domainkit 0.2.2 → 0.3.0

package/dist/index-D3PVknwE.d.mts

@@ -1,145 +0,0 @@
-import { $ as IntegrationMethod, C as Envelope, Ft as DomainName, H as Capability, S as Codec, ct as Value, et as Manifest, ft as Error, g as Method, m as InteractiveFlow, ot as TokenValidation, pt as Interface$1, r as Source, zt as Error$1 } from "./zone-discovery-BPnH3sLU.mjs";
-import { Effect, Schema } from "effect";
-declare namespace client_d_exports {
-  export { Account, AccountContext, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
-}
-type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-/** Selects whether Vercel requests operate on a personal account or a team. */
-type AccountContext = {
-  readonly _tag: "personal";
-} | {
-  readonly _tag: "team";
-  readonly teamId: string;
-};
-/** Configuration for an Effect-native Vercel authoritative-DNS client. */
-interface Options {
-  readonly baseUrl?: string;
-  /** Capabilities the host required when issuing or authorizing this credential. */
-  readonly capabilities: TokenValidation["capabilities"];
-  readonly context: AccountContext;
-  readonly fetch?: Fetch;
-  readonly token: Value;
-}
-interface ListZonesInput {
-  readonly name?: DomainName;
-}
-/** A Vercel account visible to the supplied credential. */
-interface Account {
-  readonly id: string;
-  readonly name: string;
-  readonly type: "personal" | "team";
-}
-/** A Vercel-managed authoritative zone with normalized nameserver evidence. */
-interface Zone {
-  readonly accountId: string;
-  readonly id: string;
-  readonly name: DomainName;
-  readonly nameservers: ReadonlyArray<DomainName>;
-  readonly status: "active" | "pending";
-}
-interface Interface extends Interface$1 {
-  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account>, Error>;
-  readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
-  readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
-}
-/** Exposes Vercel zone lookup as the optional provider discovery capability. */
-declare function discovery(client: Interface): Source;
-/** Creates an Effect-native Vercel client without owning the credential lifecycle. */
-declare function make(options: Options): Interface;
-declare namespace auth_d_exports {
-  export { Context$1 as Context, ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, TokenConnectionOptions, contextCodec, exchangeCode, integrationAuthentication, integrationFlow, integrationMethod, manifest, tokenConnectionMethod, tokenMethod };
-}
-declare const Context$1: Schema.TaggedUnion<{
-  readonly personal: Schema.TaggedStruct<"personal", {
-    readonly installationId: Schema.NullOr<Schema.String>;
-  }>;
-  readonly team: Schema.TaggedStruct<"team", {
-    readonly installationId: Schema.NullOr<Schema.String>;
-    readonly teamId: Schema.String;
-  }>;
-}>;
-type Context$1 = typeof Context$1.Type;
-declare const contextCodec: Codec<{
-  readonly _tag: "personal";
-  readonly installationId: string | null;
-} | {
-  readonly _tag: "team";
-  readonly installationId: string | null;
-  readonly teamId: string;
-}>;
-/** Describes Vercel's caller-created personal access-token method. */
-declare function tokenMethod(capabilities: TokenValidation["capabilities"]): Extract<Manifest["methods"][number], {
-  readonly _tag: "token";
-}>;
-interface IntegrationMethodOptions {
-  readonly capabilities: TokenValidation["capabilities"];
-  readonly slug: string;
-}
-/** Describes Vercel's provider-specific integration installation flow. */
-declare function integrationMethod(options: IntegrationMethodOptions): IntegrationMethod;
-/** Creates the Vercel token and integration authorization manifest. */
-declare function manifest(options: IntegrationMethodOptions): Manifest;
-interface ExchangeCodeOptions {
-  readonly baseUrl?: string;
-  readonly clientId: string;
-  readonly clientSecret: Value;
-  readonly code: Value;
-  readonly fetch?: Fetch;
-  readonly redirectUri: string;
-}
-interface IntegrationCredential {
-  readonly accessToken: Value;
-  readonly context: AccountContext;
-  readonly installationId: string | null;
-  readonly userId: string;
-}
-/** Exchanges Vercel's one-time integration code and preserves its account context. */
-declare const exchangeCode: (options: ExchangeCodeOptions) => Effect.Effect<{
-  accessToken: Value;
-  context: {
-    readonly _tag: "personal";
-    readonly teamId?: never;
-  } | {
-    readonly _tag: "team";
-    readonly teamId: string;
-  };
-  installationId: string | null;
-  userId: string;
-}, Error, never>;
-interface TokenConnectionOptions extends Omit<Options, "token"> {
-  readonly token: Value;
-}
-/** Creates a provider-independent token connection method backed by Vercel validation. */
-declare function tokenConnectionMethod(options: TokenConnectionOptions): Extract<Method, {
-  readonly _tag: "Token";
-}>;
-/** Converts a completed Vercel Integration exchange into canonical connection authentication. */
-declare const integrationAuthentication: (options: ExchangeCodeOptions & {
-  readonly capabilities: ReadonlyArray<Capability>;
-}) => Effect.Effect<{
-  capabilityEvidence: {
-    capability: "dns:read" | "dns:write";
-    evidence: {
-      readonly _tag: "Introspected";
-      readonly observedAt: Date;
-    };
-  }[];
-  credential: {
-    accessToken: Value;
-    refreshToken: null;
-    tokenType: string;
-  };
-  expiresAt: null;
-  providerAccountId: string;
-  providerContext: Envelope;
-  scopes: never[];
-}, Error$1 | Error, never>;
-interface IntegrationFlowOptions extends Omit<ExchangeCodeOptions, "code">, IntegrationMethodOptions {}
-/** Creates Vercel Integration's implementation of the common interactive connection capability. */
-declare function integrationFlow(options: IntegrationFlowOptions): InteractiveFlow;
-declare namespace index_d_exports {
-  export { Account, AccountContext, auth_d_exports as Auth, client_d_exports as Client, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
-}
-//#endregion
-export { Zone as _, IntegrationMethodOptions as a, make as b, integrationMethod as c, Account as d, AccountContext as f, Options as g, ListZonesInput as h, IntegrationFlowOptions as i, manifest as l, Interface as m, ExchangeCodeOptions as n, TokenConnectionOptions as o, Fetch as p, IntegrationCredential as r, auth_d_exports as s, index_d_exports as t, tokenMethod as u, client_d_exports as v, discovery as y };
-//# sourceMappingURL=index-D3PVknwE.d.mts.map

package/dist/resolver-CxE-VDw4.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolver-CxE-VDw4.mjs","names":["Domain.Schema","Service","Zones.candidates","Operation","S","DnsRecord.Schema","DnsRecord.Observed","Schema","DomainName.Schema","Authorization","Receipt","InvalidInputError","UnsignedPlan","S","DnsPlan.Operation","DomainName.Schema","DnsRecord.Schema","DnsPlan.Receipt","create","DnsProvider.Service","DomainName.decode","ZoneDiscovery.Service","DnsRecord.decode","authorize","validate","apply","makeReceipt","data","DnsRecord.data","DnsRecord.equals","DnsRecord.Observed","S","DnsRecord.Schema","DomainName.Schema","Error","DnsProvider.Service","Provisioning.validate","DnsRecord.equals","DomainName.Schema","DnsRecord.Type"],"sources":["../src/discovery/zone-discovery.ts","../src/plan/types.ts","../src/plan/plan.ts","../src/plan/deletion.ts","../src/verification/resolver.ts"],"sourcesContent":["import { Context, Data, Effect, Schema } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport * as Domain from \"../domain/domain-name.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as Zones from \"./zones.ts\";\n\n/** Display-safe identity and nameserver evidence for one provider-owned zone. */\nexport const Candidate = Schema.Struct({\n  accountId: Schema.String,\n  id: Schema.String,\n  name: Domain.Schema,\n  nameservers: Schema.Array(Domain.Schema),\n  providerId: Schema.String,\n  status: Schema.Literals([\"active\", \"pending\", \"unknown\"]),\n});\nexport interface Candidate extends Schema.Schema.Type<typeof Candidate> {}\n\nexport interface Source {\n  readonly listZones: (\n    name: DomainName.DomainName,\n  ) => Effect.Effect<ReadonlyArray<Omit<Candidate, \"providerId\">>, DnsProvider.Error>;\n  readonly provider: DnsProvider.Interface;\n}\n\nexport type Outcome = Data.TaggedEnum<{\n  NotFound: { readonly domain: DomainName.DomainName };\n  Resolved: { readonly candidate: Candidate; readonly provider: DnsProvider.Interface };\n  SelectionRequired: { readonly candidates: ReadonlyArray<Candidate> };\n}>;\nexport const Outcome = Data.taggedEnum<Outcome>();\n\nexport interface Interface {\n  readonly discover: (domain: DomainName.DomainName) => Effect.Effect<Outcome, DnsProvider.Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/ZoneDiscovery\") {}\n\n/** Compose provider-account discovery sources without expanding the record-provider contract. */\nexport function make(sources: ReadonlyArray<Source>): Interface {\n  return Service.of({\n    discover: Effect.fn(\"ZoneDiscovery.discover\")(function* (domain) {\n      for (const name of Zones.candidates(domain)) {\n        const matches = deduplicate(\n          (yield* Effect.forEach(\n            sources,\n            (source) =>\n              source.listZones(name).pipe(\n                Effect.map((zones) =>\n                  zones\n                    .filter((zone) => zone.name === name)\n                    .map((zone) => ({\n                      candidate: { ...zone, providerId: source.provider.id },\n                      provider: source.provider,\n                    })),\n                ),\n              ),\n            { concurrency: \"unbounded\" },\n          )).flat(),\n        );\n        const match = matches[0];\n        if (matches.length === 1 && match !== undefined) {\n          return Outcome.Resolved(match);\n        }\n        if (matches.length > 1) {\n          return Outcome.SelectionRequired({\n            candidates: matches.map(({ candidate }) => candidate),\n          });\n        }\n      }\n      return Outcome.NotFound({ domain });\n    }),\n  });\n}\n\nfunction deduplicate(\n  matches: ReadonlyArray<{\n    readonly candidate: Candidate;\n    readonly provider: DnsProvider.Interface;\n  }>,\n): ReadonlyArray<{\n  readonly candidate: Candidate;\n  readonly provider: DnsProvider.Interface;\n}> {\n  const unique = new Map<string, (typeof matches)[number]>();\n  for (const match of matches) {\n    const key = [\n      match.candidate.providerId,\n      match.candidate.accountId,\n      match.candidate.id,\n      match.candidate.name,\n    ].join(\":\");\n    const existing = unique.get(key);\n    if (existing === undefined) unique.set(key, match);\n  }\n  return [...unique.values()].sort((left, right) =>\n    candidateKey(left.candidate).localeCompare(candidateKey(right.candidate)),\n  );\n}\n\nfunction candidateKey(candidate: Candidate): string {\n  return [candidate.name, candidate.providerId, candidate.accountId, candidate.id].join(\":\");\n}\n","import { Effect, Schema as S } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\n\nexport const Operation = S.TaggedUnion({\n  create: {\n    id: S.String,\n    requirement: DnsRecord.Schema,\n  },\n  noop: {\n    id: S.String,\n    requirement: DnsRecord.Schema,\n    ttlDrift: S.Boolean,\n  },\n  conflict: {\n    existing: S.Array(DnsRecord.Observed),\n    id: S.String,\n    reason: S.String,\n    requirement: DnsRecord.Schema,\n  },\n});\nexport type Operation = typeof Operation.Type;\n\nexport const Schema = S.Struct({\n  digest: S.String,\n  operations: S.Array(Operation),\n  providerId: S.String,\n  version: S.Literal(\"domainkit.dns-plan.v1\"),\n  zone: DomainName.Schema,\n});\nexport interface DnsPlan extends S.Schema.Type<typeof Schema> {}\n\nexport const Authorization = S.Struct({\n  allowPartial: S.Boolean,\n  operationIds: S.Array(S.String),\n  planDigest: S.String,\n  version: S.Literal(\"domainkit.plan-authorization.v1\"),\n});\nexport interface PlanAuthorization extends S.Schema.Type<typeof Authorization> {}\n\nexport const Receipt = S.Struct({\n  appliedAt: S.DateFromString,\n  operations: S.Array(\n    S.Struct({\n      operationId: S.String,\n      providerRecordId: S.NullOr(S.String),\n    }),\n  ),\n  planDigest: S.String,\n  providerId: S.String,\n  status: S.Literals([\"complete\", \"partial\"]),\n  version: S.Literal(\"domainkit.apply-receipt.v1\"),\n  zone: DomainName.Schema,\n});\nexport interface ApplyReceipt extends S.Schema.Type<typeof Receipt> {}\n\nexport const decode = Effect.fn(\"DnsPlan.decode\")((input: unknown) =>\n  S.decodeUnknownEffect(Schema)(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\n\nexport const encode = S.encodeSync(Schema);\nexport const decodeReceipt = Effect.fn(\"DnsPlan.decodeReceipt\")((input: unknown) =>\n  S.decodeUnknownEffect(Receipt)(input).pipe(\n    Effect.mapError((cause) => new InvalidInputError({ message: cause.message })),\n  ),\n);\nexport const encodeReceipt = S.encodeSync(Receipt);\n","import { Cause, Clock, Crypto, Data, Effect, Schema as S } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as ZoneDiscovery from \"../discovery/zone-discovery.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport { CryptoError, sha256Encoded, stringify } from \"./canonical-json.ts\";\nimport * as DnsPlan from \"./types.ts\";\n\nconst UnsignedPlan = S.Struct({\n  operations: S.Array(DnsPlan.Operation),\n  providerId: S.String,\n  version: S.Literal(\"domainkit.dns-plan.v1\"),\n  zone: DomainName.Schema,\n});\n\nconst RequirementDigest = S.Struct({ requirement: DnsRecord.Schema });\n\nexport class ConflictError extends S.TaggedError<ConflictError>()(\"PlanConflictError\", {\n  operationIds: S.Array(S.String),\n}) {}\n\nexport class AuthorizationError extends S.TaggedError<AuthorizationError>()(\"AuthorizationError\", {\n  message: S.String,\n}) {}\n\nexport class StaleError extends S.TaggedError<StaleError>()(\"StalePlanError\", {\n  approvedPlanDigest: S.String,\n  currentPlanDigest: S.String,\n}) {}\n\nexport class PartialApplyError extends S.TaggedError<PartialApplyError>()(\"PartialApplyError\", {\n  causeTag: S.Literals([\n    \"CryptoError\",\n    \"InvalidInputError\",\n    \"Interrupted\",\n    \"ProviderError\",\n    \"StalePlanError\",\n  ]),\n  failedOperationId: S.String,\n  message: S.String,\n  receipt: DnsPlan.Receipt,\n}) {}\n\nexport type Target = Data.TaggedEnum<{\n  DiscoverFromDomain: { readonly domain: string };\n  ExactZone: { readonly zone: string };\n}>;\nexport const Target = Data.taggedEnum<Target>();\n\nexport type CreateResult = Data.TaggedEnum<{\n  NotFound: { readonly domain: DomainName.DomainName };\n  Resolved: {\n    readonly candidate: ZoneDiscovery.Candidate | null;\n    readonly plan: DnsPlan.DnsPlan;\n  };\n  SelectionRequired: { readonly candidates: ReadonlyArray<ZoneDiscovery.Candidate> };\n}>;\nexport const CreateResult = Data.taggedEnum<CreateResult>();\nexport type ResolvedCreateResult = Extract<CreateResult, { readonly _tag: \"Resolved\" }>;\n\nexport interface CreateInput {\n  readonly requirements: ReadonlyArray<DnsRecord.Encoded | DnsRecord.DnsRecord>;\n  readonly target: Target;\n}\nexport type ExactCreateInput = Omit<CreateInput, \"target\"> & {\n  readonly target: Extract<Target, { readonly _tag: \"ExactZone\" }>;\n};\nexport type DiscoverCreateInput = Omit<CreateInput, \"target\"> & {\n  readonly target: Extract<Target, { readonly _tag: \"DiscoverFromDomain\" }>;\n};\n\nexport interface ApplyInput {\n  readonly authorization: DnsPlan.PlanAuthorization;\n  readonly plan: DnsPlan.DnsPlan;\n}\n\nexport type CreateError = InvalidInputError | DnsProvider.Error | CryptoError;\nexport type AuthorizeError = AuthorizationError | CryptoError;\nexport type ApplyError =\n  | InvalidInputError\n  | DnsProvider.Error\n  | CryptoError\n  | AuthorizationError\n  | ConflictError\n  | StaleError\n  | PartialApplyError;\n\n/** Builds a deterministic DNS plan through an exact or discoverable authoritative-zone target. */\nexport function create(\n  input: ExactCreateInput,\n): Effect.Effect<ResolvedCreateResult, CreateError, Crypto.Crypto | DnsProvider.Service>;\nexport function create(\n  input: DiscoverCreateInput,\n): Effect.Effect<CreateResult, CreateError, Crypto.Crypto | ZoneDiscovery.Service>;\nexport function create(\n  input: CreateInput,\n): Effect.Effect<\n  CreateResult,\n  CreateError,\n  Crypto.Crypto | DnsProvider.Service | ZoneDiscovery.Service\n> {\n  const target = input.target;\n  if (target._tag === \"ExactZone\") {\n    return Effect.gen(function* () {\n      const provider = yield* DnsProvider.Service;\n      const zone = yield* DomainName.decode(target.zone);\n      return CreateResult.Resolved({\n        candidate: null,\n        plan: yield* planAgainst(provider, zone, input.requirements),\n      });\n    }).pipe(Effect.withSpan(\"Provisioning.create\"));\n  }\n  return Effect.gen(function* () {\n    const discovery = yield* ZoneDiscovery.Service;\n    const domain = yield* DomainName.decode(target.domain);\n    const outcome = yield* discovery.discover(domain);\n    switch (outcome._tag) {\n      case \"NotFound\":\n        return CreateResult.NotFound({ domain: outcome.domain });\n      case \"SelectionRequired\":\n        return CreateResult.SelectionRequired({ candidates: outcome.candidates });\n      case \"Resolved\":\n        return CreateResult.Resolved({\n          candidate: outcome.candidate,\n          plan: yield* planAgainst(outcome.provider, outcome.candidate.name, input.requirements),\n        });\n    }\n  }).pipe(Effect.withSpan(\"Provisioning.create\"));\n}\n\nconst planAgainst = Effect.fn(\"Provisioning.planAgainst\")(function* (\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  inputs: ReadonlyArray<DnsRecord.Encoded | DnsRecord.DnsRecord>,\n) {\n  const requirements = (yield* Effect.forEach(inputs, DnsRecord.decode, {\n    concurrency: \"unbounded\",\n  })).sort(compareRecords);\n  const existing = [...(yield* provider.listRecords(zone))].sort(compareRecords);\n  const { operations } = yield* Effect.reduce(\n    requirements,\n    (): PlanningState => ({ operations: [], projected: existing }),\n    (state, requirement) =>\n      reconcileRequirement(requirement, state.projected).pipe(\n        Effect.map((operation) => ({\n          operations: [...state.operations, operation],\n          projected:\n            operation._tag === \"create\"\n              ? [...state.projected, operation.requirement].sort(compareRecords)\n              : state.projected,\n        })),\n      ),\n  );\n  const unsigned: S.Schema.Type<typeof UnsignedPlan> = {\n    operations,\n    providerId: provider.id,\n    version: \"domainkit.dns-plan.v1\",\n    zone,\n  };\n  return { ...unsigned, digest: yield* sha256Encoded(UnsignedPlan, unsigned) };\n});\n\ninterface PlanningState {\n  readonly operations: ReadonlyArray<DnsPlan.Operation>;\n  readonly projected: ReadonlyArray<DnsRecord.Observed>;\n}\n\n/** Authorizes all or a selected subset of create operations in a digest-bound plan. */\nexport const authorize = Effect.fn(\"Provisioning.authorize\")(function* (\n  plan: DnsPlan.DnsPlan,\n  operationIds?: ReadonlyArray<string>,\n  options: { readonly allowPartial?: boolean } = {},\n) {\n  yield* validate(plan);\n  const createIds = plan.operations\n    .filter((operation) => operation._tag === \"create\")\n    .map(({ id }) => id);\n  const selected = [...new Set(operationIds ?? createIds)].sort();\n  const unknown = selected.filter((id) => !createIds.includes(id));\n  if (unknown.length > 0) {\n    return yield* new AuthorizationError({\n      message: `Unknown operation IDs: ${unknown.join(\", \")}`,\n    });\n  }\n  if (!options.allowPartial && selected.length !== createIds.length) {\n    return yield* new AuthorizationError({\n      message: \"Partial authorization requires allowPartial\",\n    });\n  }\n  return {\n    allowPartial: options.allowPartial ?? false,\n    operationIds: selected,\n    planDigest: plan.digest,\n    version: \"domainkit.plan-authorization.v1\" as const,\n  };\n});\n\n/** Applies approved creates sequentially after full and per-operation revalidation. */\nexport const apply = Effect.fn(\"Provisioning.apply\")(function* (input: ApplyInput) {\n  const { authorization, plan } = input;\n  const provider = yield* DnsProvider.Service;\n  yield* validate(plan);\n  if (authorization.planDigest !== plan.digest) {\n    return yield* new AuthorizationError({\n      message: \"Authorization belongs to a different plan\",\n    });\n  }\n  if (provider.id !== plan.providerId) {\n    return yield* new AuthorizationError({\n      message: \"Provider does not match the approved plan\",\n    });\n  }\n  const conflicts = plan.operations.filter((operation) => operation._tag === \"conflict\");\n  if (conflicts.length > 0) {\n    return yield* new ConflictError({\n      operationIds: conflicts.map(({ id }) => id),\n    });\n  }\n\n  const creates = plan.operations.filter(DnsPlan.Operation.guards.create);\n  const approved = new Set(authorization.operationIds);\n  const unknown = authorization.operationIds.filter(\n    (id) => !creates.some((operation) => operation.id === id),\n  );\n  if (unknown.length > 0) {\n    return yield* new AuthorizationError({\n      message: `Authorization contains unknown operations: ${unknown.join(\", \")}`,\n    });\n  }\n  if (!authorization.allowPartial && creates.some(({ id }) => !approved.has(id))) {\n    return yield* new AuthorizationError({\n      message: \"Authorization does not cover every create operation\",\n    });\n  }\n\n  const currentPlan = yield* planAgainst(\n    provider,\n    plan.zone,\n    plan.operations.map(({ requirement }) => requirement),\n  );\n  if (currentPlan.digest !== plan.digest) {\n    return yield* new StaleError({\n      approvedPlanDigest: plan.digest,\n      currentPlanDigest: currentPlan.digest,\n    });\n  }\n\n  const operations: Array<{\n    operationId: string;\n    providerRecordId: string | null;\n  }> = [];\n  for (const operation of creates) {\n    if (!approved.has(operation.id)) continue;\n    yield* Effect.gen(function* () {\n      yield* assertStillCreatable(plan, operation);\n      const result = yield* provider.createRecord(plan.zone, operation.requirement);\n      operations.push({\n        operationId: operation.id,\n        providerRecordId: result.providerRecordId,\n      });\n    }).pipe(\n      Effect.catch((failure): Effect.Effect<never, CreateError | StaleError | PartialApplyError> =>\n        operations.length === 0\n          ? Effect.fail(failure)\n          : makeReceipt(input, operations, \"partial\").pipe(\n              Effect.flatMap((receipt) =>\n                Effect.fail(\n                  new PartialApplyError({\n                    causeTag: failure._tag,\n                    failedOperationId: operation.id,\n                    message: failureMessage(failure),\n                    receipt,\n                  }),\n                ),\n              ),\n            ),\n      ),\n      Effect.catchCause((cause) => {\n        if (!Cause.hasInterruptsOnly(cause) || operations.length === 0) {\n          return Effect.failCause(cause);\n        }\n        return makeReceipt(input, operations, \"partial\").pipe(\n          Effect.flatMap((receipt) =>\n            Effect.fail(\n              new PartialApplyError({\n                causeTag: \"Interrupted\",\n                failedOperationId: operation.id,\n                message: \"DNS apply was interrupted after confirmed writes\",\n                receipt,\n              }),\n            ),\n          ),\n        );\n      }),\n    );\n  }\n  return yield* makeReceipt(input, operations, \"complete\");\n});\n\nexport function renderManualInstructions(plan: DnsPlan.DnsPlan): ReadonlyArray<string> {\n  return plan.operations.map((operation) => {\n    const record = operation.requirement;\n    const data = Object.entries(DnsRecord.data(record))\n      .map(([key, value]) => `${key}=${value}`)\n      .join(\" \");\n    return `${operation._tag.toUpperCase()} ${record._tag} ${record.name} ${data}`.trim();\n  });\n}\n\nfunction makeReceipt(\n  input: ApplyInput,\n  operations: ReadonlyArray<{\n    readonly operationId: string;\n    readonly providerRecordId: string | null;\n  }>,\n  status: \"complete\" | \"partial\",\n): Effect.Effect<DnsPlan.ApplyReceipt> {\n  return Clock.currentTimeMillis.pipe(\n    Effect.map((now) => ({\n      appliedAt: new Date(now),\n      operations,\n      planDigest: input.plan.digest,\n      providerId: input.plan.providerId,\n      status,\n      version: \"domainkit.apply-receipt.v1\" as const,\n      zone: input.plan.zone,\n    })),\n  );\n}\n\nfunction assertStillCreatable(\n  plan: DnsPlan.DnsPlan,\n  operation: Extract<DnsPlan.Operation, { readonly _tag: \"create\" }>,\n): Effect.Effect<void, CreateError | StaleError, DnsProvider.Service | Crypto.Crypto> {\n  return DnsProvider.Service.pipe(\n    Effect.flatMap((provider) => planAgainst(provider, plan.zone, [operation.requirement])),\n    Effect.flatMap((currentPlan) => {\n      const currentOperation = currentPlan.operations[0];\n      return currentOperation?._tag === \"create\" && currentOperation.id === operation.id\n        ? Effect.void\n        : Effect.fail(\n            new StaleError({\n              approvedPlanDigest: plan.digest,\n              currentPlanDigest: currentPlan.digest,\n            }),\n          );\n    }),\n  );\n}\n\nfunction reconcileRequirement(\n  requirement: DnsRecord.DnsRecord,\n  allExisting: ReadonlyArray<DnsRecord.Observed>,\n): Effect.Effect<DnsPlan.Operation, CryptoError, Crypto.Crypto> {\n  return Effect.gen(function* () {\n    const sameName = allExisting.filter((record) => record.name === requirement.name);\n    const sameSet = sameName.filter(\n      (record): record is DnsRecord.DnsRecord =>\n        record._tag !== \"Opaque\" && record._tag === requirement._tag,\n    );\n    const exact = sameSet.find((record) => DnsRecord.equals(record, requirement));\n    const id = yield* sha256Encoded(RequirementDigest, { requirement });\n    if (exact !== undefined) {\n      return {\n        _tag: \"noop\",\n        id,\n        requirement,\n        ttlDrift: exact.ttl !== requirement.ttl,\n      };\n    }\n    const cnameConflict =\n      sameName.length > 0 &&\n      (requirement._tag === \"CNAME\" || sameName.some((record) => record._tag === \"CNAME\"));\n    if (cnameConflict) {\n      return {\n        _tag: \"conflict\",\n        existing: sameName,\n        id,\n        reason: \"CNAME records cannot coexist with other records at the same name\",\n        requirement,\n      };\n    }\n    if (\n      sameSet.length > 0 &&\n      (requirement.policy === \"exclusive\" || sameSet.some(({ policy }) => policy === \"exclusive\"))\n    ) {\n      return {\n        _tag: \"conflict\",\n        existing: sameSet,\n        id,\n        reason: \"The exclusive record set already contains incompatible data\",\n        requirement,\n      };\n    }\n    return { _tag: \"create\", id, requirement };\n  });\n}\n\nexport function validate(\n  plan: DnsPlan.DnsPlan,\n): Effect.Effect<void, AuthorizeError, Crypto.Crypto> {\n  const unsigned: S.Schema.Type<typeof UnsignedPlan> = {\n    operations: plan.operations,\n    providerId: plan.providerId,\n    version: plan.version,\n    zone: plan.zone,\n  };\n  return sha256Encoded(UnsignedPlan, unsigned).pipe(\n    Effect.flatMap((digest) =>\n      digest === plan.digest\n        ? Effect.void\n        : Effect.fail(\n            new AuthorizationError({\n              message: \"Plan digest does not match its contents\",\n            }),\n          ),\n    ),\n  );\n}\n\nfunction failureMessage(failure: CreateError | StaleError): string {\n  return failure._tag === \"StalePlanError\"\n    ? \"DNS state changed while applying the approved plan\"\n    : failure.message;\n}\n\nfunction compareRecords(left: DnsRecord.Observed, right: DnsRecord.Observed): number {\n  const encode = S.encodeSync(DnsRecord.Observed);\n  const toJson = S.decodeUnknownSync(S.Json);\n  const leftJson = stringify(toJson(encode(left)));\n  const rightJson = stringify(toJson(encode(right)));\n  return leftJson < rightJson ? -1 : leftJson > rightJson ? 1 : 0;\n}\n","import { Clock, Crypto, Effect, Schema as S } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\nimport { Error as InvalidInputError } from \"../invalid-input.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport { CryptoError, sha256Encoded } from \"./canonical-json.ts\";\nimport * as Provisioning from \"./plan.ts\";\nimport * as DnsPlan from \"./types.ts\";\n\nexport const Operation = S.Struct({\n  id: S.String,\n  providerRecordId: S.String,\n  record: DnsRecord.Schema,\n});\nexport interface Operation extends S.Schema.Type<typeof Operation> {}\n\nconst UnsignedPlan = S.Struct({\n  createdAt: S.DateFromString,\n  expiresAt: S.DateFromString,\n  operations: S.Array(Operation),\n  providerId: S.String,\n  sourcePlanDigest: S.String,\n  version: S.Literal(\"domainkit.deletion-plan.v1\"),\n  zone: DomainName.Schema,\n});\n\nexport const Plan = S.Struct({ ...UnsignedPlan.fields, digest: S.String });\nexport interface Plan extends S.Schema.Type<typeof Plan> {}\n\nexport const Authorization = S.Struct({\n  operationIds: S.Array(S.String),\n  planDigest: S.String,\n  version: S.Literal(\"domainkit.deletion-authorization.v1\"),\n});\nexport interface Authorization extends S.Schema.Type<typeof Authorization> {}\n\nexport const Receipt = S.Struct({\n  deletedAt: S.DateFromString,\n  operations: S.Array(S.Struct({ operationId: S.String, providerRecordId: S.String })),\n  planDigest: S.String,\n  providerId: S.String,\n  status: S.Literals([\"complete\", \"partial\"]),\n  version: S.Literal(\"domainkit.deletion-receipt.v1\"),\n  zone: DomainName.Schema,\n});\nexport interface Receipt extends S.Schema.Type<typeof Receipt> {}\n\nexport class Error extends S.TaggedError<Error>()(\"UnsafeDeletionError\", {\n  message: S.String,\n  operationId: S.optionalKey(S.String),\n}) {}\n\nexport class PartialError extends S.TaggedError<PartialError>()(\"PartialDeletionError\", {\n  failedOperationId: S.String,\n  message: S.String,\n  receipt: Receipt,\n}) {}\n\nexport interface CreateInput {\n  readonly plan: DnsPlan.DnsPlan;\n  readonly receipt: DnsPlan.ApplyReceipt;\n  readonly ttlMs?: number;\n}\n\n/** Build a fresh deletion plan only from records proven by a prior create receipt. */\nexport const create = Effect.fn(\"Deletion.create\")(function* (input: CreateInput) {\n  const provider = yield* DnsProvider.Service;\n  yield* Provisioning.validate(input.plan);\n  if (\n    input.receipt.planDigest !== input.plan.digest ||\n    input.receipt.providerId !== input.plan.providerId ||\n    input.receipt.zone !== input.plan.zone\n  ) {\n    return yield* new Error({ message: \"Create receipt does not belong to the source plan\" });\n  }\n  if (provider.id !== input.plan.providerId) {\n    return yield* new Error({ message: \"Provider does not match the source receipt\" });\n  }\n  const operations = yield* Effect.forEach(input.receipt.operations, (applied) =>\n    Effect.gen(function* () {\n      const source = input.plan.operations.find(\n        (operation) => operation._tag === \"create\" && operation.id === applied.operationId,\n      );\n      if (source === undefined || source._tag !== \"create\") {\n        return yield* new Error({\n          message: \"Receipt operation is not a created source record\",\n          operationId: applied.operationId,\n        });\n      }\n      if (applied.providerRecordId === null) {\n        return yield* new Error({\n          message: \"Provider record ID is required for safe deletion\",\n          operationId: applied.operationId,\n        });\n      }\n      yield* assertExact(\n        provider,\n        input.plan.zone,\n        applied.providerRecordId,\n        source.requirement,\n        source.id,\n      );\n      return {\n        id: source.id,\n        providerRecordId: applied.providerRecordId,\n        record: source.requirement,\n      };\n    }),\n  );\n  const now = yield* Clock.currentTimeMillis;\n  const unsigned: S.Schema.Type<typeof UnsignedPlan> = {\n    createdAt: new Date(now),\n    expiresAt: new Date(now + (input.ttlMs ?? 15 * 60_000)),\n    operations,\n    providerId: input.plan.providerId,\n    sourcePlanDigest: input.plan.digest,\n    version: \"domainkit.deletion-plan.v1\",\n    zone: input.plan.zone,\n  };\n  return { ...unsigned, digest: yield* sha256Encoded(UnsignedPlan, unsigned) };\n});\n\n/** Produce a separate digest-bound consent artifact for destructive operations. */\nexport const authorize = Effect.fn(\"Deletion.authorize\")(function* (\n  plan: Plan,\n  operationIds?: ReadonlyArray<string>,\n) {\n  yield* validate(plan);\n  const selected = [...new Set(operationIds ?? plan.operations.map(({ id }) => id))].sort();\n  const unknown = selected.filter(\n    (id) => !plan.operations.some((operation) => operation.id === id),\n  );\n  if (unknown.length > 0) {\n    return yield* new Error({ message: `Unknown deletion operation IDs: ${unknown.join(\", \")}` });\n  }\n  return {\n    operationIds: selected,\n    planDigest: plan.digest,\n    version: \"domainkit.deletion-authorization.v1\" as const,\n  };\n});\n\n/** Re-read every approved record before the first delete, then delete by provider record ID. */\nexport const apply = Effect.fn(\"Deletion.apply\")(function* (input: {\n  readonly authorization: Authorization;\n  readonly plan: Plan;\n  readonly priorReceipt?: Receipt;\n}) {\n  const provider = yield* DnsProvider.Service;\n  yield* validate(input.plan);\n  if (input.authorization.planDigest !== input.plan.digest) {\n    return yield* new Error({ message: \"Deletion authorization belongs to a different plan\" });\n  }\n  if (provider.id !== input.plan.providerId) {\n    return yield* new Error({ message: \"Provider does not match the deletion plan\" });\n  }\n  const now = yield* Clock.currentTimeMillis;\n  if (input.plan.expiresAt <= new Date(now)) {\n    return yield* new Error({ message: \"Deletion plan has expired\" });\n  }\n  const selected = input.plan.operations.filter(({ id }) =>\n    input.authorization.operationIds.includes(id),\n  );\n  if (selected.length !== input.authorization.operationIds.length) {\n    return yield* new Error({ message: \"Deletion authorization contains unknown operations\" });\n  }\n  const previouslyDeleted = yield* validatePriorReceipt(input.plan, input.priorReceipt);\n  const completedIds = new Set(previouslyDeleted.map(({ operationId }) => operationId));\n  if (\n    previouslyDeleted.some(\n      ({ operationId }) => !input.authorization.operationIds.includes(operationId),\n    )\n  ) {\n    return yield* new Error({ message: \"Prior receipt contains an unauthorized operation\" });\n  }\n  const remaining = selected.filter(({ id }) => !completedIds.has(id));\n  yield* Effect.forEach(remaining, (operation) =>\n    assertExact(\n      provider,\n      input.plan.zone,\n      operation.providerRecordId,\n      operation.record,\n      operation.id,\n    ),\n  );\n\n  const deleted: Array<{ operationId: string; providerRecordId: string }> = [...previouslyDeleted];\n  for (const operation of remaining) {\n    const failure = yield* Effect.gen(function* () {\n      yield* assertExact(\n        provider,\n        input.plan.zone,\n        operation.providerRecordId,\n        operation.record,\n        operation.id,\n      );\n      yield* provider.deleteRecord(input.plan.zone, operation.providerRecordId);\n      deleted.push({ operationId: operation.id, providerRecordId: operation.providerRecordId });\n    }).pipe(Effect.match({ onFailure: (cause) => cause, onSuccess: () => null }));\n    if (failure !== null) {\n      if (deleted.length === 0) return yield* failure;\n      return yield* new PartialError({\n        failedOperationId: operation.id,\n        message: failure.message,\n        receipt: yield* makeReceipt(input.plan, deleted, \"partial\"),\n      });\n    }\n  }\n  return yield* makeReceipt(input.plan, deleted, \"complete\");\n});\n\nexport function validate(plan: Plan): Effect.Effect<void, Error | CryptoError, Crypto.Crypto> {\n  const unsigned: S.Schema.Type<typeof UnsignedPlan> = {\n    createdAt: plan.createdAt,\n    expiresAt: plan.expiresAt,\n    operations: plan.operations,\n    providerId: plan.providerId,\n    sourcePlanDigest: plan.sourcePlanDigest,\n    version: plan.version,\n    zone: plan.zone,\n  };\n  return sha256Encoded(UnsignedPlan, unsigned).pipe(\n    Effect.flatMap((digest) =>\n      digest === plan.digest\n        ? Effect.void\n        : Effect.fail(new Error({ message: \"Deletion plan digest does not match its contents\" })),\n    ),\n  );\n}\n\nfunction validatePriorReceipt(\n  plan: Plan,\n  receipt: Receipt | undefined,\n): Effect.Effect<ReadonlyArray<{ operationId: string; providerRecordId: string }>, Error> {\n  if (receipt === undefined) return Effect.succeed([]);\n  if (\n    receipt.planDigest !== plan.digest ||\n    receipt.providerId !== plan.providerId ||\n    receipt.zone !== plan.zone ||\n    receipt.status !== \"partial\"\n  ) {\n    return Effect.fail(\n      new Error({ message: \"Prior receipt does not belong to this deletion plan\" }),\n    );\n  }\n  for (const completed of receipt.operations) {\n    const operation = plan.operations.find(({ id }) => id === completed.operationId);\n    if (operation === undefined || operation.providerRecordId !== completed.providerRecordId) {\n      return Effect.fail(\n        new Error({ message: \"Prior receipt operation does not match the deletion plan\" }),\n      );\n    }\n  }\n  return Effect.succeed([...receipt.operations]);\n}\n\nfunction assertExact(\n  provider: DnsProvider.Interface,\n  zone: DomainName.DomainName,\n  providerRecordId: string,\n  expected: DnsRecord.DnsRecord,\n  operationId: string,\n): Effect.Effect<void, Error | DnsProvider.Error> {\n  return provider.getRecord(zone, providerRecordId).pipe(\n    Effect.flatMap((observed) =>\n      observed !== null && observed._tag !== \"Opaque\" && DnsRecord.equals(observed, expected)\n        ? Effect.void\n        : Effect.fail(\n            new Error({\n              message:\n                observed === null\n                  ? \"Created record no longer exists\"\n                  : \"Created record content no longer matches its receipt\",\n              operationId,\n            }),\n          ),\n    ),\n  );\n}\n\nfunction makeReceipt(\n  plan: Plan,\n  operations: ReadonlyArray<{ readonly operationId: string; readonly providerRecordId: string }>,\n  status: \"complete\" | \"partial\",\n): Effect.Effect<Receipt> {\n  return Clock.currentTimeMillis.pipe(\n    Effect.map((now) => ({\n      deletedAt: new Date(now),\n      operations,\n      planDigest: plan.digest,\n      providerId: plan.providerId,\n      status,\n      version: \"domainkit.deletion-receipt.v1\" as const,\n      zone: plan.zone,\n    })),\n  );\n}\n\nexport type CreateError =\n  | Error\n  | InvalidInputError\n  | Provisioning.AuthorizationError\n  | DnsProvider.Error\n  | CryptoError;\nexport type ApplyError = Error | PartialError | DnsProvider.Error | CryptoError;\nexport type Requirements = DnsProvider.Service | Crypto.Crypto;\n","import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport * as DomainName from \"../domain/domain-name.ts\";\nimport * as DnsRecord from \"../domain/dns-record.ts\";\n\nexport interface Query {\n  readonly name: DomainName.DomainName;\n  readonly signal?: AbortSignal;\n  readonly type: DnsRecord.Type;\n}\n\nexport const Answer = Schema.Struct({\n  data: Schema.String,\n  name: DomainName.Schema,\n  ttl: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),\n  type: DnsRecord.Type,\n});\nexport interface Answer extends Schema.Schema.Type<typeof Answer> {}\n\nexport const Resolution = Schema.TaggedUnion({\n  answer: { answers: Schema.Array(Answer) },\n  nodata: {},\n});\nexport type Resolution = typeof Resolution.Type;\n\nexport class Error extends Schema.TaggedError<Error>()(\"ResolverError\", {\n  cause: Schema.optionalKey(Schema.Unknown),\n  message: Schema.String,\n  reason: Schema.Literals([\"response\", \"timeout\", \"transport\"]),\n}) {}\n\nexport interface Interface {\n  readonly resolve: (query: Query) => Effect.Effect<Resolution, Error>;\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/DnsResolver\") {}\n\nexport type AsyncResolution =\n  | Resolution\n  | { readonly _tag: \"timeout\" }\n  | { readonly _tag: \"failure\"; readonly message: string };\n\nexport interface AsyncInterface {\n  readonly resolve: (query: Query) => Promise<AsyncResolution>;\n}\n\nexport const layerFromAsync = (resolver: AsyncInterface): Layer.Layer<Service> =>\n  Layer.succeed(Service, {\n    resolve: Effect.fn(\"DnsResolver.resolve\")((query) =>\n      Effect.tryPromise({\n        try: () => resolver.resolve(query),\n        catch: (cause) =>\n          new Error({\n            cause,\n            message: cause instanceof globalThis.Error ? cause.message : String(cause),\n            reason: \"transport\",\n          }),\n      }).pipe(\n        Effect.flatMap((resolution) => {\n          switch (resolution._tag) {\n            case \"answer\":\n            case \"nodata\":\n              return Effect.succeed(resolution);\n            case \"timeout\":\n              return Effect.fail(new Error({ message: \"DNS query timed out\", reason: \"timeout\" }));\n            case \"failure\":\n              return Effect.fail(new Error({ message: resolution.message, reason: \"transport\" }));\n          }\n        }),\n      ),\n    ),\n  });\n\nexport const toAsync = (resolver: Interface): AsyncInterface => ({\n  resolve: (query) =>\n    Effect.runPromise(\n      resolver.resolve(query).pipe(\n        Effect.match({\n          onFailure: (failure): AsyncResolution =>\n            failure.reason === \"timeout\"\n              ? { _tag: \"timeout\" }\n              : { _tag: \"failure\", message: failure.message },\n          onSuccess: (resolution) => resolution,\n        }),\n      ),\n    ),\n});\n"],"mappings":";;;;;;;;;;;;;AAQA,MAAa,YAAY,OAAO,OAAO;CACrC,WAAW,OAAO;CAClB,IAAI,OAAO;CACX,MAAMA;CACN,aAAa,OAAO,MAAMA,QAAa;CACvC,YAAY,OAAO;CACnB,QAAQ,OAAO,SAAS;EAAC;EAAU;EAAW;CAAS,CAAC;AAC1D,CAAC;AAeD,MAAa,UAAU,KAAK,WAAoB;AAMhD,IAAaC,YAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC;;AAGhG,SAAgB,KAAK,SAA2C;CAC9D,OAAOA,UAAQ,GAAG,EAChB,UAAU,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAAW,QAAQ;EAC/D,KAAK,MAAM,QAAQC,WAAiB,MAAM,GAAG;GAC3C,MAAM,UAAU,aACb,OAAO,OAAO,QACb,UACC,WACC,OAAO,UAAU,IAAI,CAAC,CAAC,KACrB,OAAO,KAAK,UACV,MACG,QAAQ,SAAS,KAAK,SAAS,IAAI,CAAC,CACpC,KAAK,UAAU;IACd,WAAW;KAAE,GAAG;KAAM,YAAY,OAAO,SAAS;IAAG;IACrD,UAAU,OAAO;GACnB,EAAE,CACN,CACF,GACF,EAAE,aAAa,YAAY,CAC7B,EAAA,CAAG,KAAK,CACV;GACA,MAAM,QAAQ,QAAQ;GACtB,IAAI,QAAQ,WAAW,KAAK,UAAU,KAAA,GACpC,OAAO,QAAQ,SAAS,KAAK;GAE/B,IAAI,QAAQ,SAAS,GACnB,OAAO,QAAQ,kBAAkB,EAC/B,YAAY,QAAQ,KAAK,EAAE,gBAAgB,SAAS,EACtD,CAAC;EAEL;EACA,OAAO,QAAQ,SAAS,EAAE,OAAO,CAAC;CACpC,CAAC,EACH,CAAC;AACH;AAEA,SAAS,YACP,SAOC;CACD,MAAM,yBAAS,IAAI,IAAsC;CACzD,KAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,MAAM;GACV,MAAM,UAAU;GAChB,MAAM,UAAU;GAChB,MAAM,UAAU;GAChB,MAAM,UAAU;EAClB,CAAC,CAAC,KAAK,GAAG;EAEV,IADiB,OAAO,IAAI,GACjB,MAAM,KAAA,GAAW,OAAO,IAAI,KAAK,KAAK;CACnD;CACA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,UACtC,aAAa,KAAK,SAAS,CAAC,CAAC,cAAc,aAAa,MAAM,SAAS,CAAC,CAC1E;AACF;AAEA,SAAS,aAAa,WAA8B;CAClD,OAAO;EAAC,UAAU;EAAM,UAAU;EAAY,UAAU;EAAW,UAAU;CAAE,CAAC,CAAC,KAAK,GAAG;AAC3F;;;;;;;;;;;;;AChGA,MAAaC,cAAYC,OAAE,YAAY;CACrC,QAAQ;EACN,IAAIA,OAAE;EACN,aAAaC;CACf;CACA,MAAM;EACJ,IAAID,OAAE;EACN,aAAaC;EACb,UAAUD,OAAE;CACd;CACA,UAAU;EACR,UAAUA,OAAE,MAAME,QAAkB;EACpC,IAAIF,OAAE;EACN,QAAQA,OAAE;EACV,aAAaC;CACf;AACF,CAAC;AAGD,MAAaE,WAASH,OAAE,OAAO;CAC7B,QAAQA,OAAE;CACV,YAAYA,OAAE,MAAMD,WAAS;CAC7B,YAAYC,OAAE;CACd,SAASA,OAAE,QAAQ,uBAAuB;CAC1C,MAAMI;AACR,CAAC;AAGD,MAAaC,kBAAgBL,OAAE,OAAO;CACpC,cAAcA,OAAE;CAChB,cAAcA,OAAE,MAAMA,OAAE,MAAM;CAC9B,YAAYA,OAAE;CACd,SAASA,OAAE,QAAQ,iCAAiC;AACtD,CAAC;AAGD,MAAaM,YAAUN,OAAE,OAAO;CAC9B,WAAWA,OAAE;CACb,YAAYA,OAAE,MACZA,OAAE,OAAO;EACP,aAAaA,OAAE;EACf,kBAAkBA,OAAE,OAAOA,OAAE,MAAM;CACrC,CAAC,CACH;CACA,YAAYA,OAAE;CACd,YAAYA,OAAE;CACd,QAAQA,OAAE,SAAS,CAAC,YAAY,SAAS,CAAC;CAC1C,SAASA,OAAE,QAAQ,4BAA4B;CAC/C,MAAMI;AACR,CAAC;AAGD,MAAa,SAAS,OAAO,GAAG,gBAAgB,CAAC,EAAE,UACjDJ,OAAE,oBAAoBG,QAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KACnC,OAAO,UAAU,UAAU,IAAII,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AAEA,MAAa,SAASP,OAAE,WAAWG,QAAM;AACzC,MAAa,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,EAAE,UAC/DH,OAAE,oBAAoBM,SAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KACpC,OAAO,UAAU,UAAU,IAAIC,QAAkB,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CAC9E,CACF;AACA,MAAa,gBAAgBP,OAAE,WAAWM,SAAO;;;;;;;;;;;;;;;;AC5DjD,MAAME,iBAAeC,OAAE,OAAO;CAC5B,YAAYA,OAAE,MAAMC,WAAiB;CACrC,YAAYD,OAAE;CACd,SAASA,OAAE,QAAQ,uBAAuB;CAC1C,MAAME;AACR,CAAC;AAED,MAAM,oBAAoBF,OAAE,OAAO,EAAE,aAAaG,SAAiB,CAAC;AAEpE,IAAa,gBAAb,cAAmCH,OAAE,YAA2B,CAAC,CAAC,qBAAqB,EACrF,cAAcA,OAAE,MAAMA,OAAE,MAAM,EAChC,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,qBAAb,cAAwCA,OAAE,YAAgC,CAAC,CAAC,sBAAsB,EAChG,SAASA,OAAE,OACb,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,aAAb,cAAgCA,OAAE,YAAwB,CAAC,CAAC,kBAAkB;CAC5E,oBAAoBA,OAAE;CACtB,mBAAmBA,OAAE;AACvB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,oBAAb,cAAuCA,OAAE,YAA+B,CAAC,CAAC,qBAAqB;CAC7F,UAAUA,OAAE,SAAS;EACnB;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,mBAAmBA,OAAE;CACrB,SAASA,OAAE;CACX,SAASI;AACX,CAAC,CAAC,CAAC,CAAC;AAMJ,MAAa,SAAS,KAAK,WAAmB;AAU9C,MAAa,eAAe,KAAK,WAAyB;AAqC1D,SAAgBC,SACd,OAKA;CACA,MAAM,SAAS,MAAM;CACrB,IAAI,OAAO,SAAS,aAClB,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,WAAW,OAAOC;EACxB,MAAM,OAAO,OAAOC,SAAkB,OAAO,IAAI;EACjD,OAAO,aAAa,SAAS;GAC3B,WAAW;GACX,MAAM,OAAO,YAAY,UAAU,MAAM,MAAM,YAAY;EAC7D,CAAC;CACH,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,qBAAqB,CAAC;CAEhD,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,YAAY,OAAOC;EACzB,MAAM,SAAS,OAAOD,SAAkB,OAAO,MAAM;EACrD,MAAM,UAAU,OAAO,UAAU,SAAS,MAAM;EAChD,QAAQ,QAAQ,MAAhB;GACE,KAAK,YACH,OAAO,aAAa,SAAS,EAAE,QAAQ,QAAQ,OAAO,CAAC;GACzD,KAAK,qBACH,OAAO,aAAa,kBAAkB,EAAE,YAAY,QAAQ,WAAW,CAAC;GAC1E,KAAK,YACH,OAAO,aAAa,SAAS;IAC3B,WAAW,QAAQ;IACnB,MAAM,OAAO,YAAY,QAAQ,UAAU,QAAQ,UAAU,MAAM,MAAM,YAAY;GACvF,CAAC;EACL;CACF,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,qBAAqB,CAAC;AAChD;AAEA,MAAM,cAAc,OAAO,GAAG,0BAA0B,CAAC,CAAC,WACxD,UACA,MACA,QACA;CACA,MAAM,gBAAgB,OAAO,OAAO,QAAQ,QAAQE,UAAkB,EACpE,aAAa,YACf,CAAC,EAAA,CAAG,KAAK,cAAc;CACvB,MAAM,WAAW,CAAC,GAAI,OAAO,SAAS,YAAY,IAAI,CAAE,CAAC,CAAC,KAAK,cAAc;CAC7E,MAAM,EAAE,eAAe,OAAO,OAAO,OACnC,qBACsB;EAAE,YAAY,CAAC;EAAG,WAAW;CAAS,KAC3D,OAAO,gBACN,qBAAqB,aAAa,MAAM,SAAS,CAAC,CAAC,KACjD,OAAO,KAAK,eAAe;EACzB,YAAY,CAAC,GAAG,MAAM,YAAY,SAAS;EAC3C,WACE,UAAU,SAAS,WACf,CAAC,GAAG,MAAM,WAAW,UAAU,WAAW,CAAC,CAAC,KAAK,cAAc,IAC/D,MAAM;CACd,EAAE,CACJ,CACJ;CACA,MAAM,WAA+C;EACnD;EACA,YAAY,SAAS;EACrB,SAAS;EACT;CACF;CACA,OAAO;EAAE,GAAG;EAAU,QAAQ,OAAO,cAAcV,gBAAc,QAAQ;CAAE;AAC7E,CAAC;;AAQD,MAAaW,cAAY,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAC3D,MACA,cACA,UAA+C,CAAC,GAChD;CACA,OAAOC,WAAS,IAAI;CACpB,MAAM,YAAY,KAAK,WACpB,QAAQ,cAAc,UAAU,SAAS,QAAQ,CAAC,CAClD,KAAK,EAAE,SAAS,EAAE;CACrB,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,gBAAgB,SAAS,CAAC,CAAC,CAAC,KAAK;CAC9D,MAAM,UAAU,SAAS,QAAQ,OAAO,CAAC,UAAU,SAAS,EAAE,CAAC;CAC/D,IAAI,QAAQ,SAAS,GACnB,OAAO,OAAO,IAAI,mBAAmB,EACnC,SAAS,0BAA0B,QAAQ,KAAK,IAAI,IACtD,CAAC;CAEH,IAAI,CAAC,QAAQ,gBAAgB,SAAS,WAAW,UAAU,QACzD,OAAO,OAAO,IAAI,mBAAmB,EACnC,SAAS,8CACX,CAAC;CAEH,OAAO;EACL,cAAc,QAAQ,gBAAgB;EACtC,cAAc;EACd,YAAY,KAAK;EACjB,SAAS;CACX;AACF,CAAC;;AAGD,MAAaC,UAAQ,OAAO,GAAG,oBAAoB,CAAC,CAAC,WAAW,OAAmB;CACjF,MAAM,EAAE,eAAe,SAAS;CAChC,MAAM,WAAW,OAAON;CACxB,OAAOK,WAAS,IAAI;CACpB,IAAI,cAAc,eAAe,KAAK,QACpC,OAAO,OAAO,IAAI,mBAAmB,EACnC,SAAS,4CACX,CAAC;CAEH,IAAI,SAAS,OAAO,KAAK,YACvB,OAAO,OAAO,IAAI,mBAAmB,EACnC,SAAS,4CACX,CAAC;CAEH,MAAM,YAAY,KAAK,WAAW,QAAQ,cAAc,UAAU,SAAS,UAAU;CACrF,IAAI,UAAU,SAAS,GACrB,OAAO,OAAO,IAAI,cAAc,EAC9B,cAAc,UAAU,KAAK,EAAE,SAAS,EAAE,EAC5C,CAAC;CAGH,MAAM,UAAU,KAAK,WAAW,OAAA,YAAyB,OAAO,MAAM;CACtE,MAAM,WAAW,IAAI,IAAI,cAAc,YAAY;CACnD,MAAM,UAAU,cAAc,aAAa,QACxC,OAAO,CAAC,QAAQ,MAAM,cAAc,UAAU,OAAO,EAAE,CAC1D;CACA,IAAI,QAAQ,SAAS,GACnB,OAAO,OAAO,IAAI,mBAAmB,EACnC,SAAS,8CAA8C,QAAQ,KAAK,IAAI,IAC1E,CAAC;CAEH,IAAI,CAAC,cAAc,gBAAgB,QAAQ,MAAM,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,GAC3E,OAAO,OAAO,IAAI,mBAAmB,EACnC,SAAS,sDACX,CAAC;CAGH,MAAM,cAAc,OAAO,YACzB,UACA,KAAK,MACL,KAAK,WAAW,KAAK,EAAE,kBAAkB,WAAW,CACtD;CACA,IAAI,YAAY,WAAW,KAAK,QAC9B,OAAO,OAAO,IAAI,WAAW;EAC3B,oBAAoB,KAAK;EACzB,mBAAmB,YAAY;CACjC,CAAC;CAGH,MAAM,aAGD,CAAC;CACN,KAAK,MAAM,aAAa,SAAS;EAC/B,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,GAAG;EACjC,OAAO,OAAO,IAAI,aAAa;GAC7B,OAAO,qBAAqB,MAAM,SAAS;GAC3C,MAAM,SAAS,OAAO,SAAS,aAAa,KAAK,MAAM,UAAU,WAAW;GAC5E,WAAW,KAAK;IACd,aAAa,UAAU;IACvB,kBAAkB,OAAO;GAC3B,CAAC;EACH,CAAC,CAAC,CAAC,KACD,OAAO,OAAO,YACZ,WAAW,WAAW,IAClB,OAAO,KAAK,OAAO,IACnBE,cAAY,OAAO,YAAY,SAAS,CAAC,CAAC,KACxC,OAAO,SAAS,YACd,OAAO,KACL,IAAI,kBAAkB;GACpB,UAAU,QAAQ;GAClB,mBAAmB,UAAU;GAC7B,SAAS,eAAe,OAAO;GAC/B;EACF,CAAC,CACH,CACF,CACF,CACN,GACA,OAAO,YAAY,UAAU;GAC3B,IAAI,CAAC,MAAM,kBAAkB,KAAK,KAAK,WAAW,WAAW,GAC3D,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAOA,cAAY,OAAO,YAAY,SAAS,CAAC,CAAC,KAC/C,OAAO,SAAS,YACd,OAAO,KACL,IAAI,kBAAkB;IACpB,UAAU;IACV,mBAAmB,UAAU;IAC7B,SAAS;IACT;GACF,CAAC,CACH,CACF,CACF;EACF,CAAC,CACH;CACF;CACA,OAAO,OAAOA,cAAY,OAAO,YAAY,UAAU;AACzD,CAAC;AAED,SAAgB,yBAAyB,MAA8C;CACrF,OAAO,KAAK,WAAW,KAAK,cAAc;EACxC,MAAM,SAAS,UAAU;EACzB,MAAMC,SAAO,OAAO,QAAQC,KAAe,MAAM,CAAC,CAAC,CAChD,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,CACxC,KAAK,GAAG;EACX,OAAO,GAAG,UAAU,KAAK,YAAY,EAAE,GAAG,OAAO,KAAK,GAAG,OAAO,KAAK,GAAGD,SAAO,KAAK;CACtF,CAAC;AACH;AAEA,SAASD,cACP,OACA,YAIA,QACqC;CACrC,OAAO,MAAM,kBAAkB,KAC7B,OAAO,KAAK,SAAS;EACnB,WAAW,IAAI,KAAK,GAAG;EACvB;EACA,YAAY,MAAM,KAAK;EACvB,YAAY,MAAM,KAAK;EACvB;EACA,SAAS;EACT,MAAM,MAAM,KAAK;CACnB,EAAE,CACJ;AACF;AAEA,SAAS,qBACP,MACA,WACoF;CACpF,OAAA,UAA2B,KACzB,OAAO,SAAS,aAAa,YAAY,UAAU,KAAK,MAAM,CAAC,UAAU,WAAW,CAAC,CAAC,GACtF,OAAO,SAAS,gBAAgB;EAC9B,MAAM,mBAAmB,YAAY,WAAW;EAChD,OAAO,kBAAkB,SAAS,YAAY,iBAAiB,OAAO,UAAU,KAC5E,OAAO,OACP,OAAO,KACL,IAAI,WAAW;GACb,oBAAoB,KAAK;GACzB,mBAAmB,YAAY;EACjC,CAAC,CACH;CACN,CAAC,CACH;AACF;AAEA,SAAS,qBACP,aACA,aAC8D;CAC9D,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,WAAW,YAAY,QAAQ,WAAW,OAAO,SAAS,YAAY,IAAI;EAChF,MAAM,UAAU,SAAS,QACtB,WACC,OAAO,SAAS,YAAY,OAAO,SAAS,YAAY,IAC5D;EACA,MAAM,QAAQ,QAAQ,MAAM,WAAWG,OAAiB,QAAQ,WAAW,CAAC;EAC5E,MAAM,KAAK,OAAO,cAAc,mBAAmB,EAAE,YAAY,CAAC;EAClE,IAAI,UAAU,KAAA,GACZ,OAAO;GACL,MAAM;GACN;GACA;GACA,UAAU,MAAM,QAAQ,YAAY;EACtC;EAKF,IAFE,SAAS,SAAS,MACjB,YAAY,SAAS,WAAW,SAAS,MAAM,WAAW,OAAO,SAAS,OAAO,IAElF,OAAO;GACL,MAAM;GACN,UAAU;GACV;GACA,QAAQ;GACR;EACF;EAEF,IACE,QAAQ,SAAS,MAChB,YAAY,WAAW,eAAe,QAAQ,MAAM,EAAE,aAAa,WAAW,WAAW,IAE1F,OAAO;GACL,MAAM;GACN,UAAU;GACV;GACA,QAAQ;GACR;EACF;EAEF,OAAO;GAAE,MAAM;GAAU;GAAI;EAAY;CAC3C,CAAC;AACH;AAEA,SAAgBL,WACd,MACoD;CACpD,MAAM,WAA+C;EACnD,YAAY,KAAK;EACjB,YAAY,KAAK;EACjB,SAAS,KAAK;EACd,MAAM,KAAK;CACb;CACA,OAAO,cAAcZ,gBAAc,QAAQ,CAAC,CAAC,KAC3C,OAAO,SAAS,WACd,WAAW,KAAK,SACZ,OAAO,OACP,OAAO,KACL,IAAI,mBAAmB,EACrB,SAAS,0CACX,CAAC,CACH,CACN,CACF;AACF;AAEA,SAAS,eAAe,SAA2C;CACjE,OAAO,QAAQ,SAAS,mBACpB,uDACA,QAAQ;AACd;AAEA,SAAS,eAAe,MAA0B,OAAmC;CACnF,MAAM,SAASC,OAAE,WAAWiB,QAAkB;CAC9C,MAAM,SAASjB,OAAE,kBAAkBA,OAAE,IAAI;CACzC,MAAM,WAAW,UAAU,OAAO,OAAO,IAAI,CAAC,CAAC;CAC/C,MAAM,YAAY,UAAU,OAAO,OAAO,KAAK,CAAC,CAAC;CACjD,OAAO,WAAW,YAAY,KAAK,WAAW,YAAY,IAAI;AAChE;;;;;;;;;;;;;;;ACxaA,MAAa,YAAYkB,OAAE,OAAO;CAChC,IAAIA,OAAE;CACN,kBAAkBA,OAAE;CACpB,QAAQC;AACV,CAAC;AAGD,MAAM,eAAeD,OAAE,OAAO;CAC5B,WAAWA,OAAE;CACb,WAAWA,OAAE;CACb,YAAYA,OAAE,MAAM,SAAS;CAC7B,YAAYA,OAAE;CACd,kBAAkBA,OAAE;CACpB,SAASA,OAAE,QAAQ,4BAA4B;CAC/C,MAAME;AACR,CAAC;AAED,MAAa,OAAOF,OAAE,OAAO;CAAE,GAAG,aAAa;CAAQ,QAAQA,OAAE;AAAO,CAAC;AAGzE,MAAa,gBAAgBA,OAAE,OAAO;CACpC,cAAcA,OAAE,MAAMA,OAAE,MAAM;CAC9B,YAAYA,OAAE;CACd,SAASA,OAAE,QAAQ,qCAAqC;AAC1D,CAAC;AAGD,MAAa,UAAUA,OAAE,OAAO;CAC9B,WAAWA,OAAE;CACb,YAAYA,OAAE,MAAMA,OAAE,OAAO;EAAE,aAAaA,OAAE;EAAQ,kBAAkBA,OAAE;CAAO,CAAC,CAAC;CACnF,YAAYA,OAAE;CACd,YAAYA,OAAE;CACd,QAAQA,OAAE,SAAS,CAAC,YAAY,SAAS,CAAC;CAC1C,SAASA,OAAE,QAAQ,+BAA+B;CAClD,MAAME;AACR,CAAC;AAGD,IAAaC,UAAb,cAA2BH,OAAE,YAAmB,CAAC,CAAC,uBAAuB;CACvE,SAASA,OAAE;CACX,aAAaA,OAAE,YAAYA,OAAE,MAAM;AACrC,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,eAAb,cAAkCA,OAAE,YAA0B,CAAC,CAAC,wBAAwB;CACtF,mBAAmBA,OAAE;CACrB,SAASA,OAAE;CACX,SAAS;AACX,CAAC,CAAC,CAAC,CAAC;;AASJ,MAAa,SAAS,OAAO,GAAG,iBAAiB,CAAC,CAAC,WAAW,OAAoB;CAChF,MAAM,WAAW,OAAOI;CACxB,OAAOC,WAAsB,MAAM,IAAI;CACvC,IACE,MAAM,QAAQ,eAAe,MAAM,KAAK,UACxC,MAAM,QAAQ,eAAe,MAAM,KAAK,cACxC,MAAM,QAAQ,SAAS,MAAM,KAAK,MAElC,OAAO,OAAO,IAAIF,QAAM,EAAE,SAAS,oDAAoD,CAAC;CAE1F,IAAI,SAAS,OAAO,MAAM,KAAK,YAC7B,OAAO,OAAO,IAAIA,QAAM,EAAE,SAAS,6CAA6C,CAAC;CAEnF,MAAM,aAAa,OAAO,OAAO,QAAQ,MAAM,QAAQ,aAAa,YAClE,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,MAAM,KAAK,WAAW,MAClC,cAAc,UAAU,SAAS,YAAY,UAAU,OAAO,QAAQ,WACzE;EACA,IAAI,WAAW,KAAA,KAAa,OAAO,SAAS,UAC1C,OAAO,OAAO,IAAIA,QAAM;GACtB,SAAS;GACT,aAAa,QAAQ;EACvB,CAAC;EAEH,IAAI,QAAQ,qBAAqB,MAC/B,OAAO,OAAO,IAAIA,QAAM;GACtB,SAAS;GACT,aAAa,QAAQ;EACvB,CAAC;EAEH,OAAO,YACL,UACA,MAAM,KAAK,MACX,QAAQ,kBACR,OAAO,aACP,OAAO,EACT;EACA,OAAO;GACL,IAAI,OAAO;GACX,kBAAkB,QAAQ;GAC1B,QAAQ,OAAO;EACjB;CACF,CAAC,CACH;CACA,MAAM,MAAM,OAAO,MAAM;CACzB,MAAM,WAA+C;EACnD,WAAW,IAAI,KAAK,GAAG;EACvB,WAAW,IAAI,KAAK,OAAO,MAAM,SAAS,IAAY;EACtD;EACA,YAAY,MAAM,KAAK;EACvB,kBAAkB,MAAM,KAAK;EAC7B,SAAS;EACT,MAAM,MAAM,KAAK;CACnB;CACA,OAAO;EAAE,GAAG;EAAU,QAAQ,OAAO,cAAc,cAAc,QAAQ;CAAE;AAC7E,CAAC;;AAGD,MAAa,YAAY,OAAO,GAAG,oBAAoB,CAAC,CAAC,WACvD,MACA,cACA;CACA,OAAO,SAAS,IAAI;CACpB,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,gBAAgB,KAAK,WAAW,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;CACxF,MAAM,UAAU,SAAS,QACtB,OAAO,CAAC,KAAK,WAAW,MAAM,cAAc,UAAU,OAAO,EAAE,CAClE;CACA,IAAI,QAAQ,SAAS,GACnB,OAAO,OAAO,IAAIA,QAAM,EAAE,SAAS,mCAAmC,QAAQ,KAAK,IAAI,IAAI,CAAC;CAE9F,OAAO;EACL,cAAc;EACd,YAAY,KAAK;EACjB,SAAS;CACX;AACF,CAAC;;AAGD,MAAa,QAAQ,OAAO,GAAG,gBAAgB,CAAC,CAAC,WAAW,OAIzD;CACD,MAAM,WAAW,OAAOC;CACxB,OAAO,SAAS,MAAM,IAAI;CAC1B,IAAI,MAAM,cAAc,eAAe,MAAM,KAAK,QAChD,OAAO,OAAO,IAAID,QAAM,EAAE,SAAS,qDAAqD,CAAC;CAE3F,IAAI,SAAS,OAAO,MAAM,KAAK,YAC7B,OAAO,OAAO,IAAIA,QAAM,EAAE,SAAS,4CAA4C,CAAC;CAElF,MAAM,MAAM,OAAO,MAAM;CACzB,IAAI,MAAM,KAAK,aAAa,IAAI,KAAK,GAAG,GACtC,OAAO,OAAO,IAAIA,QAAM,EAAE,SAAS,4BAA4B,CAAC;CAElE,MAAM,WAAW,MAAM,KAAK,WAAW,QAAQ,EAAE,SAC/C,MAAM,cAAc,aAAa,SAAS,EAAE,CAC9C;CACA,IAAI,SAAS,WAAW,MAAM,cAAc,aAAa,QACvD,OAAO,OAAO,IAAIA,QAAM,EAAE,SAAS,qDAAqD,CAAC;CAE3F,MAAM,oBAAoB,OAAO,qBAAqB,MAAM,MAAM,MAAM,YAAY;CACpF,MAAM,eAAe,IAAI,IAAI,kBAAkB,KAAK,EAAE,kBAAkB,WAAW,CAAC;CACpF,IACE,kBAAkB,MACf,EAAE,kBAAkB,CAAC,MAAM,cAAc,aAAa,SAAS,WAAW,CAC7E,GAEA,OAAO,OAAO,IAAIA,QAAM,EAAE,SAAS,mDAAmD,CAAC;CAEzF,MAAM,YAAY,SAAS,QAAQ,EAAE,SAAS,CAAC,aAAa,IAAI,EAAE,CAAC;CACnE,OAAO,OAAO,QAAQ,YAAY,cAChC,YACE,UACA,MAAM,KAAK,MACX,UAAU,kBACV,UAAU,QACV,UAAU,EACZ,CACF;CAEA,MAAM,UAAoE,CAAC,GAAG,iBAAiB;CAC/F,KAAK,MAAM,aAAa,WAAW;EACjC,MAAM,UAAU,OAAO,OAAO,IAAI,aAAa;GAC7C,OAAO,YACL,UACA,MAAM,KAAK,MACX,UAAU,kBACV,UAAU,QACV,UAAU,EACZ;GACA,OAAO,SAAS,aAAa,MAAM,KAAK,MAAM,UAAU,gBAAgB;GACxE,QAAQ,KAAK;IAAE,aAAa,UAAU;IAAI,kBAAkB,UAAU;GAAiB,CAAC;EAC1F,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;GAAE,YAAY,UAAU;GAAO,iBAAiB;EAAK,CAAC,CAAC;EAC5E,IAAI,YAAY,MAAM;GACpB,IAAI,QAAQ,WAAW,GAAG,OAAO,OAAO;GACxC,OAAO,OAAO,IAAI,aAAa;IAC7B,mBAAmB,UAAU;IAC7B,SAAS,QAAQ;IACjB,SAAS,OAAO,YAAY,MAAM,MAAM,SAAS,SAAS;GAC5D,CAAC;EACH;CACF;CACA,OAAO,OAAO,YAAY,MAAM,MAAM,SAAS,UAAU;AAC3D,CAAC;AAED,SAAgB,SAAS,MAAqE;CAC5F,MAAM,WAA+C;EACnD,WAAW,KAAK;EAChB,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,YAAY,KAAK;EACjB,kBAAkB,KAAK;EACvB,SAAS,KAAK;EACd,MAAM,KAAK;CACb;CACA,OAAO,cAAc,cAAc,QAAQ,CAAC,CAAC,KAC3C,OAAO,SAAS,WACd,WAAW,KAAK,SACZ,OAAO,OACP,OAAO,KAAK,IAAIA,QAAM,EAAE,SAAS,mDAAmD,CAAC,CAAC,CAC5F,CACF;AACF;AAEA,SAAS,qBACP,MACA,SACwF;CACxF,IAAI,YAAY,KAAA,GAAW,OAAO,OAAO,QAAQ,CAAC,CAAC;CACnD,IACE,QAAQ,eAAe,KAAK,UAC5B,QAAQ,eAAe,KAAK,cAC5B,QAAQ,SAAS,KAAK,QACtB,QAAQ,WAAW,WAEnB,OAAO,OAAO,KACZ,IAAIA,QAAM,EAAE,SAAS,sDAAsD,CAAC,CAC9E;CAEF,KAAK,MAAM,aAAa,QAAQ,YAAY;EAC1C,MAAM,YAAY,KAAK,WAAW,MAAM,EAAE,SAAS,OAAO,UAAU,WAAW;EAC/E,IAAI,cAAc,KAAA,KAAa,UAAU,qBAAqB,UAAU,kBACtE,OAAO,OAAO,KACZ,IAAIA,QAAM,EAAE,SAAS,2DAA2D,CAAC,CACnF;CAEJ;CACA,OAAO,OAAO,QAAQ,CAAC,GAAG,QAAQ,UAAU,CAAC;AAC/C;AAEA,SAAS,YACP,UACA,MACA,kBACA,UACA,aACgD;CAChD,OAAO,SAAS,UAAU,MAAM,gBAAgB,CAAC,CAAC,KAChD,OAAO,SAAS,aACd,aAAa,QAAQ,SAAS,SAAS,YAAYG,OAAiB,UAAU,QAAQ,IAClF,OAAO,OACP,OAAO,KACL,IAAIH,QAAM;EACR,SACE,aAAa,OACT,oCACA;EACN;CACF,CAAC,CACH,CACN,CACF;AACF;AAEA,SAAS,YACP,MACA,YACA,QACwB;CACxB,OAAO,MAAM,kBAAkB,KAC7B,OAAO,KAAK,SAAS;EACnB,WAAW,IAAI,KAAK,GAAG;EACvB;EACA,YAAY,KAAK;EACjB,YAAY,KAAK;EACjB;EACA,SAAS;EACT,MAAM,KAAK;CACb,EAAE,CACJ;AACF;;;;;;;;;;;AC9RA,MAAa,SAAS,OAAO,OAAO;CAClC,MAAM,OAAO;CACb,MAAMI;CACN,KAAK,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;CACtD,MAAMC;AACR,CAAC;AAGD,MAAa,aAAa,OAAO,YAAY;CAC3C,QAAQ,EAAE,SAAS,OAAO,MAAM,MAAM,EAAE;CACxC,QAAQ,CAAC;AACX,CAAC;AAGD,IAAa,QAAb,cAA2B,OAAO,YAAmB,CAAC,CAAC,iBAAiB;CACtE,OAAO,OAAO,YAAY,OAAO,OAAO;CACxC,SAAS,OAAO;CAChB,QAAQ,OAAO,SAAS;EAAC;EAAY;EAAW;CAAW,CAAC;AAC9D,CAAC,CAAC,CAAC,CAAC;AAMJ,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAW9F,MAAa,kBAAkB,aAC7B,MAAM,QAAQ,SAAS,EACrB,SAAS,OAAO,GAAG,qBAAqB,CAAC,EAAE,UACzC,OAAO,WAAW;CAChB,WAAW,SAAS,QAAQ,KAAK;CACjC,QAAQ,UACN,IAAI,MAAM;EACR;EACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;EACzE,QAAQ;CACV,CAAC;AACL,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,eAAe;CAC7B,QAAQ,WAAW,MAAnB;EACE,KAAK;EACL,KAAK,UACH,OAAO,OAAO,QAAQ,UAAU;EAClC,KAAK,WACH,OAAO,OAAO,KAAK,IAAI,MAAM;GAAE,SAAS;GAAuB,QAAQ;EAAU,CAAC,CAAC;EACrF,KAAK,WACH,OAAO,OAAO,KAAK,IAAI,MAAM;GAAE,SAAS,WAAW;GAAS,QAAQ;EAAY,CAAC,CAAC;CACtF;AACF,CAAC,CACH,CACF,EACF,CAAC;AAEH,MAAa,WAAW,cAAyC,EAC/D,UAAU,UACR,OAAO,WACL,SAAS,QAAQ,KAAK,CAAC,CAAC,KACtB,OAAO,MAAM;CACX,YAAY,YACV,QAAQ,WAAW,YACf,EAAE,MAAM,UAAU,IAClB;EAAE,MAAM;EAAW,SAAS,QAAQ;CAAQ;CAClD,YAAY,eAAe;AAC7B,CAAC,CACH,CACF,EACJ"}

package/dist/vercel-BsNDu4Np.d.mts

@@ -1,31 +0,0 @@
-import { ot as TokenValidation, ut as AsyncInterface } from "./zone-discovery-BPnH3sLU.mjs";
-import { a as Source, n as Method, t as InteractiveFlow } from "./connection-BfkloPZy.mjs";
-import { _ as Zone, a as IntegrationMethodOptions, c as integrationMethod$1, d as Account, f as AccountContext, g as Options, h as ListZonesInput, i as IntegrationFlowOptions, l as manifest$1, n as ExchangeCodeOptions, o as TokenConnectionOptions, p as Fetch, r as IntegrationCredential, u as tokenMethod$1 } from "./index-D3PVknwE.mjs";
-declare namespace vercel_auth_d_exports {
-  export { ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, exchangeCode, integrationFlow, integrationMethod, manifest, tokenConnectionMethod, tokenMethod };
-}
-declare const integrationMethod: typeof integrationMethod$1;
-declare const manifest: typeof manifest$1;
-declare const tokenMethod: typeof tokenMethod$1;
-declare function exchangeCode(options: ExchangeCodeOptions): Promise<IntegrationCredential>;
-/** Creates Vercel Integration's implementation for the Promise connection facade. */
-declare function integrationFlow(options: IntegrationFlowOptions): InteractiveFlow;
-/** Creates a Vercel token method for the Promise connection facade. */
-declare function tokenConnectionMethod(options: TokenConnectionOptions): Extract<Method, {
-  readonly _tag: "Token";
-}>;
-declare namespace vercel_d_exports {
-  export { Account, AccountContext, vercel_auth_d_exports as Auth, Fetch, Interface, ListZonesInput, Options, Zone, discovery, make };
-}
-interface Interface extends AsyncInterface {
-  readonly listAccounts: () => Promise<ReadonlyArray<Account>>;
-  readonly listZones: (input?: ListZonesInput) => Promise<ReadonlyArray<Zone>>;
-  readonly validateToken: () => Promise<TokenValidation>;
-}
-/** Creates a Promise-compatible facade over the Effect-native Vercel client. */
-declare function make(options: Options): Interface;
-/** Creates the optional Vercel discovery source for Promise consumers. */
-declare function discovery(options: Options): Source;
-//#endregion
-export { vercel_auth_d_exports as a, vercel_d_exports as i, discovery as n, make as r, Interface as t };
-//# sourceMappingURL=vercel-BsNDu4Np.d.mts.map

package/dist/vercel-CfoJaaCu.mjs

@@ -1,60 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { n as fromEffectFlow, r as fromEffectTokenMethod } from "./connection-BwtOwpH6.mjs";
-import { a as manifest$1, i as integrationMethod$1, n as exchangeCode$1, o as tokenConnectionMethod$1, r as integrationFlow$1, s as tokenMethod$1, u as make$1 } from "./auth-g-waCHcz.mjs";
-import { Effect } from "effect";
-//#region src/promise/vercel-auth.ts
-var vercel_auth_exports = /* @__PURE__ */ __exportAll({
-	exchangeCode: () => exchangeCode,
-	integrationFlow: () => integrationFlow,
-	integrationMethod: () => integrationMethod,
-	manifest: () => manifest,
-	tokenConnectionMethod: () => tokenConnectionMethod,
-	tokenMethod: () => tokenMethod
-});
-const integrationMethod = integrationMethod$1;
-const manifest = manifest$1;
-const tokenMethod = tokenMethod$1;
-function exchangeCode(options) {
-	return Effect.runPromise(exchangeCode$1(options));
-}
-/** Creates Vercel Integration's implementation for the Promise connection facade. */
-function integrationFlow(options) {
-	return fromEffectFlow(integrationFlow$1(options));
-}
-/** Creates a Vercel token method for the Promise connection facade. */
-function tokenConnectionMethod(options) {
-	return fromEffectTokenMethod(tokenConnectionMethod$1(options));
-}
-//#endregion
-//#region src/promise/vercel.ts
-var vercel_exports = /* @__PURE__ */ __exportAll({
-	Auth: () => vercel_auth_exports,
-	discovery: () => discovery,
-	make: () => make
-});
-/** Creates a Promise-compatible facade over the Effect-native Vercel client. */
-function make(options) {
-	const client = make$1(options);
-	return {
-		id: client.id,
-		createRecord: (zone, record) => Effect.runPromise(client.createRecord(zone, record)),
-		deleteRecord: (zone, providerRecordId) => Effect.runPromise(client.deleteRecord(zone, providerRecordId)),
-		getRecord: (zone, providerRecordId) => Effect.runPromise(client.getRecord(zone, providerRecordId)),
-		listAccounts: () => Effect.runPromise(client.listAccounts()),
-		listRecords: (zone) => Effect.runPromise(client.listRecords(zone)),
-		listZones: (input) => Effect.runPromise(client.listZones(input)),
-		validateToken: () => Effect.runPromise(client.validateToken())
-	};
-}
-/** Creates the optional Vercel discovery source for Promise consumers. */
-function discovery(options) {
-	const client = make(options);
-	return {
-		listZones: (name) => client.listZones({ name }),
-		provider: client
-	};
-}
-//#endregion
-export { vercel_auth_exports as i, make as n, vercel_exports as r, discovery as t };
-
-//# sourceMappingURL=vercel-CfoJaaCu.mjs.map

package/dist/vercel-CfoJaaCu.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"vercel-CfoJaaCu.mjs","names":["EffectAuth.integrationMethod","EffectAuth.manifest","EffectAuth.tokenMethod","EffectAuth.exchangeCode","Connection.fromEffectFlow","EffectAuth.integrationFlow","Connection.fromEffectTokenMethod","EffectAuth.tokenConnectionMethod","Vercel.make"],"sources":["../src/promise/vercel-auth.ts","../src/promise/vercel.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as EffectAuth from \"../providers/vercel/auth.ts\";\nimport * as Connection from \"./connection.ts\";\n\nexport const integrationMethod = EffectAuth.integrationMethod;\nexport const manifest = EffectAuth.manifest;\nexport const tokenMethod = EffectAuth.tokenMethod;\nexport type {\n  ExchangeCodeOptions,\n  IntegrationCredential,\n  IntegrationFlowOptions,\n  IntegrationMethodOptions,\n} from \"../providers/vercel/auth.ts\";\n\nexport function exchangeCode(\n  options: EffectAuth.ExchangeCodeOptions,\n): Promise<EffectAuth.IntegrationCredential> {\n  return Effect.runPromise(EffectAuth.exchangeCode(options));\n}\n\n/** Creates Vercel Integration's implementation for the Promise connection facade. */\nexport function integrationFlow(\n  options: EffectAuth.IntegrationFlowOptions,\n): Connection.InteractiveFlow {\n  return Connection.fromEffectFlow(EffectAuth.integrationFlow(options));\n}\n\n/** Creates a Vercel token method for the Promise connection facade. */\nexport function tokenConnectionMethod(\n  options: EffectAuth.TokenConnectionOptions,\n): Extract<Connection.Method, { readonly _tag: \"Token\" }> {\n  return Connection.fromEffectTokenMethod(EffectAuth.tokenConnectionMethod(options));\n}\n","import { Effect } from \"effect\";\n\nimport type * as ProviderAuth from \"../auth/manifest.ts\";\nimport type * as DnsProvider from \"../provider/provider.ts\";\nimport * as Vercel from \"../providers/vercel/index.ts\";\nimport type * as ZoneDiscovery from \"./zone-discovery.ts\";\n\nexport * as Auth from \"./vercel-auth.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"../providers/vercel/client.ts\";\n\nexport interface Interface extends DnsProvider.AsyncInterface {\n  readonly listAccounts: () => Promise<ReadonlyArray<Vercel.Account>>;\n  readonly listZones: (input?: Vercel.Client.ListZonesInput) => Promise<ReadonlyArray<Vercel.Zone>>;\n  readonly validateToken: () => Promise<ProviderAuth.TokenValidation>;\n}\n\n/** Creates a Promise-compatible facade over the Effect-native Vercel client. */\nexport function make(options: Vercel.Client.Options): Interface {\n  const client = Vercel.make(options);\n  return {\n    id: client.id,\n    createRecord: (zone, record) => Effect.runPromise(client.createRecord(zone, record)),\n    deleteRecord: (zone, providerRecordId) =>\n      Effect.runPromise(client.deleteRecord(zone, providerRecordId)),\n    getRecord: (zone, providerRecordId) =>\n      Effect.runPromise(client.getRecord(zone, providerRecordId)),\n    listAccounts: () => Effect.runPromise(client.listAccounts()),\n    listRecords: (zone) => Effect.runPromise(client.listRecords(zone)),\n    listZones: (input) => Effect.runPromise(client.listZones(input)),\n    validateToken: () => Effect.runPromise(client.validateToken()),\n  };\n}\n\n/** Creates the optional Vercel discovery source for Promise consumers. */\nexport function discovery(options: Vercel.Client.Options): ZoneDiscovery.Source {\n  const client = make(options);\n  return {\n    listZones: (name) => client.listZones({ name }),\n    provider: client,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAKA,MAAa,oBAAoBA;AACjC,MAAa,WAAWC;AACxB,MAAa,cAAcC;AAQ3B,SAAgB,aACd,SAC2C;CAC3C,OAAO,OAAO,WAAWC,eAAwB,OAAO,CAAC;AAC3D;;AAGA,SAAgB,gBACd,SAC4B;CAC5B,OAAOC,eAA0BC,kBAA2B,OAAO,CAAC;AACtE;;AAGA,SAAgB,sBACd,SACwD;CACxD,OAAOC,sBAAiCC,wBAAiC,OAAO,CAAC;AACnF;;;;;;;;;ACTA,SAAgB,KAAK,SAA2C;CAC9D,MAAM,SAASC,OAAY,OAAO;CAClC,OAAO;EACL,IAAI,OAAO;EACX,eAAe,MAAM,WAAW,OAAO,WAAW,OAAO,aAAa,MAAM,MAAM,CAAC;EACnF,eAAe,MAAM,qBACnB,OAAO,WAAW,OAAO,aAAa,MAAM,gBAAgB,CAAC;EAC/D,YAAY,MAAM,qBAChB,OAAO,WAAW,OAAO,UAAU,MAAM,gBAAgB,CAAC;EAC5D,oBAAoB,OAAO,WAAW,OAAO,aAAa,CAAC;EAC3D,cAAc,SAAS,OAAO,WAAW,OAAO,YAAY,IAAI,CAAC;EACjE,YAAY,UAAU,OAAO,WAAW,OAAO,UAAU,KAAK,CAAC;EAC/D,qBAAqB,OAAO,WAAW,OAAO,cAAc,CAAC;CAC/D;AACF;;AAGA,SAAgB,UAAU,SAAsD;CAC9E,MAAM,SAAS,KAAK,OAAO;CAC3B,OAAO;EACL,YAAY,SAAS,OAAO,UAAU,EAAE,KAAK,CAAC;EAC9C,UAAU;CACZ;AACF"}

package/dist/vercel.d.mts

@@ -1,3 +0,0 @@
-import { _ as Zone, d as Account, f as AccountContext, g as Options, h as ListZonesInput, p as Fetch } from "./index-D3PVknwE.mjs";
-import { a as vercel_auth_d_exports, n as discovery, r as make, t as Interface } from "./vercel-BsNDu4Np.mjs";
-export { type Account, type AccountContext, vercel_auth_d_exports as Auth, type Fetch, Interface, type ListZonesInput, type Options, type Zone, discovery, make };

package/dist/vercel.mjs

@@ -1,2 +0,0 @@
-import { i as vercel_auth_exports, n as make, t as discovery } from "./vercel-CfoJaaCu.mjs";
-export { vercel_auth_exports as Auth, discovery, make };