domainkit 0.2.1 → 0.3.0

package/dist/testing.d.mts

@@ -1,5 +1,4 @@
-import { C as Aggregate, D as Service, E as Interface, J as CryptoError, Lt as Error$3, Nt as DomainName, St as Observed, T as Error$1, ct as AsyncInterface, dt as Interface$1, ft as Service$1, u as ContinuationStore, ut as Error$2 } from "./zone-discovery-BA5I24vu.mjs";
-import { D as StaleError, T as PartialApplyError, a as Interface$2, c as Service$2, h as PartialError, i as Error$4, j as ApplyReceipt, n as AsyncInterface$1, o as Query, p as Error$5, s as Resolution, x as ConflictError, y as AuthorizationError } from "./resolver-BbVzTbCX.mjs";
+import { D as StaleError, Dn as DomainName, T as PartialApplyError, Y as ContinuationStore, _t as Interface, a as Interface$2, bt as CryptoError, c as Service$2, en as AsyncInterface, gt as Error$1, h as PartialError, i as Error$2, in as Service$1, j as ApplyReceipt, jn as Error$4, mn as Observed, n as AsyncInterface$1, nn as Error$3, o as Query, p as Error$5, pt as Aggregate, rn as Interface$1, s as Resolution, vt as Service, x as ConflictError, y as AuthorizationError } from "./resolver-uqe1h5Vz.mjs";
 import { Effect, Layer, Schema } from "effect";
 declare namespace in_memory_lifecycle_repository_d_exports {
   export { Options$1 as Options, layer$2 as layer, make$3 as make };
@@ -26,7 +25,7 @@ declare const toAsync$1: (options?: Options) => AsyncInterface;
 declare namespace in_memory_d_exports$1 {
   export { Resolve, layer, make, toAsync };
 }
-type Resolve = (query: Query) => Resolution | Effect.Effect<Resolution, Error$4>;
+type Resolve = (query: Query) => Resolution | Effect.Effect<Resolution, Error$2>;
 declare function make(resolve: Resolve): Interface$2;
 declare const layer: (resolve: Resolve) => Layer.Layer<Service$2>;
 declare const toAsync: (resolve: Resolve) => AsyncInterface$1;
@@ -40,7 +39,7 @@ declare const Error_base: Schema.Class<Error, Schema.TaggedStruct<"ProviderConfo
 }>, import("effect/Cause").YieldableError>;
 declare class Error extends Error_base {}
 interface Input {
-  readonly makeProvider: () => Effect.Effect<Interface$1, Error$2>;
+  readonly makeProvider: () => Effect.Effect<Interface$1, Error$3>;
   readonly prefix?: string;
   readonly zone: DomainName;
 }
@@ -56,7 +55,7 @@ declare const run: (input: Input) => Effect.Effect<{
   cases: readonly ["create-readback-cleanup", "exact-noop", "conflict", "stale-plan", "partial-apply-cleanup"];
   providerId: string;
   zone: string & import("effect/Brand").Brand<"DomainName">;
-}, ApplyReceipt | AuthorizationError | ConflictError | CryptoError | Error$3 | Error$2 | Error$5 | Error | PartialApplyError | PartialError | StaleError, never>;
+}, ApplyReceipt | AuthorizationError | ConflictError | CryptoError | Error$4 | Error$3 | Error$5 | Error | PartialApplyError | PartialError | StaleError, never>;
 //#endregion
 export { in_memory_lifecycle_repository_d_exports as InMemoryAuthorizationLifecycle, in_memory_continuation_d_exports as InMemoryConnectionContinuations, in_memory_d_exports as InMemoryDnsProvider, in_memory_d_exports$1 as InMemoryDnsResolver, provider_conformance_d_exports as ProviderConformance };
 //# sourceMappingURL=testing.d.mts.map

package/dist/testing.mjs

@@ -1,7 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { M as Service, O as parse, _ as equals, b as Service$1, j as Error$1, v as parse$1, w as toAsync$2, x as fromAsync$1, y as Error$2 } from "./dns-record-BLeqo56C.mjs";
-import { i as webCryptoLayer } from "./canonical-json-CpvqGMcr.mjs";
-import { S as create, _ as PartialApplyError, b as apply, d as apply$1, f as authorize$1, h as ConflictError, i as toAsync$3, n as Service$2, p as create$1, v as StaleError, x as authorize, y as Target } from "./resolver-CxE-VDw4.mjs";
+import { F as webCryptoLayer, I as Error$2, L as Service$1, R as fromAsync$1, S as create, V as toAsync$2, _ as PartialApplyError, at as parse$1, b as apply, d as apply$1, f as authorize$1, ft as Error$1, h as ConflictError, i as toAsync$3, it as equals, n as Service$2, p as create$1, pt as Service, v as StaleError, vt as parse, x as authorize, y as Target } from "./resolver-CvK7JoJM.mjs";
 import { Effect, Layer, Ref, Schema, Semaphore } from "effect";
 //#region src/stores/in-memory-lifecycle-repository.ts
 var in_memory_lifecycle_repository_exports = /* @__PURE__ */ __exportAll({
@@ -94,6 +92,22 @@ function make$3(options = {}) {
 		findByProviderAccount: Effect.fn("AuthorizationLifecycleRepository.findByProviderAccount")((providerId, providerAccountId) => Ref.get(state).pipe(Effect.map((entries) => [...entries.values()].find(({ authorization }) => authorization.providerId === providerId && authorization.providerAccountId === providerAccountId) ?? null))),
 		get,
 		getByConnectionId,
+		modifyBinding: (connectionId, modify) => serialize(Effect.gen(function* () {
+			const aggregate = yield* getByConnectionId(connectionId);
+			if (aggregate === null) return yield* missing("modifyBinding", "Connection binding does not exist");
+			const binding = aggregate.bindings.find((candidate) => candidate.id === connectionId);
+			if (binding === void 0) return yield* missing("modifyBinding", "Connection binding does not exist");
+			const modification = modify(binding);
+			const next = {
+				...aggregate,
+				bindings: aggregate.bindings.map((candidate) => candidate.id === connectionId ? modification.binding : candidate)
+			};
+			yield* commit("modifyBinding", next);
+			return {
+				aggregate: next,
+				value: modification.value
+			};
+		})),
 		promoteEvidence: Effect.fn("AuthorizationLifecycleRepository.promoteEvidence")((authorizationId, evidence) => serialize(Effect.gen(function* () {
 			const aggregate = yield* get(authorizationId);
 			if (aggregate === null) return yield* missing("promoteEvidence", "Authorization aggregate does not exist");

package/dist/testing.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"testing.mjs","names":["Repository.Error","make","layer","Repository.Service","make","make","DomainName.parse","layer","DnsProvider.Service","toAsync","DnsProvider.toAsync","DnsResolver.Service","DnsResolver.toAsync","DnsProvider.fromAsync","Provisioning.create","Provisioning.apply","Provisioning.authorize","Provisioning.PartialApplyError","DnsRecord.equals","Deletion.create","Deletion.apply","Deletion.authorize","Provisioning.ConflictError","Provisioning.StaleError","DnsProvider.Error","DnsProvider.Service","Digest.webCryptoLayer","DnsRecord.parse"],"sources":["../src/stores/in-memory-lifecycle-repository.ts","../src/stores/in-memory-continuation.ts","../src/provider/in-memory.ts","../src/verification/in-memory.ts","../src/testing/provider-conformance.ts"],"sourcesContent":["import { Effect, Layer, Ref, Semaphore } from \"effect\";\n\nimport * as Repository from \"../auth/lifecycle-repository.ts\";\n\nexport interface Options {\n  readonly beforeCommit?: (\n    operation: string,\n    aggregate: Repository.Aggregate | null,\n  ) => Effect.Effect<void, Repository.Error>;\n}\n\nfunction missing(operation: string, message: string): Repository.Error {\n  return new Repository.Error({\n    category: \"storage\",\n    message,\n    operation,\n    retry: \"never\",\n  });\n}\n\nexport function make(options: Options = {}): Repository.Interface {\n  const state = Effect.runSync(Ref.make<ReadonlyMap<string, Repository.Aggregate>>(new Map()));\n  const mutations = Semaphore.makeUnsafe(1);\n  const serialize = <A, E, R>(effect: Effect.Effect<A, E, R>) => mutations.withPermit(effect);\n\n  const commit = Effect.fn(\"InMemoryAuthorizationLifecycleRepository.commit\")(function* (\n    operation: string,\n    aggregate: Repository.Aggregate | null,\n  ) {\n    if (options.beforeCommit !== undefined) yield* options.beforeCommit(operation, aggregate);\n    yield* Ref.update(state, (entries) => {\n      const next = new Map(entries);\n      if (aggregate === null) return next;\n      next.set(aggregate.authorization.id, aggregate);\n      return next;\n    });\n  });\n\n  const remove = Effect.fn(\"InMemoryAuthorizationLifecycleRepository.remove\")(function* (\n    authorizationId: string,\n  ) {\n    if (options.beforeCommit !== undefined) yield* options.beforeCommit(\"remove\", null);\n    yield* Ref.update(state, (entries) => {\n      const next = new Map(entries);\n      next.delete(authorizationId);\n      return next;\n    });\n  });\n\n  const get = Effect.fn(\"AuthorizationLifecycleRepository.get\")((authorizationId: string) =>\n    Ref.get(state).pipe(Effect.map((entries) => entries.get(authorizationId) ?? null)),\n  );\n\n  const getByConnectionId = Effect.fn(\"AuthorizationLifecycleRepository.getByConnectionId\")(\n    (connectionId: string) =>\n      Ref.get(state).pipe(\n        Effect.map(\n          (entries) =>\n            [...entries.values()].find((aggregate) =>\n              aggregate.bindings.some((binding) => binding.id === connectionId),\n            ) ?? null,\n        ),\n      ),\n  );\n\n  const finishRevocation = Effect.fn(\"AuthorizationLifecycleRepository.finishRevocation\")(\n    function* <E>(\n      aggregate: Repository.Aggregate,\n      revoke: (aggregate: Repository.Aggregate) => Effect.Effect<void, E>,\n    ) {\n      const pending: Repository.Aggregate = {\n        ...aggregate,\n        authorization: {\n          ...aggregate.authorization,\n          revocation:\n            aggregate.authorization.revocation._tag === \"Pending\"\n              ? aggregate.authorization.revocation\n              : { _tag: \"Pending\", requestedAt: new Date() },\n        },\n      };\n      yield* commit(\"prepareRevocation\", pending);\n      yield* revoke(pending);\n      yield* remove(pending.authorization.id);\n      return {\n        authorizationId: pending.authorization.id,\n        remainingBindings: 0,\n        revokedAuthorization: true,\n      } satisfies Repository.DetachResult;\n    },\n  );\n\n  return Repository.Service.of({\n    bind: Effect.fn(\"AuthorizationLifecycleRepository.bind\")((authorizationId, binding) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* get(authorizationId);\n          if (aggregate === null) {\n            return yield* missing(\"bind\", \"Authorization aggregate does not exist\");\n          }\n          const next = {\n            ...aggregate,\n            bindings: [\n              ...aggregate.bindings.filter((candidate) => candidate.id !== binding.id),\n              binding,\n            ],\n          };\n          yield* commit(\"bind\", next);\n          return next;\n        }),\n      ),\n    ),\n    connect: Effect.fn(\"AuthorizationLifecycleRepository.connect\")((aggregate) =>\n      serialize(\n        Effect.gen(function* () {\n          yield* commit(\"connect\", aggregate);\n          return aggregate;\n        }),\n      ),\n    ),\n    detach: ({ connectionId, revoke }) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* getByConnectionId(connectionId);\n          if (aggregate === null) {\n            return yield* missing(\"detach\", \"Connection binding does not exist\");\n          }\n          const remaining = aggregate.bindings.filter((binding) => binding.id !== connectionId);\n          if (remaining.length > 0) {\n            yield* commit(\"detachBinding\", { ...aggregate, bindings: remaining });\n            return {\n              authorizationId: aggregate.authorization.id,\n              remainingBindings: remaining.length,\n              revokedAuthorization: false,\n            };\n          }\n          return yield* finishRevocation(aggregate, revoke);\n        }).pipe(Effect.withSpan(\"AuthorizationLifecycleRepository.detach\")),\n      ),\n    findByProviderAccount: Effect.fn(\"AuthorizationLifecycleRepository.findByProviderAccount\")(\n      (providerId: string, providerAccountId: string) =>\n        Ref.get(state).pipe(\n          Effect.map(\n            (entries) =>\n              [...entries.values()].find(\n                ({ authorization }) =>\n                  authorization.providerId === providerId &&\n                  authorization.providerAccountId === providerAccountId,\n              ) ?? null,\n          ),\n        ),\n    ),\n    get,\n    getByConnectionId,\n    promoteEvidence: Effect.fn(\"AuthorizationLifecycleRepository.promoteEvidence\")(\n      (authorizationId, evidence) =>\n        serialize(\n          Effect.gen(function* () {\n            const aggregate = yield* get(authorizationId);\n            if (aggregate === null) {\n              return yield* missing(\"promoteEvidence\", \"Authorization aggregate does not exist\");\n            }\n            const byCapability = new Map(\n              aggregate.authorization.capabilityEvidence.map((item) => [item.capability, item]),\n            );\n            for (const item of evidence) byCapability.set(item.capability, item);\n            const next = {\n              ...aggregate,\n              authorization: {\n                ...aggregate.authorization,\n                capabilityEvidence: [...byCapability.values()],\n              },\n            };\n            yield* commit(\"promoteEvidence\", next);\n            return next;\n          }),\n        ),\n    ),\n    recover: ({ authorizationId, revoke }) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* get(authorizationId);\n          if (aggregate === null) {\n            return yield* missing(\"recover\", \"Authorization aggregate does not exist\");\n          }\n          if (aggregate.authorization.revocation._tag !== \"Pending\") {\n            return yield* missing(\"recover\", \"Authorization is not awaiting revocation\");\n          }\n          return yield* finishRevocation(aggregate, revoke);\n        }).pipe(Effect.withSpan(\"AuthorizationLifecycleRepository.recover\")),\n      ),\n    rotate: Effect.fn(\"AuthorizationLifecycleRepository.rotate\")(\n      (authorizationId, credential, expiresAt) =>\n        serialize(\n          Effect.gen(function* () {\n            const aggregate = yield* get(authorizationId);\n            if (aggregate === null) {\n              return yield* missing(\"rotate\", \"Authorization aggregate does not exist\");\n            }\n            const next = {\n              ...aggregate,\n              authorization: { ...aggregate.authorization, expiresAt },\n              credential,\n            };\n            yield* commit(\"rotate\", next);\n            return next;\n          }),\n        ),\n    ),\n  });\n}\n\nexport const layer = (options: Options = {}) => Layer.sync(Repository.Service, () => make(options));\n","import { Effect, Ref } from \"effect\";\n\nimport type * as Connection from \"../auth/connect.ts\";\n\nexport function make(): Connection.ContinuationStore {\n  const state = Effect.runSync(Ref.make<ReadonlyMap<string, Connection.Continuation>>(new Map()));\n  return {\n    consume: Effect.fn(\"ConnectionContinuations.consume\")(function* (id, now) {\n      return yield* Ref.modify(state, (entries) => {\n        const continuation = entries.get(id);\n        const next = new Map(entries);\n        next.delete(id);\n        return [\n          continuation !== undefined && continuation.expiresAt > now ? continuation : null,\n          next,\n        ] as const;\n      });\n    }),\n    put: Effect.fn(\"ConnectionContinuations.put\")((continuation) =>\n      Ref.update(state, (entries) => {\n        const next = new Map(entries);\n        next.set(continuation.id, continuation);\n        return next;\n      }),\n    ),\n  };\n}\n","import { Effect, Layer } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as DnsProvider from \"./provider.ts\";\n\nexport interface Options {\n  readonly id?: string;\n  readonly records?: Readonly<Record<string, ReadonlyArray<DnsRecord.Observed>>>;\n}\n\nexport function make(options: Options = {}): DnsProvider.Interface {\n  const id = options.id ?? \"memory\";\n  const records = new Map<DomainName.DomainName, Array<DnsRecord.Observed>>();\n  const recordIds = new Map<string, DnsRecord.Observed>();\n  for (const [zone, initial] of Object.entries(options.records ?? {})) {\n    records.set(DomainName.parse(zone), [...initial]);\n    for (const [index, record] of initial.entries()) recordIds.set(`${id}:${index + 1}`, record);\n  }\n  return {\n    id,\n    listRecords: Effect.fn(\"InMemoryDnsProvider.listRecords\")((zone) =>\n      Effect.sync(() => [...(records.get(zone) ?? [])]),\n    ),\n    createRecord: Effect.fn(\"InMemoryDnsProvider.createRecord\")((zone, record) =>\n      Effect.sync(() => {\n        const current = records.get(zone) ?? [];\n        current.push(record);\n        records.set(zone, current);\n        const providerRecordId = `${id}:${current.length}`;\n        recordIds.set(providerRecordId, record);\n        return { providerRecordId };\n      }),\n    ),\n    deleteRecord: Effect.fn(\"InMemoryDnsProvider.deleteRecord\")((zone, providerRecordId) =>\n      Effect.sync(() => {\n        const record = recordIds.get(providerRecordId);\n        if (record === undefined) return;\n        records.set(\n          zone,\n          (records.get(zone) ?? []).filter((candidate) => candidate !== record),\n        );\n        recordIds.delete(providerRecordId);\n      }),\n    ),\n    getRecord: Effect.fn(\"InMemoryDnsProvider.getRecord\")((_zone, providerRecordId) =>\n      Effect.sync(() => recordIds.get(providerRecordId) ?? null),\n    ),\n  };\n}\n\nexport const layer = (options: Options = {}): Layer.Layer<DnsProvider.Service> =>\n  Layer.succeed(DnsProvider.Service, make(options));\n\nexport const toAsync = (options: Options = {}): DnsProvider.AsyncInterface =>\n  DnsProvider.toAsync(make(options));\n","import { Effect, Layer } from \"effect\";\n\nimport * as DnsResolver from \"./resolver.ts\";\n\nexport type Resolve = (\n  query: DnsResolver.Query,\n) => DnsResolver.Resolution | Effect.Effect<DnsResolver.Resolution, DnsResolver.Error>;\n\nexport function make(resolve: Resolve): DnsResolver.Interface {\n  return {\n    resolve: Effect.fn(\"InMemoryDnsResolver.resolve\")((query) =>\n      Effect.suspend(() => {\n        const resolution = resolve(query);\n        return Effect.isEffect(resolution) ? resolution : Effect.succeed(resolution);\n      }),\n    ),\n  };\n}\n\nexport const layer = (resolve: Resolve): Layer.Layer<DnsResolver.Service> =>\n  Layer.succeed(DnsResolver.Service, make(resolve));\n\nexport const toAsync = (resolve: Resolve): DnsResolver.AsyncInterface =>\n  DnsResolver.toAsync(make(resolve));\n","import { Effect, Layer, Schema } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as Deletion from \"../plan/deletion.ts\";\nimport * as Digest from \"../plan/canonical-json.ts\";\nimport * as Provisioning from \"../plan/plan.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport class Error extends Schema.TaggedError<Error>()(\"ProviderConformanceError\", {\n  case: Schema.String,\n  message: Schema.String,\n  providerId: Schema.String,\n}) {}\n\nexport interface Input {\n  readonly makeProvider: () => Effect.Effect<DnsProvider.Interface, DnsProvider.Error>;\n  readonly prefix?: string;\n  readonly zone: DomainName.DomainName;\n}\n\nexport interface Report {\n  readonly cases: ReadonlyArray<string>;\n  readonly providerId: string;\n  readonly zone: DomainName.DomainName;\n}\n\n/** Adapt a fresh Promise-shaped provider factory for the Effect-native conformance runner. */\nexport function fromAsync(makeProvider: () => DnsProvider.AsyncInterface): Input[\"makeProvider\"] {\n  return () => Effect.sync(() => DnsProvider.fromAsync(makeProvider()));\n}\n\nconst cases = [\n  \"create-readback-cleanup\",\n  \"exact-noop\",\n  \"conflict\",\n  \"stale-plan\",\n  \"partial-apply-cleanup\",\n] as const;\n\n/** Run the deterministic offline contract every DomainKit DNS adapter must satisfy. */\nexport const run = Effect.fn(\"ProviderConformance.run\")(function* (input: Input) {\n  const makeProvider = () =>\n    Effect.suspend(input.makeProvider).pipe(\n      Effect.catchDefect((cause) =>\n        Effect.fail(\n          new Error({\n            case: \"factory\",\n            message: cause instanceof globalThis.Error ? cause.message : \"Provider factory failed\",\n            providerId: \"unknown\",\n          }),\n        ),\n      ),\n    );\n  const first = yield* makeProvider();\n  const providerId = first.id;\n  const prefix = input.prefix ?? \"domainkit-conformance\";\n  yield* createReadbackCleanup(first, input.zone, prefix);\n  yield* exactNoop(yield* makeProvider(), input.zone, prefix);\n  yield* conflict(yield* makeProvider(), input.zone, prefix);\n  yield* stalePlan(yield* makeProvider(), input.zone, prefix);\n  yield* partialApplyCleanup(yield* makeProvider(), input.zone, prefix);\n  return { cases, providerId, zone: input.zone } satisfies Report;\n});\n\nfunction createReadbackCleanup(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  prefix: string,\n) {\n  const requirements = createRequirements(zone, prefix);\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const { plan } = yield* Provisioning.create({\n      requirements,\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    yield* requireTags(provider, \"create-readback-cleanup\", plan.operations, [\"create\", \"create\"]);\n    const receipt = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    }).pipe(\n      Effect.tapError((failure) =>\n        failure instanceof Provisioning.PartialApplyError\n          ? Effect.sync(() => {\n              cleanupRecordIds = providerRecordIds(failure.receipt.operations);\n            })\n          : Effect.void,\n      ),\n    );\n    cleanupRecordIds = providerRecordIds(receipt.operations);\n    yield* requireCondition(\n      provider,\n      \"create-readback-cleanup\",\n      receipt.status === \"complete\" &&\n        receipt.operations.every(({ providerRecordId }) => providerRecordId !== null),\n      \"apply must return a complete receipt with provider record IDs\",\n    );\n    const observed = yield* provider.listRecords(zone);\n    yield* requireCondition(\n      provider,\n      \"create-readback-cleanup\",\n      requirements.every((requirement) =>\n        observed.some(\n          (record) => record._tag !== \"Opaque\" && DnsRecord.equals(record, requirement),\n        ),\n      ),\n      \"listRecords must return every created record, including across provider pages\",\n    );\n    const deletion = yield* Deletion.create({ plan, receipt });\n    const deletionReceipt = yield* Deletion.apply({\n      authorization: yield* Deletion.authorize(deletion),\n      plan: deletion,\n    });\n    yield* requireCondition(\n      provider,\n      \"create-readback-cleanup\",\n      deletionReceipt.status === \"complete\" &&\n        (yield* recordIdsAbsent(provider, zone, cleanupRecordIds)),\n      \"receipt-bound cleanup must remove every created record\",\n    );\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction exactNoop(provider: DnsProvider.Interface, zone: DomainName.DomainName, prefix: string) {\n  const requirement = cname(zone, `${prefix}-exact`);\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const created = yield* provider.createRecord(zone, requirement);\n    cleanupRecordIds = created.providerRecordId === null ? [] : [created.providerRecordId];\n    const { plan } = yield* Provisioning.create({\n      requirements: [requirement],\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    yield* requireTags(provider, \"exact-noop\", plan.operations, [\"noop\"]);\n    const receipt = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    });\n    yield* requireCondition(\n      provider,\n      \"exact-noop\",\n      receipt.operations.length === 0,\n      \"an exact plan must not create another record\",\n    );\n    yield* deleteCreated(provider, zone, created.providerRecordId, \"exact-noop\");\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction conflict(provider: DnsProvider.Interface, zone: DomainName.DomainName, prefix: string) {\n  const requirement = cname(zone, `${prefix}-conflict`);\n  const occupied = txt(zone, `${prefix}-conflict`, \"occupied\");\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const created = yield* provider.createRecord(zone, occupied);\n    cleanupRecordIds = created.providerRecordId === null ? [] : [created.providerRecordId];\n    const { plan } = yield* Provisioning.create({\n      requirements: [requirement],\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    yield* requireTags(provider, \"conflict\", plan.operations, [\"conflict\"]);\n    const failure = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    }).pipe(Effect.flip);\n    yield* requireCondition(\n      provider,\n      \"conflict\",\n      failure instanceof Provisioning.ConflictError,\n      \"apply must fail closed on incompatible state\",\n    );\n    yield* deleteCreated(provider, zone, created.providerRecordId, \"conflict\");\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction stalePlan(provider: DnsProvider.Interface, zone: DomainName.DomainName, prefix: string) {\n  const requirement = cname(zone, `${prefix}-stale`);\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const { plan } = yield* Provisioning.create({\n      requirements: [requirement],\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    const authorization = yield* Provisioning.authorize(plan);\n    const created = yield* provider.createRecord(zone, requirement);\n    cleanupRecordIds = created.providerRecordId === null ? [] : [created.providerRecordId];\n    const failure = yield* Provisioning.apply({ authorization, plan }).pipe(Effect.flip);\n    yield* requireCondition(\n      provider,\n      \"stale-plan\",\n      failure instanceof Provisioning.StaleError,\n      \"apply must reject provider state that changed after authorization\",\n    );\n    yield* deleteCreated(provider, zone, created.providerRecordId, \"stale-plan\");\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction partialApplyCleanup(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  prefix: string,\n) {\n  let creates = 0;\n  const flaky = DnsProvider.Service.of({\n    ...provider,\n    createRecord: Effect.fn(\"ProviderConformance.createRecord\")((target, record) => {\n      creates += 1;\n      return creates === 1\n        ? provider.createRecord(target, record)\n        : Effect.fail(\n            new DnsProvider.Error({\n              message: \"injected conformance failure\",\n              operation: \"createRecord\",\n              providerId: provider.id,\n            }),\n          );\n    }),\n  });\n  const requirements = [\n    cname(zone, `${prefix}-partial-one`),\n    txt(zone, `${prefix}-partial-two`, \"domainkit\"),\n  ];\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const { plan } = yield* Provisioning.create({\n      requirements,\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    const failure = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    }).pipe(Effect.flip);\n    cleanupRecordIds =\n      failure instanceof Provisioning.PartialApplyError\n        ? providerRecordIds(failure.receipt.operations)\n        : [];\n    yield* requireCondition(\n      provider,\n      \"partial-apply-cleanup\",\n      failure instanceof Provisioning.PartialApplyError && failure.receipt.operations.length === 1,\n      \"a later write failure must preserve the first confirmed write in a partial receipt\",\n    );\n    if (!(failure instanceof Provisioning.PartialApplyError)) return;\n    const deletion = yield* Deletion.create({ plan, receipt: failure.receipt }).pipe(\n      Effect.provide(providerLayer(provider)),\n    );\n    yield* Deletion.apply({\n      authorization: yield* Deletion.authorize(deletion),\n      plan: deletion,\n    }).pipe(Effect.provide(providerLayer(provider)));\n    yield* requireCondition(\n      provider,\n      \"partial-apply-cleanup\",\n      yield* recordIdsAbsent(provider, zone, cleanupRecordIds),\n      \"partial receipt cleanup must remove the confirmed write\",\n    );\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(flaky)),\n  );\n}\n\nfunction providerRecordIds(\n  operations: ReadonlyArray<{ readonly providerRecordId: string | null }>,\n): ReadonlyArray<string> {\n  return operations.flatMap(({ providerRecordId }) =>\n    providerRecordId === null ? [] : [providerRecordId],\n  );\n}\n\nfunction recordIdsAbsent(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  recordIds: ReadonlyArray<string>,\n) {\n  return Effect.forEach(recordIds, (providerRecordId) =>\n    provider.getRecord(zone, providerRecordId),\n  ).pipe(Effect.map((records) => records.every((record) => record === null)));\n}\n\nfunction bestEffortDelete(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  recordIds: () => ReadonlyArray<string>,\n) {\n  return Effect.suspend(() =>\n    Effect.forEach(\n      recordIds(),\n      (providerRecordId) => provider.deleteRecord(zone, providerRecordId).pipe(Effect.ignore),\n      { discard: true },\n    ),\n  );\n}\n\nfunction providerLayer(provider: DnsProvider.Interface) {\n  return Layer.merge(Layer.succeed(DnsProvider.Service, provider), Digest.webCryptoLayer);\n}\n\nfunction createRequirements(zone: DomainName.DomainName, prefix: string) {\n  return [cname(zone, `${prefix}-create`), txt(zone, `${prefix}-page`, \"domainkit\")];\n}\n\nfunction cname(zone: DomainName.DomainName, label: string) {\n  return DnsRecord.parse({\n    _tag: \"CNAME\",\n    metadata: { ownership: \"tester\", provenance: \"domainkit\", purpose: \"conformance\" },\n    name: `${label}.${zone}`,\n    policy: \"exclusive\",\n    target: \"target.example.net\",\n    ttl: 300,\n  });\n}\n\nfunction txt(zone: DomainName.DomainName, label: string, value: string) {\n  return DnsRecord.parse({\n    _tag: \"TXT\",\n    metadata: { ownership: \"tester\", provenance: \"domainkit\", purpose: \"conformance\" },\n    name: `${label}.${zone}`,\n    policy: \"append\",\n    ttl: 300,\n    value,\n  });\n}\n\nfunction requireTags(\n  provider: DnsProvider.Interface,\n  testCase: string,\n  operations: ReadonlyArray<{ readonly _tag: string }>,\n  expected: ReadonlyArray<string>,\n) {\n  return requireCondition(\n    provider,\n    testCase,\n    JSON.stringify(operations.map(({ _tag }) => _tag)) === JSON.stringify(expected),\n    `expected operations ${expected.join(\", \")}`,\n  );\n}\n\nfunction requireCondition(\n  provider: DnsProvider.Interface,\n  testCase: string,\n  condition: boolean,\n  message: string,\n) {\n  return condition\n    ? Effect.void\n    : Effect.fail(new Error({ case: testCase, message, providerId: provider.id }));\n}\n\nfunction deleteCreated(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  providerRecordId: string | null,\n  testCase: string,\n) {\n  return providerRecordId === null\n    ? Effect.fail(\n        new Error({\n          case: testCase,\n          message: \"provider must return record IDs for safe cleanup\",\n          providerId: provider.id,\n        }),\n      )\n    : provider.deleteRecord(zone, providerRecordId);\n}\n"],"mappings":";;;;;;;;;;AAWA,SAAS,QAAQ,WAAmB,SAAmC;CACrE,OAAO,IAAIA,QAAiB;EAC1B,UAAU;EACV;EACA;EACA,OAAO;CACT,CAAC;AACH;AAEA,SAAgBC,OAAK,UAAmB,CAAC,GAAyB;CAChE,MAAM,QAAQ,OAAO,QAAQ,IAAI,qBAAgD,IAAI,IAAI,CAAC,CAAC;CAC3F,MAAM,YAAY,UAAU,WAAW,CAAC;CACxC,MAAM,aAAsB,WAAmC,UAAU,WAAW,MAAM;CAE1F,MAAM,SAAS,OAAO,GAAG,iDAAiD,CAAC,CAAC,WAC1E,WACA,WACA;EACA,IAAI,QAAQ,iBAAiB,KAAA,GAAW,OAAO,QAAQ,aAAa,WAAW,SAAS;EACxF,OAAO,IAAI,OAAO,QAAQ,YAAY;GACpC,MAAM,OAAO,IAAI,IAAI,OAAO;GAC5B,IAAI,cAAc,MAAM,OAAO;GAC/B,KAAK,IAAI,UAAU,cAAc,IAAI,SAAS;GAC9C,OAAO;EACT,CAAC;CACH,CAAC;CAED,MAAM,SAAS,OAAO,GAAG,iDAAiD,CAAC,CAAC,WAC1E,iBACA;EACA,IAAI,QAAQ,iBAAiB,KAAA,GAAW,OAAO,QAAQ,aAAa,UAAU,IAAI;EAClF,OAAO,IAAI,OAAO,QAAQ,YAAY;GACpC,MAAM,OAAO,IAAI,IAAI,OAAO;GAC5B,KAAK,OAAO,eAAe;GAC3B,OAAO;EACT,CAAC;CACH,CAAC;CAED,MAAM,MAAM,OAAO,GAAG,sCAAsC,CAAC,EAAE,oBAC7D,IAAI,IAAI,KAAK,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,IAAI,eAAe,KAAK,IAAI,CAAC,CACnF;CAEA,MAAM,oBAAoB,OAAO,GAAG,oDAAoD,CAAC,EACtF,iBACC,IAAI,IAAI,KAAK,CAAC,CAAC,KACb,OAAO,KACJ,YACC,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,cAC1B,UAAU,SAAS,MAAM,YAAY,QAAQ,OAAO,YAAY,CAClE,KAAK,IACT,CACF,CACJ;CAEA,MAAM,mBAAmB,OAAO,GAAG,mDAAmD,CAAC,CACrF,WACE,WACA,QACA;EACA,MAAM,UAAgC;GACpC,GAAG;GACH,eAAe;IACb,GAAG,UAAU;IACb,YACE,UAAU,cAAc,WAAW,SAAS,YACxC,UAAU,cAAc,aACxB;KAAE,MAAM;KAAW,6BAAa,IAAI,KAAK;IAAE;GACnD;EACF;EACA,OAAO,OAAO,qBAAqB,OAAO;EAC1C,OAAO,OAAO,OAAO;EACrB,OAAO,OAAO,QAAQ,cAAc,EAAE;EACtC,OAAO;GACL,iBAAiB,QAAQ,cAAc;GACvC,mBAAmB;GACnB,sBAAsB;EACxB;CACF,CACF;CAEA,OAAA,QAA0B,GAAG;EAC3B,MAAM,OAAO,GAAG,uCAAuC,CAAC,EAAE,iBAAiB,YACzE,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,QAAQ,wCAAwC;GAExE,MAAM,OAAO;IACX,GAAG;IACH,UAAU,CACR,GAAG,UAAU,SAAS,QAAQ,cAAc,UAAU,OAAO,QAAQ,EAAE,GACvE,OACF;GACF;GACA,OAAO,OAAO,QAAQ,IAAI;GAC1B,OAAO;EACT,CAAC,CACH,CACF;EACA,SAAS,OAAO,GAAG,0CAA0C,CAAC,EAAE,cAC9D,UACE,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,WAAW,SAAS;GAClC,OAAO;EACT,CAAC,CACH,CACF;EACA,SAAS,EAAE,cAAc,aACvB,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,kBAAkB,YAAY;GACvD,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,UAAU,mCAAmC;GAErE,MAAM,YAAY,UAAU,SAAS,QAAQ,YAAY,QAAQ,OAAO,YAAY;GACpF,IAAI,UAAU,SAAS,GAAG;IACxB,OAAO,OAAO,iBAAiB;KAAE,GAAG;KAAW,UAAU;IAAU,CAAC;IACpE,OAAO;KACL,iBAAiB,UAAU,cAAc;KACzC,mBAAmB,UAAU;KAC7B,sBAAsB;IACxB;GACF;GACA,OAAO,OAAO,iBAAiB,WAAW,MAAM;EAClD,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC,CACpE;EACF,uBAAuB,OAAO,GAAG,wDAAwD,CAAC,EACvF,YAAoB,sBACnB,IAAI,IAAI,KAAK,CAAC,CAAC,KACb,OAAO,KACJ,YACC,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MACnB,EAAE,oBACD,cAAc,eAAe,cAC7B,cAAc,sBAAsB,iBACxC,KAAK,IACT,CACF,CACJ;EACA;EACA;EACA,iBAAiB,OAAO,GAAG,kDAAkD,CAAC,EAC3E,iBAAiB,aAChB,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,mBAAmB,wCAAwC;GAEnF,MAAM,eAAe,IAAI,IACvB,UAAU,cAAc,mBAAmB,KAAK,SAAS,CAAC,KAAK,YAAY,IAAI,CAAC,CAClF;GACA,KAAK,MAAM,QAAQ,UAAU,aAAa,IAAI,KAAK,YAAY,IAAI;GACnE,MAAM,OAAO;IACX,GAAG;IACH,eAAe;KACb,GAAG,UAAU;KACb,oBAAoB,CAAC,GAAG,aAAa,OAAO,CAAC;IAC/C;GACF;GACA,OAAO,OAAO,mBAAmB,IAAI;GACrC,OAAO;EACT,CAAC,CACH,CACJ;EACA,UAAU,EAAE,iBAAiB,aAC3B,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,WAAW,wCAAwC;GAE3E,IAAI,UAAU,cAAc,WAAW,SAAS,WAC9C,OAAO,OAAO,QAAQ,WAAW,0CAA0C;GAE7E,OAAO,OAAO,iBAAiB,WAAW,MAAM;EAClD,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,0CAA0C,CAAC,CACrE;EACF,QAAQ,OAAO,GAAG,yCAAyC,CAAC,EACzD,iBAAiB,YAAY,cAC5B,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,UAAU,wCAAwC;GAE1E,MAAM,OAAO;IACX,GAAG;IACH,eAAe;KAAE,GAAG,UAAU;KAAe;IAAU;IACvD;GACF;GACA,OAAO,OAAO,UAAU,IAAI;GAC5B,OAAO;EACT,CAAC,CACH,CACJ;CACF,CAAC;AACH;AAEA,MAAaC,WAAS,UAAmB,CAAC,MAAM,MAAM,KAAKC,eAA0BF,OAAK,OAAO,CAAC;;;;AC/MlG,SAAgBG,SAAqC;CACnD,MAAM,QAAQ,OAAO,QAAQ,IAAI,qBAAmD,IAAI,IAAI,CAAC,CAAC;CAC9F,OAAO;EACL,SAAS,OAAO,GAAG,iCAAiC,CAAC,CAAC,WAAW,IAAI,KAAK;GACxE,OAAO,OAAO,IAAI,OAAO,QAAQ,YAAY;IAC3C,MAAM,eAAe,QAAQ,IAAI,EAAE;IACnC,MAAM,OAAO,IAAI,IAAI,OAAO;IAC5B,KAAK,OAAO,EAAE;IACd,OAAO,CACL,iBAAiB,KAAA,KAAa,aAAa,YAAY,MAAM,eAAe,MAC5E,IACF;GACF,CAAC;EACH,CAAC;EACD,KAAK,OAAO,GAAG,6BAA6B,CAAC,EAAE,iBAC7C,IAAI,OAAO,QAAQ,YAAY;GAC7B,MAAM,OAAO,IAAI,IAAI,OAAO;GAC5B,KAAK,IAAI,aAAa,IAAI,YAAY;GACtC,OAAO;EACT,CAAC,CACH;CACF;AACF;;;;;;;;ACfA,SAAgBC,OAAK,UAAmB,CAAC,GAA0B;CACjE,MAAM,KAAK,QAAQ,MAAM;CACzB,MAAM,0BAAU,IAAI,IAAsD;CAC1E,MAAM,4BAAY,IAAI,IAAgC;CACtD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC,GAAG;EACnE,QAAQ,IAAIC,MAAiB,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC;EAChD,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG,UAAU,IAAI,GAAG,GAAG,GAAG,QAAQ,KAAK,MAAM;CAC7F;CACA,OAAO;EACL;EACA,aAAa,OAAO,GAAG,iCAAiC,CAAC,EAAE,SACzD,OAAO,WAAW,CAAC,GAAI,QAAQ,IAAI,IAAI,KAAK,CAAC,CAAE,CAAC,CAClD;EACA,cAAc,OAAO,GAAG,kCAAkC,CAAC,EAAE,MAAM,WACjE,OAAO,WAAW;GAChB,MAAM,UAAU,QAAQ,IAAI,IAAI,KAAK,CAAC;GACtC,QAAQ,KAAK,MAAM;GACnB,QAAQ,IAAI,MAAM,OAAO;GACzB,MAAM,mBAAmB,GAAG,GAAG,GAAG,QAAQ;GAC1C,UAAU,IAAI,kBAAkB,MAAM;GACtC,OAAO,EAAE,iBAAiB;EAC5B,CAAC,CACH;EACA,cAAc,OAAO,GAAG,kCAAkC,CAAC,EAAE,MAAM,qBACjE,OAAO,WAAW;GAChB,MAAM,SAAS,UAAU,IAAI,gBAAgB;GAC7C,IAAI,WAAW,KAAA,GAAW;GAC1B,QAAQ,IACN,OACC,QAAQ,IAAI,IAAI,KAAK,CAAC,EAAA,CAAG,QAAQ,cAAc,cAAc,MAAM,CACtE;GACA,UAAU,OAAO,gBAAgB;EACnC,CAAC,CACH;EACA,WAAW,OAAO,GAAG,+BAA+B,CAAC,EAAE,OAAO,qBAC5D,OAAO,WAAW,UAAU,IAAI,gBAAgB,KAAK,IAAI,CAC3D;CACF;AACF;AAEA,MAAaC,WAAS,UAAmB,CAAC,MACxC,MAAM,QAAQC,WAAqBH,OAAK,OAAO,CAAC;AAElD,MAAaI,aAAW,UAAmB,CAAC,MAC1CC,UAAoBL,OAAK,OAAO,CAAC;;;;;;;;AC/CnC,SAAgB,KAAK,SAAyC;CAC5D,OAAO,EACL,SAAS,OAAO,GAAG,6BAA6B,CAAC,EAAE,UACjD,OAAO,cAAc;EACnB,MAAM,aAAa,QAAQ,KAAK;EAChC,OAAO,OAAO,SAAS,UAAU,IAAI,aAAa,OAAO,QAAQ,UAAU;CAC7E,CAAC,CACH,EACF;AACF;AAEA,MAAa,SAAS,YACpB,MAAM,QAAQM,WAAqB,KAAK,OAAO,CAAC;AAElD,MAAa,WAAW,YACtBC,UAAoB,KAAK,OAAO,CAAC;;;;;;;;ACdnC,IAAa,QAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,4BAA4B;CACjF,MAAM,OAAO;CACb,SAAS,OAAO;CAChB,YAAY,OAAO;AACrB,CAAC,CAAC,CAAC,CAAC;;AAeJ,SAAgB,UAAU,cAAuE;CAC/F,aAAa,OAAO,WAAWC,YAAsB,aAAa,CAAC,CAAC;AACtE;AAEA,MAAM,QAAQ;CACZ;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,MAAM,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAAW,OAAc;CAC/E,MAAM,qBACJ,OAAO,QAAQ,MAAM,YAAY,CAAC,CAAC,KACjC,OAAO,aAAa,UAClB,OAAO,KACL,IAAI,MAAM;EACR,MAAM;EACN,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU;EAC7D,YAAY;CACd,CAAC,CACH,CACF,CACF;CACF,MAAM,QAAQ,OAAO,aAAa;CAClC,MAAM,aAAa,MAAM;CACzB,MAAM,SAAS,MAAM,UAAU;CAC/B,OAAO,sBAAsB,OAAO,MAAM,MAAM,MAAM;CACtD,OAAO,UAAU,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CAC1D,OAAO,SAAS,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CACzD,OAAO,UAAU,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CAC1D,OAAO,oBAAoB,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CACpE,OAAO;EAAE;EAAO;EAAY,MAAM,MAAM;CAAK;AAC/C,CAAC;AAED,SAAS,sBACP,UACA,MACA,QACA;CACA,MAAM,eAAe,mBAAmB,MAAM,MAAM;CACpD,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,EAAE,SAAS,OAAOC,OAAoB;GAC1C;GACA,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,OAAO,YAAY,UAAU,2BAA2B,KAAK,YAAY,CAAC,UAAU,QAAQ,CAAC;EAC7F,MAAM,UAAU,OAAOC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,YACf,mBAAmBC,oBACf,OAAO,WAAW;GAChB,mBAAmB,kBAAkB,QAAQ,QAAQ,UAAU;EACjE,CAAC,IACD,OAAO,IACb,CACF;EACA,mBAAmB,kBAAkB,QAAQ,UAAU;EACvD,OAAO,iBACL,UACA,2BACA,QAAQ,WAAW,cACjB,QAAQ,WAAW,OAAO,EAAE,uBAAuB,qBAAqB,IAAI,GAC9E,+DACF;EACA,MAAM,WAAW,OAAO,SAAS,YAAY,IAAI;EACjD,OAAO,iBACL,UACA,2BACA,aAAa,OAAO,gBAClB,SAAS,MACN,WAAW,OAAO,SAAS,YAAYC,OAAiB,QAAQ,WAAW,CAC9E,CACF,GACA,+EACF;EACA,MAAM,WAAW,OAAOC,SAAgB;GAAE;GAAM;EAAQ,CAAC;EAKzD,OAAO,iBACL,UACA,4BACA,OAP6BC,QAAe;GAC5C,eAAe,OAAOC,YAAmB,QAAQ;GACjD,MAAM;EACR,CAAC,EAAA,CAIiB,WAAW,eACxB,OAAO,gBAAgB,UAAU,MAAM,gBAAgB,IAC1D,wDACF;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,UAAU,UAAiC,MAA6B,QAAgB;CAC/F,MAAM,cAAc,MAAM,MAAM,GAAG,OAAO,OAAO;CACjD,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,UAAU,OAAO,SAAS,aAAa,MAAM,WAAW;EAC9D,mBAAmB,QAAQ,qBAAqB,OAAO,CAAC,IAAI,CAAC,QAAQ,gBAAgB;EACrF,MAAM,EAAE,SAAS,OAAOP,OAAoB;GAC1C,cAAc,CAAC,WAAW;GAC1B,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,OAAO,YAAY,UAAU,cAAc,KAAK,YAAY,CAAC,MAAM,CAAC;EAKpE,OAAO,iBACL,UACA,eACA,OAPqBC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,EAAA,CAIS,WAAW,WAAW,GAC9B,8CACF;EACA,OAAO,cAAc,UAAU,MAAM,QAAQ,kBAAkB,YAAY;CAC7E,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,SAAS,UAAiC,MAA6B,QAAgB;CAC9F,MAAM,cAAc,MAAM,MAAM,GAAG,OAAO,UAAU;CACpD,MAAM,WAAW,IAAI,MAAM,GAAG,OAAO,YAAY,UAAU;CAC3D,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,UAAU,OAAO,SAAS,aAAa,MAAM,QAAQ;EAC3D,mBAAmB,QAAQ,qBAAqB,OAAO,CAAC,IAAI,CAAC,QAAQ,gBAAgB;EACrF,MAAM,EAAE,SAAS,OAAOF,OAAoB;GAC1C,cAAc,CAAC,WAAW;GAC1B,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,OAAO,YAAY,UAAU,YAAY,KAAK,YAAY,CAAC,UAAU,CAAC;EAKtE,OAAO,iBACL,UACA,aACA,OAPqBC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,cAIEM,eACnB,8CACF;EACA,OAAO,cAAc,UAAU,MAAM,QAAQ,kBAAkB,UAAU;CAC3E,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,UAAU,UAAiC,MAA6B,QAAgB;CAC/F,MAAM,cAAc,MAAM,MAAM,GAAG,OAAO,OAAO;CACjD,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,EAAE,SAAS,OAAOR,OAAoB;GAC1C,cAAc,CAAC,WAAW;GAC1B,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,MAAM,gBAAgB,OAAOE,UAAuB,IAAI;EACxD,MAAM,UAAU,OAAO,SAAS,aAAa,MAAM,WAAW;EAC9D,mBAAmB,QAAQ,qBAAqB,OAAO,CAAC,IAAI,CAAC,QAAQ,gBAAgB;EAErF,OAAO,iBACL,UACA,eACA,OAJqBD,MAAmB;GAAE;GAAe;EAAK,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,cAI9DQ,YACnB,mEACF;EACA,OAAO,cAAc,UAAU,MAAM,QAAQ,kBAAkB,YAAY;CAC7E,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,oBACP,UACA,MACA,QACA;CACA,IAAI,UAAU;CACd,MAAM,QAAA,UAA4B,GAAG;EACnC,GAAG;EACH,cAAc,OAAO,GAAG,kCAAkC,CAAC,EAAE,QAAQ,WAAW;GAC9E,WAAW;GACX,OAAO,YAAY,IACf,SAAS,aAAa,QAAQ,MAAM,IACpC,OAAO,KACL,IAAIC,QAAkB;IACpB,SAAS;IACT,WAAW;IACX,YAAY,SAAS;GACvB,CAAC,CACH;EACN,CAAC;CACH,CAAC;CACD,MAAM,eAAe,CACnB,MAAM,MAAM,GAAG,OAAO,aAAa,GACnC,IAAI,MAAM,GAAG,OAAO,eAAe,WAAW,CAChD;CACA,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,EAAE,SAAS,OAAOV,OAAoB;GAC1C;GACA,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,MAAM,UAAU,OAAOC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI;EACnB,mBACE,mBAAmBC,oBACf,kBAAkB,QAAQ,QAAQ,UAAU,IAC5C,CAAC;EACP,OAAO,iBACL,UACA,yBACA,mBAAmBA,qBAAkC,QAAQ,QAAQ,WAAW,WAAW,GAC3F,oFACF;EACA,IAAI,EAAE,mBAAmBA,oBAAiC;EAC1D,MAAM,WAAW,OAAOE,SAAgB;GAAE;GAAM,SAAS,QAAQ;EAAQ,CAAC,CAAC,CAAC,KAC1E,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;EACA,OAAOC,QAAe;GACpB,eAAe,OAAOC,YAAmB,QAAQ;GACjD,MAAM;EACR,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,QAAQ,CAAC,CAAC;EAC/C,OAAO,iBACL,UACA,yBACA,OAAO,gBAAgB,UAAU,MAAM,gBAAgB,GACvD,yDACF;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,KAAK,CAAC,CACrC;AACF;AAEA,SAAS,kBACP,YACuB;CACvB,OAAO,WAAW,SAAS,EAAE,uBAC3B,qBAAqB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CACpD;AACF;AAEA,SAAS,gBACP,UACA,MACA,WACA;CACA,OAAO,OAAO,QAAQ,YAAY,qBAChC,SAAS,UAAU,MAAM,gBAAgB,CAC3C,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,OAAO,WAAW,WAAW,IAAI,CAAC,CAAC;AAC5E;AAEA,SAAS,iBACP,UACA,MACA,WACA;CACA,OAAO,OAAO,cACZ,OAAO,QACL,UAAU,IACT,qBAAqB,SAAS,aAAa,MAAM,gBAAgB,CAAC,CAAC,KAAK,OAAO,MAAM,GACtF,EAAE,SAAS,KAAK,CAClB,CACF;AACF;AAEA,SAAS,cAAc,UAAiC;CACtD,OAAO,MAAM,MAAM,MAAM,QAAQI,WAAqB,QAAQ,GAAGC,cAAqB;AACxF;AAEA,SAAS,mBAAmB,MAA6B,QAAgB;CACvE,OAAO,CAAC,MAAM,MAAM,GAAG,OAAO,QAAQ,GAAG,IAAI,MAAM,GAAG,OAAO,QAAQ,WAAW,CAAC;AACnF;AAEA,SAAS,MAAM,MAA6B,OAAe;CACzD,OAAOC,QAAgB;EACrB,MAAM;EACN,UAAU;GAAE,WAAW;GAAU,YAAY;GAAa,SAAS;EAAc;EACjF,MAAM,GAAG,MAAM,GAAG;EAClB,QAAQ;EACR,QAAQ;EACR,KAAK;CACP,CAAC;AACH;AAEA,SAAS,IAAI,MAA6B,OAAe,OAAe;CACtE,OAAOA,QAAgB;EACrB,MAAM;EACN,UAAU;GAAE,WAAW;GAAU,YAAY;GAAa,SAAS;EAAc;EACjF,MAAM,GAAG,MAAM,GAAG;EAClB,QAAQ;EACR,KAAK;EACL;CACF,CAAC;AACH;AAEA,SAAS,YACP,UACA,UACA,YACA,UACA;CACA,OAAO,iBACL,UACA,UACA,KAAK,UAAU,WAAW,KAAK,EAAE,WAAW,IAAI,CAAC,MAAM,KAAK,UAAU,QAAQ,GAC9E,uBAAuB,SAAS,KAAK,IAAI,GAC3C;AACF;AAEA,SAAS,iBACP,UACA,UACA,WACA,SACA;CACA,OAAO,YACH,OAAO,OACP,OAAO,KAAK,IAAI,MAAM;EAAE,MAAM;EAAU;EAAS,YAAY,SAAS;CAAG,CAAC,CAAC;AACjF;AAEA,SAAS,cACP,UACA,MACA,kBACA,UACA;CACA,OAAO,qBAAqB,OACxB,OAAO,KACL,IAAI,MAAM;EACR,MAAM;EACN,SAAS;EACT,YAAY,SAAS;CACvB,CAAC,CACH,IACA,SAAS,aAAa,MAAM,gBAAgB;AAClD"}
+{"version":3,"file":"testing.mjs","names":["Repository.Error","make","layer","Repository.Service","make","make","DomainName.parse","layer","DnsProvider.Service","toAsync","DnsProvider.toAsync","DnsResolver.Service","DnsResolver.toAsync","DnsProvider.fromAsync","Provisioning.create","Provisioning.apply","Provisioning.authorize","Provisioning.PartialApplyError","DnsRecord.equals","Deletion.create","Deletion.apply","Deletion.authorize","Provisioning.ConflictError","Provisioning.StaleError","DnsProvider.Error","DnsProvider.Service","Digest.webCryptoLayer","DnsRecord.parse"],"sources":["../src/stores/in-memory-lifecycle-repository.ts","../src/stores/in-memory-continuation.ts","../src/provider/in-memory.ts","../src/verification/in-memory.ts","../src/testing/provider-conformance.ts"],"sourcesContent":["import { Effect, Layer, Ref, Semaphore } from \"effect\";\n\nimport * as Repository from \"../auth/lifecycle-repository.ts\";\n\nexport interface Options {\n  readonly beforeCommit?: (\n    operation: string,\n    aggregate: Repository.Aggregate | null,\n  ) => Effect.Effect<void, Repository.Error>;\n}\n\nfunction missing(operation: string, message: string): Repository.Error {\n  return new Repository.Error({\n    category: \"storage\",\n    message,\n    operation,\n    retry: \"never\",\n  });\n}\n\nexport function make(options: Options = {}): Repository.Interface {\n  const state = Effect.runSync(Ref.make<ReadonlyMap<string, Repository.Aggregate>>(new Map()));\n  const mutations = Semaphore.makeUnsafe(1);\n  const serialize = <A, E, R>(effect: Effect.Effect<A, E, R>) => mutations.withPermit(effect);\n\n  const commit = Effect.fn(\"InMemoryAuthorizationLifecycleRepository.commit\")(function* (\n    operation: string,\n    aggregate: Repository.Aggregate | null,\n  ) {\n    if (options.beforeCommit !== undefined) yield* options.beforeCommit(operation, aggregate);\n    yield* Ref.update(state, (entries) => {\n      const next = new Map(entries);\n      if (aggregate === null) return next;\n      next.set(aggregate.authorization.id, aggregate);\n      return next;\n    });\n  });\n\n  const remove = Effect.fn(\"InMemoryAuthorizationLifecycleRepository.remove\")(function* (\n    authorizationId: string,\n  ) {\n    if (options.beforeCommit !== undefined) yield* options.beforeCommit(\"remove\", null);\n    yield* Ref.update(state, (entries) => {\n      const next = new Map(entries);\n      next.delete(authorizationId);\n      return next;\n    });\n  });\n\n  const get = Effect.fn(\"AuthorizationLifecycleRepository.get\")((authorizationId: string) =>\n    Ref.get(state).pipe(Effect.map((entries) => entries.get(authorizationId) ?? null)),\n  );\n\n  const getByConnectionId = Effect.fn(\"AuthorizationLifecycleRepository.getByConnectionId\")(\n    (connectionId: string) =>\n      Ref.get(state).pipe(\n        Effect.map(\n          (entries) =>\n            [...entries.values()].find((aggregate) =>\n              aggregate.bindings.some((binding) => binding.id === connectionId),\n            ) ?? null,\n        ),\n      ),\n  );\n\n  const finishRevocation = Effect.fn(\"AuthorizationLifecycleRepository.finishRevocation\")(\n    function* <E>(\n      aggregate: Repository.Aggregate,\n      revoke: (aggregate: Repository.Aggregate) => Effect.Effect<void, E>,\n    ) {\n      const pending: Repository.Aggregate = {\n        ...aggregate,\n        authorization: {\n          ...aggregate.authorization,\n          revocation:\n            aggregate.authorization.revocation._tag === \"Pending\"\n              ? aggregate.authorization.revocation\n              : { _tag: \"Pending\", requestedAt: new Date() },\n        },\n      };\n      yield* commit(\"prepareRevocation\", pending);\n      yield* revoke(pending);\n      yield* remove(pending.authorization.id);\n      return {\n        authorizationId: pending.authorization.id,\n        remainingBindings: 0,\n        revokedAuthorization: true,\n      } satisfies Repository.DetachResult;\n    },\n  );\n\n  return Repository.Service.of({\n    bind: Effect.fn(\"AuthorizationLifecycleRepository.bind\")((authorizationId, binding) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* get(authorizationId);\n          if (aggregate === null) {\n            return yield* missing(\"bind\", \"Authorization aggregate does not exist\");\n          }\n          const next = {\n            ...aggregate,\n            bindings: [\n              ...aggregate.bindings.filter((candidate) => candidate.id !== binding.id),\n              binding,\n            ],\n          };\n          yield* commit(\"bind\", next);\n          return next;\n        }),\n      ),\n    ),\n    connect: Effect.fn(\"AuthorizationLifecycleRepository.connect\")((aggregate) =>\n      serialize(\n        Effect.gen(function* () {\n          yield* commit(\"connect\", aggregate);\n          return aggregate;\n        }),\n      ),\n    ),\n    detach: ({ connectionId, revoke }) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* getByConnectionId(connectionId);\n          if (aggregate === null) {\n            return yield* missing(\"detach\", \"Connection binding does not exist\");\n          }\n          const remaining = aggregate.bindings.filter((binding) => binding.id !== connectionId);\n          if (remaining.length > 0) {\n            yield* commit(\"detachBinding\", { ...aggregate, bindings: remaining });\n            return {\n              authorizationId: aggregate.authorization.id,\n              remainingBindings: remaining.length,\n              revokedAuthorization: false,\n            };\n          }\n          return yield* finishRevocation(aggregate, revoke);\n        }).pipe(Effect.withSpan(\"AuthorizationLifecycleRepository.detach\")),\n      ),\n    findByProviderAccount: Effect.fn(\"AuthorizationLifecycleRepository.findByProviderAccount\")(\n      (providerId: string, providerAccountId: string) =>\n        Ref.get(state).pipe(\n          Effect.map(\n            (entries) =>\n              [...entries.values()].find(\n                ({ authorization }) =>\n                  authorization.providerId === providerId &&\n                  authorization.providerAccountId === providerAccountId,\n              ) ?? null,\n          ),\n        ),\n    ),\n    get,\n    getByConnectionId,\n    modifyBinding: (connectionId, modify) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* getByConnectionId(connectionId);\n          if (aggregate === null) {\n            return yield* missing(\"modifyBinding\", \"Connection binding does not exist\");\n          }\n          const binding = aggregate.bindings.find((candidate) => candidate.id === connectionId);\n          if (binding === undefined) {\n            return yield* missing(\"modifyBinding\", \"Connection binding does not exist\");\n          }\n          const modification = modify(binding);\n          const next = {\n            ...aggregate,\n            bindings: aggregate.bindings.map((candidate) =>\n              candidate.id === connectionId ? modification.binding : candidate,\n            ),\n          };\n          yield* commit(\"modifyBinding\", next);\n          return { aggregate: next, value: modification.value };\n        }),\n      ),\n    promoteEvidence: Effect.fn(\"AuthorizationLifecycleRepository.promoteEvidence\")(\n      (authorizationId, evidence) =>\n        serialize(\n          Effect.gen(function* () {\n            const aggregate = yield* get(authorizationId);\n            if (aggregate === null) {\n              return yield* missing(\"promoteEvidence\", \"Authorization aggregate does not exist\");\n            }\n            const byCapability = new Map(\n              aggregate.authorization.capabilityEvidence.map((item) => [item.capability, item]),\n            );\n            for (const item of evidence) byCapability.set(item.capability, item);\n            const next = {\n              ...aggregate,\n              authorization: {\n                ...aggregate.authorization,\n                capabilityEvidence: [...byCapability.values()],\n              },\n            };\n            yield* commit(\"promoteEvidence\", next);\n            return next;\n          }),\n        ),\n    ),\n    recover: ({ authorizationId, revoke }) =>\n      serialize(\n        Effect.gen(function* () {\n          const aggregate = yield* get(authorizationId);\n          if (aggregate === null) {\n            return yield* missing(\"recover\", \"Authorization aggregate does not exist\");\n          }\n          if (aggregate.authorization.revocation._tag !== \"Pending\") {\n            return yield* missing(\"recover\", \"Authorization is not awaiting revocation\");\n          }\n          return yield* finishRevocation(aggregate, revoke);\n        }).pipe(Effect.withSpan(\"AuthorizationLifecycleRepository.recover\")),\n      ),\n    rotate: Effect.fn(\"AuthorizationLifecycleRepository.rotate\")(\n      (authorizationId, credential, expiresAt) =>\n        serialize(\n          Effect.gen(function* () {\n            const aggregate = yield* get(authorizationId);\n            if (aggregate === null) {\n              return yield* missing(\"rotate\", \"Authorization aggregate does not exist\");\n            }\n            const next = {\n              ...aggregate,\n              authorization: { ...aggregate.authorization, expiresAt },\n              credential,\n            };\n            yield* commit(\"rotate\", next);\n            return next;\n          }),\n        ),\n    ),\n  });\n}\n\nexport const layer = (options: Options = {}) => Layer.sync(Repository.Service, () => make(options));\n","import { Effect, Ref } from \"effect\";\n\nimport type * as Connection from \"../auth/connect.ts\";\n\nexport function make(): Connection.ContinuationStore {\n  const state = Effect.runSync(Ref.make<ReadonlyMap<string, Connection.Continuation>>(new Map()));\n  return {\n    consume: Effect.fn(\"ConnectionContinuations.consume\")(function* (id, now) {\n      return yield* Ref.modify(state, (entries) => {\n        const continuation = entries.get(id);\n        const next = new Map(entries);\n        next.delete(id);\n        return [\n          continuation !== undefined && continuation.expiresAt > now ? continuation : null,\n          next,\n        ] as const;\n      });\n    }),\n    put: Effect.fn(\"ConnectionContinuations.put\")((continuation) =>\n      Ref.update(state, (entries) => {\n        const next = new Map(entries);\n        next.set(continuation.id, continuation);\n        return next;\n      }),\n    ),\n  };\n}\n","import { Effect, Layer } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as DnsProvider from \"./provider.ts\";\n\nexport interface Options {\n  readonly id?: string;\n  readonly records?: Readonly<Record<string, ReadonlyArray<DnsRecord.Observed>>>;\n}\n\nexport function make(options: Options = {}): DnsProvider.Interface {\n  const id = options.id ?? \"memory\";\n  const records = new Map<DomainName.DomainName, Array<DnsRecord.Observed>>();\n  const recordIds = new Map<string, DnsRecord.Observed>();\n  for (const [zone, initial] of Object.entries(options.records ?? {})) {\n    records.set(DomainName.parse(zone), [...initial]);\n    for (const [index, record] of initial.entries()) recordIds.set(`${id}:${index + 1}`, record);\n  }\n  return {\n    id,\n    listRecords: Effect.fn(\"InMemoryDnsProvider.listRecords\")((zone) =>\n      Effect.sync(() => [...(records.get(zone) ?? [])]),\n    ),\n    createRecord: Effect.fn(\"InMemoryDnsProvider.createRecord\")((zone, record) =>\n      Effect.sync(() => {\n        const current = records.get(zone) ?? [];\n        current.push(record);\n        records.set(zone, current);\n        const providerRecordId = `${id}:${current.length}`;\n        recordIds.set(providerRecordId, record);\n        return { providerRecordId };\n      }),\n    ),\n    deleteRecord: Effect.fn(\"InMemoryDnsProvider.deleteRecord\")((zone, providerRecordId) =>\n      Effect.sync(() => {\n        const record = recordIds.get(providerRecordId);\n        if (record === undefined) return;\n        records.set(\n          zone,\n          (records.get(zone) ?? []).filter((candidate) => candidate !== record),\n        );\n        recordIds.delete(providerRecordId);\n      }),\n    ),\n    getRecord: Effect.fn(\"InMemoryDnsProvider.getRecord\")((_zone, providerRecordId) =>\n      Effect.sync(() => recordIds.get(providerRecordId) ?? null),\n    ),\n  };\n}\n\nexport const layer = (options: Options = {}): Layer.Layer<DnsProvider.Service> =>\n  Layer.succeed(DnsProvider.Service, make(options));\n\nexport const toAsync = (options: Options = {}): DnsProvider.AsyncInterface =>\n  DnsProvider.toAsync(make(options));\n","import { Effect, Layer } from \"effect\";\n\nimport * as DnsResolver from \"./resolver.ts\";\n\nexport type Resolve = (\n  query: DnsResolver.Query,\n) => DnsResolver.Resolution | Effect.Effect<DnsResolver.Resolution, DnsResolver.Error>;\n\nexport function make(resolve: Resolve): DnsResolver.Interface {\n  return {\n    resolve: Effect.fn(\"InMemoryDnsResolver.resolve\")((query) =>\n      Effect.suspend(() => {\n        const resolution = resolve(query);\n        return Effect.isEffect(resolution) ? resolution : Effect.succeed(resolution);\n      }),\n    ),\n  };\n}\n\nexport const layer = (resolve: Resolve): Layer.Layer<DnsResolver.Service> =>\n  Layer.succeed(DnsResolver.Service, make(resolve));\n\nexport const toAsync = (resolve: Resolve): DnsResolver.AsyncInterface =>\n  DnsResolver.toAsync(make(resolve));\n","import { Effect, Layer, Schema } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as Deletion from \"../plan/deletion.ts\";\nimport * as Digest from \"../plan/canonical-json.ts\";\nimport * as Provisioning from \"../plan/plan.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport class Error extends Schema.TaggedError<Error>()(\"ProviderConformanceError\", {\n  case: Schema.String,\n  message: Schema.String,\n  providerId: Schema.String,\n}) {}\n\nexport interface Input {\n  readonly makeProvider: () => Effect.Effect<DnsProvider.Interface, DnsProvider.Error>;\n  readonly prefix?: string;\n  readonly zone: DomainName.DomainName;\n}\n\nexport interface Report {\n  readonly cases: ReadonlyArray<string>;\n  readonly providerId: string;\n  readonly zone: DomainName.DomainName;\n}\n\n/** Adapt a fresh Promise-shaped provider factory for the Effect-native conformance runner. */\nexport function fromAsync(makeProvider: () => DnsProvider.AsyncInterface): Input[\"makeProvider\"] {\n  return () => Effect.sync(() => DnsProvider.fromAsync(makeProvider()));\n}\n\nconst cases = [\n  \"create-readback-cleanup\",\n  \"exact-noop\",\n  \"conflict\",\n  \"stale-plan\",\n  \"partial-apply-cleanup\",\n] as const;\n\n/** Run the deterministic offline contract every DomainKit DNS adapter must satisfy. */\nexport const run = Effect.fn(\"ProviderConformance.run\")(function* (input: Input) {\n  const makeProvider = () =>\n    Effect.suspend(input.makeProvider).pipe(\n      Effect.catchDefect((cause) =>\n        Effect.fail(\n          new Error({\n            case: \"factory\",\n            message: cause instanceof globalThis.Error ? cause.message : \"Provider factory failed\",\n            providerId: \"unknown\",\n          }),\n        ),\n      ),\n    );\n  const first = yield* makeProvider();\n  const providerId = first.id;\n  const prefix = input.prefix ?? \"domainkit-conformance\";\n  yield* createReadbackCleanup(first, input.zone, prefix);\n  yield* exactNoop(yield* makeProvider(), input.zone, prefix);\n  yield* conflict(yield* makeProvider(), input.zone, prefix);\n  yield* stalePlan(yield* makeProvider(), input.zone, prefix);\n  yield* partialApplyCleanup(yield* makeProvider(), input.zone, prefix);\n  return { cases, providerId, zone: input.zone } satisfies Report;\n});\n\nfunction createReadbackCleanup(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  prefix: string,\n) {\n  const requirements = createRequirements(zone, prefix);\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const { plan } = yield* Provisioning.create({\n      requirements,\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    yield* requireTags(provider, \"create-readback-cleanup\", plan.operations, [\"create\", \"create\"]);\n    const receipt = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    }).pipe(\n      Effect.tapError((failure) =>\n        failure instanceof Provisioning.PartialApplyError\n          ? Effect.sync(() => {\n              cleanupRecordIds = providerRecordIds(failure.receipt.operations);\n            })\n          : Effect.void,\n      ),\n    );\n    cleanupRecordIds = providerRecordIds(receipt.operations);\n    yield* requireCondition(\n      provider,\n      \"create-readback-cleanup\",\n      receipt.status === \"complete\" &&\n        receipt.operations.every(({ providerRecordId }) => providerRecordId !== null),\n      \"apply must return a complete receipt with provider record IDs\",\n    );\n    const observed = yield* provider.listRecords(zone);\n    yield* requireCondition(\n      provider,\n      \"create-readback-cleanup\",\n      requirements.every((requirement) =>\n        observed.some(\n          (record) => record._tag !== \"Opaque\" && DnsRecord.equals(record, requirement),\n        ),\n      ),\n      \"listRecords must return every created record, including across provider pages\",\n    );\n    const deletion = yield* Deletion.create({ plan, receipt });\n    const deletionReceipt = yield* Deletion.apply({\n      authorization: yield* Deletion.authorize(deletion),\n      plan: deletion,\n    });\n    yield* requireCondition(\n      provider,\n      \"create-readback-cleanup\",\n      deletionReceipt.status === \"complete\" &&\n        (yield* recordIdsAbsent(provider, zone, cleanupRecordIds)),\n      \"receipt-bound cleanup must remove every created record\",\n    );\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction exactNoop(provider: DnsProvider.Interface, zone: DomainName.DomainName, prefix: string) {\n  const requirement = cname(zone, `${prefix}-exact`);\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const created = yield* provider.createRecord(zone, requirement);\n    cleanupRecordIds = created.providerRecordId === null ? [] : [created.providerRecordId];\n    const { plan } = yield* Provisioning.create({\n      requirements: [requirement],\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    yield* requireTags(provider, \"exact-noop\", plan.operations, [\"noop\"]);\n    const receipt = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    });\n    yield* requireCondition(\n      provider,\n      \"exact-noop\",\n      receipt.operations.length === 0,\n      \"an exact plan must not create another record\",\n    );\n    yield* deleteCreated(provider, zone, created.providerRecordId, \"exact-noop\");\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction conflict(provider: DnsProvider.Interface, zone: DomainName.DomainName, prefix: string) {\n  const requirement = cname(zone, `${prefix}-conflict`);\n  const occupied = txt(zone, `${prefix}-conflict`, \"occupied\");\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const created = yield* provider.createRecord(zone, occupied);\n    cleanupRecordIds = created.providerRecordId === null ? [] : [created.providerRecordId];\n    const { plan } = yield* Provisioning.create({\n      requirements: [requirement],\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    yield* requireTags(provider, \"conflict\", plan.operations, [\"conflict\"]);\n    const failure = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    }).pipe(Effect.flip);\n    yield* requireCondition(\n      provider,\n      \"conflict\",\n      failure instanceof Provisioning.ConflictError,\n      \"apply must fail closed on incompatible state\",\n    );\n    yield* deleteCreated(provider, zone, created.providerRecordId, \"conflict\");\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction stalePlan(provider: DnsProvider.Interface, zone: DomainName.DomainName, prefix: string) {\n  const requirement = cname(zone, `${prefix}-stale`);\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const { plan } = yield* Provisioning.create({\n      requirements: [requirement],\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    const authorization = yield* Provisioning.authorize(plan);\n    const created = yield* provider.createRecord(zone, requirement);\n    cleanupRecordIds = created.providerRecordId === null ? [] : [created.providerRecordId];\n    const failure = yield* Provisioning.apply({ authorization, plan }).pipe(Effect.flip);\n    yield* requireCondition(\n      provider,\n      \"stale-plan\",\n      failure instanceof Provisioning.StaleError,\n      \"apply must reject provider state that changed after authorization\",\n    );\n    yield* deleteCreated(provider, zone, created.providerRecordId, \"stale-plan\");\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(provider)),\n  );\n}\n\nfunction partialApplyCleanup(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  prefix: string,\n) {\n  let creates = 0;\n  const flaky = DnsProvider.Service.of({\n    ...provider,\n    createRecord: Effect.fn(\"ProviderConformance.createRecord\")((target, record) => {\n      creates += 1;\n      return creates === 1\n        ? provider.createRecord(target, record)\n        : Effect.fail(\n            new DnsProvider.Error({\n              message: \"injected conformance failure\",\n              operation: \"createRecord\",\n              providerId: provider.id,\n            }),\n          );\n    }),\n  });\n  const requirements = [\n    cname(zone, `${prefix}-partial-one`),\n    txt(zone, `${prefix}-partial-two`, \"domainkit\"),\n  ];\n  let cleanupRecordIds: ReadonlyArray<string> = [];\n  return Effect.gen(function* () {\n    const { plan } = yield* Provisioning.create({\n      requirements,\n      target: Provisioning.Target.ExactZone({ zone }),\n    });\n    const failure = yield* Provisioning.apply({\n      authorization: yield* Provisioning.authorize(plan),\n      plan,\n    }).pipe(Effect.flip);\n    cleanupRecordIds =\n      failure instanceof Provisioning.PartialApplyError\n        ? providerRecordIds(failure.receipt.operations)\n        : [];\n    yield* requireCondition(\n      provider,\n      \"partial-apply-cleanup\",\n      failure instanceof Provisioning.PartialApplyError && failure.receipt.operations.length === 1,\n      \"a later write failure must preserve the first confirmed write in a partial receipt\",\n    );\n    if (!(failure instanceof Provisioning.PartialApplyError)) return;\n    const deletion = yield* Deletion.create({ plan, receipt: failure.receipt }).pipe(\n      Effect.provide(providerLayer(provider)),\n    );\n    yield* Deletion.apply({\n      authorization: yield* Deletion.authorize(deletion),\n      plan: deletion,\n    }).pipe(Effect.provide(providerLayer(provider)));\n    yield* requireCondition(\n      provider,\n      \"partial-apply-cleanup\",\n      yield* recordIdsAbsent(provider, zone, cleanupRecordIds),\n      \"partial receipt cleanup must remove the confirmed write\",\n    );\n  }).pipe(\n    Effect.ensuring(bestEffortDelete(provider, zone, () => cleanupRecordIds)),\n    Effect.provide(providerLayer(flaky)),\n  );\n}\n\nfunction providerRecordIds(\n  operations: ReadonlyArray<{ readonly providerRecordId: string | null }>,\n): ReadonlyArray<string> {\n  return operations.flatMap(({ providerRecordId }) =>\n    providerRecordId === null ? [] : [providerRecordId],\n  );\n}\n\nfunction recordIdsAbsent(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  recordIds: ReadonlyArray<string>,\n) {\n  return Effect.forEach(recordIds, (providerRecordId) =>\n    provider.getRecord(zone, providerRecordId),\n  ).pipe(Effect.map((records) => records.every((record) => record === null)));\n}\n\nfunction bestEffortDelete(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  recordIds: () => ReadonlyArray<string>,\n) {\n  return Effect.suspend(() =>\n    Effect.forEach(\n      recordIds(),\n      (providerRecordId) => provider.deleteRecord(zone, providerRecordId).pipe(Effect.ignore),\n      { discard: true },\n    ),\n  );\n}\n\nfunction providerLayer(provider: DnsProvider.Interface) {\n  return Layer.merge(Layer.succeed(DnsProvider.Service, provider), Digest.webCryptoLayer);\n}\n\nfunction createRequirements(zone: DomainName.DomainName, prefix: string) {\n  return [cname(zone, `${prefix}-create`), txt(zone, `${prefix}-page`, \"domainkit\")];\n}\n\nfunction cname(zone: DomainName.DomainName, label: string) {\n  return DnsRecord.parse({\n    _tag: \"CNAME\",\n    metadata: { ownership: \"tester\", provenance: \"domainkit\", purpose: \"conformance\" },\n    name: `${label}.${zone}`,\n    policy: \"exclusive\",\n    target: \"target.example.net\",\n    ttl: 300,\n  });\n}\n\nfunction txt(zone: DomainName.DomainName, label: string, value: string) {\n  return DnsRecord.parse({\n    _tag: \"TXT\",\n    metadata: { ownership: \"tester\", provenance: \"domainkit\", purpose: \"conformance\" },\n    name: `${label}.${zone}`,\n    policy: \"append\",\n    ttl: 300,\n    value,\n  });\n}\n\nfunction requireTags(\n  provider: DnsProvider.Interface,\n  testCase: string,\n  operations: ReadonlyArray<{ readonly _tag: string }>,\n  expected: ReadonlyArray<string>,\n) {\n  return requireCondition(\n    provider,\n    testCase,\n    JSON.stringify(operations.map(({ _tag }) => _tag)) === JSON.stringify(expected),\n    `expected operations ${expected.join(\", \")}`,\n  );\n}\n\nfunction requireCondition(\n  provider: DnsProvider.Interface,\n  testCase: string,\n  condition: boolean,\n  message: string,\n) {\n  return condition\n    ? Effect.void\n    : Effect.fail(new Error({ case: testCase, message, providerId: provider.id }));\n}\n\nfunction deleteCreated(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  providerRecordId: string | null,\n  testCase: string,\n) {\n  return providerRecordId === null\n    ? Effect.fail(\n        new Error({\n          case: testCase,\n          message: \"provider must return record IDs for safe cleanup\",\n          providerId: provider.id,\n        }),\n      )\n    : provider.deleteRecord(zone, providerRecordId);\n}\n"],"mappings":";;;;;;;;AAWA,SAAS,QAAQ,WAAmB,SAAmC;CACrE,OAAO,IAAIA,QAAiB;EAC1B,UAAU;EACV;EACA;EACA,OAAO;CACT,CAAC;AACH;AAEA,SAAgBC,OAAK,UAAmB,CAAC,GAAyB;CAChE,MAAM,QAAQ,OAAO,QAAQ,IAAI,qBAAgD,IAAI,IAAI,CAAC,CAAC;CAC3F,MAAM,YAAY,UAAU,WAAW,CAAC;CACxC,MAAM,aAAsB,WAAmC,UAAU,WAAW,MAAM;CAE1F,MAAM,SAAS,OAAO,GAAG,iDAAiD,CAAC,CAAC,WAC1E,WACA,WACA;EACA,IAAI,QAAQ,iBAAiB,KAAA,GAAW,OAAO,QAAQ,aAAa,WAAW,SAAS;EACxF,OAAO,IAAI,OAAO,QAAQ,YAAY;GACpC,MAAM,OAAO,IAAI,IAAI,OAAO;GAC5B,IAAI,cAAc,MAAM,OAAO;GAC/B,KAAK,IAAI,UAAU,cAAc,IAAI,SAAS;GAC9C,OAAO;EACT,CAAC;CACH,CAAC;CAED,MAAM,SAAS,OAAO,GAAG,iDAAiD,CAAC,CAAC,WAC1E,iBACA;EACA,IAAI,QAAQ,iBAAiB,KAAA,GAAW,OAAO,QAAQ,aAAa,UAAU,IAAI;EAClF,OAAO,IAAI,OAAO,QAAQ,YAAY;GACpC,MAAM,OAAO,IAAI,IAAI,OAAO;GAC5B,KAAK,OAAO,eAAe;GAC3B,OAAO;EACT,CAAC;CACH,CAAC;CAED,MAAM,MAAM,OAAO,GAAG,sCAAsC,CAAC,EAAE,oBAC7D,IAAI,IAAI,KAAK,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,IAAI,eAAe,KAAK,IAAI,CAAC,CACnF;CAEA,MAAM,oBAAoB,OAAO,GAAG,oDAAoD,CAAC,EACtF,iBACC,IAAI,IAAI,KAAK,CAAC,CAAC,KACb,OAAO,KACJ,YACC,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,cAC1B,UAAU,SAAS,MAAM,YAAY,QAAQ,OAAO,YAAY,CAClE,KAAK,IACT,CACF,CACJ;CAEA,MAAM,mBAAmB,OAAO,GAAG,mDAAmD,CAAC,CACrF,WACE,WACA,QACA;EACA,MAAM,UAAgC;GACpC,GAAG;GACH,eAAe;IACb,GAAG,UAAU;IACb,YACE,UAAU,cAAc,WAAW,SAAS,YACxC,UAAU,cAAc,aACxB;KAAE,MAAM;KAAW,6BAAa,IAAI,KAAK;IAAE;GACnD;EACF;EACA,OAAO,OAAO,qBAAqB,OAAO;EAC1C,OAAO,OAAO,OAAO;EACrB,OAAO,OAAO,QAAQ,cAAc,EAAE;EACtC,OAAO;GACL,iBAAiB,QAAQ,cAAc;GACvC,mBAAmB;GACnB,sBAAsB;EACxB;CACF,CACF;CAEA,OAAA,QAA0B,GAAG;EAC3B,MAAM,OAAO,GAAG,uCAAuC,CAAC,EAAE,iBAAiB,YACzE,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,QAAQ,wCAAwC;GAExE,MAAM,OAAO;IACX,GAAG;IACH,UAAU,CACR,GAAG,UAAU,SAAS,QAAQ,cAAc,UAAU,OAAO,QAAQ,EAAE,GACvE,OACF;GACF;GACA,OAAO,OAAO,QAAQ,IAAI;GAC1B,OAAO;EACT,CAAC,CACH,CACF;EACA,SAAS,OAAO,GAAG,0CAA0C,CAAC,EAAE,cAC9D,UACE,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,WAAW,SAAS;GAClC,OAAO;EACT,CAAC,CACH,CACF;EACA,SAAS,EAAE,cAAc,aACvB,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,kBAAkB,YAAY;GACvD,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,UAAU,mCAAmC;GAErE,MAAM,YAAY,UAAU,SAAS,QAAQ,YAAY,QAAQ,OAAO,YAAY;GACpF,IAAI,UAAU,SAAS,GAAG;IACxB,OAAO,OAAO,iBAAiB;KAAE,GAAG;KAAW,UAAU;IAAU,CAAC;IACpE,OAAO;KACL,iBAAiB,UAAU,cAAc;KACzC,mBAAmB,UAAU;KAC7B,sBAAsB;IACxB;GACF;GACA,OAAO,OAAO,iBAAiB,WAAW,MAAM;EAClD,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC,CACpE;EACF,uBAAuB,OAAO,GAAG,wDAAwD,CAAC,EACvF,YAAoB,sBACnB,IAAI,IAAI,KAAK,CAAC,CAAC,KACb,OAAO,KACJ,YACC,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MACnB,EAAE,oBACD,cAAc,eAAe,cAC7B,cAAc,sBAAsB,iBACxC,KAAK,IACT,CACF,CACJ;EACA;EACA;EACA,gBAAgB,cAAc,WAC5B,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,kBAAkB,YAAY;GACvD,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,iBAAiB,mCAAmC;GAE5E,MAAM,UAAU,UAAU,SAAS,MAAM,cAAc,UAAU,OAAO,YAAY;GACpF,IAAI,YAAY,KAAA,GACd,OAAO,OAAO,QAAQ,iBAAiB,mCAAmC;GAE5E,MAAM,eAAe,OAAO,OAAO;GACnC,MAAM,OAAO;IACX,GAAG;IACH,UAAU,UAAU,SAAS,KAAK,cAChC,UAAU,OAAO,eAAe,aAAa,UAAU,SACzD;GACF;GACA,OAAO,OAAO,iBAAiB,IAAI;GACnC,OAAO;IAAE,WAAW;IAAM,OAAO,aAAa;GAAM;EACtD,CAAC,CACH;EACF,iBAAiB,OAAO,GAAG,kDAAkD,CAAC,EAC3E,iBAAiB,aAChB,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,mBAAmB,wCAAwC;GAEnF,MAAM,eAAe,IAAI,IACvB,UAAU,cAAc,mBAAmB,KAAK,SAAS,CAAC,KAAK,YAAY,IAAI,CAAC,CAClF;GACA,KAAK,MAAM,QAAQ,UAAU,aAAa,IAAI,KAAK,YAAY,IAAI;GACnE,MAAM,OAAO;IACX,GAAG;IACH,eAAe;KACb,GAAG,UAAU;KACb,oBAAoB,CAAC,GAAG,aAAa,OAAO,CAAC;IAC/C;GACF;GACA,OAAO,OAAO,mBAAmB,IAAI;GACrC,OAAO;EACT,CAAC,CACH,CACJ;EACA,UAAU,EAAE,iBAAiB,aAC3B,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,WAAW,wCAAwC;GAE3E,IAAI,UAAU,cAAc,WAAW,SAAS,WAC9C,OAAO,OAAO,QAAQ,WAAW,0CAA0C;GAE7E,OAAO,OAAO,iBAAiB,WAAW,MAAM;EAClD,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,0CAA0C,CAAC,CACrE;EACF,QAAQ,OAAO,GAAG,yCAAyC,CAAC,EACzD,iBAAiB,YAAY,cAC5B,UACE,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,IAAI,eAAe;GAC5C,IAAI,cAAc,MAChB,OAAO,OAAO,QAAQ,UAAU,wCAAwC;GAE1E,MAAM,OAAO;IACX,GAAG;IACH,eAAe;KAAE,GAAG,UAAU;KAAe;IAAU;IACvD;GACF;GACA,OAAO,OAAO,UAAU,IAAI;GAC5B,OAAO;EACT,CAAC,CACH,CACJ;CACF,CAAC;AACH;AAEA,MAAaC,WAAS,UAAmB,CAAC,MAAM,MAAM,KAAKC,eAA0BF,OAAK,OAAO,CAAC;;;;ACrOlG,SAAgBG,SAAqC;CACnD,MAAM,QAAQ,OAAO,QAAQ,IAAI,qBAAmD,IAAI,IAAI,CAAC,CAAC;CAC9F,OAAO;EACL,SAAS,OAAO,GAAG,iCAAiC,CAAC,CAAC,WAAW,IAAI,KAAK;GACxE,OAAO,OAAO,IAAI,OAAO,QAAQ,YAAY;IAC3C,MAAM,eAAe,QAAQ,IAAI,EAAE;IACnC,MAAM,OAAO,IAAI,IAAI,OAAO;IAC5B,KAAK,OAAO,EAAE;IACd,OAAO,CACL,iBAAiB,KAAA,KAAa,aAAa,YAAY,MAAM,eAAe,MAC5E,IACF;GACF,CAAC;EACH,CAAC;EACD,KAAK,OAAO,GAAG,6BAA6B,CAAC,EAAE,iBAC7C,IAAI,OAAO,QAAQ,YAAY;GAC7B,MAAM,OAAO,IAAI,IAAI,OAAO;GAC5B,KAAK,IAAI,aAAa,IAAI,YAAY;GACtC,OAAO;EACT,CAAC,CACH;CACF;AACF;;;;;;;;ACfA,SAAgBC,OAAK,UAAmB,CAAC,GAA0B;CACjE,MAAM,KAAK,QAAQ,MAAM;CACzB,MAAM,0BAAU,IAAI,IAAsD;CAC1E,MAAM,4BAAY,IAAI,IAAgC;CACtD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC,GAAG;EACnE,QAAQ,IAAIC,MAAiB,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC;EAChD,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG,UAAU,IAAI,GAAG,GAAG,GAAG,QAAQ,KAAK,MAAM;CAC7F;CACA,OAAO;EACL;EACA,aAAa,OAAO,GAAG,iCAAiC,CAAC,EAAE,SACzD,OAAO,WAAW,CAAC,GAAI,QAAQ,IAAI,IAAI,KAAK,CAAC,CAAE,CAAC,CAClD;EACA,cAAc,OAAO,GAAG,kCAAkC,CAAC,EAAE,MAAM,WACjE,OAAO,WAAW;GAChB,MAAM,UAAU,QAAQ,IAAI,IAAI,KAAK,CAAC;GACtC,QAAQ,KAAK,MAAM;GACnB,QAAQ,IAAI,MAAM,OAAO;GACzB,MAAM,mBAAmB,GAAG,GAAG,GAAG,QAAQ;GAC1C,UAAU,IAAI,kBAAkB,MAAM;GACtC,OAAO,EAAE,iBAAiB;EAC5B,CAAC,CACH;EACA,cAAc,OAAO,GAAG,kCAAkC,CAAC,EAAE,MAAM,qBACjE,OAAO,WAAW;GAChB,MAAM,SAAS,UAAU,IAAI,gBAAgB;GAC7C,IAAI,WAAW,KAAA,GAAW;GAC1B,QAAQ,IACN,OACC,QAAQ,IAAI,IAAI,KAAK,CAAC,EAAA,CAAG,QAAQ,cAAc,cAAc,MAAM,CACtE;GACA,UAAU,OAAO,gBAAgB;EACnC,CAAC,CACH;EACA,WAAW,OAAO,GAAG,+BAA+B,CAAC,EAAE,OAAO,qBAC5D,OAAO,WAAW,UAAU,IAAI,gBAAgB,KAAK,IAAI,CAC3D;CACF;AACF;AAEA,MAAaC,WAAS,UAAmB,CAAC,MACxC,MAAM,QAAQC,WAAqBH,OAAK,OAAO,CAAC;AAElD,MAAaI,aAAW,UAAmB,CAAC,MAC1CC,UAAoBL,OAAK,OAAO,CAAC;;;;;;;;AC/CnC,SAAgB,KAAK,SAAyC;CAC5D,OAAO,EACL,SAAS,OAAO,GAAG,6BAA6B,CAAC,EAAE,UACjD,OAAO,cAAc;EACnB,MAAM,aAAa,QAAQ,KAAK;EAChC,OAAO,OAAO,SAAS,UAAU,IAAI,aAAa,OAAO,QAAQ,UAAU;CAC7E,CAAC,CACH,EACF;AACF;AAEA,MAAa,SAAS,YACpB,MAAM,QAAQM,WAAqB,KAAK,OAAO,CAAC;AAElD,MAAa,WAAW,YACtBC,UAAoB,KAAK,OAAO,CAAC;;;;;;;;ACdnC,IAAa,QAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,4BAA4B;CACjF,MAAM,OAAO;CACb,SAAS,OAAO;CAChB,YAAY,OAAO;AACrB,CAAC,CAAC,CAAC,CAAC;;AAeJ,SAAgB,UAAU,cAAuE;CAC/F,aAAa,OAAO,WAAWC,YAAsB,aAAa,CAAC,CAAC;AACtE;AAEA,MAAM,QAAQ;CACZ;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,MAAM,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAAW,OAAc;CAC/E,MAAM,qBACJ,OAAO,QAAQ,MAAM,YAAY,CAAC,CAAC,KACjC,OAAO,aAAa,UAClB,OAAO,KACL,IAAI,MAAM;EACR,MAAM;EACN,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU;EAC7D,YAAY;CACd,CAAC,CACH,CACF,CACF;CACF,MAAM,QAAQ,OAAO,aAAa;CAClC,MAAM,aAAa,MAAM;CACzB,MAAM,SAAS,MAAM,UAAU;CAC/B,OAAO,sBAAsB,OAAO,MAAM,MAAM,MAAM;CACtD,OAAO,UAAU,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CAC1D,OAAO,SAAS,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CACzD,OAAO,UAAU,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CAC1D,OAAO,oBAAoB,OAAO,aAAa,GAAG,MAAM,MAAM,MAAM;CACpE,OAAO;EAAE;EAAO;EAAY,MAAM,MAAM;CAAK;AAC/C,CAAC;AAED,SAAS,sBACP,UACA,MACA,QACA;CACA,MAAM,eAAe,mBAAmB,MAAM,MAAM;CACpD,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,EAAE,SAAS,OAAOC,OAAoB;GAC1C;GACA,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,OAAO,YAAY,UAAU,2BAA2B,KAAK,YAAY,CAAC,UAAU,QAAQ,CAAC;EAC7F,MAAM,UAAU,OAAOC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,YACf,mBAAmBC,oBACf,OAAO,WAAW;GAChB,mBAAmB,kBAAkB,QAAQ,QAAQ,UAAU;EACjE,CAAC,IACD,OAAO,IACb,CACF;EACA,mBAAmB,kBAAkB,QAAQ,UAAU;EACvD,OAAO,iBACL,UACA,2BACA,QAAQ,WAAW,cACjB,QAAQ,WAAW,OAAO,EAAE,uBAAuB,qBAAqB,IAAI,GAC9E,+DACF;EACA,MAAM,WAAW,OAAO,SAAS,YAAY,IAAI;EACjD,OAAO,iBACL,UACA,2BACA,aAAa,OAAO,gBAClB,SAAS,MACN,WAAW,OAAO,SAAS,YAAYC,OAAiB,QAAQ,WAAW,CAC9E,CACF,GACA,+EACF;EACA,MAAM,WAAW,OAAOC,SAAgB;GAAE;GAAM;EAAQ,CAAC;EAKzD,OAAO,iBACL,UACA,4BACA,OAP6BC,QAAe;GAC5C,eAAe,OAAOC,YAAmB,QAAQ;GACjD,MAAM;EACR,CAAC,EAAA,CAIiB,WAAW,eACxB,OAAO,gBAAgB,UAAU,MAAM,gBAAgB,IAC1D,wDACF;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,UAAU,UAAiC,MAA6B,QAAgB;CAC/F,MAAM,cAAc,MAAM,MAAM,GAAG,OAAO,OAAO;CACjD,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,UAAU,OAAO,SAAS,aAAa,MAAM,WAAW;EAC9D,mBAAmB,QAAQ,qBAAqB,OAAO,CAAC,IAAI,CAAC,QAAQ,gBAAgB;EACrF,MAAM,EAAE,SAAS,OAAOP,OAAoB;GAC1C,cAAc,CAAC,WAAW;GAC1B,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,OAAO,YAAY,UAAU,cAAc,KAAK,YAAY,CAAC,MAAM,CAAC;EAKpE,OAAO,iBACL,UACA,eACA,OAPqBC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,EAAA,CAIS,WAAW,WAAW,GAC9B,8CACF;EACA,OAAO,cAAc,UAAU,MAAM,QAAQ,kBAAkB,YAAY;CAC7E,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,SAAS,UAAiC,MAA6B,QAAgB;CAC9F,MAAM,cAAc,MAAM,MAAM,GAAG,OAAO,UAAU;CACpD,MAAM,WAAW,IAAI,MAAM,GAAG,OAAO,YAAY,UAAU;CAC3D,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,UAAU,OAAO,SAAS,aAAa,MAAM,QAAQ;EAC3D,mBAAmB,QAAQ,qBAAqB,OAAO,CAAC,IAAI,CAAC,QAAQ,gBAAgB;EACrF,MAAM,EAAE,SAAS,OAAOF,OAAoB;GAC1C,cAAc,CAAC,WAAW;GAC1B,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,OAAO,YAAY,UAAU,YAAY,KAAK,YAAY,CAAC,UAAU,CAAC;EAKtE,OAAO,iBACL,UACA,aACA,OAPqBC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,cAIEM,eACnB,8CACF;EACA,OAAO,cAAc,UAAU,MAAM,QAAQ,kBAAkB,UAAU;CAC3E,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,UAAU,UAAiC,MAA6B,QAAgB;CAC/F,MAAM,cAAc,MAAM,MAAM,GAAG,OAAO,OAAO;CACjD,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,EAAE,SAAS,OAAOR,OAAoB;GAC1C,cAAc,CAAC,WAAW;GAC1B,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,MAAM,gBAAgB,OAAOE,UAAuB,IAAI;EACxD,MAAM,UAAU,OAAO,SAAS,aAAa,MAAM,WAAW;EAC9D,mBAAmB,QAAQ,qBAAqB,OAAO,CAAC,IAAI,CAAC,QAAQ,gBAAgB;EAErF,OAAO,iBACL,UACA,eACA,OAJqBD,MAAmB;GAAE;GAAe;EAAK,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,cAI9DQ,YACnB,mEACF;EACA,OAAO,cAAc,UAAU,MAAM,QAAQ,kBAAkB,YAAY;CAC7E,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;AACF;AAEA,SAAS,oBACP,UACA,MACA,QACA;CACA,IAAI,UAAU;CACd,MAAM,QAAA,UAA4B,GAAG;EACnC,GAAG;EACH,cAAc,OAAO,GAAG,kCAAkC,CAAC,EAAE,QAAQ,WAAW;GAC9E,WAAW;GACX,OAAO,YAAY,IACf,SAAS,aAAa,QAAQ,MAAM,IACpC,OAAO,KACL,IAAIC,QAAkB;IACpB,SAAS;IACT,WAAW;IACX,YAAY,SAAS;GACvB,CAAC,CACH;EACN,CAAC;CACH,CAAC;CACD,MAAM,eAAe,CACnB,MAAM,MAAM,GAAG,OAAO,aAAa,GACnC,IAAI,MAAM,GAAG,OAAO,eAAe,WAAW,CAChD;CACA,IAAI,mBAA0C,CAAC;CAC/C,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,EAAE,SAAS,OAAOV,OAAoB;GAC1C;GACA,QAAA,OAA4B,UAAU,EAAE,KAAK,CAAC;EAChD,CAAC;EACD,MAAM,UAAU,OAAOC,MAAmB;GACxC,eAAe,OAAOC,UAAuB,IAAI;GACjD;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI;EACnB,mBACE,mBAAmBC,oBACf,kBAAkB,QAAQ,QAAQ,UAAU,IAC5C,CAAC;EACP,OAAO,iBACL,UACA,yBACA,mBAAmBA,qBAAkC,QAAQ,QAAQ,WAAW,WAAW,GAC3F,oFACF;EACA,IAAI,EAAE,mBAAmBA,oBAAiC;EAC1D,MAAM,WAAW,OAAOE,SAAgB;GAAE;GAAM,SAAS,QAAQ;EAAQ,CAAC,CAAC,CAAC,KAC1E,OAAO,QAAQ,cAAc,QAAQ,CAAC,CACxC;EACA,OAAOC,QAAe;GACpB,eAAe,OAAOC,YAAmB,QAAQ;GACjD,MAAM;EACR,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,QAAQ,CAAC,CAAC;EAC/C,OAAO,iBACL,UACA,yBACA,OAAO,gBAAgB,UAAU,MAAM,gBAAgB,GACvD,yDACF;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,iBAAiB,UAAU,YAAY,gBAAgB,CAAC,GACxE,OAAO,QAAQ,cAAc,KAAK,CAAC,CACrC;AACF;AAEA,SAAS,kBACP,YACuB;CACvB,OAAO,WAAW,SAAS,EAAE,uBAC3B,qBAAqB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CACpD;AACF;AAEA,SAAS,gBACP,UACA,MACA,WACA;CACA,OAAO,OAAO,QAAQ,YAAY,qBAChC,SAAS,UAAU,MAAM,gBAAgB,CAC3C,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,OAAO,WAAW,WAAW,IAAI,CAAC,CAAC;AAC5E;AAEA,SAAS,iBACP,UACA,MACA,WACA;CACA,OAAO,OAAO,cACZ,OAAO,QACL,UAAU,IACT,qBAAqB,SAAS,aAAa,MAAM,gBAAgB,CAAC,CAAC,KAAK,OAAO,MAAM,GACtF,EAAE,SAAS,KAAK,CAClB,CACF;AACF;AAEA,SAAS,cAAc,UAAiC;CACtD,OAAO,MAAM,MAAM,MAAM,QAAQI,WAAqB,QAAQ,GAAGC,cAAqB;AACxF;AAEA,SAAS,mBAAmB,MAA6B,QAAgB;CACvE,OAAO,CAAC,MAAM,MAAM,GAAG,OAAO,QAAQ,GAAG,IAAI,MAAM,GAAG,OAAO,QAAQ,WAAW,CAAC;AACnF;AAEA,SAAS,MAAM,MAA6B,OAAe;CACzD,OAAOC,QAAgB;EACrB,MAAM;EACN,UAAU;GAAE,WAAW;GAAU,YAAY;GAAa,SAAS;EAAc;EACjF,MAAM,GAAG,MAAM,GAAG;EAClB,QAAQ;EACR,QAAQ;EACR,KAAK;CACP,CAAC;AACH;AAEA,SAAS,IAAI,MAA6B,OAAe,OAAe;CACtE,OAAOA,QAAgB;EACrB,MAAM;EACN,UAAU;GAAE,WAAW;GAAU,YAAY;GAAa,SAAS;EAAc;EACjF,MAAM,GAAG,MAAM,GAAG;EAClB,QAAQ;EACR,KAAK;EACL;CACF,CAAC;AACH;AAEA,SAAS,YACP,UACA,UACA,YACA,UACA;CACA,OAAO,iBACL,UACA,UACA,KAAK,UAAU,WAAW,KAAK,EAAE,WAAW,IAAI,CAAC,MAAM,KAAK,UAAU,QAAQ,GAC9E,uBAAuB,SAAS,KAAK,IAAI,GAC3C;AACF;AAEA,SAAS,iBACP,UACA,UACA,WACA,SACA;CACA,OAAO,YACH,OAAO,OACP,OAAO,KAAK,IAAI,MAAM;EAAE,MAAM;EAAU;EAAS,YAAY,SAAS;CAAG,CAAC,CAAC;AACjF;AAEA,SAAS,cACP,UACA,MACA,kBACA,UACA;CACA,OAAO,qBAAqB,OACxB,OAAO,KACL,IAAI,MAAM;EACR,MAAM;EACN,SAAS;EACT,YAAY,SAAS;CACvB,CAAC,CACH,IACA,SAAS,aAAa,MAAM,gBAAgB;AAClD"}