domainkit 0.2.0 → 0.2.2

package/dist/{connection-BWrBwqjk.mjs.map → connection-CjNQe_E-.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"connection-BWrBwqjk.mjs","names":["S","DomainName.Schema","Schema","InvalidInputError","ProviderAuthorization.evidenceFor","DomainName.parse"],"sources":["../src/auth/connection.ts"],"sourcesContent":["import { Effect, Schema as S } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport type { Value as Secret } from \"./secret.ts\";\nimport type { OAuthMethod } from \"./manifest.ts\";\nimport * as ProviderAuthorization from \"./authorization.ts\";\n\nexport const Grant = S.TaggedUnion({\n  account: {},\n  domains: { domains: S.Array(DomainName.Schema) },\n});\nexport type Grant = typeof Grant.Type;\n\n/** An owner-scoped grant bound to one provider authorization. */\nexport const Schema = S.Struct({\n  authorizationId: S.String,\n  createdAt: S.DateFromString,\n  grant: Grant,\n  id: S.String,\n  ownerId: S.String,\n});\nexport interface Connection extends S.Schema.Type<typeof Schema> {}\n\nexport const decode = Effect.fn(\"Connection.decode\")((input: unknown) =>\n  S.decodeUnknownEffect(Schema)(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport const validate = Effect.fn(\"Connection.validate\")((input: unknown) =>\n  S.decodeUnknownEffect(S.toType(Schema))(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport const encode = S.encodeSync(Schema);\n\nexport interface OAuthContinuation {\n  readonly clientId: string;\n  readonly codeVerifier: Secret;\n  readonly expiresAt: Date;\n  readonly grant: Grant;\n  readonly method: OAuthMethod;\n  readonly ownerId: string;\n  readonly redirectUri: string;\n  readonly stateHash: string;\n  readonly authorizedById: string;\n}\n\nexport interface StoredCredential {\n  readonly accessToken: Secret;\n  readonly refreshToken: Secret | null;\n  readonly tokenType: string;\n}\n\nexport class AuthorizationError extends S.TaggedError<AuthorizationError>()(\"AuthorizationError\", {\n  category: S.Literal(\"authorization\"),\n  message: S.String,\n  operation: S.String,\n  retry: S.Literals([\"never\", \"after-user-action\", \"safe\", \"unknown\"]),\n}) {}\n\nexport const authorizationError = (message: string, operation: string): AuthorizationError =>\n  new AuthorizationError({\n    category: \"authorization\",\n    message,\n    operation,\n    retry: \"after-user-action\",\n  });\n\nexport function assertGrant(\n  connection: Connection,\n  authorization: ProviderAuthorization.ProviderAuthorization,\n  request: {\n    readonly capability: ProviderAuthorization.Capability;\n    readonly domain: string;\n    readonly now?: Date;\n    readonly providerId: string;\n  },\n): DomainName.DomainName {\n  if (\n    connection.authorizationId !== authorization.id ||\n    authorization.providerId !== request.providerId ||\n    authorization.revocation._tag !== \"Active\"\n  ) {\n    throw authorizationError(\n      \"Connection does not grant this provider account\",\n      \"Connection.assertGrant\",\n    );\n  }\n  if (authorization.expiresAt !== null) {\n    if (Number.isNaN(authorization.expiresAt.getTime())) {\n      throw authorizationError(\"Connection expiration is invalid\", \"Connection.assertGrant\");\n    }\n    if (authorization.expiresAt <= (request.now ?? new Date())) {\n      throw authorizationError(\"Connection has expired\", \"Connection.assertGrant\");\n    }\n  }\n  if (!authorization.requiredCapabilities.includes(request.capability)) {\n    throw authorizationError(\n      `Connection lacks the ${request.capability} capability`,\n      \"Connection.assertGrant\",\n    );\n  }\n  if (ProviderAuthorization.evidenceFor(authorization, request.capability) === undefined) {\n    throw authorizationError(\n      `Connection has no evidence for the ${request.capability} capability`,\n      \"Connection.assertGrant\",\n    );\n  }\n  let domain: DomainName.DomainName;\n  try {\n    domain = DomainName.parse(request.domain);\n  } catch (cause) {\n    if (cause instanceof InvalidInputError) throw cause;\n    throw new InvalidInputError({\n      message: cause instanceof Error ? cause.message : String(cause),\n    });\n  }\n  if (connection.grant._tag === \"domains\" && !connection.grant.domains.includes(domain)) {\n    throw authorizationError(\"Connection does not grant this domain\", \"Connection.assertGrant\");\n  }\n  return domain;\n}\n"],"mappings":";;;;AAQA,MAAa,QAAQA,OAAE,YAAY;CACjC,SAAS,CAAC;CACV,SAAS,EAAE,SAASA,OAAE,MAAMC,QAAiB,EAAE;AACjD,CAAC;;AAID,MAAaC,WAASF,OAAE,OAAO;CAC7B,iBAAiBA,OAAE;CACnB,WAAWA,OAAE;CACb,OAAO;CACP,IAAIA,OAAE;CACN,SAASA,OAAE;AACb,CAAC;AAGD,MAAa,SAAS,OAAO,GAAG,mBAAmB,CAAC,EAAE,UACpDA,OAAE,oBAAoBE,QAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KACnC,OAAO,UAAU,UAAU,IAAIC,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,MAAa,WAAW,OAAO,GAAG,qBAAqB,CAAC,EAAE,UACxDH,OAAE,oBAAoBA,OAAE,OAAOE,QAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC7C,OAAO,UAAU,UAAU,IAAIC,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,MAAa,SAASH,OAAE,WAAWE,QAAM;AAoBzC,IAAa,qBAAb,cAAwCF,OAAE,YAAgC,CAAC,CAAC,sBAAsB;CAChG,UAAUA,OAAE,QAAQ,eAAe;CACnC,SAASA,OAAE;CACX,WAAWA,OAAE;CACb,OAAOA,OAAE,SAAS;EAAC;EAAS;EAAqB;EAAQ;CAAS,CAAC;AACrE,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,sBAAsB,SAAiB,cAClD,IAAI,mBAAmB;CACrB,UAAU;CACV;CACA;CACA,OAAO;AACT,CAAC;AAEH,SAAgB,YACd,YACA,eACA,SAMuB;CACvB,IACE,WAAW,oBAAoB,cAAc,MAC7C,cAAc,eAAe,QAAQ,cACrC,cAAc,WAAW,SAAS,UAElC,MAAM,mBACJ,mDACA,wBACF;CAEF,IAAI,cAAc,cAAc,MAAM;EACpC,IAAI,OAAO,MAAM,cAAc,UAAU,QAAQ,CAAC,GAChD,MAAM,mBAAmB,oCAAoC,wBAAwB;EAEvF,IAAI,cAAc,cAAc,QAAQ,uBAAO,IAAI,KAAK,IACtD,MAAM,mBAAmB,0BAA0B,wBAAwB;CAE/E;CACA,IAAI,CAAC,cAAc,qBAAqB,SAAS,QAAQ,UAAU,GACjE,MAAM,mBACJ,wBAAwB,QAAQ,WAAW,cAC3C,wBACF;CAEF,IAAII,YAAkC,eAAe,QAAQ,UAAU,MAAM,KAAA,GAC3E,MAAM,mBACJ,sCAAsC,QAAQ,WAAW,cACzD,wBACF;CAEF,IAAI;CACJ,IAAI;EACF,SAASC,MAAiB,QAAQ,MAAM;CAC1C,SAAS,OAAO;EACd,IAAI,iBAAiBF,SAAmB,MAAM;EAC9C,MAAM,IAAIA,QAAkB,EAC1B,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAChE,CAAC;CACH;CACA,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC,WAAW,MAAM,QAAQ,SAAS,MAAM,GAClF,MAAM,mBAAmB,yCAAyC,wBAAwB;CAE5F,OAAO;AACT"}
+{"version":3,"file":"connection-CjNQe_E-.mjs","names":["S","DomainName.Schema","Schema","InvalidInputError","ProviderAuthorization.evidenceFor","DomainName.parse"],"sources":["../src/auth/connection.ts"],"sourcesContent":["import { Effect, Schema as S } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport type { Value as Secret } from \"./secret.ts\";\nimport type { OAuthMethod } from \"./manifest.ts\";\nimport * as ProviderAuthorization from \"./authorization.ts\";\n\nexport const Grant = S.TaggedUnion({\n  account: {},\n  domains: { domains: S.Array(DomainName.Schema) },\n});\nexport type Grant = typeof Grant.Type;\n\n/** An owner-scoped grant bound to one provider authorization. */\nexport const Schema = S.Struct({\n  authorizationId: S.String,\n  createdAt: S.DateFromString,\n  grant: Grant,\n  id: S.String,\n  ownerId: S.String,\n});\nexport interface Connection extends S.Schema.Type<typeof Schema> {}\n\nexport const decode = Effect.fn(\"Connection.decode\")((input: unknown) =>\n  S.decodeUnknownEffect(Schema)(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport const validate = Effect.fn(\"Connection.validate\")((input: unknown) =>\n  S.decodeUnknownEffect(S.toType(Schema))(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport const encode = S.encodeSync(Schema);\n\nexport interface OAuthContinuation {\n  readonly clientId: string;\n  readonly codeVerifier: Secret;\n  readonly expiresAt: Date;\n  readonly grant: Grant;\n  readonly method: OAuthMethod;\n  readonly ownerId: string;\n  readonly redirectUri: string;\n  readonly stateHash: string;\n  readonly authorizedById: string;\n}\n\nexport interface StoredCredential {\n  readonly accessToken: Secret;\n  readonly refreshToken: Secret | null;\n  readonly tokenType: string;\n}\n\nexport class AuthorizationError extends S.TaggedError<AuthorizationError>()(\"AuthorizationError\", {\n  category: S.Literal(\"authorization\"),\n  message: S.String,\n  operation: S.String,\n  retry: S.Literals([\"never\", \"after-user-action\", \"safe\", \"unknown\"]),\n}) {}\n\nexport const authorizationError = (message: string, operation: string): AuthorizationError =>\n  new AuthorizationError({\n    category: \"authorization\",\n    message,\n    operation,\n    retry: \"after-user-action\",\n  });\n\nexport function assertGrant(\n  connection: Connection,\n  authorization: ProviderAuthorization.ProviderAuthorization,\n  request: {\n    readonly capability: ProviderAuthorization.Capability;\n    readonly domain: string;\n    readonly now?: Date;\n    readonly providerId: string;\n  },\n): DomainName.DomainName {\n  if (\n    connection.authorizationId !== authorization.id ||\n    authorization.providerId !== request.providerId ||\n    authorization.revocation._tag !== \"Active\"\n  ) {\n    throw authorizationError(\n      \"Connection does not grant this provider account\",\n      \"Connection.assertGrant\",\n    );\n  }\n  if (authorization.expiresAt !== null) {\n    if (Number.isNaN(authorization.expiresAt.getTime())) {\n      throw authorizationError(\"Connection expiration is invalid\", \"Connection.assertGrant\");\n    }\n    if (authorization.expiresAt <= (request.now ?? new Date())) {\n      throw authorizationError(\"Connection has expired\", \"Connection.assertGrant\");\n    }\n  }\n  if (!authorization.requiredCapabilities.includes(request.capability)) {\n    throw authorizationError(\n      `Connection lacks the ${request.capability} capability`,\n      \"Connection.assertGrant\",\n    );\n  }\n  if (ProviderAuthorization.evidenceFor(authorization, request.capability) === undefined) {\n    throw authorizationError(\n      `Connection has no evidence for the ${request.capability} capability`,\n      \"Connection.assertGrant\",\n    );\n  }\n  let domain: DomainName.DomainName;\n  try {\n    domain = DomainName.parse(request.domain);\n  } catch (cause) {\n    if (cause instanceof InvalidInputError) throw cause;\n    throw new InvalidInputError({\n      message: cause instanceof Error ? cause.message : String(cause),\n    });\n  }\n  if (connection.grant._tag === \"domains\" && !connection.grant.domains.includes(domain)) {\n    throw authorizationError(\"Connection does not grant this domain\", \"Connection.assertGrant\");\n  }\n  return domain;\n}\n"],"mappings":";;;;AAQA,MAAa,QAAQA,OAAE,YAAY;CACjC,SAAS,CAAC;CACV,SAAS,EAAE,SAASA,OAAE,MAAMC,QAAiB,EAAE;AACjD,CAAC;;AAID,MAAaC,WAASF,OAAE,OAAO;CAC7B,iBAAiBA,OAAE;CACnB,WAAWA,OAAE;CACb,OAAO;CACP,IAAIA,OAAE;CACN,SAASA,OAAE;AACb,CAAC;AAGD,MAAa,SAAS,OAAO,GAAG,mBAAmB,CAAC,EAAE,UACpDA,OAAE,oBAAoBE,QAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KACnC,OAAO,UAAU,UAAU,IAAIC,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,MAAa,WAAW,OAAO,GAAG,qBAAqB,CAAC,EAAE,UACxDH,OAAE,oBAAoBA,OAAE,OAAOE,QAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC7C,OAAO,UAAU,UAAU,IAAIC,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,MAAa,SAASH,OAAE,WAAWE,QAAM;AAoBzC,IAAa,qBAAb,cAAwCF,OAAE,YAAgC,CAAC,CAAC,sBAAsB;CAChG,UAAUA,OAAE,QAAQ,eAAe;CACnC,SAASA,OAAE;CACX,WAAWA,OAAE;CACb,OAAOA,OAAE,SAAS;EAAC;EAAS;EAAqB;EAAQ;CAAS,CAAC;AACrE,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,sBAAsB,SAAiB,cAClD,IAAI,mBAAmB;CACrB,UAAU;CACV;CACA;CACA,OAAO;AACT,CAAC;AAEH,SAAgB,YACd,YACA,eACA,SAMuB;CACvB,IACE,WAAW,oBAAoB,cAAc,MAC7C,cAAc,eAAe,QAAQ,cACrC,cAAc,WAAW,SAAS,UAElC,MAAM,mBACJ,mDACA,wBACF;CAEF,IAAI,cAAc,cAAc,MAAM;EACpC,IAAI,OAAO,MAAM,cAAc,UAAU,QAAQ,CAAC,GAChD,MAAM,mBAAmB,oCAAoC,wBAAwB;EAEvF,IAAI,cAAc,cAAc,QAAQ,uBAAO,IAAI,KAAK,IACtD,MAAM,mBAAmB,0BAA0B,wBAAwB;CAE/E;CACA,IAAI,CAAC,cAAc,qBAAqB,SAAS,QAAQ,UAAU,GACjE,MAAM,mBACJ,wBAAwB,QAAQ,WAAW,cAC3C,wBACF;CAEF,IAAII,YAAkC,eAAe,QAAQ,UAAU,MAAM,KAAA,GAC3E,MAAM,mBACJ,sCAAsC,QAAQ,WAAW,cACzD,wBACF;CAEF,IAAI;CACJ,IAAI;EACF,SAASC,MAAiB,QAAQ,MAAM;CAC1C,SAAS,OAAO;EACd,IAAI,iBAAiBF,SAAmB,MAAM;EAC9C,MAAM,IAAIA,QAAkB,EAC1B,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAChE,CAAC;CACH;CACA,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC,WAAW,MAAM,QAAQ,SAAS,MAAM,GAClF,MAAM,mBAAmB,yCAAyC,wBAAwB;CAE5F,OAAO;AACT"}

package/dist/connection-api-DNuEZ_jR.d.mts

@@ -0,0 +1,7 @@
+import { B as encode, F as Schema, I as StoredCredential, L as assertGrant, M as Connection, N as Grant, R as authorizationError, V as validate, _ as Requirements, a as Authentication, b as extend, c as CompleteInput, d as Error, f as ExtendInput, g as Method, h as InteractiveStart, j as AuthorizationError, l as Continuation, m as InteractiveFlow, o as AuthenticationFailure, p as Failure, s as BaseInput, u as ContinuationStore, v as StartResult, x as start, y as complete, z as decode } from "./zone-discovery-BPnH3sLU.mjs";
+declare namespace connection_api_d_exports {
+  export { Authentication, AuthenticationFailure, AuthorizationError, BaseInput, CompleteInput, Connection, Method as ConnectionMethod, StartResult as ConnectionStartResult, Continuation, ContinuationStore, Error, ExtendInput, Failure, Grant, InteractiveFlow, InteractiveStart, Method, Requirements, Schema, StartResult, StoredCredential, assertGrant, authorizationError, complete, decode, encode, extend, start, validate };
+}
+//#endregion
+export { connection_api_d_exports as t };
+//# sourceMappingURL=connection-api-DNuEZ_jR.d.mts.map

package/dist/effect-cloudflare.d.mts

@@ -1,2 +1,2 @@
-import { _ as Zone, b as make, c as auth_d_exports, f as Account, g as Options, h as ListZonesInput, m as Interface, p as Fetch, v as client_d_exports, y as discovery } from "./index-B1opsgls.mjs";
+import { _ as Zone, b as make, c as auth_d_exports, f as Account, g as Options, h as ListZonesInput, m as Interface, p as Fetch, v as client_d_exports, y as discovery } from "./index-BHWRTThN.mjs";
 export { type Account, auth_d_exports as Auth, client_d_exports as Client, type Fetch, type Interface, type ListZonesInput, type Options, type Zone, discovery, make };

package/dist/effect-cloudflare.mjs

@@ -1,2 +1,2 @@
-import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-CZ1pZHMZ.mjs";
+import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-BR-19zj-.mjs";
 export { auth_exports as Auth, client_exports as Client, discovery, make };

package/dist/effect-vercel.d.mts

@@ -1,2 +1,2 @@
-import { _ as Zone, b as make, d as Account, f as AccountContext, g as Options, h as ListZonesInput, m as Interface, p as Fetch, s as auth_d_exports, v as client_d_exports, y as discovery } from "./index-Ewc__bQu.mjs";
+import { _ as Zone, b as make, d as Account, f as AccountContext, g as Options, h as ListZonesInput, m as Interface, p as Fetch, s as auth_d_exports, v as client_d_exports, y as discovery } from "./index-D3PVknwE.mjs";
 export { type Account, type AccountContext, auth_d_exports as Auth, client_d_exports as Client, type Fetch, type Interface, type ListZonesInput, type Options, type Zone, discovery, make };

package/dist/effect-vercel.mjs

@@ -1,2 +1,2 @@
-import { c as client_exports, l as discovery, t as auth_exports, u as make } from "./auth-CzhZ3Cuc.mjs";
+import { c as client_exports, l as discovery, t as auth_exports, u as make } from "./auth-g-waCHcz.mjs";
 export { auth_exports as Auth, client_exports as Client, discovery, make };

package/dist/effect.d.mts

@@ -1,9 +1,9 @@
-import { A as Connection, At as dns_record_d_exports, Ft as domain_name_d_exports, J as CryptoError, K as authorization_d_exports, Lt as Error$1, O as lifecycle_repository_d_exports, Ot as Type, Rt as invalid_input_d_exports, S as provider_context_d_exports, W as ProviderAuthorization, Y as canonical_json_d_exports, at as manifest_d_exports, i as zone_discovery_d_exports, k as AuthorizationError, pt as provider_d_exports, st as secret_d_exports } from "./zone-discovery-BA5I24vu.mjs";
-import { t as index_d_exports } from "./index-B1opsgls.mjs";
-import { t as connection_api_d_exports } from "./connection-api-DftK7eHo.mjs";
-import { t as index_d_exports$1 } from "./index-Ewc__bQu.mjs";
-import { _ as selection_d_exports, a as verify_d_exports, d as google_doh_d_exports, g as zones_d_exports, h as doh_d_exports, l as resolver_pool_d_exports, p as cloudflare_doh_d_exports, v as diagnostic_d_exports } from "./verify-DZWLM91T.mjs";
-import { B as types_d_exports, N as DnsPlan, b as AuthorizeError, k as plan_d_exports, l as resolver_d_exports, v as deletion_d_exports } from "./resolver-CJOR9mQ8.mjs";
+import { A as lifecycle_repository_d_exports, At as Type, Bt as invalid_input_d_exports, J as authorization_d_exports, K as ProviderAuthorization, Lt as domain_name_d_exports, M as Connection, Mt as dns_record_d_exports, X as CryptoError, Z as canonical_json_d_exports, ht as provider_d_exports, i as zone_discovery_d_exports, j as AuthorizationError, lt as secret_d_exports, st as manifest_d_exports, w as provider_context_d_exports, zt as Error$1 } from "./zone-discovery-BPnH3sLU.mjs";
+import { t as index_d_exports } from "./index-BHWRTThN.mjs";
+import { t as connection_api_d_exports } from "./connection-api-DNuEZ_jR.mjs";
+import { t as index_d_exports$1 } from "./index-D3PVknwE.mjs";
+import { _ as selection_d_exports, a as verify_d_exports, d as google_doh_d_exports, g as zones_d_exports, h as doh_d_exports, l as resolver_pool_d_exports, p as cloudflare_doh_d_exports, v as diagnostic_d_exports } from "./verify-Dls29YC-.mjs";
+import { B as types_d_exports, N as DnsPlan, b as AuthorizeError, k as plan_d_exports, l as resolver_d_exports, v as deletion_d_exports } from "./resolver-Dc0hwV-J.mjs";
 import { Crypto, Effect } from "effect";
 declare namespace connection_authorization_d_exports {
   export { Error, Requirements, authorize };

package/dist/effect.mjs

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { A as invalid_input_exports, C as provider_exports, D as domain_name_exports, N as lifecycle_repository_exports, g as dns_record_exports } from "./dns-record-BLeqo56C.mjs";
-import { _ as StartResult, d as provider_context_exports, g as Method, h as Error, m as secret_exports, o as authorization_exports, v as complete, y as start } from "./authorization-DOg2Re1D.mjs";
-import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-CZ1pZHMZ.mjs";
+import { _ as StartResult, b as start, d as provider_context_exports, g as Method, h as Error, m as secret_exports, o as authorization_exports, v as complete, y as extend } from "./authorization-OeaSR47S.mjs";
+import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-BR-19zj-.mjs";
 import { n as zones_exports } from "./zones-DKHTpX9C.mjs";
-import { a as authorizationError, c as validate, i as assertGrant, n as Grant, o as decode, r as Schema, s as encode, t as AuthorizationError } from "./connection-BWrBwqjk.mjs";
+import { a as authorizationError, c as validate, i as assertGrant, n as Grant, o as decode, r as Schema, s as encode, t as AuthorizationError } from "./connection-CjNQe_E-.mjs";
 import { t as canonical_json_exports } from "./canonical-json-CpvqGMcr.mjs";
-import { C as selection_exports, D as manifest_exports, O as diagnostic_exports, S as connection_authorization_exports, b as dns_data_exports, g as cloudflare_doh_exports, k as version, m as google_doh_exports, p as resolver_pool_exports, s as verify_exports, v as doh_exports } from "./verify-BzpiA0Es.mjs";
+import { C as selection_exports, D as manifest_exports, O as diagnostic_exports, S as connection_authorization_exports, b as dns_data_exports, g as cloudflare_doh_exports, k as version, m as google_doh_exports, p as resolver_pool_exports, s as verify_exports, v as doh_exports } from "./verify-BKbvq7IN.mjs";
 import { C as plan_exports, L as zone_discovery_exports, N as types_exports, m as deletion_exports, r as resolver_exports } from "./resolver-CxE-VDw4.mjs";
-import { c as client_exports$1, l as discovery$1, t as auth_exports$1, u as make$1 } from "./auth-CzhZ3Cuc.mjs";
+import { c as client_exports$1, l as discovery$1, t as auth_exports$1, u as make$1 } from "./auth-g-waCHcz.mjs";
 //#region src/providers/cloudflare/index.ts
 var cloudflare_exports = /* @__PURE__ */ __exportAll({
 	Auth: () => auth_exports,
@@ -29,6 +29,7 @@ var connection_api_exports = /* @__PURE__ */ __exportAll({
 	complete: () => complete,
 	decode: () => decode,
 	encode: () => encode,
+	extend: () => extend,
 	start: () => start,
 	validate: () => validate
 });

package/dist/effect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/auth/connection-api.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export {\n  assertGrant,\n  authorizationError,\n  AuthorizationError,\n  decode,\n  encode,\n  Grant,\n  Schema,\n  validate,\n} from \"./connection.ts\";\nexport type { Connection, StoredCredential } from \"./connection.ts\";\nexport { complete, Error, Method, start, StartResult } from \"./connect.ts\";\nexport type {\n  Authentication,\n  AuthenticationFailure,\n  BaseInput,\n  CompleteInput,\n  Continuation,\n  ContinuationStore,\n  Failure,\n  InteractiveFlow,\n  InteractiveStart,\n  Method as ConnectionMethod,\n  Requirements,\n  StartResult as ConnectionStartResult,\n} from \"./connect.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection-api.ts\";\nexport * as AuthorizationLifecycle from \"./auth/lifecycle-repository.ts\";\nexport * as Diagnostic from \"./auth/diagnostic.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as ProviderContext from \"./auth/provider-context.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as ZoneDiscovery from \"./discovery/zone-discovery.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as GoogleDnsOverHttps from \"./verification/google-doh.ts\";\nexport * as DnsResolverPool from \"./verification/resolver-pool.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGGA,MAAa,UAAUA"}
+{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/auth/connection-api.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export {\n  assertGrant,\n  authorizationError,\n  AuthorizationError,\n  decode,\n  encode,\n  Grant,\n  Schema,\n  validate,\n} from \"./connection.ts\";\nexport type { Connection, StoredCredential } from \"./connection.ts\";\nexport { complete, Error, extend, Method, start, StartResult } from \"./connect.ts\";\nexport type {\n  Authentication,\n  AuthenticationFailure,\n  BaseInput,\n  CompleteInput,\n  Continuation,\n  ContinuationStore,\n  Failure,\n  InteractiveFlow,\n  InteractiveStart,\n  ExtendInput,\n  Method as ConnectionMethod,\n  Requirements,\n  StartResult as ConnectionStartResult,\n} from \"./connect.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection-api.ts\";\nexport * as AuthorizationLifecycle from \"./auth/lifecycle-repository.ts\";\nexport * as Diagnostic from \"./auth/diagnostic.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as ProviderContext from \"./auth/provider-context.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as ZoneDiscovery from \"./discovery/zone-discovery.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as GoogleDnsOverHttps from \"./verification/google-doh.ts\";\nexport * as DnsResolverPool from \"./verification/resolver-pool.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGGA,MAAa,UAAUA"}

package/dist/{index-B1opsgls.d.mts → index-BHWRTThN.d.mts}

@@ -1,4 +1,4 @@
-import { Lt as Error$1, Nt as DomainName, Q as Manifest, b as Codec, dt as Interface$1, et as OAuthClientConfiguration, h as Method, it as TokenValidation, nt as OAuthSubjectResolver, ot as Value, p as InteractiveFlow, r as Source, tt as OAuthMethod, ut as Error, x as Envelope } from "./zone-discovery-BA5I24vu.mjs";
+import { C as Envelope, Ft as DomainName, S as Codec, ct as Value, et as Manifest, ft as Error, g as Method, it as OAuthSubjectResolver, m as InteractiveFlow, nt as OAuthClientConfiguration, ot as TokenValidation, pt as Interface$1, r as Source, rt as OAuthMethod, zt as Error$1 } from "./zone-discovery-BPnH3sLU.mjs";
 import { Effect, Schema } from "effect";
 import * as oauth from "oauth4webapi";
 //#region src/providers/cloudflare/protocol.d.ts
@@ -156,4 +156,4 @@ declare namespace index_d_exports {
 }
 //#endregion
 export { Zone as _, SubjectResolverOptions as a, make as b, auth_d_exports as c, tokenMethod as d, Account as f, Options as g, ListZonesInput as h, OAuthMethodOptions as i, manifest as l, Interface as m, CredentialTarget as n, TokenConnectionOptions as o, Fetch as p, OAuthFlowOptions as r, TokenValidatorOptions as s, index_d_exports as t, oauthMethod as u, client_d_exports as v, discovery as y };
-//# sourceMappingURL=index-B1opsgls.d.mts.map
+//# sourceMappingURL=index-BHWRTThN.d.mts.map

package/dist/{index-Ewc__bQu.d.mts → index-D3PVknwE.d.mts}

@@ -1,4 +1,4 @@
-import { B as Capability, Lt as Error$1, Nt as DomainName, Q as Manifest, Z as IntegrationMethod, b as Codec, dt as Interface$1, h as Method, it as TokenValidation, ot as Value, p as InteractiveFlow, r as Source, ut as Error, x as Envelope } from "./zone-discovery-BA5I24vu.mjs";
+import { $ as IntegrationMethod, C as Envelope, Ft as DomainName, H as Capability, S as Codec, ct as Value, et as Manifest, ft as Error, g as Method, m as InteractiveFlow, ot as TokenValidation, pt as Interface$1, r as Source, zt as Error$1 } from "./zone-discovery-BPnH3sLU.mjs";
 import { Effect, Schema } from "effect";
 declare namespace client_d_exports {
   export { Account, AccountContext, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
@@ -142,4 +142,4 @@ declare namespace index_d_exports {
 }
 //#endregion
 export { Zone as _, IntegrationMethodOptions as a, make as b, integrationMethod as c, Account as d, AccountContext as f, Options as g, ListZonesInput as h, IntegrationFlowOptions as i, manifest as l, Interface as m, ExchangeCodeOptions as n, TokenConnectionOptions as o, Fetch as p, IntegrationCredential as r, auth_d_exports as s, index_d_exports as t, tokenMethod as u, client_d_exports as v, discovery as y };
-//# sourceMappingURL=index-Ewc__bQu.d.mts.map
+//# sourceMappingURL=index-D3PVknwE.d.mts.map

package/dist/index.d.mts

@@ -1,9 +1,9 @@
-import { $ as Method, A as Connection, B as Capability, Ct as Opaque, Dt as Txt, Et as Srv, G as Schema$2, H as Evidence, It as parse$1, Mt as parse, Nt as DomainName, Ot as Type, Pt as Schema$4, Q as Manifest, Rt as invalid_input_d_exports, S as provider_context_d_exports, St as Observed, Tt as Schema$3, U as EvidenceSchema, V as CapabilityEvidence, W as ProviderAuthorization, X as AsyncOAuthSubjectResolver, _t as Cname, bt as Mx, ct as AsyncInterface, et as OAuthClientConfiguration, gt as Caa, ht as Aaaa, it as TokenValidation, jt as equals, kt as data, lt as CreateResult, mt as A, q as encode, rt as Schema$1, st as secret_d_exports, tt as OAuthMethod, vt as DnsRecord, wt as RequirementMetadata, xt as Ns, yt as Encoded } from "./zone-discovery-BA5I24vu.mjs";
-import { a as Source, i as authorization_lifecycle_d_exports, o as zone_discovery_d_exports, r as connection_d_exports } from "./connection-CEqadXSm.mjs";
-import { n as cloudflare_d_exports } from "./cloudflare-FDl5q7Dm.mjs";
-import { _ as selection_d_exports, c as Policy, f as Options$3, g as zones_d_exports, i as Result, m as Options$4, n as PublicDns$1, o as DefaultOptions, r as PublicDnsObservation, s as Observation, t as ProviderObservation, u as Options$5, v as diagnostic_d_exports } from "./verify-DZWLM91T.mjs";
-import { A as renderManualInstructions$1, C as DiscoverCreateInput$1, E as ResolvedCreateResult, F as PlanAuthorization, I as Receipt, L as Schema$5, M as Authorization, N as DnsPlan, O as Target, P as Operation, R as encode$1, S as CreateResult$1, _ as Receipt$1, d as Authorization$1, f as CreateError, g as Plan, h as PartialError, j as ApplyReceipt, m as Operation$1, n as AsyncInterface$1, o as Query, p as Error, r as AsyncResolution, t as Answer, u as ApplyError, w as ExactCreateInput$1, z as encodeReceipt } from "./resolver-CJOR9mQ8.mjs";
-import { i as vercel_d_exports } from "./vercel-DgJaUX9D.mjs";
+import { At as Type, Bt as invalid_input_d_exports, Ct as Ns, Dt as Schema$3, Et as RequirementMetadata, Ft as DomainName, G as EvidenceSchema, H as Capability, It as Schema$4, K as ProviderAuthorization, M as Connection, Nt as equals, Ot as Srv, Pt as parse, Q as AsyncOAuthSubjectResolver, Rt as parse$1, St as Mx, Tt as Opaque, U as CapabilityEvidence, W as Evidence, Y as encode, _t as Aaaa, at as Schema$1, bt as DnsRecord, dt as CreateResult, et as Manifest, gt as A, jt as data, kt as Txt, lt as secret_d_exports, nt as OAuthClientConfiguration, ot as TokenValidation, q as Schema$2, rt as OAuthMethod, tt as Method, ut as AsyncInterface, vt as Caa, w as provider_context_d_exports, wt as Observed, xt as Encoded, yt as Cname } from "./zone-discovery-BPnH3sLU.mjs";
+import { a as Source, i as authorization_lifecycle_d_exports, o as zone_discovery_d_exports, r as connection_d_exports } from "./connection-BfkloPZy.mjs";
+import { n as cloudflare_d_exports } from "./cloudflare-BrZPU9li.mjs";
+import { _ as selection_d_exports, c as Policy, f as Options$3, g as zones_d_exports, i as Result, m as Options$4, n as PublicDns$1, o as DefaultOptions, r as PublicDnsObservation, s as Observation, t as ProviderObservation, u as Options$5, v as diagnostic_d_exports } from "./verify-Dls29YC-.mjs";
+import { A as renderManualInstructions$1, C as DiscoverCreateInput$1, E as ResolvedCreateResult, F as PlanAuthorization, I as Receipt, L as Schema$5, M as Authorization, N as DnsPlan, O as Target, P as Operation, R as encode$1, S as CreateResult$1, _ as Receipt$1, d as Authorization$1, f as CreateError, g as Plan, h as PartialError, j as ApplyReceipt, m as Operation$1, n as AsyncInterface$1, o as Query, p as Error, r as AsyncResolution, t as Answer, u as ApplyError, w as ExactCreateInput$1, z as encodeReceipt } from "./resolver-Dc0hwV-J.mjs";
+import { i as vercel_d_exports } from "./vercel-BsNDu4Np.mjs";
 import { Data } from "effect";
 declare namespace dns_provider_d_exports {
   export { CreateResult, AsyncInterface as Interface };

package/dist/index.mjs

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { A as invalid_input_exports, O as parse$1, S as layerFromAsync, T as Schema$2, _ as equals, a as Mx, b as Service, c as Opaque, d as Srv, f as Txt, i as Cname, l as RequirementMetadata, m as data, n as Aaaa, o as Ns, p as Type, r as Caa, s as Observed, t as A, u as Schema$1, v as parse, y as Error } from "./dns-record-BLeqo56C.mjs";
-import { a as Schema$3, c as encode, d as provider_context_exports, i as EvidenceSchema, m as secret_exports, n as CapabilityEvidence, r as Evidence, s as decode$3, t as Capability } from "./authorization-DOg2Re1D.mjs";
+import { a as Schema$3, c as encode, d as provider_context_exports, i as EvidenceSchema, m as secret_exports, n as CapabilityEvidence, r as Evidence, s as decode$3, t as Capability } from "./authorization-OeaSR47S.mjs";
 import { n as zones_exports } from "./zones-DKHTpX9C.mjs";
 import { i as webCryptoLayer } from "./canonical-json-CpvqGMcr.mjs";
-import { i as authorization_lifecycle_exports, t as connection_exports } from "./connection-CcQokgrd.mjs";
-import { t as cloudflare_exports } from "./cloudflare-BedFw4cX.mjs";
-import { C as selection_exports, E as decode$4, O as diagnostic_exports, T as Schema$4, _ as toAsync$1, a as Result, c as Observation, d as defaultMake$1, f as make$4, h as toAsync$3, i as PublicDnsObservation, k as version, l as Policy, n as ProviderObservation, o as observe$1, r as PublicDns$1, t as Provider$1, u as Service$1, w as Method, x as authorize$2, y as toAsync$2 } from "./verify-BzpiA0Es.mjs";
+import { i as authorization_lifecycle_exports, t as connection_exports } from "./connection-BwtOwpH6.mjs";
+import { t as cloudflare_exports } from "./cloudflare-CGmasR8A.mjs";
+import { C as selection_exports, E as decode$4, O as diagnostic_exports, T as Schema$4, _ as toAsync$1, a as Result, c as Observation, d as defaultMake$1, f as make$4, h as toAsync$3, i as PublicDnsObservation, k as version, l as Policy, n as ProviderObservation, o as observe$1, r as PublicDns$1, t as Provider$1, u as Service$1, w as Method, x as authorize$2, y as toAsync$2 } from "./verify-BKbvq7IN.mjs";
 import { A as decodeReceipt$1, D as Receipt, E as Operation, F as Service$2, I as make$5, M as encodeReceipt, O as Schema$5, P as Candidate, S as create$3, T as Authorization, a as Authorization$1, b as apply$3, c as PartialError, d as apply$2, f as authorize$3, g as CreateResult, j as encode$1, k as decode$5, l as Plan, o as Error$1, p as create$2, s as Operation$1, t as Error$2, u as Receipt$1, w as renderManualInstructions$1, x as authorize$4, y as Target } from "./resolver-CxE-VDw4.mjs";
-import { r as vercel_exports } from "./vercel-CWZ33NUS.mjs";
+import { r as vercel_exports } from "./vercel-CfoJaaCu.mjs";
 import { Data, Effect, Layer } from "effect";
 //#region src/promise/provider-auth.ts
 var provider_auth_exports = /* @__PURE__ */ __exportAll({

package/dist/{resolver-CJOR9mQ8.d.mts → resolver-Dc0hwV-J.d.mts}

@@ -1,4 +1,4 @@
-import { J as CryptoError, Lt as Error$2, Nt as DomainName, Ot as Type, ft as Service$1, n as Service$2, t as Candidate, ut as Error$3, vt as DnsRecord, yt as Encoded } from "./zone-discovery-BA5I24vu.mjs";
+import { At as Type, Ft as DomainName, X as CryptoError, bt as DnsRecord, ft as Error$3, mt as Service$1, n as Service$2, t as Candidate, xt as Encoded, zt as Error$2 } from "./zone-discovery-BPnH3sLU.mjs";
 import { Cause, Context, Crypto, Data, Effect, Layer, Schema } from "effect";
 declare namespace types_d_exports {
   export { ApplyReceipt, Authorization$1 as Authorization, DnsPlan, Operation$1 as Operation, PlanAuthorization, Receipt$1 as Receipt, Schema$1 as Schema, decode, decodeReceipt, encode, encodeReceipt };
@@ -840,6 +840,11 @@ declare const decode: (input: unknown) => Effect.Effect<{
   readonly operations: readonly ({
     readonly _tag: "conflict";
     readonly existing: readonly ({
+      readonly _tag: "Opaque";
+      readonly name: string;
+      readonly providerRecordId: string | null;
+      readonly providerType: string;
+    } | {
       readonly _tag: "A";
       readonly metadata: {
         readonly ownership: string;
@@ -933,11 +938,6 @@ declare const decode: (input: unknown) => Effect.Effect<{
       readonly policy: "append" | "exclusive";
       readonly ttl: number | null;
       readonly value: string;
-    } | {
-      readonly _tag: "Opaque";
-      readonly name: string;
-      readonly providerRecordId: string | null;
-      readonly providerType: string;
     })[];
     readonly id: string;
     readonly reason: string;
@@ -1243,6 +1243,11 @@ declare const encode: (input: {
   readonly operations: readonly ({
     readonly _tag: "conflict";
     readonly existing: readonly ({
+      readonly _tag: "Opaque";
+      readonly name: string;
+      readonly providerRecordId: string | null;
+      readonly providerType: string;
+    } | {
       readonly _tag: "A";
       readonly metadata: {
         readonly ownership: string;
@@ -1336,11 +1341,6 @@ declare const encode: (input: {
       readonly policy: "append" | "exclusive";
       readonly ttl: number | null;
       readonly value: string;
-    } | {
-      readonly _tag: "Opaque";
-      readonly name: string;
-      readonly providerRecordId: string | null;
-      readonly providerType: string;
     })[];
     readonly id: string;
     readonly reason: string;
@@ -2741,4 +2741,4 @@ declare const layerFromAsync: (resolver: AsyncInterface) => Layer.Layer<Service>
 declare const toAsync: (resolver: Interface) => AsyncInterface;
 //#endregion
 export { renderManualInstructions as A, types_d_exports as B, DiscoverCreateInput as C, StaleError as D, ResolvedCreateResult as E, PlanAuthorization as F, Receipt$1 as I, Schema$1 as L, Authorization$1 as M, DnsPlan as N, Target as O, Operation$1 as P, encode as R, CreateResult as S, PartialApplyError as T, Receipt as _, Interface as a, AuthorizeError as b, Service as c, Authorization as d, CreateError as f, Plan as g, PartialError as h, Error as i, ApplyReceipt as j, plan_d_exports as k, resolver_d_exports as l, Operation as m, AsyncInterface as n, Query as o, Error$1 as p, AsyncResolution as r, Resolution as s, Answer as t, ApplyError as u, deletion_d_exports as v, ExactCreateInput as w, ConflictError as x, AuthorizationError as y, encodeReceipt as z };
-//# sourceMappingURL=resolver-CJOR9mQ8.d.mts.map
+//# sourceMappingURL=resolver-Dc0hwV-J.d.mts.map

package/dist/testing.d.mts

@@ -1,5 +1,5 @@
-import { C as Aggregate, D as Service, E as Interface, J as CryptoError, Lt as Error$3, Nt as DomainName, St as Observed, T as Error$1, ct as AsyncInterface, dt as Interface$1, ft as Service$1, u as ContinuationStore, ut as Error$2 } from "./zone-discovery-BA5I24vu.mjs";
-import { D as StaleError, T as PartialApplyError, a as Interface$2, c as Service$2, h as PartialError, i as Error$4, j as ApplyReceipt, n as AsyncInterface$1, o as Query, p as Error$5, s as Resolution, x as ConflictError, y as AuthorizationError } from "./resolver-CJOR9mQ8.mjs";
+import { D as Error$1, Ft as DomainName, O as Interface, T as Aggregate, X as CryptoError, ft as Error$2, k as Service, mt as Service$1, pt as Interface$1, u as ContinuationStore, ut as AsyncInterface, wt as Observed, zt as Error$3 } from "./zone-discovery-BPnH3sLU.mjs";
+import { D as StaleError, T as PartialApplyError, a as Interface$2, c as Service$2, h as PartialError, i as Error$4, j as ApplyReceipt, n as AsyncInterface$1, o as Query, p as Error$5, s as Resolution, x as ConflictError, y as AuthorizationError } from "./resolver-Dc0hwV-J.mjs";
 import { Effect, Layer, Schema } from "effect";
 declare namespace in_memory_lifecycle_repository_d_exports {
   export { Options$1 as Options, layer$2 as layer, make$3 as make };

package/dist/{vercel-DgJaUX9D.d.mts → vercel-BsNDu4Np.d.mts}

@@ -1,6 +1,6 @@
-import { ct as AsyncInterface, it as TokenValidation } from "./zone-discovery-BA5I24vu.mjs";
-import { a as Source, n as Method, t as InteractiveFlow } from "./connection-CEqadXSm.mjs";
-import { _ as Zone, a as IntegrationMethodOptions, c as integrationMethod$1, d as Account, f as AccountContext, g as Options, h as ListZonesInput, i as IntegrationFlowOptions, l as manifest$1, n as ExchangeCodeOptions, o as TokenConnectionOptions, p as Fetch, r as IntegrationCredential, u as tokenMethod$1 } from "./index-Ewc__bQu.mjs";
+import { ot as TokenValidation, ut as AsyncInterface } from "./zone-discovery-BPnH3sLU.mjs";
+import { a as Source, n as Method, t as InteractiveFlow } from "./connection-BfkloPZy.mjs";
+import { _ as Zone, a as IntegrationMethodOptions, c as integrationMethod$1, d as Account, f as AccountContext, g as Options, h as ListZonesInput, i as IntegrationFlowOptions, l as manifest$1, n as ExchangeCodeOptions, o as TokenConnectionOptions, p as Fetch, r as IntegrationCredential, u as tokenMethod$1 } from "./index-D3PVknwE.mjs";
 declare namespace vercel_auth_d_exports {
   export { ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, exchangeCode, integrationFlow, integrationMethod, manifest, tokenConnectionMethod, tokenMethod };
 }
@@ -28,4 +28,4 @@ declare function make(options: Options): Interface;
 declare function discovery(options: Options): Source;
 //#endregion
 export { vercel_auth_d_exports as a, vercel_d_exports as i, discovery as n, make as r, Interface as t };
-//# sourceMappingURL=vercel-DgJaUX9D.d.mts.map
+//# sourceMappingURL=vercel-BsNDu4Np.d.mts.map

package/dist/{vercel-CWZ33NUS.mjs → vercel-CfoJaaCu.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { n as fromEffectFlow, r as fromEffectTokenMethod } from "./connection-CcQokgrd.mjs";
-import { a as manifest$1, i as integrationMethod$1, n as exchangeCode$1, o as tokenConnectionMethod$1, r as integrationFlow$1, s as tokenMethod$1, u as make$1 } from "./auth-CzhZ3Cuc.mjs";
+import { n as fromEffectFlow, r as fromEffectTokenMethod } from "./connection-BwtOwpH6.mjs";
+import { a as manifest$1, i as integrationMethod$1, n as exchangeCode$1, o as tokenConnectionMethod$1, r as integrationFlow$1, s as tokenMethod$1, u as make$1 } from "./auth-g-waCHcz.mjs";
 import { Effect } from "effect";
 //#region src/promise/vercel-auth.ts
 var vercel_auth_exports = /* @__PURE__ */ __exportAll({
@@ -57,4 +57,4 @@ function discovery(options) {
 //#endregion
 export { vercel_auth_exports as i, make as n, vercel_exports as r, discovery as t };
 
-//# sourceMappingURL=vercel-CWZ33NUS.mjs.map
+//# sourceMappingURL=vercel-CfoJaaCu.mjs.map

package/dist/{vercel-CWZ33NUS.mjs.map → vercel-CfoJaaCu.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"vercel-CWZ33NUS.mjs","names":["EffectAuth.integrationMethod","EffectAuth.manifest","EffectAuth.tokenMethod","EffectAuth.exchangeCode","Connection.fromEffectFlow","EffectAuth.integrationFlow","Connection.fromEffectTokenMethod","EffectAuth.tokenConnectionMethod","Vercel.make"],"sources":["../src/promise/vercel-auth.ts","../src/promise/vercel.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as EffectAuth from \"../providers/vercel/auth.ts\";\nimport * as Connection from \"./connection.ts\";\n\nexport const integrationMethod = EffectAuth.integrationMethod;\nexport const manifest = EffectAuth.manifest;\nexport const tokenMethod = EffectAuth.tokenMethod;\nexport type {\n  ExchangeCodeOptions,\n  IntegrationCredential,\n  IntegrationFlowOptions,\n  IntegrationMethodOptions,\n} from \"../providers/vercel/auth.ts\";\n\nexport function exchangeCode(\n  options: EffectAuth.ExchangeCodeOptions,\n): Promise<EffectAuth.IntegrationCredential> {\n  return Effect.runPromise(EffectAuth.exchangeCode(options));\n}\n\n/** Creates Vercel Integration's implementation for the Promise connection facade. */\nexport function integrationFlow(\n  options: EffectAuth.IntegrationFlowOptions,\n): Connection.InteractiveFlow {\n  return Connection.fromEffectFlow(EffectAuth.integrationFlow(options));\n}\n\n/** Creates a Vercel token method for the Promise connection facade. */\nexport function tokenConnectionMethod(\n  options: EffectAuth.TokenConnectionOptions,\n): Extract<Connection.Method, { readonly _tag: \"Token\" }> {\n  return Connection.fromEffectTokenMethod(EffectAuth.tokenConnectionMethod(options));\n}\n","import { Effect } from \"effect\";\n\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport type * as DnsProvider from \"../provider/provider.ts\";\nimport * as Vercel from \"../providers/vercel/index.ts\";\nimport type * as ZoneDiscovery from \"./zone-discovery.ts\";\n\nexport * as Auth from \"./vercel-auth.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"../providers/vercel/client.ts\";\n\nexport interface Interface extends DnsProvider.AsyncInterface {\n  readonly listAccounts: () => Promise<ReadonlyArray<Vercel.Account>>;\n  readonly listZones: (input?: Vercel.Client.ListZonesInput) => Promise<ReadonlyArray<Vercel.Zone>>;\n  readonly validateToken: () => Promise<ProviderAuth.TokenValidation>;\n}\n\n/** Creates a Promise-compatible facade over the Effect-native Vercel client. */\nexport function make(options: Vercel.Client.Options): Interface {\n  const client = Vercel.make(options);\n  return {\n    id: client.id,\n    createRecord: (zone, record) => Effect.runPromise(client.createRecord(zone, record)),\n    deleteRecord: (zone, providerRecordId) =>\n      Effect.runPromise(client.deleteRecord(zone, providerRecordId)),\n    getRecord: (zone, providerRecordId) =>\n      Effect.runPromise(client.getRecord(zone, providerRecordId)),\n    listAccounts: () => Effect.runPromise(client.listAccounts()),\n    listRecords: (zone) => Effect.runPromise(client.listRecords(zone)),\n    listZones: (input) => Effect.runPromise(client.listZones(input)),\n    validateToken: () => Effect.runPromise(client.validateToken()),\n  };\n}\n\n/** Creates the optional Vercel discovery source for Promise consumers. */\nexport function discovery(options: Vercel.Client.Options): ZoneDiscovery.Source {\n  const client = make(options);\n  return {\n    listZones: (name) => client.listZones({ name }),\n    provider: client,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAKA,MAAa,oBAAoBA;AACjC,MAAa,WAAWC;AACxB,MAAa,cAAcC;AAQ3B,SAAgB,aACd,SAC2C;CAC3C,OAAO,OAAO,WAAWC,eAAwB,OAAO,CAAC;AAC3D;;AAGA,SAAgB,gBACd,SAC4B;CAC5B,OAAOC,eAA0BC,kBAA2B,OAAO,CAAC;AACtE;;AAGA,SAAgB,sBACd,SACwD;CACxD,OAAOC,sBAAiCC,wBAAiC,OAAO,CAAC;AACnF;;;;;;;;;ACTA,SAAgB,KAAK,SAA2C;CAC9D,MAAM,SAASC,OAAY,OAAO;CAClC,OAAO;EACL,IAAI,OAAO;EACX,eAAe,MAAM,WAAW,OAAO,WAAW,OAAO,aAAa,MAAM,MAAM,CAAC;EACnF,eAAe,MAAM,qBACnB,OAAO,WAAW,OAAO,aAAa,MAAM,gBAAgB,CAAC;EAC/D,YAAY,MAAM,qBAChB,OAAO,WAAW,OAAO,UAAU,MAAM,gBAAgB,CAAC;EAC5D,oBAAoB,OAAO,WAAW,OAAO,aAAa,CAAC;EAC3D,cAAc,SAAS,OAAO,WAAW,OAAO,YAAY,IAAI,CAAC;EACjE,YAAY,UAAU,OAAO,WAAW,OAAO,UAAU,KAAK,CAAC;EAC/D,qBAAqB,OAAO,WAAW,OAAO,cAAc,CAAC;CAC/D;AACF;;AAGA,SAAgB,UAAU,SAAsD;CAC9E,MAAM,SAAS,KAAK,OAAO;CAC3B,OAAO;EACL,YAAY,SAAS,OAAO,UAAU,EAAE,KAAK,CAAC;EAC9C,UAAU;CACZ;AACF"}
+{"version":3,"file":"vercel-CfoJaaCu.mjs","names":["EffectAuth.integrationMethod","EffectAuth.manifest","EffectAuth.tokenMethod","EffectAuth.exchangeCode","Connection.fromEffectFlow","EffectAuth.integrationFlow","Connection.fromEffectTokenMethod","EffectAuth.tokenConnectionMethod","Vercel.make"],"sources":["../src/promise/vercel-auth.ts","../src/promise/vercel.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as EffectAuth from \"../providers/vercel/auth.ts\";\nimport * as Connection from \"./connection.ts\";\n\nexport const integrationMethod = EffectAuth.integrationMethod;\nexport const manifest = EffectAuth.manifest;\nexport const tokenMethod = EffectAuth.tokenMethod;\nexport type {\n  ExchangeCodeOptions,\n  IntegrationCredential,\n  IntegrationFlowOptions,\n  IntegrationMethodOptions,\n} from \"../providers/vercel/auth.ts\";\n\nexport function exchangeCode(\n  options: EffectAuth.ExchangeCodeOptions,\n): Promise<EffectAuth.IntegrationCredential> {\n  return Effect.runPromise(EffectAuth.exchangeCode(options));\n}\n\n/** Creates Vercel Integration's implementation for the Promise connection facade. */\nexport function integrationFlow(\n  options: EffectAuth.IntegrationFlowOptions,\n): Connection.InteractiveFlow {\n  return Connection.fromEffectFlow(EffectAuth.integrationFlow(options));\n}\n\n/** Creates a Vercel token method for the Promise connection facade. */\nexport function tokenConnectionMethod(\n  options: EffectAuth.TokenConnectionOptions,\n): Extract<Connection.Method, { readonly _tag: \"Token\" }> {\n  return Connection.fromEffectTokenMethod(EffectAuth.tokenConnectionMethod(options));\n}\n","import { Effect } from \"effect\";\n\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport type * as DnsProvider from \"../provider/provider.ts\";\nimport * as Vercel from \"../providers/vercel/index.ts\";\nimport type * as ZoneDiscovery from \"./zone-discovery.ts\";\n\nexport * as Auth from \"./vercel-auth.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"../providers/vercel/client.ts\";\n\nexport interface Interface extends DnsProvider.AsyncInterface {\n  readonly listAccounts: () => Promise<ReadonlyArray<Vercel.Account>>;\n  readonly listZones: (input?: Vercel.Client.ListZonesInput) => Promise<ReadonlyArray<Vercel.Zone>>;\n  readonly validateToken: () => Promise<ProviderAuth.TokenValidation>;\n}\n\n/** Creates a Promise-compatible facade over the Effect-native Vercel client. */\nexport function make(options: Vercel.Client.Options): Interface {\n  const client = Vercel.make(options);\n  return {\n    id: client.id,\n    createRecord: (zone, record) => Effect.runPromise(client.createRecord(zone, record)),\n    deleteRecord: (zone, providerRecordId) =>\n      Effect.runPromise(client.deleteRecord(zone, providerRecordId)),\n    getRecord: (zone, providerRecordId) =>\n      Effect.runPromise(client.getRecord(zone, providerRecordId)),\n    listAccounts: () => Effect.runPromise(client.listAccounts()),\n    listRecords: (zone) => Effect.runPromise(client.listRecords(zone)),\n    listZones: (input) => Effect.runPromise(client.listZones(input)),\n    validateToken: () => Effect.runPromise(client.validateToken()),\n  };\n}\n\n/** Creates the optional Vercel discovery source for Promise consumers. */\nexport function discovery(options: Vercel.Client.Options): ZoneDiscovery.Source {\n  const client = make(options);\n  return {\n    listZones: (name) => client.listZones({ name }),\n    provider: client,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAKA,MAAa,oBAAoBA;AACjC,MAAa,WAAWC;AACxB,MAAa,cAAcC;AAQ3B,SAAgB,aACd,SAC2C;CAC3C,OAAO,OAAO,WAAWC,eAAwB,OAAO,CAAC;AAC3D;;AAGA,SAAgB,gBACd,SAC4B;CAC5B,OAAOC,eAA0BC,kBAA2B,OAAO,CAAC;AACtE;;AAGA,SAAgB,sBACd,SACwD;CACxD,OAAOC,sBAAiCC,wBAAiC,OAAO,CAAC;AACnF;;;;;;;;;ACTA,SAAgB,KAAK,SAA2C;CAC9D,MAAM,SAASC,OAAY,OAAO;CAClC,OAAO;EACL,IAAI,OAAO;EACX,eAAe,MAAM,WAAW,OAAO,WAAW,OAAO,aAAa,MAAM,MAAM,CAAC;EACnF,eAAe,MAAM,qBACnB,OAAO,WAAW,OAAO,aAAa,MAAM,gBAAgB,CAAC;EAC/D,YAAY,MAAM,qBAChB,OAAO,WAAW,OAAO,UAAU,MAAM,gBAAgB,CAAC;EAC5D,oBAAoB,OAAO,WAAW,OAAO,aAAa,CAAC;EAC3D,cAAc,SAAS,OAAO,WAAW,OAAO,YAAY,IAAI,CAAC;EACjE,YAAY,UAAU,OAAO,WAAW,OAAO,UAAU,KAAK,CAAC;EAC/D,qBAAqB,OAAO,WAAW,OAAO,cAAc,CAAC;CAC/D;AACF;;AAGA,SAAgB,UAAU,SAAsD;CAC9E,MAAM,SAAS,KAAK,OAAO;CAC3B,OAAO;EACL,YAAY,SAAS,OAAO,UAAU,EAAE,KAAK,CAAC;EAC9C,UAAU;CACZ;AACF"}

package/dist/vercel.d.mts

@@ -1,3 +1,3 @@
-import { _ as Zone, d as Account, f as AccountContext, g as Options, h as ListZonesInput, p as Fetch } from "./index-Ewc__bQu.mjs";
-import { a as vercel_auth_d_exports, n as discovery, r as make, t as Interface } from "./vercel-DgJaUX9D.mjs";
+import { _ as Zone, d as Account, f as AccountContext, g as Options, h as ListZonesInput, p as Fetch } from "./index-D3PVknwE.mjs";
+import { a as vercel_auth_d_exports, n as discovery, r as make, t as Interface } from "./vercel-BsNDu4Np.mjs";
 export { type Account, type AccountContext, vercel_auth_d_exports as Auth, type Fetch, Interface, type ListZonesInput, type Options, type Zone, discovery, make };

package/dist/vercel.mjs

@@ -1,2 +1,2 @@
-import { i as vercel_auth_exports, n as make, t as discovery } from "./vercel-CWZ33NUS.mjs";
+import { i as vercel_auth_exports, n as make, t as discovery } from "./vercel-CfoJaaCu.mjs";
 export { vercel_auth_exports as Auth, discovery, make };

package/dist/{verify-BzpiA0Es.mjs → verify-BKbvq7IN.mjs}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { E as decode$1, O as parse$1, T as Schema$2, _ as equals, b as Service$1, k as Error$1, m as data } from "./dns-record-BLeqo56C.mjs";
 import { t as candidates } from "./zones-DKHTpX9C.mjs";
-import { a as authorizationError, i as assertGrant, t as AuthorizationError } from "./connection-BWrBwqjk.mjs";
+import { a as authorizationError, i as assertGrant, t as AuthorizationError } from "./connection-CjNQe_E-.mjs";
 import { i as toAsync$3, n as Service$2, t as Error$2, x as authorize$1 } from "./resolver-CxE-VDw4.mjs";
 import { Context, Data, Effect, Layer, Option, Schema, SchemaIssue, SchemaTransformation } from "effect";
 import * as DnsPacket from "@leichtgewicht/dns-packet";
 //#region package.json
-var version = "0.2.0";
+var version = "0.2.2";
 //#endregion
 //#region src/auth/diagnostic.ts
 var diagnostic_exports = /* @__PURE__ */ __exportAll({
@@ -639,4 +639,4 @@ function recordValue(requirement) {
 //#endregion
 export { selection_exports as C, manifest_exports as D, decode as E, diagnostic_exports as O, connection_authorization_exports as S, Schema$1 as T, toAsync$1 as _, Result as a, dns_data_exports as b, Observation as c, defaultMake as d, make as f, cloudflare_doh_exports as g, toAsync as h, PublicDnsObservation as i, version as k, Policy as l, google_doh_exports as m, ProviderObservation as n, observe as o, resolver_pool_exports as p, PublicDns as r, verify_exports as s, Provider as t, Service as u, doh_exports as v, Method as w, authorize as x, toAsync$2 as y };
 
-//# sourceMappingURL=verify-BzpiA0Es.mjs.map
+//# sourceMappingURL=verify-BKbvq7IN.mjs.map