domainkit 0.4.0 → 0.5.0

package/dist/index.d.mts

@@ -1,14 +1,39 @@
-import { $t as manifest_d_exports, B as types_d_exports, Bt as ProviderAuthorization, Ct as Connection, En as secret_d_exports, Ht as authorization_d_exports, Mn as invalid_input_d_exports, N as DnsPlan, Sn as dns_record_d_exports, St as AuthorizationError, U as zone_discovery_d_exports, an as provider_d_exports, b as AuthorizeError, bn as Type, bt as CryptoError, ft as provider_context_d_exports, jn as Error$1, k as plan_d_exports, kn as domain_name_d_exports, l as resolver_d_exports, un as DnsRecord$1, v as deletion_d_exports, xt as canonical_json_d_exports, yt as lifecycle_repository_d_exports } from "./resolver-uqe1h5Vz.mjs";
-import { J as diagnostic_d_exports, K as zones_d_exports, Y as connection_api_d_exports, a as verify_d_exports, d as google_doh_d_exports, g as index_d_exports$1, h as doh_d_exports, j as index_d_exports, l as resolver_pool_d_exports, p as cloudflare_doh_d_exports, q as selection_d_exports } from "./verify-CkgVrwyl.mjs";
+import { $ as InteractiveStart, B as types_d_exports, Ct as StoredConnection, Dt as encode, Et as decode, G as AuthenticationFailure, J as Continuation, K as BaseInput, N as DnsPlan, Ot as validate, Q as InteractiveFlow, St as ProviderTargetEvidence, Tt as authorizationError, U as zone_discovery_d_exports, Ut as secret_d_exports, Vt as manifest_d_exports, W as Authentication, X as Error$2, Y as ContinuationStore, Yt as provider_d_exports, Z as Failure$1, _n as domain_name_d_exports, _t as AuthorizationError, b as AuthorizeError, bn as invalid_input_d_exports, bt as ProviderConnection, ct as canonical_json_d_exports, en as DnsRecord$1, et as Method$1, fn as dns_record_d_exports, ft as DetachResult$1, gt as Service$1, ht as Interface$1, jt as ProviderAuthorization, k as plan_d_exports, l as resolver_d_exports, mt as Error$1, nt as complete, ot as provider_context_d_exports, pt as DisconnectResult, q as CompleteInput, rt as start, st as CryptoError, tt as StartResult, un as Type, ut as AttachmentResult, v as deletion_d_exports, vt as ConnectionStatus, xt as ProviderTarget, yn as Error$3, yt as DomainAttachment } from "./resolver-BGBLnPjJ.mjs";
+import { $ as zones_d_exports, M as index_d_exports, Q as session_d_exports, a as verify_d_exports, d as google_doh_d_exports, et as selection_d_exports, g as index_d_exports$1, h as doh_d_exports, l as resolver_pool_d_exports, p as cloudflare_doh_d_exports, tt as diagnostic_d_exports } from "./verify-6xK05pwL.mjs";
 import { Context, Crypto, Data, Effect, Layer, Schema } from "effect";
+//#region src/auth/connection-lifecycle.d.ts
+/** Attach one exact provider target to one organization domain. */
+declare const attach: (input: {
+  readonly attachment: DomainAttachment;
+  readonly connectionId: string;
+  readonly ownerId: string;
+}) => Effect.Effect<AttachmentResult, Error$1, Service$1>;
+/** Remove one domain attachment while retaining the organization connection. */
+declare const detach: (input: {
+  readonly attachmentId: string;
+  readonly ownerId: string;
+}) => Effect.Effect<DetachResult$1, Error$1, Service$1>;
+/** Disconnect one organization connection, revoking the shared authorization only when final. */
+declare function disconnect<E>(input: {
+  readonly connectionId: string;
+  readonly ownerId: string;
+  readonly revokeAuthorization: (authorization: ProviderAuthorization) => Effect.Effect<void, E>;
+}): Effect.Effect<DisconnectResult, Error$1 | E, Service$1>;
+declare namespace connection_api_d_exports {
+  export { AttachmentResult, Authentication, AuthenticationFailure, AuthorizationError, BaseInput, CompleteInput, Method$1 as ConnectionMethod, StartResult as ConnectionStartResult, ConnectionStatus, Continuation, ContinuationStore, DetachResult$1 as DetachResult, DisconnectResult, DomainAttachment, Error$2 as Error, Failure$1 as Failure, InteractiveFlow, InteractiveStart, Method$1 as Method, ProviderConnection, ProviderTarget, ProviderTargetEvidence, StartResult, attach, authorizationError, complete, decode, detach, disconnect, encode, start, validate };
+}
+declare namespace lifecycle_api_d_exports {
+  export { AttachmentResult, DetachResult$1 as DetachResult, DisconnectResult, Error$1 as Error, Interface$1 as Interface, Service$1 as Service };
+}
 declare namespace connection_authorization_d_exports {
   export { Error, Requirements, authorize };
 }
 declare const authorize: (input: {
   readonly allowPartial?: boolean;
   readonly authorization: ProviderAuthorization;
-  readonly connection: Connection;
+  readonly connection: ProviderConnection | StoredConnection;
   readonly domain: string;
+  readonly attachment: DomainAttachment;
   readonly operationIds?: ReadonlyArray<string>;
   readonly plan: DnsPlan;
 }) => Effect.Effect<{
@@ -16,11 +41,11 @@ declare const authorize: (input: {
   operationIds: string[];
   planDigest: string;
   version: "domainkit.plan-authorization.v1";
-}, AuthorizationError | Error$1 | AuthorizeError, Crypto.Crypto>;
-type Error = AuthorizationError | Error$1 | CryptoError;
-type Requirements = Crypto.Crypto;
+}, AuthorizationError | Error$3 | Error$1 | AuthorizeError, Crypto.Crypto | Service$1>;
+type Error = AuthorizationError | Error$3 | CryptoError | Error$1;
+type Requirements = Crypto.Crypto | Service$1;
 declare namespace transport_d_exports {
-  export { ApplyResult, AsyncInterface, AsyncOptions, AuthenticationMethod, AuthenticationParameter, CleanupApplyInput, CleanupOperation, CleanupPlan, CleanupPlanInput, CleanupResult, ConnectInput, Connected, ConnectionResult, ConnectionSnapshot, Disconnected, DnsRecord, Failure, InspectInput, Interface, Method, Observation, ObservationEvidence, ObserveInput, OperationResult, PlanOperation, Provider, ProvisioningApplyInput, ProvisioningPlan, ProvisioningPlanInput, Redirect, RemoveDomainInput, RemoveDomainResult, ReusableConnection, ReuseInput, Service, Unsupported, fromAsync, fromDnsRecord, layerFromAsync, toAsync };
+  export { ApplyResult, AsyncInterface, AsyncOptions, AttachInput, AuthenticationMethod, AuthenticationParameter, CleanupApplyInput, CleanupOperation, CleanupPlan, CleanupPlanInput, CleanupResult, ConnectInput, Connected, ConnectionResult, ConnectionSnapshot, DetachInput, DetachResult, Disconnected, DnsRecord, DomainAttachment, Failure, InspectInput, Interface, Method, Observation, ObservationEvidence, ObserveInput, OperationResult, PlanOperation, Provider, ProviderConnection, ProviderTarget, ProviderTargetEvidence, ProvisioningApplyInput, ProvisioningPlan, ProvisioningPlanInput, Redirect, ReusableConnection, Service, Unsupported, fromAsync, fromDnsRecord, layerFromAsync, toAsync };
 }
 declare const Failure_base: Schema.Class<Failure, Schema.TaggedStruct<"Failure", {
   readonly message: Schema.String;
@@ -38,6 +63,9 @@ declare const AuthenticationParameter: Schema.Struct<{
 }>;
 type AuthenticationParameter = typeof AuthenticationParameter.Type;
 declare const AuthenticationMethod: Schema.TaggedUnion<{
+  readonly Integration: Schema.TaggedStruct<"Integration", {
+    readonly label: Schema.String;
+  }>;
   readonly OAuth: Schema.TaggedStruct<"OAuth", {
     readonly label: Schema.String;
   }>;
@@ -56,6 +84,7 @@ declare const AuthenticationMethod: Schema.TaggedUnion<{
 type AuthenticationMethod = typeof AuthenticationMethod.Type;
 /** The authentication choice supplied to a connection request. */
 type Method = Data.TaggedEnum<{
+  Integration: {};
   OAuth: {};
   Token: {
     readonly parameters?: Readonly<Record<string, string>>;
@@ -63,7 +92,11 @@ type Method = Data.TaggedEnum<{
   };
 }>;
 declare const Method: {
-  readonly $is: <Tag extends "OAuth" | "Token">(tag: Tag) => (u: unknown) => u is Extract<{
+  readonly $is: <Tag extends "Integration" | "OAuth" | "Token">(tag: Tag) => (u: unknown) => u is Extract<{
+    readonly _tag: "Integration";
+  }, {
+    readonly _tag: Tag;
+  }> | Extract<{
     readonly _tag: "OAuth";
   }, {
     readonly _tag: Tag;
@@ -75,7 +108,9 @@ declare const Method: {
     readonly _tag: Tag;
   }>;
   readonly $match: {
-    <Cases extends { readonly [Tag in "OAuth" | "Token"]: (args: Extract<{
+    <Cases extends { readonly [Tag in "Integration" | "OAuth" | "Token"]: (args: Extract<{
+      readonly _tag: "Integration";
+    } | {
       readonly _tag: "OAuth";
     } | {
       readonly _tag: "Token";
@@ -84,13 +119,17 @@ declare const Method: {
     }, {
       readonly _tag: Tag;
     }>) => any; }>(cases: Cases): (value: {
+      readonly _tag: "Integration";
+    } | {
       readonly _tag: "OAuth";
     } | {
       readonly _tag: "Token";
       readonly parameters?: Readonly<Record<string, string>>;
       readonly token: string;
-    }) => import("effect/Unify").Unify<ReturnType<Cases["OAuth" | "Token"]>>;
-    <Cases extends { readonly [Tag in "OAuth" | "Token"]: (args: Extract<{
+    }) => import("effect/Unify").Unify<ReturnType<Cases["Integration" | "OAuth" | "Token"]>>;
+    <Cases extends { readonly [Tag in "Integration" | "OAuth" | "Token"]: (args: Extract<{
+      readonly _tag: "Integration";
+    } | {
       readonly _tag: "OAuth";
     } | {
       readonly _tag: "Token";
@@ -99,13 +138,18 @@ declare const Method: {
     }, {
       readonly _tag: Tag;
     }>) => any; }>(value: {
+      readonly _tag: "Integration";
+    } | {
       readonly _tag: "OAuth";
     } | {
       readonly _tag: "Token";
       readonly parameters?: Readonly<Record<string, string>>;
       readonly token: string;
-    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["OAuth" | "Token"]>>;
+    }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Integration" | "OAuth" | "Token"]>>;
   };
+  readonly Integration: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Integration";
+  }, "_tag">;
   readonly OAuth: Data.TaggedEnum.ConstructorFrom<{
     readonly _tag: "OAuth";
   }, "_tag">;
@@ -117,6 +161,9 @@ declare const Method: {
 };
 declare const Provider: Schema.Struct<{
   readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+    readonly Integration: Schema.TaggedStruct<"Integration", {
+      readonly label: Schema.String;
+    }>;
     readonly OAuth: Schema.TaggedStruct<"OAuth", {
       readonly label: Schema.String;
     }>;
@@ -137,10 +184,37 @@ declare const Provider: Schema.Struct<{
 }>;
 type Provider = typeof Provider.Type;
 declare const Connected: Schema.TaggedStruct<"Connected", {
-  readonly connectionId: Schema.String;
-  readonly domain: Schema.String;
+  readonly attachment: Schema.Struct<{
+    readonly connectionId: Schema.String;
+    readonly createdAt: Schema.DateFromString;
+    readonly domain: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    readonly id: Schema.String;
+    readonly target: Schema.Struct<{
+      readonly accountId: Schema.String;
+      readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+      readonly evidence: Schema.optionalKey<Schema.Struct<{
+        readonly accountName: Schema.optionalKey<Schema.String>;
+        readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+        readonly status: Schema.String;
+        readonly zoneType: Schema.String;
+      }>>;
+      readonly zoneId: Schema.String;
+      readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    }>;
+  }>;
+  readonly connection: Schema.Struct<{
+    readonly createdAt: Schema.DateFromString;
+    readonly id: Schema.String;
+    readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+    readonly ownerId: Schema.String;
+    readonly providerId: Schema.String;
+    readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+  }>;
   readonly provider: Schema.Struct<{
     readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+      readonly Integration: Schema.TaggedStruct<"Integration", {
+        readonly label: Schema.String;
+      }>;
       readonly OAuth: Schema.TaggedStruct<"OAuth", {
         readonly label: Schema.String;
       }>;
@@ -162,14 +236,35 @@ declare const Connected: Schema.TaggedStruct<"Connected", {
 }>;
 type Connected = typeof Connected.Type;
 declare const ReusableConnection: Schema.Struct<{
-  readonly connectionId: Schema.String;
-  readonly label: Schema.String;
+  readonly connection: Schema.Struct<{
+    readonly createdAt: Schema.DateFromString;
+    readonly id: Schema.String;
+    readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+    readonly ownerId: Schema.String;
+    readonly providerId: Schema.String;
+    readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+  }>;
+  readonly targets: Schema.$Array<Schema.Struct<{
+    readonly accountId: Schema.String;
+    readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+    readonly evidence: Schema.optionalKey<Schema.Struct<{
+      readonly accountName: Schema.optionalKey<Schema.String>;
+      readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+      readonly status: Schema.String;
+      readonly zoneType: Schema.String;
+    }>>;
+    readonly zoneId: Schema.String;
+    readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+  }>>;
 }>;
 type ReusableConnection = typeof ReusableConnection.Type;
 declare const Disconnected: Schema.TaggedStruct<"Disconnected", {
   readonly domain: Schema.String;
   readonly provider: Schema.Struct<{
     readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+      readonly Integration: Schema.TaggedStruct<"Integration", {
+        readonly label: Schema.String;
+      }>;
       readonly OAuth: Schema.TaggedStruct<"OAuth", {
         readonly label: Schema.String;
       }>;
@@ -188,9 +283,27 @@ declare const Disconnected: Schema.TaggedStruct<"Disconnected", {
     readonly id: Schema.String;
     readonly name: Schema.String;
   }>;
-  readonly reusableConnection: Schema.optionalKey<Schema.Struct<{
-    readonly connectionId: Schema.String;
-    readonly label: Schema.String;
+  readonly reusableConnections: Schema.$Array<Schema.Struct<{
+    readonly connection: Schema.Struct<{
+      readonly createdAt: Schema.DateFromString;
+      readonly id: Schema.String;
+      readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+      readonly ownerId: Schema.String;
+      readonly providerId: Schema.String;
+      readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+    }>;
+    readonly targets: Schema.$Array<Schema.Struct<{
+      readonly accountId: Schema.String;
+      readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+      readonly evidence: Schema.optionalKey<Schema.Struct<{
+        readonly accountName: Schema.optionalKey<Schema.String>;
+        readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+        readonly status: Schema.String;
+        readonly zoneType: Schema.String;
+      }>>;
+      readonly zoneId: Schema.String;
+      readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    }>>;
   }>>;
 }>;
 type Disconnected = typeof Disconnected.Type;
@@ -199,10 +312,37 @@ declare const Unsupported: Schema.TaggedStruct<"Unsupported", {
 }>;
 type Unsupported = typeof Unsupported.Type;
 declare const ConnectionSnapshot: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"Connected", {
-  readonly connectionId: Schema.String;
-  readonly domain: Schema.String;
+  readonly attachment: Schema.Struct<{
+    readonly connectionId: Schema.String;
+    readonly createdAt: Schema.DateFromString;
+    readonly domain: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    readonly id: Schema.String;
+    readonly target: Schema.Struct<{
+      readonly accountId: Schema.String;
+      readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+      readonly evidence: Schema.optionalKey<Schema.Struct<{
+        readonly accountName: Schema.optionalKey<Schema.String>;
+        readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+        readonly status: Schema.String;
+        readonly zoneType: Schema.String;
+      }>>;
+      readonly zoneId: Schema.String;
+      readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    }>;
+  }>;
+  readonly connection: Schema.Struct<{
+    readonly createdAt: Schema.DateFromString;
+    readonly id: Schema.String;
+    readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+    readonly ownerId: Schema.String;
+    readonly providerId: Schema.String;
+    readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+  }>;
   readonly provider: Schema.Struct<{
     readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+      readonly Integration: Schema.TaggedStruct<"Integration", {
+        readonly label: Schema.String;
+      }>;
       readonly OAuth: Schema.TaggedStruct<"OAuth", {
         readonly label: Schema.String;
       }>;
@@ -225,6 +365,9 @@ declare const ConnectionSnapshot: Schema.toTaggedUnion<"_tag", readonly [Schema.
   readonly domain: Schema.String;
   readonly provider: Schema.Struct<{
     readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+      readonly Integration: Schema.TaggedStruct<"Integration", {
+        readonly label: Schema.String;
+      }>;
       readonly OAuth: Schema.TaggedStruct<"OAuth", {
         readonly label: Schema.String;
       }>;
@@ -243,9 +386,27 @@ declare const ConnectionSnapshot: Schema.toTaggedUnion<"_tag", readonly [Schema.
     readonly id: Schema.String;
     readonly name: Schema.String;
   }>;
-  readonly reusableConnection: Schema.optionalKey<Schema.Struct<{
-    readonly connectionId: Schema.String;
-    readonly label: Schema.String;
+  readonly reusableConnections: Schema.$Array<Schema.Struct<{
+    readonly connection: Schema.Struct<{
+      readonly createdAt: Schema.DateFromString;
+      readonly id: Schema.String;
+      readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+      readonly ownerId: Schema.String;
+      readonly providerId: Schema.String;
+      readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+    }>;
+    readonly targets: Schema.$Array<Schema.Struct<{
+      readonly accountId: Schema.String;
+      readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+      readonly evidence: Schema.optionalKey<Schema.Struct<{
+        readonly accountName: Schema.optionalKey<Schema.String>;
+        readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+        readonly status: Schema.String;
+        readonly zoneType: Schema.String;
+      }>>;
+      readonly zoneId: Schema.String;
+      readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    }>>;
   }>>;
 }>, Schema.TaggedStruct<"Unsupported", {
   readonly domain: Schema.String;
@@ -256,10 +417,37 @@ declare const Redirect: Schema.TaggedStruct<"Redirect", {
 }>;
 type Redirect = typeof Redirect.Type;
 declare const ConnectionResult: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"Connected", {
-  readonly connectionId: Schema.String;
-  readonly domain: Schema.String;
+  readonly attachment: Schema.Struct<{
+    readonly connectionId: Schema.String;
+    readonly createdAt: Schema.DateFromString;
+    readonly domain: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    readonly id: Schema.String;
+    readonly target: Schema.Struct<{
+      readonly accountId: Schema.String;
+      readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+      readonly evidence: Schema.optionalKey<Schema.Struct<{
+        readonly accountName: Schema.optionalKey<Schema.String>;
+        readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+        readonly status: Schema.String;
+        readonly zoneType: Schema.String;
+      }>>;
+      readonly zoneId: Schema.String;
+      readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    }>;
+  }>;
+  readonly connection: Schema.Struct<{
+    readonly createdAt: Schema.DateFromString;
+    readonly id: Schema.String;
+    readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+    readonly ownerId: Schema.String;
+    readonly providerId: Schema.String;
+    readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+  }>;
   readonly provider: Schema.Struct<{
     readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+      readonly Integration: Schema.TaggedStruct<"Integration", {
+        readonly label: Schema.String;
+      }>;
       readonly OAuth: Schema.TaggedStruct<"OAuth", {
         readonly label: Schema.String;
       }>;
@@ -282,12 +470,36 @@ declare const ConnectionResult: Schema.toTaggedUnion<"_tag", readonly [Schema.Ta
   readonly authorizationUrl: Schema.String;
 }>]>;
 type ConnectionResult = typeof ConnectionResult.Type;
-declare const RemoveDomainResult: Schema.TaggedStruct<"Removed", {
-  readonly connectionId: Schema.String;
-  readonly domain: Schema.String;
-  readonly remainingDomainCount: Schema.Int;
+declare const DetachResult: Schema.TaggedStruct<"Detached", {
+  readonly attachment: Schema.Struct<{
+    readonly connectionId: Schema.String;
+    readonly createdAt: Schema.DateFromString;
+    readonly domain: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    readonly id: Schema.String;
+    readonly target: Schema.Struct<{
+      readonly accountId: Schema.String;
+      readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+      readonly evidence: Schema.optionalKey<Schema.Struct<{
+        readonly accountName: Schema.optionalKey<Schema.String>;
+        readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+        readonly status: Schema.String;
+        readonly zoneType: Schema.String;
+      }>>;
+      readonly zoneId: Schema.String;
+      readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+    }>;
+  }>;
+  readonly connection: Schema.Struct<{
+    readonly createdAt: Schema.DateFromString;
+    readonly id: Schema.String;
+    readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+    readonly ownerId: Schema.String;
+    readonly providerId: Schema.String;
+    readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+  }>;
+  readonly remainingAttachments: Schema.Int;
 }>;
-type RemoveDomainResult = typeof RemoveDomainResult.Type;
+type DetachResult = typeof DetachResult.Type;
 /** A presentation projection of a DNS requirement. */
 declare const DnsRecord: Schema.Struct<{
   readonly id: Schema.String;
@@ -590,21 +802,27 @@ interface ConnectInput {
 interface InspectInput {
   readonly domain: string;
 }
-interface ReuseInput {
+interface AttachInput {
   readonly connectionId: string;
   readonly domain: string;
+  readonly target: ProviderTarget;
 }
-interface RemoveDomainInput extends ReuseInput {
+interface DetachInput {
+  readonly attachmentId: string;
   readonly preserveDns: true;
 }
-interface ProvisioningPlanInput extends ReuseInput {
+interface ProvisioningPlanInput {
+  readonly attachmentId: string;
+  readonly domain: string;
   readonly records: ReadonlyArray<DnsRecord>;
 }
-interface ProvisioningApplyInput extends ReuseInput {
+interface ProvisioningApplyInput {
+  readonly attachmentId: string;
+  readonly domain: string;
   readonly planDigest: string;
 }
 interface ObserveInput {
-  readonly connectionId?: string;
+  readonly attachmentId?: string;
   readonly domain: string;
   readonly records: ReadonlyArray<DnsRecord>;
   readonly sources: {
@@ -612,7 +830,9 @@ interface ObserveInput {
     readonly publicDns: boolean;
   };
 }
-interface CleanupPlanInput extends ReuseInput {
+interface CleanupPlanInput {
+  readonly attachmentId: string;
+  readonly domain: string;
   readonly receiptId: string;
 }
 interface CleanupApplyInput extends CleanupPlanInput {
@@ -625,10 +845,10 @@ interface Interface {
     readonly plan: (input: CleanupPlanInput) => Effect.Effect<CleanupPlan, Failure>;
   };
   readonly connection: {
+    readonly attach: (input: AttachInput) => Effect.Effect<Connected, Failure>;
     readonly connect: (input: ConnectInput) => Effect.Effect<ConnectionResult, Failure>;
     readonly inspect: (input: InspectInput) => Effect.Effect<ConnectionSnapshot, Failure>;
-    readonly removeDomain: (input: RemoveDomainInput) => Effect.Effect<RemoveDomainResult, Failure>;
-    readonly reuse: (input: ReuseInput) => Effect.Effect<Connected, Failure>;
+    readonly detach: (input: DetachInput) => Effect.Effect<DetachResult, Failure>;
   };
   readonly provisioning: {
     readonly apply: (input: ProvisioningApplyInput) => Effect.Effect<ApplyResult, Failure>;
@@ -647,10 +867,10 @@ interface AsyncInterface {
     readonly plan: (input: CleanupPlanInput) => Promise<CleanupPlan>;
   };
   readonly connection: {
+    readonly attach: (input: AttachInput) => Promise<Connected>;
     readonly connect: (input: ConnectInput) => Promise<ConnectionResult>;
     readonly inspect: (input: InspectInput) => Promise<ConnectionSnapshot>;
-    readonly removeDomain: (input: RemoveDomainInput) => Promise<RemoveDomainResult>;
-    readonly reuse: (input: ReuseInput) => Promise<Connected>;
+    readonly detach: (input: DetachInput) => Promise<DetachResult>;
   };
   readonly provisioning: {
     readonly apply: (input: ProvisioningApplyInput) => Promise<ApplyResult>;
@@ -677,5 +897,5 @@ declare function parse(type: Type, input: unknown): string;
 /** The current package version from the package manifest. */
 declare const VERSION: string;
 //#endregion
-export { lifecycle_repository_d_exports as AuthorizationLifecycle, index_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_api_d_exports as Connection, connection_authorization_d_exports as ConnectionAuthorization, deletion_d_exports as Deletion, diagnostic_d_exports as Diagnostic, canonical_json_d_exports as Digest, dns_data_d_exports as DnsData, doh_d_exports as DnsOverHttps, types_d_exports as DnsPlan, provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, resolver_d_exports as DnsResolver, resolver_pool_d_exports as DnsResolverPool, domain_name_d_exports as DomainName, google_doh_d_exports as GoogleDnsOverHttps, invalid_input_d_exports as InvalidInput, manifest_d_exports as ProviderAuth, authorization_d_exports as ProviderAuthorization, provider_context_d_exports as ProviderContext, selection_d_exports as ProviderDiscovery, plan_d_exports as Provisioning, secret_d_exports as Secret, transport_d_exports as Transport, VERSION, index_d_exports$1 as Vercel, verify_d_exports as Verification, zone_discovery_d_exports as ZoneDiscovery, zones_d_exports as Zones };
+export { index_d_exports as Cloudflare, cloudflare_doh_d_exports as CloudflareDnsOverHttps, connection_api_d_exports as Connection, connection_authorization_d_exports as ConnectionAuthorization, deletion_d_exports as Deletion, diagnostic_d_exports as Diagnostic, canonical_json_d_exports as Digest, dns_data_d_exports as DnsData, doh_d_exports as DnsOverHttps, types_d_exports as DnsPlan, provider_d_exports as DnsProvider, dns_record_d_exports as DnsRecord, resolver_d_exports as DnsResolver, resolver_pool_d_exports as DnsResolverPool, domain_name_d_exports as DomainName, google_doh_d_exports as GoogleDnsOverHttps, invalid_input_d_exports as InvalidInput, lifecycle_api_d_exports as ManagedDnsConnections, manifest_d_exports as ProviderAuth, provider_context_d_exports as ProviderContext, selection_d_exports as ProviderDiscovery, session_d_exports as ProviderSession, plan_d_exports as Provisioning, secret_d_exports as Secret, transport_d_exports as Transport, VERSION, index_d_exports$1 as Vercel, verify_d_exports as Verification, zone_discovery_d_exports as ZoneDiscovery, zones_d_exports as Zones };
 //# sourceMappingURL=index.d.mts.map