domainkit 0.2.2 → 0.3.0

package/dist/dns-record-BLeqo56C.mjs

@@ -1,289 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { Context, Effect, Layer, Schema, SchemaIssue, SchemaTransformation } from "effect";
-//#region src/auth/lifecycle-repository.ts
-var lifecycle_repository_exports = /* @__PURE__ */ __exportAll({
-	Error: () => Error$3,
-	Service: () => Service$1
-});
-var Error$3 = class extends Schema.TaggedError()("LifecycleRepositoryError", {
-	category: Schema.Literal("storage"),
-	message: Schema.String,
-	operation: Schema.String,
-	retry: Schema.Literals([
-		"never",
-		"after-user-action",
-		"safe",
-		"unknown"
-	])
-}) {};
-var Service$1 = class extends Context.Service()("@domainkit/AuthorizationLifecycleRepository") {};
-//#endregion
-//#region src/invalid-input.ts
-var invalid_input_exports = /* @__PURE__ */ __exportAll({ Error: () => Error$2 });
-var Error$2 = class extends Schema.TaggedError()("InvalidInputError", { message: Schema.String }) {};
-//#endregion
-//#region src/domain/domain-name.ts
-var domain_name_exports = /* @__PURE__ */ __exportAll({
-	Schema: () => Schema$2,
-	decode: () => decode$1,
-	parse: () => parse$1
-});
-const labelPattern = /^[a-z0-9_](?:[a-z0-9_-]{0,61}[a-z0-9_])?$/;
-const Type$1 = Schema.String.check(Schema.makeFilter((value) => value.length <= 253 && value.includes(".") && value.split(".").every((label) => labelPattern.test(label)) ? void 0 : "Expected a fully qualified DNS name", { identifier: "DomainName" })).pipe(Schema.brand("DomainName"));
-/** Decodes user and wire strings into canonical domain names. */
-const Schema$2 = Schema.String.pipe(Schema.decodeTo(Type$1, SchemaTransformation.transformOrFail({
-	decode: (input, options) => Effect.try({
-		try: () => normalize(input),
-		catch: (cause) => new SchemaIssue.InvalidValue({ message: cause instanceof Error ? cause.message : String(cause) }, input, options)
-	}),
-	encode: (domain) => Effect.succeed(domain)
-})));
-const decode$1 = Effect.fn("DomainName.decode")((input) => Schema.decodeUnknownEffect(Schema$2)(input).pipe(Effect.mapError((cause) => new Error$2({ message: cause.message }))));
-function parse$1(input) {
-	try {
-		return Schema.decodeUnknownSync(Schema$2)(input);
-	} catch (cause) {
-		throw new Error$2({ message: cause instanceof Error ? cause.message : String(cause) });
-	}
-}
-function normalize(input) {
-	return input.trim().replace(/\.+$/, "").split(".").map((label) => {
-		if (label.includes("_") || [...label].every((character) => character.charCodeAt(0) <= 127)) return label.toLowerCase();
-		const normalized = new URL(`http://${label}.example`).hostname.split(".")[0];
-		if (normalized === void 0) throw new Error("Domain label could not be normalized");
-		return normalized.toLowerCase();
-	}).join(".");
-}
-//#endregion
-//#region src/provider/provider.ts
-var provider_exports = /* @__PURE__ */ __exportAll({
-	Error: () => Error$1,
-	ErrorReason: () => ErrorReason,
-	Service: () => Service,
-	fromAsync: () => fromAsync,
-	layerFromAsync: () => layerFromAsync,
-	toAsync: () => toAsync
-});
-const ErrorReason = Schema.Literals([
-	"authentication",
-	"authorization",
-	"conflict",
-	"not_found",
-	"rate_limit",
-	"request",
-	"response",
-	"transport",
-	"unsupported"
-]);
-var Error$1 = class extends Schema.TaggedError()("ProviderError", {
-	cause: Schema.optionalKey(Schema.Unknown),
-	code: Schema.optionalKey(Schema.Union([Schema.Number, Schema.String])),
-	message: Schema.String,
-	operation: Schema.String,
-	providerId: Schema.String,
-	reason: Schema.optionalKey(ErrorReason),
-	retryAfterMs: Schema.optionalKey(Schema.Number),
-	status: Schema.optionalKey(Schema.Number)
-}) {};
-var Service = class extends Context.Service()("@domainkit/DnsProvider") {};
-const fromAsync = (provider) => Service.of({
-	id: provider.id,
-	createRecord: Effect.fn("DnsProvider.createRecord")((zone, record) => Effect.tryPromise({
-		try: () => provider.createRecord(zone, record),
-		catch: (cause) => failure(provider, "createRecord", cause)
-	})),
-	deleteRecord: Effect.fn("DnsProvider.deleteRecord")((zone, providerRecordId) => Effect.tryPromise({
-		try: () => provider.deleteRecord(zone, providerRecordId),
-		catch: (cause) => failure(provider, "deleteRecord", cause)
-	})),
-	getRecord: Effect.fn("DnsProvider.getRecord")((zone, providerRecordId) => Effect.tryPromise({
-		try: () => provider.getRecord(zone, providerRecordId),
-		catch: (cause) => failure(provider, "getRecord", cause)
-	})),
-	listRecords: Effect.fn("DnsProvider.listRecords")((zone) => Effect.tryPromise({
-		try: () => provider.listRecords(zone),
-		catch: (cause) => failure(provider, "listRecords", cause)
-	}))
-});
-const layerFromAsync = (provider) => Layer.succeed(Service, fromAsync(provider));
-const toAsync = (provider) => ({
-	id: provider.id,
-	createRecord: (zone, record) => Effect.runPromise(provider.createRecord(zone, record)),
-	deleteRecord: (zone, providerRecordId) => Effect.runPromise(provider.deleteRecord(zone, providerRecordId)),
-	getRecord: (zone, providerRecordId) => Effect.runPromise(provider.getRecord(zone, providerRecordId)),
-	listRecords: (zone) => Effect.runPromise(provider.listRecords(zone))
-});
-function failure(provider, operation, cause) {
-	return cause instanceof Error$1 ? cause : new Error$1({
-		cause,
-		message: cause instanceof globalThis.Error ? cause.message : String(cause),
-		operation,
-		providerId: provider.id
-	});
-}
-//#endregion
-//#region src/domain/dns-record.ts
-var dns_record_exports = /* @__PURE__ */ __exportAll({
-	A: () => A,
-	Aaaa: () => Aaaa,
-	Caa: () => Caa,
-	Cname: () => Cname,
-	Mx: () => Mx,
-	Ns: () => Ns,
-	Observed: () => Observed,
-	Opaque: () => Opaque,
-	RequirementMetadata: () => RequirementMetadata,
-	Schema: () => Schema$1,
-	Srv: () => Srv,
-	Txt: () => Txt,
-	Type: () => Type,
-	data: () => data,
-	decode: () => decode,
-	equals: () => equals,
-	parse: () => parse
-});
-const Type = Schema.Literals([
-	"A",
-	"AAAA",
-	"CNAME",
-	"TXT",
-	"MX",
-	"CAA",
-	"NS",
-	"SRV"
-]);
-const RequirementMetadata = Schema.Struct({
-	ownership: Schema.String.check(Schema.isMinLength(1)),
-	provenance: Schema.String.check(Schema.isMinLength(1)),
-	purpose: Schema.String.check(Schema.isMinLength(1))
-});
-const CommonFields = {
-	metadata: RequirementMetadata,
-	name: Schema$2,
-	policy: Schema.Literals(["exclusive", "append"]),
-	ttl: Schema.NullOr(Schema.Int.check(Schema.isBetween({
-		minimum: 60,
-		maximum: 2147483647
-	})))
-};
-const ExclusiveCommonFields = {
-	...CommonFields,
-	policy: Schema.Literal("exclusive")
-};
-const Address = Schema.String.check(Schema.makeFilter((value) => isIpv4(value) ? void 0 : "Expected an IPv4 address"));
-const Ipv6Address = Schema.String.check(Schema.makeFilter((value) => isIpv6(value) ? void 0 : "Expected an IPv6 address"));
-const Port = Schema.Int.check(Schema.isBetween({
-	minimum: 0,
-	maximum: 65535
-}));
-const Priority = Schema.Int.check(Schema.isBetween({
-	minimum: 0,
-	maximum: 65535
-}));
-const Schema$1 = Schema.TaggedUnion({
-	A: {
-		...CommonFields,
-		address: Address
-	},
-	AAAA: {
-		...CommonFields,
-		address: Ipv6Address
-	},
-	CNAME: {
-		...ExclusiveCommonFields,
-		target: Schema$2
-	},
-	TXT: {
-		...CommonFields,
-		value: Schema.String.check(Schema.isMinLength(1))
-	},
-	MX: {
-		...CommonFields,
-		exchange: Schema$2,
-		priority: Priority
-	},
-	CAA: {
-		...CommonFields,
-		flags: Schema.Int.check(Schema.isBetween({
-			minimum: 0,
-			maximum: 255
-		})),
-		tag: Schema.Literals([
-			"issue",
-			"issuewild",
-			"iodef"
-		]),
-		value: Schema.String.check(Schema.isMinLength(1))
-	},
-	NS: {
-		...CommonFields,
-		target: Schema$2
-	},
-	SRV: {
-		...CommonFields,
-		port: Port,
-		priority: Priority,
-		target: Schema$2,
-		weight: Priority
-	}
-});
-const { A, AAAA: Aaaa, CAA: Caa, CNAME: Cname, MX: Mx, NS: Ns, SRV: Srv, TXT: Txt } = Schema$1.cases;
-/** Provider state that DomainKit cannot create but must retain for safe reconciliation. */
-const Opaque = Schema.Struct({
-	_tag: Schema.Literal("Opaque"),
-	name: Schema.String.check(Schema.isMinLength(1)),
-	providerRecordId: Schema.NullOr(Schema.String),
-	providerType: Schema.String.check(Schema.isMinLength(1))
-});
-/** Any DNS record observed through a provider, including non-portable record types. */
-const Observed = Schema.Union([Schema$1, Opaque]);
-const decode = Effect.fn("DnsRecord.decode")((input) => Schema.decodeUnknownEffect(Schema$1)(input).pipe(Effect.mapError((cause) => new Error$2({ message: cause.message }))));
-function parse(input) {
-	try {
-		return Schema.decodeUnknownSync(Schema$1)(input);
-	} catch (cause) {
-		throw new Error$2({ message: cause instanceof Error ? cause.message : String(cause) });
-	}
-}
-function data(record) {
-	switch (record._tag) {
-		case "A":
-		case "AAAA": return { address: record.address };
-		case "CNAME":
-		case "NS": return { target: record.target };
-		case "TXT": return { value: record.value };
-		case "MX": return {
-			exchange: record.exchange,
-			priority: record.priority
-		};
-		case "CAA": return {
-			flags: record.flags,
-			tag: record.tag,
-			value: record.value
-		};
-		case "SRV": return {
-			port: record.port,
-			priority: record.priority,
-			target: record.target,
-			weight: record.weight
-		};
-	}
-}
-function equals(left, right) {
-	return left._tag === right._tag && left.name === right.name && JSON.stringify(data(left)) === JSON.stringify(data(right));
-}
-function isIpv4(value) {
-	const parts = value.split(".");
-	return parts.length === 4 && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255 && String(Number(part)) === part);
-}
-function isIpv6(value) {
-	try {
-		return new URL(`http://[${value}]/`).hostname.startsWith("[");
-	} catch {
-		return false;
-	}
-}
-//#endregion
-export { invalid_input_exports as A, provider_exports as C, domain_name_exports as D, decode$1 as E, Service$1 as M, lifecycle_repository_exports as N, parse$1 as O, layerFromAsync as S, Schema$2 as T, equals as _, Mx as a, Service as b, Opaque as c, Srv as d, Txt as f, dns_record_exports as g, decode as h, Cname as i, Error$3 as j, Error$2 as k, RequirementMetadata as l, data as m, Aaaa as n, Ns as o, Type as p, Caa as r, Observed as s, A as t, Schema$1 as u, parse as v, toAsync as w, fromAsync as x, Error$1 as y };
-
-//# sourceMappingURL=dns-record-BLeqo56C.mjs.map

package/dist/dns-record-BLeqo56C.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"dns-record-BLeqo56C.mjs","names":["Error","Service","Error","Type","S","Schema","decode","InvalidInputError","parse","Error","S","DomainName.Schema","Schema","InvalidInputError"],"sources":["../src/auth/lifecycle-repository.ts","../src/invalid-input.ts","../src/domain/domain-name.ts","../src/provider/provider.ts","../src/domain/dns-record.ts"],"sourcesContent":["import { Context, Effect, Schema } from \"effect\";\n\nimport type * as ProviderAuthorization from \"./authorization.ts\";\nimport type * as Connection from \"./connection.ts\";\n\nexport interface Aggregate {\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly bindings: ReadonlyArray<Connection.Connection>;\n  readonly credential: Connection.StoredCredential;\n}\n\nexport interface DetachResult {\n  readonly authorizationId: string;\n  readonly remainingBindings: number;\n  readonly revokedAuthorization: boolean;\n}\n\nexport class Error extends Schema.TaggedError<Error>()(\"LifecycleRepositoryError\", {\n  category: Schema.Literal(\"storage\"),\n  message: Schema.String,\n  operation: Schema.String,\n  retry: Schema.Literals([\"never\", \"after-user-action\", \"safe\", \"unknown\"]),\n}) {}\n\nexport interface Interface {\n  readonly bind: (\n    authorizationId: string,\n    binding: Connection.Connection,\n  ) => Effect.Effect<Aggregate, Error>;\n  readonly connect: (aggregate: Aggregate) => Effect.Effect<Aggregate, Error>;\n  readonly detach: <E>(input: {\n    readonly connectionId: string;\n    readonly revoke: (aggregate: Aggregate) => Effect.Effect<void, E>;\n  }) => Effect.Effect<DetachResult, Error | E>;\n  readonly findByProviderAccount: (\n    providerId: string,\n    providerAccountId: string,\n  ) => Effect.Effect<Aggregate | null, Error>;\n  readonly get: (authorizationId: string) => Effect.Effect<Aggregate | null, Error>;\n  readonly getByConnectionId: (connectionId: string) => Effect.Effect<Aggregate | null, Error>;\n  readonly promoteEvidence: (\n    authorizationId: string,\n    evidence: ReadonlyArray<ProviderAuthorization.CapabilityEvidence>,\n  ) => Effect.Effect<Aggregate, Error>;\n  readonly recover: <E>(input: {\n    readonly authorizationId: string;\n    readonly revoke: (aggregate: Aggregate) => Effect.Effect<void, E>;\n  }) => Effect.Effect<DetachResult, Error | E>;\n  readonly rotate: (\n    authorizationId: string,\n    credential: Connection.StoredCredential,\n    expiresAt: Date | null,\n  ) => Effect.Effect<Aggregate, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\n  \"@domainkit/AuthorizationLifecycleRepository\",\n) {}\n","import { Schema } from \"effect\";\n\nexport class Error extends Schema.TaggedError<Error>()(\"InvalidInputError\", {\n  message: Schema.String,\n}) {}\n","import { Effect, Schema as S, SchemaIssue, SchemaTransformation } from \"effect\";\n\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\n\nconst labelPattern = /^[a-z0-9_](?:[a-z0-9_-]{0,61}[a-z0-9_])?$/;\n\nconst Type = S.String.check(\n  S.makeFilter<string>(\n    (value) =>\n      value.length <= 253 &&\n      value.includes(\".\") &&\n      value.split(\".\").every((label) => labelPattern.test(label))\n        ? undefined\n        : \"Expected a fully qualified DNS name\",\n    { identifier: \"DomainName\" },\n  ),\n).pipe(S.brand(\"DomainName\"));\n\n/** A lower-case, fully qualified DNS name without a trailing dot. */\nexport type DomainName = typeof Type.Type;\n\n/** Decodes user and wire strings into canonical domain names. */\nexport const Schema = S.String.pipe(\n  S.decodeTo(\n    Type,\n    SchemaTransformation.transformOrFail({\n      decode: (input, options) =>\n        Effect.try({\n          try: () => normalize(input),\n          catch: (cause) =>\n            new SchemaIssue.InvalidValue(\n              { message: cause instanceof Error ? cause.message : String(cause) },\n              input,\n              options,\n            ),\n        }),\n      encode: (domain) => Effect.succeed(domain),\n    }),\n  ),\n);\n\nexport const decode = Effect.fn(\"DomainName.decode\")((input: unknown) =>\n  S.decodeUnknownEffect(Schema)(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport function parse(input: unknown): DomainName {\n  try {\n    return S.decodeUnknownSync(Schema)(input);\n  } catch (cause) {\n    throw new InvalidInputError({\n      message: cause instanceof Error ? cause.message : String(cause),\n    });\n  }\n}\n\nfunction normalize(input: string): string {\n  const labels = input\n    .trim()\n    .replace(/\\.+$/, \"\")\n    .split(\".\")\n    .map((label) => {\n      if (label.includes(\"_\") || [...label].every((character) => character.charCodeAt(0) <= 127)) {\n        return label.toLowerCase();\n      }\n      const hostname = new URL(`http://${label}.example`).hostname;\n      const normalized = hostname.split(\".\")[0];\n      if (normalized === undefined) throw new Error(\"Domain label could not be normalized\");\n      return normalized.toLowerCase();\n    });\n  return labels.join(\".\");\n}\n","import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\n\nexport interface CreateResult {\n  readonly providerRecordId: string | null;\n}\n\nexport const ErrorReason = Schema.Literals([\n  \"authentication\",\n  \"authorization\",\n  \"conflict\",\n  \"not_found\",\n  \"rate_limit\",\n  \"request\",\n  \"response\",\n  \"transport\",\n  \"unsupported\",\n]);\nexport type ErrorReason = typeof ErrorReason.Type;\n\nexport class Error extends Schema.TaggedError<Error>()(\"ProviderError\", {\n  cause: Schema.optionalKey(Schema.Unknown),\n  code: Schema.optionalKey(Schema.Union([Schema.Number, Schema.String])),\n  message: Schema.String,\n  operation: Schema.String,\n  providerId: Schema.String,\n  reason: Schema.optionalKey(ErrorReason),\n  retryAfterMs: Schema.optionalKey(Schema.Number),\n  status: Schema.optionalKey(Schema.Number),\n}) {}\n\n/** The provider capability used by DNS planning, application, and verification. */\nexport interface Interface {\n  readonly id: string;\n  readonly createRecord: (\n    zone: DomainName.DomainName,\n    record: DnsRecord.DnsRecord,\n  ) => Effect.Effect<CreateResult, Error>;\n  readonly deleteRecord: (\n    zone: DomainName.DomainName,\n    providerRecordId: string,\n  ) => Effect.Effect<void, Error>;\n  readonly getRecord: (\n    zone: DomainName.DomainName,\n    providerRecordId: string,\n  ) => Effect.Effect<DnsRecord.Observed | null, Error>;\n  readonly listRecords: (\n    zone: DomainName.DomainName,\n  ) => Effect.Effect<ReadonlyArray<DnsRecord.Observed>, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/DnsProvider\") {}\n\n/** Minimal Promise-shaped provider contract for hosts that do not use Effect directly. */\nexport interface AsyncInterface {\n  readonly id: string;\n  readonly createRecord: (\n    zone: DomainName.DomainName,\n    record: DnsRecord.DnsRecord,\n  ) => Promise<CreateResult>;\n  readonly deleteRecord: (zone: DomainName.DomainName, providerRecordId: string) => Promise<void>;\n  readonly getRecord: (\n    zone: DomainName.DomainName,\n    providerRecordId: string,\n  ) => Promise<DnsRecord.Observed | null>;\n  readonly listRecords: (zone: DomainName.DomainName) => Promise<ReadonlyArray<DnsRecord.Observed>>;\n}\n\nexport const fromAsync = (provider: AsyncInterface): Interface =>\n  Service.of({\n    id: provider.id,\n    createRecord: Effect.fn(\"DnsProvider.createRecord\")((zone, record) =>\n      Effect.tryPromise({\n        try: () => provider.createRecord(zone, record),\n        catch: (cause) => failure(provider, \"createRecord\", cause),\n      }),\n    ),\n    deleteRecord: Effect.fn(\"DnsProvider.deleteRecord\")((zone, providerRecordId) =>\n      Effect.tryPromise({\n        try: () => provider.deleteRecord(zone, providerRecordId),\n        catch: (cause) => failure(provider, \"deleteRecord\", cause),\n      }),\n    ),\n    getRecord: Effect.fn(\"DnsProvider.getRecord\")((zone, providerRecordId) =>\n      Effect.tryPromise({\n        try: () => provider.getRecord(zone, providerRecordId),\n        catch: (cause) => failure(provider, \"getRecord\", cause),\n      }),\n    ),\n    listRecords: Effect.fn(\"DnsProvider.listRecords\")((zone) =>\n      Effect.tryPromise({\n        try: () => provider.listRecords(zone),\n        catch: (cause) => failure(provider, \"listRecords\", cause),\n      }),\n    ),\n  });\n\nexport const layerFromAsync = (provider: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, fromAsync(provider));\n\nexport const toAsync = (provider: Interface): AsyncInterface => ({\n  id: provider.id,\n  createRecord: (zone, record) => Effect.runPromise(provider.createRecord(zone, record)),\n  deleteRecord: (zone, providerRecordId) =>\n    Effect.runPromise(provider.deleteRecord(zone, providerRecordId)),\n  getRecord: (zone, providerRecordId) =>\n    Effect.runPromise(provider.getRecord(zone, providerRecordId)),\n  listRecords: (zone) => Effect.runPromise(provider.listRecords(zone)),\n});\n\nfunction failure(provider: AsyncInterface, operation: string, cause: unknown): Error {\n  return cause instanceof Error\n    ? cause\n    : new Error({\n        cause,\n        message: cause instanceof globalThis.Error ? cause.message : String(cause),\n        operation,\n        providerId: provider.id,\n      });\n}\n","import { Effect, Schema as S } from \"effect\";\n\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport * as DomainName from \"./domain-name.ts\";\n\nexport const Type = S.Literals([\"A\", \"AAAA\", \"CNAME\", \"TXT\", \"MX\", \"CAA\", \"NS\", \"SRV\"]);\nexport type Type = typeof Type.Type;\n\nexport const RequirementMetadata = S.Struct({\n  ownership: S.String.check(S.isMinLength(1)),\n  provenance: S.String.check(S.isMinLength(1)),\n  purpose: S.String.check(S.isMinLength(1)),\n});\nexport interface RequirementMetadata extends S.Schema.Type<typeof RequirementMetadata> {}\n\nconst CommonFields = {\n  metadata: RequirementMetadata,\n  name: DomainName.Schema,\n  policy: S.Literals([\"exclusive\", \"append\"]),\n  ttl: S.NullOr(S.Int.check(S.isBetween({ minimum: 60, maximum: 2_147_483_647 }))),\n};\n\nconst ExclusiveCommonFields = { ...CommonFields, policy: S.Literal(\"exclusive\") };\nconst Address = S.String.check(\n  S.makeFilter((value) => (isIpv4(value) ? undefined : \"Expected an IPv4 address\")),\n);\nconst Ipv6Address = S.String.check(\n  S.makeFilter((value) => (isIpv6(value) ? undefined : \"Expected an IPv6 address\")),\n);\nconst Port = S.Int.check(S.isBetween({ minimum: 0, maximum: 65_535 }));\nconst Priority = S.Int.check(S.isBetween({ minimum: 0, maximum: 65_535 }));\n\nexport const Schema = S.TaggedUnion({\n  A: { ...CommonFields, address: Address },\n  AAAA: { ...CommonFields, address: Ipv6Address },\n  CNAME: { ...ExclusiveCommonFields, target: DomainName.Schema },\n  TXT: { ...CommonFields, value: S.String.check(S.isMinLength(1)) },\n  MX: { ...CommonFields, exchange: DomainName.Schema, priority: Priority },\n  CAA: {\n    ...CommonFields,\n    flags: S.Int.check(S.isBetween({ minimum: 0, maximum: 255 })),\n    tag: S.Literals([\"issue\", \"issuewild\", \"iodef\"]),\n    value: S.String.check(S.isMinLength(1)),\n  },\n  NS: { ...CommonFields, target: DomainName.Schema },\n  SRV: {\n    ...CommonFields,\n    port: Port,\n    priority: Priority,\n    target: DomainName.Schema,\n    weight: Priority,\n  },\n});\nexport const {\n  A,\n  AAAA: Aaaa,\n  CAA: Caa,\n  CNAME: Cname,\n  MX: Mx,\n  NS: Ns,\n  SRV: Srv,\n  TXT: Txt,\n} = Schema.cases;\nexport type DnsRecord = typeof Schema.Type;\nexport type Encoded = typeof Schema.Encoded;\n\n/** Provider state that DomainKit cannot create but must retain for safe reconciliation. */\nexport const Opaque = S.Struct({\n  _tag: S.Literal(\"Opaque\"),\n  name: S.String.check(S.isMinLength(1)),\n  providerRecordId: S.NullOr(S.String),\n  providerType: S.String.check(S.isMinLength(1)),\n});\nexport interface Opaque extends S.Schema.Type<typeof Opaque> {}\n\n/** Any DNS record observed through a provider, including non-portable record types. */\nexport const Observed = S.Union([Schema, Opaque]);\nexport type Observed = typeof Observed.Type;\n\nexport const decode = Effect.fn(\"DnsRecord.decode\")((input: unknown) =>\n  S.decodeUnknownEffect(Schema)(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport function parse(input: unknown): DnsRecord {\n  try {\n    return S.decodeUnknownSync(Schema)(input);\n  } catch (cause) {\n    throw new InvalidInputError({\n      message: cause instanceof Error ? cause.message : String(cause),\n    });\n  }\n}\n\nexport function data(record: DnsRecord): Readonly<Record<string, number | string>> {\n  switch (record._tag) {\n    case \"A\":\n    case \"AAAA\":\n      return { address: record.address };\n    case \"CNAME\":\n    case \"NS\":\n      return { target: record.target };\n    case \"TXT\":\n      return { value: record.value };\n    case \"MX\":\n      return { exchange: record.exchange, priority: record.priority };\n    case \"CAA\":\n      return { flags: record.flags, tag: record.tag, value: record.value };\n    case \"SRV\":\n      return {\n        port: record.port,\n        priority: record.priority,\n        target: record.target,\n        weight: record.weight,\n      };\n  }\n}\n\nexport function equals(left: DnsRecord, right: DnsRecord): boolean {\n  return (\n    left._tag === right._tag &&\n    left.name === right.name &&\n    JSON.stringify(data(left)) === JSON.stringify(data(right))\n  );\n}\n\nfunction isIpv4(value: string): boolean {\n  const parts = value.split(\".\");\n  return (\n    parts.length === 4 &&\n    parts.every(\n      (part) => /^\\d{1,3}$/.test(part) && Number(part) <= 255 && String(Number(part)) === part,\n    )\n  );\n}\n\nfunction isIpv6(value: string): boolean {\n  try {\n    return new URL(`http://[${value}]/`).hostname.startsWith(\"[\");\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAiBA,IAAaA,UAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,4BAA4B;CACjF,UAAU,OAAO,QAAQ,SAAS;CAClC,SAAS,OAAO;CAChB,WAAW,OAAO;CAClB,OAAO,OAAO,SAAS;EAAC;EAAS;EAAqB;EAAQ;CAAS,CAAC;AAC1E,CAAC,CAAC,CAAC,CAAC;AAiCJ,IAAaC,YAAb,cAA6B,QAAQ,QAA4B,CAAC,CAChE,6CACF,CAAC,CAAC,CAAC;;;;ACvDH,IAAaC,UAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,qBAAqB,EAC1E,SAAS,OAAO,OAClB,CAAC,CAAC,CAAC,CAAC;;;;;;;;ACAJ,MAAM,eAAe;AAErB,MAAMC,SAAOC,OAAE,OAAO,MACpBA,OAAE,YACC,UACC,MAAM,UAAU,OAChB,MAAM,SAAS,GAAG,KAClB,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,UAAU,aAAa,KAAK,KAAK,CAAC,IACtD,KAAA,IACA,uCACN,EAAE,YAAY,aAAa,CAC7B,CACF,CAAC,CAAC,KAAKA,OAAE,MAAM,YAAY,CAAC;;AAM5B,MAAaC,WAASD,OAAE,OAAO,KAC7BA,OAAE,SACAD,QACA,qBAAqB,gBAAgB;CACnC,SAAS,OAAO,YACd,OAAO,IAAI;EACT,WAAW,UAAU,KAAK;EAC1B,QAAQ,UACN,IAAI,YAAY,aACd,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAClE,OACA,OACF;CACJ,CAAC;CACH,SAAS,WAAW,OAAO,QAAQ,MAAM;AAC3C,CAAC,CACH,CACF;AAEA,MAAaG,WAAS,OAAO,GAAG,mBAAmB,CAAC,EAAE,UACpDF,OAAE,oBAAoBC,QAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KACnC,OAAO,UAAU,UAAU,IAAIE,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,SAAgBC,QAAM,OAA4B;CAChD,IAAI;EACF,OAAOJ,OAAE,kBAAkBC,QAAM,CAAC,CAAC,KAAK;CAC1C,SAAS,OAAO;EACd,MAAM,IAAIE,QAAkB,EAC1B,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAChE,CAAC;CACH;AACF;AAEA,SAAS,UAAU,OAAuB;CAcxC,OAbe,MACZ,KAAK,CAAC,CACN,QAAQ,QAAQ,EAAE,CAAC,CACnB,MAAM,GAAG,CAAC,CACV,KAAK,UAAU;EACd,IAAI,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,cAAc,UAAU,WAAW,CAAC,KAAK,GAAG,GACvF,OAAO,MAAM,YAAY;EAG3B,MAAM,aADW,IAAI,IAAI,UAAU,MAAM,SAAS,CAAC,CAAC,SACxB,MAAM,GAAG,CAAC,CAAC;EACvC,IAAI,eAAe,KAAA,GAAW,MAAM,IAAI,MAAM,sCAAsC;EACpF,OAAO,WAAW,YAAY;CAChC,CACU,CAAC,CAAC,KAAK,GAAG;AACxB;;;;;;;;;;;AC/DA,MAAa,cAAc,OAAO,SAAS;CACzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAGD,IAAaE,UAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,iBAAiB;CACtE,OAAO,OAAO,YAAY,OAAO,OAAO;CACxC,MAAM,OAAO,YAAY,OAAO,MAAM,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC,CAAC;CACrE,SAAS,OAAO;CAChB,WAAW,OAAO;CAClB,YAAY,OAAO;CACnB,QAAQ,OAAO,YAAY,WAAW;CACtC,cAAc,OAAO,YAAY,OAAO,MAAM;CAC9C,QAAQ,OAAO,YAAY,OAAO,MAAM;AAC1C,CAAC,CAAC,CAAC,CAAC;AAsBJ,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAiB9F,MAAa,aAAa,aACxB,QAAQ,GAAG;CACT,IAAI,SAAS;CACb,cAAc,OAAO,GAAG,0BAA0B,CAAC,EAAE,MAAM,WACzD,OAAO,WAAW;EAChB,WAAW,SAAS,aAAa,MAAM,MAAM;EAC7C,QAAQ,UAAU,QAAQ,UAAU,gBAAgB,KAAK;CAC3D,CAAC,CACH;CACA,cAAc,OAAO,GAAG,0BAA0B,CAAC,EAAE,MAAM,qBACzD,OAAO,WAAW;EAChB,WAAW,SAAS,aAAa,MAAM,gBAAgB;EACvD,QAAQ,UAAU,QAAQ,UAAU,gBAAgB,KAAK;CAC3D,CAAC,CACH;CACA,WAAW,OAAO,GAAG,uBAAuB,CAAC,EAAE,MAAM,qBACnD,OAAO,WAAW;EAChB,WAAW,SAAS,UAAU,MAAM,gBAAgB;EACpD,QAAQ,UAAU,QAAQ,UAAU,aAAa,KAAK;CACxD,CAAC,CACH;CACA,aAAa,OAAO,GAAG,yBAAyB,CAAC,EAAE,SACjD,OAAO,WAAW;EAChB,WAAW,SAAS,YAAY,IAAI;EACpC,QAAQ,UAAU,QAAQ,UAAU,eAAe,KAAK;CAC1D,CAAC,CACH;AACF,CAAC;AAEH,MAAa,kBAAkB,aAC7B,MAAM,QAAQ,SAAS,UAAU,QAAQ,CAAC;AAE5C,MAAa,WAAW,cAAyC;CAC/D,IAAI,SAAS;CACb,eAAe,MAAM,WAAW,OAAO,WAAW,SAAS,aAAa,MAAM,MAAM,CAAC;CACrF,eAAe,MAAM,qBACnB,OAAO,WAAW,SAAS,aAAa,MAAM,gBAAgB,CAAC;CACjE,YAAY,MAAM,qBAChB,OAAO,WAAW,SAAS,UAAU,MAAM,gBAAgB,CAAC;CAC9D,cAAc,SAAS,OAAO,WAAW,SAAS,YAAY,IAAI,CAAC;AACrE;AAEA,SAAS,QAAQ,UAA0B,WAAmB,OAAuB;CACnF,OAAO,iBAAiBA,UACpB,QACA,IAAIA,QAAM;EACR;EACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;EACzE;EACA,YAAY,SAAS;CACvB,CAAC;AACP;;;;;;;;;;;;;;;;;;;;;;ACpHA,MAAa,OAAOC,OAAE,SAAS;CAAC;CAAK;CAAQ;CAAS;CAAO;CAAM;CAAO;CAAM;AAAK,CAAC;AAGtF,MAAa,sBAAsBA,OAAE,OAAO;CAC1C,WAAWA,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;CAC1C,YAAYA,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;CAC3C,SAASA,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;AAC1C,CAAC;AAGD,MAAM,eAAe;CACnB,UAAU;CACV,MAAMC;CACN,QAAQD,OAAE,SAAS,CAAC,aAAa,QAAQ,CAAC;CAC1C,KAAKA,OAAE,OAAOA,OAAE,IAAI,MAAMA,OAAE,UAAU;EAAE,SAAS;EAAI,SAAS;CAAc,CAAC,CAAC,CAAC;AACjF;AAEA,MAAM,wBAAwB;CAAE,GAAG;CAAc,QAAQA,OAAE,QAAQ,WAAW;AAAE;AAChF,MAAM,UAAUA,OAAE,OAAO,MACvBA,OAAE,YAAY,UAAW,OAAO,KAAK,IAAI,KAAA,IAAY,0BAA2B,CAClF;AACA,MAAM,cAAcA,OAAE,OAAO,MAC3BA,OAAE,YAAY,UAAW,OAAO,KAAK,IAAI,KAAA,IAAY,0BAA2B,CAClF;AACA,MAAM,OAAOA,OAAE,IAAI,MAAMA,OAAE,UAAU;CAAE,SAAS;CAAG,SAAS;AAAO,CAAC,CAAC;AACrE,MAAM,WAAWA,OAAE,IAAI,MAAMA,OAAE,UAAU;CAAE,SAAS;CAAG,SAAS;AAAO,CAAC,CAAC;AAEzE,MAAaE,WAASF,OAAE,YAAY;CAClC,GAAG;EAAE,GAAG;EAAc,SAAS;CAAQ;CACvC,MAAM;EAAE,GAAG;EAAc,SAAS;CAAY;CAC9C,OAAO;EAAE,GAAG;EAAuB,QAAQC;CAAkB;CAC7D,KAAK;EAAE,GAAG;EAAc,OAAOD,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;CAAE;CAChE,IAAI;EAAE,GAAG;EAAc,UAAUC;EAAmB,UAAU;CAAS;CACvE,KAAK;EACH,GAAG;EACH,OAAOD,OAAE,IAAI,MAAMA,OAAE,UAAU;GAAE,SAAS;GAAG,SAAS;EAAI,CAAC,CAAC;EAC5D,KAAKA,OAAE,SAAS;GAAC;GAAS;GAAa;EAAO,CAAC;EAC/C,OAAOA,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;CACxC;CACA,IAAI;EAAE,GAAG;EAAc,QAAQC;CAAkB;CACjD,KAAK;EACH,GAAG;EACH,MAAM;EACN,UAAU;EACV,QAAQA;EACR,QAAQ;CACV;AACF,CAAC;AACD,MAAa,EACX,GACA,MAAM,MACN,KAAK,KACL,OAAO,OACP,IAAI,IACJ,IAAI,IACJ,KAAK,KACL,KAAK,QACHC,SAAO;;AAKX,MAAa,SAASF,OAAE,OAAO;CAC7B,MAAMA,OAAE,QAAQ,QAAQ;CACxB,MAAMA,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;CACrC,kBAAkBA,OAAE,OAAOA,OAAE,MAAM;CACnC,cAAcA,OAAE,OAAO,MAAMA,OAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;;AAID,MAAa,WAAWA,OAAE,MAAM,CAACE,UAAQ,MAAM,CAAC;AAGhD,MAAa,SAAS,OAAO,GAAG,kBAAkB,CAAC,EAAE,UACnDF,OAAE,oBAAoBE,QAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KACnC,OAAO,UAAU,UAAU,IAAIC,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,SAAgB,MAAM,OAA2B;CAC/C,IAAI;EACF,OAAOH,OAAE,kBAAkBE,QAAM,CAAC,CAAC,KAAK;CAC1C,SAAS,OAAO;EACd,MAAM,IAAIC,QAAkB,EAC1B,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAChE,CAAC;CACH;AACF;AAEA,SAAgB,KAAK,QAA8D;CACjF,QAAQ,OAAO,MAAf;EACE,KAAK;EACL,KAAK,QACH,OAAO,EAAE,SAAS,OAAO,QAAQ;EACnC,KAAK;EACL,KAAK,MACH,OAAO,EAAE,QAAQ,OAAO,OAAO;EACjC,KAAK,OACH,OAAO,EAAE,OAAO,OAAO,MAAM;EAC/B,KAAK,MACH,OAAO;GAAE,UAAU,OAAO;GAAU,UAAU,OAAO;EAAS;EAChE,KAAK,OACH,OAAO;GAAE,OAAO,OAAO;GAAO,KAAK,OAAO;GAAK,OAAO,OAAO;EAAM;EACrE,KAAK,OACH,OAAO;GACL,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,QAAQ,OAAO;EACjB;CACJ;AACF;AAEA,SAAgB,OAAO,MAAiB,OAA2B;CACjE,OACE,KAAK,SAAS,MAAM,QACpB,KAAK,SAAS,MAAM,QACpB,KAAK,UAAU,KAAK,IAAI,CAAC,MAAM,KAAK,UAAU,KAAK,KAAK,CAAC;AAE7D;AAEA,SAAS,OAAO,OAAwB;CACtC,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,OACE,MAAM,WAAW,KACjB,MAAM,OACH,SAAS,YAAY,KAAK,IAAI,KAAK,OAAO,IAAI,KAAK,OAAO,OAAO,OAAO,IAAI,CAAC,MAAM,IACtF;AAEJ;AAEA,SAAS,OAAO,OAAwB;CACtC,IAAI;EACF,OAAO,IAAI,IAAI,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,WAAW,GAAG;CAC9D,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/effect-cloudflare.d.mts

@@ -1,2 +0,0 @@
-import { _ as Zone, b as make, c as auth_d_exports, f as Account, g as Options, h as ListZonesInput, m as Interface, p as Fetch, v as client_d_exports, y as discovery } from "./index-BHWRTThN.mjs";
-export { type Account, auth_d_exports as Auth, client_d_exports as Client, type Fetch, type Interface, type ListZonesInput, type Options, type Zone, discovery, make };

package/dist/effect-cloudflare.mjs

@@ -1,2 +0,0 @@
-import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-BR-19zj-.mjs";
-export { auth_exports as Auth, client_exports as Client, discovery, make };

package/dist/effect-vercel.d.mts

@@ -1,2 +0,0 @@
-import { _ as Zone, b as make, d as Account, f as AccountContext, g as Options, h as ListZonesInput, m as Interface, p as Fetch, s as auth_d_exports, v as client_d_exports, y as discovery } from "./index-D3PVknwE.mjs";
-export { type Account, type AccountContext, auth_d_exports as Auth, client_d_exports as Client, type Fetch, type Interface, type ListZonesInput, type Options, type Zone, discovery, make };

package/dist/effect-vercel.mjs

@@ -1,2 +0,0 @@
-import { c as client_exports, l as discovery, t as auth_exports, u as make } from "./auth-g-waCHcz.mjs";
-export { auth_exports as Auth, client_exports as Client, discovery, make };

package/dist/effect.d.mts

@@ -1,36 +0,0 @@
-import { A as lifecycle_repository_d_exports, At as Type, Bt as invalid_input_d_exports, J as authorization_d_exports, K as ProviderAuthorization, Lt as domain_name_d_exports, M as Connection, Mt as dns_record_d_exports, X as CryptoError, Z as canonical_json_d_exports, ht as provider_d_exports, i as zone_discovery_d_exports, j as AuthorizationError, lt as secret_d_exports, st as manifest_d_exports, w as provider_context_d_exports, zt as Error$1 } from "./zone-discovery-BPnH3sLU.mjs";
-import { t as index_d_exports } from "./index-BHWRTThN.mjs";
-import { t as connection_api_d_exports } from "./connection-api-DNuEZ_jR.mjs";
-import { t as index_d_exports$1 } from "./index-D3PVknwE.mjs";
-import { _ as selection_d_exports, a as verify_d_exports, d as google_doh_d_exports, g as zones_d_exports, h as doh_d_exports, l as resolver_pool_d_exports, p as cloudflare_doh_d_exports, v as diagnostic_d_exports } from "./verify-Dls29YC-.mjs";
-import { B as types_d_exports, N as DnsPlan, b as AuthorizeError, k as plan_d_exports, l as resolver_d_exports, v as deletion_d_exports } from "./resolver-Dc0hwV-J.mjs";
-import { Crypto, Effect } from "effect";
-declare namespace connection_authorization_d_exports {
-  export { Error, Requirements, authorize };
-}
-declare const authorize: (input: {
-  readonly allowPartial?: boolean;
-  readonly authorization: ProviderAuthorization;
-  readonly connection: Connection;
-  readonly domain: string;
-  readonly operationIds?: ReadonlyArray<string>;
-  readonly plan: DnsPlan;
-}) => Effect.Effect<{
-  allowPartial: boolean;
-  operationIds: string[];
-  planDigest: string;
-  version: "domainkit.plan-authorization.v1";
-}, AuthorizationError | Error$1 | AuthorizeError, Crypto.Crypto>;
-type Error = AuthorizationError | Error$1 | CryptoError;
-type Requirements = Crypto.Crypto;
-declare namespace dns_data_d_exports {
-  export { parse };
-}
-declare function parse(type: Type, input: unknown): string;
-//#endregion
-//#region src/effect.d.ts
-/** The current package version from the package manifest. */
-declare const VERSION: string;
-//#endregion
-export { lifecycle_repository_d_exports as AuthorizationLifecycle, index_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_api_d_exports as Connection, connection_authorization_d_exports as ConnectionAuthorization, deletion_d_exports as Deletion, diagnostic_d_exports as Diagnostic, canonical_json_d_exports as Digest, dns_data_d_exports as DnsData, doh_d_exports as DnsOverHttps, types_d_exports as DnsPlan, provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, resolver_d_exports as DnsResolver, resolver_pool_d_exports as DnsResolverPool, domain_name_d_exports as DomainName, google_doh_d_exports as GoogleDnsOverHttps, invalid_input_d_exports as InvalidInput, manifest_d_exports as ProviderAuth, authorization_d_exports as ProviderAuthorization, provider_context_d_exports as ProviderContext, selection_d_exports as ProviderDiscovery, plan_d_exports as Provisioning, secret_d_exports as Secret, VERSION, index_d_exports$1 as Vercel, verify_d_exports as Verification, zone_discovery_d_exports as ZoneDiscovery, zones_d_exports as Zones };
-//# sourceMappingURL=effect.d.mts.map

package/dist/effect.mjs

@@ -1,51 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { A as invalid_input_exports, C as provider_exports, D as domain_name_exports, N as lifecycle_repository_exports, g as dns_record_exports } from "./dns-record-BLeqo56C.mjs";
-import { _ as StartResult, b as start, d as provider_context_exports, g as Method, h as Error, m as secret_exports, o as authorization_exports, v as complete, y as extend } from "./authorization-OeaSR47S.mjs";
-import { d as make, l as client_exports, t as auth_exports, u as discovery } from "./auth-BR-19zj-.mjs";
-import { n as zones_exports } from "./zones-DKHTpX9C.mjs";
-import { a as authorizationError, c as validate, i as assertGrant, n as Grant, o as decode, r as Schema, s as encode, t as AuthorizationError } from "./connection-CjNQe_E-.mjs";
-import { t as canonical_json_exports } from "./canonical-json-CpvqGMcr.mjs";
-import { C as selection_exports, D as manifest_exports, O as diagnostic_exports, S as connection_authorization_exports, b as dns_data_exports, g as cloudflare_doh_exports, k as version, m as google_doh_exports, p as resolver_pool_exports, s as verify_exports, v as doh_exports } from "./verify-BKbvq7IN.mjs";
-import { C as plan_exports, L as zone_discovery_exports, N as types_exports, m as deletion_exports, r as resolver_exports } from "./resolver-CxE-VDw4.mjs";
-import { c as client_exports$1, l as discovery$1, t as auth_exports$1, u as make$1 } from "./auth-g-waCHcz.mjs";
-//#region src/providers/cloudflare/index.ts
-var cloudflare_exports = /* @__PURE__ */ __exportAll({
-	Auth: () => auth_exports,
-	Client: () => client_exports,
-	discovery: () => discovery,
-	make: () => make
-});
-//#endregion
-//#region src/auth/connection-api.ts
-var connection_api_exports = /* @__PURE__ */ __exportAll({
-	AuthorizationError: () => AuthorizationError,
-	Error: () => Error,
-	Grant: () => Grant,
-	Method: () => Method,
-	Schema: () => Schema,
-	StartResult: () => StartResult,
-	assertGrant: () => assertGrant,
-	authorizationError: () => authorizationError,
-	complete: () => complete,
-	decode: () => decode,
-	encode: () => encode,
-	extend: () => extend,
-	start: () => start,
-	validate: () => validate
-});
-//#endregion
-//#region src/providers/vercel/index.ts
-var vercel_exports = /* @__PURE__ */ __exportAll({
-	Auth: () => auth_exports$1,
-	Client: () => client_exports$1,
-	discovery: () => discovery$1,
-	make: () => make$1
-});
-//#endregion
-//#region src/effect.ts
-/** The current package version from the package manifest. */
-const VERSION = version;
-//#endregion
-export { lifecycle_repository_exports as AuthorizationLifecycle, cloudflare_exports as Cloudflare, cloudflare_doh_exports as CloudflareDnsOverHttps, connection_api_exports as Connection, connection_authorization_exports as ConnectionAuthorization, deletion_exports as Deletion, diagnostic_exports as Diagnostic, canonical_json_exports as Digest, dns_data_exports as DnsData, doh_exports as DnsOverHttps, types_exports as DnsPlan, provider_exports as DnsProvider, dns_record_exports as DnsRecord, resolver_exports as DnsResolver, resolver_pool_exports as DnsResolverPool, domain_name_exports as DomainName, google_doh_exports as GoogleDnsOverHttps, invalid_input_exports as InvalidInput, manifest_exports as ProviderAuth, authorization_exports as ProviderAuthorization, provider_context_exports as ProviderContext, selection_exports as ProviderDiscovery, plan_exports as Provisioning, secret_exports as Secret, VERSION, vercel_exports as Vercel, verify_exports as Verification, zone_discovery_exports as ZoneDiscovery, zones_exports as Zones };
-
-//# sourceMappingURL=effect.mjs.map

package/dist/effect.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"effect.mjs","names":["packageJson.version"],"sources":["../src/providers/cloudflare/index.ts","../src/auth/connection-api.ts","../src/providers/vercel/index.ts","../src/effect.ts"],"sourcesContent":["export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export {\n  assertGrant,\n  authorizationError,\n  AuthorizationError,\n  decode,\n  encode,\n  Grant,\n  Schema,\n  validate,\n} from \"./connection.ts\";\nexport type { Connection, StoredCredential } from \"./connection.ts\";\nexport { complete, Error, extend, Method, start, StartResult } from \"./connect.ts\";\nexport type {\n  Authentication,\n  AuthenticationFailure,\n  BaseInput,\n  CompleteInput,\n  Continuation,\n  ContinuationStore,\n  Failure,\n  InteractiveFlow,\n  InteractiveStart,\n  ExtendInput,\n  Method as ConnectionMethod,\n  Requirements,\n  StartResult as ConnectionStartResult,\n} from \"./connect.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection-api.ts\";\nexport * as AuthorizationLifecycle from \"./auth/lifecycle-repository.ts\";\nexport * as Diagnostic from \"./auth/diagnostic.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as ProviderContext from \"./auth/provider-context.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as ZoneDiscovery from \"./discovery/zone-discovery.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as GoogleDnsOverHttps from \"./verification/google-doh.ts\";\nexport * as DnsResolverPool from \"./verification/resolver-pool.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGGA,MAAa,UAAUA"}

package/dist/index-BHWRTThN.d.mts

@@ -1,159 +0,0 @@
-import { C as Envelope, Ft as DomainName, S as Codec, ct as Value, et as Manifest, ft as Error, g as Method, it as OAuthSubjectResolver, m as InteractiveFlow, nt as OAuthClientConfiguration, ot as TokenValidation, pt as Interface$1, r as Source, rt as OAuthMethod, zt as Error$1 } from "./zone-discovery-BPnH3sLU.mjs";
-import { Effect, Schema } from "effect";
-import * as oauth from "oauth4webapi";
-//#region src/providers/cloudflare/protocol.d.ts
-declare const Account$1: Schema.Struct<{
-  readonly id: Schema.String;
-  readonly name: Schema.String;
-}>;
-interface Account$1 extends Schema.Schema.Type<typeof Account$1> {}
-declare namespace client_d_exports {
-  export { Account, Fetch, Interface, ListZonesInput, Options, Zone, discoverAuthorizationAccount, discovery, make, validateDomainToken };
-}
-type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-/** Configuration for an Effect-native Cloudflare authoritative-DNS client. */
-interface Options {
-  readonly accountId: string;
-  readonly baseUrl?: string;
-  /** Capabilities the host required when issuing or authorizing this credential. */
-  readonly capabilities: TokenValidation["capabilities"];
-  readonly fetch?: Fetch;
-  readonly token: Value;
-  readonly tokenKind?: "account" | "user";
-}
-interface ListZonesInput {
-  readonly accountId?: string;
-  readonly name?: DomainName;
-}
-type Account = Account$1;
-/** A portable Cloudflare authoritative zone with normalized nameserver evidence. */
-interface Zone {
-  readonly accountId: string;
-  readonly id: string;
-  readonly name: DomainName;
-  readonly nameservers: ReadonlyArray<DomainName>;
-  readonly status: string | null;
-}
-interface Interface extends Interface$1 {
-  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account>, Error>;
-  readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
-  readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
-}
-/** Exposes Cloudflare zone lookup as the optional provider discovery capability. */
-declare function discovery(client: Interface): Source;
-interface CredentialOptions$1 {
-  readonly baseUrl?: string;
-  readonly fetch?: Fetch;
-  readonly token: Value;
-}
-interface DomainCredentialOptions extends CredentialOptions$1 {
-  readonly capabilities: TokenValidation["capabilities"];
-  readonly domain: DomainName;
-  readonly tokenKind?: "account" | "user";
-}
-declare const discoverAuthorizationAccount: (options: CredentialOptions$1 & {
-  readonly domain: DomainName;
-}) => Effect.Effect<{
-  readonly id: string;
-  readonly name: string;
-}, Error, never>;
-declare const validateDomainToken: (options: DomainCredentialOptions) => Effect.Effect<{
-  accountId: string;
-  capabilities: readonly ("dns:read" | "dns:write")[];
-  expiresAt: Date | null;
-  scopes: never[];
-}, Error, never>;
-/** Creates an Effect-native Cloudflare client without owning the credential lifecycle. */
-declare function make(options: Options): Interface;
-declare namespace auth_d_exports {
-  export { Context$1 as Context, CredentialTarget, OAuthFlowOptions, OAuthMethodOptions, SubjectResolverOptions, TokenConnectionOptions, TokenValidatorOptions, contextCodec, manifest, oauthAuthentication, oauthFlow, oauthMethod, subjectResolver, tokenConnectionMethod, tokenMethod, tokenValidator };
-}
-declare const Context$1: Schema.Struct<{
-  readonly tokenKind: Schema.Literals<readonly ["account", "user"]>;
-}>;
-type Context$1 = typeof Context$1.Type;
-declare const contextCodec: Codec<{
-  readonly tokenKind: "account" | "user";
-}>;
-/** Describes Cloudflare's caller-created API-token authorization method. */
-declare function tokenMethod(capabilities: TokenValidation["capabilities"]): Extract<Manifest["methods"][number], {
-  readonly _tag: "token";
-}>;
-interface OAuthMethodOptions {
-  /** Scope IDs assigned to the OAuth client by Cloudflare. */
-  readonly scopes: ReadonlyArray<string>;
-  /** Capabilities represented by those assigned scope IDs. */
-  readonly capabilities: TokenValidation["capabilities"];
-  readonly clientAuth: OAuthMethod["clientAuth"];
-}
-/** Describes a registered Cloudflare OAuth client and its assigned scope IDs. */
-declare function oauthMethod(options: OAuthMethodOptions): OAuthMethod;
-/** Creates the Cloudflare token and OAuth authorization manifest. */
-declare function manifest(options: OAuthMethodOptions): Manifest;
-type CredentialOptions = Omit<Options, "accountId" | "token" | "tokenKind">;
-/** Selects an explicit Cloudflare account or discovers it from an authorized domain. */
-type CredentialTarget = {
-  readonly accountId: string;
-  readonly domain?: never;
-} | {
-  readonly accountId?: never;
-  readonly domain: DomainName;
-};
-type SubjectResolverOptions = CredentialOptions & CredentialTarget;
-/** Configuration for validating a Cloudflare token against an account or authorized domain. */
-type TokenValidatorOptions = CredentialOptions & ({
-  readonly accountId: string;
-  readonly domain?: never;
-  readonly tokenKind?: "account" | "user";
-} | {
-  readonly accountId?: never;
-  readonly domain: DomainName;
-  readonly tokenKind?: "account" | "user";
-});
-/** Resolves the Cloudflare account selected by a completed OAuth grant. */
-declare function subjectResolver(options: SubjectResolverOptions): OAuthSubjectResolver;
-/** Creates a host callback that validates a Cloudflare API token. */
-declare function tokenValidator(options: TokenValidatorOptions): (token: Value) => ReturnType<Interface["validateToken"]>;
-type TokenConnectionOptions = TokenValidatorOptions & {
-  readonly token: Value;
-};
-/** Creates a provider-independent token connection method backed by Cloudflare validation. */
-declare function tokenConnectionMethod(options: TokenConnectionOptions): Extract<Method, {
-  readonly _tag: "Token";
-}>;
-/** Converts a completed Cloudflare OAuth grant into the canonical connection authentication. */
-declare const oauthAuthentication: (options: SubjectResolverOptions & {
-  readonly accessToken: Value;
-  readonly tokens: oauth.TokenEndpointResponse;
-}) => Effect.Effect<{
-  capabilityEvidence: {
-    capability: "dns:read" | "dns:write";
-    evidence: {
-      readonly _tag: "Introspected";
-      readonly observedAt: Date;
-    };
-  }[];
-  credential: {
-    accessToken: Value;
-    refreshToken: Value | null;
-    tokenType: Lowercase<string>;
-  };
-  expiresAt: Date | null;
-  providerAccountId: string;
-  providerContext: Envelope;
-  scopes: string[];
-}, Error$1 | Error, never>;
-type OAuthFlowOptions = SubjectResolverOptions & {
-  readonly client: OAuthClientConfiguration;
-  readonly clientAuth: OAuthMethod["clientAuth"];
-  readonly redirectUri: string;
-  readonly scopes: ReadonlyArray<string>;
-};
-/** Creates Cloudflare's OAuth implementation of the common interactive connection capability. */
-declare function oauthFlow(options: OAuthFlowOptions): InteractiveFlow;
-declare namespace index_d_exports {
-  export { Account, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
-}
-//#endregion
-export { Zone as _, SubjectResolverOptions as a, make as b, auth_d_exports as c, tokenMethod as d, Account as f, Options as g, ListZonesInput as h, OAuthMethodOptions as i, manifest as l, Interface as m, CredentialTarget as n, TokenConnectionOptions as o, Fetch as p, OAuthFlowOptions as r, TokenValidatorOptions as s, index_d_exports as t, oauthMethod as u, client_d_exports as v, discovery as y };
-//# sourceMappingURL=index-BHWRTThN.d.mts.map