@serve.zone/dcrouter 17.2.3 → 17.3.0

package/dist_ts/dns/classes.gateway-route-dns-reconciler.js

@@ -0,0 +1,609 @@
+import * as plugins from '../plugins.js';
+import { logger } from '../logger.js';
+import { normalizeGatewayHostname } from '../opsserver/helpers/gateway-client-auth.js';
+export const GATEWAY_ROUTE_DNS_MANAGED_BY = 'gateway-route-dns';
+const GATEWAY_ROUTE_DNS_TTL = 3600;
+const RECONCILE_INTERVAL_MS = 60_000;
+const RECONCILE_COOLDOWN_MS = 15_000;
+export function getActiveGatewayDnsClaims(dcRouterRefArg, hostnameArg) {
+    const hostname = normalizeGatewayHostname(hostnameArg);
+    const claims = new Map();
+    const routes = dcRouterRefArg.routeConfigManager?.getMergedRoutes().routes || [];
+    for (const routeArg of routes) {
+        const metadata = routeArg.metadata;
+        if (!routeArg.enabled || metadata?.ownerType !== 'gatewayClient'
+            || metadata.gatewayDnsMode !== 'reconcile' || !metadata.gatewayClientId
+            || !metadata.externalKey)
+            continue;
+        const domains = routeArg.route.match?.domains;
+        const firstDomain = Array.isArray(domains)
+            ? domains[0]
+            : typeof domains === 'string'
+                ? domains.split(',')[0]
+                : undefined;
+        if (!firstDomain)
+            continue;
+        try {
+            if (normalizeGatewayHostname(firstDomain) !== hostname)
+                continue;
+        }
+        catch {
+            continue;
+        }
+        const gatewayClientId = metadata.gatewayClientId.trim().toLowerCase();
+        const keys = claims.get(gatewayClientId) || [];
+        keys.push(metadata.externalKey);
+        claims.set(gatewayClientId, keys);
+    }
+    return Array.from(claims.entries())
+        .map(([gatewayClientId, routeExternalKeys]) => ({
+        gatewayClientId,
+        routeExternalKeys: routeExternalKeys.sort((left, right) => left.localeCompare(right)),
+    }))
+        .sort((left, right) => left.gatewayClientId.localeCompare(right.gatewayClientId));
+}
+export class GatewayRouteDnsReconciler {
+    dcRouterRef;
+    interval;
+    fullReconcilePromise;
+    lastAttemptByHostname = new Map();
+    latestIntentByHostname = new Map();
+    hostnameChains = new Map();
+    intentGeneration = 0;
+    constructor(dcRouterRef) {
+        this.dcRouterRef = dcRouterRef;
+    }
+    async start() {
+        await this.runFullReconcile(true);
+        this.interval = setInterval(() => {
+            this.runFullReconcile(false).catch((error) => {
+                logger.log('warn', `Gateway route DNS reconcile failed: ${error.message}`);
+            });
+        }, RECONCILE_INTERVAL_MS);
+        this.interval.unref?.();
+    }
+    async stop() {
+        if (this.interval)
+            clearInterval(this.interval);
+        this.interval = undefined;
+        await this.fullReconcilePromise?.catch(() => undefined);
+    }
+    async reconcileRoute(optionsArg) {
+        return await this.reconcileRouteWithExecution(optionsArg, {});
+    }
+    async reconcileRouteWithExecution(optionsArg, executionArg) {
+        const checkedAt = Date.now();
+        const mode = optionsArg.mode || 'skip';
+        if (mode === 'skip') {
+            return { success: true, retryable: false, mode, status: 'skipped', checkedAt };
+        }
+        if (!optionsArg.hostname) {
+            return { success: true, retryable: false, mode, status: 'not-applicable', checkedAt };
+        }
+        const hostname = normalizeGatewayHostname(optionsArg.hostname);
+        const targetIp = optionsArg.delete ? undefined : this.getDesiredTargetIp();
+        const workKey = this.buildWorkKey(optionsArg, hostname, mode, targetIp);
+        const latestIntent = this.latestIntentByHostname.get(hostname);
+        if (latestIntent?.workKey === workKey)
+            return await latestIntent.promise;
+        const lastAttempt = this.lastAttemptByHostname.get(hostname);
+        if (executionArg.respectCooldown
+            && lastAttempt?.workKey === workKey
+            && lastAttempt.result
+            && checkedAt - lastAttempt.attemptedAt < RECONCILE_COOLDOWN_MS) {
+            return lastAttempt.result;
+        }
+        const generation = ++this.intentGeneration;
+        this.lastAttemptByHostname.set(hostname, { workKey, generation, attemptedAt: checkedAt });
+        const run = this.withHostnameLock(hostname, async () => {
+            return await this.reconcileRouteUnderHostnameLock(optionsArg, hostname, mode, checkedAt, targetIp, executionArg.providerZoneRefreshes);
+        });
+        this.latestIntentByHostname.set(hostname, {
+            workKey,
+            generation,
+            promise: run,
+        });
+        try {
+            const result = await run;
+            const currentAttempt = this.lastAttemptByHostname.get(hostname);
+            if (currentAttempt?.generation === generation)
+                currentAttempt.result = result;
+            return result;
+        }
+        finally {
+            const currentIntent = this.latestIntentByHostname.get(hostname);
+            if (currentIntent?.generation === generation) {
+                this.latestIntentByHostname.delete(hostname);
+            }
+        }
+    }
+    async reconcileRouteUnderHostnameLock(optionsArg, hostname, mode, checkedAt, targetIp, providerZoneRefreshes) {
+        const claimOwnerId = this.buildClaimOwnerId(optionsArg.gatewayClientId, hostname);
+        if (optionsArg.delete) {
+            return await this.deleteOwnedRecords(claimOwnerId, optionsArg.externalKey, optionsArg.gatewayClientId, hostname, mode, checkedAt, providerZoneRefreshes);
+        }
+        if (!this.getActiveClaimsForHostname(hostname).some((claimArg) => {
+            return claimArg.gatewayClientId === optionsArg.gatewayClientId.trim().toLowerCase();
+        })) {
+            return {
+                success: true,
+                retryable: false,
+                mode,
+                status: 'not-applicable',
+                hostname,
+                targetIp,
+                checkedAt,
+            };
+        }
+        const ipFamily = targetIp ? plugins.net.isIP(targetIp) : 0;
+        if (!targetIp || !ipFamily) {
+            return {
+                success: false,
+                retryable: true,
+                mode,
+                status: 'target-invalid',
+                hostname,
+                checkedAt,
+                message: 'Gateway DNS target requires a valid proxyIps[0], publicIp, or detectedPublicIp',
+            };
+        }
+        const recordType = ipFamily === 6 ? 'AAAA' : 'A';
+        const dnsManager = this.dcRouterRef.dnsManager;
+        if (!dnsManager) {
+            return {
+                success: false,
+                retryable: true,
+                mode,
+                status: 'zone-unavailable',
+                hostname,
+                targetIp,
+                recordType,
+                checkedAt,
+                message: 'DnsManager is not initialized',
+            };
+        }
+        const zone = await dnsManager.findDomainForFqdn(hostname);
+        if (!zone) {
+            return {
+                success: false,
+                retryable: false,
+                mode,
+                status: 'zone-unmanaged',
+                hostname,
+                targetIp,
+                recordType,
+                checkedAt,
+                message: `No managed DNS zone covers ${hostname}`,
+            };
+        }
+        if (zone.source === 'provider' && !zone.providerId) {
+            return this.failureForZone(mode, checkedAt, hostname, targetIp, recordType, zone, 'zone-unavailable', 'Managed provider zone has no providerId');
+        }
+        if (zone.source === 'provider') {
+            const syncResult = await this.refreshProviderZone(zone.id, providerZoneRefreshes);
+            if (!syncResult.success) {
+                return this.failureForZone(mode, checkedAt, hostname, targetIp, recordType, zone, 'zone-unavailable', syncResult.message || 'Provider zone synchronization failed');
+            }
+        }
+        const records = (await dnsManager.listRecordsForDomain(zone.id)).filter((recordArg) => {
+            return this.isAddressRecord(recordArg)
+                && this.normalizeStoredHostname(recordArg.name) === hostname;
+        });
+        const competing = records.find((recordArg) => recordArg.managedBy
+            && (recordArg.managedBy !== GATEWAY_ROUTE_DNS_MANAGED_BY || recordArg.managedOwnerId !== claimOwnerId));
+        if (competing) {
+            return this.failureForZone(mode, checkedAt, hostname, targetIp, recordType, zone, 'record-conflict', `DNS hostname ${hostname} is managed by ${competing.managedBy}:${competing.managedOwnerId || 'unknown'}`, records);
+        }
+        const desired = records.find((recordArg) => recordArg.type === recordType
+            && recordArg.value === targetIp
+            && recordArg.ttl === GATEWAY_ROUTE_DNS_TTL
+            && recordArg.proxied === false);
+        if (mode === 'observe') {
+            const satisfied = records.some((recordArg) => recordArg.type === recordType && recordArg.value === targetIp);
+            return {
+                success: satisfied,
+                retryable: !satisfied,
+                mode,
+                status: satisfied ? 'observed-satisfied' : 'record-missing',
+                hostname,
+                targetIp,
+                recordType,
+                zoneId: zone.id,
+                zoneName: zone.name,
+                nameservers: zone.nameservers,
+                records: records.map((recordArg) => this.toEvidence(recordArg)),
+                checkedAt,
+            };
+        }
+        const ownerRecords = records.filter((recordArg) => recordArg.managedBy === GATEWAY_ROUTE_DNS_MANAGED_BY
+            && recordArg.managedOwnerId === claimOwnerId);
+        const manualRecords = records.filter((recordArg) => !recordArg.managedBy);
+        const stableKey = this.buildManagedRecordKey(claimOwnerId);
+        if (records.length === 1
+            && manualRecords.length === 1
+            && desired === manualRecords[0]) {
+            const adopted = await dnsManager.adoptRecordManagement({
+                id: desired.id,
+                name: hostname,
+                type: recordType,
+                value: targetIp,
+                ttl: GATEWAY_ROUTE_DNS_TTL,
+                proxied: false,
+                managedBy: GATEWAY_ROUTE_DNS_MANAGED_BY,
+                managedOwnerId: claimOwnerId,
+                managedRecordKey: stableKey,
+            });
+            if (!adopted.success) {
+                return this.failureForZone(mode, checkedAt, hostname, targetIp, recordType, zone, 'mutation-failed', adopted.message || 'Failed to adopt existing DNS record', records);
+            }
+            const adoptedRecords = (await dnsManager.listRecordsForDomain(zone.id)).filter((recordArg) => {
+                return this.isAddressRecord(recordArg)
+                    && this.normalizeStoredHostname(recordArg.name) === hostname;
+            });
+            return this.successForZone('managed-updated', mode, checkedAt, hostname, targetIp, recordType, zone, adoptedRecords);
+        }
+        if (records.length === 1
+            && ownerRecords.length === 1
+            && desired === ownerRecords[0]
+            && desired.managedRecordKey === stableKey) {
+            return this.successForZone('managed-unchanged', mode, checkedAt, hostname, targetIp, recordType, zone, records);
+        }
+        const overwrittenRecords = manualRecords.map((recordArg) => this.toEvidence(recordArg));
+        const rollbackRecords = records.map((recordArg) => this.snapshotRecord(recordArg));
+        try {
+            for (const record of records) {
+                const result = await dnsManager.deleteRecord(record.id);
+                if (!result.success)
+                    throw new Error(result.message || `Failed to delete DNS record ${record.id}`);
+            }
+            const created = await dnsManager.createRecord({
+                domainId: zone.id,
+                name: hostname,
+                type: recordType,
+                value: targetIp,
+                ttl: GATEWAY_ROUTE_DNS_TTL,
+                proxied: false,
+                createdBy: GATEWAY_ROUTE_DNS_MANAGED_BY,
+                managedBy: GATEWAY_ROUTE_DNS_MANAGED_BY,
+                managedOwnerId: claimOwnerId,
+                managedRecordKey: stableKey,
+            });
+            if (!created.success)
+                throw new Error(created.message || `Failed to create ${recordType} record for ${hostname}`);
+            const finalRecords = (await dnsManager.listRecordsForDomain(zone.id)).filter((recordArg) => {
+                return this.isAddressRecord(recordArg) && this.normalizeStoredHostname(recordArg.name) === hostname;
+            });
+            if (manualRecords.length > 0) {
+                await this.recordManualClaimEvent(zone, hostname, targetIp, claimOwnerId, this.getContributingRouteKeys(optionsArg.gatewayClientId, hostname), manualRecords);
+            }
+            const status = manualRecords.length > 0
+                ? 'managed-overwrote-manual'
+                : ownerRecords.length > 0
+                    ? 'managed-updated'
+                    : 'managed-created';
+            return {
+                ...this.successForZone(status, mode, checkedAt, hostname, targetIp, recordType, zone, finalRecords),
+                ...(overwrittenRecords.length ? { overwrittenRecords } : {}),
+            };
+        }
+        catch (error) {
+            let status = 'mutation-failed';
+            let message = error.message;
+            try {
+                await this.restoreRecords(zone, hostname, rollbackRecords);
+            }
+            catch (restoreError) {
+                status = 'compensation-failed';
+                message = `${message}; DNS restore failed: ${restoreError.message}`;
+                logger.log('error', `Gateway DNS compensation failed for ${hostname}: ${message}`);
+            }
+            return this.failureForZone(mode, checkedAt, hostname, targetIp, recordType, zone, status, message);
+        }
+    }
+    async runFullReconcile(force = false) {
+        if (this.fullReconcilePromise)
+            return await this.fullReconcilePromise;
+        const run = this.reconcileAll(force);
+        this.fullReconcilePromise = run;
+        try {
+            await run;
+        }
+        finally {
+            if (this.fullReconcilePromise === run)
+                this.fullReconcilePromise = undefined;
+        }
+    }
+    async reconcileAll(force) {
+        const routes = this.dcRouterRef.routeConfigManager?.getMergedRoutes().routes || [];
+        const activeOwners = new Set();
+        const providerZoneRefreshes = new Map();
+        for (const route of routes) {
+            const externalKey = route.metadata?.externalKey;
+            if (!route.enabled || route.metadata?.ownerType !== 'gatewayClient'
+                || route.metadata.gatewayDnsMode !== 'reconcile' || !externalKey)
+                continue;
+            const hostname = this.getRouteHostname(route.route);
+            if (!hostname)
+                continue;
+            const gatewayClientId = route.metadata.gatewayClientId;
+            if (!gatewayClientId)
+                continue;
+            const claimOwnerId = this.buildClaimOwnerId(gatewayClientId, hostname);
+            const isFirstRouteForClaim = !activeOwners.has(claimOwnerId);
+            activeOwners.add(claimOwnerId);
+            if (!isFirstRouteForClaim)
+                continue;
+            const result = await this.reconcileRouteWithExecution({ externalKey, gatewayClientId, hostname, mode: 'reconcile' }, { respectCooldown: !force, providerZoneRefreshes });
+            if (!result.success) {
+                logger.log('warn', `Gateway route DNS reconcile returned ${result.status} for ${hostname}: ${result.message || 'no detail'}`);
+            }
+        }
+        const dnsManager = this.dcRouterRef.dnsManager;
+        if (!dnsManager)
+            return;
+        for (const record of await (await import('../db/documents/classes.dns-record.doc.js')).DnsRecordDoc.findAll()) {
+            if (record.managedBy !== GATEWAY_ROUTE_DNS_MANAGED_BY || !record.managedOwnerId)
+                continue;
+            if (activeOwners.has(record.managedOwnerId))
+                continue;
+            const hostname = this.normalizeStoredHostname(record.name);
+            if (!hostname)
+                continue;
+            await this.withHostnameLock(hostname, async () => {
+                const liveClaimOwnerIds = this.getActiveClaimsForHostname(hostname).map((claimArg) => {
+                    return this.buildClaimOwnerId(claimArg.gatewayClientId, hostname);
+                });
+                if (liveClaimOwnerIds.includes(record.managedOwnerId))
+                    return;
+                const current = await (await import('../db/documents/classes.dns-record.doc.js')).DnsRecordDoc.findById(record.id);
+                if (!current || current.managedBy !== GATEWAY_ROUTE_DNS_MANAGED_BY
+                    || current.managedOwnerId !== record.managedOwnerId
+                    || this.normalizeStoredHostname(current.name) !== hostname)
+                    return;
+                const result = await dnsManager.deleteRecord(record.id);
+                if (!result.success) {
+                    logger.log('warn', `Failed to delete orphan gateway DNS record ${record.id}: ${result.message || 'unknown error'}`);
+                }
+            });
+        }
+    }
+    async deleteOwnedRecords(claimOwnerIdArg, excludedExternalKeyArg, gatewayClientIdArg, hostnameArg, modeArg, checkedAtArg, providerZoneRefreshes) {
+        const dnsManager = this.dcRouterRef.dnsManager;
+        if (!dnsManager) {
+            return { success: false, retryable: true, mode: modeArg, status: 'zone-unavailable', hostname: hostnameArg, checkedAt: checkedAtArg };
+        }
+        const zone = await dnsManager.findDomainForFqdn(hostnameArg);
+        if (!zone) {
+            return { success: true, retryable: false, mode: modeArg, status: 'managed-deleted', hostname: hostnameArg, checkedAt: checkedAtArg };
+        }
+        if (zone.source === 'provider') {
+            const syncResult = await this.refreshProviderZone(zone.id, providerZoneRefreshes);
+            if (!syncResult.success) {
+                return this.failureForZone(modeArg, checkedAtArg, hostnameArg, undefined, undefined, zone, 'zone-unavailable', syncResult.message || 'Provider zone synchronization failed');
+            }
+        }
+        const remainingRouteKeys = this.getContributingRouteKeys(gatewayClientIdArg, hostnameArg, excludedExternalKeyArg);
+        const owned = (await dnsManager.listRecordsForDomain(zone.id)).filter((recordArg) => {
+            return this.normalizeStoredHostname(recordArg.name) === hostnameArg
+                && recordArg.managedBy === GATEWAY_ROUTE_DNS_MANAGED_BY
+                && recordArg.managedOwnerId === claimOwnerIdArg;
+        });
+        if (modeArg === 'observe') {
+            return this.successForZone('observed-satisfied', modeArg, checkedAtArg, hostnameArg, undefined, undefined, zone, owned);
+        }
+        if (remainingRouteKeys.length > 0) {
+            return this.successForZone('managed-unchanged', modeArg, checkedAtArg, hostnameArg, undefined, undefined, zone, owned);
+        }
+        for (const record of owned) {
+            const result = await dnsManager.deleteRecord(record.id);
+            if (!result.success) {
+                return this.failureForZone(modeArg, checkedAtArg, hostnameArg, undefined, undefined, zone, 'mutation-failed', result.message || 'DNS cleanup failed', owned);
+            }
+        }
+        return this.successForZone('managed-deleted', modeArg, checkedAtArg, hostnameArg, undefined, undefined, zone, []);
+    }
+    getDesiredTargetIp() {
+        return this.dcRouterRef.options.proxyIps?.[0]
+            || this.dcRouterRef.options.publicIp
+            || this.dcRouterRef.detectedPublicIp
+            || undefined;
+    }
+    getRouteHostname(routeArg) {
+        const domains = routeArg.match?.domains;
+        const first = Array.isArray(domains) ? domains[0] : typeof domains === 'string' ? domains.split(',')[0] : undefined;
+        return first ? normalizeGatewayHostname(first) : undefined;
+    }
+    buildWorkKey(optionsArg, hostnameArg, modeArg, targetIpArg) {
+        return JSON.stringify({
+            hostname: hostnameArg,
+            gatewayClientId: optionsArg.gatewayClientId.trim().toLowerCase(),
+            externalKey: optionsArg.externalKey,
+            mode: modeArg,
+            delete: optionsArg.delete === true,
+            targetIp: targetIpArg || null,
+            claims: this.getActiveClaimsForHostname(hostnameArg),
+        });
+    }
+    async refreshProviderZone(zoneIdArg, providerZoneRefreshesArg) {
+        const dnsManager = this.dcRouterRef.dnsManager;
+        if (!dnsManager)
+            return { success: false, message: 'DnsManager is not initialized' };
+        if (!providerZoneRefreshesArg)
+            return await dnsManager.syncDomain(zoneIdArg);
+        let refresh = providerZoneRefreshesArg.get(zoneIdArg);
+        if (!refresh) {
+            refresh = dnsManager.syncDomain(zoneIdArg);
+            providerZoneRefreshesArg.set(zoneIdArg, refresh);
+        }
+        return await refresh;
+    }
+    buildClaimOwnerId(gatewayClientIdArg, hostnameArg) {
+        const gatewayClientId = gatewayClientIdArg.trim().toLowerCase();
+        const hostname = normalizeGatewayHostname(hostnameArg);
+        return `gateway-client:${gatewayClientId}:${hostname}`;
+    }
+    getActiveClaimsForHostname(hostnameArg) {
+        return getActiveGatewayDnsClaims(this.dcRouterRef, hostnameArg);
+    }
+    buildManagedRecordKey(claimOwnerIdArg) {
+        return `${GATEWAY_ROUTE_DNS_MANAGED_BY}:${Buffer.from(claimOwnerIdArg, 'utf8').toString('base64url')}`;
+    }
+    getContributingRouteKeys(gatewayClientIdArg, hostnameArg, excludedExternalKeyArg) {
+        const claim = this.getActiveClaimsForHostname(hostnameArg)
+            .find((claimArg) => claimArg.gatewayClientId === gatewayClientIdArg.trim().toLowerCase());
+        return (claim?.routeExternalKeys || []).filter((externalKeyArg) => externalKeyArg !== excludedExternalKeyArg);
+    }
+    isAddressRecord(recordArg) {
+        return recordArg.type === 'A' || recordArg.type === 'AAAA' || recordArg.type === 'CNAME';
+    }
+    normalizeStoredHostname(hostnameArg) {
+        try {
+            return normalizeGatewayHostname(hostnameArg);
+        }
+        catch {
+            return '';
+        }
+    }
+    toEvidence(recordArg) {
+        return {
+            id: recordArg.id,
+            type: recordArg.type,
+            name: recordArg.name,
+            value: recordArg.value,
+            ttl: recordArg.ttl,
+            proxied: recordArg.proxied,
+            managed: recordArg.managedBy === GATEWAY_ROUTE_DNS_MANAGED_BY,
+        };
+    }
+    snapshotRecord(recordArg) {
+        return {
+            name: recordArg.name,
+            type: recordArg.type,
+            value: recordArg.value,
+            ttl: recordArg.ttl,
+            proxied: recordArg.proxied,
+            createdBy: recordArg.createdBy,
+            managedBy: recordArg.managedBy,
+            managedOwnerId: recordArg.managedOwnerId,
+            managedRecordKey: recordArg.managedRecordKey,
+        };
+    }
+    async restoreRecords(zoneArg, hostnameArg, snapshotsArg) {
+        const dnsManager = this.dcRouterRef.dnsManager;
+        if (!dnsManager)
+            throw new Error('DnsManager is not initialized');
+        const current = (await dnsManager.listRecordsForDomain(zoneArg.id)).filter((recordArg) => {
+            return this.normalizeStoredHostname(recordArg.name) === hostnameArg && this.isAddressRecord(recordArg);
+        });
+        for (const record of current) {
+            const deleted = await dnsManager.deleteRecord(record.id);
+            if (!deleted.success)
+                throw new Error(deleted.message || `Failed to remove partial DNS record ${record.id}`);
+        }
+        for (const snapshot of snapshotsArg) {
+            const created = await dnsManager.createRecord({ domainId: zoneArg.id, ...snapshot });
+            if (!created.success)
+                throw new Error(created.message || `Failed to restore ${snapshot.type} ${snapshot.name}`);
+        }
+        const restored = (await dnsManager.listRecordsForDomain(zoneArg.id)).filter((recordArg) => {
+            return this.normalizeStoredHostname(recordArg.name) === hostnameArg && this.isAddressRecord(recordArg);
+        });
+        const normalize = (valueArg) => JSON.stringify({
+            name: this.normalizeStoredHostname(valueArg.name),
+            type: valueArg.type,
+            value: valueArg.value,
+            ttl: valueArg.ttl,
+            proxied: valueArg.proxied,
+            managedBy: valueArg.managedBy,
+            managedOwnerId: valueArg.managedOwnerId,
+            managedRecordKey: valueArg.managedRecordKey,
+        });
+        const expected = snapshotsArg.map(normalize).sort();
+        const actual = restored.map((recordArg) => normalize(this.snapshotRecord(recordArg))).sort();
+        if (JSON.stringify(actual) !== JSON.stringify(expected)) {
+            throw new Error('Restored DNS records do not match the pre-mutation snapshot');
+        }
+    }
+    async withHostnameLock(hostnameArg, taskArg) {
+        const hostname = normalizeGatewayHostname(hostnameArg);
+        const previous = this.hostnameChains.get(hostname) || Promise.resolve();
+        const run = previous.catch(() => undefined).then(taskArg);
+        const settled = run.then(() => undefined, () => undefined);
+        this.hostnameChains.set(hostname, settled);
+        try {
+            return await run;
+        }
+        finally {
+            if (this.hostnameChains.get(hostname) === settled) {
+                this.hostnameChains.delete(hostname);
+            }
+        }
+    }
+    async recordManualClaimEvent(zoneArg, hostnameArg, targetIpArg, claimOwnerIdArg, contributingRouteKeysArg, recordsArg) {
+        if (this.dcRouterRef.opsEventManager) {
+            try {
+                await this.dcRouterRef.opsEventManager.recordEvent({
+                    severity: 'error',
+                    category: 'dns-conflict',
+                    title: 'Gateway route DNS automation claimed a manual hostname',
+                    detail: `Gateway DNS owner ${claimOwnerIdArg} replaced ${recordsArg.length} manual A/AAAA/CNAME record(s) for ${hostnameArg}.`,
+                    context: {
+                        domain: zoneArg.name,
+                        recordName: hostnameArg,
+                        previousValue: recordsArg.map((recordArg) => `${recordArg.type} ${recordArg.value}`).join(', '),
+                        newValue: targetIpArg,
+                        routeRef: contributingRouteKeysArg.join(', ') || claimOwnerIdArg,
+                        actor: GATEWAY_ROUTE_DNS_MANAGED_BY,
+                    },
+                });
+            }
+            catch (error) {
+                logger.log('warn', `Failed to record gateway DNS conflict event for ${hostnameArg}: ${error.message}`);
+            }
+        }
+        try {
+            this.dcRouterRef.opsServer?.invalidateRealtime?.('configEvents', {
+                reason: 'gateway-dns-manual-claim',
+            });
+        }
+        catch (error) {
+            logger.log('warn', `Failed to invalidate config events after gateway DNS claim for ${hostnameArg}: ${error.message}`);
+        }
+    }
+    successForZone(statusArg, modeArg, checkedAtArg, hostnameArg, targetIpArg, recordTypeArg, zoneArg, recordsArg) {
+        return {
+            success: true,
+            retryable: false,
+            mode: modeArg,
+            status: statusArg,
+            hostname: hostnameArg,
+            targetIp: targetIpArg,
+            recordType: recordTypeArg,
+            zoneId: zoneArg.id,
+            zoneName: zoneArg.name,
+            nameservers: zoneArg.nameservers,
+            records: recordsArg.map((recordArg) => this.toEvidence(recordArg)),
+            checkedAt: checkedAtArg,
+        };
+    }
+    failureForZone(modeArg, checkedAtArg, hostnameArg, targetIpArg, recordTypeArg, zoneArg, statusArg, messageArg, recordsArg = []) {
+        return {
+            success: false,
+            retryable: statusArg === 'zone-unavailable'
+                || statusArg === 'mutation-failed'
+                || statusArg === 'compensation-failed',
+            mode: modeArg,
+            status: statusArg,
+            hostname: hostnameArg,
+            targetIp: targetIpArg,
+            recordType: recordTypeArg,
+            zoneId: zoneArg.id,
+            zoneName: zoneArg.name,
+            nameservers: zoneArg.nameservers,
+            records: recordsArg.map((recordArg) => this.toEvidence(recordArg)),
+            checkedAt: checkedAtArg,
+            message: messageArg,
+        };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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