@serve.zone/dcrouter 16.4.0 → 16.5.0

package/dist_ts/email/classes.email-domain.manager.d.ts

@@ -1,23 +1,35 @@
 import type { IEmailDomainConfig } from '@push.rocks/smartmta';
-import type { IEmailDomain, IEmailDnsRecord, IEmailDomainRemoteIngress } from '../../dist_ts_interfaces/data/email-domain.js';
+import { EmailDomainDoc } from '../db/documents/classes.email-domain.doc.js';
+import type { IEmailDomain, IEmailDnsRecord, IEmailDomainRemoteIngress, IEmailDomainOperationError, TEmailDomainLifecycleStatus } from '../../dist_ts_interfaces/data/email-domain.js';
+export interface IEmailDomainManagerActionResult {
+    success: boolean;
+    message?: string;
+    lifecycleStatus?: TEmailDomainLifecycleStatus;
+    code?: string;
+    errors?: IEmailDomainOperationError[];
+    retryAt?: string;
+    capability?: 'supported' | 'unsupported';
+    domain?: IEmailDomain;
+    records?: IEmailDnsRecord[];
+    provisioned?: number;
+}
 /**
- * EmailDomainManager — orchestrates email domain setup.
- *
- * Wires smartmta's DKIMCreator (key generation) with dcrouter's DnsManager
- * (record creation for dcrouter-hosted and provider-managed zones) to provide
- * a single entry point for setting up an email domain from A to Z.
+ * Persists managed email domains and projects them into SmartMTA. DNS mutation
+ * is delegated exclusively to MailDnsSync.
  */
 export declare class EmailDomainManager {
     private dcRouter;
     private baseEmailDomains;
-    private dnsClient?;
+    private mutationChain;
+    /** Explicit upstream capability marker; absence is deliberately fail-closed. */
+    private get selectorCorrectSigningCapability();
     constructor(dcRouterRef: any);
     setBaseEmailDomains(domains: IEmailDomainConfig[] | undefined): void;
-    private get dnsManager();
     private get dkimCreator();
-    private get emailHostname();
     start(): Promise<void>;
     stop(): Promise<void>;
+    supportsSelectorCorrectSigning(): boolean;
+    private runMutationExclusive;
     getAll(): Promise<IEmailDomain[]>;
     getById(id: string): Promise<IEmailDomain | null>;
     getByDomain(domainName: string): Promise<IEmailDomain | null>;
@@ -35,37 +47,30 @@ export declare class EmailDomainManager {
         rotateKeys?: boolean;
         rotationIntervalDays?: number;
         rateLimits?: IEmailDomain['rateLimits'];
-        /** null clears the pin. */
         remoteIngress?: IEmailDomainRemoteIngress | null;
-    }): Promise<void>;
-    /**
-     * Normalize a per-domain edge pin. Pins may reference edges that are not
-     * registered yet — that only warns, so pins can precede edge registration.
-     */
-    private normalizeRemoteIngressPin;
-    /** Enabled edges pinned for this domain (empty when unpinned). */
-    private resolvePinnedEdges;
-    deleteEmailDomain(id: string): Promise<void>;
-    /**
-     * Compute the 4 required DNS records for an email domain.
-     */
+    }): Promise<IEmailDomainManagerActionResult>;
+    deleteEmailDomain(id: string): Promise<IEmailDomainManagerActionResult>;
     getRequiredDnsRecords(id: string): Promise<IEmailDnsRecord[]>;
-    /**
-     * Auto-create missing DNS records via the linked domain's DNS path.
-     */
-    provisionDnsRecords(id: string): Promise<number>;
-    /**
-     * Validate DNS records via live lookups.
-     */
-    validateDns(id: string): Promise<IEmailDnsRecord[]>;
-    private recordMatchesRequired;
-    /** Lazy shared smartdns client; the Rust bridge spawns on first non-system lookup. */
-    private getDnsClient;
-    /** 'pref exchange' normalized for comparison: numeric pref, lowercased exchange, no trailing dot. */
-    private normalizeMxValue;
-    private checkMx;
-    private checkARecords;
-    private checkTxtRecord;
+    provisionDnsRecords(id: string): Promise<IEmailDomainManagerActionResult>;
+    validateDns(id: string): Promise<IEmailDomainManagerActionResult>;
+    getOutboundReadiness(domainName: string): Promise<{
+        ready: boolean;
+        reason?: string;
+        edgeIds: string[];
+        selector?: string;
+    }>;
+    requestDkimRotation(id: string): Promise<IEmailDomainManagerActionResult>;
+    /** Called by the reconciler before planning so scheduled external rotation is durable first. */
+    stageDkimRotationIfDue(id: string): Promise<EmailDomainDoc | undefined>;
+    private stageDkimRotation;
+    private normalizeRemoteIngressPin;
+    private extractDkimPublicKey;
+    private getActiveDkim;
+    private invalidateReconciliation;
+    private capabilityError;
+    private unsupportedResult;
+    private hasDnsMutationFailure;
+    private resultForDoc;
     private docToInterface;
     private isDomainAlreadyConfigured;
     private findLinkedDnsDomain;