domainkit 0.7.0 → 0.8.0

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { C as ConnectInput$1, D as Interface$1, E as Error$1, Et as dns_record_d_exports, F as StoredConnection, G as authorization_d_exports, I as StoredCredential, M as ProviderConnection, N as ProviderTarget, Nt as Error$2, O as Service$1, P as ProviderTargetEvidence, Pt as invalid_input_d_exports, S as AttachmentResult, T as DisconnectResult, W as ProviderAuthorization, _ as provider_context_d_exports, b as Aggregate, j as DomainAttachment, jt as domain_name_d_exports, k as AuthorizationError, lt as provider_d_exports, mt as DnsRecord$1, rt as secret_d_exports, tt as manifest_d_exports, v as CryptoError, w as DetachResult$1, wt as Type, x as AggregateSchema, y as canonical_json_d_exports } from "./connect-10vHuShV.mjs";
-import { t as connection_api_d_exports } from "./connection-api-DW7xUJdj.mjs";
-import { M as index_d_exports, a as verify_d_exports, d as google_doh_d_exports, et as session_d_exports, g as index_d_exports$1, h as doh_d_exports, l as resolver_pool_d_exports, nt as selection_d_exports, p as cloudflare_doh_d_exports, rt as diagnostic_d_exports, tt as zones_d_exports } from "./verify-C3V_GtzL.mjs";
-import { B as types_d_exports, N as DnsPlan, U as zone_discovery_d_exports, b as AuthorizeError, k as plan_d_exports, l as resolver_d_exports, v as deletion_d_exports } from "./resolver-DRrLm_hB.mjs";
+import { C as ConnectInput$1, D as Interface$1, E as Error$1, Et as dns_record_d_exports, F as StoredConnection, G as authorization_d_exports, I as StoredCredential, M as ProviderConnection, N as ProviderTarget, Nt as Error$2, O as Service$1, P as ProviderTargetEvidence, Pt as invalid_input_d_exports, S as AttachmentResult, T as DisconnectResult, W as ProviderAuthorization, _ as provider_context_d_exports, b as Aggregate, j as DomainAttachment, jt as domain_name_d_exports, k as AuthorizationError, lt as provider_d_exports, mt as DnsRecord$1, rt as secret_d_exports, tt as manifest_d_exports, v as CryptoError, w as DetachResult$1, wt as Type, x as AggregateSchema, y as canonical_json_d_exports } from "./connect-D-X8T9W8.mjs";
+import { t as connection_api_d_exports } from "./connection-api-lqG1nBtD.mjs";
+import { M as index_d_exports, a as verify_d_exports, d as google_doh_d_exports, et as session_d_exports, g as index_d_exports$1, h as doh_d_exports, l as resolver_pool_d_exports, nt as selection_d_exports, p as cloudflare_doh_d_exports, rt as diagnostic_d_exports, tt as zones_d_exports } from "./verify-FpunAcM7.mjs";
+import { B as types_d_exports, N as DnsPlan, U as zone_discovery_d_exports, b as AuthorizeError, k as plan_d_exports, l as resolver_d_exports, v as deletion_d_exports } from "./resolver-xoSwyXDJ.mjs";
 import { Context, Crypto, Data, Effect, Layer, Schema } from "effect";
 declare namespace lifecycle_api_d_exports {
   export { Aggregate, AggregateSchema, AttachmentResult, authorization_d_exports as Authorization, ConnectInput$1 as ConnectInput, DetachResult$1 as DetachResult, DisconnectResult, Error$1 as Error, Interface$1 as Interface, Service$1 as Service, StoredConnection, StoredCredential };
@@ -43,7 +43,7 @@ declare const AuthenticationParameter: Schema.Struct<{
   readonly required: Schema.optionalKey<Schema.Boolean>;
 }>;
 type AuthenticationParameter = typeof AuthenticationParameter.Type;
-declare const AuthenticationMethod: Schema.TaggedUnion<{
+declare const AuthenticationMethodSchema: Schema.TaggedUnion<{
   readonly Integration: Schema.TaggedStruct<"Integration", {
     readonly label: Schema.String;
   }>;
@@ -62,7 +62,49 @@ declare const AuthenticationMethod: Schema.TaggedUnion<{
     readonly placeholder: Schema.optionalKey<Schema.String>;
   }>;
 }>;
-type AuthenticationMethod = typeof AuthenticationMethod.Type;
+/** Authentication method schema and constructors for trusted host transport responses. */
+declare const AuthenticationMethod: {
+  Schema: Schema.TaggedUnion<{
+    readonly Integration: Schema.TaggedStruct<"Integration", {
+      readonly label: Schema.String;
+    }>;
+    readonly OAuth: Schema.TaggedStruct<"OAuth", {
+      readonly label: Schema.String;
+    }>;
+    readonly Token: Schema.TaggedStruct<"Token", {
+      readonly label: Schema.String;
+      readonly parameters: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly description: Schema.optionalKey<Schema.String>;
+        readonly key: Schema.String;
+        readonly label: Schema.String;
+        readonly placeholder: Schema.optionalKey<Schema.String>;
+        readonly required: Schema.optionalKey<Schema.Boolean>;
+      }>>>;
+      readonly placeholder: Schema.optionalKey<Schema.String>;
+    }>;
+  }>;
+  Integration: (input: Parameters<typeof AuthenticationMethodSchema.cases.Integration.make>[0]) => {
+    readonly _tag: "Integration";
+    readonly label: string;
+  };
+  OAuth: (input: Parameters<typeof AuthenticationMethodSchema.cases.OAuth.make>[0]) => {
+    readonly _tag: "OAuth";
+    readonly label: string;
+  };
+  Token: (input: Parameters<typeof AuthenticationMethodSchema.cases.Token.make>[0]) => {
+    readonly _tag: "Token";
+    readonly label: string;
+    readonly parameters?: readonly {
+      readonly description?: string;
+      readonly key: string;
+      readonly label: string;
+      readonly placeholder?: string;
+      readonly required?: boolean;
+    }[];
+    readonly placeholder?: string;
+  };
+};
+type AuthenticationMethod = typeof AuthenticationMethodSchema.Type;
 /** The authentication choice supplied to a connection request. */
 type Method = Data.TaggedEnum<{
   Integration: {};
@@ -164,7 +206,7 @@ declare const Provider: Schema.Struct<{
   readonly name: Schema.String;
 }>;
 type Provider = typeof Provider.Type;
-declare const Connected: Schema.TaggedStruct<"Connected", {
+declare const ConnectedSchema: Schema.TaggedStruct<"Connected", {
   readonly attachment: Schema.Struct<{
     readonly connectionId: Schema.String;
     readonly createdAt: Schema.DateFromString;
@@ -215,7 +257,62 @@ declare const Connected: Schema.TaggedStruct<"Connected", {
     readonly name: Schema.String;
   }>;
 }>;
-type Connected = typeof Connected.Type;
+/** Constructs a connected transport snapshot from trusted host data. */
+declare function Connected(input: Parameters<typeof ConnectedSchema.make>[0]): Connected;
+declare namespace Connected {
+  const Schema: Schema.TaggedStruct<"Connected", {
+    readonly attachment: Schema.Struct<{
+      readonly connectionId: Schema.String;
+      readonly createdAt: Schema.DateFromString;
+      readonly domain: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+      readonly id: Schema.String;
+      readonly target: Schema.Struct<{
+        readonly accountId: Schema.String;
+        readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+        readonly evidence: Schema.optionalKey<Schema.Struct<{
+          readonly accountName: Schema.optionalKey<Schema.String>;
+          readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+          readonly status: Schema.String;
+          readonly zoneType: Schema.String;
+        }>>;
+        readonly zoneId: Schema.String;
+        readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+      }>;
+    }>;
+    readonly connection: Schema.Struct<{
+      readonly createdAt: Schema.DateFromString;
+      readonly id: Schema.String;
+      readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+      readonly ownerId: Schema.String;
+      readonly providerId: Schema.String;
+      readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+    }>;
+    readonly provider: Schema.Struct<{
+      readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+        readonly Integration: Schema.TaggedStruct<"Integration", {
+          readonly label: Schema.String;
+        }>;
+        readonly OAuth: Schema.TaggedStruct<"OAuth", {
+          readonly label: Schema.String;
+        }>;
+        readonly Token: Schema.TaggedStruct<"Token", {
+          readonly label: Schema.String;
+          readonly parameters: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly description: Schema.optionalKey<Schema.String>;
+            readonly key: Schema.String;
+            readonly label: Schema.String;
+            readonly placeholder: Schema.optionalKey<Schema.String>;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+          }>>>;
+          readonly placeholder: Schema.optionalKey<Schema.String>;
+        }>;
+      }>>;
+      readonly id: Schema.String;
+      readonly name: Schema.String;
+    }>;
+  }>;
+}
+type Connected = typeof ConnectedSchema.Type;
 declare const ReusableConnection: Schema.Struct<{
   readonly connection: Schema.Struct<{
     readonly createdAt: Schema.DateFromString;
@@ -239,7 +336,7 @@ declare const ReusableConnection: Schema.Struct<{
   }>>;
 }>;
 type ReusableConnection = typeof ReusableConnection.Type;
-declare const Disconnected: Schema.TaggedStruct<"Disconnected", {
+declare const DisconnectedSchema: Schema.TaggedStruct<"Disconnected", {
   readonly domain: Schema.String;
   readonly provider: Schema.Struct<{
     readonly authentication: Schema.$Array<Schema.TaggedUnion<{
@@ -287,11 +384,70 @@ declare const Disconnected: Schema.TaggedStruct<"Disconnected", {
     }>>;
   }>>;
 }>;
-type Disconnected = typeof Disconnected.Type;
-declare const Unsupported: Schema.TaggedStruct<"Unsupported", {
+/** Constructs a disconnected transport snapshot from trusted host data. */
+declare function Disconnected(input: Parameters<typeof DisconnectedSchema.make>[0]): Disconnected;
+declare namespace Disconnected {
+  const Schema: Schema.TaggedStruct<"Disconnected", {
+    readonly domain: Schema.String;
+    readonly provider: Schema.Struct<{
+      readonly authentication: Schema.$Array<Schema.TaggedUnion<{
+        readonly Integration: Schema.TaggedStruct<"Integration", {
+          readonly label: Schema.String;
+        }>;
+        readonly OAuth: Schema.TaggedStruct<"OAuth", {
+          readonly label: Schema.String;
+        }>;
+        readonly Token: Schema.TaggedStruct<"Token", {
+          readonly label: Schema.String;
+          readonly parameters: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly description: Schema.optionalKey<Schema.String>;
+            readonly key: Schema.String;
+            readonly label: Schema.String;
+            readonly placeholder: Schema.optionalKey<Schema.String>;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+          }>>>;
+          readonly placeholder: Schema.optionalKey<Schema.String>;
+        }>;
+      }>>;
+      readonly id: Schema.String;
+      readonly name: Schema.String;
+    }>;
+    readonly reusableConnections: Schema.$Array<Schema.Struct<{
+      readonly connection: Schema.Struct<{
+        readonly createdAt: Schema.DateFromString;
+        readonly id: Schema.String;
+        readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+        readonly ownerId: Schema.String;
+        readonly providerId: Schema.String;
+        readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+      }>;
+      readonly targets: Schema.$Array<Schema.Struct<{
+        readonly accountId: Schema.String;
+        readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+        readonly evidence: Schema.optionalKey<Schema.Struct<{
+          readonly accountName: Schema.optionalKey<Schema.String>;
+          readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+          readonly status: Schema.String;
+          readonly zoneType: Schema.String;
+        }>>;
+        readonly zoneId: Schema.String;
+        readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+      }>>;
+    }>>;
+  }>;
+}
+type Disconnected = typeof DisconnectedSchema.Type;
+declare const UnsupportedSchema: Schema.TaggedStruct<"Unsupported", {
   readonly domain: Schema.String;
 }>;
-type Unsupported = typeof Unsupported.Type;
+/** Constructs an unsupported transport snapshot from trusted host data. */
+declare function Unsupported(input: Parameters<typeof UnsupportedSchema.make>[0]): Unsupported;
+declare namespace Unsupported {
+  const Schema: Schema.TaggedStruct<"Unsupported", {
+    readonly domain: Schema.String;
+  }>;
+}
+type Unsupported = typeof UnsupportedSchema.Type;
 declare const ConnectionSnapshot: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"Connected", {
   readonly attachment: Schema.Struct<{
     readonly connectionId: Schema.String;
@@ -393,10 +549,17 @@ declare const ConnectionSnapshot: Schema.toTaggedUnion<"_tag", readonly [Schema.
   readonly domain: Schema.String;
 }>]>;
 type ConnectionSnapshot = typeof ConnectionSnapshot.Type;
-declare const Redirect: Schema.TaggedStruct<"Redirect", {
+declare const RedirectSchema: Schema.TaggedStruct<"Redirect", {
   readonly authorizationUrl: Schema.String;
 }>;
-type Redirect = typeof Redirect.Type;
+/** Constructs an OAuth redirect response from trusted host data. */
+declare function Redirect(input: Parameters<typeof RedirectSchema.make>[0]): Redirect;
+declare namespace Redirect {
+  const Schema: Schema.TaggedStruct<"Redirect", {
+    readonly authorizationUrl: Schema.String;
+  }>;
+}
+type Redirect = typeof RedirectSchema.Type;
 declare const ConnectionResult: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"Connected", {
   readonly attachment: Schema.Struct<{
     readonly connectionId: Schema.String;
@@ -451,7 +614,7 @@ declare const ConnectionResult: Schema.toTaggedUnion<"_tag", readonly [Schema.Ta
   readonly authorizationUrl: Schema.String;
 }>]>;
 type ConnectionResult = typeof ConnectionResult.Type;
-declare const DetachResult: Schema.TaggedStruct<"Detached", {
+declare const DetachResultSchema: Schema.TaggedStruct<"Detached", {
   readonly attachment: Schema.Struct<{
     readonly connectionId: Schema.String;
     readonly createdAt: Schema.DateFromString;
@@ -480,7 +643,40 @@ declare const DetachResult: Schema.TaggedStruct<"Detached", {
   }>;
   readonly remainingAttachments: Schema.Int;
 }>;
-type DetachResult = typeof DetachResult.Type;
+/** Constructs a detach response from trusted host data. */
+declare function DetachResult(input: Parameters<typeof DetachResultSchema.make>[0]): DetachResult;
+declare namespace DetachResult {
+  const Schema: Schema.TaggedStruct<"Detached", {
+    readonly attachment: Schema.Struct<{
+      readonly connectionId: Schema.String;
+      readonly createdAt: Schema.DateFromString;
+      readonly domain: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+      readonly id: Schema.String;
+      readonly target: Schema.Struct<{
+        readonly accountId: Schema.String;
+        readonly accountKind: Schema.NullOr<Schema.Literals<readonly ["account", "personal", "team"]>>;
+        readonly evidence: Schema.optionalKey<Schema.Struct<{
+          readonly accountName: Schema.optionalKey<Schema.String>;
+          readonly nameservers: Schema.$Array<Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>>;
+          readonly status: Schema.String;
+          readonly zoneType: Schema.String;
+        }>>;
+        readonly zoneId: Schema.String;
+        readonly zoneName: Schema.decodeTo<Schema.brand<Schema.String, "DomainName">, Schema.String, never, never>;
+      }>;
+    }>;
+    readonly connection: Schema.Struct<{
+      readonly createdAt: Schema.DateFromString;
+      readonly id: Schema.String;
+      readonly method: Schema.Literals<readonly ["integration", "oauth2", "token"]>;
+      readonly ownerId: Schema.String;
+      readonly providerId: Schema.String;
+      readonly status: Schema.Literals<readonly ["active", "expired", "revocation-pending"]>;
+    }>;
+    readonly remainingAttachments: Schema.Int;
+  }>;
+}
+type DetachResult = typeof DetachResultSchema.Type;
 /** A presentation projection of a DNS requirement. */
 declare const DnsRecord: Schema.Struct<{
   readonly id: Schema.String;
@@ -492,7 +688,7 @@ declare const DnsRecord: Schema.Struct<{
 type DnsRecord = typeof DnsRecord.Type;
 /** Projects DomainKit's operational record into its application transport representation. */
 declare const fromDnsRecord: (id: string, record: DnsRecord$1) => DnsRecord;
-declare const PlanOperation: Schema.TaggedUnion<{
+declare const PlanOperationSchema: Schema.TaggedUnion<{
   readonly Conflict: Schema.TaggedStruct<"Conflict", {
     readonly id: Schema.String;
     readonly reason: Schema.String;
@@ -525,8 +721,78 @@ declare const PlanOperation: Schema.TaggedUnion<{
     }>;
   }>;
 }>;
-type PlanOperation = typeof PlanOperation.Type;
-declare const ProvisioningPlan: Schema.TaggedStruct<"Plan", {
+/** Provisioning operation schema and constructors for trusted host responses. */
+declare const PlanOperation: {
+  Schema: Schema.TaggedUnion<{
+    readonly Conflict: Schema.TaggedStruct<"Conflict", {
+      readonly id: Schema.String;
+      readonly reason: Schema.String;
+      readonly record: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly priority: Schema.optionalKey<Schema.Int>;
+        readonly type: Schema.String;
+        readonly value: Schema.String;
+      }>;
+    }>;
+    readonly Create: Schema.TaggedStruct<"Create", {
+      readonly id: Schema.String;
+      readonly record: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly priority: Schema.optionalKey<Schema.Int>;
+        readonly type: Schema.String;
+        readonly value: Schema.String;
+      }>;
+    }>;
+    readonly Noop: Schema.TaggedStruct<"Noop", {
+      readonly id: Schema.String;
+      readonly record: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly priority: Schema.optionalKey<Schema.Int>;
+        readonly type: Schema.String;
+        readonly value: Schema.String;
+      }>;
+    }>;
+  }>;
+  Conflict: (input: Parameters<typeof PlanOperationSchema.cases.Conflict.make>[0]) => {
+    readonly _tag: "Conflict";
+    readonly id: string;
+    readonly reason: string;
+    readonly record: {
+      readonly id: string;
+      readonly name: string;
+      readonly priority?: number;
+      readonly type: string;
+      readonly value: string;
+    };
+  };
+  Create: (input: Parameters<typeof PlanOperationSchema.cases.Create.make>[0]) => {
+    readonly _tag: "Create";
+    readonly id: string;
+    readonly record: {
+      readonly id: string;
+      readonly name: string;
+      readonly priority?: number;
+      readonly type: string;
+      readonly value: string;
+    };
+  };
+  Noop: (input: Parameters<typeof PlanOperationSchema.cases.Noop.make>[0]) => {
+    readonly _tag: "Noop";
+    readonly id: string;
+    readonly record: {
+      readonly id: string;
+      readonly name: string;
+      readonly priority?: number;
+      readonly type: string;
+      readonly value: string;
+    };
+  };
+};
+type PlanOperation = typeof PlanOperationSchema.Type;
+declare const ProvisioningPlanSchema: Schema.TaggedStruct<"Plan", {
   readonly digest: Schema.String;
   readonly expiresAt: Schema.String;
   readonly operations: Schema.$Array<Schema.TaggedUnion<{
@@ -563,8 +829,49 @@ declare const ProvisioningPlan: Schema.TaggedStruct<"Plan", {
     }>;
   }>>;
 }>;
-type ProvisioningPlan = typeof ProvisioningPlan.Type;
-declare const OperationResult: Schema.TaggedUnion<{
+/** Constructs a provisioning plan response from trusted host data. */
+declare function ProvisioningPlan(input: Parameters<typeof ProvisioningPlanSchema.make>[0]): ProvisioningPlan;
+declare namespace ProvisioningPlan {
+  const Schema: Schema.TaggedStruct<"Plan", {
+    readonly digest: Schema.String;
+    readonly expiresAt: Schema.String;
+    readonly operations: Schema.$Array<Schema.TaggedUnion<{
+      readonly Conflict: Schema.TaggedStruct<"Conflict", {
+        readonly id: Schema.String;
+        readonly reason: Schema.String;
+        readonly record: Schema.Struct<{
+          readonly id: Schema.String;
+          readonly name: Schema.String;
+          readonly priority: Schema.optionalKey<Schema.Int>;
+          readonly type: Schema.String;
+          readonly value: Schema.String;
+        }>;
+      }>;
+      readonly Create: Schema.TaggedStruct<"Create", {
+        readonly id: Schema.String;
+        readonly record: Schema.Struct<{
+          readonly id: Schema.String;
+          readonly name: Schema.String;
+          readonly priority: Schema.optionalKey<Schema.Int>;
+          readonly type: Schema.String;
+          readonly value: Schema.String;
+        }>;
+      }>;
+      readonly Noop: Schema.TaggedStruct<"Noop", {
+        readonly id: Schema.String;
+        readonly record: Schema.Struct<{
+          readonly id: Schema.String;
+          readonly name: Schema.String;
+          readonly priority: Schema.optionalKey<Schema.Int>;
+          readonly type: Schema.String;
+          readonly value: Schema.String;
+        }>;
+      }>;
+    }>>;
+  }>;
+}
+type ProvisioningPlan = typeof ProvisioningPlanSchema.Type;
+declare const OperationResultSchema: Schema.TaggedUnion<{
   readonly Applied: Schema.TaggedStruct<"Applied", {
     readonly operationId: Schema.String;
   }>;
@@ -576,8 +883,36 @@ declare const OperationResult: Schema.TaggedUnion<{
     readonly operationId: Schema.String;
   }>;
 }>;
-type OperationResult = typeof OperationResult.Type;
-declare const ApplyResult: Schema.TaggedUnion<{
+/** Per-operation result schema and constructors for trusted host responses. */
+declare const OperationResult: {
+  Schema: Schema.TaggedUnion<{
+    readonly Applied: Schema.TaggedStruct<"Applied", {
+      readonly operationId: Schema.String;
+    }>;
+    readonly Failed: Schema.TaggedStruct<"Failed", {
+      readonly message: Schema.String;
+      readonly operationId: Schema.String;
+    }>;
+    readonly Unchanged: Schema.TaggedStruct<"Unchanged", {
+      readonly operationId: Schema.String;
+    }>;
+  }>;
+  Applied: (input: Parameters<typeof OperationResultSchema.cases.Applied.make>[0]) => {
+    readonly _tag: "Applied";
+    readonly operationId: string;
+  };
+  Failed: (input: Parameters<typeof OperationResultSchema.cases.Failed.make>[0]) => {
+    readonly _tag: "Failed";
+    readonly message: string;
+    readonly operationId: string;
+  };
+  Unchanged: (input: Parameters<typeof OperationResultSchema.cases.Unchanged.make>[0]) => {
+    readonly _tag: "Unchanged";
+    readonly operationId: string;
+  };
+};
+type OperationResult = typeof OperationResultSchema.Type;
+declare const ApplyResultSchema: Schema.TaggedUnion<{
   readonly Applied: Schema.TaggedStruct<"Applied", {
     operationId: Schema.String;
     receiptId: Schema.String;
@@ -614,8 +949,84 @@ declare const ApplyResult: Schema.TaggedUnion<{
     readonly message: Schema.String;
   }>;
 }>;
-type ApplyResult = typeof ApplyResult.Type;
-declare const ObservationEvidence: Schema.TaggedUnion<{
+/** Apply result schema and constructors for trusted host responses. */
+declare const ApplyResult: {
+  Schema: Schema.TaggedUnion<{
+    readonly Applied: Schema.TaggedStruct<"Applied", {
+      operationId: Schema.String;
+      receiptId: Schema.String;
+      results: Schema.$Array<Schema.TaggedUnion<{
+        readonly Applied: Schema.TaggedStruct<"Applied", {
+          readonly operationId: Schema.String;
+        }>;
+        readonly Failed: Schema.TaggedStruct<"Failed", {
+          readonly message: Schema.String;
+          readonly operationId: Schema.String;
+        }>;
+        readonly Unchanged: Schema.TaggedStruct<"Unchanged", {
+          readonly operationId: Schema.String;
+        }>;
+      }>>;
+    }>;
+    readonly Partial: Schema.TaggedStruct<"Partial", {
+      operationId: Schema.String;
+      receiptId: Schema.String;
+      results: Schema.$Array<Schema.TaggedUnion<{
+        readonly Applied: Schema.TaggedStruct<"Applied", {
+          readonly operationId: Schema.String;
+        }>;
+        readonly Failed: Schema.TaggedStruct<"Failed", {
+          readonly message: Schema.String;
+          readonly operationId: Schema.String;
+        }>;
+        readonly Unchanged: Schema.TaggedStruct<"Unchanged", {
+          readonly operationId: Schema.String;
+        }>;
+      }>>;
+    }>;
+    readonly Stale: Schema.TaggedStruct<"Stale", {
+      readonly message: Schema.String;
+    }>;
+  }>;
+  Applied: (input: Parameters<typeof ApplyResultSchema.cases.Applied.make>[0]) => {
+    readonly _tag: "Applied";
+    readonly operationId: string;
+    readonly receiptId: string;
+    readonly results: readonly ({
+      readonly _tag: "Applied";
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Failed";
+      readonly message: string;
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Unchanged";
+      readonly operationId: string;
+    })[];
+  };
+  Partial: (input: Parameters<typeof ApplyResultSchema.cases.Partial.make>[0]) => {
+    readonly _tag: "Partial";
+    readonly operationId: string;
+    readonly receiptId: string;
+    readonly results: readonly ({
+      readonly _tag: "Applied";
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Failed";
+      readonly message: string;
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Unchanged";
+      readonly operationId: string;
+    })[];
+  };
+  Stale: (input: Parameters<typeof ApplyResultSchema.cases.Stale.make>[0]) => {
+    readonly _tag: "Stale";
+    readonly message: string;
+  };
+};
+type ApplyResult = typeof ApplyResultSchema.Type;
+declare const ObservationEvidenceSchema: Schema.TaggedUnion<{
   readonly Found: Schema.TaggedStruct<"Found", {
     readonly recordId: Schema.String;
   }>;
@@ -631,8 +1042,45 @@ declare const ObservationEvidence: Schema.TaggedUnion<{
     readonly recordId: Schema.String;
   }>;
 }>;
-type ObservationEvidence = typeof ObservationEvidence.Type;
-declare const Observation: Schema.TaggedStruct<"Observation", {
+/** DNS observation evidence schema and constructors for trusted host responses. */
+declare const ObservationEvidence: {
+  Schema: Schema.TaggedUnion<{
+    readonly Found: Schema.TaggedStruct<"Found", {
+      readonly recordId: Schema.String;
+    }>;
+    readonly Mismatch: Schema.TaggedStruct<"Mismatch", {
+      readonly message: Schema.String;
+      readonly recordId: Schema.String;
+    }>;
+    readonly Missing: Schema.TaggedStruct<"Missing", {
+      readonly recordId: Schema.String;
+    }>;
+    readonly Unavailable: Schema.TaggedStruct<"Unavailable", {
+      readonly message: Schema.String;
+      readonly recordId: Schema.String;
+    }>;
+  }>;
+  Found: (input: Parameters<typeof ObservationEvidenceSchema.cases.Found.make>[0]) => {
+    readonly _tag: "Found";
+    readonly recordId: string;
+  };
+  Mismatch: (input: Parameters<typeof ObservationEvidenceSchema.cases.Mismatch.make>[0]) => {
+    readonly _tag: "Mismatch";
+    readonly message: string;
+    readonly recordId: string;
+  };
+  Missing: (input: Parameters<typeof ObservationEvidenceSchema.cases.Missing.make>[0]) => {
+    readonly _tag: "Missing";
+    readonly recordId: string;
+  };
+  Unavailable: (input: Parameters<typeof ObservationEvidenceSchema.cases.Unavailable.make>[0]) => {
+    readonly _tag: "Unavailable";
+    readonly message: string;
+    readonly recordId: string;
+  };
+};
+type ObservationEvidence = typeof ObservationEvidenceSchema.Type;
+declare const ObservationSchema: Schema.TaggedStruct<"Observation", {
   readonly provider: Schema.$Array<Schema.TaggedUnion<{
     readonly Found: Schema.TaggedStruct<"Found", {
       readonly recordId: Schema.String;
@@ -666,8 +1114,46 @@ declare const Observation: Schema.TaggedStruct<"Observation", {
     }>;
   }>>;
 }>;
-type Observation = typeof Observation.Type;
-declare const CleanupOperation: Schema.TaggedUnion<{
+/** Constructs a DNS observation response from trusted host data. */
+declare function Observation(input: Parameters<typeof ObservationSchema.make>[0]): Observation;
+declare namespace Observation {
+  const Schema: Schema.TaggedStruct<"Observation", {
+    readonly provider: Schema.$Array<Schema.TaggedUnion<{
+      readonly Found: Schema.TaggedStruct<"Found", {
+        readonly recordId: Schema.String;
+      }>;
+      readonly Mismatch: Schema.TaggedStruct<"Mismatch", {
+        readonly message: Schema.String;
+        readonly recordId: Schema.String;
+      }>;
+      readonly Missing: Schema.TaggedStruct<"Missing", {
+        readonly recordId: Schema.String;
+      }>;
+      readonly Unavailable: Schema.TaggedStruct<"Unavailable", {
+        readonly message: Schema.String;
+        readonly recordId: Schema.String;
+      }>;
+    }>>;
+    readonly publicDns: Schema.$Array<Schema.TaggedUnion<{
+      readonly Found: Schema.TaggedStruct<"Found", {
+        readonly recordId: Schema.String;
+      }>;
+      readonly Mismatch: Schema.TaggedStruct<"Mismatch", {
+        readonly message: Schema.String;
+        readonly recordId: Schema.String;
+      }>;
+      readonly Missing: Schema.TaggedStruct<"Missing", {
+        readonly recordId: Schema.String;
+      }>;
+      readonly Unavailable: Schema.TaggedStruct<"Unavailable", {
+        readonly message: Schema.String;
+        readonly recordId: Schema.String;
+      }>;
+    }>>;
+  }>;
+}
+type Observation = typeof ObservationSchema.Type;
+declare const CleanupOperationSchema: Schema.TaggedUnion<{
   readonly AlreadyAbsent: Schema.TaggedStruct<"AlreadyAbsent", {
     readonly id: Schema.String;
     readonly record: Schema.Struct<{
@@ -700,8 +1186,78 @@ declare const CleanupOperation: Schema.TaggedUnion<{
     }>;
   }>;
 }>;
-type CleanupOperation = typeof CleanupOperation.Type;
-declare const CleanupPlan: Schema.TaggedStruct<"CleanupPlan", {
+/** Cleanup operation schema and constructors for trusted host responses. */
+declare const CleanupOperation: {
+  Schema: Schema.TaggedUnion<{
+    readonly AlreadyAbsent: Schema.TaggedStruct<"AlreadyAbsent", {
+      readonly id: Schema.String;
+      readonly record: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly priority: Schema.optionalKey<Schema.Int>;
+        readonly type: Schema.String;
+        readonly value: Schema.String;
+      }>;
+    }>;
+    readonly Blocked: Schema.TaggedStruct<"Blocked", {
+      readonly id: Schema.String;
+      readonly reason: Schema.String;
+      readonly record: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly priority: Schema.optionalKey<Schema.Int>;
+        readonly type: Schema.String;
+        readonly value: Schema.String;
+      }>;
+    }>;
+    readonly Delete: Schema.TaggedStruct<"Delete", {
+      readonly id: Schema.String;
+      readonly record: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly priority: Schema.optionalKey<Schema.Int>;
+        readonly type: Schema.String;
+        readonly value: Schema.String;
+      }>;
+    }>;
+  }>;
+  AlreadyAbsent: (input: Parameters<typeof CleanupOperationSchema.cases.AlreadyAbsent.make>[0]) => {
+    readonly _tag: "AlreadyAbsent";
+    readonly id: string;
+    readonly record: {
+      readonly id: string;
+      readonly name: string;
+      readonly priority?: number;
+      readonly type: string;
+      readonly value: string;
+    };
+  };
+  Blocked: (input: Parameters<typeof CleanupOperationSchema.cases.Blocked.make>[0]) => {
+    readonly _tag: "Blocked";
+    readonly id: string;
+    readonly reason: string;
+    readonly record: {
+      readonly id: string;
+      readonly name: string;
+      readonly priority?: number;
+      readonly type: string;
+      readonly value: string;
+    };
+  };
+  Delete: (input: Parameters<typeof CleanupOperationSchema.cases.Delete.make>[0]) => {
+    readonly _tag: "Delete";
+    readonly id: string;
+    readonly record: {
+      readonly id: string;
+      readonly name: string;
+      readonly priority?: number;
+      readonly type: string;
+      readonly value: string;
+    };
+  };
+};
+type CleanupOperation = typeof CleanupOperationSchema.Type;
+declare const CleanupPlanSchema: Schema.TaggedStruct<"CleanupPlan", {
   readonly digest: Schema.String;
   readonly expiresAt: Schema.String;
   readonly operations: Schema.$Array<Schema.TaggedUnion<{
@@ -738,8 +1294,49 @@ declare const CleanupPlan: Schema.TaggedStruct<"CleanupPlan", {
     }>;
   }>>;
 }>;
-type CleanupPlan = typeof CleanupPlan.Type;
-declare const CleanupResult: Schema.TaggedUnion<{
+/** Constructs a cleanup plan response from trusted host data. */
+declare function CleanupPlan(input: Parameters<typeof CleanupPlanSchema.make>[0]): CleanupPlan;
+declare namespace CleanupPlan {
+  const Schema: Schema.TaggedStruct<"CleanupPlan", {
+    readonly digest: Schema.String;
+    readonly expiresAt: Schema.String;
+    readonly operations: Schema.$Array<Schema.TaggedUnion<{
+      readonly AlreadyAbsent: Schema.TaggedStruct<"AlreadyAbsent", {
+        readonly id: Schema.String;
+        readonly record: Schema.Struct<{
+          readonly id: Schema.String;
+          readonly name: Schema.String;
+          readonly priority: Schema.optionalKey<Schema.Int>;
+          readonly type: Schema.String;
+          readonly value: Schema.String;
+        }>;
+      }>;
+      readonly Blocked: Schema.TaggedStruct<"Blocked", {
+        readonly id: Schema.String;
+        readonly reason: Schema.String;
+        readonly record: Schema.Struct<{
+          readonly id: Schema.String;
+          readonly name: Schema.String;
+          readonly priority: Schema.optionalKey<Schema.Int>;
+          readonly type: Schema.String;
+          readonly value: Schema.String;
+        }>;
+      }>;
+      readonly Delete: Schema.TaggedStruct<"Delete", {
+        readonly id: Schema.String;
+        readonly record: Schema.Struct<{
+          readonly id: Schema.String;
+          readonly name: Schema.String;
+          readonly priority: Schema.optionalKey<Schema.Int>;
+          readonly type: Schema.String;
+          readonly value: Schema.String;
+        }>;
+      }>;
+    }>>;
+  }>;
+}
+type CleanupPlan = typeof CleanupPlanSchema.Type;
+declare const CleanupResultSchema: Schema.TaggedUnion<{
   readonly Cleaned: Schema.TaggedStruct<"Cleaned", {
     operationId: Schema.String;
     results: Schema.$Array<Schema.TaggedUnion<{
@@ -774,7 +1371,79 @@ declare const CleanupResult: Schema.TaggedUnion<{
     readonly message: Schema.String;
   }>;
 }>;
-type CleanupResult = typeof CleanupResult.Type;
+/** Cleanup result schema and constructors for trusted host responses. */
+declare const CleanupResult: {
+  Schema: Schema.TaggedUnion<{
+    readonly Cleaned: Schema.TaggedStruct<"Cleaned", {
+      operationId: Schema.String;
+      results: Schema.$Array<Schema.TaggedUnion<{
+        readonly Applied: Schema.TaggedStruct<"Applied", {
+          readonly operationId: Schema.String;
+        }>;
+        readonly Failed: Schema.TaggedStruct<"Failed", {
+          readonly message: Schema.String;
+          readonly operationId: Schema.String;
+        }>;
+        readonly Unchanged: Schema.TaggedStruct<"Unchanged", {
+          readonly operationId: Schema.String;
+        }>;
+      }>>;
+    }>;
+    readonly Partial: Schema.TaggedStruct<"Partial", {
+      operationId: Schema.String;
+      results: Schema.$Array<Schema.TaggedUnion<{
+        readonly Applied: Schema.TaggedStruct<"Applied", {
+          readonly operationId: Schema.String;
+        }>;
+        readonly Failed: Schema.TaggedStruct<"Failed", {
+          readonly message: Schema.String;
+          readonly operationId: Schema.String;
+        }>;
+        readonly Unchanged: Schema.TaggedStruct<"Unchanged", {
+          readonly operationId: Schema.String;
+        }>;
+      }>>;
+    }>;
+    readonly Stale: Schema.TaggedStruct<"Stale", {
+      readonly message: Schema.String;
+    }>;
+  }>;
+  Cleaned: (input: Parameters<typeof CleanupResultSchema.cases.Cleaned.make>[0]) => {
+    readonly _tag: "Cleaned";
+    readonly operationId: string;
+    readonly results: readonly ({
+      readonly _tag: "Applied";
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Failed";
+      readonly message: string;
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Unchanged";
+      readonly operationId: string;
+    })[];
+  };
+  Partial: (input: Parameters<typeof CleanupResultSchema.cases.Partial.make>[0]) => {
+    readonly _tag: "Partial";
+    readonly operationId: string;
+    readonly results: readonly ({
+      readonly _tag: "Applied";
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Failed";
+      readonly message: string;
+      readonly operationId: string;
+    } | {
+      readonly _tag: "Unchanged";
+      readonly operationId: string;
+    })[];
+  };
+  Stale: (input: Parameters<typeof CleanupResultSchema.cases.Stale.make>[0]) => {
+    readonly _tag: "Stale";
+    readonly message: string;
+  };
+};
+type CleanupResult = typeof CleanupResultSchema.Type;
 interface ConnectInput {
   readonly domain: string;
   readonly method: Method;