@ts-cloud/core 0.7.104 → 0.7.108

package/dist/types.d.ts

@@ -426,16 +426,6 @@ export interface InfrastructureConfig {
      */
     realtime?: RealtimeConfig;
     dns?: DnsConfig;
-    /**
-     * Mail DNS for domains this deployment sends mail from.
-     *
-     * A domain that sends mail needs MX, SPF, DKIM and DMARC, and getting any of
-     * them wrong is invisible: mail lands in spam or is dropped by the receiver
-     * with nothing surfaced to the sender. Declaring it here lets the deploy
-     * publish the records rather than leaving them to be typed by hand and
-     * forgotten.
-     */
-    mail?: MailConfig;
     security?: SecurityConfig;
     monitoring?: MonitoringConfig;
     api?: ApiConfig;
@@ -851,39 +841,6 @@ export interface SharedPathSpec {
 }
 /** A shared path: a release-relative path, or {@link SharedPathSpec}. */
 export type SharedPathEntry = string | SharedPathSpec;
-/**
- * Mail DNS provisioning for a deployment.
- *
- * Opt-in: absent means the deploy touches no mail records at all, which is the
- * right default for the many apps that send nothing.
- */
-export interface MailConfig {
-    /** Set false to keep the block for reference without publishing records. */
-    enabled?: boolean;
-    /** Mail server hostname that receives for these domains. */
-    host: string;
-    /**
-     * Domains to publish records for. Defaults to every site domain, since a
-     * deployment that sends mail almost always sends as the site it serves.
-     */
-    domains?: string[];
-    /** Public IPv4 authorised in SPF. Defaults to the app server's own IP. */
-    ip?: string;
-    /** Extra SPF mechanisms, e.g. `include:amazonses.com`. */
-    spfIncludes?: string[];
-    /** DKIM selector. Convention is `default`. */
-    dkimSelector?: string;
-    /**
-     * DKIM public key, per domain. Omitting a domain skips only its DKIM record:
-     * publishing an empty key is worse than publishing none, because a broken
-     * signature is a stronger negative signal than an unsigned message.
-     */
-    dkimPublicKeys?: Record<string, string>;
-    /** DMARC policy. `none` (report only) unless stated otherwise. */
-    dmarcPolicy?: 'none' | 'quarantine' | 'reject';
-    /** Address for aggregate DMARC reports. */
-    dmarcReportTo?: string;
-}
 export interface SiteConfig {
     /**
      * Directory to deploy.
@@ -2629,7 +2586,78 @@ export interface ComputeMonitoringConfig {
         memPercent?: number;
         /** Alert when root-filesystem usage percentage is ≥ this. @default 90 */
         diskPercent?: number;
+        /**
+         * Monthly bandwidth allowance in TB (decimal, as providers quote it).
+         *
+         * Set it and the collector accumulates month-to-date rx+tx and warns once
+         * {@link bandwidthPercent} of the allowance is used — before the provider's
+         * overage mail. Omit (or 0) to skip bandwidth alerting entirely; the
+         * accounting is still collected either way.
+         */
+        bandwidthTb?: number;
+        /** Alert when month-to-date bandwidth is ≥ this share of the allowance. @default 80 */
+        bandwidthPercent?: number;
     };
+    /**
+     * Endpoints reporting object-storage egress.
+     *
+     * Host network counters cannot see this. When an application redirects
+     * downloads to object storage (or to a CDN in front of it), the bytes never
+     * cross the host's NIC — the box can look idle while the bucket serves
+     * terabytes, and the first sign of an overrun is the provider's invoice. The
+     * only component that knows is the application doing the redirecting, so this
+     * polls it and records what it reports.
+     *
+     * Each endpoint must return an {@link EgressReport}.
+     */
+    egressEndpoints?: EgressEndpointConfig[];
+}
+/** An application endpoint reporting its own object-storage egress. */
+export interface EgressEndpointConfig {
+    /** Short slug identifying this source in metrics (e.g. "registry"). */
+    name: string;
+    /** Absolute URL returning an {@link EgressReport} as JSON. */
+    url: string;
+    /**
+     * Name of an environment variable holding a bearer token for the request.
+     *
+     * The variable name, never the token itself — config is committed, tokens are
+     * not. Omit for a public endpoint.
+     */
+    tokenEnv?: string;
+}
+/**
+ * What an {@link EgressEndpointConfig} URL is expected to return.
+ *
+ * Every field is optional and validated on arrival: a partial or malformed
+ * report degrades to fewer recorded series rather than failing the whole
+ * telemetry collection, because losing host metrics to a bad egress endpoint
+ * would be a bad trade.
+ *
+ * `days` is the valuable part. Reporting a per-day history rather than a single
+ * running counter means the collector can replay it — any day missed while the
+ * collector was down still lands, and re-collecting the same day is idempotent
+ * rather than double-counted.
+ */
+export interface EgressReport {
+    /** UTC day key (YYYY-MM-DD) the `today` figures describe. */
+    today?: string;
+    todayBytes?: number;
+    /** UTC month key (YYYY-MM) the month-to-date figures describe. */
+    month?: string;
+    monthBytes?: number;
+    /** Monthly allowance in bytes; 0 or absent when none is configured. */
+    budgetBytes?: number;
+    /** Share of the allowance consumed, or null when there is no allowance. */
+    budgetUsedPercent?: number | null;
+    /** Straight-line month-end projection in bytes. */
+    projectedMonthBytes?: number;
+    /** Per-day totals, oldest first. */
+    days?: Array<{
+        date: string;
+        bytes: number;
+        downloads?: number;
+    }>;
 }
 /** Host firewall (UFW) configuration. See {@link ComputeConfig.firewall}. */
 export interface ComputeFirewallConfig {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ts-cloud/core",
   "type": "module",
-  "version": "0.7.104",
+  "version": "0.7.108",
   "description": "Core CloudFormation generation library for ts-cloud",
   "author": "Chris Breuer <chris@stacksjs.com>",
   "license": "MIT",
@@ -31,7 +31,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.7.104"
+    "@ts-cloud/aws-types": "0.7.108"
   },
   "devDependencies": {
     "typescript": "^7.0.2"