@nbt-dev/nbt 0.0.1 → 0.0.3

package/vendor/linux-x64/cartridges/dns/migrations/20260501210107_initial/migration.nbt

@@ -0,0 +1,32 @@
+migration initial {
+  add_entity DnsProvider
+  add_field DnsProvider type string default("")
+  add_field DnsProvider label string default("")
+  add_field DnsProvider apiToken string default("")
+  add_field DnsProvider accountId string default("")
+  add_field DnsProvider status string default("")
+  add_field DnsProvider lastCheckedAt u64 default(0)
+  add_unique DnsProvider [type, label]
+  add_entity Domain
+  add_field Domain name string default("")
+  add_field Domain providerId string default("")
+  add_field Domain providerZoneId string default("")
+  add_field Domain registrarStatus string default("")
+  add_field Domain nameservers string default("")
+  add_field Domain addedAt u64 default(0)
+  add_index Domain [providerId]
+  add_unique Domain [name]
+  add_entity DnsRecord
+  add_field DnsRecord domainId string default("")
+  add_field DnsRecord providerRecordId string default("")
+  add_field DnsRecord type string default("")
+  add_field DnsRecord name string default("")
+  add_field DnsRecord value string default("")
+  add_field DnsRecord priority s32 default(0)
+  add_field DnsRecord ttl s32 default(0)
+  add_field DnsRecord proxied bool default(false)
+  add_field DnsRecord managedByCart string default("")
+  add_field DnsRecord managedByRef string default("")
+  add_index DnsRecord [domainId]
+  add_index DnsRecord [managedByCart, managedByRef]
+}

package/vendor/linux-x64/cartridges/dns/migrations/20260501210107_initial/schema_snapshot.nbt

@@ -0,0 +1,36 @@
+entity DnsProvider {
+  type: string
+  label: string
+  apiToken: string
+  accountId: string
+  status: string
+  lastCheckedAt: u64
+  @@unique([type, label])
+}
+
+entity Domain {
+  name: string
+  providerId: string
+  providerZoneId: string
+  registrarStatus: string
+  nameservers: string
+  addedAt: u64
+  @@unique([name])
+  @@index([providerId])
+}
+
+entity DnsRecord {
+  domainId: string
+  providerRecordId: string
+  type: string
+  name: string
+  value: string
+  priority: s32
+  ttl: s32
+  proxied: bool
+  managedByCart: string
+  managedByRef: string
+  @@index([domainId])
+  @@index([managedByCart, managedByRef])
+}
+

package/vendor/linux-x64/cartridges/dns/schema.nbt

@@ -0,0 +1,68 @@
+# Domains cart — customer DNS + registrar management.
+#
+# Hidden layer. Users see "Domains" in the portal; never "Cloudflare". When
+# the user pastes their CF API token, this cart validates it, stores it, and
+# then owns every DNS record request that touches a domain they've connected.
+#
+# Used by:
+#   - Email cart (MailDomain) — writes MX / TXT verify / DKIM CNAMEs for
+#     outbound+inbound mail on customer domains.
+#   - Future: TLS cart, custom gateway-domains cart.
+#
+# Schema only. All behavior (token verify, CF API calls, DNS record CRUD,
+# TXT verify polling) lives in native/runtime.jai as regular Jai over the
+# generated ORM — see domains_register_extra_routes.
+
+
+
+entity DnsProvider {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  type: string               # "cloudflare"
+  label: string              # user-facing name ("my CF account")
+  apiToken: string           # raw token (TODO: encrypt at rest — same status as phone cart's authToken)
+  accountId: string          # CF account_id, needed for add_zone + registrar calls (optional)
+  status: string             # "ACTIVE" | "INVALID" | "DISCONNECTED"
+  lastCheckedAt: u64         # ms epoch — updated on connect + test
+
+  @@unique([type, label])
+}
+
+entity Domain {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  name: string               # "acme.com"
+  providerId: string         # FK DnsProvider.id — empty if no provider attached (manual DNS)
+  providerZoneId: string     # CF zone id
+  registrarStatus: string    # "external" | "cf" | "unknown"
+  nameservers: string        # JSON array of NS hostnames returned by CF
+  addedAt: u64               # ms epoch
+
+  @@unique([name])
+  @@index([providerId])
+}
+
+# Local mirror of a DNS record. Written whenever the cart calls CF to create /
+# update / delete a record, so other carts can enumerate "what DNS is set up
+# for this domain" without re-hitting CF every time. `managedByCart` lets us
+# know which cart owns the record and may want to clean it up on teardown.
+entity DnsRecord {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  domainId: string
+  providerRecordId: string   # CF record id
+  type: string               # A, AAAA, MX, TXT, CNAME, NS
+  name: string               # FQDN
+  value: string              # target (IP, hostname, TXT value...)
+  priority: s32              # MX only; 0 otherwise
+  ttl: s32                   # 1 = CF auto
+  proxied: bool
+  managedByCart: string      # "email" | "tls" | ... | "" for user-created records
+  managedByRef: string       # entity id in owning cart (e.g. MailDomain.id)
+
+  @@index([domainId])
+  @@index([managedByCart, managedByRef])
+}

package/vendor/linux-x64/cartridges/email/migrations/20260427235207_initial/migration.nbt

@@ -0,0 +1,75 @@
+migration initial {
+  add_entity MailDomain
+  add_field MailDomain hostname string default("")
+  add_field MailDomain isDefault bool default(false)
+  add_field MailDomain domainId string default("")
+  add_field MailDomain sendgridParseId string default("")
+  add_field MailDomain sendgridDomainAuthId string default("")
+  add_field MailDomain verificationToken string default("")
+  add_field MailDomain verificationState string default("")
+  add_field MailDomain dkimState string default("")
+  add_field MailDomain spfState string default("")
+  add_field MailDomain createdAt u64 default(0)
+  add_field MailDomain verifiedAt u64 default(0)
+  add_unique MailDomain [hostname]
+  add_entity Inbox
+  add_field Inbox name string default("")
+  add_field Inbox ownerType string default("")
+  add_field Inbox ownerRef string default("")
+  add_field Inbox createdAt u64 default(0)
+  add_index Inbox [ownerType, ownerRef]
+  add_entity MailAddress
+  add_field MailAddress mailDomainId string default("")
+  add_field MailAddress localPart string default("")
+  add_field MailAddress inboxId string default("")
+  add_field MailAddress enabled bool default(false)
+  add_index MailAddress [mailDomainId]
+  add_index MailAddress [inboxId]
+  add_unique MailAddress [mailDomainId, localPart]
+  add_entity Email
+  add_field Email inboxId string default("")
+  add_field Email direction string default("")
+  add_field Email messageId string default("")
+  add_field Email sendgridMessageId string default("")
+  add_field Email inReplyTo string default("")
+  add_field Email referencesJson string default("")
+  add_field Email fromAddr string default("")
+  add_field Email fromName string default("")
+  add_field Email toAddrsJson string default("")
+  add_field Email ccAddrsJson string default("")
+  add_field Email bccAddrsJson string default("")
+  add_field Email subject string default("")
+  add_field Email textBody string default("")
+  add_field Email htmlBody string default("")
+  add_field Email headersRaw string default("")
+  add_field Email spamScore string default("")
+  add_field Email receivedAt u64 default(0)
+  add_field Email sentAt u64 default(0)
+  add_field Email status string default("")
+  add_index Email [inboxId, receivedAt]
+  add_index Email [sendgridMessageId]
+  add_index Email [messageId]
+  add_entity EmailAttachment
+  add_field EmailAttachment emailId string default("")
+  add_field EmailAttachment filename string default("")
+  add_field EmailAttachment contentType string default("")
+  add_field EmailAttachment sizeBytes u64 default(0)
+  add_field EmailAttachment contentB64 string default("")
+  add_field EmailAttachment contentId string default("")
+  add_index EmailAttachment [emailId]
+  add_entity EmailTemplate
+  add_field EmailTemplate name string default("")
+  add_field EmailTemplate subjectTmpl string default("")
+  add_field EmailTemplate textTmpl string default("")
+  add_field EmailTemplate htmlTmpl string default("")
+  add_unique EmailTemplate [name]
+  add_entity EmailEvent
+  add_field EmailEvent emailId string default("")
+  add_field EmailEvent sendgridMessageId string default("")
+  add_field EmailEvent type string default("")
+  add_field EmailEvent timestamp u64 default(0)
+  add_field EmailEvent reason string default("")
+  add_field EmailEvent rawJson string default("")
+  add_index EmailEvent [emailId]
+  add_index EmailEvent [sendgridMessageId]
+}

package/vendor/linux-x64/cartridges/email/migrations/20260427235207_initial/schema_snapshot.nbt

@@ -0,0 +1,87 @@
+entity MailDomain {
+  hostname: string
+  isDefault: bool
+  domainId: string
+  sendgridParseId: string
+  sendgridDomainAuthId: string
+  verificationToken: string
+  verificationState: string
+  dkimState: string
+  spfState: string
+  createdAt: u64
+  verifiedAt: u64
+  @@unique([hostname])
+}
+
+entity Inbox {
+  name: string
+  ownerType: string
+  ownerRef: string
+  createdAt: u64
+  @@index([ownerType, ownerRef])
+}
+
+entity MailAddress {
+  mailDomainId: string
+  localPart: string
+  inboxId: string
+  enabled: bool
+  @@unique([mailDomainId, localPart])
+  @@index([mailDomainId])
+  @@index([inboxId])
+}
+
+entity Email {
+  inboxId: string
+  direction: string
+  messageId: string
+  sendgridMessageId: string
+  inReplyTo: string
+  referencesJson: string
+  fromAddr: string
+  fromName: string
+  toAddrsJson: string
+  ccAddrsJson: string
+  bccAddrsJson: string
+  subject: string
+  textBody: string
+  htmlBody: string
+  headersRaw: string
+  spamScore: string
+  receivedAt: u64
+  sentAt: u64
+  status: string
+  @@index([inboxId, receivedAt])
+  @@index([sendgridMessageId])
+  @@index([messageId])
+}
+
+entity EmailAttachment {
+  emailId: string
+  filename: string
+  contentType: string
+  sizeBytes: u64
+  contentB64: string
+  contentId: string
+  @@index([emailId])
+}
+
+entity EmailTemplate {
+  name: string
+  subjectTmpl: string
+  textTmpl: string
+  htmlTmpl: string
+  @@unique([name])
+}
+
+entity EmailEvent {
+  emailId: string
+  sendgridMessageId: string
+  type: string
+  timestamp: u64
+  reason: string
+  rawJson: string
+  @@index([emailId])
+  @@index([sendgridMessageId])
+}
+

package/vendor/linux-x64/cartridges/email/schema.nbt

@@ -0,0 +1,145 @@
+# Email cartridge — transactional send + synthetic inboxes.
+#
+# Provider: SendGrid (modules/sendgrid). Nothing in the user-facing surface
+# mentions SendGrid; the cart is branded "Email".
+#
+# Per-console model:
+#   - Every console auto-provisions `<console>.nbt.dev` as the default mail
+#     domain on first boot (via MailDomain.ensure_default — hit once after
+#     deploy). Users can create inboxes + addresses under it with no DNS
+#     work.
+#   - Custom domains (acme.com) go through the Domains cart: user connects
+#     Cloudflare, runs MailDomain.register → we write MX + DKIM CNAMEs,
+#     register with SendGrid Inbound Parse + Domain Authentication, poll
+#     until everything is green.
+#
+# Ops prerequisites (one-time, see plans/squishy-puzzling-spindle.md):
+#   - SENDGRID_API_KEY in console env.
+#   - SENDGRID_EVENT_PUBKEY in console env (base64 SPKI for event webhook verification).
+#   - `*.nbt.dev MX 10 mx.sendgrid.net` at zone level.
+#   - SendGrid Inbound Parse wildcard entry + per-console entries (latter are
+#     created programmatically by MailDomain.ensure_default).
+
+# Behavior (the former main.nbt actions) lives in native/runtime.jai over the
+# generated ORM — see email_register_extra_routes. These imports trigger the
+# #load of the native files into the cart module scope.
+import crypto from "crypto"
+
+# Auth policy for the hand-written routes (formerly @public actions). The
+# handlers live in native/runtime.jai; these keep the daemon's public-route
+# manifest correct so the /api/* auth gate is bypassed for SendGrid webhooks.
+@public_route "/api/email/inbound"
+@public_route "/api/email/events"
+
+entity MailDomain {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  hostname: string               # "acme.nbt.dev" or "acme.com"
+  isDefault: bool                # true for built-in <console>.nbt.dev
+  domainId: string               # FK domains cart Domain (empty for default)
+  sendgridParseId: string        # returned by sendgrid_create_inbound_parse (string id, may be hostname)
+  sendgridDomainAuthId: string   # returned by sendgrid_create_domain_auth (numeric id as string)
+  verificationToken: string      # TXT verify token (custom domains only)
+  verificationState: string      # "pending" | "verified" | "failed"
+  dkimState: string              # "pending" | "published" | "verified" | "failed"
+  spfState: string
+  verifiedAt: u64
+
+  @@unique([hostname])
+}
+
+entity Inbox {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  name: string
+  ownerType: string              # "user" | "project" | "system"
+  ownerRef: string               # id in the owning scope (empty for system)
+
+  @@index([ownerType, ownerRef])
+}
+
+entity MailAddress {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  mailDomainId: string
+  localPart: string              # "sales" or "*" for catch-all
+  inboxId: string
+  enabled: bool
+
+  @@unique([mailDomainId, localPart])
+  @@index([mailDomainId])
+  @@index([inboxId])
+}
+
+entity Email {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  inboxId: string
+  direction: string              # "inbound" | "outbound"
+  messageId: string              # RFC 5322 Message-ID (outbound: we generate; inbound: from headers)
+  sendgridMessageId: string      # SendGrid's X-Message-Id (outbound) or sg_message_id (inbound/event)
+  inReplyTo: string
+  referencesJson: string         # JSON array of Message-IDs
+  fromAddr: string
+  fromName: string
+  toAddrsJson: string            # JSON array
+  ccAddrsJson: string
+  bccAddrsJson: string
+  subject: string
+  textBody: string
+  htmlBody: string
+  headersRaw: string             # full headers blob for inbound (empty for outbound)
+  spamScore: string              # as returned by SendGrid, "" if not scored
+  receivedAt: u64
+  sentAt: u64
+  status: string                 # inbound: "received" | outbound: "queued" | "sent" | "delivered" | "bounced" | "dropped"
+
+  @@index([inboxId, receivedAt])
+  @@index([sendgridMessageId])
+  @@index([messageId])
+}
+
+entity EmailAttachment {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  emailId: string
+  filename: string
+  contentType: string
+  sizeBytes: u64
+  contentB64: string             # base64-encoded file bytes — simple for Phase 1; replace with docstore/blob ref later
+  contentId: string              # for inline images
+
+  @@index([emailId])
+}
+
+entity EmailTemplate {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  name: string
+  subjectTmpl: string
+  textTmpl: string
+  htmlTmpl: string
+
+  @@unique([name])
+}
+
+entity EmailEvent {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  emailId: string
+  sendgridMessageId: string
+  type: string                   # delivered | bounced | opened | clicked | dropped | deferred | spamreport | unsubscribe | processed
+  timestamp: u64                 # seconds since epoch (as SendGrid emits)
+  reason: string
+  rawJson: string                # entire event JSON slice for debugging
+
+  @@index([emailId])
+  @@index([sendgridMessageId])
+}

package/vendor/linux-x64/cartridges/ingest/migrations/20260424144652_initial/migration.nbt

@@ -0,0 +1,18 @@
+migration initial {
+  add_entity Endpoint
+  add_field Endpoint name string default("")
+  add_field Endpoint slug string default("")
+  add_field Endpoint status string default("")
+  add_field Endpoint secret string default("")
+  add_field Endpoint payloadCount u64 default(0)
+  add_field Endpoint errorCount u64 default(0)
+  add_unique Endpoint [slug]
+  add_entity Payload
+  add_field Payload endpointId string default("")
+  add_field Payload headers string default("")
+  add_field Payload body document default(0)
+  add_field Payload status string default("")
+  add_field Payload sourceIp string default("")
+  add_field Payload errorMessage string default("")
+  add_index Payload [endpointId]
+}

package/vendor/linux-x64/cartridges/ingest/migrations/20260424144652_initial/schema_snapshot.nbt

@@ -0,0 +1,20 @@
+entity Endpoint {
+  name: string
+  slug: string
+  status: string
+  secret: string
+  payloadCount: u64
+  errorCount: u64
+  @@unique([slug])
+}
+
+entity Payload {
+  endpointId: string
+  headers: string
+  body: document
+  status: string
+  sourceIp: string
+  errorMessage: string
+  @@index([endpointId])
+}
+

package/vendor/linux-x64/cartridges/ingest/migrations/20260429203747_schema_update/migration.nbt

@@ -0,0 +1,3 @@
+migration schema_update {
+  add_field Endpoint systemId string default("")
+}

package/vendor/linux-x64/cartridges/ingest/migrations/20260429203747_schema_update/schema_snapshot.nbt

@@ -0,0 +1,21 @@
+entity Endpoint {
+  name: string
+  slug: string
+  status: string
+  secret: string
+  payloadCount: u64
+  errorCount: u64
+  systemId?: string
+  @@unique([slug])
+}
+
+entity Payload {
+  endpointId: string
+  headers: string
+  body: document
+  status: string
+  sourceIp: string
+  errorMessage: string
+  @@index([endpointId])
+}
+

package/vendor/linux-x64/cartridges/ingest/schema.nbt

@@ -0,0 +1,37 @@
+# Behavior (the former main.nbt actions) lives in native/runtime.jai over the
+# generated ORM — see
+# ingest_register_extra_routes. All routes stay auth-gated by the daemon
+# middleware (no @public_route), matching the pre-migration manifest.
+
+entity Endpoint {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  name: string
+  slug: string
+  status: string
+  secret: string
+  payloadCount: u64
+  errorCount: u64
+
+  # Legacy field retained for stored rows. Previously named a downstream
+  # dispatch target; no dispatch fires today (the webhook just stores the
+  # payload and acks 200).
+  systemId?: string
+
+  @@unique([slug])
+}
+
+entity Payload {
+  id: ulid
+  createdAt: DateTime @default(now())
+  updatedAt: DateTime @updatedAt
+  endpointId: string
+  headers: string
+  body: document @scope(endpointId)
+  status: string
+  sourceIp: string
+  errorMessage: string
+
+  @@index([endpointId])
+}

package/vendor/linux-x64/cartridges/notifications/migrations/20260430204408_initial/migration.nbt

@@ -0,0 +1,42 @@
+migration initial {
+  add_entity Notification
+  add_field Notification userId string default("")
+  add_field Notification projectId string default("")
+  add_field Notification sourceCart string default("")
+  add_field Notification sourceId string default("")
+  add_field Notification kind string default("")
+  add_field Notification title string default("")
+  add_field Notification body string default("")
+  add_field Notification url string default("")
+  add_field Notification payloadJson string default("")
+  add_field Notification readAt DateTime default(0)
+  add_field Notification archivedAt DateTime default(0)
+  add_index Notification [userId]
+  add_index Notification [projectId]
+  add_index Notification [sourceCart, sourceId]
+  add_entity NotificationDelivery
+  add_field NotificationDelivery notificationId string default("")
+  add_field NotificationDelivery userId string default("")
+  add_field NotificationDelivery channel string default("")
+  add_field NotificationDelivery status string default("")
+  add_field NotificationDelivery attempts u32 default(0)
+  add_field NotificationDelivery lastError string default("")
+  add_field NotificationDelivery providerMessageId string default("")
+  add_field NotificationDelivery lastAttemptAt DateTime default(0)
+  add_field NotificationDelivery sentAt DateTime default(0)
+  add_index NotificationDelivery [notificationId]
+  add_index NotificationDelivery [userId]
+  add_index NotificationDelivery [channel, status]
+  add_entity BrowserPushSubscription
+  add_field BrowserPushSubscription userId string default("")
+  add_field BrowserPushSubscription endpoint string default("")
+  add_field BrowserPushSubscription p256dh string default("")
+  add_field BrowserPushSubscription auth string default("")
+  add_field BrowserPushSubscription expirationTimeMs u64 default(0)
+  add_field BrowserPushSubscription userAgent string default("")
+  add_field BrowserPushSubscription deviceLabel string default("")
+  add_field BrowserPushSubscription lastSeenAt DateTime default(0)
+  add_field BrowserPushSubscription disabledAt DateTime default(0)
+  add_index BrowserPushSubscription [userId]
+  add_unique BrowserPushSubscription [endpoint]
+}

package/vendor/linux-x64/cartridges/notifications/migrations/20260430204408_initial/schema_snapshot.nbt

@@ -0,0 +1,46 @@
+entity Notification {
+  userId: string
+  projectId?: string
+  sourceCart?: string
+  sourceId?: string
+  kind: string
+  title: string
+  body?: string
+  url?: string
+  payloadJson?: string
+  readAt?: DateTime
+  archivedAt?: DateTime
+  @@index([userId])
+  @@index([projectId])
+  @@index([sourceCart, sourceId])
+}
+
+entity NotificationDelivery {
+  notificationId: string
+  userId: string
+  channel: string
+  status: string
+  attempts: u32
+  lastError?: string
+  providerMessageId?: string
+  lastAttemptAt?: DateTime
+  sentAt?: DateTime
+  @@index([notificationId])
+  @@index([userId])
+  @@index([channel, status])
+}
+
+entity BrowserPushSubscription {
+  userId: string
+  endpoint: string
+  p256dh: string
+  auth: string
+  expirationTimeMs?: u64
+  userAgent?: string
+  deviceLabel?: string
+  lastSeenAt: DateTime
+  disabledAt?: DateTime
+  @@unique([endpoint])
+  @@index([userId])
+}
+