@serve.zone/dcrouter 16.4.0 → 16.5.0

package/dist_ts/email/classes.mail-dns-sync.d.ts

@@ -1,27 +1,68 @@
 import type { DcRouter } from '../classes.dcrouter.js';
-export declare const MAIL_DNS_SYNC_CREATED_BY = "mail-edge-sync";
+import type { IEmailDnsRecordIntent, IEmailDomainEdgeIdentity } from '../../dist_ts_interfaces/data/email-domain.js';
+import { MailEdgeEligibility } from './classes.mail-edge-eligibility.js';
+export declare const MAIL_DNS_SYNC_CREATED_BY = "mail-dns-reconciler";
+export declare const MAIL_DNS_MANAGED_BY = "mail-dns-reconciler";
+export declare const MAIL_DNS_RETRY_INTERVAL_MS: number;
+export interface IMailDnsVerificationResult {
+    valid: boolean;
+    reason?: string;
+}
+export interface IMailDnsVerifier {
+    verifyRecord(intent: IEmailDnsRecordIntent): Promise<IMailDnsVerificationResult>;
+    verifyMxSet?(intents: IEmailDnsRecordIntent[]): Promise<IMailDnsVerificationResult>;
+    verifyForwardConfirmedIdentity(identity: IEmailDomainEdgeIdentity): Promise<IMailDnsVerificationResult>;
+    destroy?(): void;
+}
+export declare function toReverseDnsName(address: string): string;
+export declare class SmartDnsMailVerifier implements IMailDnsVerifier {
+    private client?;
+    private getClient;
+    verifyRecord(intent: IEmailDnsRecordIntent): Promise<IMailDnsVerificationResult>;
+    verifyMxSet(intents: IEmailDnsRecordIntent[]): Promise<IMailDnsVerificationResult>;
+    verifyForwardConfirmedIdentity(identity: IEmailDomainEdgeIdentity): Promise<IMailDnsVerificationResult>;
+    destroy(): void;
+}
 /**
- * Reconciles the mail-facing A/AAAA records that make edges — never the hub —
- * the public identity of the mail platform:
- *  (a) shared mail hostname → publicIp/publicIpV6 of every enabled mail edge,
- *  (b) each edge's mailHostname → that edge's IPs (FCrDNS for outbound EHLO),
- *  (c) mx.<domain> → the pinned edges' IPs for every pinned email domain.
- * Records are DB-backed DnsRecordDoc rows owned via createdBy 'mail-edge-sync';
- * provider-hosted zones (e.g. Cloudflare) are written through DnsManager's
- * provider path, dcrouter-authoritative zones serve immediately.
+ * Sole owner of managed mail DNS. API, topology, timer, and startup events only
+ * mark this globally serialized reconciler dirty.
  */
 export declare class MailDnsSync {
     private dcRouterRef;
-    private syncInFlight?;
-    private resyncQueued;
-    constructor(dcRouterRef: DcRouter);
-    /** Fire-and-forget trigger for CRUD hooks; failures are logged, not thrown. */
+    private verifier;
+    private started;
+    private stopped;
+    private dirty;
+    private runPromise?;
+    private retryTimer?;
+    private edgeEligibility;
+    constructor(dcRouterRef: DcRouter, edgeEligibility?: MailEdgeEligibility, verifier?: IMailDnsVerifier);
+    start(): Promise<void>;
+    stop(): Promise<void>;
     requestSync(reason: string): void;
-    /** Coalescing entry point: concurrent triggers fold into one follow-up pass. */
+    /** Coalescing entry point used by API actions that need the durable outcome. */
     sync(reason: string): Promise<void>;
+    private kick;
+    private runLoop;
     private reconcile;
-    private computeDesiredRecords;
-    private getSharedMailHostname;
-    /** Longest-suffix zone match: 'mx.gated.one' → zone 'gated.one'. */
+    private buildPlan;
+    private getActiveDkim;
+    private buildDkimIntent;
+    private intentForName;
+    private toDomainEdgeIdentity;
+    private allocateMxSlots;
+    private buildSpfValue;
+    private persistDesiredPlan;
+    private persistDeletingAttempt;
+    private reconcileZones;
+    private sortIntents;
+    private reconcileIntent;
+    private valuesEqual;
+    private isRelevantUnmanagedTxt;
+    private validateAndActivate;
+    private promotePendingDkim;
+    private statusForIntent;
+    private cleanupStaleManagedRecords;
+    private finalizeDeletingDomains;
     private findZoneForName;
 }