@hasna/domains 0.0.47 → 0.1.0

package/dist/server/index.d.ts

@@ -15,4 +15,10 @@ export declare const SIGNING_KEY_ENVS: readonly ["HASNA_DOMAINS_API_SIGNING_KEY"
 /** Normalize the module-injected env names to the kit/auth conventions. */
 export declare function normalizeEnv(env?: NodeJS.ProcessEnv): void;
 export declare function resolveSigningSecret(env?: NodeJS.ProcessEnv): string;
+export declare const USAGE = "domains-serve \u2014 standalone HTTP API server for @hasna/domains (PostgreSQL backend)\n\nUsage: domains-serve [--port <n>] [--host <addr>]\n\nOptions:\n  --port <n>       Port to listen on (default: $PORT or 8080)\n  --host <addr>    Address to bind (default: $HOST or 0.0.0.0)\n  -h, --help       Print this help and exit\n  -V, --version    Print the package version and exit\n\nEnvironment:\n  HASNA_DOMAINS_DATABASE_URL     PostgreSQL DSN (falls back to DATABASE_URL)\n  HASNA_DOMAINS_API_SIGNING_KEY  HMAC signing secret for API keys\n                                 (falls back to API_KEY_SIGNING_SECRET)";
+/** Shared authenticated server for both domains serve and domains-serve. */
+export declare function startDomainsServer(options: {
+    port: number;
+    host: string;
+}): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AASH,eAAO,MAAM,gBAAgB,+FAInB,CAAC;AAEX,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAIvE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQjF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AASH,eAAO,MAAM,gBAAgB,+FAInB,CAAC;AAEX,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAIvE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQjF;AAUD,eAAO,MAAM,KAAK,0mBAasD,CAAC;AAwBzE,4EAA4E;AAC5E,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD/F"}

package/dist/server/index.js

@@ -79,7 +79,7 @@ function viewWindow(view) {
 }
 function toBuffer(secret) {
   if (typeof secret === "string")
-    return Buffer.from(secret, "utf8");
+    return Buffer.from(secret.trim(), "utf8");
   if (ArrayBuffer.isView(secret)) {
     const [store, byteOffset, byteLength] = viewWindow(secret);
     return Buffer.from(store, byteOffset, byteLength);
@@ -386,11 +386,17 @@ class ApiKeyStore {
       return status !== "active";
     };
   }
-  async revoke(kid, reason, atMs = Date.now()) {
+  async revoke(kid, reason, atMs = Date.now(), options = {}) {
+    const params = [kid, new Date(atMs).toISOString(), reason ?? null];
+    let scope = "";
+    if (options.app !== undefined) {
+      params.push(options.app);
+      scope = ` AND app = $${params.length}`;
+    }
     const row = await this.client.get(`UPDATE ${this.table}
           SET revoked_at = COALESCE(revoked_at, $2), revoked_reason = COALESCE(revoked_reason, $3)
-        WHERE kid = $1
-      RETURNING kid`, [kid, new Date(atMs).toISOString(), reason ?? null]);
+        WHERE kid = $1${scope}
+      RETURNING kid`, params);
     return row !== null;
   }
   async touchLastUsed(kid, atMs = Date.now()) {
@@ -629,24 +635,43 @@ function serverDataBackendEnvKeys(name) {
     databaseUrlKeys: [`HASNA_${token}_DATABASE_URL`, `${token}_DATABASE_URL`]
   };
 }
-function firstEnv(env, keys) {
-  for (const key of keys) {
-    const value = ownString(env, key)?.trim();
-    if (value)
-      return { key, value };
+function definedDatabaseUrlEntries(env, keys) {
+  return keys.map((key) => ({ key, value: ownString(env, key) })).filter((entry) => entry.value !== undefined);
+}
+function assertPostgresqlDatabaseUrl(name, entries) {
+  const canonicalKey = serverDataBackendEnvKeys(name).databaseUrlKeys[0];
+  if (entries.length === 0) {
+    throw new Error(`${canonicalKey} is required; servers use PostgreSQL and never default to SQLite.`);
   }
-  return null;
+  const blank = entries.filter((entry) => entry.value.trim().length === 0);
+  if (blank.length > 0) {
+    throw new Error(`${blank.map((entry) => entry.key).join(" and ")} is set but blank; a PostgreSQL database URL is required.`);
+  }
+  const controlled = entries.find((entry) => /[\u0000-\u001f\u007f]/.test(entry.value));
+  if (controlled)
+    throw new Error(`${controlled.key} must not contain ASCII control characters.`);
+  const normalized = entries.map((entry) => ({ key: entry.key, value: entry.value.trim() }));
+  if (normalized.length > 1 && new Set(normalized.map((entry) => entry.value)).size > 1) {
+    throw new Error(`${normalized.map((entry) => entry.key).join(" and ")} disagree; database URL aliases must be identical or only one may be set.`);
+  }
+  const selected = normalized[0];
+  let parsed;
+  try {
+    parsed = new URL(selected.value);
+  } catch {
+    throw new Error(`${selected.key} must be an absolute PostgreSQL connection URL.`);
+  }
+  if (parsed.protocol !== "postgres:" && parsed.protocol !== "postgresql:") {
+    throw new Error(`${selected.key} must use the postgres or postgresql scheme.`);
+  }
+  if (!parsed.hostname || parsed.pathname.length <= 1) {
+    throw new Error(`${selected.key} must name a PostgreSQL host and database.`);
+  }
+  return selected;
 }
 function resolveServerDataBackend(name, env = process.env) {
-  const databaseUrl = firstEnv(env, serverDataBackendEnvKeys(name).databaseUrlKeys);
-  if (!databaseUrl) {
-    return {
-      backend: "sqlite",
-      source: "default",
-      databaseUrlPresent: false,
-      databaseUrlSource: null
-    };
-  }
+  const keys = serverDataBackendEnvKeys(name).databaseUrlKeys;
+  const databaseUrl = assertPostgresqlDatabaseUrl(name, definedDatabaseUrlEntries(env, keys));
   return {
     backend: "postgresql",
     source: databaseUrl.key,
@@ -655,8 +680,8 @@ function resolveServerDataBackend(name, env = process.env) {
   };
 }
 function resolveDatabaseUrl(name, env = process.env) {
-  const hit = firstEnv(env, serverDataBackendEnvKeys(name).databaseUrlKeys);
-  return hit?.value ?? null;
+  const keys = serverDataBackendEnvKeys(name).databaseUrlKeys;
+  return assertPostgresqlDatabaseUrl(name, definedDatabaseUrlEntries(env, keys)).value;
 }
 // src/generated/storage-kit/tls.ts
 import { readFileSync } from "fs";
@@ -903,9 +928,6 @@ function createServerPoolFromEnv(appName, options = {}) {
   const env = own.env ?? process.env;
   const resolution = resolveServerDataBackend(appName, env);
   const connectionString = resolveDatabaseUrl(appName, env);
-  if (!connectionString) {
-    throw new Error(`postgresql storage for ${appName} needs a database URL. Set ` + `HASNA_${appName.toUpperCase().replace(/-/g, "_")}_DATABASE_URL.`);
-  }
   const pool = createPgPool({
     ...own,
     connectionString,
@@ -913,7 +935,7 @@ function createServerPoolFromEnv(appName, options = {}) {
   });
   return {
     client: createQueryClient(pool),
-    connectionSource: resolution.databaseUrlSource ?? "unknown"
+    connectionSource: resolution.databaseUrlSource
   };
 }
 // src/generated/storage-kit/migrations.ts
@@ -2680,11 +2702,44 @@ function parseArg(name, fallback) {
     return process.argv[idx + 1];
   return fallback;
 }
+var USAGE = `domains-serve \u2014 standalone HTTP API server for @hasna/domains (PostgreSQL backend)
+
+Usage: domains-serve [--port <n>] [--host <addr>]
+
+Options:
+  --port <n>       Port to listen on (default: $PORT or ${DEFAULT_PORT})
+  --host <addr>    Address to bind (default: $HOST or 0.0.0.0)
+  -h, --help       Print this help and exit
+  -V, --version    Print the package version and exit
+
+Environment:
+  HASNA_DOMAINS_DATABASE_URL     PostgreSQL DSN (falls back to DATABASE_URL)
+  HASNA_DOMAINS_API_SIGNING_KEY  HMAC signing secret for API keys
+                                 (falls back to API_KEY_SIGNING_SECRET)`;
+function earlyArgAnswer(argv) {
+  if (argv.includes("--help") || argv.includes("-h"))
+    return USAGE;
+  if (argv.includes("--version") || argv.includes("-V"))
+    return getPackageVersion();
+  return;
+}
 async function main() {
-  if (process.argv.includes("--version") || process.argv.includes("-V")) {
-    console.log(getPackageVersion());
+  const early = earlyArgAnswer(process.argv);
+  if (early !== undefined) {
+    console.log(early);
     return;
   }
+  await startDomainsServer({
+    port: Number(parseArg("--port", process.env["PORT"]) ?? DEFAULT_PORT),
+    host: parseArg("--host", process.env["HOST"]) ?? "0.0.0.0"
+  });
+}
+async function startDomainsServer(options) {
+  const { port, host } = options;
+  if (!Number.isInteger(port) || port < 1 || port > 65535)
+    throw new Error("Port must be an integer from 1 to 65535.");
+  if (!host.trim())
+    throw new Error("Host must not be blank.");
   normalizeEnv();
   const version = getPackageVersion();
   const signingSecret = resolveSigningSecret();
@@ -2704,8 +2759,6 @@ async function main() {
       }
     }
   });
-  const port = Number(parseArg("--port", process.env["PORT"]) ?? DEFAULT_PORT) || DEFAULT_PORT;
-  const host = parseArg("--host", process.env["HOST"]) ?? "0.0.0.0";
   Bun.serve({
     port,
     hostname: host,
@@ -2728,7 +2781,9 @@ if (import.meta.main) {
   });
 }
 export {
+  startDomainsServer,
   resolveSigningSecret,
   normalizeEnv,
+  USAGE,
   SIGNING_KEY_ENVS
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hasna/domains",
-  "version": "0.0.47",
-  "description": "Domain portfolio, registrar, marketplace, and DNS management for AI agents — CLI + MCP + HTTP API + SDK, local SQLite or cloud Postgres",
+  "version": "0.1.0",
+  "description": "Domain portfolio, registrar, marketplace, and DNS management for AI agents — CLI + MCP + HTTP API + SDK, shared account API and PostgreSQL",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -63,7 +63,7 @@
     "prepublishOnly": "bun run build",
     "postinstall": "node postinstall.js",
     "prepack": "bun run build && bun run artifact-scan",
-    "artifact-scan": "bun pm pack --ignore-scripts --quiet --filename \"$PWD/domains-artifact-scan.tgz\" && bunx @hasna/contracts@0.14.1 artifact-scan domains-artifact-scan.tgz; rc=$?; rm -f \"$PWD/domains-artifact-scan.tgz\"; exit $rc"
+    "artifact-scan": "bun pm pack --ignore-scripts --quiet --filename \"$PWD/domains-artifact-scan.tgz\" && bunx @hasna/contracts@1.0.2 artifact-scan domains-artifact-scan.tgz; rc=$?; rm -f \"$PWD/domains-artifact-scan.tgz\"; exit $rc"
   },
   "keywords": [
     "domains",
@@ -98,8 +98,6 @@
     "@aws-sdk/client-route-53": "^3.1067.0",
     "@aws-sdk/client-route-53-domains": "^3.1067.0",
     "@aws-sdk/credential-provider-ini": "3.972.53",
-    "@hasna/contracts": "0.14.1",
-    "@hasna/paths": "0.1.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
@@ -121,8 +119,8 @@
     }
   },
   "devDependencies": {
-    "@hasna/mcp-harness": "0.1.0",
-    "@types/bun": "^1.3.14",
+    "@hasna/contracts": "1.0.2",
+    "@types/bun": "1.3.14",
     "@types/pg": "^8.20.0",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.14",

package/postinstall.js

@@ -1,34 +1,33 @@
-// Best-effort install-time creation of the domains home directory, resolving
-// the SAME effective home the runtime uses (src/lib/app-home.ts): an exact-app
-// override (HASNA_DOMAINS_HOME / DOMAINS_HOME / HASNA_DOMAINS_DIR / DOMAINS_DIR)
-// wins; otherwise the @hasna/paths XDG data home once adopted (HASNA_DATA_HOME
-// set, or domains.db already migrated there); otherwise the legacy
-// ~/.hasna/domains default. Failures are non-fatal: the runtime creates the
-// same directory on first use.
+// Best-effort install-time creation of the domains LOCAL DATA home directory,
+// resolving the SAME effective home the runtime uses (src/lib/app-home.ts):
+// an exact-app override (HASNA_DOMAINS_HOME / HASNA_DOMAINS_DIR, then the
+// legacy unprefixed DOMAINS_HOME / DOMAINS_DIR aliases) wins; otherwise
+// $HASNA_HOME/domains (the shared root override); otherwise the legacy
+// ~/.hasna/domains default. Faithfully mirrors the runtime module — no
+// @hasna/paths, no XDG, no HASNA_*_HOME kind overrides (stripped, hasna/apps#1720
+// class B). Failures are non-fatal: the runtime creates the same directory on
+// first use.
 import { chmodSync, existsSync, mkdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 
 try {
-  const { dataDir } = await import("@hasna/paths");
   const env = process.env;
   const override = (
     env["HASNA_DOMAINS_HOME"] ||
-    env["DOMAINS_HOME"] ||
     env["HASNA_DOMAINS_DIR"] ||
+    env["DOMAINS_HOME"] ||
     env["DOMAINS_DIR"] ||
     ""
   ).trim();
-  const dataHomeOverride = (env["HASNA_DATA_HOME"] || "").trim();
   const home = env["HOME"] || env["USERPROFILE"] || homedir();
 
   let dir;
   if (override) {
     dir = override;
   } else {
-    const resolved = dataDir({ app: "domains", home, env });
-    const adopted = Boolean(dataHomeOverride) || existsSync(join(resolved, "domains.db"));
-    dir = adopted ? resolved : join(home, ".hasna", "domains");
+    const hasnaHome = (env["HASNA_HOME"] || "").trim();
+    dir = hasnaHome ? join(hasnaHome, "domains") : join(home, ".hasna", "domains");
   }
 
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 0o700 });
@@ -39,4 +38,4 @@ try {
   }
 } catch {
   // never fail an install over pre-created directories
-}
+}