domainkit 0.7.0 → 0.9.0

package/dist/internal/vercel/protocol.mjs

@@ -0,0 +1,80 @@
+import { Schema } from "effect";
+//#region src/internal/vercel/protocol.ts
+const Pagination = Schema.Struct({
+	count: Schema.Number,
+	next: Schema.NullOr(Schema.Number),
+	prev: Schema.NullOr(Schema.Number)
+});
+const ErrorDetail = Schema.Struct({
+	code: Schema.String,
+	message: Schema.String,
+	limit: Schema.optionalKey(Schema.Struct({
+		remaining: Schema.Number,
+		reset: Schema.optionalKey(Schema.Number),
+		resetMs: Schema.optionalKey(Schema.Number),
+		total: Schema.Number
+	}))
+});
+const ErrorEnvelope = Schema.Struct({ error: ErrorDetail });
+const User = Schema.Struct({
+	id: Schema.String,
+	name: Schema.NullOr(Schema.String),
+	username: Schema.String
+});
+const UserEnvelope = Schema.Struct({ user: User });
+const Team = Schema.Struct({
+	id: Schema.String,
+	name: Schema.NullOr(Schema.String),
+	slug: Schema.String
+});
+const TeamListEnvelope = Schema.Struct({
+	pagination: Pagination,
+	teams: Schema.Array(Team)
+});
+const Domain = Schema.Struct({
+	id: Schema.String,
+	intendedNameservers: Schema.Array(Schema.String),
+	name: Schema.String,
+	nameservers: Schema.Array(Schema.String),
+	serviceType: Schema.Literals([
+		"zeit.world",
+		"external",
+		"na"
+	]),
+	teamId: Schema.NullOr(Schema.String),
+	userId: Schema.String,
+	verified: Schema.Boolean,
+	zone: Schema.optionalKey(Schema.Boolean)
+});
+const DomainListEnvelope = Schema.Struct({
+	domains: Schema.Array(Domain),
+	pagination: Pagination
+});
+const Record = Schema.Struct({
+	id: Schema.String,
+	mxPriority: Schema.optionalKey(Schema.Number),
+	name: Schema.String,
+	priority: Schema.optionalKey(Schema.Number),
+	ttl: Schema.optionalKey(Schema.Number),
+	type: Schema.String,
+	value: Schema.String
+});
+const RecordListEnvelope = Schema.Struct({
+	pagination: Schema.optionalKey(Pagination),
+	records: Schema.Array(Record)
+});
+const CreateRecordEnvelope = Schema.Struct({
+	uid: Schema.String,
+	updated: Schema.optionalKey(Schema.Number)
+});
+const IntegrationToken = Schema.Struct({
+	access_token: Schema.String,
+	installation_id: Schema.optionalKey(Schema.String),
+	team_id: Schema.NullOr(Schema.String),
+	token_type: Schema.optionalKey(Schema.String),
+	user_id: Schema.String
+});
+//#endregion
+export { CreateRecordEnvelope, Domain, DomainListEnvelope, ErrorDetail, ErrorEnvelope, IntegrationToken, Pagination, Record, RecordListEnvelope, Team, TeamListEnvelope, User, UserEnvelope };
+
+//# sourceMappingURL=protocol.mjs.map

package/dist/internal/vercel/protocol.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.mjs","names":["S"],"sources":["../../../src/internal/vercel/protocol.ts"],"sourcesContent":["import { Schema as S } from \"effect\";\n\nexport const Pagination = S.Struct({\n  count: S.Number,\n  next: S.NullOr(S.Number),\n  prev: S.NullOr(S.Number),\n});\n\nexport const ErrorDetail = S.Struct({\n  code: S.String,\n  message: S.String,\n  limit: S.optionalKey(\n    S.Struct({\n      remaining: S.Number,\n      reset: S.optionalKey(S.Number),\n      resetMs: S.optionalKey(S.Number),\n      total: S.Number,\n    }),\n  ),\n});\n\nexport const ErrorEnvelope = S.Struct({ error: ErrorDetail });\n\nexport const User = S.Struct({ id: S.String, name: S.NullOr(S.String), username: S.String });\nexport const UserEnvelope = S.Struct({ user: User });\n\nexport const Team = S.Struct({ id: S.String, name: S.NullOr(S.String), slug: S.String });\nexport const TeamListEnvelope = S.Struct({ pagination: Pagination, teams: S.Array(Team) });\n\nexport const Domain = S.Struct({\n  id: S.String,\n  intendedNameservers: S.Array(S.String),\n  name: S.String,\n  nameservers: S.Array(S.String),\n  serviceType: S.Literals([\"zeit.world\", \"external\", \"na\"]),\n  teamId: S.NullOr(S.String),\n  userId: S.String,\n  verified: S.Boolean,\n  zone: S.optionalKey(S.Boolean),\n});\nexport type Domain = typeof Domain.Type;\n\nexport const DomainListEnvelope = S.Struct({ domains: S.Array(Domain), pagination: Pagination });\n\nexport const Record = S.Struct({\n  id: S.String,\n  mxPriority: S.optionalKey(S.Number),\n  name: S.String,\n  priority: S.optionalKey(S.Number),\n  ttl: S.optionalKey(S.Number),\n  type: S.String,\n  value: S.String,\n});\nexport type Record = typeof Record.Type;\n\nexport const RecordListEnvelope = S.Struct({\n  pagination: S.optionalKey(Pagination),\n  records: S.Array(Record),\n});\n\nexport const CreateRecordEnvelope = S.Struct({ uid: S.String, updated: S.optionalKey(S.Number) });\n\nexport const IntegrationToken = S.Struct({\n  access_token: S.String,\n  installation_id: S.optionalKey(S.String),\n  team_id: S.NullOr(S.String),\n  token_type: S.optionalKey(S.String),\n  user_id: S.String,\n});\n"],"mappings":";;AAEA,MAAa,aAAaA,OAAE,OAAO;CACjC,OAAOA,OAAE;CACT,MAAMA,OAAE,OAAOA,OAAE,MAAM;CACvB,MAAMA,OAAE,OAAOA,OAAE,MAAM;AACzB,CAAC;AAED,MAAa,cAAcA,OAAE,OAAO;CAClC,MAAMA,OAAE;CACR,SAASA,OAAE;CACX,OAAOA,OAAE,YACPA,OAAE,OAAO;EACP,WAAWA,OAAE;EACb,OAAOA,OAAE,YAAYA,OAAE,MAAM;EAC7B,SAASA,OAAE,YAAYA,OAAE,MAAM;EAC/B,OAAOA,OAAE;CACX,CAAC,CACH;AACF,CAAC;AAED,MAAa,gBAAgBA,OAAE,OAAO,EAAE,OAAO,YAAY,CAAC;AAE5D,MAAa,OAAOA,OAAE,OAAO;CAAE,IAAIA,OAAE;CAAQ,MAAMA,OAAE,OAAOA,OAAE,MAAM;CAAG,UAAUA,OAAE;AAAO,CAAC;AAC3F,MAAa,eAAeA,OAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnD,MAAa,OAAOA,OAAE,OAAO;CAAE,IAAIA,OAAE;CAAQ,MAAMA,OAAE,OAAOA,OAAE,MAAM;CAAG,MAAMA,OAAE;AAAO,CAAC;AACvF,MAAa,mBAAmBA,OAAE,OAAO;CAAE,YAAY;CAAY,OAAOA,OAAE,MAAM,IAAI;AAAE,CAAC;AAEzF,MAAa,SAASA,OAAE,OAAO;CAC7B,IAAIA,OAAE;CACN,qBAAqBA,OAAE,MAAMA,OAAE,MAAM;CACrC,MAAMA,OAAE;CACR,aAAaA,OAAE,MAAMA,OAAE,MAAM;CAC7B,aAAaA,OAAE,SAAS;EAAC;EAAc;EAAY;CAAI,CAAC;CACxD,QAAQA,OAAE,OAAOA,OAAE,MAAM;CACzB,QAAQA,OAAE;CACV,UAAUA,OAAE;CACZ,MAAMA,OAAE,YAAYA,OAAE,OAAO;AAC/B,CAAC;AAGD,MAAa,qBAAqBA,OAAE,OAAO;CAAE,SAASA,OAAE,MAAM,MAAM;CAAG,YAAY;AAAW,CAAC;AAE/F,MAAa,SAASA,OAAE,OAAO;CAC7B,IAAIA,OAAE;CACN,YAAYA,OAAE,YAAYA,OAAE,MAAM;CAClC,MAAMA,OAAE;CACR,UAAUA,OAAE,YAAYA,OAAE,MAAM;CAChC,KAAKA,OAAE,YAAYA,OAAE,MAAM;CAC3B,MAAMA,OAAE;CACR,OAAOA,OAAE;AACX,CAAC;AAGD,MAAa,qBAAqBA,OAAE,OAAO;CACzC,YAAYA,OAAE,YAAY,UAAU;CACpC,SAASA,OAAE,MAAM,MAAM;AACzB,CAAC;AAED,MAAa,uBAAuBA,OAAE,OAAO;CAAE,KAAKA,OAAE;CAAQ,SAASA,OAAE,YAAYA,OAAE,MAAM;AAAE,CAAC;AAEhG,MAAa,mBAAmBA,OAAE,OAAO;CACvC,cAAcA,OAAE;CAChB,iBAAiBA,OAAE,YAAYA,OAAE,MAAM;CACvC,SAASA,OAAE,OAAOA,OAAE,MAAM;CAC1B,YAAYA,OAAE,YAAYA,OAAE,MAAM;CAClC,SAASA,OAAE;AACb,CAAC"}

package/dist/internal/vercel/records.mjs

@@ -0,0 +1,151 @@
+import { Opaque, a, aaaa, caa, cname, mx, ns, srv, txt } from "../../DnsRecord.mjs";
+import { rejected } from "../http.mjs";
+import { Effect } from "effect";
+//#region src/internal/vercel/records.ts
+const decode = (zone, record) => Effect.sync(() => ({
+	record: decodeRecord(zone, record),
+	providerRecordId: record.id
+}));
+const decodeRecord = (zone, record) => {
+	const name = absoluteName(zone, record.name);
+	const opaque = new Opaque({
+		name,
+		type: record.type,
+		raw: record
+	});
+	const ttl = record.ttl === void 0 ? {} : { ttl: record.ttl };
+	try {
+		switch (record.type) {
+			case "A": return a({
+				name,
+				address: record.value,
+				...ttl
+			});
+			case "AAAA": return aaaa({
+				name,
+				address: record.value,
+				...ttl
+			});
+			case "CNAME": return cname({
+				name,
+				target: record.value,
+				...ttl
+			});
+			case "NS": return ns({
+				name,
+				nameserver: record.value,
+				...ttl
+			});
+			case "TXT": return txt({
+				name,
+				value: record.value,
+				...ttl
+			});
+			case "MX": return mx({
+				name,
+				exchange: record.value,
+				priority: required(record.mxPriority ?? record.priority),
+				...ttl
+			});
+			case "CAA": {
+				const match = record.value.match(/^(\d{1,3})\s+(\S+)\s+(?:"((?:\\.|[^"])*)"|(\S.*))$/);
+				if (match === null) return opaque;
+				return caa({
+					name,
+					flags: Number(match[1]),
+					tag: required(match[2]),
+					value: unescapeQuoted(match[3] ?? match[4] ?? ""),
+					...ttl
+				});
+			}
+			case "SRV": {
+				const parts = record.value.trim().split(/\s+/);
+				const [priority, weight, port, target] = parts.length === 4 ? parts : [
+					String(record.priority ?? ""),
+					parts[0],
+					parts[1],
+					parts[2]
+				];
+				return srv({
+					name,
+					target: required(target),
+					port: Number(port),
+					priority: Number(priority),
+					weight: Number(weight),
+					...ttl
+				});
+			}
+			default: return opaque;
+		}
+	} catch {
+		return opaque;
+	}
+};
+const encode = (zone, record) => Effect.sync(() => {
+	const common = {
+		name: relativeName(zone, record.name),
+		...record.ttl === null ? {} : { ttl: record.ttl },
+		type: record._tag
+	};
+	switch (record._tag) {
+		case "A":
+		case "AAAA": return {
+			...common,
+			value: record.address
+		};
+		case "CNAME": return {
+			...common,
+			value: record.target
+		};
+		case "NS": return {
+			...common,
+			value: record.nameserver
+		};
+		case "TXT": return {
+			...common,
+			value: record.value
+		};
+		case "MX": return {
+			...common,
+			mxPriority: record.priority,
+			value: record.exchange
+		};
+		case "CAA": return {
+			...common,
+			value: `${record.flags} ${record.tag} "${escapeQuoted(record.value)}"`
+		};
+		case "SRV": return {
+			...common,
+			srv: {
+				port: record.port,
+				priority: record.priority,
+				target: record.target,
+				weight: record.weight
+			}
+		};
+	}
+});
+const outsideZone = (zone, name) => rejected("vercel", `DNS record ${name} is outside Vercel zone ${zone}`, "outside-zone");
+function absoluteName(zone, name) {
+	return name === "" || name === "@" ? zone : name === zone || name.endsWith(`.${zone}`) ? name : `${name}.${zone}`;
+}
+function relativeName(zone, name) {
+	if (name === zone) return "";
+	const suffix = `.${zone}`;
+	if (!name.endsWith(suffix)) throw new Error(`DNS record ${name} is outside Vercel zone ${zone}`);
+	return name.slice(0, -suffix.length);
+}
+function required(value) {
+	if (value === void 0) throw new Error("Vercel record field is missing");
+	return value;
+}
+function escapeQuoted(value) {
+	return value.replaceAll("\\", "\\\\").replaceAll("\"", "\\\"");
+}
+function unescapeQuoted(value) {
+	return value.replace(/\\([\\"])/g, "$1");
+}
+//#endregion
+export { decode, encode, outsideZone };
+
+//# sourceMappingURL=records.mjs.map

package/dist/internal/vercel/records.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.mjs","names":["DnsRecord.Opaque","DnsRecord.a","DnsRecord.aaaa","DnsRecord.cname","DnsRecord.ns","DnsRecord.txt","DnsRecord.mx","DnsRecord.caa","DnsRecord.srv"],"sources":["../../../src/internal/vercel/records.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport * as DnsRecord from \"../../DnsRecord.ts\";\nimport type * as Provider from \"../../Provider.ts\";\nimport { rejected } from \"../http.ts\";\nimport type * as Protocol from \"./protocol.ts\";\n\nexport const decode = (\n  zone: string,\n  record: Protocol.Record,\n): Effect.Effect<Provider.ObservedRecord> =>\n  Effect.sync(() => ({ record: decodeRecord(zone, record), providerRecordId: record.id }));\n\nconst decodeRecord = (zone: string, record: Protocol.Record): DnsRecord.Observed => {\n  const name = absoluteName(zone, record.name);\n  const opaque = new DnsRecord.Opaque({ name, type: record.type, raw: record });\n  const ttl = record.ttl === undefined ? {} : { ttl: record.ttl };\n  try {\n    switch (record.type) {\n      case \"A\":\n        return DnsRecord.a({ name, address: record.value, ...ttl });\n      case \"AAAA\":\n        return DnsRecord.aaaa({ name, address: record.value, ...ttl });\n      case \"CNAME\":\n        return DnsRecord.cname({ name, target: record.value, ...ttl });\n      case \"NS\":\n        return DnsRecord.ns({ name, nameserver: record.value, ...ttl });\n      case \"TXT\":\n        return DnsRecord.txt({ name, value: record.value, ...ttl });\n      case \"MX\":\n        return DnsRecord.mx({\n          name,\n          exchange: record.value,\n          priority: required(record.mxPriority ?? record.priority),\n          ...ttl,\n        });\n      case \"CAA\": {\n        const match = record.value.match(/^(\\d{1,3})\\s+(\\S+)\\s+(?:\"((?:\\\\.|[^\"])*)\"|(\\S.*))$/);\n        if (match === null) return opaque;\n        return DnsRecord.caa({\n          name,\n          flags: Number(match[1]),\n          tag: required(match[2]),\n          value: unescapeQuoted(match[3] ?? match[4] ?? \"\"),\n          ...ttl,\n        });\n      }\n      case \"SRV\": {\n        const parts = record.value.trim().split(/\\s+/);\n        const [priority, weight, port, target] =\n          parts.length === 4\n            ? parts\n            : [String(record.priority ?? \"\"), parts[0], parts[1], parts[2]];\n        return DnsRecord.srv({\n          name,\n          target: required(target),\n          port: Number(port),\n          priority: Number(priority),\n          weight: Number(weight),\n          ...ttl,\n        });\n      }\n      default:\n        return opaque;\n    }\n  } catch {\n    return opaque;\n  }\n};\n\nexport const encode = (\n  zone: string,\n  record: DnsRecord.Model,\n): Effect.Effect<Record<string, unknown>, never> =>\n  Effect.sync(() => {\n    const common = {\n      name: relativeName(zone, record.name),\n      ...(record.ttl === null ? {} : { ttl: record.ttl }),\n      type: record._tag,\n    };\n    switch (record._tag) {\n      case \"A\":\n      case \"AAAA\":\n        return { ...common, value: record.address };\n      case \"CNAME\":\n        return { ...common, value: record.target };\n      case \"NS\":\n        return { ...common, value: record.nameserver };\n      case \"TXT\":\n        return { ...common, value: record.value };\n      case \"MX\":\n        return { ...common, mxPriority: record.priority, value: record.exchange };\n      case \"CAA\":\n        return {\n          ...common,\n          value: `${record.flags} ${record.tag} \"${escapeQuoted(record.value)}\"`,\n        };\n      case \"SRV\":\n        return {\n          ...common,\n          srv: {\n            port: record.port,\n            priority: record.priority,\n            target: record.target,\n            weight: record.weight,\n          },\n        };\n    }\n  });\n\nexport const outsideZone = (zone: string, name: string) =>\n  rejected(\"vercel\", `DNS record ${name} is outside Vercel zone ${zone}`, \"outside-zone\");\n\nfunction absoluteName(zone: string, name: string): string {\n  return name === \"\" || name === \"@\"\n    ? zone\n    : name === zone || name.endsWith(`.${zone}`)\n      ? name\n      : `${name}.${zone}`;\n}\n\nfunction relativeName(zone: string, name: string): string {\n  if (name === zone) return \"\";\n  const suffix = `.${zone}`;\n  if (!name.endsWith(suffix)) throw new Error(`DNS record ${name} is outside Vercel zone ${zone}`);\n  return name.slice(0, -suffix.length);\n}\n\nfunction required<A>(value: A | undefined): A {\n  if (value === undefined) throw new Error(\"Vercel record field is missing\");\n  return value;\n}\n\nfunction escapeQuoted(value: string): string {\n  return value.replaceAll(\"\\\\\", \"\\\\\\\\\").replaceAll('\"', '\\\\\"');\n}\n\nfunction unescapeQuoted(value: string): string {\n  return value.replace(/\\\\([\\\\\"])/g, \"$1\");\n}\n"],"mappings":";;;;AAOA,MAAa,UACX,MACA,WAEA,OAAO,YAAY;CAAE,QAAQ,aAAa,MAAM,MAAM;CAAG,kBAAkB,OAAO;AAAG,EAAE;AAEzF,MAAM,gBAAgB,MAAc,WAAgD;CAClF,MAAM,OAAO,aAAa,MAAM,OAAO,IAAI;CAC3C,MAAM,SAAS,IAAIA,OAAiB;EAAE;EAAM,MAAM,OAAO;EAAM,KAAK;CAAO,CAAC;CAC5E,MAAM,MAAM,OAAO,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI;CAC9D,IAAI;EACF,QAAQ,OAAO,MAAf;GACE,KAAK,KACH,OAAOC,EAAY;IAAE;IAAM,SAAS,OAAO;IAAO,GAAG;GAAI,CAAC;GAC5D,KAAK,QACH,OAAOC,KAAe;IAAE;IAAM,SAAS,OAAO;IAAO,GAAG;GAAI,CAAC;GAC/D,KAAK,SACH,OAAOC,MAAgB;IAAE;IAAM,QAAQ,OAAO;IAAO,GAAG;GAAI,CAAC;GAC/D,KAAK,MACH,OAAOC,GAAa;IAAE;IAAM,YAAY,OAAO;IAAO,GAAG;GAAI,CAAC;GAChE,KAAK,OACH,OAAOC,IAAc;IAAE;IAAM,OAAO,OAAO;IAAO,GAAG;GAAI,CAAC;GAC5D,KAAK,MACH,OAAOC,GAAa;IAClB;IACA,UAAU,OAAO;IACjB,UAAU,SAAS,OAAO,cAAc,OAAO,QAAQ;IACvD,GAAG;GACL,CAAC;GACH,KAAK,OAAO;IACV,MAAM,QAAQ,OAAO,MAAM,MAAM,oDAAoD;IACrF,IAAI,UAAU,MAAM,OAAO;IAC3B,OAAOC,IAAc;KACnB;KACA,OAAO,OAAO,MAAM,EAAE;KACtB,KAAK,SAAS,MAAM,EAAE;KACtB,OAAO,eAAe,MAAM,MAAM,MAAM,MAAM,EAAE;KAChD,GAAG;IACL,CAAC;GACH;GACA,KAAK,OAAO;IACV,MAAM,QAAQ,OAAO,MAAM,KAAK,CAAC,CAAC,MAAM,KAAK;IAC7C,MAAM,CAAC,UAAU,QAAQ,MAAM,UAC7B,MAAM,WAAW,IACb,QACA;KAAC,OAAO,OAAO,YAAY,EAAE;KAAG,MAAM;KAAI,MAAM;KAAI,MAAM;IAAE;IAClE,OAAOC,IAAc;KACnB;KACA,QAAQ,SAAS,MAAM;KACvB,MAAM,OAAO,IAAI;KACjB,UAAU,OAAO,QAAQ;KACzB,QAAQ,OAAO,MAAM;KACrB,GAAG;IACL,CAAC;GACH;GACA,SACE,OAAO;EACX;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAa,UACX,MACA,WAEA,OAAO,WAAW;CAChB,MAAM,SAAS;EACb,MAAM,aAAa,MAAM,OAAO,IAAI;EACpC,GAAI,OAAO,QAAQ,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI;EACjD,MAAM,OAAO;CACf;CACA,QAAQ,OAAO,MAAf;EACE,KAAK;EACL,KAAK,QACH,OAAO;GAAE,GAAG;GAAQ,OAAO,OAAO;EAAQ;EAC5C,KAAK,SACH,OAAO;GAAE,GAAG;GAAQ,OAAO,OAAO;EAAO;EAC3C,KAAK,MACH,OAAO;GAAE,GAAG;GAAQ,OAAO,OAAO;EAAW;EAC/C,KAAK,OACH,OAAO;GAAE,GAAG;GAAQ,OAAO,OAAO;EAAM;EAC1C,KAAK,MACH,OAAO;GAAE,GAAG;GAAQ,YAAY,OAAO;GAAU,OAAO,OAAO;EAAS;EAC1E,KAAK,OACH,OAAO;GACL,GAAG;GACH,OAAO,GAAG,OAAO,MAAM,GAAG,OAAO,IAAI,IAAI,aAAa,OAAO,KAAK,EAAE;EACtE;EACF,KAAK,OACH,OAAO;GACL,GAAG;GACH,KAAK;IACH,MAAM,OAAO;IACb,UAAU,OAAO;IACjB,QAAQ,OAAO;IACf,QAAQ,OAAO;GACjB;EACF;CACJ;AACF,CAAC;AAEH,MAAa,eAAe,MAAc,SACxC,SAAS,UAAU,cAAc,KAAK,0BAA0B,QAAQ,cAAc;AAExF,SAAS,aAAa,MAAc,MAAsB;CACxD,OAAO,SAAS,MAAM,SAAS,MAC3B,OACA,SAAS,QAAQ,KAAK,SAAS,IAAI,MAAM,IACvC,OACA,GAAG,KAAK,GAAG;AACnB;AAEA,SAAS,aAAa,MAAc,MAAsB;CACxD,IAAI,SAAS,MAAM,OAAO;CAC1B,MAAM,SAAS,IAAI;CACnB,IAAI,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,cAAc,KAAK,0BAA0B,MAAM;CAC/F,OAAO,KAAK,MAAM,GAAG,CAAC,OAAO,MAAM;AACrC;AAEA,SAAS,SAAY,OAAyB;CAC5C,IAAI,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,gCAAgC;CACzE,OAAO;AACT;AAEA,SAAS,aAAa,OAAuB;CAC3C,OAAO,MAAM,WAAW,MAAM,MAAM,CAAC,CAAC,WAAW,MAAK,MAAK;AAC7D;AAEA,SAAS,eAAe,OAAuB;CAC7C,OAAO,MAAM,QAAQ,cAAc,IAAI;AACzC"}

package/dist/package.mjs

@@ -0,0 +1,6 @@
+//#region package.json
+var version = "0.9.0";
+//#endregion
+export { version };
+
+//# sourceMappingURL=package.mjs.map

package/dist/package.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.mjs","names":[],"sources":["../package.json"],"sourcesContent":[""],"mappings":""}

package/dist/types/Approval.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A principal's consent to apply a specific plan digest. `Provision.apply` and `Cleanup.apply`
+ * accept only an Approval. The word "authorization" is reserved for provider OAuth.
+ */
+import { Effect, Schema } from "effect";
+import * as Errors from "./internal/error.ts";
+export declare const ApprovalId: Schema.brand<Schema.String, "@domainkit/ApprovalId">;
+export type ApprovalId = typeof ApprovalId.Type;
+declare const Model_base: Schema.Class<Model, Schema.Struct<{
+    readonly id: Schema.brand<Schema.String, "@domainkit/ApprovalId">;
+    readonly version: Schema.Literal<"domainkit.approval.v2">;
+    readonly kind: Schema.Literals<readonly ["provisioning", "cleanup"]>;
+    readonly planId: Schema.brand<Schema.String, "@domainkit/PlanId">;
+    readonly digest: Schema.brand<Schema.String, "@domainkit/Digest">;
+    /** Subset of the plan's write operations; the full set unless partial approval was requested. */
+    readonly operationIds: Schema.$Array<Schema.brand<Schema.String, "@domainkit/OperationId">>;
+    readonly approvedBy: Schema.String;
+    readonly approvedAt: Schema.DateTimeUtcFromString;
+    readonly expiresAt: Schema.DateTimeUtcFromString;
+}>, {}>;
+export declare class Model extends Model_base {
+}
+export type Encoded = typeof Model.Encoded;
+export declare const decode: (input: unknown) => Effect.Effect<Model, Errors.DomainKitError>;
+export declare const encode: (approval: Model) => Encoded;
+export {};

package/dist/types/Cleanup.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Remove only what a receipt proves DomainKit created, with its own plan, approval, and receipt.
+ * Same three verbs as Provision; the plan is built from a receipt instead of requirements.
+ */
+import { Context, Effect, Layer } from "effect";
+import type * as Approval from "./Approval.ts";
+import * as Connect from "./Connect.ts";
+import * as Errors from "./internal/error.ts";
+import * as Attempts from "./internal/attempts.ts";
+import type * as Plan from "./Plan.ts";
+import type * as Principal from "./Principal.ts";
+import * as Provision from "./Provision.ts";
+import * as Receipt from "./Receipt.ts";
+import * as Storage from "./Storage.ts";
+type Fx<A> = Effect.Effect<A, Errors.DomainKitError, Principal.Service>;
+export interface Interface {
+    /** Read back every receipt record; records that no longer match exactly become `Conflict`. */
+    readonly plan: (input: {
+        readonly receiptId: Receipt.ReceiptId;
+    } | {
+        readonly domain: string;
+    }) => Fx<Plan.Model>;
+    readonly approve: (plan: Plan.Model | Plan.PlanId, options?: Attempts.ApproveOptions) => Fx<Approval.Model>;
+    /** Decline the cleanup plan; terminal, same rules as `Provision.reject`. */
+    readonly reject: (plan: Plan.Model | Plan.PlanId, options?: Provision.RejectOptions) => Fx<Provision.Attempt>;
+    readonly apply: (approval: Approval.Model | Approval.ApprovalId) => Fx<Receipt.Model>;
+}
+declare const Service_base: Context.ServiceClass<Service, "@domainkit/Cleanup", Interface>;
+export declare class Service extends Service_base {
+}
+export declare const make: Effect.Effect<Interface, never, Storage.Service | Connect.Service>;
+export declare const layer: Layer.Layer<Service, never, Storage.Service | Connect.Service>;
+export declare const plan: (input: {
+    readonly receiptId: Receipt.ReceiptId;
+} | {
+    readonly domain: string;
+}) => Effect.Effect<Plan.Model, Errors.DomainKitError, Principal.Service | Service>;
+export declare const approve: (plan: Plan.Model | (string & import("effect/Brand").Brand<"@domainkit/PlanId">), options?: Attempts.ApproveOptions | undefined) => Effect.Effect<Approval.Model, Errors.DomainKitError, Principal.Service | Service>;
+export declare const reject: (plan: Plan.Model | (string & import("effect/Brand").Brand<"@domainkit/PlanId">), options?: Provision.RejectOptions | undefined) => Effect.Effect<Provision.Attempt, Errors.DomainKitError, Principal.Service | Service>;
+export declare const apply: (approval: Approval.Model | (string & import("effect/Brand").Brand<"@domainkit/ApprovalId">)) => Effect.Effect<Receipt.Model, Errors.DomainKitError, Principal.Service | Service>;
+export {};

package/dist/types/Cloudflare.d.ts

@@ -0,0 +1,36 @@
+/** Cloudflare: personal API tokens and OAuth. */
+import { type Config, Redacted, Schema } from "effect";
+import type { Fetch } from "./internal/http.ts";
+import * as OAuth from "./internal/oauth.ts";
+import * as Provider from "./Provider.ts";
+/**
+ * Authorization context: `accountId` is `null` when the credential spans several accounts or
+ * none yet. Target context: the zone's account and zone id.
+ */
+export declare const AccountContext: Schema.Struct<{
+    readonly accountId: Schema.NullOr<Schema.String>;
+    /** How the token was verified: user tokens span accounts, account tokens are pinned. */
+    readonly tokenKind: Schema.optionalKey<Schema.Literals<readonly ["user", "account"]>>;
+    readonly zoneId: Schema.optionalKey<Schema.String>;
+}>;
+/** Token-method input: the API token, and the account id for account-owned tokens. */
+export declare const TokenFields: Schema.Struct<{
+    readonly token: Schema.RedactedFromValue<Schema.String>;
+    readonly accountId: Schema.optionalKey<Schema.String>;
+}>;
+export type AccountContext = typeof AccountContext.Type;
+export interface Options {
+    /** Omit to offer tokens only. */
+    readonly oauth?: {
+        readonly clientId: string | Config.Config<string>;
+        readonly clientSecret: Redacted.Redacted<string> | Config.Config<Redacted.Redacted<string>>;
+        /** Scope ids assigned to the OAuth client. Default: `zone:read`, `dns_records:edit`, `offline_access`. */
+        readonly scopes?: ReadonlyArray<string>;
+        /** Default `client_secret_basic`. */
+        readonly clientAuth?: OAuth.ClientAuth;
+    };
+    readonly fetch?: Fetch;
+    readonly baseUrl?: string;
+}
+export declare const server: OAuth.Server;
+export declare const provider: (options?: Options) => Provider.Definition<AccountContext>;