@hasna/shortlinks 0.1.21 → 0.1.23

package/dist/pg-store.js

@@ -0,0 +1,598 @@
+// @bun
+// src/pg-store.ts
+import { createHash } from "crypto";
+
+// src/config.ts
+import { existsSync, linkSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
+import { randomBytes } from "crypto";
+import { homedir } from "os";
+import { dirname, join, resolve } from "path";
+var SERVICE_NAME = "shortlinks";
+var DEFAULT_DATA_DIR = join(homedir(), ".hasna", SERVICE_NAME);
+function getDataDir() {
+  return resolve(process.env.SHORTLINKS_HOME || DEFAULT_DATA_DIR);
+}
+function ensureDataDir() {
+  const dir = getDataDir();
+  mkdirSync(dir, { recursive: true });
+  return dir;
+}
+function getClickSaltPath() {
+  return join(ensureDataDir(), "click-salt");
+}
+function readClickSaltFile(path) {
+  try {
+    const saved = readFileSync(path, "utf-8").trim();
+    return saved || null;
+  } catch {
+    return null;
+  }
+}
+function clickSaltError(path, error) {
+  const detail = error instanceof Error ? error.message : String(error);
+  return new Error(`Could not initialize click salt at ${path}. Set SHORTLINKS_CLICK_SALT or fix data directory permissions. ${detail}`);
+}
+function getClickSalt() {
+  const explicit = process.env.SHORTLINKS_CLICK_SALT?.trim();
+  if (explicit)
+    return explicit;
+  const path = getClickSaltPath();
+  const saved = readClickSaltFile(path);
+  if (saved)
+    return saved;
+  const generated = randomBytes(32).toString("hex");
+  const tempPath = `${path}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync(tempPath, `${generated}
+`, { flag: "wx", mode: 384 });
+    try {
+      linkSync(tempPath, path);
+      return generated;
+    } catch (error) {
+      const winner = readClickSaltFile(path);
+      if (winner)
+        return winner;
+      throw clickSaltError(path, error);
+    } finally {
+      try {
+        unlinkSync(tempPath);
+      } catch {}
+    }
+  } catch (error) {
+    const winner = readClickSaltFile(path);
+    if (winner)
+      return winner;
+    throw clickSaltError(path, error);
+  }
+}
+function normalizeHostname(input) {
+  const raw = input.trim().toLowerCase();
+  if (!raw)
+    throw new Error("Domain is required.");
+  const withProtocol = raw.includes("://") ? raw : `https://${raw}`;
+  let hostname;
+  try {
+    hostname = new URL(withProtocol).hostname;
+  } catch {
+    throw new Error(`Invalid domain: ${input}`);
+  }
+  hostname = hostname.replace(/\.$/, "");
+  const labels = hostname.split(".");
+  const labelsAreValid = labels.every((label) => label.length >= 1 && label.length <= 63 && /^[a-z0-9-]+$/.test(label) && !label.startsWith("-") && !label.endsWith("-"));
+  if (hostname.length > 253 || !labelsAreValid) {
+    throw new Error(`Invalid domain: ${input}`);
+  }
+  return hostname;
+}
+function formatShortUrl(hostname, slug, publicBaseUrl) {
+  if (publicBaseUrl) {
+    const base = publicBaseUrl.endsWith("/") ? publicBaseUrl : `${publicBaseUrl}/`;
+    return new URL(slug, base).toString();
+  }
+  return `https://${hostname}/${slug}`;
+}
+
+// src/database.ts
+function now() {
+  return new Date().toISOString();
+}
+function makeId(prefix) {
+  const bytes = crypto.getRandomValues(new Uint8Array(12));
+  const hex = [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `${prefix}_${hex}`;
+}
+
+// src/machine.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { hostname } from "os";
+import { join as join2 } from "path";
+
+// src/slug.ts
+import { randomBytes as randomBytes2 } from "crypto";
+var SLUG_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+var DEFAULT_SLUG_LENGTH = 7;
+function randomToken(length = DEFAULT_SLUG_LENGTH) {
+  if (length < 1 || length > 128)
+    throw new Error("Token length must be between 1 and 128.");
+  const bytes = randomBytes2(length);
+  let out = "";
+  for (let i = 0;i < length; i += 1) {
+    out += SLUG_ALPHABET[bytes[i] % SLUG_ALPHABET.length];
+  }
+  return out;
+}
+function normalizeSlug(slug) {
+  const normalized = slug.trim().replace(/^\/+/, "").replace(/\/+$/, "");
+  if (!normalized)
+    throw new Error("Slug is required.");
+  if (!/^[A-Za-z0-9_-]{1,96}$/.test(normalized)) {
+    throw new Error("Slug can only contain letters, numbers, underscores, and dashes.");
+  }
+  return normalized;
+}
+
+// src/machine.ts
+function getMachineId() {
+  const path = join2(ensureDataDir(), "machine-id");
+  if (existsSync2(path)) {
+    const existing = readFileSync2(path, "utf-8").trim();
+    if (existing)
+      return existing;
+  }
+  const safeHost = hostname().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+  const id = `${safeHost || "machine"}-${randomToken(8).toLowerCase()}`;
+  writeFileSync2(path, `${id}
+`);
+  return id;
+}
+
+// src/runtime.ts
+var SHORTLINKS_RUNTIME_ENV = {
+  store: "HASNA_SHORTLINKS_STORE",
+  databaseUrl: "HASNA_SHORTLINKS_DATABASE_URL",
+  databaseSsl: "HASNA_SHORTLINKS_DATABASE_SSL"
+};
+var SHORTLINKS_RUNTIME_FALLBACK_ENV = {
+  store: "SHORTLINKS_STORE",
+  databaseUrl: "SHORTLINKS_DATABASE_URL",
+  databaseSsl: "SHORTLINKS_DATABASE_SSL"
+};
+function getShortlinksDatabaseUrl(env = process.env) {
+  return readRuntimeEnv(env, "databaseUrl").value;
+}
+function getShortlinksDatabaseSsl(env = process.env) {
+  return parseBoolean(readRuntimeEnv(env, "databaseSsl").value, true);
+}
+function readRuntimeEnv(env, key) {
+  const primary = SHORTLINKS_RUNTIME_ENV[key];
+  const primaryValue = clean(env[primary]);
+  if (primaryValue)
+    return { name: primary, value: primaryValue };
+  const fallback = SHORTLINKS_RUNTIME_FALLBACK_ENV[key];
+  return { name: fallback, value: clean(env[fallback]) };
+}
+function parseBoolean(value, fallback) {
+  const normalized = clean(value)?.toLowerCase();
+  if (!normalized)
+    return fallback;
+  if (["1", "true", "yes", "on"].includes(normalized))
+    return true;
+  if (["0", "false", "no", "off"].includes(normalized))
+    return false;
+  throw new Error(`${SHORTLINKS_RUNTIME_ENV.databaseSsl} must be true or false`);
+}
+function clean(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : undefined;
+}
+
+// src/pg-store.ts
+function parseJsonObject(value) {
+  if (!value)
+    return {};
+  if (typeof value === "object" && !Array.isArray(value))
+    return value;
+  try {
+    const parsed = JSON.parse(String(value));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+async function loadPgPool() {
+  const importer = new Function("specifier", "return import(specifier)");
+  const module = await importer("pg");
+  return module.Pool;
+}
+function toPostgresSql(sql) {
+  let index = 0;
+  return sql.replace(/\?/g, () => `$${++index}`);
+}
+function createPgPoolConfig(connectionString, options = {}) {
+  const ssl = options.ssl ?? true;
+  return {
+    connectionString,
+    ...ssl ? { ssl: { rejectUnauthorized: true } } : { ssl: false }
+  };
+}
+
+class PgPoolAdapter {
+  pool;
+  constructor(pool) {
+    this.pool = pool;
+  }
+  static async create(connectionString, options = {}) {
+    const Pool = await loadPgPool();
+    return new PgPoolAdapter(new Pool(createPgPoolConfig(connectionString, options)));
+  }
+  async get(sql, ...params) {
+    const result = await this.pool.query(toPostgresSql(sql), params);
+    return result.rows[0] ?? null;
+  }
+  async all(sql, ...params) {
+    const result = await this.pool.query(toPostgresSql(sql), params);
+    return result.rows;
+  }
+  async run(sql, ...params) {
+    return this.pool.query(toPostgresSql(sql), params);
+  }
+  async close() {
+    await this.pool.end();
+  }
+}
+function toIsoString(value) {
+  if (value instanceof Date)
+    return value.toISOString();
+  return String(value);
+}
+function nullableIso(value) {
+  if (value === null || value === undefined)
+    return null;
+  return toIsoString(value);
+}
+function domainFromRow(row) {
+  return {
+    ...row,
+    default_domain: Boolean(row.default_domain),
+    synced_at: nullableIso(row.synced_at),
+    created_at: toIsoString(row.created_at),
+    updated_at: toIsoString(row.updated_at),
+    metadata: parseJsonObject(row.metadata)
+  };
+}
+function linkFromRow(row) {
+  return {
+    ...row,
+    active: Boolean(row.active),
+    expires_at: nullableIso(row.expires_at),
+    synced_at: nullableIso(row.synced_at),
+    created_at: toIsoString(row.created_at),
+    updated_at: toIsoString(row.updated_at),
+    metadata: parseJsonObject(row.metadata),
+    short_url: formatShortUrl(row.hostname, row.slug)
+  };
+}
+function validateDestinationUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new Error(`Invalid destination URL: ${url}`);
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error("Destination URL must start with http:// or https://.");
+  }
+  return parsed.toString();
+}
+function isoOrNull(input) {
+  if (!input)
+    return null;
+  const date = new Date(input);
+  if (Number.isNaN(date.getTime()))
+    throw new Error(`Invalid date: ${input}`);
+  return date.toISOString();
+}
+function clickFromRow(row) {
+  return {
+    ...row,
+    clicked_at: toIsoString(row.clicked_at),
+    synced_at: nullableIso(row.synced_at),
+    created_at: toIsoString(row.created_at),
+    updated_at: toIsoString(row.updated_at),
+    metadata: parseJsonObject(row.metadata)
+  };
+}
+
+class PgShortlinksStore {
+  pg;
+  constructor(pg) {
+    this.pg = pg;
+  }
+  static async fromConnectionString(connectionString, options = {}) {
+    return new PgShortlinksStore(await PgPoolAdapter.create(connectionString, options));
+  }
+  static async fromEnv(env = process.env) {
+    const connectionString = getShortlinksDatabaseUrl(env);
+    if (!connectionString) {
+      throw new Error("HASNA_SHORTLINKS_DATABASE_URL is required when shortlinks uses the postgres store");
+    }
+    return PgShortlinksStore.fromConnectionString(connectionString, { ssl: getShortlinksDatabaseSsl(env) });
+  }
+  async close() {
+    await this.pg.close?.();
+  }
+  async addDomain(input) {
+    const hostname2 = normalizeHostname(input.hostname);
+    const timestamp = now();
+    const machineId = getMachineId();
+    const existing = await this.getDomain(hostname2);
+    const id = existing?.id || makeId("dom");
+    if (input.defaultDomain) {
+      await this.pg.run("UPDATE domains SET default_domain = 0, updated_at = ? WHERE default_domain = 1", timestamp);
+    }
+    await this.pg.run(`
+      INSERT INTO domains (
+        id, hostname, provider, default_domain, cloudflare_zone_id, cloudflare_account_id,
+        cloudflare_worker_name, origin_url, notes, metadata, machine_id, synced_at, created_at, updated_at
+      )
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?)
+      ON CONFLICT(hostname) DO UPDATE SET
+        provider = excluded.provider,
+        default_domain = excluded.default_domain,
+        cloudflare_zone_id = COALESCE(excluded.cloudflare_zone_id, domains.cloudflare_zone_id),
+        cloudflare_account_id = COALESCE(excluded.cloudflare_account_id, domains.cloudflare_account_id),
+        cloudflare_worker_name = COALESCE(excluded.cloudflare_worker_name, domains.cloudflare_worker_name),
+        origin_url = COALESCE(excluded.origin_url, domains.origin_url),
+        notes = COALESCE(excluded.notes, domains.notes),
+        metadata = excluded.metadata,
+        machine_id = excluded.machine_id,
+        synced_at = NULL,
+        updated_at = excluded.updated_at
+    `, id, hostname2, input.provider || existing?.provider || "manual", input.defaultDomain ?? existing?.default_domain ? 1 : 0, input.cloudflareZoneId || existing?.cloudflare_zone_id || null, input.cloudflareAccountId || existing?.cloudflare_account_id || null, input.cloudflareWorkerName || existing?.cloudflare_worker_name || null, input.originUrl || existing?.origin_url || null, input.notes || existing?.notes || null, JSON.stringify(input.metadata || existing?.metadata || {}), machineId, existing?.created_at || timestamp, timestamp);
+    return await this.getDomain(hostname2);
+  }
+  async listDomains() {
+    const rows = await this.pg.all(`
+      SELECT * FROM domains
+      ORDER BY default_domain DESC, hostname ASC
+    `);
+    return rows.map(domainFromRow);
+  }
+  async getDomain(hostnameOrId) {
+    const normalized = hostnameOrId.includes(".") || hostnameOrId.includes("://") ? normalizeHostname(hostnameOrId) : hostnameOrId;
+    const row = await this.pg.get(`
+      SELECT * FROM domains WHERE hostname = ? OR id = ? LIMIT 1
+    `, normalized, hostnameOrId);
+    return row ? domainFromRow(row) : null;
+  }
+  async getDefaultDomain() {
+    const row = await this.pg.get(`
+      SELECT * FROM domains ORDER BY default_domain DESC, created_at ASC LIMIT 1
+    `);
+    return row ? domainFromRow(row) : null;
+  }
+  async createLink(input) {
+    const domain = input.domain ? await this.getDomain(input.domain) : await this.getDefaultDomain();
+    if (!domain) {
+      throw new Error("No domain configured. Run `shortlinks domain add <domain> --default` first.");
+    }
+    const destinationUrl = validateDestinationUrl(input.destinationUrl);
+    const timestamp = now();
+    const machineId = getMachineId();
+    const expiresAt = isoOrNull(input.expiresAt);
+    const slug = input.slug ? normalizeSlug(input.slug) : await this.generateAvailableSlug(domain.id, input.slugLength || DEFAULT_SLUG_LENGTH);
+    try {
+      await this.pg.run(`
+        INSERT INTO links (
+          id, domain_id, slug, destination_url, title, active, expires_at, metadata,
+          machine_id, synced_at, created_at, updated_at
+        )
+        VALUES (?, ?, ?, ?, ?, 1, ?, ?, ?, NULL, ?, ?)
+      `, makeId("lnk"), domain.id, slug, destinationUrl, input.title || null, expiresAt, JSON.stringify(input.metadata || {}), machineId, timestamp, timestamp);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (message.includes("unique") || message.includes("duplicate")) {
+        throw new Error(`Slug already exists for ${domain.hostname}: ${slug}`);
+      }
+      throw error;
+    }
+    return await this.getLink(domain.hostname, slug);
+  }
+  async listLinks(options = {}) {
+    const params = [];
+    let where = "WHERE 1 = 1";
+    if (options.domain) {
+      where += " AND d.hostname = ?";
+      params.push(normalizeHostname(options.domain));
+    }
+    if (options.activeOnly)
+      where += " AND l.active = 1";
+    params.push(options.limit || 100);
+    const rows = await this.pg.all(`
+      SELECT l.*, d.hostname
+      FROM links l
+      JOIN domains d ON d.id = l.domain_id
+      ${where}
+      ORDER BY l.created_at DESC
+      LIMIT ?
+    `, ...params);
+    return rows.map(linkFromRow);
+  }
+  async getLink(domainOrSlug, maybeSlug) {
+    const slug = normalizeSlug(maybeSlug || domainOrSlug);
+    const params = [slug];
+    let domainClause = "";
+    if (maybeSlug) {
+      domainClause = "AND d.hostname = ?";
+      params.push(normalizeHostname(domainOrSlug));
+    }
+    const row = await this.pg.get(`
+      SELECT l.*, d.hostname
+      FROM links l
+      JOIN domains d ON d.id = l.domain_id
+      WHERE l.slug = ? ${domainClause}
+      ORDER BY d.default_domain DESC, l.created_at ASC
+      LIMIT 1
+    `, ...params);
+    return row ? linkFromRow(row) : null;
+  }
+  async totalStats() {
+    const row = await this.pg.get(`
+      SELECT
+        (SELECT COUNT(*)::int FROM domains) AS domains,
+        (SELECT COUNT(*)::int FROM links) AS links,
+        (SELECT COUNT(*)::int FROM clicks) AS clicks
+    `);
+    return row;
+  }
+  async resolve(hostname2, slug) {
+    const normalizedHost = normalizeHostname(hostname2);
+    const normalizedSlug = normalizeSlug(slug);
+    const row = await this.pg.get(`
+      SELECT l.*, d.hostname
+      FROM links l
+      JOIN domains d ON d.id = l.domain_id
+      WHERE d.hostname = ? AND l.slug = ?
+      LIMIT 1
+    `, normalizedHost, normalizedSlug);
+    if (row)
+      return linkFromRow(row);
+    const fallback = await this.pg.get(`
+      SELECT l.*, d.hostname
+      FROM links l
+      JOIN domains d ON d.id = l.domain_id
+      WHERE d.default_domain = 1 AND l.slug = ?
+      ORDER BY d.created_at ASC
+      LIMIT 1
+    `, normalizedSlug);
+    return fallback ? linkFromRow(fallback) : null;
+  }
+  async setLinkActive(domainOrSlug, maybeSlugOrActive, maybeActive) {
+    const active = typeof maybeSlugOrActive === "boolean" ? maybeSlugOrActive : Boolean(maybeActive);
+    const link = typeof maybeSlugOrActive === "boolean" ? await this.getLink(domainOrSlug) : await this.getLink(domainOrSlug, maybeSlugOrActive);
+    if (!link)
+      throw new Error("Link not found.");
+    const timestamp = now();
+    await this.pg.run(`
+      UPDATE links SET active = ?, updated_at = ?, synced_at = NULL WHERE id = ?
+    `, active ? 1 : 0, timestamp, link.id);
+    return await this.getLink(link.hostname, link.slug);
+  }
+  async deleteLink(domainOrSlug, maybeSlug) {
+    const link = maybeSlug ? await this.getLink(domainOrSlug, maybeSlug) : await this.getLink(domainOrSlug);
+    if (!link)
+      throw new Error("Link not found.");
+    await this.pg.run("DELETE FROM links WHERE id = ?", link.id);
+    return link;
+  }
+  async recordClick(link, input = {}) {
+    const timestamp = now();
+    const machineId = getMachineId();
+    const ipHash = input.ip ? this.hashIp(input.ip) : null;
+    const id = makeId("clk");
+    await this.pg.run(`
+      INSERT INTO clicks (
+        id, link_id, domain_id, slug, clicked_at, ip_hash, user_agent, referer,
+        country, city, metadata, machine_id, synced_at, created_at, updated_at
+      )
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?)
+    `, id, link.id, link.domain_id, link.slug, timestamp, ipHash, input.userAgent || null, input.referer || null, input.country || null, input.city || null, JSON.stringify(input.metadata || {}), machineId, timestamp, timestamp);
+    const row = await this.pg.get("SELECT * FROM clicks WHERE id = ?", id);
+    return clickFromRow(row);
+  }
+  async getStats(domainOrSlug, maybeSlug) {
+    const link = maybeSlug ? await this.getLink(domainOrSlug, maybeSlug) : await this.getLink(domainOrSlug);
+    if (!link)
+      throw new Error("Link not found.");
+    const summary = await this.pg.get(`
+      SELECT COUNT(*)::int AS clicks, MAX(clicked_at) AS last_clicked_at FROM clicks WHERE link_id = ?
+    `, link.id);
+    const topReferrers = await this.pg.all(`
+      SELECT referer, COUNT(*)::int AS clicks
+      FROM clicks
+      WHERE link_id = ?
+      GROUP BY referer
+      ORDER BY clicks DESC
+      LIMIT 10
+    `, link.id);
+    const topUserAgents = await this.pg.all(`
+      SELECT user_agent, COUNT(*)::int AS clicks
+      FROM clicks
+      WHERE link_id = ?
+      GROUP BY user_agent
+      ORDER BY clicks DESC
+      LIMIT 10
+    `, link.id);
+    return {
+      link,
+      clicks: summary.clicks,
+      last_clicked_at: nullableIso(summary.last_clicked_at),
+      top_referrers: topReferrers,
+      top_user_agents: topUserAgents
+    };
+  }
+  hashIp(ip) {
+    return createHash("sha256").update(`${getClickSalt()}:${ip}`).digest("hex");
+  }
+  async generateAvailableSlug(domainId, length) {
+    for (let attempt = 0;attempt < 32; attempt += 1) {
+      const slug = randomToken(length);
+      const exists = await this.pg.get(`
+        SELECT 1 FROM links WHERE domain_id = ? AND slug = ? LIMIT 1
+      `, domainId, slug);
+      if (!exists)
+        return slug;
+    }
+    throw new Error("Could not generate an unused slug after 32 attempts.");
+  }
+}
+async function applyPostgresMigrations(connectionString, migrations, options = {}) {
+  const Pool = await loadPgPool();
+  const pool = new Pool(createPgPoolConfig(connectionString, options));
+  const client = await pool.connect();
+  const run = (sql, ...params) => client.query(toPostgresSql(sql), params);
+  const get = async (sql, ...params) => {
+    const result = await run(sql, ...params);
+    return result.rows[0] ?? null;
+  };
+  const applied = [];
+  const skipped = [];
+  try {
+    await run("BEGIN");
+    await run(`
+      SELECT pg_advisory_xact_lock(hashtext(?))
+    `, "shortlinks:migrations");
+    await run(`
+      CREATE TABLE IF NOT EXISTS _shortlinks_migrations (
+        id INTEGER PRIMARY KEY,
+        service TEXT NOT NULL DEFAULT 'shortlinks',
+        applied_at TIMESTAMPTZ NOT NULL DEFAULT now()
+      )
+    `);
+    for (let i = 0;i < migrations.length; i += 1) {
+      const id = i + 1;
+      const existing = await get("SELECT id FROM _shortlinks_migrations WHERE id = ? LIMIT 1", id);
+      if (existing) {
+        skipped.push(id);
+        continue;
+      }
+      await run(migrations[i]);
+      await run("INSERT INTO _shortlinks_migrations (id, service, applied_at) VALUES (?, ?, now())", id, "shortlinks");
+      applied.push(id);
+    }
+    await run("COMMIT");
+    return { service: "shortlinks", applied, skipped };
+  } catch (error) {
+    try {
+      await run("ROLLBACK");
+    } catch {}
+    throw error;
+  } finally {
+    client.release();
+    await pool.end();
+  }
+}
+export {
+  applyPostgresMigrations,
+  PgShortlinksStore
+};

package/dist/runtime.d.ts

@@ -0,0 +1,65 @@
+export type ShortlinksStoreMode = "local" | "postgres";
+export type ShortlinksRuntimeEnv = Record<string, string | undefined>;
+export interface ShortlinksPostgresConfig {
+    provider: "postgres";
+    url: string;
+    ssl: boolean;
+}
+export interface ShortlinksRuntimeConfig {
+    service: "shortlinks";
+    mode: ShortlinksStoreMode;
+    database?: ShortlinksPostgresConfig;
+}
+export declare const SHORTLINKS_RUNTIME_ENV: {
+    readonly store: "HASNA_SHORTLINKS_STORE";
+    readonly databaseUrl: "HASNA_SHORTLINKS_DATABASE_URL";
+    readonly databaseSsl: "HASNA_SHORTLINKS_DATABASE_SSL";
+};
+export declare const SHORTLINKS_RUNTIME_FALLBACK_ENV: {
+    readonly store: "SHORTLINKS_STORE";
+    readonly databaseUrl: "SHORTLINKS_DATABASE_URL";
+    readonly databaseSsl: "SHORTLINKS_DATABASE_SSL";
+};
+export declare const CANONICAL_SHORTLINKS_POSTGRES_CLUSTER = "hasna-xyz-infra-apps-prod-postgres";
+export declare const CANONICAL_SHORTLINKS_POSTGRES_DATABASE = "shortlinks";
+export declare const CANONICAL_SHORTLINKS_RUNTIME_SECRET_PATH = "hasna/xyz/opensource/shortlinks/prod/postgres";
+export interface CanonicalShortlinksPostgresConfig {
+    cluster: typeof CANONICAL_SHORTLINKS_POSTGRES_CLUSTER;
+    database: typeof CANONICAL_SHORTLINKS_POSTGRES_DATABASE;
+    runtimeSecretPath: typeof CANONICAL_SHORTLINKS_RUNTIME_SECRET_PATH;
+    primaryEnv: typeof SHORTLINKS_RUNTIME_ENV.databaseUrl;
+    fallbackEnv: typeof SHORTLINKS_RUNTIME_FALLBACK_ENV.databaseUrl;
+}
+export interface RuntimeEnvStatus {
+    name: string;
+    active_name: string;
+    configured: boolean;
+}
+export interface ShortlinksRuntimeStatus {
+    ok: boolean;
+    service: "shortlinks";
+    mode: ShortlinksStoreMode;
+    local_default: boolean;
+    postgres_enabled: boolean;
+    database: {
+        configured: boolean;
+        provider: "postgres" | null;
+        redacted_url: string | null;
+        ssl: boolean | null;
+    };
+    env: Record<keyof typeof SHORTLINKS_RUNTIME_ENV, RuntimeEnvStatus>;
+    canonical: CanonicalShortlinksPostgresConfig;
+    issues: string[];
+    warnings: string[];
+    no_network: true;
+}
+export declare function getCanonicalShortlinksPostgresConfig(): CanonicalShortlinksPostgresConfig;
+export declare function parseShortlinksStoreMode(value: string | undefined): ShortlinksStoreMode;
+export declare function getShortlinksStoreMode(env?: ShortlinksRuntimeEnv): ShortlinksStoreMode;
+export declare function getShortlinksDatabaseUrl(env?: ShortlinksRuntimeEnv): string | undefined;
+export declare function getShortlinksDatabaseSsl(env?: ShortlinksRuntimeEnv): boolean;
+export declare function getShortlinksRuntimeEnvName(env: ShortlinksRuntimeEnv, key: keyof typeof SHORTLINKS_RUNTIME_ENV): string;
+export declare function loadShortlinksRuntimeConfig(env?: ShortlinksRuntimeEnv): ShortlinksRuntimeConfig;
+export declare function assertShortlinksPostgresConfig(config: ShortlinksRuntimeConfig): void;
+export declare function getShortlinksRuntimeStatus(env?: ShortlinksRuntimeEnv): ShortlinksRuntimeStatus;
+export declare function redactDatabaseUrl(value: string | undefined): string | null;