is satisfied and otherwise the mismatch summary or the\n * resolver's error text, so a host can render \"found X, expected Y\".\n */\n// Rows written before these fields existed decode with the empty values.\nconst Values = Schema.Array(Schema.String).pipe(Schema.withDecodingDefaultKey(Effect.succeed([])));\nconst Detail = Schema.NullOr(Schema.String).pipe(\n  Schema.withDecodingDefaultKey(Effect.succeed(null)),\n);\n\nexport class ProviderEvidence extends Schema.TaggedClass<ProviderEvidence>(\n  \"@domainkit/Evidence/Provider\",\n)(\"Provider\", {\n  provider: Schema.String,\n  status: Storage.RequirementStatus,\n  values: Values,\n  detail: Detail,\n  observedAt: Schema.DateTimeUtcFromString,\n}) {}\nexport class PublicDnsEvidence extends Schema.TaggedClass<PublicDnsEvidence>(\n  \"@domainkit/Evidence/PublicDns\",\n)(\"PublicDns\", {\n  resolver: Schema.String,\n  status: Storage.RequirementStatus,\n  values: Values,\n  detail: Detail,\n  observedAt: Schema.DateTimeUtcFromString,\n}) {}\n/** Anything the host knows that DomainKit cannot observe: SES identity status, a CDN cert, ... */\nexport class HostEvidence extends Schema.TaggedClass<HostEvidence>(\"@domainkit/Evidence/Host\")(\n  \"Host\",\n  {\n    source: Schema.String,\n    status: Schema.Literals([\"ok\", \"pending\", \"failed\"]),\n    label: Schema.String,\n    detail: Detail,\n    observedAt: Schema.DateTimeUtcFromString,\n  },\n) {}\nexport const Evidence = Schema.Union([ProviderEvidence, PublicDnsEvidence, HostEvidence]);\nexport type Evidence = typeof Evidence.Type;\n\nexport interface Requirement {\n  /** `requirementKey(record)`: what a host pairs its own row against, by content. */\n  readonly key: string;\n  readonly operationId: Plan.OperationId | null;\n  readonly record: DnsRecord.Model;\n  readonly status: Storage.RequirementStatus;\n  readonly evidence: ReadonlyArray<Evidence>;\n}\n\nexport interface Readiness {\n  readonly domain: string;\n  /** `null` for observe-only domains that have no attachment. */\n  readonly attachmentId: string | null;\n  readonly overall: Storage.Overall;\n  readonly requirements: ReadonlyArray<Requirement>;\n  readonly host: ReadonlyArray<HostEvidence>;\n  readonly checkedAt: DateTime.Utc;\n  readonly nextCheckAt: DateTime.Utc | null;\n}\n\ntype Fx<A> = Effect.Effect<A, Errors.DomainKitError, Principal.Service>;\n\nexport interface Interface {\n  /**\n   * What to observe, in order of precedence: `requirements` when supplied (an attached domain\n   * without a provisioning receipt, or a domain with no attachment whose records the customer\n   * applies by hand), else the latest provisioning receipt of the domain's attachment (records it\n   * applied or found in place). Neither is `InvalidInput`. Provider evidence is added when the\n   * attachment's session can be built; public DNS is always observed, and readiness is stored\n   * per domain either way.\n   */\n  readonly observe: (input: {\n    readonly domain: string;\n    readonly requirements?: ReadonlyArray<DnsRecord.Model>;\n  }) => Fx<Readiness>;\n  /** Merge host evidence into stored readiness without re-observing DNS. */\n  readonly attachEvidence: (input: {\n    readonly domain: string;\n    readonly evidence: ReadonlyArray<HostEvidence>;\n  }) => Fx<Readiness>;\n  readonly latest: (domain: string) => Fx<Readiness | null>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/Verify\") {}\n\n/**\n * A requirement's identity: the record's type, name, and data, and nothing else. It is what a host\n * pairs its own rows against readiness by, instead of trusting the order of the array.\n * `@domainkit/react`'s `Records.identity` is this function.\n */\nexport const requirementKey = (record: DnsRecord.Model): string =>\n  [record._tag, record.name, DnsRecord.data(record)].join(\":\");\n\n/** Counts across a readiness's requirements. `observed` is false when there is no readiness yet. */\nexport interface Summary {\n  readonly observed: boolean;\n  readonly total: number;\n  readonly satisfied: number;\n  readonly missing: number;\n  readonly mismatch: number;\n  readonly unknown: number;\n}\n\n/** The least a value has to carry to be summarised: core `Readiness` and the wire shape both do. */\nexport interface Summarisable {\n  readonly requirements: ReadonlyArray<{ readonly status: Storage.RequirementStatus }>;\n}\n\n/**\n * How a readiness stands, as counts. Pure and total: a host renders \"3 of 4 found\" from the stored\n * fact without deciding what an absent readiness means, because `observed` says so.\n */\nexport const summary = (readiness: Summarisable | null): Summary => {\n  const statuses = readiness?.requirements.map(({ status }) => status) ?? [];\n  const count = (status: Storage.RequirementStatus): number =>\n    statuses.filter((candidate) => candidate === status).length;\n  return {\n    observed: readiness !== null,\n    total: statuses.length,\n    satisfied: count(\"satisfied\"),\n    missing: count(\"missing\"),\n    mismatch: count(\"mismatch\"),\n    unknown: count(\"unknown\"),\n  };\n};\n\nexport interface PolicyShape {\n  /** Delay before the next check, given time since the first pending observation. Default ladder: 15s, 1m, 5m, 30m. */\n  readonly backoff: (pendingForMs: number) => number;\n  /** Which resolvers must agree for `satisfied`: default `any`. */\n  readonly quorum: \"any\" | \"all\" | { readonly minimum: number };\n}\nexport const defaults: PolicyShape = {\n  backoff: (pendingForMs) =>\n    pendingForMs < 60_000\n      ? 15_000\n      : pendingForMs < 10 * 60_000\n        ? 60_000\n        : pendingForMs < 60 * 60_000\n          ? 5 * 60_000\n          : 30 * 60_000,\n  quorum: \"any\",\n};\nexport class Policy extends Context.Reference<PolicyShape>(\"@domainkit/Verify/Policy\", {\n  defaultValue: () => defaults,\n}) {}\n\n/** Why readiness was written: a DNS observation, or host evidence merged into the stored row. */\nexport type Cause = \"observe\" | \"evidence\";\n\nexport interface ReadinessChanged {\n  readonly domain: string;\n  readonly readiness: Readiness;\n  readonly cause: Cause;\n}\n\nexport interface ObserverShape {\n  /**\n   * Called once per stored readiness, after the write. A host that projects readiness onto its own\n   * rows, wakes a durable job at `nextCheckAt`, or notifies a customer hangs it here instead of\n   * mirroring the fact at every call site.\n   *\n   * Events for one domain are not ordered against each other: two observations that overlap both\n   * store, last write wins in `Storage`, and their callbacks can finish in either order. A\n   * projection compares `readiness.checkedAt`, which is the moment the row was written, and keeps\n   * the later one; `latest` remains the authority.\n   */\n  readonly readinessChanged: (event: ReadinessChanged) => Effect.Effect<void, unknown>;\n}\n\n/**\n * The host seam for \"DomainKit wrote readiness\". The default does nothing; provide one with\n * `Effect.provideService(Verify.Observer, ...)` or `Layer.succeed(Verify.Observer, ...)` over\n * `DomainKit.layer`, the same way `Policy` is overridden.\n *\n * It runs after `storage.readiness.put` returns, outside any transaction, because `Storage`\n * exposes none. A failure or defect in the observer is logged and swallowed: the observation is\n * already durable, and losing it because a projection failed would make the stored fact depend on\n * the host's side effects. A host that needs the projection to be reliable enqueues durable work\n * here rather than doing the work inline.\n */\nexport class Observer extends Context.Reference<ObserverShape>(\"@domainkit/Verify/Observer\", {\n  defaultValue: (): ObserverShape => ({ readinessChanged: () => Effect.void }),\n}) {}\n\n// ---------------------------------------------------------------------------------------------\n// Implementation\n// ---------------------------------------------------------------------------------------------\n\nconst StoredEvidence = Schema.Array(Evidence);\n\ninterface ProviderSide {\n  readonly provider: string;\n  readonly records: ReadonlyArray<DnsRecord.Observed>;\n}\nconst StoredHost = Schema.Array(HostEvidence);\n\n/** A requirement is satisfied by an exact match; an exclusive one is contradicted by any same-set record. */\nexport const statusAgainst = (\n  record: DnsRecord.Model,\n  observed: ReadonlyArray<DnsRecord.Observed>,\n): Storage.RequirementStatus => {\n  if (observed.some((candidate) => DnsRecord.equals(candidate, record))) return \"satisfied\";\n  if (\n    record.policy === \"exclusive\" &&\n    observed.some((candidate) => DnsRecord.sameSet(candidate, record))\n  ) {\n    return \"mismatch\";\n  }\n  return \"missing\";\n};\n\ninterface Observation {\n  readonly status: Storage.RequirementStatus;\n  readonly values: ReadonlyArray<string>;\n  readonly detail: string | null;\n}\n\nconst render = (observed: DnsRecord.Observed): string =>\n  observed._tag === \"Opaque\" ? JSON.stringify(observed.raw) : DnsRecord.data(observed);\n\n/** Status plus what the observer holds for the requirement's name and type. */\nconst observation = (\n  record: DnsRecord.Model,\n  observed: ReadonlyArray<DnsRecord.Observed>,\n): Observation => {\n  const status = statusAgainst(record, observed);\n  const values = observed.filter((candidate) => DnsRecord.sameSet(candidate, record)).map(render);\n  const detail =\n    status === \"satisfied\"\n      ? null\n      : values.length === 0\n        ? `no ${record._tag} record at ${record.name}`\n        : `expected ${DnsRecord.data(record)}; found ${values.join(\", \")}`;\n  return { status, values, detail };\n};\n\nconst combine = (statuses: ReadonlyArray<Storage.RequirementStatus>): Storage.RequirementStatus => {\n  const known = statuses.filter((status) => status !== \"unknown\");\n  if (known.length === 0) return \"unknown\";\n  if (known.includes(\"mismatch\")) return \"mismatch\";\n  return known.every((status) => status === \"satisfied\") ? \"satisfied\" : \"missing\";\n};\n\nconst quorumStatus = (\n  quorum: PolicyShape[\"quorum\"],\n  statuses: ReadonlyArray<Storage.RequirementStatus>,\n): Storage.RequirementStatus => {\n  const known = statuses.filter((status) => status !== \"unknown\");\n  const satisfied = known.filter((status) => status === \"satisfied\").length;\n  const needed =\n    quorum === \"any\" ? 1 : quorum === \"all\" ? Math.max(1, known.length) : quorum.minimum;\n  if (known.includes(\"mismatch\")) return \"mismatch\";\n  if (known.length > 0 && satisfied >= needed) return \"satisfied\";\n  return known.length === 0 ? \"unknown\" : \"missing\";\n};\n\nconst overallOf = (\n  requirements: ReadonlyArray<{ readonly status: Storage.RequirementStatus }>,\n  host: ReadonlyArray<HostEvidence>,\n): Storage.Overall => {\n  if (\n    requirements.some(({ status }) => status === \"mismatch\") ||\n    host.some(({ status }) => status === \"failed\")\n  ) {\n    return \"failed\";\n  }\n  const ready =\n    requirements.length + host.length > 0 &&\n    requirements.every(({ status }) => status === \"satisfied\") &&\n    host.every(({ status }) => status === \"ok\");\n  return ready ? \"ready\" : \"pending\";\n};\n\n/** The identity of a requirement set: type, name, data, and policy, independent of labels and order. */\nconst requirementSetKey = (requirements: ReadonlyArray<{ readonly record: DnsRecord.Model }>) =>\n  requirements\n    .map(({ record }) => `${record._tag} ${record.name} ${DnsRecord.data(record)} ${record.policy}`)\n    .sort()\n    .join(\"\\n\");\n\nexport const make: Effect.Effect<\n  Interface,\n  never,\n  Storage.Service | Connect.Service | Resolver.Service\n> = Effect.gen(function* () {\n  const storage = yield* Storage.Service;\n  const connect = yield* Connect.Service;\n  const resolver = yield* Resolver.Service;\n\n  const attachmentFor = (\n    input: string,\n  ): Fx<{\n    readonly domain: DomainName.Model;\n    readonly attachment: Storage.Attachment | null;\n  }> =>\n    Effect.gen(function* () {\n      const domain = yield* DomainName.decode(input);\n      const attachment = yield* storage.attachments.byDomain(domain);\n      return { domain, attachment: Option.getOrNull(attachment) };\n    });\n\n  const decodeRow = (row: Storage.Readiness): Effect.Effect<Readiness, Errors.DomainKitError> =>\n    Effect.gen(function* () {\n      const requirements = yield* Effect.forEach(row.requirements, (requirement) =>\n        Errors.decode(StoredEvidence, requirement.evidence, \"evidence\").pipe(\n          Effect.map((evidence): Requirement => ({\n            key: requirementKey(requirement.record),\n            operationId: requirement.operationId,\n            record: requirement.record,\n            status: requirement.status,\n            evidence,\n          })),\n        ),\n      );\n      const host = yield* Errors.decode(StoredHost, row.host, \"host\");\n      return {\n        domain: row.domain,\n        attachmentId: row.attachmentId,\n        overall: row.overall,\n        requirements,\n        host,\n        checkedAt: row.checkedAt,\n        nextCheckAt: row.nextCheckAt,\n      };\n    });\n\n  /** Persist readiness, carrying the pending streak forward for the backoff ladder. */\n  const store = (input: {\n    readonly domain: string;\n    readonly attachment: Storage.Attachment | null;\n    readonly requirements: ReadonlyArray<Requirement>;\n    readonly host: ReadonlyArray<HostEvidence>;\n    readonly previous: Option.Option<Storage.Readiness>;\n    readonly cause: Cause;\n  }): Fx<Readiness> =>\n    Effect.gen(function* () {\n      const principal = yield* Principal.Service;\n      const policy = yield* Policy;\n      const observer = yield* Observer;\n      const now = yield* DateTime.now;\n      const overall = overallOf(input.requirements, input.host);\n      const sameRequirements =\n        Option.isSome(input.previous) &&\n        requirementSetKey(input.previous.value.requirements) ===\n          requirementSetKey(input.requirements);\n      const pendingSince =\n        overall === \"ready\"\n          ? null\n          : sameRequirements &&\n              Option.isSome(input.previous) &&\n              input.previous.value.pendingSince !== null\n            ? input.previous.value.pendingSince\n            : now;\n      const nextCheckAt =\n        pendingSince === null\n          ? null\n          : DateTime.addDuration(\n              now,\n              Duration.millis(\n                policy.backoff(DateTime.toEpochMillis(now) - DateTime.toEpochMillis(pendingSince)),\n              ),\n            );\n      const row = new Storage.Readiness({\n        domain: input.domain,\n        attachmentId: input.attachment?.id ?? null,\n        ownerId: principal.ownerId,\n        overall,\n        requirements: input.requirements.map((requirement) => ({\n          operationId: requirement.operationId,\n          record: requirement.record,\n          status: requirement.status,\n          evidence: Schema.encodeSync(StoredEvidence)(requirement.evidence),\n        })),\n        host: Schema.encodeSync(StoredHost)(input.host),\n        pendingSince,\n        checkedAt: now,\n        nextCheckAt,\n      });\n      yield* storage.readiness.put(row);\n      const readiness: Readiness = {\n        domain: row.domain,\n        attachmentId: row.attachmentId,\n        overall,\n        requirements: input.requirements,\n        host: input.host,\n        checkedAt: now,\n        nextCheckAt,\n      };\n      yield* observer\n        .readinessChanged({ domain: row.domain, readiness, cause: input.cause })\n        .pipe(\n          Effect.catchCause((cause) =>\n            Effect.logWarning(`Verify.Observer failed for ${row.domain}`, cause),\n          ),\n        );\n      return readiness;\n    });\n\n  const defaultRequirements = (\n    attachment: Storage.Attachment,\n  ): Fx<\n    ReadonlyArray<{\n      readonly operationId: Plan.OperationId | null;\n      readonly record: DnsRecord.Model;\n    }>\n  > =>\n    Effect.gen(function* () {\n      const latest = yield* storage.attempts.latest(attachment.id, \"provisioning\");\n      if (Option.isNone(latest) || latest.value.receipt === null) {\n        return yield* Errors.fail(\n          new Reason.InvalidInput({\n            message: `${attachment.domain} has no provisioning receipt; pass requirements to observe`,\n            field: \"requirements\",\n          }),\n        );\n      }\n      const receipt = latest.value.receipt;\n      const inPlace = new Set(\n        receipt.outcomes.flatMap((outcome) =>\n          outcome._tag === \"Applied\" || (outcome._tag === \"Skipped\" && outcome.reason === \"noop\")\n            ? [outcome.operationId]\n            : [],\n        ),\n      );\n      return latest.value.plan.operations\n        .filter((operation) => inPlace.has(operation.id))\n        .map((operation) => ({ operationId: operation.id, record: operation.record }));\n    });\n\n  const observe: Interface[\"observe\"] = (input) =>\n    Effect.gen(function* () {\n      const policy = yield* Policy;\n      const { domain, attachment } = yield* attachmentFor(input.domain);\n      if (input.requirements === undefined && attachment === null) {\n        return yield* Errors.fail(\n          new Reason.InvalidInput({\n            message: `${domain} is not attached; pass requirements to observe public DNS`,\n            field: \"requirements\",\n          }),\n        );\n      }\n      const requirements =\n        input.requirements === undefined && attachment !== null\n          ? yield* defaultRequirements(attachment)\n          : (input.requirements ?? []).map((record) => ({ operationId: null, record }));\n      if (requirements.length === 0) {\n        return yield* Errors.fail(\n          new Reason.InvalidInput({\n            message: \"Nothing to observe: pass at least one requirement\",\n            field: \"requirements\",\n          }),\n        );\n      }\n      const now = yield* DateTime.now;\n      // Provider readback is evidence when the attachment's session can be built; when it\n      // cannot (no attachment, revoked credential, provider outage) public DNS stands alone.\n      const providerSide = yield* attachment === null\n        ? Effect.succeed(Option.none<ProviderSide>())\n        : Effect.gen(function* () {\n            const connection = yield* storage.connections.get(attachment.connectionId);\n            const authorization = yield* storage.authorizations.get(connection.authorizationId);\n            const { session, target } = yield* connect.session(attachment.id);\n            const observed = yield* session.dns(target).list(target.zone);\n            return Option.some<ProviderSide>({\n              provider: authorization.provider,\n              records: observed.map(({ record }) => record),\n            });\n          }).pipe(Effect.catch(() => Effect.succeed(Option.none<ProviderSide>())));\n      const observed = yield* Effect.forEach(\n        requirements,\n        ({ operationId, record }) =>\n          Effect.gen(function* () {\n            const providerEvidence = Option.isSome(providerSide)\n              ? [\n                  new ProviderEvidence({\n                    provider: providerSide.value.provider,\n                    ...observation(record, providerSide.value.records),\n                    observedAt: now,\n                  }),\n                ]\n              : [];\n            const outcomes = yield* resolver.resolve(record.name, record._tag);\n            const publicEvidence = outcomes.map((outcome) =>\n              outcome._tag === \"Answered\"\n                ? new PublicDnsEvidence({\n                    resolver: outcome.answer.resolver,\n                    ...observation(record, outcome.answer.records),\n                    observedAt: now,\n                  })\n                : new PublicDnsEvidence({\n                    resolver: outcome.resolver,\n                    status: \"unknown\",\n                    values: [],\n                    detail:\n                      outcome._tag === \"TimedOut\"\n                        ? `${outcome.resolver} timed out`\n                        : outcome.message,\n                    observedAt: now,\n                  }),\n            );\n            const publicStatus = quorumStatus(\n              policy.quorum,\n              publicEvidence.map(({ status }) => status),\n            );\n            const status = combine([\n              ...providerEvidence.map((evidence) => evidence.status),\n              publicStatus,\n            ]);\n            return {\n              key: requirementKey(record),\n              operationId,\n              record,\n              status,\n              evidence: [...providerEvidence, ...publicEvidence],\n            } satisfies Requirement;\n          }),\n        { concurrency: \"unbounded\" },\n      );\n      const previous = yield* storage.readiness.get(domain);\n      const host = Option.isSome(previous)\n        ? yield* Errors.decode(StoredHost, previous.value.host, \"host\")\n        : [];\n      return yield* store({\n        domain,\n        attachment,\n        requirements: observed,\n        host,\n        previous,\n        cause: \"observe\",\n      });\n    });\n\n  const attachEvidence: Interface[\"attachEvidence\"] = (input) =>\n    Effect.gen(function* () {\n      const { domain, attachment } = yield* attachmentFor(input.domain);\n      const previous = yield* storage.readiness.get(domain);\n      const current = Option.isSome(previous)\n        ? yield* decodeRow(previous.value)\n        : {\n            requirements: [] as ReadonlyArray<Requirement>,\n            host: [] as ReadonlyArray<HostEvidence>,\n          };\n      const bySource = new Map(current.host.map((evidence) => [evidence.source, evidence]));\n      for (const evidence of input.evidence) bySource.set(evidence.source, evidence);\n      return yield* store({\n        domain,\n        attachment,\n        requirements: current.requirements,\n        host: [...bySource.values()],\n        previous,\n        cause: \"evidence\",\n      });\n    });\n\n  const latest: Interface[\"latest\"] = (domain) =>\n    Effect.gen(function* () {\n      const { domain: name } = yield* attachmentFor(domain);\n      const stored = yield* storage.readiness.get(name);\n      return Option.isSome(stored) ? yield* decodeRow(stored.value) : null;\n    });\n\n  return { observe, attachEvidence, latest };\n});\n\nexport const layer: Layer.Layer<\n  Service,\n  never,\n  Storage.Service | Connect.Service | Resolver.Service\n> = Layer.effect(Service)(make);\n\nconst accessor =\n  <Args extends ReadonlyArray<unknown>, A>(\n    pick: (service: Interface) => (...args: Args) => Fx<A>,\n  ): ((...args: Args) => Effect.Effect<A, Errors.DomainKitError, Principal.Service | Service>) =>\n  (...args) =>\n    Effect.flatMap(Service, (service) => pick(service)(...args));\n\nexport const observe = accessor((service) => service.observe);\nexport const attachEvidence = accessor((service) => service.attachEvidence);\nexport const latest = accessor((service) => service.latest);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,uBAAuB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAC1C,OAAO,uBAAuB,OAAO,QAAQ,IAAI,CAAC,CACpD;AAEA,IAAa,mBAAb,cAAsC,OAAO,YAC3C,8BACF,CAAC,CAAC,YAAY;CACZ,UAAU,OAAO;CACjB,QAAQA;CACR,QAAQ;CACR,QAAQ;CACR,YAAY,OAAO;AACrB,CAAC,CAAC,CAAC,CAAC;AACJ,IAAa,oBAAb,cAAuC,OAAO,YAC5C,+BACF,CAAC,CAAC,aAAa;CACb,UAAU,OAAO;CACjB,QAAQA;CACR,QAAQ;CACR,QAAQ;CACR,YAAY,OAAO;AACrB,CAAC,CAAC,CAAC,CAAC;;AAEJ,IAAa,eAAb,cAAkC,OAAO,YAA0B,0BAA0B,CAAC,CAC5F,QACA;CACE,QAAQ,OAAO;CACf,QAAQ,OAAO,SAAS;EAAC;EAAM;EAAW;CAAQ,CAAC;CACnD,OAAO,OAAO;CACd,QAAQ;CACR,YAAY,OAAO;AACrB,CACF,CAAC,CAAC,CAAC;AACH,MAAa,WAAW,OAAO,MAAM;CAAC;CAAkB;CAAmB;AAAY,CAAC;AA8CxF,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;;;;;;AAOzF,MAAa,kBAAkB,WAC7B;CAAC,OAAO;CAAM,OAAO;CAAMC,KAAe,MAAM;AAAC,CAAC,CAAC,KAAK,GAAG;;;;;AAqB7D,MAAa,WAAW,cAA4C;CAClE,MAAM,WAAW,WAAW,aAAa,KAAK,EAAE,aAAa,MAAM,KAAK,CAAC;CACzE,MAAM,SAAS,WACb,SAAS,QAAQ,cAAc,cAAc,MAAM,CAAC,CAAC;CACvD,OAAO;EACL,UAAU,cAAc;EACxB,OAAO,SAAS;EAChB,WAAW,MAAM,WAAW;EAC5B,SAAS,MAAM,SAAS;EACxB,UAAU,MAAM,UAAU;EAC1B,SAAS,MAAM,SAAS;CAC1B;AACF;AAQA,MAAa,WAAwB;CACnC,UAAU,iBACR,eAAe,MACX,OACA,eAAe,MACb,MACA,eAAe,OACb,MACA;CACV,QAAQ;AACV;AACA,IAAa,SAAb,cAA4B,QAAQ,UAAuB,4BAA4B,EACrF,oBAAoB,SACtB,CAAC,CAAC,CAAC,CAAC;;;;;;;;;;;;AAoCJ,IAAa,WAAb,cAA8B,QAAQ,UAAyB,8BAA8B,EAC3F,qBAAoC,EAAE,wBAAwB,OAAO,KAAK,GAC5E,CAAC,CAAC,CAAC,CAAC;AAMJ,MAAM,iBAAiB,OAAO,MAAM,QAAQ;AAM5C,MAAM,aAAa,OAAO,MAAM,YAAY;;AAG5C,MAAa,iBACX,QACA,aAC8B;CAC9B,IAAI,SAAS,MAAM,cAAcC,OAAiB,WAAW,MAAM,CAAC,GAAG,OAAO;CAC9E,IACE,OAAO,WAAW,eAClB,SAAS,MAAM,cAAcC,QAAkB,WAAW,MAAM,CAAC,GAEjE,OAAO;CAET,OAAO;AACT;AAQA,MAAM,UAAU,aACd,SAAS,SAAS,WAAW,KAAK,UAAU,SAAS,GAAG,IAAIF,KAAe,QAAQ;;AAGrF,MAAM,eACJ,QACA,aACgB;CAChB,MAAM,SAAS,cAAc,QAAQ,QAAQ;CAC7C,MAAM,SAAS,SAAS,QAAQ,cAAcE,QAAkB,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM;CAO9F,OAAO;EAAE;EAAQ;EAAQ,QALvB,WAAW,cACP,OACA,OAAO,WAAW,IAChB,MAAM,OAAO,KAAK,aAAa,OAAO,SACtC,YAAYF,KAAe,MAAM,EAAE,UAAU,OAAO,KAAK,IAAI;CACrC;AAClC;AAEA,MAAM,WAAW,aAAkF;CACjG,MAAM,QAAQ,SAAS,QAAQ,WAAW,WAAW,SAAS;CAC9D,IAAI,MAAM,WAAW,GAAG,OAAO;CAC/B,IAAI,MAAM,SAAS,UAAU,GAAG,OAAO;CACvC,OAAO,MAAM,OAAO,WAAW,WAAW,WAAW,IAAI,cAAc;AACzE;AAEA,MAAM,gBACJ,QACA,aAC8B;CAC9B,MAAM,QAAQ,SAAS,QAAQ,WAAW,WAAW,SAAS;CAC9D,MAAM,YAAY,MAAM,QAAQ,WAAW,WAAW,WAAW,CAAC,CAAC;CACnE,MAAM,SACJ,WAAW,QAAQ,IAAI,WAAW,QAAQ,KAAK,IAAI,GAAG,MAAM,MAAM,IAAI,OAAO;CAC/E,IAAI,MAAM,SAAS,UAAU,GAAG,OAAO;CACvC,IAAI,MAAM,SAAS,KAAK,aAAa,QAAQ,OAAO;CACpD,OAAO,MAAM,WAAW,IAAI,YAAY;AAC1C;AAEA,MAAM,aACJ,cACA,SACoB;CACpB,IACE,aAAa,MAAM,EAAE,aAAa,WAAW,UAAU,KACvD,KAAK,MAAM,EAAE,aAAa,WAAW,QAAQ,GAE7C,OAAO;CAMT,OAHE,aAAa,SAAS,KAAK,SAAS,KACpC,aAAa,OAAO,EAAE,aAAa,WAAW,WAAW,KACzD,KAAK,OAAO,EAAE,aAAa,WAAW,IAAI,IAC7B,UAAU;AAC3B;;AAGA,MAAM,qBAAqB,iBACzB,aACG,KAAK,EAAE,aAAa,GAAG,OAAO,KAAK,GAAG,OAAO,KAAK,GAAGA,KAAe,MAAM,EAAE,GAAG,OAAO,QAAQ,CAAC,CAC/F,KAAK,CAAC,CACN,KAAK,IAAI;AAEd,MAAa,OAIT,OAAO,IAAI,aAAa;CAC1B,MAAM,UAAU,OAAOG;CACvB,MAAM,UAAU,OAAOC;CACvB,MAAM,WAAW,OAAOC;CAExB,MAAM,iBACJ,UAKA,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAOC,OAAkB,KAAK;EAC7C,MAAM,aAAa,OAAO,QAAQ,YAAY,SAAS,MAAM;EAC7D,OAAO;GAAE;GAAQ,YAAY,OAAO,UAAU,UAAU;EAAE;CAC5D,CAAC;CAEH,MAAM,aAAa,QACjB,OAAO,IAAI,aAAa;EACtB,MAAM,eAAe,OAAO,OAAO,QAAQ,IAAI,eAAe,gBAC5DC,SAAc,gBAAgB,YAAY,UAAU,UAAU,CAAC,CAAC,KAC9D,OAAO,KAAK,cAA2B;GACrC,KAAK,eAAe,YAAY,MAAM;GACtC,aAAa,YAAY;GACzB,QAAQ,YAAY;GACpB,QAAQ,YAAY;GACpB;EACF,EAAE,CACJ,CACF;EACA,MAAM,OAAO,OAAOA,SAAc,YAAY,IAAI,MAAM,MAAM;EAC9D,OAAO;GACL,QAAQ,IAAI;GACZ,cAAc,IAAI;GAClB,SAAS,IAAI;GACb;GACA;GACA,WAAW,IAAI;GACf,aAAa,IAAI;EACnB;CACF,CAAC;;CAGH,MAAM,SAAS,UAQb,OAAO,IAAI,aAAa;EACtB,MAAM,YAAY,OAAOC;EACzB,MAAM,SAAS,OAAO;EACtB,MAAM,WAAW,OAAO;EACxB,MAAM,MAAM,OAAO,SAAS;EAC5B,MAAM,UAAU,UAAU,MAAM,cAAc,MAAM,IAAI;EACxD,MAAM,mBACJ,OAAO,OAAO,MAAM,QAAQ,KAC5B,kBAAkB,MAAM,SAAS,MAAM,YAAY,MACjD,kBAAkB,MAAM,YAAY;EACxC,MAAM,eACJ,YAAY,UACR,OACA,oBACE,OAAO,OAAO,MAAM,QAAQ,KAC5B,MAAM,SAAS,MAAM,iBAAiB,OACtC,MAAM,SAAS,MAAM,eACrB;EACR,MAAM,cACJ,iBAAiB,OACb,OACA,SAAS,YACP,KACA,SAAS,OACP,OAAO,QAAQ,SAAS,cAAc,GAAG,IAAI,SAAS,cAAc,YAAY,CAAC,CACnF,CACF;EACN,MAAM,MAAM,IAAIC,UAAkB;GAChC,QAAQ,MAAM;GACd,cAAc,MAAM,YAAY,MAAM;GACtC,SAAS,UAAU;GACnB;GACA,cAAc,MAAM,aAAa,KAAK,iBAAiB;IACrD,aAAa,YAAY;IACzB,QAAQ,YAAY;IACpB,QAAQ,YAAY;IACpB,UAAU,OAAO,WAAW,cAAc,CAAC,CAAC,YAAY,QAAQ;GAClE,EAAE;GACF,MAAM,OAAO,WAAW,UAAU,CAAC,CAAC,MAAM,IAAI;GAC9C;GACA,WAAW;GACX;EACF,CAAC;EACD,OAAO,QAAQ,UAAU,IAAI,GAAG;EAChC,MAAM,YAAuB;GAC3B,QAAQ,IAAI;GACZ,cAAc,IAAI;GAClB;GACA,cAAc,MAAM;GACpB,MAAM,MAAM;GACZ,WAAW;GACX;EACF;EACA,OAAO,SACJ,iBAAiB;GAAE,QAAQ,IAAI;GAAQ;GAAW,OAAO,MAAM;EAAM,CAAC,CAAC,CACvE,KACC,OAAO,YAAY,UACjB,OAAO,WAAW,8BAA8B,IAAI,UAAU,KAAK,CACrE,CACF;EACF,OAAO;CACT,CAAC;CAEH,MAAM,uBACJ,eAOA,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,QAAQ,SAAS,OAAO,WAAW,IAAI,cAAc;EAC3E,IAAI,OAAO,OAAO,MAAM,KAAK,OAAO,MAAM,YAAY,MACpD,OAAO,OAAOC,KACZ,IAAIC,aAAoB;GACtB,SAAS,GAAG,WAAW,OAAO;GAC9B,OAAO;EACT,CAAC,CACH;EAEF,MAAM,UAAU,OAAO,MAAM;EAC7B,MAAM,UAAU,IAAI,IAClB,QAAQ,SAAS,SAAS,YACxB,QAAQ,SAAS,aAAc,QAAQ,SAAS,aAAa,QAAQ,WAAW,SAC5E,CAAC,QAAQ,WAAW,IACpB,CAAC,CACP,CACF;EACA,OAAO,OAAO,MAAM,KAAK,WACtB,QAAQ,cAAc,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC,CAChD,KAAK,eAAe;GAAE,aAAa,UAAU;GAAI,QAAQ,UAAU;EAAO,EAAE;CACjF,CAAC;CAEH,MAAM,WAAiC,UACrC,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO;EACtB,MAAM,EAAE,QAAQ,eAAe,OAAO,cAAc,MAAM,MAAM;EAChE,IAAI,MAAM,iBAAiB,KAAA,KAAa,eAAe,MACrD,OAAO,OAAOD,KACZ,IAAIC,aAAoB;GACtB,SAAS,GAAG,OAAO;GACnB,OAAO;EACT,CAAC,CACH;EAEF,MAAM,eACJ,MAAM,iBAAiB,KAAA,KAAa,eAAe,OAC/C,OAAO,oBAAoB,UAAU,KACpC,MAAM,gBAAgB,CAAC,EAAA,CAAG,KAAK,YAAY;GAAE,aAAa;GAAM;EAAO,EAAE;EAChF,IAAI,aAAa,WAAW,GAC1B,OAAO,OAAOD,KACZ,IAAIC,aAAoB;GACtB,SAAS;GACT,OAAO;EACT,CAAC,CACH;EAEF,MAAM,MAAM,OAAO,SAAS;EAG5B,MAAM,eAAe,OAAO,eAAe,OACvC,OAAO,QAAQ,OAAO,KAAmB,CAAC,IAC1C,OAAO,IAAI,aAAa;GACtB,MAAM,aAAa,OAAO,QAAQ,YAAY,IAAI,WAAW,YAAY;GACzE,MAAM,gBAAgB,OAAO,QAAQ,eAAe,IAAI,WAAW,eAAe;GAClF,MAAM,EAAE,SAAS,WAAW,OAAO,QAAQ,QAAQ,WAAW,EAAE;GAChE,MAAM,WAAW,OAAO,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,OAAO,IAAI;GAC5D,OAAO,OAAO,KAAmB;IAC/B,UAAU,cAAc;IACxB,SAAS,SAAS,KAAK,EAAE,aAAa,MAAM;GAC9C,CAAC;EACH,CAAC,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,OAAO,KAAmB,CAAC,CAAC,CAAC;EAC3E,MAAM,WAAW,OAAO,OAAO,QAC7B,eACC,EAAE,aAAa,aACd,OAAO,IAAI,aAAa;GACtB,MAAM,mBAAmB,OAAO,OAAO,YAAY,IAC/C,CACE,IAAI,iBAAiB;IACnB,UAAU,aAAa,MAAM;IAC7B,GAAG,YAAY,QAAQ,aAAa,MAAM,OAAO;IACjD,YAAY;GACd,CAAC,CACH,IACA,CAAC;GAEL,MAAM,kBAAiB,OADC,SAAS,QAAQ,OAAO,MAAM,OAAO,IAAI,EAAA,CACjC,KAAK,YACnC,QAAQ,SAAS,aACb,IAAI,kBAAkB;IACpB,UAAU,QAAQ,OAAO;IACzB,GAAG,YAAY,QAAQ,QAAQ,OAAO,OAAO;IAC7C,YAAY;GACd,CAAC,IACD,IAAI,kBAAkB;IACpB,UAAU,QAAQ;IAClB,QAAQ;IACR,QAAQ,CAAC;IACT,QACE,QAAQ,SAAS,aACb,GAAG,QAAQ,SAAS,cACpB,QAAQ;IACd,YAAY;GACd,CAAC,CACP;GACA,MAAM,eAAe,aACnB,OAAO,QACP,eAAe,KAAK,EAAE,aAAa,MAAM,CAC3C;GACA,MAAM,SAAS,QAAQ,CACrB,GAAG,iBAAiB,KAAK,aAAa,SAAS,MAAM,GACrD,YACF,CAAC;GACD,OAAO;IACL,KAAK,eAAe,MAAM;IAC1B;IACA;IACA;IACA,UAAU,CAAC,GAAG,kBAAkB,GAAG,cAAc;GACnD;EACF,CAAC,GACH,EAAE,aAAa,YAAY,CAC7B;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,IAAI,MAAM;EACpD,MAAM,OAAO,OAAO,OAAO,QAAQ,IAC/B,OAAOJ,SAAc,YAAY,SAAS,MAAM,MAAM,MAAM,IAC5D,CAAC;EACL,OAAO,OAAO,MAAM;GAClB;GACA;GACA,cAAc;GACd;GACA;GACA,OAAO;EACT,CAAC;CACH,CAAC;CAEH,MAAM,kBAA+C,UACnD,OAAO,IAAI,aAAa;EACtB,MAAM,EAAE,QAAQ,eAAe,OAAO,cAAc,MAAM,MAAM;EAChE,MAAM,WAAW,OAAO,QAAQ,UAAU,IAAI,MAAM;EACpD,MAAM,UAAU,OAAO,OAAO,QAAQ,IAClC,OAAO,UAAU,SAAS,KAAK,IAC/B;GACE,cAAc,CAAC;GACf,MAAM,CAAC;EACT;EACJ,MAAM,WAAW,IAAI,IAAI,QAAQ,KAAK,KAAK,aAAa,CAAC,SAAS,QAAQ,QAAQ,CAAC,CAAC;EACpF,KAAK,MAAM,YAAY,MAAM,UAAU,SAAS,IAAI,SAAS,QAAQ,QAAQ;EAC7E,OAAO,OAAO,MAAM;GAClB;GACA;GACA,cAAc,QAAQ;GACtB,MAAM,CAAC,GAAG,SAAS,OAAO,CAAC;GAC3B;GACA,OAAO;EACT,CAAC;CACH,CAAC;CAEH,MAAM,UAA+B,WACnC,OAAO,IAAI,aAAa;EACtB,MAAM,EAAE,QAAQ,SAAS,OAAO,cAAc,MAAM;EACpD,MAAM,SAAS,OAAO,QAAQ,UAAU,IAAI,IAAI;EAChD,OAAO,OAAO,OAAO,MAAM,IAAI,OAAO,UAAU,OAAO,KAAK,IAAI;CAClE,CAAC;CAEH,OAAO;EAAE;EAAS;EAAgB;CAAO;AAC3C,CAAC;AAED,MAAa,QAIT,MAAM,OAAO,OAAO,CAAC,CAAC,IAAI;AAE9B,MAAM,YAEF,UAED,GAAG,SACF,OAAO,QAAQ,UAAU,YAAY,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;AAE/D,MAAa,UAAU,UAAU,YAAY,QAAQ,OAAO;AAC5D,MAAa,iBAAiB,UAAU,YAAY,QAAQ,cAAc;AAC1E,MAAa,SAAS,UAAU,YAAY,QAAQ,MAAM"}