@aglyn/tenant-data-admin 1.0.0-beta.143

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,7 @@
+# tenant-data-admin
+
+This library was generated with [Nx](https://nx.dev).
+
+## Running unit tests
+
+Run `nx test tenant-data-admin` to execute the unit tests via [Jest](https://jestjs.io).

package/jest.integration.config.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Integration tests against a live Firestore emulator (AGL-958).
+ *
+ * Separate from `jest.config.ts` so `nx test` never runs them — they need an
+ * emulator on 8082 and would fail the sweep on any machine without one.
+ *
+ *   npx firebase emulators:start --only firestore --project aglyn-main
+ *   npx jest --config libs/tenant/data/admin/jest.integration.config.ts
+ */
+declare const _default: {
+    displayName: string;
+    preset: string;
+    testEnvironment: string;
+    testMatch: string[];
+    setupFiles: string[];
+    transform: {
+        '^.+\\.[tj]sx?$': (string | {
+            tsconfig: string;
+        })[];
+    };
+    moduleFileExtensions: string[];
+};
+export default _default;

package/jest.integration.setup.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+declare const initializeApp: any, getApps: any;

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@aglyn/tenant-data-admin",
+  "version": "1.0.0-beta.143",
+  "license": "Apache-2.0",
+  "homepage": "https://aglyn.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aglyn/aglyn.git",
+    "directory": "libs/tenant/data/admin"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "default": "./src/index.js"
+    },
+    "./*": {
+      "types": "./src/lib/*.d.ts",
+      "default": "./src/lib/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@aglyn/aglyn": "1.0.0-beta.143",
+    "@aglyn/shared-util-email": "1.0.0-beta.143",
+    "@aglyn/shared-util-fbserver": "1.0.0-beta.143",
+    "@aglyn/shared-util-http": "1.0.0-beta.143",
+    "@aglyn/shared-util-tools": "1.0.0-beta.143",
+    "@msgpack/msgpack": "^3.1.3",
+    "@swc/helpers": "0.5.23",
+    "sharp": "^0.35.3",
+    "undici": "^7.29.0"
+  },
+  "peerDependencies": {
+    "firebase-admin": "^14.3.0",
+    "next": "16.3.3",
+    "react": "^19.2.8"
+  },
+  "sideEffects": [
+    "./src/lib/server/client-error-report.*",
+    "./src/lib/server/email-marketing-gate.*",
+    "./src/lib/server/email-send-rate.*"
+  ],
+  "types": "./src/index.d.ts",
+  "module": "./src/index.js",
+  "main": "./src/index.js"
+}

package/src/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export * from './tenancy';

package/src/index.js

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ export * from "./tenancy.js";
+
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/tenant/data/admin/src/index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './tenancy'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,eAAW"}

package/src/lib/render-cache.d.ts

@@ -0,0 +1,184 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Cross-request caching for the tenant render path's Firestore reads
+ * (AGL-1302, the caching half of AGL-1151).
+ *
+ * Every tenant SSR render fanned out to ~15–40 uncached Admin-SDK reads —
+ * host resolution, org billing, screen + version, the layout chain, and the
+ * whole compose bundle (components, variables, functions, datasets,
+ * workflows, plugin installs). None of that data is per-visitor, and almost
+ * all of it is identical across every path on a site, so a 50-route sweep
+ * paid the same host-scoped reads 50 times over. Routine verification
+ * traffic alone burned ~44K reads/day (87% of the free tier).
+ *
+ * This module is deliberately a THIN wrapper around `unstable_cache` rather
+ * than a cache of its own, so invalidation stays Next's: entries are tagged
+ * and the existing publish/revalidate path (`/api/revalidate`, AGL-1150)
+ * busts them with `revalidateTag` the same moment it drops the page HTML.
+ *
+ * Ground rules encoded here, because `unstable_cache` enforces none of them:
+ *
+ * - VALUES ARE JSON. `unstable_cache` stores `JSON.stringify(result)`, so a
+ *   cache HIT returns plain data while a MISS would return live objects —
+ *   Firestore `Timestamp`s, most importantly, whose `.seconds` getter decays
+ *   to `_seconds` across the round trip. Serving two shapes for the same
+ *   read is how a schedule check works in testing and misfires in
+ *   production, so `withRenderCache` normalizes the MISS through the same
+ *   JSON round trip. Callers whose logic needs live `Timestamp` semantics
+ *   must not cache that read (see the pending-`publishSchedule` guards at
+ *   the call sites).
+ *
+ * - NEGATIVES ARE NOT CACHED unless a caller opts in via `store`. A
+ *   transient miss (host not found, doc missing) cached for the TTL is a
+ *   self-inflicted outage; the Firestore negative-cache class of bug is
+ *   exactly this shape.
+ *
+ * - OUTSIDE NEXT (jest, scripts) there is no incremental cache and
+ *   `unstable_cache` throws its `incrementalCache missing` invariant before
+ *   running the callback. The wrapper catches precisely that and falls back
+ *   to the uncached read, so shared-lib specs exercise the same code path
+ *   they always did.
+ *
+ * - NEVER cache per-user reads through this. Everything cached here must be
+ *   a pure function of published site data.
+ */
+/**
+ * One tag per host covers every host-scoped cached doc — the host doc, the
+ * compose bundle, plugin installs, the sitemap payload. The tenant
+ * `/api/revalidate` route busts it on publish (alongside its existing
+ * `revalidatePath` calls), so a publish is exactly as instant as AGL-1150
+ * made it; the TTL is only the backstop for writes that never announce
+ * themselves.
+ */
+export declare const tenantDataTag: (hostId: string) => string;
+/**
+ * The backstop TTL for published site data — every read that
+ * `revalidateTag(tenantDataTag(hostId))` busts on publish.
+ *
+ * WHY AN HOUR AND NOT A MINUTE (2026-08-26, from the Vercel cost review).
+ *
+ * Every cache in this layer shipped at 60s, and the page above them was
+ * `revalidate = 60` too. Setting the backstop to the same order as the
+ * request rate makes it the PRIMARY propagation mechanism rather than a
+ * backstop: the whole chain expired together, so a render a minute paid the
+ * full sequential Firestore walk — host, org billing, redirect rules, page
+ * resolution, screen, compose bundle, enrichers — and none of it was ever
+ * stale in a way anyone could observe, because the publish path had already
+ * busted the tag the moment the content changed.
+ *
+ * Measured on `/[host]/[scheme]/[[...slug]]`: 0.78 GB-hr across 635 invocations, a P75
+ * of 3.65s, and ~4.4 GB-s per render — the most expensive route per hit in
+ * the account, on a site with no real traffic yet.
+ *
+ * So the TTL goes back to being what `withRenderCache`'s own docstring says
+ * it is: "the backstop for writes that never announce themselves." An hour
+ * bounds an unannounced direct-to-Firestore edit. Everything that goes
+ * through the product announces itself and is busted in the same instant it
+ * always was, so publish latency is unchanged.
+ *
+ * ⛔ NOT for reads that change OUTSIDE a publish. Two deliberately keep their
+ * own short TTLs and must not be moved onto this one:
+ *
+ *   - `ORG_BILLING_TTL_SECONDS` — a plan change happens in the console and
+ *     nothing busts the tenant tag for it, so this TTL is the ONLY thing
+ *     propagating an upgrade or a downgrade to the live site.
+ *   - `HOST_ALIAS_TTL_SECONDS` / `HOST_DOC_TTL_SECONDS` — a custom domain
+ *     attaching is the customer sitting there waiting for their site
+ *     (AGL-2010), and the `cname--` alias entry expires only by TTL.
+ *
+ * Takedowns are unaffected either way: the middleware runs ahead of every
+ * cache here and carries its own memo, which is what
+ * `lockdown-middleware-propagation.spec.ts` measures.
+ */
+export declare const PUBLISHED_SITE_DATA_TTL_SECONDS = 3600;
+/**
+ * The backstop for the one read a screen publish changes under an UNCHANGED
+ * cache key — the version pointer (AGL-2573).
+ *
+ * The hour above is argued on the premise that "everything that goes through
+ * the product announces itself". That premise held for eleven days in August
+ * and then did not: the tenant refused the announce and every publish on the
+ * platform fell back to this TTL. The announce is still the mechanism — no TTL
+ * can make a publish instant, because the page above these caches is ISR-held
+ * and does not re-run a loader to notice a fresher document — but a backstop
+ * only bounds a failure, and an hour is not a bound anyone would choose for
+ * "your published page is not the page you published".
+ *
+ * Applied to the POINTER alone, deliberately, because the pointer alone is
+ * what makes the hour expensive. `get-screen-version` is keyed by `versionId`,
+ * so the body of a newly published version misses on its own; the only thing
+ * standing between a visitor and it is the screen document that names which
+ * version is live. That document is one small read, and shortening it leaves
+ * the expensive reads — the compose bundle, the node trees — at the hour the
+ * cost review set.
+ *
+ * The principle rather than a tuned figure: **the pointer must never be staler
+ * than the HTML that reads it** — `<=` the tenant catch-all's ISR window
+ * (`apps/tenant/app/[host]/[scheme]/[[...slug]]/page.tsx`), which
+ * `publish-pointer-tracks-page-window.spec.ts` enforces. Above the window, the
+ * page regenerates and faithfully rebuilds itself from a stale pointer, which
+ * is the failure being closed.
+ *
+ * It matched that window exactly while the window was also 600s. It no longer
+ * does, and staying at 600 under an hour-long window is the deliberate choice
+ * (AGL-2690): the loader runs only when the page regenerates, so a shorter TTL
+ * here costs the same single read per regeneration — a miss instead of a hit —
+ * and buys a rebuild from data at most ten minutes old rather than up to an
+ * hour old. That difference only shows when the publish announce is down, and
+ * the announce has been down for eleven days once already.
+ *
+ * The read cost this adds is one document per page REGENERATION rather than
+ * one per hour — regenerations are already bounded by the ISR window, so the
+ * ceiling is the render rate and not the request rate. That is the price of
+ * the bound, and it is the cheapest read on the path.
+ */
+export declare const PUBLISH_POINTER_TTL_SECONDS = 600;
+/**
+ * The alias→hostId resolution is tagged separately because it is the one
+ * cache keyed BEFORE the hostId is known. It only changes on subdomain
+ * rename or custom-domain (dis)connect, never on publish.
+ */
+export declare const tenantHostAliasTag: (alias: string) => string;
+/**
+ * The same normalization the page props already go through (`JSON.parse(
+ * JSON.stringify(...))` at every loader exit), applied at the cache boundary
+ * so hits and misses hand back byte-identical shapes.
+ */
+export declare function toPlainJson<T>(value: T): T;
+export interface RenderCacheOptions<T> {
+    /**
+     * Cache key parts. The FIRST part must be unique per read helper — every
+     * call funnels through the same callback source, and `unstable_cache` keys
+     * on callback text + key parts, so the name prefix is what keeps
+     * `getScreen` and `getComponents` from colliding.
+     */
+    key: readonly string[];
+    /** TTL in seconds — the staleness backstop when no tag bust arrives. */
+    revalidate: number;
+    /** Tags `revalidateTag` can bust — see `tenantDataTag`. */
+    tags: readonly string[];
+    /** The uncached read. Must resolve to JSON-serializable data. */
+    read: () => Promise<T>;
+    /**
+     * Return `false` to serve the value WITHOUT storing it. Negative results
+     * and docs whose live `Timestamp` semantics matter (pending publish
+     * schedules) belong here. `undefined` is never stored regardless.
+     */
+    store?: (value: T) => boolean;
+}
+export declare function withRenderCache<T>(options: RenderCacheOptions<T>): Promise<T>;