domainkit 0.2.2 → 0.3.0

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["decode","ProviderAuth.decode","decode","ProviderAuthorization.decode","Discovery.make","Provider.Error","DnsPlan.decode","DnsPlan.decodeReceipt","create","DeletionEffect.create","DnsProvider.layerFromAsync","authorize","DeletionEffect.authorize","apply","DeletionEffect.apply","ProvisioningEffect.create","ZoneDiscoveryEffect.Service","ZoneDiscoveryEffect.make","ZoneDiscovery.toEffectSource","DnsProvider.layerFromAsync","ProvisioningEffect.authorize","ProvisioningEffect.apply","ConnectionAuthorization.authorize","ProvisioningEffect.renderManualInstructions","VerificationEffect.PublicDns","VerificationEffect.observe","DnsProvider.layerFromAsync","DnsResolverPoolEffect.Service","DnsResolverPoolEffect.make","DnsResolver.Error","make","CloudflareDnsOverHttps.toAsync","make","DnsOverHttps.toAsync","make","GoogleDnsOverHttps.toAsync","Pool.make","Pool.defaultMake","DnsResolver.Error","packageJson.version"],"sources":["../src/promise/provider-auth.ts","../src/promise/provider-authorization.ts","../src/promise/zone-discovery.ts","../src/promise/dns-record.ts","../src/promise/domain-name.ts","../src/promise/dns-plan.ts","../src/promise/deletion.ts","../src/promise/provisioning.ts","../src/promise/verification.ts","../src/promise/cloudflare-doh.ts","../src/promise/doh.ts","../src/promise/google-doh.ts","../src/promise/resolver-pool.ts","../src/index.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as ProviderAuth from \"../auth/manifest.ts\";\n\nexport { Method, Schema } from \"../auth/manifest.ts\";\nexport type {\n  AsyncOAuthSubjectResolver as OAuthSubjectResolver,\n  Manifest,\n  OAuthClientConfiguration,\n  OAuthMethod,\n  TokenValidation,\n} from \"../auth/manifest.ts\";\n\nexport function decode(input: unknown): Promise<ProviderAuth.Manifest> {\n  return Effect.runPromise(ProviderAuth.decode(input));\n}\n","import { Effect } from \"effect\";\n\nimport * as ProviderAuthorization from \"../auth/authorization.ts\";\n\nexport {\n  Capability,\n  CapabilityEvidence,\n  encode,\n  Evidence,\n  EvidenceSchema,\n  Schema,\n} from \"../auth/authorization.ts\";\nexport type { ProviderAuthorization } from \"../auth/authorization.ts\";\n\nexport function decode(input: unknown): Promise<ProviderAuthorization.ProviderAuthorization> {\n  return Effect.runPromise(ProviderAuthorization.decode(input));\n}\n","import { Effect } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsProvider from \"../provider/provider.ts\";\nimport * as Provider from \"../provider/provider.ts\";\nimport * as Discovery from \"../discovery/zone-discovery.ts\";\n\nexport interface Source {\n  readonly listZones: (\n    name: DomainName.DomainName,\n  ) => Promise<ReadonlyArray<Omit<Discovery.Candidate, \"providerId\">>>;\n  readonly provider: DnsProvider.AsyncInterface;\n}\n\nexport type Outcome =\n  | { readonly _tag: \"NotFound\"; readonly domain: DomainName.DomainName }\n  | { readonly _tag: \"Resolved\"; readonly candidate: Discovery.Candidate }\n  | { readonly _tag: \"SelectionRequired\"; readonly candidates: ReadonlyArray<Discovery.Candidate> };\n\nexport function discover(input: {\n  readonly domain: DomainName.DomainName;\n  readonly sources: ReadonlyArray<Source>;\n}): Promise<Outcome> {\n  return Effect.runPromise(\n    Discovery.make(input.sources.map(toEffectSource))\n      .discover(input.domain)\n      .pipe(Effect.map(projectOutcome)),\n  );\n}\n\nexport function toEffectSource(source: Source): Discovery.Source {\n  return {\n    listZones: (name) =>\n      Effect.tryPromise({\n        try: () => source.listZones(name),\n        catch: (cause) =>\n          new Provider.Error({\n            cause,\n            message: cause instanceof globalThis.Error ? cause.message : String(cause),\n            operation: \"ZoneDiscovery.listZones\",\n            providerId: source.provider.id,\n            reason: \"transport\",\n          }),\n      }),\n    provider: Provider.Service.of({\n      id: source.provider.id,\n      createRecord: (zone, record) =>\n        Effect.tryPromise({\n          try: () => source.provider.createRecord(zone, record),\n          catch: (cause) => providerFailure(source.provider.id, \"createRecord\", cause),\n        }),\n      deleteRecord: (zone, providerRecordId) =>\n        Effect.tryPromise({\n          try: () => source.provider.deleteRecord(zone, providerRecordId),\n          catch: (cause) => providerFailure(source.provider.id, \"deleteRecord\", cause),\n        }),\n      getRecord: (zone, providerRecordId) =>\n        Effect.tryPromise({\n          try: () => source.provider.getRecord(zone, providerRecordId),\n          catch: (cause) => providerFailure(source.provider.id, \"getRecord\", cause),\n        }),\n      listRecords: (zone) =>\n        Effect.tryPromise({\n          try: () => source.provider.listRecords(zone),\n          catch: (cause) => providerFailure(source.provider.id, \"listRecords\", cause),\n        }),\n    }),\n  };\n}\n\nfunction projectOutcome(outcome: Discovery.Outcome): Outcome {\n  switch (outcome._tag) {\n    case \"NotFound\":\n      return outcome;\n    case \"Resolved\":\n      return { _tag: \"Resolved\", candidate: outcome.candidate };\n    case \"SelectionRequired\":\n      return outcome;\n  }\n}\n\nfunction providerFailure(providerId: string, operation: string, cause: unknown): Provider.Error {\n  return cause instanceof Provider.Error\n    ? cause\n    : new Provider.Error({\n        cause,\n        message: cause instanceof globalThis.Error ? cause.message : String(cause),\n        operation,\n        providerId,\n      });\n}\n\nexport { Candidate } from \"../discovery/zone-discovery.ts\";\n","export {\n  A,\n  Aaaa,\n  Caa,\n  Cname,\n  data,\n  equals,\n  Mx,\n  Ns,\n  Opaque,\n  Observed,\n  parse,\n  RequirementMetadata,\n  Schema,\n  Srv,\n  Txt,\n  Type,\n} from \"../domain/dns-record.ts\";\nexport type { DnsRecord, Encoded } from \"../domain/dns-record.ts\";\n","export { parse, Schema } from \"../domain/domain-name.ts\";\nexport type { DomainName } from \"../domain/domain-name.ts\";\n","import { Effect } from \"effect\";\n\nimport * as DnsPlan from \"../plan/types.ts\";\n\nexport { Authorization, encode, encodeReceipt, Operation, Receipt, Schema } from \"../plan/types.ts\";\nexport type { ApplyReceipt, DnsPlan, PlanAuthorization } from \"../plan/types.ts\";\n\nexport function decode(input: unknown): Promise<DnsPlan.DnsPlan> {\n  return Effect.runPromise(DnsPlan.decode(input));\n}\n\nexport function decodeReceipt(input: unknown): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(DnsPlan.decodeReceipt(input));\n}\n","import { Effect, Layer } from \"effect\";\n\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as DeletionEffect from \"../plan/deletion.ts\";\nimport type * as DnsPlan from \"../plan/types.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\n\nexport function create(input: {\n  readonly plan: DnsPlan.DnsPlan;\n  readonly provider: DnsProvider.AsyncInterface;\n  readonly receipt: DnsPlan.ApplyReceipt;\n  readonly ttlMs?: number;\n}): Promise<DeletionEffect.Plan> {\n  return Effect.runPromise(\n    DeletionEffect.create({\n      plan: input.plan,\n      receipt: input.receipt,\n      ...(input.ttlMs === undefined ? {} : { ttlMs: input.ttlMs }),\n    }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorize(\n  plan: DeletionEffect.Plan,\n  operationIds?: ReadonlyArray<string>,\n): Promise<DeletionEffect.Authorization> {\n  return Effect.runPromise(\n    DeletionEffect.authorize(plan, operationIds).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport function apply(input: {\n  readonly authorization: DeletionEffect.Authorization;\n  readonly plan: DeletionEffect.Plan;\n  readonly priorReceipt?: DeletionEffect.Receipt;\n  readonly provider: DnsProvider.AsyncInterface;\n}): Promise<DeletionEffect.Receipt> {\n  return Effect.runPromise(\n    DeletionEffect.apply({\n      authorization: input.authorization,\n      plan: input.plan,\n      ...(input.priorReceipt === undefined ? {} : { priorReceipt: input.priorReceipt }),\n    }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport { Authorization, Error, Operation, PartialError, Plan, Receipt } from \"../plan/deletion.ts\";\nexport type {\n  ApplyError,\n  Authorization as DeletionAuthorization,\n  CreateError,\n  Operation as DeletionOperation,\n  Plan as DeletionPlan,\n  Receipt as DeletionReceipt,\n} from \"../plan/deletion.ts\";\n","import { Effect, Layer } from \"effect\";\n\nimport type * as Connection from \"../auth/connection.ts\";\nimport type * as ProviderAuthorization from \"../auth/authorization.ts\";\nimport * as ConnectionAuthorization from \"../plan/connection-authorization.ts\";\nimport { webCryptoLayer } from \"../plan/canonical-json.ts\";\nimport * as ProvisioningEffect from \"../plan/plan.ts\";\nimport type * as DnsPlan from \"../plan/types.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as ZoneDiscoveryEffect from \"../discovery/zone-discovery.ts\";\nimport * as ZoneDiscovery from \"./zone-discovery.ts\";\n\nexport interface ExactCreateInput extends ProvisioningEffect.ExactCreateInput {\n  readonly provider: DnsProvider.AsyncInterface;\n}\n\nexport interface DiscoverCreateInput extends ProvisioningEffect.DiscoverCreateInput {\n  readonly sources: ReadonlyArray<ZoneDiscovery.Source>;\n}\n\nexport function create(input: ExactCreateInput): Promise<ProvisioningEffect.ResolvedCreateResult>;\nexport function create(input: DiscoverCreateInput): Promise<ProvisioningEffect.CreateResult>;\nexport function create(\n  input: ExactCreateInput | DiscoverCreateInput,\n): Promise<ProvisioningEffect.CreateResult> {\n  if (\"sources\" in input) {\n    const { sources, ...programInput } = input;\n    return Effect.runPromise(\n      ProvisioningEffect.create(programInput).pipe(\n        Effect.provide(\n          Layer.merge(\n            Layer.succeed(\n              ZoneDiscoveryEffect.Service,\n              ZoneDiscoveryEffect.make(sources.map(ZoneDiscovery.toEffectSource)),\n            ),\n            webCryptoLayer,\n          ),\n        ),\n      ),\n    );\n  }\n  const { provider, ...programInput } = input;\n  return Effect.runPromise(\n    ProvisioningEffect.create(programInput).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorize(\n  plan: DnsPlan.DnsPlan,\n  operationIds?: ReadonlyArray<string>,\n  options: { readonly allowPartial?: boolean } = {},\n): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ProvisioningEffect.authorize(plan, operationIds, options).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport function apply(input: {\n  readonly authorization: DnsPlan.PlanAuthorization;\n  readonly plan: DnsPlan.DnsPlan;\n  readonly provider: DnsProvider.AsyncInterface;\n}): Promise<DnsPlan.ApplyReceipt> {\n  return Effect.runPromise(\n    ProvisioningEffect.apply({ authorization: input.authorization, plan: input.plan }).pipe(\n      Effect.provide(Layer.merge(DnsProvider.layerFromAsync(input.provider), webCryptoLayer)),\n    ),\n  );\n}\n\nexport function authorizeForConnection(input: {\n  readonly allowPartial?: boolean;\n  readonly authorization: ProviderAuthorization.ProviderAuthorization;\n  readonly connection: Connection.Connection;\n  readonly domain: string;\n  readonly operationIds?: ReadonlyArray<string>;\n  readonly plan: DnsPlan.DnsPlan;\n}): Promise<DnsPlan.PlanAuthorization> {\n  return Effect.runPromise(\n    ConnectionAuthorization.authorize(input).pipe(Effect.provide(webCryptoLayer)),\n  );\n}\n\nexport const renderManualInstructions = ProvisioningEffect.renderManualInstructions;\nexport { CreateResult, Target } from \"../plan/plan.ts\";\n","import { Data, Effect, Layer } from \"effect\";\n\nimport type * as DomainName from \"../domain/domain-name.ts\";\nimport type * as DnsRecord from \"../domain/dns-record.ts\";\nimport * as DnsProvider from \"../provider/provider.ts\";\nimport * as DnsResolver from \"../verification/resolver.ts\";\nimport * as DnsResolverPoolEffect from \"../verification/resolver-pool.ts\";\nimport * as VerificationEffect from \"../verification/verify.ts\";\nimport type * as DnsResolverPool from \"./resolver-pool.ts\";\n\nexport type PublicDns = VerificationEffect.PublicDns;\nexport const PublicDns = VerificationEffect.PublicDns;\n\nexport type Provider = Data.TaggedEnum<{\n  Disabled: {};\n  Enabled: {\n    readonly provider: DnsProvider.AsyncInterface;\n    readonly zone: DomainName.DomainName;\n  };\n}>;\nexport const Provider = Data.taggedEnum<Provider>();\n\nexport interface Config {\n  readonly provider?: Provider;\n  readonly publicDns?: PublicDns;\n  readonly record: DnsRecord.DnsRecord;\n  readonly resolvers?: ReadonlyArray<DnsResolverPool.Entry>;\n}\n\nexport { ProviderObservation, PublicDnsObservation, Result } from \"../verification/verify.ts\";\n\nexport function observe(input: Config): Promise<VerificationEffect.Result> {\n  const provider = input.provider ?? Provider.Disabled();\n  let program =\n    provider._tag === \"Enabled\"\n      ? VerificationEffect.observe({\n          record: input.record,\n          ...(input.publicDns === undefined ? {} : { publicDns: input.publicDns }),\n          provider: VerificationEffect.Provider.Enabled({ zone: provider.zone }),\n        }).pipe(Effect.provide(DnsProvider.layerFromAsync(provider.provider)))\n      : VerificationEffect.observe({\n          record: input.record,\n          ...(input.publicDns === undefined ? {} : { publicDns: input.publicDns }),\n          provider: VerificationEffect.Provider.Disabled(),\n        });\n  if (input.resolvers !== undefined) {\n    program = program.pipe(\n      Effect.provide(\n        Layer.succeed(\n          DnsResolverPoolEffect.Service,\n          DnsResolverPoolEffect.make(\n            input.resolvers.map((entry) => ({\n              id: entry.id,\n              resolver: fromAsyncResolver(entry.resolver),\n              ...(entry.timeoutMs === undefined ? {} : { timeoutMs: entry.timeoutMs }),\n            })),\n          ),\n        ),\n      ),\n    );\n  }\n  return Effect.runPromise(program);\n}\n\nfunction fromAsyncResolver(resolver: DnsResolver.AsyncInterface): DnsResolver.Interface {\n  return {\n    resolve: (query) =>\n      Effect.tryPromise({\n        try: () => resolver.resolve(query),\n        catch: (cause) =>\n          new DnsResolver.Error({\n            cause,\n            message: cause instanceof globalThis.Error ? cause.message : String(cause),\n            reason: \"transport\",\n          }),\n      }).pipe(\n        Effect.flatMap((resolution) => {\n          switch (resolution._tag) {\n            case \"answer\":\n            case \"nodata\":\n              return Effect.succeed(resolution);\n            case \"timeout\":\n              return Effect.fail(\n                new DnsResolver.Error({ message: \"DNS query timed out\", reason: \"timeout\" }),\n              );\n            case \"failure\":\n              return Effect.fail(\n                new DnsResolver.Error({ message: resolution.message, reason: \"transport\" }),\n              );\n          }\n        }),\n      ),\n  };\n}\n","import * as CloudflareDnsOverHttps from \"../verification/cloudflare-doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = CloudflareDnsOverHttps.Options;\n\nexport function make(options: Options = {}): DnsResolver.AsyncInterface {\n  return CloudflareDnsOverHttps.toAsync(options);\n}\n","import * as DnsOverHttps from \"../verification/doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = DnsOverHttps.Options;\n\nexport function make(options: Options): DnsResolver.AsyncInterface {\n  return DnsOverHttps.toAsync(options);\n}\n","import * as GoogleDnsOverHttps from \"../verification/google-doh.ts\";\nimport type * as DnsResolver from \"../verification/resolver.ts\";\n\nexport type Options = GoogleDnsOverHttps.Options;\n\nexport function make(options: Options = {}): DnsResolver.AsyncInterface {\n  return GoogleDnsOverHttps.toAsync(options);\n}\n","import { Effect } from \"effect\";\n\nimport * as DnsResolver from \"../verification/resolver.ts\";\nimport * as Pool from \"../verification/resolver-pool.ts\";\n\nexport interface Entry {\n  readonly id: string;\n  readonly resolver: DnsResolver.AsyncInterface;\n  readonly timeoutMs?: number;\n}\n\nexport interface Interface {\n  readonly observe: (query: DnsResolver.Query) => Promise<ReadonlyArray<Pool.Observation>>;\n}\n\nexport function make(entries: ReadonlyArray<Entry>): Interface {\n  return toAsync(\n    Pool.make(\n      entries.map((entry) => ({\n        id: entry.id,\n        resolver: asyncResolver(entry.resolver),\n        ...(entry.timeoutMs === undefined ? {} : { timeoutMs: entry.timeoutMs }),\n      })),\n    ),\n  );\n}\n\nexport function defaultMake(options: Pool.DefaultOptions = {}): Interface {\n  return toAsync(Pool.defaultMake(options));\n}\n\nexport { Observation, Policy } from \"../verification/resolver-pool.ts\";\n\nfunction toAsync(pool: Pool.Interface): Interface {\n  return {\n    observe: (query) => Effect.runPromise(pool.observe(query)),\n  };\n}\n\nfunction asyncResolver(resolver: DnsResolver.AsyncInterface): DnsResolver.Interface {\n  return {\n    resolve: (query) =>\n      Effect.tryPromise({\n        try: () => resolver.resolve(query),\n        catch: (cause) =>\n          new DnsResolver.Error({\n            cause,\n            message: cause instanceof globalThis.Error ? cause.message : String(cause),\n            reason: \"transport\",\n          }),\n      }).pipe(\n        Effect.flatMap((resolution) => {\n          switch (resolution._tag) {\n            case \"answer\":\n            case \"nodata\":\n              return Effect.succeed(resolution);\n            case \"timeout\":\n              return Effect.fail(\n                new DnsResolver.Error({ message: \"DNS query timed out\", reason: \"timeout\" }),\n              );\n            case \"failure\":\n              return Effect.fail(\n                new DnsResolver.Error({ message: resolution.message, reason: \"transport\" }),\n              );\n          }\n        }),\n      ),\n  };\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./promise/connection.ts\";\nexport * as AuthorizationLifecycle from \"./promise/authorization-lifecycle.ts\";\nexport * as Diagnostic from \"./auth/diagnostic.ts\";\nexport * as ProviderContext from \"./auth/provider-context.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport type * as DnsProvider from \"./promise/dns-provider.ts\";\nexport type * as DnsResolver from \"./promise/dns-resolver.ts\";\nexport * as ProviderAuth from \"./promise/provider-auth.ts\";\nexport * as ProviderAuthorization from \"./promise/provider-authorization.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as ZoneDiscovery from \"./promise/zone-discovery.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./promise/dns-record.ts\";\nexport * as DomainName from \"./promise/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsPlan from \"./promise/dns-plan.ts\";\nexport * as Deletion from \"./promise/deletion.ts\";\nexport * as Cloudflare from \"./promise/cloudflare.ts\";\nexport * as Vercel from \"./promise/vercel.ts\";\nexport * as Provisioning from \"./promise/provisioning.ts\";\nexport * as Verification from \"./promise/verification.ts\";\nexport * as CloudflareDnsOverHttps from \"./promise/cloudflare-doh.ts\";\nexport * as DnsOverHttps from \"./promise/doh.ts\";\nexport * as GoogleDnsOverHttps from \"./promise/google-doh.ts\";\nexport * as DnsResolverPool from \"./promise/resolver-pool.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;AAaA,SAAgBA,SAAO,OAAgD;CACrE,OAAO,OAAO,WAAWC,SAAoB,KAAK,CAAC;AACrD;;;;;;;;;;;;ACDA,SAAgBC,SAAO,OAAsE;CAC3F,OAAO,OAAO,WAAWC,SAA6B,KAAK,CAAC;AAC9D;;;;;;;;ACGA,SAAgB,SAAS,OAGJ;CACnB,OAAO,OAAO,WACZC,OAAe,MAAM,QAAQ,IAAI,cAAc,CAAC,CAAC,CAC9C,SAAS,MAAM,MAAM,CAAC,CACtB,KAAK,OAAO,IAAI,cAAc,CAAC,CACpC;AACF;AAEA,SAAgB,eAAe,QAAkC;CAC/D,OAAO;EACL,YAAY,SACV,OAAO,WAAW;GAChB,WAAW,OAAO,UAAU,IAAI;GAChC,QAAQ,UACN,IAAIC,MAAe;IACjB;IACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;IACzE,WAAW;IACX,YAAY,OAAO,SAAS;IAC5B,QAAQ;GACV,CAAC;EACL,CAAC;EACH,UAAA,QAA2B,GAAG;GAC5B,IAAI,OAAO,SAAS;GACpB,eAAe,MAAM,WACnB,OAAO,WAAW;IAChB,WAAW,OAAO,SAAS,aAAa,MAAM,MAAM;IACpD,QAAQ,UAAU,gBAAgB,OAAO,SAAS,IAAI,gBAAgB,KAAK;GAC7E,CAAC;GACH,eAAe,MAAM,qBACnB,OAAO,WAAW;IAChB,WAAW,OAAO,SAAS,aAAa,MAAM,gBAAgB;IAC9D,QAAQ,UAAU,gBAAgB,OAAO,SAAS,IAAI,gBAAgB,KAAK;GAC7E,CAAC;GACH,YAAY,MAAM,qBAChB,OAAO,WAAW;IAChB,WAAW,OAAO,SAAS,UAAU,MAAM,gBAAgB;IAC3D,QAAQ,UAAU,gBAAgB,OAAO,SAAS,IAAI,aAAa,KAAK;GAC1E,CAAC;GACH,cAAc,SACZ,OAAO,WAAW;IAChB,WAAW,OAAO,SAAS,YAAY,IAAI;IAC3C,QAAQ,UAAU,gBAAgB,OAAO,SAAS,IAAI,eAAe,KAAK;GAC5E,CAAC;EACL,CAAC;CACH;AACF;AAEA,SAAS,eAAe,SAAqC;CAC3D,QAAQ,QAAQ,MAAhB;EACE,KAAK,YACH,OAAO;EACT,KAAK,YACH,OAAO;GAAE,MAAM;GAAY,WAAW,QAAQ;EAAU;EAC1D,KAAK,qBACH,OAAO;CACX;AACF;AAEA,SAAS,gBAAgB,YAAoB,WAAmB,OAAgC;CAC9F,OAAO,iBAAiBA,QACpB,QACA,IAAIA,MAAe;EACjB;EACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;EACzE;EACA;CACF,CAAC;AACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGnFA,SAAgB,OAAO,OAA0C;CAC/D,OAAO,OAAO,WAAWC,SAAe,KAAK,CAAC;AAChD;AAEA,SAAgB,cAAc,OAA+C;CAC3E,OAAO,OAAO,WAAWC,gBAAsB,KAAK,CAAC;AACvD;;;;;;;;;;;;;;ACNA,SAAgBC,SAAO,OAKU;CAC/B,OAAO,OAAO,WACZC,SAAsB;EACpB,MAAM,MAAM;EACZ,SAAS,MAAM;EACf,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;CAC5D,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,MAAM,MAAMC,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgBC,YACd,MACA,cACuC;CACvC,OAAO,OAAO,WACZC,YAAyB,MAAM,YAAY,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAClF;AACF;AAEA,SAAgBC,QAAM,OAKc;CAClC,OAAO,OAAO,WACZC,QAAqB;EACnB,eAAe,MAAM;EACrB,MAAM,MAAM;EACZ,GAAI,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;CACjF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,MAAM,MAAMJ,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;;;;;;;;;;;;AC1BA,SAAgB,OACd,OAC0C;CAC1C,IAAI,aAAa,OAAO;EACtB,MAAM,EAAE,SAAS,GAAG,iBAAiB;EACrC,OAAO,OAAO,WACZK,SAA0B,YAAY,CAAC,CAAC,KACtC,OAAO,QACL,MAAM,MACJ,MAAM,QACJC,WACAC,OAAyB,QAAQ,IAAIC,cAA4B,CAAC,CACpE,GACA,cACF,CACF,CACF,CACF;CACF;CACA,MAAM,EAAE,UAAU,GAAG,iBAAiB;CACtC,OAAO,OAAO,WACZH,SAA0B,YAAY,CAAC,CAAC,KACtC,OAAO,QAAQ,MAAM,MAAMI,eAA2B,QAAQ,GAAG,cAAc,CAAC,CAClF,CACF;AACF;AAEA,SAAgB,UACd,MACA,cACA,UAA+C,CAAC,GACZ;CACpC,OAAO,OAAO,WACZC,YAA6B,MAAM,cAAc,OAAO,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC/F;AACF;AAEA,SAAgB,MAAM,OAIY;CAChC,OAAO,OAAO,WACZC,QAAyB;EAAE,eAAe,MAAM;EAAe,MAAM,MAAM;CAAK,CAAC,CAAC,CAAC,KACjF,OAAO,QAAQ,MAAM,MAAMF,eAA2B,MAAM,QAAQ,GAAG,cAAc,CAAC,CACxF,CACF;AACF;AAEA,SAAgB,uBAAuB,OAOA;CACrC,OAAO,OAAO,WACZG,YAAkC,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC,CAC9E;AACF;AAEA,MAAa,2BAA2BC;;;;;;;;;;;ACzExC,MAAa,YAAYC;AASzB,MAAa,WAAW,KAAK,WAAqB;AAWlD,SAAgB,QAAQ,OAAmD;CACzE,MAAM,WAAW,MAAM,YAAY,SAAS,SAAS;CACrD,IAAI,UACF,SAAS,SAAS,YACdC,UAA2B;EACzB,QAAQ,MAAM;EACd,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;EACtE,UAAA,WAAsC,QAAQ,EAAE,MAAM,SAAS,KAAK,CAAC;CACvE,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQC,eAA2B,SAAS,QAAQ,CAAC,CAAC,IACrED,UAA2B;EACzB,QAAQ,MAAM;EACd,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;EACtE,UAAA,WAAsC,SAAS;CACjD,CAAC;CACP,IAAI,MAAM,cAAc,KAAA,GACtB,UAAU,QAAQ,KAChB,OAAO,QACL,MAAM,QACJE,WACAC,OACE,MAAM,UAAU,KAAK,WAAW;EAC9B,IAAI,MAAM;EACV,UAAU,kBAAkB,MAAM,QAAQ;EAC1C,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;CACxE,EAAE,CACJ,CACF,CACF,CACF;CAEF,OAAO,OAAO,WAAW,OAAO;AAClC;AAEA,SAAS,kBAAkB,UAA6D;CACtF,OAAO,EACL,UAAU,UACR,OAAO,WAAW;EAChB,WAAW,SAAS,QAAQ,KAAK;EACjC,QAAQ,UACN,IAAIC,QAAkB;GACpB;GACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;GACzE,QAAQ;EACV,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,eAAe;EAC7B,QAAQ,WAAW,MAAnB;GACE,KAAK;GACL,KAAK,UACH,OAAO,OAAO,QAAQ,UAAU;GAClC,KAAK,WACH,OAAO,OAAO,KACZ,IAAIA,QAAkB;IAAE,SAAS;IAAuB,QAAQ;GAAU,CAAC,CAC7E;GACF,KAAK,WACH,OAAO,OAAO,KACZ,IAAIA,QAAkB;IAAE,SAAS,WAAW;IAAS,QAAQ;GAAY,CAAC,CAC5E;EACJ;CACF,CAAC,CACH,EACJ;AACF;;;;ACxFA,SAAgBC,OAAK,UAAmB,CAAC,GAA+B;CACtE,OAAOC,UAA+B,OAAO;AAC/C;;;;ACFA,SAAgBC,OAAK,SAA8C;CACjE,OAAOC,UAAqB,OAAO;AACrC;;;;ACFA,SAAgBC,OAAK,UAAmB,CAAC,GAA+B;CACtE,OAAOC,UAA2B,OAAO;AAC3C;;;;;;;;;ACQA,SAAgB,KAAK,SAA0C;CAC7D,OAAO,QACLC,OACE,QAAQ,KAAK,WAAW;EACtB,IAAI,MAAM;EACV,UAAU,cAAc,MAAM,QAAQ;EACtC,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;CACxE,EAAE,CACJ,CACF;AACF;AAEA,SAAgB,YAAY,UAA+B,CAAC,GAAc;CACxE,OAAO,QAAQC,cAAiB,OAAO,CAAC;AAC1C;AAIA,SAAS,QAAQ,MAAiC;CAChD,OAAO,EACL,UAAU,UAAU,OAAO,WAAW,KAAK,QAAQ,KAAK,CAAC,EAC3D;AACF;AAEA,SAAS,cAAc,UAA6D;CAClF,OAAO,EACL,UAAU,UACR,OAAO,WAAW;EAChB,WAAW,SAAS,QAAQ,KAAK;EACjC,QAAQ,UACN,IAAIC,QAAkB;GACpB;GACA,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;GACzE,QAAQ;EACV,CAAC;CACL,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,eAAe;EAC7B,QAAQ,WAAW,MAAnB;GACE,KAAK;GACL,KAAK,UACH,OAAO,OAAO,QAAQ,UAAU;GAClC,KAAK,WACH,OAAO,OAAO,KACZ,IAAIA,QAAkB;IAAE,SAAS;IAAuB,QAAQ;GAAU,CAAC,CAC7E;GACF,KAAK,WACH,OAAO,OAAO,KACZ,IAAIA,QAAkB;IAAE,SAAS,WAAW;IAAS,QAAQ;GAAY,CAAC,CAC5E;EACJ;CACF,CAAC,CACH,EACJ;AACF;;;;ACjEA,MAAa,UAAUC"}
+{"version":3,"file":"index.mjs","names":["packageJson.version"],"sources":["../src/auth/connection-api.ts","../src/providers/cloudflare/index.ts","../src/providers/vercel/index.ts","../src/transport.ts","../src/index.ts"],"sourcesContent":["export {\n  assertGrant,\n  authorizationError,\n  AuthorizationError,\n  decode,\n  encode,\n  coversDomain,\n  Grant,\n  includeDomains,\n  removeDomain as removeDomainFromGrant,\n  Schema,\n  validate,\n} from \"./connection.ts\";\nexport type { Connection, StoredCredential } from \"./connection.ts\";\nexport {\n  complete,\n  Error,\n  extend,\n  Method,\n  removeDomain,\n  RemoveDomainResult,\n  start,\n  StartResult,\n} from \"./connect.ts\";\nexport type {\n  Authentication,\n  AuthenticationFailure,\n  BaseInput,\n  CompleteInput,\n  Continuation,\n  ContinuationStore,\n  Failure,\n  InteractiveFlow,\n  InteractiveStart,\n  ExtendInput,\n  Method as ConnectionMethod,\n  Requirements,\n  RemoveDomainInput,\n  RemoveDomainResult as ConnectionRemoveDomainResult,\n  StartResult as ConnectionStartResult,\n} from \"./connect.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type { Account, Fetch, Interface, ListZonesInput, Options, Zone } from \"./client.ts\";\n","export * as Auth from \"./auth.ts\";\nexport * as Client from \"./client.ts\";\n\nexport { discovery, make } from \"./client.ts\";\nexport type {\n  Account,\n  AccountContext,\n  Fetch,\n  Interface,\n  ListZonesInput,\n  Options,\n  Zone,\n} from \"./client.ts\";\n","import { Context, Data, Effect, Layer, Schema } from \"effect\";\n\nimport type * as DomainDnsRecord from \"./domain/dns-record.ts\";\n\n/** A user-presentable failure at the application transport boundary. */\nexport class Failure extends Schema.TaggedError<Failure>()(\"Failure\", {\n  message: Schema.String,\n  operation: Schema.String,\n  retry: Schema.Literals([\"never\", \"after-user-action\", \"safe\", \"unknown\"]),\n}) {}\n\nexport const AuthenticationParameter = Schema.Struct({\n  description: Schema.optionalKey(Schema.String),\n  key: Schema.String,\n  label: Schema.String,\n  placeholder: Schema.optionalKey(Schema.String),\n  required: Schema.optionalKey(Schema.Boolean),\n});\nexport type AuthenticationParameter = typeof AuthenticationParameter.Type;\n\nexport const AuthenticationMethod = Schema.TaggedUnion({\n  OAuth: { label: Schema.String },\n  Token: {\n    label: Schema.String,\n    parameters: Schema.optionalKey(Schema.Array(AuthenticationParameter)),\n    placeholder: Schema.optionalKey(Schema.String),\n  },\n});\nexport type AuthenticationMethod = typeof AuthenticationMethod.Type;\n\n/** The authentication choice supplied to a connection request. */\nexport type Method = Data.TaggedEnum<{\n  OAuth: {};\n  Token: {\n    readonly parameters?: Readonly<Record<string, string>>;\n    readonly token: string;\n  };\n}>;\nexport const Method = Data.taggedEnum<Method>();\n\nexport const Provider = Schema.Struct({\n  authentication: Schema.Array(AuthenticationMethod),\n  id: Schema.String,\n  name: Schema.String,\n});\nexport type Provider = typeof Provider.Type;\n\nexport const Connected = Schema.TaggedStruct(\"Connected\", {\n  connectionId: Schema.String,\n  domain: Schema.String,\n  provider: Provider,\n});\nexport type Connected = typeof Connected.Type;\n\nexport const ReusableConnection = Schema.Struct({\n  connectionId: Schema.String,\n  label: Schema.String,\n});\nexport type ReusableConnection = typeof ReusableConnection.Type;\n\nexport const Disconnected = Schema.TaggedStruct(\"Disconnected\", {\n  domain: Schema.String,\n  provider: Provider,\n  reusableConnection: Schema.optionalKey(ReusableConnection),\n});\nexport type Disconnected = typeof Disconnected.Type;\n\nexport const Unsupported = Schema.TaggedStruct(\"Unsupported\", { domain: Schema.String });\nexport type Unsupported = typeof Unsupported.Type;\n\nexport const ConnectionSnapshot = Schema.Union([Connected, Disconnected, Unsupported]).pipe(\n  Schema.toTaggedUnion(\"_tag\"),\n);\nexport type ConnectionSnapshot = typeof ConnectionSnapshot.Type;\n\nexport const Redirect = Schema.TaggedStruct(\"Redirect\", { authorizationUrl: Schema.String });\nexport type Redirect = typeof Redirect.Type;\n\nexport const ConnectionResult = Schema.Union([Connected, Redirect]).pipe(\n  Schema.toTaggedUnion(\"_tag\"),\n);\nexport type ConnectionResult = typeof ConnectionResult.Type;\n\nexport const RemoveDomainResult = Schema.TaggedStruct(\"Removed\", {\n  connectionId: Schema.String,\n  domain: Schema.String,\n  remainingDomainCount: Schema.Int,\n});\nexport type RemoveDomainResult = typeof RemoveDomainResult.Type;\n\n/** A presentation projection of a DNS requirement. */\nexport const DnsRecord = Schema.Struct({\n  id: Schema.String,\n  name: Schema.String,\n  priority: Schema.optionalKey(Schema.Int),\n  type: Schema.String,\n  value: Schema.String,\n});\nexport type DnsRecord = typeof DnsRecord.Type;\n\n/** Projects DomainKit's operational record into its application transport representation. */\nexport const fromDnsRecord = (id: string, record: DomainDnsRecord.DnsRecord): DnsRecord => {\n  switch (record._tag) {\n    case \"A\":\n    case \"AAAA\":\n      return { id, name: record.name, type: record._tag, value: record.address };\n    case \"CNAME\":\n    case \"NS\":\n      return { id, name: record.name, type: record._tag, value: record.target };\n    case \"TXT\":\n      return { id, name: record.name, type: record._tag, value: record.value };\n    case \"MX\":\n      return {\n        id,\n        name: record.name,\n        priority: record.priority,\n        type: record._tag,\n        value: record.exchange,\n      };\n    case \"CAA\":\n      return {\n        id,\n        name: record.name,\n        type: record._tag,\n        value: `${record.flags} ${record.tag} ${record.value}`,\n      };\n    case \"SRV\":\n      return {\n        id,\n        name: record.name,\n        priority: record.priority,\n        type: record._tag,\n        value: `${record.weight} ${record.port} ${record.target}`,\n      };\n  }\n};\n\nexport const PlanOperation = Schema.TaggedUnion({\n  Conflict: { id: Schema.String, reason: Schema.String, record: DnsRecord },\n  Create: { id: Schema.String, record: DnsRecord },\n  Noop: { id: Schema.String, record: DnsRecord },\n});\nexport type PlanOperation = typeof PlanOperation.Type;\n\nexport const ProvisioningPlan = Schema.TaggedStruct(\"Plan\", {\n  digest: Schema.String,\n  expiresAt: Schema.String,\n  operations: Schema.Array(PlanOperation),\n});\nexport type ProvisioningPlan = typeof ProvisioningPlan.Type;\n\nexport const OperationResult = Schema.TaggedUnion({\n  Applied: { operationId: Schema.String },\n  Failed: { message: Schema.String, operationId: Schema.String },\n  Unchanged: { operationId: Schema.String },\n});\nexport type OperationResult = typeof OperationResult.Type;\n\nconst ApplyOutcomeFields = {\n  operationId: Schema.String,\n  receiptId: Schema.String,\n  results: Schema.Array(OperationResult),\n};\nexport const ApplyResult = Schema.TaggedUnion({\n  Applied: ApplyOutcomeFields,\n  Partial: ApplyOutcomeFields,\n  Stale: { message: Schema.String },\n});\nexport type ApplyResult = typeof ApplyResult.Type;\n\nexport const ObservationEvidence = Schema.TaggedUnion({\n  Found: { recordId: Schema.String },\n  Mismatch: { message: Schema.String, recordId: Schema.String },\n  Missing: { recordId: Schema.String },\n  Unavailable: { message: Schema.String, recordId: Schema.String },\n});\nexport type ObservationEvidence = typeof ObservationEvidence.Type;\n\nexport const Observation = Schema.TaggedStruct(\"Observation\", {\n  provider: Schema.Array(ObservationEvidence),\n  publicDns: Schema.Array(ObservationEvidence),\n});\nexport type Observation = typeof Observation.Type;\n\nexport const CleanupOperation = Schema.TaggedUnion({\n  AlreadyAbsent: { id: Schema.String, record: DnsRecord },\n  Blocked: { id: Schema.String, reason: Schema.String, record: DnsRecord },\n  Delete: { id: Schema.String, record: DnsRecord },\n});\nexport type CleanupOperation = typeof CleanupOperation.Type;\n\nexport const CleanupPlan = Schema.TaggedStruct(\"CleanupPlan\", {\n  digest: Schema.String,\n  expiresAt: Schema.String,\n  operations: Schema.Array(CleanupOperation),\n});\nexport type CleanupPlan = typeof CleanupPlan.Type;\n\nconst CleanupOutcomeFields = {\n  operationId: Schema.String,\n  results: Schema.Array(OperationResult),\n};\nexport const CleanupResult = Schema.TaggedUnion({\n  Cleaned: CleanupOutcomeFields,\n  Partial: CleanupOutcomeFields,\n  Stale: { message: Schema.String },\n});\nexport type CleanupResult = typeof CleanupResult.Type;\n\nexport interface ConnectInput {\n  readonly domain: string;\n  readonly method: Method;\n  readonly providerId: string;\n}\n\nexport interface InspectInput {\n  readonly domain: string;\n}\n\nexport interface ReuseInput {\n  readonly connectionId: string;\n  readonly domain: string;\n}\n\nexport interface RemoveDomainInput extends ReuseInput {\n  readonly preserveDns: true;\n}\n\nexport interface ProvisioningPlanInput extends ReuseInput {\n  readonly records: ReadonlyArray<DnsRecord>;\n}\n\nexport interface ProvisioningApplyInput extends ReuseInput {\n  readonly planDigest: string;\n}\n\nexport interface ObserveInput {\n  readonly connectionId?: string;\n  readonly domain: string;\n  readonly records: ReadonlyArray<DnsRecord>;\n  readonly sources: {\n    readonly provider: boolean;\n    readonly publicDns: boolean;\n  };\n}\n\nexport interface CleanupPlanInput extends ReuseInput {\n  readonly receiptId: string;\n}\n\nexport interface CleanupApplyInput extends CleanupPlanInput {\n  readonly planDigest: string;\n}\n\n/** Application-facing DNS connection and provisioning capability. */\nexport interface Interface {\n  readonly cleanup: {\n    readonly apply: (input: CleanupApplyInput) => Effect.Effect<CleanupResult, Failure>;\n    readonly plan: (input: CleanupPlanInput) => Effect.Effect<CleanupPlan, Failure>;\n  };\n  readonly connection: {\n    readonly connect: (input: ConnectInput) => Effect.Effect<ConnectionResult, Failure>;\n    readonly inspect: (input: InspectInput) => Effect.Effect<ConnectionSnapshot, Failure>;\n    readonly removeDomain: (input: RemoveDomainInput) => Effect.Effect<RemoveDomainResult, Failure>;\n    readonly reuse: (input: ReuseInput) => Effect.Effect<Connected, Failure>;\n  };\n  readonly provisioning: {\n    readonly apply: (input: ProvisioningApplyInput) => Effect.Effect<ApplyResult, Failure>;\n    readonly plan: (input: ProvisioningPlanInput) => Effect.Effect<ProvisioningPlan, Failure>;\n  };\n  readonly verification: {\n    readonly observe: (input: ObserveInput) => Effect.Effect<Observation, Failure>;\n  };\n}\n\nexport class Service extends Context.Service<Service, Interface>()(\"@domainkit/Transport\") {}\n\n/** Promise-shaped host seam for foreign runtimes and framework actions. */\nexport interface AsyncInterface {\n  readonly cleanup: {\n    readonly apply: (input: CleanupApplyInput) => Promise<CleanupResult>;\n    readonly plan: (input: CleanupPlanInput) => Promise<CleanupPlan>;\n  };\n  readonly connection: {\n    readonly connect: (input: ConnectInput) => Promise<ConnectionResult>;\n    readonly inspect: (input: InspectInput) => Promise<ConnectionSnapshot>;\n    readonly removeDomain: (input: RemoveDomainInput) => Promise<RemoveDomainResult>;\n    readonly reuse: (input: ReuseInput) => Promise<Connected>;\n  };\n  readonly provisioning: {\n    readonly apply: (input: ProvisioningApplyInput) => Promise<ApplyResult>;\n    readonly plan: (input: ProvisioningPlanInput) => Promise<ProvisioningPlan>;\n  };\n  readonly verification: {\n    readonly observe: (input: ObserveInput) => Promise<Observation>;\n  };\n}\n\nexport interface AsyncOptions {\n  readonly onError?: (operation: string, cause: unknown) => Failure;\n}\n\n/** Converts a Promise-shaped host implementation into the canonical Effect service. */\nexport const fromAsync = (transport: AsyncInterface, options: AsyncOptions = {}): Interface => {\n  const attempt = <A>(operation: string, evaluate: () => Promise<A>) =>\n    Effect.tryPromise({\n      try: evaluate,\n      catch: (cause) =>\n        options.onError?.(operation, cause) ??\n        (cause instanceof Failure\n          ? cause\n          : new Failure({\n              message: cause instanceof globalThis.Error ? cause.message : String(cause),\n              operation,\n              retry: \"unknown\",\n            })),\n    });\n  return Service.of({\n    cleanup: {\n      apply: (input) => attempt(\"cleanup.apply\", () => transport.cleanup.apply(input)),\n      plan: (input) => attempt(\"cleanup.plan\", () => transport.cleanup.plan(input)),\n    },\n    connection: {\n      connect: (input) => attempt(\"connection.connect\", () => transport.connection.connect(input)),\n      inspect: (input) => attempt(\"connection.inspect\", () => transport.connection.inspect(input)),\n      removeDomain: (input) =>\n        attempt(\"connection.removeDomain\", () => transport.connection.removeDomain(input)),\n      reuse: (input) => attempt(\"connection.reuse\", () => transport.connection.reuse(input)),\n    },\n    provisioning: {\n      apply: (input) => attempt(\"provisioning.apply\", () => transport.provisioning.apply(input)),\n      plan: (input) => attempt(\"provisioning.plan\", () => transport.provisioning.plan(input)),\n    },\n    verification: {\n      observe: (input) =>\n        attempt(\"verification.observe\", () => transport.verification.observe(input)),\n    },\n  });\n};\n\nexport const layerFromAsync = (\n  transport: AsyncInterface,\n  options?: AsyncOptions,\n): Layer.Layer<Service> => Layer.succeed(Service, fromAsync(transport, options));\n\n/** Converts an environment-free Effect service into its Promise-shaped host seam. */\nexport const toAsync = (transport: Interface): AsyncInterface => ({\n  cleanup: {\n    apply: (input) => Effect.runPromise(transport.cleanup.apply(input)),\n    plan: (input) => Effect.runPromise(transport.cleanup.plan(input)),\n  },\n  connection: {\n    connect: (input) => Effect.runPromise(transport.connection.connect(input)),\n    inspect: (input) => Effect.runPromise(transport.connection.inspect(input)),\n    removeDomain: (input) => Effect.runPromise(transport.connection.removeDomain(input)),\n    reuse: (input) => Effect.runPromise(transport.connection.reuse(input)),\n  },\n  provisioning: {\n    apply: (input) => Effect.runPromise(transport.provisioning.apply(input)),\n    plan: (input) => Effect.runPromise(transport.provisioning.plan(input)),\n  },\n  verification: {\n    observe: (input) => Effect.runPromise(transport.verification.observe(input)),\n  },\n});\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\n/** The current package version from the package manifest. */\nexport const VERSION = packageJson.version;\n\nexport * as Connection from \"./auth/connection-api.ts\";\nexport * as AuthorizationLifecycle from \"./auth/lifecycle-repository.ts\";\nexport * as Diagnostic from \"./auth/diagnostic.ts\";\nexport * as ProviderAuth from \"./auth/manifest.ts\";\nexport * as ProviderAuthorization from \"./auth/authorization.ts\";\nexport * as ProviderContext from \"./auth/provider-context.ts\";\nexport * as Secret from \"./auth/secret.ts\";\nexport * as ProviderDiscovery from \"./discovery/selection.ts\";\nexport * as ZoneDiscovery from \"./discovery/zone-discovery.ts\";\nexport * as Zones from \"./discovery/zones.ts\";\nexport * as DnsRecord from \"./domain/dns-record.ts\";\nexport * as DomainName from \"./domain/domain-name.ts\";\nexport * as InvalidInput from \"./invalid-input.ts\";\nexport * as DnsProvider from \"./provider/provider.ts\";\nexport * as ConnectionAuthorization from \"./plan/connection-authorization.ts\";\nexport * as Digest from \"./plan/canonical-json.ts\";\nexport * as Deletion from \"./plan/deletion.ts\";\nexport * as Provisioning from \"./plan/plan.ts\";\nexport * as DnsPlan from \"./plan/types.ts\";\nexport * as Cloudflare from \"./providers/cloudflare/index.ts\";\nexport * as Vercel from \"./providers/vercel/index.ts\";\nexport * as Transport from \"./transport.ts\";\nexport * as CloudflareDnsOverHttps from \"./verification/cloudflare-doh.ts\";\nexport * as DnsData from \"./verification/dns-data.ts\";\nexport * as DnsOverHttps from \"./verification/doh.ts\";\nexport * as GoogleDnsOverHttps from \"./verification/google-doh.ts\";\nexport * as DnsResolverPool from \"./verification/resolver-pool.ts\";\nexport * as DnsResolver from \"./verification/resolver.ts\";\nexport * as Verification from \"./verification/verify.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AGKA,IAAa,UAAb,cAA6B,OAAO,YAAqB,CAAC,CAAC,WAAW;CACpE,SAAS,OAAO;CAChB,WAAW,OAAO;CAClB,OAAO,OAAO,SAAS;EAAC;EAAS;EAAqB;EAAQ;CAAS,CAAC;AAC1E,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,0BAA0B,OAAO,OAAO;CACnD,aAAa,OAAO,YAAY,OAAO,MAAM;CAC7C,KAAK,OAAO;CACZ,OAAO,OAAO;CACd,aAAa,OAAO,YAAY,OAAO,MAAM;CAC7C,UAAU,OAAO,YAAY,OAAO,OAAO;AAC7C,CAAC;AAGD,MAAa,uBAAuB,OAAO,YAAY;CACrD,OAAO,EAAE,OAAO,OAAO,OAAO;CAC9B,OAAO;EACL,OAAO,OAAO;EACd,YAAY,OAAO,YAAY,OAAO,MAAM,uBAAuB,CAAC;EACpE,aAAa,OAAO,YAAY,OAAO,MAAM;CAC/C;AACF,CAAC;AAWD,MAAa,SAAS,KAAK,WAAmB;AAE9C,MAAa,WAAW,OAAO,OAAO;CACpC,gBAAgB,OAAO,MAAM,oBAAoB;CACjD,IAAI,OAAO;CACX,MAAM,OAAO;AACf,CAAC;AAGD,MAAa,YAAY,OAAO,aAAa,aAAa;CACxD,cAAc,OAAO;CACrB,QAAQ,OAAO;CACf,UAAU;AACZ,CAAC;AAGD,MAAa,qBAAqB,OAAO,OAAO;CAC9C,cAAc,OAAO;CACrB,OAAO,OAAO;AAChB,CAAC;AAGD,MAAa,eAAe,OAAO,aAAa,gBAAgB;CAC9D,QAAQ,OAAO;CACf,UAAU;CACV,oBAAoB,OAAO,YAAY,kBAAkB;AAC3D,CAAC;AAGD,MAAa,cAAc,OAAO,aAAa,eAAe,EAAE,QAAQ,OAAO,OAAO,CAAC;AAGvF,MAAa,qBAAqB,OAAO,MAAM;CAAC;CAAW;CAAc;AAAW,CAAC,CAAC,CAAC,KACrF,OAAO,cAAc,MAAM,CAC7B;AAGA,MAAa,WAAW,OAAO,aAAa,YAAY,EAAE,kBAAkB,OAAO,OAAO,CAAC;AAG3F,MAAa,mBAAmB,OAAO,MAAM,CAAC,WAAW,QAAQ,CAAC,CAAC,CAAC,KAClE,OAAO,cAAc,MAAM,CAC7B;AAGA,MAAa,qBAAqB,OAAO,aAAa,WAAW;CAC/D,cAAc,OAAO;CACrB,QAAQ,OAAO;CACf,sBAAsB,OAAO;AAC/B,CAAC;;AAID,MAAa,YAAY,OAAO,OAAO;CACrC,IAAI,OAAO;CACX,MAAM,OAAO;CACb,UAAU,OAAO,YAAY,OAAO,GAAG;CACvC,MAAM,OAAO;CACb,OAAO,OAAO;AAChB,CAAC;;AAID,MAAa,iBAAiB,IAAY,WAAiD;CACzF,QAAQ,OAAO,MAAf;EACE,KAAK;EACL,KAAK,QACH,OAAO;GAAE;GAAI,MAAM,OAAO;GAAM,MAAM,OAAO;GAAM,OAAO,OAAO;EAAQ;EAC3E,KAAK;EACL,KAAK,MACH,OAAO;GAAE;GAAI,MAAM,OAAO;GAAM,MAAM,OAAO;GAAM,OAAO,OAAO;EAAO;EAC1E,KAAK,OACH,OAAO;GAAE;GAAI,MAAM,OAAO;GAAM,MAAM,OAAO;GAAM,OAAO,OAAO;EAAM;EACzE,KAAK,MACH,OAAO;GACL;GACA,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,MAAM,OAAO;GACb,OAAO,OAAO;EAChB;EACF,KAAK,OACH,OAAO;GACL;GACA,MAAM,OAAO;GACb,MAAM,OAAO;GACb,OAAO,GAAG,OAAO,MAAM,GAAG,OAAO,IAAI,GAAG,OAAO;EACjD;EACF,KAAK,OACH,OAAO;GACL;GACA,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,MAAM,OAAO;GACb,OAAO,GAAG,OAAO,OAAO,GAAG,OAAO,KAAK,GAAG,OAAO;EACnD;CACJ;AACF;AAEA,MAAa,gBAAgB,OAAO,YAAY;CAC9C,UAAU;EAAE,IAAI,OAAO;EAAQ,QAAQ,OAAO;EAAQ,QAAQ;CAAU;CACxE,QAAQ;EAAE,IAAI,OAAO;EAAQ,QAAQ;CAAU;CAC/C,MAAM;EAAE,IAAI,OAAO;EAAQ,QAAQ;CAAU;AAC/C,CAAC;AAGD,MAAa,mBAAmB,OAAO,aAAa,QAAQ;CAC1D,QAAQ,OAAO;CACf,WAAW,OAAO;CAClB,YAAY,OAAO,MAAM,aAAa;AACxC,CAAC;AAGD,MAAa,kBAAkB,OAAO,YAAY;CAChD,SAAS,EAAE,aAAa,OAAO,OAAO;CACtC,QAAQ;EAAE,SAAS,OAAO;EAAQ,aAAa,OAAO;CAAO;CAC7D,WAAW,EAAE,aAAa,OAAO,OAAO;AAC1C,CAAC;AAGD,MAAM,qBAAqB;CACzB,aAAa,OAAO;CACpB,WAAW,OAAO;CAClB,SAAS,OAAO,MAAM,eAAe;AACvC;AACA,MAAa,cAAc,OAAO,YAAY;CAC5C,SAAS;CACT,SAAS;CACT,OAAO,EAAE,SAAS,OAAO,OAAO;AAClC,CAAC;AAGD,MAAa,sBAAsB,OAAO,YAAY;CACpD,OAAO,EAAE,UAAU,OAAO,OAAO;CACjC,UAAU;EAAE,SAAS,OAAO;EAAQ,UAAU,OAAO;CAAO;CAC5D,SAAS,EAAE,UAAU,OAAO,OAAO;CACnC,aAAa;EAAE,SAAS,OAAO;EAAQ,UAAU,OAAO;CAAO;AACjE,CAAC;AAGD,MAAa,cAAc,OAAO,aAAa,eAAe;CAC5D,UAAU,OAAO,MAAM,mBAAmB;CAC1C,WAAW,OAAO,MAAM,mBAAmB;AAC7C,CAAC;AAGD,MAAa,mBAAmB,OAAO,YAAY;CACjD,eAAe;EAAE,IAAI,OAAO;EAAQ,QAAQ;CAAU;CACtD,SAAS;EAAE,IAAI,OAAO;EAAQ,QAAQ,OAAO;EAAQ,QAAQ;CAAU;CACvE,QAAQ;EAAE,IAAI,OAAO;EAAQ,QAAQ;CAAU;AACjD,CAAC;AAGD,MAAa,cAAc,OAAO,aAAa,eAAe;CAC5D,QAAQ,OAAO;CACf,WAAW,OAAO;CAClB,YAAY,OAAO,MAAM,gBAAgB;AAC3C,CAAC;AAGD,MAAM,uBAAuB;CAC3B,aAAa,OAAO;CACpB,SAAS,OAAO,MAAM,eAAe;AACvC;AACA,MAAa,gBAAgB,OAAO,YAAY;CAC9C,SAAS;CACT,SAAS;CACT,OAAO,EAAE,SAAS,OAAO,OAAO;AAClC,CAAC;AAqED,IAAa,UAAb,cAA6B,QAAQ,QAA4B,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;;AA4B5F,MAAa,aAAa,WAA2B,UAAwB,CAAC,MAAiB;CAC7F,MAAM,WAAc,WAAmB,aACrC,OAAO,WAAW;EAChB,KAAK;EACL,QAAQ,UACN,QAAQ,UAAU,WAAW,KAAK,MACjC,iBAAiB,UACd,QACA,IAAI,QAAQ;GACV,SAAS,iBAAiB,WAAW,QAAQ,MAAM,UAAU,OAAO,KAAK;GACzE;GACA,OAAO;EACT,CAAC;CACT,CAAC;CACH,OAAO,QAAQ,GAAG;EAChB,SAAS;GACP,QAAQ,UAAU,QAAQ,uBAAuB,UAAU,QAAQ,MAAM,KAAK,CAAC;GAC/E,OAAO,UAAU,QAAQ,sBAAsB,UAAU,QAAQ,KAAK,KAAK,CAAC;EAC9E;EACA,YAAY;GACV,UAAU,UAAU,QAAQ,4BAA4B,UAAU,WAAW,QAAQ,KAAK,CAAC;GAC3F,UAAU,UAAU,QAAQ,4BAA4B,UAAU,WAAW,QAAQ,KAAK,CAAC;GAC3F,eAAe,UACb,QAAQ,iCAAiC,UAAU,WAAW,aAAa,KAAK,CAAC;GACnF,QAAQ,UAAU,QAAQ,0BAA0B,UAAU,WAAW,MAAM,KAAK,CAAC;EACvF;EACA,cAAc;GACZ,QAAQ,UAAU,QAAQ,4BAA4B,UAAU,aAAa,MAAM,KAAK,CAAC;GACzF,OAAO,UAAU,QAAQ,2BAA2B,UAAU,aAAa,KAAK,KAAK,CAAC;EACxF;EACA,cAAc,EACZ,UAAU,UACR,QAAQ,8BAA8B,UAAU,aAAa,QAAQ,KAAK,CAAC,EAC/E;CACF,CAAC;AACH;AAEA,MAAa,kBACX,WACA,YACyB,MAAM,QAAQ,SAAS,UAAU,WAAW,OAAO,CAAC;;AAG/E,MAAa,WAAW,eAA0C;CAChE,SAAS;EACP,QAAQ,UAAU,OAAO,WAAW,UAAU,QAAQ,MAAM,KAAK,CAAC;EAClE,OAAO,UAAU,OAAO,WAAW,UAAU,QAAQ,KAAK,KAAK,CAAC;CAClE;CACA,YAAY;EACV,UAAU,UAAU,OAAO,WAAW,UAAU,WAAW,QAAQ,KAAK,CAAC;EACzE,UAAU,UAAU,OAAO,WAAW,UAAU,WAAW,QAAQ,KAAK,CAAC;EACzE,eAAe,UAAU,OAAO,WAAW,UAAU,WAAW,aAAa,KAAK,CAAC;EACnF,QAAQ,UAAU,OAAO,WAAW,UAAU,WAAW,MAAM,KAAK,CAAC;CACvE;CACA,cAAc;EACZ,QAAQ,UAAU,OAAO,WAAW,UAAU,aAAa,MAAM,KAAK,CAAC;EACvE,OAAO,UAAU,OAAO,WAAW,UAAU,aAAa,KAAK,KAAK,CAAC;CACvE;CACA,cAAc,EACZ,UAAU,UAAU,OAAO,WAAW,UAAU,aAAa,QAAQ,KAAK,CAAC,EAC7E;AACF;;;;ACzWA,MAAa,UAAUA"}

package/dist/promise.d.mts

@@ -0,0 +1,464 @@
+import { $ as InteractiveFlow$1, A as renderManualInstructions$1, An as parse$1, At as coversDomain, Bt as ProviderAuthorization, C as DiscoverCreateInput$1, Cn as equals, Ct as Connection, Dn as DomainName, Dt as StoredCredential, E as ResolvedCreateResult, En as secret_d_exports, Et as Schema$1, F as PlanAuthorization, H as Source$1, I as Receipt, It as Capability, J as Continuation, Jt as OAuthClientConfiguration, K as BaseInput, Kt as Manifest, L as Schema$6, Lt as CapabilityEvidence, M as Authorization, Mn as invalid_input_d_exports, Mt as encode, N as DnsPlan, Nt as includeDomains, O as Target, On as Schema$5, Ot as assertGrant, P as Operation, Pt as removeDomain$1, Qt as TokenValidation, R as encode$2, Rt as Evidence, S as CreateResult$1, St as AuthorizationError, Tn as Value, Tt as OAuthContinuation, Ut as encode$1, V as Candidate, Vt as Schema$3, W as Authentication, Wt as AsyncOAuthSubjectResolver, X as Error$1, Y as ContinuationStore$1, Yt as OAuthMethod, Z as ExtendInput, Zt as Schema$2, _ as Receipt$1, _n as Schema$4, _t as Interface$3, at as StartResult, bn as Type, cn as Caa, d as Authorization$1, dn as Encoded, en as AsyncInterface, et as InteractiveStart, f as CreateError, fn as Mx, ft as provider_context_d_exports, g as Plan, gn as RequirementMetadata, gt as Error, h as PartialError, hn as Opaque, ht as DetachResult, j as ApplyReceipt, ln as Cname, m as Operation$1, mn as Observed, mt as BindingModification, n as AsyncInterface$1, nt as RemoveDomainInput, o as Query, on as A, p as Error$2, pn as Ns, pt as Aggregate, qt as Method$2, r as AsyncResolution, rt as RemoveDomainResult, sn as Aaaa, t as Answer, tn as CreateResult, tt as Method$1, u as ApplyError, un as DnsRecord, vn as Srv, vt as Service, w as ExactCreateInput$1, wn as parse, wt as Grant, xn as data, yn as Txt, z as encodeReceipt, zt as EvidenceSchema } from "./resolver-uqe1h5Vz.mjs";
+import { A as Zone$1, B as tokenMethod$2, C as manifest$3, D as Fetch$1, E as AccountContext, F as SubjectResolverOptions, G as Zone, H as Fetch, I as TokenConnectionOptions, J as diagnostic_d_exports, K as zones_d_exports, L as TokenValidatorOptions, M as CredentialTarget, N as OAuthFlowOptions, O as ListZonesInput$1, P as OAuthMethodOptions, R as manifest$2, S as integrationMethod$1, T as Account$1, U as ListZonesInput, V as Account, W as Options$3, _ as ExchangeCodeOptions, b as IntegrationMethodOptions, c as Policy, f as Options$5, i as Result, k as Options$4, m as Options$6, n as PublicDns$1, o as DefaultOptions, q as selection_d_exports, r as PublicDnsObservation, s as Observation, t as ProviderObservation, u as Options$7, v as IntegrationCredential, w as tokenMethod$3, x as TokenConnectionOptions$1, y as IntegrationFlowOptions, z as oauthMethod$1 } from "./verify-CkgVrwyl.mjs";
+import { Data, Layer } from "effect";
+declare namespace authorization_lifecycle_d_exports {
+  export { Aggregate, BindingModification, DetachResult, Error, Repository, from, layerFrom, toAsync };
+}
+interface Repository {
+  readonly bind: (authorizationId: string, binding: Connection) => Promise<Aggregate>;
+  readonly connect: (aggregate: Aggregate) => Promise<Aggregate>;
+  readonly detach: (input: {
+    readonly connectionId: string;
+    readonly revoke: (aggregate: Aggregate) => Promise<void>;
+  }) => Promise<DetachResult>;
+  readonly findByProviderAccount: (providerId: string, providerAccountId: string) => Promise<Aggregate | null>;
+  readonly get: (authorizationId: string) => Promise<Aggregate | null>;
+  readonly getByConnectionId: (connectionId: string) => Promise<Aggregate | null>;
+  readonly modifyBinding: <A>(connectionId: string, modify: (binding: Connection) => {
+    readonly binding: Connection;
+    readonly value: A;
+  }) => Promise<BindingModification<A>>;
+  readonly promoteEvidence: (authorizationId: string, evidence: ReadonlyArray<CapabilityEvidence>) => Promise<Aggregate>;
+  readonly recover: (input: {
+    readonly authorizationId: string;
+    readonly revoke: (aggregate: Aggregate) => Promise<void>;
+  }) => Promise<DetachResult>;
+  readonly rotate: (authorizationId: string, credential: StoredCredential, expiresAt: Date | null) => Promise<Aggregate>;
+}
+declare const layerFrom: (repository: Repository) => Layer.Layer<Service>;
+declare const toAsync: (repository: Interface$3) => Repository;
+declare const from: (repository: Repository) => Repository;
+declare namespace connection_d_exports {
+  export { Authentication, AuthorizationError, Connection, StartResult as ConnectionStartResult, ContinuationStore, Error$1 as Error, ExtendInput, Grant, InteractiveFlow, Method, OAuthContinuation, RemoveDomainInput, RemoveDomainResult, Schema$1 as Schema, StartResult, StoredCredential, assertGrant, complete, coversDomain, decode$3 as decode, encode, extend, fromEffectFlow, fromEffectTokenMethod, includeDomains, removeDomain, removeDomain$1 as removeDomainFromGrant, start, toAsyncContinuations };
+}
+declare function decode$3(input: unknown): Promise<Connection>;
+type Method = Data.TaggedEnum<{
+  Interactive: {
+    readonly continuations: ContinuationStore;
+    readonly flow: InteractiveFlow;
+    readonly ttlMs?: number;
+  };
+  Token: {
+    readonly authenticate: (token: Value) => Promise<Authentication>;
+    readonly providerId: string;
+    readonly requiredCapabilities: ReadonlyArray<Capability>;
+    readonly token: Value;
+  };
+}>;
+declare const Method: {
+  readonly $is: <Tag extends "Interactive" | "Token">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "Interactive";
+    readonly continuations: ContinuationStore;
+    readonly flow: InteractiveFlow;
+    readonly ttlMs?: number;
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "Token";
+    readonly authenticate: (token: Value) => Promise<Authentication>;
+    readonly providerId: string;
+    readonly requiredCapabilities: ReadonlyArray<Capability>;
+    readonly token: Value;
+  }, {
+    readonly _tag: Tag;
+  }>;
+  readonly $match: {
+    <Cases extends { readonly [Tag in "Interactive" | "Token"]: (args: Extract<{
+      readonly _tag: "Interactive";
+      readonly continuations: ContinuationStore;
+      readonly flow: InteractiveFlow;
+      readonly ttlMs?: number;
+    } | {
+      readonly _tag: "Token";
+      readonly authenticate: (token: Value) => Promise<Authentication>;
+      readonly providerId: string;
+      readonly requiredCapabilities: ReadonlyArray<Capability>;
+      readonly token: Value;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "Interactive";
+      readonly continuations: ContinuationStore;
+      readonly flow: InteractiveFlow;
+      readonly ttlMs?: number;
+    } | {
+      readonly _tag: "Token";
+      readonly authenticate: (token: Value) => Promise<Authentication>;
+      readonly providerId: string;
+      readonly requiredCapabilities: ReadonlyArray<Capability>;
+      readonly token: Value;
+    }) => import("effect/Unify").Unify<ReturnType<Cases["Interactive" | "Token"]>>;
+    <Cases extends { readonly [Tag in "Interactive" | "Token"]: (args: Extract<{
+      readonly _tag: "Interactive";
+      readonly continuations: ContinuationStore;
+      readonly flow: InteractiveFlow;
+      readonly ttlMs?: number;
+    } | {
+      readonly _tag: "Token";
+      readonly authenticate: (token: Value) => Promise<Authentication>;
+      readonly providerId: string;
+      readonly requiredCapabilities: ReadonlyArray<Capability>;
+      readonly token: Value;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(value: {
+      readonly _tag: "Interactive";
+      readonly continuations: ContinuationStore;
+      readonly flow: InteractiveFlow;
+      readonly ttlMs?: number;
+    } | {
+      readonly _tag: "Token";
+      readonly authenticate: (token: Value) => Promise<Authentication>;
+      readonly providerId: string;
+      readonly requiredCapabilities: ReadonlyArray<Capability>;
+      readonly token: Value;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Interactive" | "Token"]>>;
+  };
+  readonly Interactive: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Interactive";
+    readonly continuations: ContinuationStore;
+    readonly flow: InteractiveFlow;
+    readonly ttlMs?: number;
+  }, "_tag">;
+  readonly Token: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Token";
+    readonly authenticate: (token: Value) => Promise<Authentication>;
+    readonly providerId: string;
+    readonly requiredCapabilities: ReadonlyArray<Capability>;
+    readonly token: Value;
+  }, "_tag">;
+};
+interface ContinuationStore {
+  readonly consume: (id: string, now: Date) => Promise<Continuation | null>;
+  readonly put: (continuation: Continuation) => Promise<void>;
+}
+interface InteractiveFlow {
+  readonly complete: (payload: Value, callbackUrl: URL) => Promise<Authentication>;
+  readonly method: "integration" | "oauth2";
+  readonly providerId: string;
+  readonly requiredCapabilities: ReadonlyArray<Capability>;
+  readonly start: (continuationId: string) => Promise<InteractiveStart>;
+}
+declare const toAsyncContinuations: (store: ContinuationStore$1) => ContinuationStore;
+/** Adapts an Effect-native provider flow to the Promise facade. */
+declare const fromEffectFlow: (flow: InteractiveFlow$1) => InteractiveFlow;
+/** Adapts an Effect-native token method to the Promise facade. */
+declare function fromEffectTokenMethod(method: Extract<Method$1, {
+  readonly _tag: "Token";
+}>): Extract<Method, {
+  readonly _tag: "Token";
+}>;
+declare function start(input: BaseInput & {
+  readonly method: Method;
+  readonly repository: Repository;
+}): Promise<StartResult>;
+declare function complete(input: {
+  readonly callbackUrl: URL;
+  readonly continuationId: string;
+  readonly continuations: ContinuationStore;
+  readonly flow: InteractiveFlow;
+  readonly repository: Repository;
+}): Promise<Aggregate>;
+/** Extends one owner binding without repeating provider authentication. */
+declare function extend(input: ExtendInput & {
+  readonly repository: Repository;
+}): Promise<Aggregate>;
+/** Removes one domain from an owner binding without revoking provider authorization. */
+declare function removeDomain(input: RemoveDomainInput & {
+  readonly repository: Repository;
+}): Promise<RemoveDomainResult>;
+declare namespace dns_provider_d_exports {
+  export { CreateResult, AsyncInterface as Interface };
+}
+declare namespace dns_resolver_d_exports {
+  export { Answer, AsyncInterface$1 as Interface, Query, AsyncResolution as Resolution };
+}
+declare namespace provider_auth_d_exports {
+  export { Manifest, Method$2 as Method, OAuthClientConfiguration, OAuthMethod, AsyncOAuthSubjectResolver as OAuthSubjectResolver, Schema$2 as Schema, TokenValidation, decode$2 as decode };
+}
+declare function decode$2(input: unknown): Promise<Manifest>;
+declare namespace provider_authorization_d_exports {
+  export { Capability, CapabilityEvidence, Evidence, EvidenceSchema, ProviderAuthorization, Schema$3 as Schema, decode$1 as decode, encode$1 as encode };
+}
+declare function decode$1(input: unknown): Promise<ProviderAuthorization>;
+declare namespace zone_discovery_d_exports {
+  export { Candidate, Outcome, Source, discover, toEffectSource };
+}
+interface Source {
+  readonly listZones: (name: DomainName) => Promise<ReadonlyArray<Omit<Candidate, "providerId">>>;
+  readonly provider: AsyncInterface;
+}
+type Outcome = {
+  readonly _tag: "NotFound";
+  readonly domain: DomainName;
+} | {
+  readonly _tag: "Resolved";
+  readonly candidate: Candidate;
+} | {
+  readonly _tag: "SelectionRequired";
+  readonly candidates: ReadonlyArray<Candidate>;
+};
+declare function discover(input: {
+  readonly domain: DomainName;
+  readonly sources: ReadonlyArray<Source>;
+}): Promise<Outcome>;
+declare function toEffectSource(source: Source): Source$1;
+declare namespace dns_record_d_exports {
+  export { A, Aaaa, Caa, Cname, DnsRecord, Encoded, Mx, Ns, Observed, Opaque, RequirementMetadata, Schema$4 as Schema, Srv, Txt, Type, data, equals, parse };
+}
+declare namespace domain_name_d_exports {
+  export { DomainName, Schema$5 as Schema, parse$1 as parse };
+}
+declare namespace dns_plan_d_exports {
+  export { ApplyReceipt, Authorization, DnsPlan, Operation, PlanAuthorization, Receipt, Schema$6 as Schema, decode, decodeReceipt, encode$2 as encode, encodeReceipt };
+}
+declare function decode(input: unknown): Promise<DnsPlan>;
+declare function decodeReceipt(input: unknown): Promise<ApplyReceipt>;
+declare namespace deletion_d_exports {
+  export { ApplyError, Authorization$1 as Authorization, CreateError, Authorization$1 as DeletionAuthorization, Operation$1 as DeletionOperation, Plan as DeletionPlan, Receipt$1 as DeletionReceipt, Error$2 as Error, Operation$1 as Operation, PartialError, Plan, Receipt$1 as Receipt, apply$1 as apply, authorize$1 as authorize, create$1 as create };
+}
+declare function create$1(input: {
+  readonly plan: DnsPlan;
+  readonly provider: AsyncInterface;
+  readonly receipt: ApplyReceipt;
+  readonly ttlMs?: number;
+}): Promise<Plan>;
+declare function authorize$1(plan: Plan, operationIds?: ReadonlyArray<string>): Promise<Authorization$1>;
+declare function apply$1(input: {
+  readonly authorization: Authorization$1;
+  readonly plan: Plan;
+  readonly priorReceipt?: Receipt$1;
+  readonly provider: AsyncInterface;
+}): Promise<Receipt$1>;
+declare namespace cloudflare_auth_d_exports {
+  export { CredentialTarget, OAuthFlowOptions, OAuthMethodOptions, SubjectResolverOptions, TokenValidatorOptions, manifest$1 as manifest, oauthFlow, oauthMethod, subjectResolver, tokenConnectionMethod$1 as tokenConnectionMethod, tokenMethod$1 as tokenMethod, tokenValidator };
+}
+declare const manifest$1: typeof manifest$2;
+declare const oauthMethod: typeof oauthMethod$1;
+declare const tokenMethod$1: typeof tokenMethod$2;
+declare function subjectResolver(options: SubjectResolverOptions): AsyncOAuthSubjectResolver;
+/** Creates Cloudflare's OAuth implementation for the Promise connection facade. */
+declare function oauthFlow(options: OAuthFlowOptions): InteractiveFlow;
+/** Creates a Cloudflare token method for the Promise connection facade. */
+declare function tokenConnectionMethod$1(options: TokenConnectionOptions): Extract<Method, {
+  readonly _tag: "Token";
+}>;
+declare function tokenValidator(options: TokenValidatorOptions): (token: Value) => Promise<TokenValidation>;
+declare namespace cloudflare_d_exports {
+  export { Account, cloudflare_auth_d_exports as Auth, Fetch, Interface$2 as Interface, ListZonesInput, Options$3 as Options, Zone, discovery$1 as discovery, make$5 as make };
+}
+interface Interface$2 extends AsyncInterface {
+  readonly listAccounts: () => Promise<ReadonlyArray<Account>>;
+  readonly listZones: (input?: ListZonesInput) => Promise<ReadonlyArray<Zone>>;
+  readonly validateToken: () => Promise<TokenValidation>;
+}
+/** Creates a Promise-compatible facade over the Effect-native Cloudflare client. */
+declare function make$5(options: Options$3): Interface$2;
+/** Creates the optional Cloudflare discovery source for Promise consumers. */
+declare function discovery$1(options: Options$3): Source;
+declare namespace vercel_auth_d_exports {
+  export { ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, exchangeCode, integrationFlow, integrationMethod, manifest, tokenConnectionMethod, tokenMethod };
+}
+declare const integrationMethod: typeof integrationMethod$1;
+declare const manifest: typeof manifest$3;
+declare const tokenMethod: typeof tokenMethod$3;
+declare function exchangeCode(options: ExchangeCodeOptions): Promise<IntegrationCredential>;
+/** Creates Vercel Integration's implementation for the Promise connection facade. */
+declare function integrationFlow(options: IntegrationFlowOptions): InteractiveFlow;
+/** Creates a Vercel token method for the Promise connection facade. */
+declare function tokenConnectionMethod(options: TokenConnectionOptions$1): Extract<Method, {
+  readonly _tag: "Token";
+}>;
+declare namespace vercel_d_exports {
+  export { Account$1 as Account, AccountContext, vercel_auth_d_exports as Auth, Fetch$1 as Fetch, Interface$1 as Interface, ListZonesInput$1 as ListZonesInput, Options$4 as Options, Zone$1 as Zone, discovery, make$4 as make };
+}
+interface Interface$1 extends AsyncInterface {
+  readonly listAccounts: () => Promise<ReadonlyArray<Account$1>>;
+  readonly listZones: (input?: ListZonesInput$1) => Promise<ReadonlyArray<Zone$1>>;
+  readonly validateToken: () => Promise<TokenValidation>;
+}
+/** Creates a Promise-compatible facade over the Effect-native Vercel client. */
+declare function make$4(options: Options$4): Interface$1;
+/** Creates the optional Vercel discovery source for Promise consumers. */
+declare function discovery(options: Options$4): Source;
+declare namespace provisioning_d_exports {
+  export { CreateResult$1 as CreateResult, DiscoverCreateInput, ExactCreateInput, Target, apply, authorize, authorizeForConnection, create, renderManualInstructions };
+}
+interface ExactCreateInput extends ExactCreateInput$1 {
+  readonly provider: AsyncInterface;
+}
+interface DiscoverCreateInput extends DiscoverCreateInput$1 {
+  readonly sources: ReadonlyArray<Source>;
+}
+declare function create(input: ExactCreateInput): Promise<ResolvedCreateResult>;
+declare function create(input: DiscoverCreateInput): Promise<CreateResult$1>;
+declare function authorize(plan: DnsPlan, operationIds?: ReadonlyArray<string>, options?: {
+  readonly allowPartial?: boolean;
+}): Promise<PlanAuthorization>;
+declare function apply(input: {
+  readonly authorization: PlanAuthorization;
+  readonly plan: DnsPlan;
+  readonly provider: AsyncInterface;
+}): Promise<ApplyReceipt>;
+declare function authorizeForConnection(input: {
+  readonly allowPartial?: boolean;
+  readonly authorization: ProviderAuthorization;
+  readonly connection: Connection;
+  readonly domain: string;
+  readonly operationIds?: ReadonlyArray<string>;
+  readonly plan: DnsPlan;
+}): Promise<PlanAuthorization>;
+declare const renderManualInstructions: typeof renderManualInstructions$1;
+declare namespace resolver_pool_d_exports {
+  export { Entry, Interface, Observation, Policy, defaultMake, make$3 as make };
+}
+interface Entry {
+  readonly id: string;
+  readonly resolver: AsyncInterface$1;
+  readonly timeoutMs?: number;
+}
+interface Interface {
+  readonly observe: (query: Query) => Promise<ReadonlyArray<Observation>>;
+}
+declare function make$3(entries: ReadonlyArray<Entry>): Interface;
+declare function defaultMake(options?: DefaultOptions): Interface;
+declare namespace verification_d_exports {
+  export { Config, Provider, ProviderObservation, PublicDns, PublicDnsObservation, Result, observe };
+}
+type PublicDns = PublicDns$1;
+declare const PublicDns: {
+  readonly $is: <Tag extends "Disabled" | "Enabled">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "Disabled";
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "Enabled";
+    readonly policy?: Policy;
+  }, {
+    readonly _tag: Tag;
+  }>;
+  readonly $match: {
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }) => import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly policy?: Policy;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+  };
+  readonly Disabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Disabled";
+  }, "_tag">;
+  readonly Enabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Enabled";
+    readonly policy?: Policy;
+  }, "_tag">;
+};
+type Provider = Data.TaggedEnum<{
+  Disabled: {};
+  Enabled: {
+    readonly provider: AsyncInterface;
+    readonly zone: DomainName;
+  };
+}>;
+declare const Provider: {
+  readonly $is: <Tag extends "Disabled" | "Enabled">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "Disabled";
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "Enabled";
+    readonly provider: AsyncInterface;
+    readonly zone: DomainName;
+  }, {
+    readonly _tag: Tag;
+  }>;
+  readonly $match: {
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }) => import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+    <Cases extends { readonly [Tag in "Disabled" | "Enabled"]: (args: Extract<{
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(value: {
+      readonly _tag: "Disabled";
+    } | {
+      readonly _tag: "Enabled";
+      readonly provider: AsyncInterface;
+      readonly zone: DomainName;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Disabled" | "Enabled"]>>;
+  };
+  readonly Disabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Disabled";
+  }, "_tag">;
+  readonly Enabled: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Enabled";
+    readonly provider: AsyncInterface;
+    readonly zone: DomainName;
+  }, "_tag">;
+};
+interface Config {
+  readonly provider?: Provider;
+  readonly publicDns?: PublicDns;
+  readonly record: DnsRecord;
+  readonly resolvers?: ReadonlyArray<Entry>;
+}
+declare function observe(input: Config): Promise<Result>;
+declare namespace cloudflare_doh_d_exports {
+  export { Options$2 as Options, make$2 as make };
+}
+type Options$2 = Options$5;
+declare function make$2(options?: Options$2): AsyncInterface$1;
+declare namespace doh_d_exports {
+  export { Options$1 as Options, make$1 as make };
+}
+type Options$1 = Options$6;
+declare function make$1(options: Options$1): AsyncInterface$1;
+declare namespace google_doh_d_exports {
+  export { Options, make };
+}
+type Options = Options$7;
+declare function make(options?: Options): AsyncInterface$1;
+//#endregion
+//#region src/promise.d.ts
+/** The current package version from the package manifest. */
+declare const VERSION: string;
+//#endregion
+export { authorization_lifecycle_d_exports as AuthorizationLifecycle, cloudflare_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_d_exports as Connection, deletion_d_exports as Deletion, diagnostic_d_exports as Diagnostic, doh_d_exports as DnsOverHttps, dns_plan_d_exports as DnsPlan, type dns_provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, type dns_resolver_d_exports as DnsResolver, resolver_pool_d_exports as DnsResolverPool, domain_name_d_exports as DomainName, google_doh_d_exports as GoogleDnsOverHttps, invalid_input_d_exports as InvalidInput, provider_auth_d_exports as ProviderAuth, provider_authorization_d_exports as ProviderAuthorization, provider_context_d_exports as ProviderContext, selection_d_exports as ProviderDiscovery, provisioning_d_exports as Provisioning, secret_d_exports as Secret, VERSION, vercel_d_exports as Vercel, verification_d_exports as Verification, zone_discovery_d_exports as ZoneDiscovery, zones_d_exports as Zones };
+//# sourceMappingURL=promise.d.mts.map