domainkit 0.3.1 → 0.5.0

package/dist/{verify-CkgVrwyl.d.mts → verify-6xK05pwL.d.mts}

@@ -1,9 +1,6 @@
-import { $ as InteractiveFlow, At as coversDomain, Bt as ProviderAuthorization, Ct as Connection, Dn as DomainName, Dt as StoredCredential, Et as Schema$1, Ft as validate, G as AuthenticationFailure, Gt as IntegrationMethod, H as Source, It as Capability, J as Continuation, Jt as OAuthClientConfiguration, K as BaseInput, Kt as Manifest, Mt as encode, Nt as includeDomains, Ot as assertGrant, Pt as removeDomain$1, Q as Failure, Qt as TokenValidation, St as AuthorizationError, Tn as Value, W as Authentication, X as Error, Xt as OAuthSubjectResolver, Y as ContinuationStore, Yt as OAuthMethod, Z as ExtendInput, a as Interface$4, at as StartResult, c as Service$1, ct as removeDomain, dt as Envelope, et as InteractiveStart, i as Error$3, in as Service$2, it as Requirements, jn as Error$2, jt as decode, kt as authorizationError, lt as start, n as AsyncInterface, nn as Error$1, nt as RemoveDomainInput, o as Query, ot as complete, q as CompleteInput, rn as Interface$3, rt as RemoveDomainResult, st as extend, t as Answer, tt as Method, un as DnsRecord, ut as Codec, wt as Grant } from "./resolver-uqe1h5Vz.mjs";
+import { Bt as TokenValidation, H as Source, Ht as Value, It as OAuthClientConfiguration, Jt as Service$2, Kt as Error, Lt as OAuthMethod, Nt as IntegrationMethod, Pt as Manifest, Q as InteractiveFlow, Rt as OAuthSubjectResolver, Wt as AsyncInterface$1, a as Interface$5, at as Envelope, bt as ProviderConnection, c as Service$1, en as DnsRecord, et as Method, hn as DomainName, i as Error$2, it as Codec, jt as ProviderAuthorization, kt as Capability, n as AsyncInterface$2, o as Query, qt as Interface$4, t as Answer, xt as ProviderTarget, yn as Error$1, yt as DomainAttachment } from "./resolver-BGBLnPjJ.mjs";
 import { Context, Data, Effect, Layer, Schema } from "effect";
 import * as oauth from "oauth4webapi";
-declare namespace connection_api_d_exports {
-  export { Authentication, AuthenticationFailure, AuthorizationError, BaseInput, CompleteInput, Connection, Method as ConnectionMethod, RemoveDomainResult as ConnectionRemoveDomainResult, StartResult as ConnectionStartResult, Continuation, ContinuationStore, Error, ExtendInput, Failure, Grant, InteractiveFlow, InteractiveStart, Method, RemoveDomainInput, RemoveDomainResult, Requirements, Schema$1 as Schema, StartResult, StoredCredential, assertGrant, authorizationError, complete, coversDomain, decode, encode, extend, includeDomains, removeDomain, removeDomain$1 as removeDomainFromGrant, start, validate };
-}
 declare namespace diagnostic_d_exports {
   export { Category, Diagnostic, Fields, RetryAdvice, from };
 }
@@ -36,10 +33,9 @@ declare namespace selection_d_exports {
 }
 interface ConnectedZone {
   readonly authorization: ProviderAuthorization;
-  readonly connection: Connection;
+  readonly attachment: DomainAttachment;
+  readonly connection: ProviderConnection;
   readonly nameservers: ReadonlyArray<string>;
-  readonly providerId: string;
-  readonly zone: string;
 }
 declare const Evidence$1: Schema.Struct<{
   readonly accountId: Schema.String;
@@ -98,6 +94,134 @@ declare namespace zones_d_exports {
   export { candidates };
 }
 declare function candidates(input: string): ReadonlyArray<DomainName>;
+declare namespace session_d_exports {
+  export { AsyncInterface, Authorization, Credential, Interface$3 as Interface, ListTargetsInput, Resolution, RestoreInput, fromAsync, toAsync$3 as toAsync };
+}
+/** A credential-scoped provider session that discovers safe targets before DNS access. */
+interface Interface$3 {
+  /** The provider represented by this credential. */
+  readonly providerId: string;
+  /** Lists provider account and authoritative-zone targets visible to this credential. */
+  readonly listTargets: (input?: ListTargetsInput) => Effect.Effect<ReadonlyArray<ProviderTarget>, Error>;
+  /** Resolves a domain without guessing when more than one account owns a matching zone. */
+  readonly resolveTarget: (domain: DomainName) => Effect.Effect<Resolution, Error>;
+  /** Creates the focused DNS-record capability bound to one exact discovered target. */
+  readonly forTarget: (target: ProviderTarget) => Effect.Effect<Interface$4, Error>;
+}
+interface ListTargetsInput {
+  /** Restrict results to the authoritative zone candidates for this domain. */
+  readonly domain?: DomainName;
+  /** Provider-specific account filter, when supported by the adapter. */
+  readonly accountId?: string;
+}
+type Resolution = Data.TaggedEnum<{
+  NotFound: {
+    readonly domain: DomainName;
+  };
+  Resolved: {
+    readonly target: ProviderTarget;
+  };
+  SelectionRequired: {
+    readonly candidates: ReadonlyArray<ProviderTarget>;
+  };
+}>;
+declare const Resolution: {
+  readonly $is: <Tag extends "NotFound" | "Resolved" | "SelectionRequired">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "NotFound";
+    readonly domain: DomainName;
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "Resolved";
+    readonly target: ProviderTarget;
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
+    readonly _tag: "SelectionRequired";
+    readonly candidates: ReadonlyArray<ProviderTarget>;
+  }, {
+    readonly _tag: Tag;
+  }>;
+  readonly $match: {
+    <Cases extends { readonly [Tag in "NotFound" | "Resolved" | "SelectionRequired"]: (args: Extract<{
+      readonly _tag: "NotFound";
+      readonly domain: DomainName;
+    } | {
+      readonly _tag: "Resolved";
+      readonly target: ProviderTarget;
+    } | {
+      readonly _tag: "SelectionRequired";
+      readonly candidates: ReadonlyArray<ProviderTarget>;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "NotFound";
+      readonly domain: DomainName;
+    } | {
+      readonly _tag: "Resolved";
+      readonly target: ProviderTarget;
+    } | {
+      readonly _tag: "SelectionRequired";
+      readonly candidates: ReadonlyArray<ProviderTarget>;
+    }) => import("effect/Unify").Unify<ReturnType<Cases["NotFound" | "Resolved" | "SelectionRequired"]>>;
+    <Cases extends { readonly [Tag in "NotFound" | "Resolved" | "SelectionRequired"]: (args: Extract<{
+      readonly _tag: "NotFound";
+      readonly domain: DomainName;
+    } | {
+      readonly _tag: "Resolved";
+      readonly target: ProviderTarget;
+    } | {
+      readonly _tag: "SelectionRequired";
+      readonly candidates: ReadonlyArray<ProviderTarget>;
+    }, {
+      readonly _tag: Tag;
+    }>) => any; }>(value: {
+      readonly _tag: "NotFound";
+      readonly domain: DomainName;
+    } | {
+      readonly _tag: "Resolved";
+      readonly target: ProviderTarget;
+    } | {
+      readonly _tag: "SelectionRequired";
+      readonly candidates: ReadonlyArray<ProviderTarget>;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["NotFound" | "Resolved" | "SelectionRequired"]>>;
+  };
+  readonly NotFound: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "NotFound";
+    readonly domain: DomainName;
+  }, "_tag">;
+  readonly Resolved: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Resolved";
+    readonly target: ProviderTarget;
+  }, "_tag">;
+  readonly SelectionRequired: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "SelectionRequired";
+    readonly candidates: ReadonlyArray<ProviderTarget>;
+  }, "_tag">;
+};
+/** The credential material a provider adapter needs to restore a session. */
+interface Credential {
+  readonly accessToken: Value;
+  readonly refreshToken: Value | null;
+  readonly tokenType: string;
+}
+/** The non-secret authorization projection required when restoring a provider session. */
+type Authorization = Pick<ProviderAuthorization, "capabilityEvidence" | "expiresAt" | "method" | "providerContext" | "providerId" | "requiredCapabilities" | "revocation">;
+interface RestoreInput {
+  readonly authorization: Authorization;
+  readonly credential: Credential;
+}
+/** Minimal Promise-shaped provider-session contract for hosts that do not use Effect directly. */
+interface AsyncInterface {
+  readonly providerId: string;
+  readonly listTargets: (input?: ListTargetsInput) => Promise<ReadonlyArray<ProviderTarget>>;
+  readonly resolveTarget: (domain: DomainName) => Promise<Resolution>;
+  readonly forTarget: (target: ProviderTarget) => Promise<AsyncInterface$1>;
+}
+/** Adapts a Promise-shaped session to the Effect-native session boundary. */
+declare const fromAsync: (session: AsyncInterface) => Interface$3;
+/** Adapts an Effect-native session to the Promise facade. */
+declare const toAsync$3: (session: Interface$3) => AsyncInterface;
 //#endregion
 //#region src/providers/cloudflare/protocol.d.ts
 declare const Account$2: Schema.Struct<{
@@ -111,7 +235,8 @@ declare namespace client_d_exports$1 {
 type Fetch$2 = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 /** Configuration for an Effect-native Cloudflare authoritative-DNS client. */
 interface Options$4 {
-  readonly accountId: string;
+  /** Account scope for account tokens; omit for user or OAuth credentials. */
+  readonly accountId?: string;
   readonly baseUrl?: string;
   /** Capabilities the host required when issuing or authorizing this credential. */
   readonly capabilities: TokenValidation["capabilities"];
@@ -132,10 +257,14 @@ interface Zone$1 {
   readonly nameservers: ReadonlyArray<DomainName>;
   readonly status: string | null;
 }
-interface Interface$2 extends Interface$3 {
-  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account$1>, Error$1>;
-  readonly listZones: (input?: ListZonesInput$1) => Effect.Effect<ReadonlyArray<Zone$1>, Error$1>;
-  readonly validateToken: () => Effect.Effect<TokenValidation, Error$1>;
+interface Interface$2 extends Interface$4 {
+  readonly providerId: "cloudflare";
+  readonly forTarget: (target: ProviderTarget) => Effect.Effect<Interface$4, Error>;
+  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account$1>, Error>;
+  readonly listZones: (input?: ListZonesInput$1) => Effect.Effect<ReadonlyArray<Zone$1>, Error>;
+  readonly listTargets: (input?: ListTargetsInput) => Effect.Effect<ReadonlyArray<ProviderTarget>, Error>;
+  readonly resolveTarget: (domain: DomainName) => Effect.Effect<Resolution, Error>;
+  readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
 }
 /** Exposes Cloudflare zone lookup as the optional provider discovery capability. */
 declare function discovery$1(client: Interface$2): Source;
@@ -154,23 +283,25 @@ declare const discoverAuthorizationAccount: (options: CredentialOptions$1 & {
 }) => Effect.Effect<{
   readonly id: string;
   readonly name: string;
-}, Error$1, never>;
+}, Error, never>;
 declare const validateDomainToken: (options: DomainCredentialOptions) => Effect.Effect<{
   accountId: string;
   capabilities: readonly ("dns:read" | "dns:write")[];
   expiresAt: Date | null;
   scopes: never[];
-}, Error$1, never>;
+}, Error, never>;
 /** Creates an Effect-native Cloudflare client without owning the credential lifecycle. */
 declare function make$5(options: Options$4): Interface$2;
 declare namespace auth_d_exports$1 {
-  export { Context$2 as Context, CredentialTarget, OAuthFlowOptions, OAuthMethodOptions, SubjectResolverOptions, TokenConnectionOptions$1 as TokenConnectionOptions, TokenValidatorOptions, contextCodec$1 as contextCodec, manifest$1 as manifest, oauthAuthentication, oauthFlow, oauthMethod, subjectResolver, tokenConnectionMethod$1 as tokenConnectionMethod, tokenMethod$1 as tokenMethod, tokenValidator };
+  export { Context$2 as Context, CredentialTarget, OAuthFlowOptions, OAuthMethodOptions, SubjectResolverOptions, TokenConnectionOptions$1 as TokenConnectionOptions, TokenValidatorOptions, contextCodec$1 as contextCodec, manifest$1 as manifest, oauthAuthentication, oauthFlow, oauthMethod, restore$1 as restore, subjectResolver, tokenConnectionMethod$1 as tokenConnectionMethod, tokenMethod$1 as tokenMethod, tokenValidator };
 }
 declare const Context$2: Schema.Struct<{
+  readonly accountId: Schema.optionalKey<Schema.String>;
   readonly tokenKind: Schema.Literals<readonly ["account", "user"]>;
 }>;
 type Context$2 = typeof Context$2.Type;
 declare const contextCodec$1: Codec<{
+  readonly accountId?: string;
   readonly tokenKind: "account" | "user";
 }>;
 /** Describes Cloudflare's caller-created API-token authorization method. */
@@ -208,7 +339,7 @@ type TokenValidatorOptions = CredentialOptions & ({
   readonly domain: DomainName;
   readonly tokenKind?: "account" | "user";
 });
-/** Resolves the Cloudflare account selected by a completed OAuth grant. */
+/** Resolves the Cloudflare account selected by a completed OAuth authorization. */
 declare function subjectResolver(options: SubjectResolverOptions): OAuthSubjectResolver;
 /** Creates a host callback that validates a Cloudflare API token. */
 declare function tokenValidator(options: TokenValidatorOptions): (token: Value) => ReturnType<Interface$2["validateToken"]>;
@@ -219,7 +350,7 @@ type TokenConnectionOptions$1 = TokenValidatorOptions & {
 declare function tokenConnectionMethod$1(options: TokenConnectionOptions$1): Extract<Method, {
   readonly _tag: "Token";
 }>;
-/** Converts a completed Cloudflare OAuth grant into the canonical connection authentication. */
+/** Converts a completed Cloudflare OAuth authorization into canonical connection authentication. */
 declare const oauthAuthentication: (options: SubjectResolverOptions & {
   readonly accessToken: Value;
   readonly tokens: oauth.TokenEndpointResponse;
@@ -240,7 +371,9 @@ declare const oauthAuthentication: (options: SubjectResolverOptions & {
   providerAccountId: string;
   providerContext: Envelope;
   scopes: string[];
-}, Error$2 | Error$1, never>;
+}, Error$1 | Error, never>;
+/** Restore a credential-scoped Cloudflare session from persisted authorization state. */
+declare function restore$1(options: RestoreInput & Pick<Options$4, "baseUrl" | "fetch">): Effect.Effect<Interface$2, Error>;
 type OAuthFlowOptions = SubjectResolverOptions & {
   readonly client: OAuthClientConfiguration;
   readonly clientAuth: OAuthMethod["clientAuth"];
@@ -289,17 +422,21 @@ interface Zone {
   readonly nameservers: ReadonlyArray<DomainName>;
   readonly status: "active" | "pending";
 }
-interface Interface$1 extends Interface$3 {
-  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account>, Error$1>;
-  readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error$1>;
-  readonly validateToken: () => Effect.Effect<TokenValidation, Error$1>;
+interface Interface$1 extends Interface$4 {
+  readonly providerId: "vercel";
+  readonly forTarget: (target: ProviderTarget) => Effect.Effect<Interface$4, Error>;
+  readonly listAccounts: () => Effect.Effect<ReadonlyArray<Account>, Error>;
+  readonly listZones: (input?: ListZonesInput) => Effect.Effect<ReadonlyArray<Zone>, Error>;
+  readonly listTargets: (input?: ListTargetsInput) => Effect.Effect<ReadonlyArray<ProviderTarget>, Error>;
+  readonly resolveTarget: (domain: DomainName) => Effect.Effect<Resolution, Error>;
+  readonly validateToken: () => Effect.Effect<TokenValidation, Error>;
 }
 /** Exposes Vercel zone lookup as the optional provider discovery capability. */
 declare function discovery(client: Interface$1): Source;
 /** Creates an Effect-native Vercel client without owning the credential lifecycle. */
 declare function make$4(options: Options$3): Interface$1;
 declare namespace auth_d_exports {
-  export { Context$1 as Context, ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, TokenConnectionOptions, contextCodec, exchangeCode, integrationAuthentication, integrationFlow, integrationMethod, manifest, tokenConnectionMethod, tokenMethod };
+  export { Context$1 as Context, ExchangeCodeOptions, IntegrationCredential, IntegrationFlowOptions, IntegrationMethodOptions, TokenConnectionOptions, contextCodec, exchangeCode, integrationAuthentication, integrationFlow, integrationMethod, manifest, restore, tokenConnectionMethod, tokenMethod };
 }
 declare const Context$1: Schema.TaggedUnion<{
   readonly personal: Schema.TaggedStruct<"personal", {
@@ -336,6 +473,8 @@ interface ExchangeCodeOptions {
   readonly clientId: string;
   readonly clientSecret: Value;
   readonly code: Value;
+  /** Configuration ID returned by Vercel's integration callback, when available. */
+  readonly configurationId?: string;
   readonly fetch?: Fetch$1;
   readonly redirectUri: string;
 }
@@ -357,7 +496,7 @@ declare const exchangeCode: (options: ExchangeCodeOptions) => Effect.Effect<{
   };
   installationId: string | null;
   userId: string;
-}, Error$1, never>;
+}, Error, never>;
 interface TokenConnectionOptions extends Omit<Options$3, "token"> {
   readonly token: Value;
 }
@@ -385,7 +524,9 @@ declare const integrationAuthentication: (options: ExchangeCodeOptions & {
   providerAccountId: string;
   providerContext: Envelope;
   scopes: never[];
-}, Error$2 | Error$1, never>;
+}, Error$1 | Error, never>;
+/** Restore a credential-scoped Vercel session from persisted authorization state. */
+declare function restore(options: RestoreInput & Pick<Options$3, "baseUrl" | "fetch">): Effect.Effect<Interface$1, Error>;
 interface IntegrationFlowOptions extends Omit<ExchangeCodeOptions, "code">, IntegrationMethodOptions {}
 /** Creates Vercel Integration's implementation of the common interactive connection capability. */
 declare function integrationFlow(options: IntegrationFlowOptions): InteractiveFlow;
@@ -401,33 +542,33 @@ interface Options$2 {
   readonly fetch?: Fetch;
   readonly timeoutMs?: number;
 }
-declare function make$3(options: Options$2): Interface$4;
+declare function make$3(options: Options$2): Interface$5;
 declare const layer$2: (options: Options$2) => Layer.Layer<Service$1>;
-declare const toAsync$2: (options: Options$2) => AsyncInterface;
+declare const toAsync$2: (options: Options$2) => AsyncInterface$2;
 declare namespace cloudflare_doh_d_exports {
   export { Options$1 as Options, layer$1 as layer, make$2 as make, toAsync$1 as toAsync };
 }
 interface Options$1 extends Omit<Options$2, "endpoint"> {
   readonly endpoint?: string;
 }
-declare function make$2(options?: Options$1): Interface$4;
+declare function make$2(options?: Options$1): Interface$5;
 declare const layer$1: (options?: Options$1) => Layer.Layer<Service$1>;
-declare const toAsync$1: (options?: Options$1) => AsyncInterface;
+declare const toAsync$1: (options?: Options$1) => AsyncInterface$2;
 declare namespace google_doh_d_exports {
   export { Options, layer, make$1 as make, toAsync };
 }
 interface Options extends Omit<Options$2, "endpoint"> {
   readonly endpoint?: string;
 }
-declare function make$1(options?: Options): Interface$4;
+declare function make$1(options?: Options): Interface$5;
 declare const layer: (options?: Options) => Layer.Layer<Service$1>;
-declare const toAsync: (options?: Options) => AsyncInterface;
+declare const toAsync: (options?: Options) => AsyncInterface$2;
 declare namespace resolver_pool_d_exports {
   export { DefaultOptions, Entry, Interface, Observation, Policy, Service, defaultLayer, defaultMake, make };
 }
 interface Entry {
   readonly id: string;
-  readonly resolver: Interface$4;
+  readonly resolver: Interface$5;
   readonly timeoutMs?: number;
 }
 type Observation = Data.TaggedEnum<{
@@ -437,7 +578,7 @@ type Observation = Data.TaggedEnum<{
   };
   Failed: {
     readonly message: string;
-    readonly reason: Exclude<Error$3["reason"], "timeout">;
+    readonly reason: Exclude<Error$2["reason"], "timeout">;
     readonly resolverId: string;
   };
   NoData: {
@@ -458,7 +599,7 @@ declare const Observation: {
   }> | Extract<{
     readonly _tag: "Failed";
     readonly message: string;
-    readonly reason: Exclude<Error$3["reason"], "timeout">;
+    readonly reason: Exclude<Error$2["reason"], "timeout">;
     readonly resolverId: string;
   }, {
     readonly _tag: Tag;
@@ -482,7 +623,7 @@ declare const Observation: {
     } | {
       readonly _tag: "Failed";
       readonly message: string;
-      readonly reason: Exclude<Error$3["reason"], "timeout">;
+      readonly reason: Exclude<Error$2["reason"], "timeout">;
       readonly resolverId: string;
     } | {
       readonly _tag: "NoData";
@@ -500,7 +641,7 @@ declare const Observation: {
     } | {
       readonly _tag: "Failed";
       readonly message: string;
-      readonly reason: Exclude<Error$3["reason"], "timeout">;
+      readonly reason: Exclude<Error$2["reason"], "timeout">;
       readonly resolverId: string;
     } | {
       readonly _tag: "NoData";
@@ -517,7 +658,7 @@ declare const Observation: {
     } | {
       readonly _tag: "Failed";
       readonly message: string;
-      readonly reason: Exclude<Error$3["reason"], "timeout">;
+      readonly reason: Exclude<Error$2["reason"], "timeout">;
       readonly resolverId: string;
     } | {
       readonly _tag: "NoData";
@@ -535,7 +676,7 @@ declare const Observation: {
     } | {
       readonly _tag: "Failed";
       readonly message: string;
-      readonly reason: Exclude<Error$3["reason"], "timeout">;
+      readonly reason: Exclude<Error$2["reason"], "timeout">;
       readonly resolverId: string;
     } | {
       readonly _tag: "NoData";
@@ -554,7 +695,7 @@ declare const Observation: {
   readonly Failed: Data.TaggedEnum.ConstructorFrom<{
     readonly _tag: "Failed";
     readonly message: string;
-    readonly reason: Exclude<Error$3["reason"], "timeout">;
+    readonly reason: Exclude<Error$2["reason"], "timeout">;
     readonly resolverId: string;
   }, "_tag">;
   readonly NoData: Data.TaggedEnum.ConstructorFrom<{
@@ -1094,9 +1235,9 @@ declare const Result: {
     readonly publicDns: PublicDnsObservation | null;
   }, "_tag">;
 };
-declare function observe(input: PublicOnlyConfig): Effect.Effect<Result, Error$2>;
-declare function observe(input: ProviderConfig): Effect.Effect<Result, Error$2, Service$2>;
-declare function observe(input: Config): Effect.Effect<Result, Error$2, Service$2>;
+declare function observe(input: PublicOnlyConfig): Effect.Effect<Result, Error$1>;
+declare function observe(input: ProviderConfig): Effect.Effect<Result, Error$1, Service$2>;
+declare function observe(input: Config): Effect.Effect<Result, Error$1, Service$2>;
 //#endregion
-export { Zone as A, tokenMethod$1 as B, manifest as C, Fetch$1 as D, AccountContext as E, SubjectResolverOptions as F, Zone$1 as G, Fetch$2 as H, TokenConnectionOptions$1 as I, diagnostic_d_exports as J, zones_d_exports as K, TokenValidatorOptions as L, CredentialTarget as M, OAuthFlowOptions as N, ListZonesInput as O, OAuthMethodOptions as P, manifest$1 as R, integrationMethod as S, Account as T, ListZonesInput$1 as U, Account$1 as V, Options$4 as W, connection_api_d_exports as Y, ExchangeCodeOptions as _, verify_d_exports as a, IntegrationMethodOptions as b, Policy as c, google_doh_d_exports as d, Options$1 as f, index_d_exports as g, doh_d_exports as h, Result as i, index_d_exports$1 as j, Options$3 as k, resolver_pool_d_exports as l, Options$2 as m, PublicDns as n, DefaultOptions as o, cloudflare_doh_d_exports as p, selection_d_exports as q, PublicDnsObservation as r, Observation as s, ProviderObservation as t, Options as u, IntegrationCredential as v, tokenMethod as w, TokenConnectionOptions as x, IntegrationFlowOptions as y, oauthMethod as z };
-//# sourceMappingURL=verify-CkgVrwyl.d.mts.map
+export { zones_d_exports as $, Options$3 as A, oauthMethod as B, manifest as C, Fetch$1 as D, AccountContext as E, OAuthMethodOptions as F, ListZonesInput$1 as G, Account$1 as H, SubjectResolverOptions as I, Interface$3 as J, Options$4 as K, TokenConnectionOptions$1 as L, index_d_exports$1 as M, CredentialTarget as N, Interface$1 as O, OAuthFlowOptions as P, session_d_exports as Q, TokenValidatorOptions as R, integrationMethod as S, Account as T, Fetch$2 as U, tokenMethod$1 as V, Interface$2 as W, Resolution as X, ListTargetsInput as Y, RestoreInput as Z, ExchangeCodeOptions as _, verify_d_exports as a, IntegrationMethodOptions as b, Policy as c, google_doh_d_exports as d, selection_d_exports as et, Options$1 as f, index_d_exports as g, doh_d_exports as h, Result as i, Zone as j, ListZonesInput as k, resolver_pool_d_exports as l, Options$2 as m, PublicDns as n, DefaultOptions as o, cloudflare_doh_d_exports as p, Zone$1 as q, PublicDnsObservation as r, Observation as s, ProviderObservation as t, diagnostic_d_exports as tt, Options as u, IntegrationCredential as v, tokenMethod as w, TokenConnectionOptions as x, IntegrationFlowOptions as y, manifest$1 as z };
+//# sourceMappingURL=verify-6xK05pwL.d.mts.map