@hasna/domains 0.0.46 → 0.1.0

package/dist/server/index.d.ts

@@ -15,4 +15,10 @@ export declare const SIGNING_KEY_ENVS: readonly ["HASNA_DOMAINS_API_SIGNING_KEY"
 /** Normalize the module-injected env names to the kit/auth conventions. */
 export declare function normalizeEnv(env?: NodeJS.ProcessEnv): void;
 export declare function resolveSigningSecret(env?: NodeJS.ProcessEnv): string;
+export declare const USAGE = "domains-serve \u2014 standalone HTTP API server for @hasna/domains (PostgreSQL backend)\n\nUsage: domains-serve [--port <n>] [--host <addr>]\n\nOptions:\n  --port <n>       Port to listen on (default: $PORT or 8080)\n  --host <addr>    Address to bind (default: $HOST or 0.0.0.0)\n  -h, --help       Print this help and exit\n  -V, --version    Print the package version and exit\n\nEnvironment:\n  HASNA_DOMAINS_DATABASE_URL     PostgreSQL DSN (falls back to DATABASE_URL)\n  HASNA_DOMAINS_API_SIGNING_KEY  HMAC signing secret for API keys\n                                 (falls back to API_KEY_SIGNING_SECRET)";
+/** Shared authenticated server for both domains serve and domains-serve. */
+export declare function startDomainsServer(options: {
+    port: number;
+    host: string;
+}): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AASH,eAAO,MAAM,gBAAgB,+FAInB,CAAC;AAEX,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAIvE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQjF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AASH,eAAO,MAAM,gBAAgB,+FAInB,CAAC;AAEX,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAIvE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQjF;AAUD,eAAO,MAAM,KAAK,0mBAasD,CAAC;AAwBzE,4EAA4E;AAC5E,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD/F"}

package/dist/server/index.js

@@ -79,7 +79,7 @@ function viewWindow(view) {
 }
 function toBuffer(secret) {
   if (typeof secret === "string")
-    return Buffer.from(secret, "utf8");
+    return Buffer.from(secret.trim(), "utf8");
   if (ArrayBuffer.isView(secret)) {
     const [store, byteOffset, byteLength] = viewWindow(secret);
     return Buffer.from(store, byteOffset, byteLength);
@@ -386,11 +386,17 @@ class ApiKeyStore {
       return status !== "active";
     };
   }
-  async revoke(kid, reason, atMs = Date.now()) {
+  async revoke(kid, reason, atMs = Date.now(), options = {}) {
+    const params = [kid, new Date(atMs).toISOString(), reason ?? null];
+    let scope = "";
+    if (options.app !== undefined) {
+      params.push(options.app);
+      scope = ` AND app = $${params.length}`;
+    }
     const row = await this.client.get(`UPDATE ${this.table}
           SET revoked_at = COALESCE(revoked_at, $2), revoked_reason = COALESCE(revoked_reason, $3)
-        WHERE kid = $1
-      RETURNING kid`, [kid, new Date(atMs).toISOString(), reason ?? null]);
+        WHERE kid = $1${scope}
+      RETURNING kid`, params);
     return row !== null;
   }
   async touchLastUsed(kid, atMs = Date.now()) {
@@ -629,24 +635,43 @@ function serverDataBackendEnvKeys(name) {
     databaseUrlKeys: [`HASNA_${token}_DATABASE_URL`, `${token}_DATABASE_URL`]
   };
 }
-function firstEnv(env, keys) {
-  for (const key of keys) {
-    const value = ownString(env, key)?.trim();
-    if (value)
-      return { key, value };
+function definedDatabaseUrlEntries(env, keys) {
+  return keys.map((key) => ({ key, value: ownString(env, key) })).filter((entry) => entry.value !== undefined);
+}
+function assertPostgresqlDatabaseUrl(name, entries) {
+  const canonicalKey = serverDataBackendEnvKeys(name).databaseUrlKeys[0];
+  if (entries.length === 0) {
+    throw new Error(`${canonicalKey} is required; servers use PostgreSQL and never default to SQLite.`);
   }
-  return null;
+  const blank = entries.filter((entry) => entry.value.trim().length === 0);
+  if (blank.length > 0) {
+    throw new Error(`${blank.map((entry) => entry.key).join(" and ")} is set but blank; a PostgreSQL database URL is required.`);
+  }
+  const controlled = entries.find((entry) => /[\u0000-\u001f\u007f]/.test(entry.value));
+  if (controlled)
+    throw new Error(`${controlled.key} must not contain ASCII control characters.`);
+  const normalized = entries.map((entry) => ({ key: entry.key, value: entry.value.trim() }));
+  if (normalized.length > 1 && new Set(normalized.map((entry) => entry.value)).size > 1) {
+    throw new Error(`${normalized.map((entry) => entry.key).join(" and ")} disagree; database URL aliases must be identical or only one may be set.`);
+  }
+  const selected = normalized[0];
+  let parsed;
+  try {
+    parsed = new URL(selected.value);
+  } catch {
+    throw new Error(`${selected.key} must be an absolute PostgreSQL connection URL.`);
+  }
+  if (parsed.protocol !== "postgres:" && parsed.protocol !== "postgresql:") {
+    throw new Error(`${selected.key} must use the postgres or postgresql scheme.`);
+  }
+  if (!parsed.hostname || parsed.pathname.length <= 1) {
+    throw new Error(`${selected.key} must name a PostgreSQL host and database.`);
+  }
+  return selected;
 }
 function resolveServerDataBackend(name, env = process.env) {
-  const databaseUrl = firstEnv(env, serverDataBackendEnvKeys(name).databaseUrlKeys);
-  if (!databaseUrl) {
-    return {
-      backend: "sqlite",
-      source: "default",
-      databaseUrlPresent: false,
-      databaseUrlSource: null
-    };
-  }
+  const keys = serverDataBackendEnvKeys(name).databaseUrlKeys;
+  const databaseUrl = assertPostgresqlDatabaseUrl(name, definedDatabaseUrlEntries(env, keys));
   return {
     backend: "postgresql",
     source: databaseUrl.key,
@@ -655,8 +680,8 @@ function resolveServerDataBackend(name, env = process.env) {
   };
 }
 function resolveDatabaseUrl(name, env = process.env) {
-  const hit = firstEnv(env, serverDataBackendEnvKeys(name).databaseUrlKeys);
-  return hit?.value ?? null;
+  const keys = serverDataBackendEnvKeys(name).databaseUrlKeys;
+  return assertPostgresqlDatabaseUrl(name, definedDatabaseUrlEntries(env, keys)).value;
 }
 // src/generated/storage-kit/tls.ts
 import { readFileSync } from "fs";
@@ -903,9 +928,6 @@ function createServerPoolFromEnv(appName, options = {}) {
   const env = own.env ?? process.env;
   const resolution = resolveServerDataBackend(appName, env);
   const connectionString = resolveDatabaseUrl(appName, env);
-  if (!connectionString) {
-    throw new Error(`postgresql storage for ${appName} needs a database URL. Set ` + `HASNA_${appName.toUpperCase().replace(/-/g, "_")}_DATABASE_URL.`);
-  }
   const pool = createPgPool({
     ...own,
     connectionString,
@@ -913,7 +935,7 @@ function createServerPoolFromEnv(appName, options = {}) {
   });
   return {
     client: createQueryClient(pool),
-    connectionSource: resolution.databaseUrlSource ?? "unknown"
+    connectionSource: resolution.databaseUrlSource
   };
 }
 // src/generated/storage-kit/migrations.ts
@@ -2680,11 +2702,44 @@ function parseArg(name, fallback) {
     return process.argv[idx + 1];
   return fallback;
 }
+var USAGE = `domains-serve \u2014 standalone HTTP API server for @hasna/domains (PostgreSQL backend)
+
+Usage: domains-serve [--port <n>] [--host <addr>]
+
+Options:
+  --port <n>       Port to listen on (default: $PORT or ${DEFAULT_PORT})
+  --host <addr>    Address to bind (default: $HOST or 0.0.0.0)
+  -h, --help       Print this help and exit
+  -V, --version    Print the package version and exit
+
+Environment:
+  HASNA_DOMAINS_DATABASE_URL     PostgreSQL DSN (falls back to DATABASE_URL)
+  HASNA_DOMAINS_API_SIGNING_KEY  HMAC signing secret for API keys
+                                 (falls back to API_KEY_SIGNING_SECRET)`;
+function earlyArgAnswer(argv) {
+  if (argv.includes("--help") || argv.includes("-h"))
+    return USAGE;
+  if (argv.includes("--version") || argv.includes("-V"))
+    return getPackageVersion();
+  return;
+}
 async function main() {
-  if (process.argv.includes("--version") || process.argv.includes("-V")) {
-    console.log(getPackageVersion());
+  const early = earlyArgAnswer(process.argv);
+  if (early !== undefined) {
+    console.log(early);
     return;
   }
+  await startDomainsServer({
+    port: Number(parseArg("--port", process.env["PORT"]) ?? DEFAULT_PORT),
+    host: parseArg("--host", process.env["HOST"]) ?? "0.0.0.0"
+  });
+}
+async function startDomainsServer(options) {
+  const { port, host } = options;
+  if (!Number.isInteger(port) || port < 1 || port > 65535)
+    throw new Error("Port must be an integer from 1 to 65535.");
+  if (!host.trim())
+    throw new Error("Host must not be blank.");
   normalizeEnv();
   const version = getPackageVersion();
   const signingSecret = resolveSigningSecret();
@@ -2704,8 +2759,6 @@ async function main() {
       }
     }
   });
-  const port = Number(parseArg("--port", process.env["PORT"]) ?? DEFAULT_PORT) || DEFAULT_PORT;
-  const host = parseArg("--host", process.env["HOST"]) ?? "0.0.0.0";
   Bun.serve({
     port,
     hostname: host,
@@ -2728,7 +2781,9 @@ if (import.meta.main) {
   });
 }
 export {
+  startDomainsServer,
   resolveSigningSecret,
   normalizeEnv,
+  USAGE,
   SIGNING_KEY_ENVS
 };

package/dist/server/migrations.d.ts

@@ -12,6 +12,41 @@ import { type Migration, type MigrationResult } from "../generated/storage-kit/i
 /** Env var holding the owner-role DSN (DDL privileges). Falls back to the app DSN. */
 export declare const OWNER_DSN_ENV = "HASNA_DOMAINS_DATABASE_URL_OWNER";
 export declare const APP_DSN_ENV = "HASNA_DOMAINS_DATABASE_URL";
+/**
+ * Applied-ledger rows recorded before the ledger's id scheme stabilized, which
+ * no build in this repo's history generates (verified across every published
+ * tarball 0.0.30-0.0.46 and all git history). They are acknowledged via the
+ * storage kit's `acknowledgedLegacyIds`: they pass the downgrade guard, are
+ * never checksum-compared (their SQL is not reproducible from any source), and
+ * are never re-applied or re-inserted.
+ *
+ * `domains_apikeys_tenancy_0001`, `domains_apikeys_tenancy_0002`,
+ * `domains_tenancy_0001`..`domains_tenancy_0010` were recorded against the
+ * prod ledger out-of-band during the 2026-07 self-hosted cutover. Deploy
+ * evidence 2026-08-25: the 02:00Z pass failed on `_0001` (O15-00671 filed);
+ * the 16:44Z pass, carrying the kit with `_0001` acknowledged
+ * (hasna/apps#1176), advanced to `_0002`; the next pass then failed on the
+ * third row `domains_tenancy_0001` (O15-00758 filed), the 2026-08-25 PASS-18
+ * pass then failed on the fourth row `domains_tenancy_0002` at
+ * `domains-prod-migrate:42` (O15-00762 filed), and the 2026-08-25 pass then
+ * failed on the fifth row `domains_tenancy_0003` at `domains-prod-migrate:42`
+ * (O15-00766 filed). Deploy evidence 2026-08-26: passes 48-96 then failed on
+ * the sixth row `domains_tenancy_0004` at `domains-prod-migrate:44` through
+ * `:49` (todos 2b474505). Deploy evidence 2026-08-26/27: the 2026-08-27
+ * 06:47Z pass failed on the seventh row `domains_tenancy_0005` at
+ * `domains-prod-migrate:50` (O15-01822 filed). The ledger census (inspection
+ * task oss-fleet-prod/4b7c37626965439e96d5386c8e8a73d4) shows the complete
+ * out-of-band set is the 12 rows below — `domains_apikeys_tenancy_0001-0002`
+ * plus `domains_tenancy_0001..0010` — so this list covers the full measured
+ * prod ledger rather than one row per deploy pass. The apikeys rows'
+ * substance — the api-keys tenancy (`tid`) column — is carried today by
+ * `hasna_auth_0003_api_keys_tenant`; the substance of the `domains_tenancy_*`
+ * rows is not reproducible from any source in this repo, and no build
+ * generates the ids, so they are acknowledged as history rather than
+ * re-applied. Acknowledging all twelve unblocks `domains db migrate` (the ECS
+ * migrate task) and therefore the domains deploy lane.
+ */
+export declare const ACKNOWLEDGED_LEGACY_MIGRATION_IDS: readonly string[];
 /** The ordered migration set: app schema first, then the shared api-keys table. */
 export declare function buildMigrations(): Migration[];
 /** Run all pending migrations against the owner DSN. */

package/dist/server/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/server/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAK3C,sFAAsF;AACtF,eAAO,MAAM,aAAa,qCAAqC,CAAC;AAChE,eAAO,MAAM,WAAW,+BAA+B,CAAC;AAGxD,mFAAmF;AACnF,wBAAgB,eAAe,IAAI,SAAS,EAAE,CAU7C;AAYD,wDAAwD;AACxD,wBAAsB,aAAa,CACjC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACvD,OAAO,CAAC,eAAe,CAAC,CAiB1B"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/server/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAK3C,sFAAsF;AACtF,eAAO,MAAM,aAAa,qCAAqC,CAAC;AAChE,eAAO,MAAM,WAAW,+BAA+B,CAAC;AAGxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAa9D,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,eAAe,IAAI,SAAS,EAAE,CAU7C;AAYD,wDAAwD;AACxD,wBAAsB,aAAa,CACjC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACvD,OAAO,CAAC,eAAe,CAAC,CAa1B"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hasna/domains",
-  "version": "0.0.46",
-  "description": "Domain portfolio, registrar, marketplace, and DNS management for AI agents — CLI + MCP + HTTP API + SDK, local SQLite or cloud Postgres",
+  "version": "0.1.0",
+  "description": "Domain portfolio, registrar, marketplace, and DNS management for AI agents — CLI + MCP + HTTP API + SDK, shared account API and PostgreSQL",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -47,7 +47,8 @@
   "files": [
     "dist",
     "LICENSE",
-    "README.md"
+    "README.md",
+    "postinstall.js"
   ],
   "scripts": {
     "clean": "rm -rf dist",
@@ -60,9 +61,9 @@
     "dev:mcp": "bun run src/mcp/index.ts",
     "dev:serve": "bun run src/server/index.ts",
     "prepublishOnly": "bun run build",
-    "postinstall": "mkdir -p $HOME/.hasna/domains 2>/dev/null || true",
+    "postinstall": "node postinstall.js",
     "prepack": "bun run build && bun run artifact-scan",
-    "artifact-scan": "bun pm pack --ignore-scripts --quiet --filename \"$PWD/domains-artifact-scan.tgz\" && bunx @hasna/contracts@0.14.1 artifact-scan domains-artifact-scan.tgz; rc=$?; rm -f \"$PWD/domains-artifact-scan.tgz\"; exit $rc"
+    "artifact-scan": "bun pm pack --ignore-scripts --quiet --filename \"$PWD/domains-artifact-scan.tgz\" && bunx @hasna/contracts@1.0.2 artifact-scan domains-artifact-scan.tgz; rc=$?; rm -f \"$PWD/domains-artifact-scan.tgz\"; exit $rc"
   },
   "keywords": [
     "domains",
@@ -97,7 +98,6 @@
     "@aws-sdk/client-route-53": "^3.1067.0",
     "@aws-sdk/client-route-53-domains": "^3.1067.0",
     "@aws-sdk/credential-provider-ini": "3.972.53",
-    "@hasna/contracts": "0.14.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
@@ -119,8 +119,8 @@
     }
   },
   "devDependencies": {
-    "@hasna/mcp-harness": "0.1.0",
-    "@types/bun": "^1.3.14",
+    "@hasna/contracts": "1.0.2",
+    "@types/bun": "1.3.14",
     "@types/pg": "^8.20.0",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.14",

package/postinstall.js

@@ -0,0 +1,41 @@
+// Best-effort install-time creation of the domains LOCAL DATA home directory,
+// resolving the SAME effective home the runtime uses (src/lib/app-home.ts):
+// an exact-app override (HASNA_DOMAINS_HOME / HASNA_DOMAINS_DIR, then the
+// legacy unprefixed DOMAINS_HOME / DOMAINS_DIR aliases) wins; otherwise
+// $HASNA_HOME/domains (the shared root override); otherwise the legacy
+// ~/.hasna/domains default. Faithfully mirrors the runtime module — no
+// @hasna/paths, no XDG, no HASNA_*_HOME kind overrides (stripped, hasna/apps#1720
+// class B). Failures are non-fatal: the runtime creates the same directory on
+// first use.
+import { chmodSync, existsSync, mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+try {
+  const env = process.env;
+  const override = (
+    env["HASNA_DOMAINS_HOME"] ||
+    env["HASNA_DOMAINS_DIR"] ||
+    env["DOMAINS_HOME"] ||
+    env["DOMAINS_DIR"] ||
+    ""
+  ).trim();
+  const home = env["HOME"] || env["USERPROFILE"] || homedir();
+
+  let dir;
+  if (override) {
+    dir = override;
+  } else {
+    const hasnaHome = (env["HASNA_HOME"] || "").trim();
+    dir = hasnaHome ? join(hasnaHome, "domains") : join(home, ".hasna", "domains");
+  }
+
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 0o700 });
+  try {
+    chmodSync(dir, 0o700);
+  } catch {
+    // best-effort on platforms without POSIX perms
+  }
+} catch {
+  // never fail an install over pre-created directories
+}