@serve.zone/dcrouter 11.14.0 → 11.16.0

package/dist_ts/cache/documents/classes.cached.ip.reputation.d.ts

@@ -0,0 +1,119 @@
+import { CachedDocument } from '../classes.cached.document.js';
+/**
+ * IP reputation result data
+ */
+export interface IIPReputationData {
+    score: number;
+    isSpam: boolean;
+    isProxy: boolean;
+    isTor: boolean;
+    isVPN: boolean;
+    country?: string;
+    asn?: string;
+    org?: string;
+    blacklists?: string[];
+}
+/**
+ * CachedIPReputation - Stores IP reputation lookup results
+ *
+ * Caches the results of IP reputation checks to avoid repeated
+ * external API calls. Default TTL is 24 hours.
+ */
+export declare class CachedIPReputation extends CachedDocument<CachedIPReputation> {
+    createdAt: Date;
+    expiresAt: Date;
+    lastAccessedAt: Date;
+    /**
+     * IP address (unique identifier)
+     */
+    ipAddress: string;
+    /**
+     * Reputation score (0-100, higher = better)
+     */
+    score: number;
+    /**
+     * Whether the IP is flagged as spam source
+     */
+    isSpam: boolean;
+    /**
+     * Whether the IP is a known proxy
+     */
+    isProxy: boolean;
+    /**
+     * Whether the IP is a Tor exit node
+     */
+    isTor: boolean;
+    /**
+     * Whether the IP is a VPN endpoint
+     */
+    isVPN: boolean;
+    /**
+     * Country code (ISO 3166-1 alpha-2)
+     */
+    country: string;
+    /**
+     * Autonomous System Number
+     */
+    asn: string;
+    /**
+     * Organization name
+     */
+    org: string;
+    /**
+     * List of blacklists the IP appears on
+     */
+    blacklists: string[];
+    /**
+     * Number of times this IP has been checked
+     */
+    checkCount: number;
+    /**
+     * Number of connections from this IP
+     */
+    connectionCount: number;
+    /**
+     * Number of emails received from this IP
+     */
+    emailCount: number;
+    /**
+     * Number of spam emails from this IP
+     */
+    spamCount: number;
+    constructor();
+    /**
+     * Create from reputation data
+     */
+    static fromReputationData(ipAddress: string, data: IIPReputationData): CachedIPReputation;
+    /**
+     * Convert to reputation data object
+     */
+    toReputationData(): IIPReputationData;
+    /**
+     * Find by IP address
+     */
+    static findByIP(ipAddress: string): Promise<CachedIPReputation | null>;
+    /**
+     * Find all IPs flagged as spam
+     */
+    static findSpamIPs(): Promise<CachedIPReputation[]>;
+    /**
+     * Find IPs with score below threshold
+     */
+    static findLowScoreIPs(threshold: number): Promise<CachedIPReputation[]>;
+    /**
+     * Record a connection from this IP
+     */
+    recordConnection(): void;
+    /**
+     * Record an email from this IP
+     */
+    recordEmail(isSpam?: boolean): void;
+    /**
+     * Update the reputation data
+     */
+    updateReputation(data: IIPReputationData): void;
+    /**
+     * Check if this IP should be blocked
+     */
+    shouldBlock(): boolean;
+}

package/dist_ts/cache/documents/classes.cached.ip.reputation.js

@@ -0,0 +1,323 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import * as plugins from '../../plugins.js';
+import { CachedDocument, TTL } from '../classes.cached.document.js';
+import { CacheDb } from '../classes.cachedb.js';
+/**
+ * Helper to get the smartdata database instance
+ */
+const getDb = () => CacheDb.getInstance().getDb();
+/**
+ * CachedIPReputation - Stores IP reputation lookup results
+ *
+ * Caches the results of IP reputation checks to avoid repeated
+ * external API calls. Default TTL is 24 hours.
+ */
+let CachedIPReputation = (() => {
+    let _classDecorators = [plugins.smartdata.Collection(() => getDb())];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = CachedDocument;
+    let _createdAt_decorators;
+    let _createdAt_initializers = [];
+    let _createdAt_extraInitializers = [];
+    let _expiresAt_decorators;
+    let _expiresAt_initializers = [];
+    let _expiresAt_extraInitializers = [];
+    let _lastAccessedAt_decorators;
+    let _lastAccessedAt_initializers = [];
+    let _lastAccessedAt_extraInitializers = [];
+    let _ipAddress_decorators;
+    let _ipAddress_initializers = [];
+    let _ipAddress_extraInitializers = [];
+    let _score_decorators;
+    let _score_initializers = [];
+    let _score_extraInitializers = [];
+    let _isSpam_decorators;
+    let _isSpam_initializers = [];
+    let _isSpam_extraInitializers = [];
+    let _isProxy_decorators;
+    let _isProxy_initializers = [];
+    let _isProxy_extraInitializers = [];
+    let _isTor_decorators;
+    let _isTor_initializers = [];
+    let _isTor_extraInitializers = [];
+    let _isVPN_decorators;
+    let _isVPN_initializers = [];
+    let _isVPN_extraInitializers = [];
+    let _country_decorators;
+    let _country_initializers = [];
+    let _country_extraInitializers = [];
+    let _asn_decorators;
+    let _asn_initializers = [];
+    let _asn_extraInitializers = [];
+    let _org_decorators;
+    let _org_initializers = [];
+    let _org_extraInitializers = [];
+    let _blacklists_decorators;
+    let _blacklists_initializers = [];
+    let _blacklists_extraInitializers = [];
+    let _checkCount_decorators;
+    let _checkCount_initializers = [];
+    let _checkCount_extraInitializers = [];
+    let _connectionCount_decorators;
+    let _connectionCount_initializers = [];
+    let _connectionCount_extraInitializers = [];
+    let _emailCount_decorators;
+    let _emailCount_initializers = [];
+    let _emailCount_extraInitializers = [];
+    let _spamCount_decorators;
+    let _spamCount_initializers = [];
+    let _spamCount_extraInitializers = [];
+    var CachedIPReputation = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _createdAt_decorators = [plugins.smartdata.svDb()];
+            _expiresAt_decorators = [plugins.smartdata.svDb()];
+            _lastAccessedAt_decorators = [plugins.smartdata.svDb()];
+            _ipAddress_decorators = [plugins.smartdata.unI(), plugins.smartdata.svDb()];
+            _score_decorators = [plugins.smartdata.svDb()];
+            _isSpam_decorators = [plugins.smartdata.svDb()];
+            _isProxy_decorators = [plugins.smartdata.svDb()];
+            _isTor_decorators = [plugins.smartdata.svDb()];
+            _isVPN_decorators = [plugins.smartdata.svDb()];
+            _country_decorators = [plugins.smartdata.svDb()];
+            _asn_decorators = [plugins.smartdata.svDb()];
+            _org_decorators = [plugins.smartdata.svDb()];
+            _blacklists_decorators = [plugins.smartdata.svDb()];
+            _checkCount_decorators = [plugins.smartdata.svDb()];
+            _connectionCount_decorators = [plugins.smartdata.svDb()];
+            _emailCount_decorators = [plugins.smartdata.svDb()];
+            _spamCount_decorators = [plugins.smartdata.svDb()];
+            __esDecorate(null, null, _createdAt_decorators, { kind: "field", name: "createdAt", static: false, private: false, access: { has: obj => "createdAt" in obj, get: obj => obj.createdAt, set: (obj, value) => { obj.createdAt = value; } }, metadata: _metadata }, _createdAt_initializers, _createdAt_extraInitializers);
+            __esDecorate(null, null, _expiresAt_decorators, { kind: "field", name: "expiresAt", static: false, private: false, access: { has: obj => "expiresAt" in obj, get: obj => obj.expiresAt, set: (obj, value) => { obj.expiresAt = value; } }, metadata: _metadata }, _expiresAt_initializers, _expiresAt_extraInitializers);
+            __esDecorate(null, null, _lastAccessedAt_decorators, { kind: "field", name: "lastAccessedAt", static: false, private: false, access: { has: obj => "lastAccessedAt" in obj, get: obj => obj.lastAccessedAt, set: (obj, value) => { obj.lastAccessedAt = value; } }, metadata: _metadata }, _lastAccessedAt_initializers, _lastAccessedAt_extraInitializers);
+            __esDecorate(null, null, _ipAddress_decorators, { kind: "field", name: "ipAddress", static: false, private: false, access: { has: obj => "ipAddress" in obj, get: obj => obj.ipAddress, set: (obj, value) => { obj.ipAddress = value; } }, metadata: _metadata }, _ipAddress_initializers, _ipAddress_extraInitializers);
+            __esDecorate(null, null, _score_decorators, { kind: "field", name: "score", static: false, private: false, access: { has: obj => "score" in obj, get: obj => obj.score, set: (obj, value) => { obj.score = value; } }, metadata: _metadata }, _score_initializers, _score_extraInitializers);
+            __esDecorate(null, null, _isSpam_decorators, { kind: "field", name: "isSpam", static: false, private: false, access: { has: obj => "isSpam" in obj, get: obj => obj.isSpam, set: (obj, value) => { obj.isSpam = value; } }, metadata: _metadata }, _isSpam_initializers, _isSpam_extraInitializers);
+            __esDecorate(null, null, _isProxy_decorators, { kind: "field", name: "isProxy", static: false, private: false, access: { has: obj => "isProxy" in obj, get: obj => obj.isProxy, set: (obj, value) => { obj.isProxy = value; } }, metadata: _metadata }, _isProxy_initializers, _isProxy_extraInitializers);
+            __esDecorate(null, null, _isTor_decorators, { kind: "field", name: "isTor", static: false, private: false, access: { has: obj => "isTor" in obj, get: obj => obj.isTor, set: (obj, value) => { obj.isTor = value; } }, metadata: _metadata }, _isTor_initializers, _isTor_extraInitializers);
+            __esDecorate(null, null, _isVPN_decorators, { kind: "field", name: "isVPN", static: false, private: false, access: { has: obj => "isVPN" in obj, get: obj => obj.isVPN, set: (obj, value) => { obj.isVPN = value; } }, metadata: _metadata }, _isVPN_initializers, _isVPN_extraInitializers);
+            __esDecorate(null, null, _country_decorators, { kind: "field", name: "country", static: false, private: false, access: { has: obj => "country" in obj, get: obj => obj.country, set: (obj, value) => { obj.country = value; } }, metadata: _metadata }, _country_initializers, _country_extraInitializers);
+            __esDecorate(null, null, _asn_decorators, { kind: "field", name: "asn", static: false, private: false, access: { has: obj => "asn" in obj, get: obj => obj.asn, set: (obj, value) => { obj.asn = value; } }, metadata: _metadata }, _asn_initializers, _asn_extraInitializers);
+            __esDecorate(null, null, _org_decorators, { kind: "field", name: "org", static: false, private: false, access: { has: obj => "org" in obj, get: obj => obj.org, set: (obj, value) => { obj.org = value; } }, metadata: _metadata }, _org_initializers, _org_extraInitializers);
+            __esDecorate(null, null, _blacklists_decorators, { kind: "field", name: "blacklists", static: false, private: false, access: { has: obj => "blacklists" in obj, get: obj => obj.blacklists, set: (obj, value) => { obj.blacklists = value; } }, metadata: _metadata }, _blacklists_initializers, _blacklists_extraInitializers);
+            __esDecorate(null, null, _checkCount_decorators, { kind: "field", name: "checkCount", static: false, private: false, access: { has: obj => "checkCount" in obj, get: obj => obj.checkCount, set: (obj, value) => { obj.checkCount = value; } }, metadata: _metadata }, _checkCount_initializers, _checkCount_extraInitializers);
+            __esDecorate(null, null, _connectionCount_decorators, { kind: "field", name: "connectionCount", static: false, private: false, access: { has: obj => "connectionCount" in obj, get: obj => obj.connectionCount, set: (obj, value) => { obj.connectionCount = value; } }, metadata: _metadata }, _connectionCount_initializers, _connectionCount_extraInitializers);
+            __esDecorate(null, null, _emailCount_decorators, { kind: "field", name: "emailCount", static: false, private: false, access: { has: obj => "emailCount" in obj, get: obj => obj.emailCount, set: (obj, value) => { obj.emailCount = value; } }, metadata: _metadata }, _emailCount_initializers, _emailCount_extraInitializers);
+            __esDecorate(null, null, _spamCount_decorators, { kind: "field", name: "spamCount", static: false, private: false, access: { has: obj => "spamCount" in obj, get: obj => obj.spamCount, set: (obj, value) => { obj.spamCount = value; } }, metadata: _metadata }, _spamCount_initializers, _spamCount_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            CachedIPReputation = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        // TTL fields from base class (decorators required on concrete class)
+        createdAt = __runInitializers(this, _createdAt_initializers, new Date());
+        expiresAt = (__runInitializers(this, _createdAt_extraInitializers), __runInitializers(this, _expiresAt_initializers, new Date(Date.now() + TTL.HOURS_24)));
+        lastAccessedAt = (__runInitializers(this, _expiresAt_extraInitializers), __runInitializers(this, _lastAccessedAt_initializers, new Date()));
+        /**
+         * IP address (unique identifier)
+         */
+        ipAddress = (__runInitializers(this, _lastAccessedAt_extraInitializers), __runInitializers(this, _ipAddress_initializers, void 0));
+        /**
+         * Reputation score (0-100, higher = better)
+         */
+        score = (__runInitializers(this, _ipAddress_extraInitializers), __runInitializers(this, _score_initializers, void 0));
+        /**
+         * Whether the IP is flagged as spam source
+         */
+        isSpam = (__runInitializers(this, _score_extraInitializers), __runInitializers(this, _isSpam_initializers, void 0));
+        /**
+         * Whether the IP is a known proxy
+         */
+        isProxy = (__runInitializers(this, _isSpam_extraInitializers), __runInitializers(this, _isProxy_initializers, void 0));
+        /**
+         * Whether the IP is a Tor exit node
+         */
+        isTor = (__runInitializers(this, _isProxy_extraInitializers), __runInitializers(this, _isTor_initializers, void 0));
+        /**
+         * Whether the IP is a VPN endpoint
+         */
+        isVPN = (__runInitializers(this, _isTor_extraInitializers), __runInitializers(this, _isVPN_initializers, void 0));
+        /**
+         * Country code (ISO 3166-1 alpha-2)
+         */
+        country = (__runInitializers(this, _isVPN_extraInitializers), __runInitializers(this, _country_initializers, void 0));
+        /**
+         * Autonomous System Number
+         */
+        asn = (__runInitializers(this, _country_extraInitializers), __runInitializers(this, _asn_initializers, void 0));
+        /**
+         * Organization name
+         */
+        org = (__runInitializers(this, _asn_extraInitializers), __runInitializers(this, _org_initializers, void 0));
+        /**
+         * List of blacklists the IP appears on
+         */
+        blacklists = (__runInitializers(this, _org_extraInitializers), __runInitializers(this, _blacklists_initializers, void 0));
+        /**
+         * Number of times this IP has been checked
+         */
+        checkCount = (__runInitializers(this, _blacklists_extraInitializers), __runInitializers(this, _checkCount_initializers, 0));
+        /**
+         * Number of connections from this IP
+         */
+        connectionCount = (__runInitializers(this, _checkCount_extraInitializers), __runInitializers(this, _connectionCount_initializers, 0));
+        /**
+         * Number of emails received from this IP
+         */
+        emailCount = (__runInitializers(this, _connectionCount_extraInitializers), __runInitializers(this, _emailCount_initializers, 0));
+        /**
+         * Number of spam emails from this IP
+         */
+        spamCount = (__runInitializers(this, _emailCount_extraInitializers), __runInitializers(this, _spamCount_initializers, 0));
+        constructor() {
+            super();
+            __runInitializers(this, _spamCount_extraInitializers);
+            this.setTTL(TTL.HOURS_24); // Default 24-hour TTL
+            this.blacklists = [];
+            this.score = 50; // Default neutral score
+            this.isSpam = false;
+            this.isProxy = false;
+            this.isTor = false;
+            this.isVPN = false;
+        }
+        /**
+         * Create from reputation data
+         */
+        static fromReputationData(ipAddress, data) {
+            const cached = new CachedIPReputation();
+            cached.ipAddress = ipAddress;
+            cached.score = data.score;
+            cached.isSpam = data.isSpam;
+            cached.isProxy = data.isProxy;
+            cached.isTor = data.isTor;
+            cached.isVPN = data.isVPN;
+            cached.country = data.country || '';
+            cached.asn = data.asn || '';
+            cached.org = data.org || '';
+            cached.blacklists = data.blacklists || [];
+            cached.checkCount = 1;
+            return cached;
+        }
+        /**
+         * Convert to reputation data object
+         */
+        toReputationData() {
+            this.touch();
+            return {
+                score: this.score,
+                isSpam: this.isSpam,
+                isProxy: this.isProxy,
+                isTor: this.isTor,
+                isVPN: this.isVPN,
+                country: this.country,
+                asn: this.asn,
+                org: this.org,
+                blacklists: this.blacklists,
+            };
+        }
+        /**
+         * Find by IP address
+         */
+        static async findByIP(ipAddress) {
+            return await CachedIPReputation.getInstance({
+                ipAddress,
+            });
+        }
+        /**
+         * Find all IPs flagged as spam
+         */
+        static async findSpamIPs() {
+            return await CachedIPReputation.getInstances({
+                isSpam: true,
+            });
+        }
+        /**
+         * Find IPs with score below threshold
+         */
+        static async findLowScoreIPs(threshold) {
+            return await CachedIPReputation.getInstances({
+                score: { $lt: threshold },
+            });
+        }
+        /**
+         * Record a connection from this IP
+         */
+        recordConnection() {
+            this.connectionCount++;
+            this.touch();
+        }
+        /**
+         * Record an email from this IP
+         */
+        recordEmail(isSpam = false) {
+            this.emailCount++;
+            if (isSpam) {
+                this.spamCount++;
+            }
+            this.touch();
+        }
+        /**
+         * Update the reputation data
+         */
+        updateReputation(data) {
+            this.score = data.score;
+            this.isSpam = data.isSpam;
+            this.isProxy = data.isProxy;
+            this.isTor = data.isTor;
+            this.isVPN = data.isVPN;
+            this.country = data.country || this.country;
+            this.asn = data.asn || this.asn;
+            this.org = data.org || this.org;
+            this.blacklists = data.blacklists || this.blacklists;
+            this.checkCount++;
+            this.touch();
+            // Refresh TTL on update
+            this.setTTL(TTL.HOURS_24);
+        }
+        /**
+         * Check if this IP should be blocked
+         */
+        shouldBlock() {
+            return this.isSpam || this.score < 20 || this.blacklists.length > 2;
+        }
+    };
+    return CachedIPReputation = _classThis;
+})();
+export { CachedIPReputation };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/cache/documents/index.d.ts

@@ -0,0 +1,2 @@
+export * from './classes.cached.email.js';
+export * from './classes.cached.ip.reputation.js';

package/dist_ts/cache/documents/index.js

@@ -0,0 +1,3 @@
+export * from './classes.cached.email.js';
+export * from './classes.cached.ip.reputation.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi90cy9jYWNoZS9kb2N1bWVudHMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYywyQkFBMkIsQ0FBQztBQUMxQyxjQUFjLG1DQUFtQyxDQUFDIn0=

package/dist_ts/cache/index.d.ts

@@ -0,0 +1,4 @@
+export * from './classes.cachedb.js';
+export * from './classes.cached.document.js';
+export * from './classes.cache.cleaner.js';
+export * from './documents/index.js';

package/dist_ts/cache/index.js

@@ -0,0 +1,7 @@
+// Core cache infrastructure
+export * from './classes.cachedb.js';
+export * from './classes.cached.document.js';
+export * from './classes.cache.cleaner.js';
+// Document classes
+export * from './documents/index.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9jYWNoZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSw0QkFBNEI7QUFDNUIsY0FBYyxzQkFBc0IsQ0FBQztBQUNyQyxjQUFjLDhCQUE4QixDQUFDO0FBQzdDLGNBQWMsNEJBQTRCLENBQUM7QUFFM0MsbUJBQW1CO0FBQ25CLGNBQWMsc0JBQXNCLENBQUMifQ==

package/dist_ts/classes.cert-provision-scheduler.d.ts

@@ -0,0 +1,54 @@
+import type { StorageManager } from './storage/index.js';
+/**
+ * Manages certificate provisioning scheduling with:
+ * - Per-domain exponential backoff persisted in StorageManager
+ *
+ * Note: Serial stagger queue was removed — smartacme v9 handles
+ * concurrency, per-domain dedup, and rate limiting internally.
+ */
+export declare class CertProvisionScheduler {
+    private storageManager;
+    private maxBackoffHours;
+    private backoffCache;
+    constructor(storageManager: StorageManager, options?: {
+        maxBackoffHours?: number;
+    });
+    /**
+     * Storage key for a domain's backoff entry
+     */
+    private backoffKey;
+    /**
+     * Load backoff entry from storage (with in-memory cache)
+     */
+    private loadBackoff;
+    /**
+     * Save backoff entry to both cache and storage
+     */
+    private saveBackoff;
+    /**
+     * Check if a domain is currently in backoff.
+     * Expired entries are pruned from the cache to prevent unbounded growth.
+     */
+    isInBackoff(domain: string): Promise<boolean>;
+    /**
+     * Record a provisioning failure for a domain.
+     * Sets exponential backoff: min(failures^2 * 1h, maxBackoffHours)
+     */
+    recordFailure(domain: string, error?: string): Promise<void>;
+    /**
+     * Clear backoff for a domain (on success or manual override)
+     */
+    clearBackoff(domain: string): Promise<void>;
+    /**
+     * Clear all in-memory backoff cache entries
+     */
+    clear(): void;
+    /**
+     * Get backoff info for UI display
+     */
+    getBackoffInfo(domain: string): Promise<{
+        failures: number;
+        retryAfter?: string;
+        lastError?: string;
+    } | null>;
+}

package/dist_ts/classes.cert-provision-scheduler.js

@@ -0,0 +1,118 @@
+import { logger } from './logger.js';
+/**
+ * Manages certificate provisioning scheduling with:
+ * - Per-domain exponential backoff persisted in StorageManager
+ *
+ * Note: Serial stagger queue was removed — smartacme v9 handles
+ * concurrency, per-domain dedup, and rate limiting internally.
+ */
+export class CertProvisionScheduler {
+    storageManager;
+    maxBackoffHours;
+    // In-memory backoff cache (mirrors storage for fast lookups)
+    backoffCache = new Map();
+    constructor(storageManager, options) {
+        this.storageManager = storageManager;
+        this.maxBackoffHours = options?.maxBackoffHours ?? 24;
+    }
+    /**
+     * Storage key for a domain's backoff entry
+     */
+    backoffKey(domain) {
+        const clean = domain.replace(/\*/g, '_wildcard_').replace(/[^a-zA-Z0-9._-]/g, '_');
+        return `/cert-backoff/${clean}`;
+    }
+    /**
+     * Load backoff entry from storage (with in-memory cache)
+     */
+    async loadBackoff(domain) {
+        const cached = this.backoffCache.get(domain);
+        if (cached)
+            return cached;
+        const entry = await this.storageManager.getJSON(this.backoffKey(domain));
+        if (entry) {
+            this.backoffCache.set(domain, entry);
+        }
+        return entry;
+    }
+    /**
+     * Save backoff entry to both cache and storage
+     */
+    async saveBackoff(domain, entry) {
+        this.backoffCache.set(domain, entry);
+        await this.storageManager.setJSON(this.backoffKey(domain), entry);
+    }
+    /**
+     * Check if a domain is currently in backoff.
+     * Expired entries are pruned from the cache to prevent unbounded growth.
+     */
+    async isInBackoff(domain) {
+        const entry = await this.loadBackoff(domain);
+        if (!entry)
+            return false;
+        const retryAfter = new Date(entry.retryAfter);
+        if (retryAfter.getTime() > Date.now()) {
+            return true;
+        }
+        // Backoff has expired — prune the stale entry
+        this.backoffCache.delete(domain);
+        return false;
+    }
+    /**
+     * Record a provisioning failure for a domain.
+     * Sets exponential backoff: min(failures^2 * 1h, maxBackoffHours)
+     */
+    async recordFailure(domain, error) {
+        const existing = await this.loadBackoff(domain);
+        const failures = (existing?.failures ?? 0) + 1;
+        // Exponential backoff: failures^2 hours, capped
+        const backoffHours = Math.min(failures * failures, this.maxBackoffHours);
+        const retryAfter = new Date(Date.now() + backoffHours * 60 * 60 * 1000);
+        const entry = {
+            failures,
+            lastFailure: new Date().toISOString(),
+            retryAfter: retryAfter.toISOString(),
+            lastError: error,
+        };
+        await this.saveBackoff(domain, entry);
+        logger.log('warn', `Cert backoff for ${domain}: ${failures} failures, retry after ${retryAfter.toISOString()}`);
+    }
+    /**
+     * Clear backoff for a domain (on success or manual override)
+     */
+    async clearBackoff(domain) {
+        this.backoffCache.delete(domain);
+        try {
+            await this.storageManager.delete(this.backoffKey(domain));
+        }
+        catch {
+            // Ignore delete errors (key may not exist)
+        }
+    }
+    /**
+     * Clear all in-memory backoff cache entries
+     */
+    clear() {
+        this.backoffCache.clear();
+    }
+    /**
+     * Get backoff info for UI display
+     */
+    async getBackoffInfo(domain) {
+        const entry = await this.loadBackoff(domain);
+        if (!entry)
+            return null;
+        // Only return if still in backoff — prune expired entries
+        const retryAfter = new Date(entry.retryAfter);
+        if (retryAfter.getTime() <= Date.now()) {
+            this.backoffCache.delete(domain);
+            return null;
+        }
+        return {
+            failures: entry.failures,
+            retryAfter: entry.retryAfter,
+            lastError: entry.lastError,
+        };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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