dkimkit 0.0.0-stage → 0.6.1

package/dist/src/hosted/sqlite-store.js

@@ -0,0 +1,351 @@
+import { DatabaseSync } from 'node:sqlite';
+import { ACCOUNT_BILLING_COLUMNS, ACCOUNT_COLUMNS, DASHBOARD_SESSION_COLUMNS, LOGIN_TOKEN_COLUMNS, DELIVERY_COLUMNS, DOMAIN_COLUMNS, DuplicateError, EVENT_COLUMNS, fromColumns, jsonFallback, SESSION_COLUMNS, toColumns, toUsageRow, USAGE_COLUMNS, usageSql, } from './store.js';
+const SCHEMA = `
+CREATE TABLE IF NOT EXISTS accounts (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  api_key_hash TEXT NOT NULL UNIQUE,
+  sendgrid_api_key_enc TEXT,
+  webhook_url TEXT,
+  webhook_secret TEXT NOT NULL,
+  widget_origins TEXT NOT NULL DEFAULT '[]',
+  domain_limit INTEGER,
+  created_at INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS domains (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+  domain TEXT NOT NULL,
+  subdomain TEXT NOT NULL DEFAULT '',
+  tenant_id TEXT,
+  metadata TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL,
+  sendgrid_domain_id TEXT NOT NULL,
+  sendgrid_subuser TEXT,
+  dns_provider TEXT NOT NULL,
+  dns_credentials_enc TEXT,
+  inbound TEXT,
+  overwrite INTEGER NOT NULL DEFAULT 0,
+  records TEXT NOT NULL DEFAULT '[]',
+  pending TEXT NOT NULL DEFAULT '[]',
+  validation TEXT,
+  conflicts TEXT,
+  last_error TEXT,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_run_at INTEGER,
+  locked_until INTEGER,
+  verified_at INTEGER,
+  expires_at INTEGER,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE (account_id, domain, subdomain)
+);
+CREATE INDEX IF NOT EXISTS domains_due ON domains (next_run_at) WHERE next_run_at IS NOT NULL;
+CREATE INDEX IF NOT EXISTS domains_by_account ON domains (account_id, created_at, id);
+CREATE TABLE IF NOT EXISTS events (
+  id TEXT PRIMARY KEY,
+  domain_id TEXT NOT NULL,
+  account_id TEXT NOT NULL,
+  type TEXT NOT NULL,
+  data TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS events_by_domain ON events (domain_id, created_at);
+CREATE TABLE IF NOT EXISTS webhook_deliveries (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+  event_id TEXT NOT NULL,
+  url TEXT NOT NULL,
+  payload TEXT NOT NULL,
+  status TEXT NOT NULL,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER,
+  locked_until INTEGER,
+  last_error TEXT,
+  response_status INTEGER,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS deliveries_due ON webhook_deliveries (next_attempt_at) WHERE status = 'pending';
+CREATE TABLE IF NOT EXISTS usage_records (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  tenant_id TEXT,
+  domain_id TEXT NOT NULL,
+  domain TEXT NOT NULL,
+  metric TEXT NOT NULL,
+  quantity INTEGER NOT NULL,
+  day TEXT NOT NULL,
+  occurred_at INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS usage_by_account_day ON usage_records (account_id, day);
+CREATE TABLE IF NOT EXISTS widget_sessions (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL UNIQUE,
+  domain_id TEXT,
+  defaults TEXT,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS login_tokens (
+  token_hash TEXT PRIMARY KEY,
+  email TEXT NOT NULL,
+  name TEXT,
+  expires_at INTEGER NOT NULL,
+  used_at INTEGER,
+  created_at INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS dashboard_sessions (
+  token_hash TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS billing_events (
+  id TEXT PRIMARY KEY,
+  processed_at INTEGER NOT NULL
+);
+`;
+/** Columns added after the first release, for databases created before them. */
+const MIGRATIONS = [
+    ['accounts', 'widget_origins', "TEXT NOT NULL DEFAULT '[]'"],
+    ['accounts', 'domain_limit', 'INTEGER'],
+    ...ACCOUNT_BILLING_COLUMNS.map(([column, sqlite]) => ['accounts', column, sqlite]),
+];
+/** Run after MIGRATIONS, since they use migrated columns. */
+const POST_MIGRATION = `
+UPDATE accounts SET email_credentials_enc = sendgrid_api_key_enc
+  WHERE email_credentials_enc IS NULL AND sendgrid_api_key_enc IS NOT NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS accounts_by_email ON accounts (email);
+CREATE INDEX IF NOT EXISTS accounts_by_billing_customer ON accounts (billing_customer_id);
+`;
+function encode(kind, v) {
+    if (kind === 'bool')
+        return v ? 1 : 0;
+    if (kind === 'emptyAsNull')
+        return v ?? '';
+    if (typeof kind === 'object')
+        return v === null ? null : JSON.stringify(v);
+    return v ?? null;
+}
+function decode(kind, v) {
+    if (kind === 'bool')
+        return v === 1;
+    if (kind === 'emptyAsNull')
+        return v === '' ? null : v;
+    if (typeof kind === 'object')
+        return v === null || v === undefined ? jsonFallback(kind) : JSON.parse(v);
+    return v ?? null;
+}
+const toRow = (map, value) => toColumns(map, value, encode);
+const fromRow = (map, row) => fromColumns(map, row, decode);
+export class SqliteStore {
+    db;
+    /** `path` is a file path, or ':memory:' for tests. */
+    constructor(path) {
+        this.db = new DatabaseSync(path);
+        this.db.exec('PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000;');
+        this.db.exec(SCHEMA);
+        for (const [table, column, definition] of MIGRATIONS) {
+            const columns = this.db.prepare(`PRAGMA table_info(${table})`).all().map((c) => c.name);
+            if (!columns.includes(column))
+                this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
+        }
+        this.db.exec(POST_MIGRATION);
+    }
+    async createAccount(account) {
+        this.insert('accounts', toRow(ACCOUNT_COLUMNS, account));
+    }
+    async getAccount(id) {
+        return fromRow(ACCOUNT_COLUMNS, this.db.prepare('SELECT * FROM accounts WHERE id = ?').get(id));
+    }
+    async getAccountByKeyHash(hash) {
+        return fromRow(ACCOUNT_COLUMNS, this.db.prepare('SELECT * FROM accounts WHERE api_key_hash = ?').get(hash));
+    }
+    async updateAccount(id, patch) {
+        this.update('accounts', id, toRow(ACCOUNT_COLUMNS, patch));
+    }
+    async insertDomain(domain) {
+        try {
+            this.insert('domains', toRow(DOMAIN_COLUMNS, domain));
+        }
+        catch (err) {
+            if (/UNIQUE constraint failed/.test(String(err.message)))
+                throw new DuplicateError('Domain already registered');
+            throw err;
+        }
+    }
+    async getDomain(accountId, id) {
+        return fromRow(DOMAIN_COLUMNS, this.db.prepare('SELECT * FROM domains WHERE account_id = ? AND id = ?').get(accountId, id));
+    }
+    async findDomain(accountId, domain, subdomain) {
+        const row = this.db
+            .prepare('SELECT * FROM domains WHERE account_id = ? AND domain = ? AND subdomain = ?')
+            .get(accountId, domain, subdomain ?? '');
+        return fromRow(DOMAIN_COLUMNS, row);
+    }
+    async listDomains(accountId, query) {
+        const where = ['account_id = $account'];
+        const params = { $account: accountId, $limit: query.limit + 1 };
+        if (query.tenantId) {
+            where.push('tenant_id = $tenant');
+            params.$tenant = query.tenantId;
+        }
+        if (query.status) {
+            where.push('status = $status');
+            params.$status = query.status;
+        }
+        if (query.after) {
+            const [createdAt, id] = Buffer.from(query.after, 'base64url').toString('utf8').split(':');
+            where.push('(created_at < $afterAt OR (created_at = $afterAt AND id < $afterId))');
+            params.$afterAt = Number(createdAt);
+            params.$afterId = id ?? '';
+        }
+        const rows = this.db
+            .prepare(`SELECT * FROM domains WHERE ${where.join(' AND ')} ORDER BY created_at DESC, id DESC LIMIT $limit`)
+            .all(params)
+            .map((r) => fromRow(DOMAIN_COLUMNS, r));
+        const page = rows.slice(0, query.limit);
+        const last = page.at(-1);
+        const next = rows.length > query.limit && last ? Buffer.from(`${last.createdAt}:${last.id}`).toString('base64url') : null;
+        return { domains: page, next };
+    }
+    async updateDomain(id, patch) {
+        this.update('domains', id, toRow(DOMAIN_COLUMNS, patch));
+        return fromRow(DOMAIN_COLUMNS, this.db.prepare('SELECT * FROM domains WHERE id = ?').get(id));
+    }
+    async deleteDomain(id) {
+        this.db.prepare('DELETE FROM events WHERE domain_id = ?').run(id);
+        this.db.prepare('DELETE FROM widget_sessions WHERE domain_id = ?').run(id);
+        this.db.prepare('DELETE FROM domains WHERE id = ?').run(id);
+    }
+    async claimDueDomains(now, limit, leaseMs) {
+        return this.db
+            .prepare(`UPDATE domains SET locked_until = $lease
+         WHERE id IN (
+           SELECT id FROM domains
+           WHERE next_run_at IS NOT NULL AND next_run_at <= $now AND (locked_until IS NULL OR locked_until < $now)
+           ORDER BY next_run_at LIMIT $limit
+         )
+         RETURNING *`)
+            .all({ $lease: now + leaseMs, $now: now, $limit: limit })
+            .map((r) => fromRow(DOMAIN_COLUMNS, r));
+    }
+    async addEvent(event) {
+        this.insert('events', toRow(EVENT_COLUMNS, event));
+    }
+    async listEvents(domainId, limit) {
+        return this.db
+            .prepare('SELECT * FROM events WHERE domain_id = ? ORDER BY created_at DESC, rowid DESC LIMIT ?')
+            .all(domainId, limit)
+            .map((r) => fromRow(EVENT_COLUMNS, r));
+    }
+    async addDelivery(delivery) {
+        this.insert('webhook_deliveries', toRow(DELIVERY_COLUMNS, delivery));
+    }
+    async claimDueDeliveries(now, limit, leaseMs) {
+        return this.db
+            .prepare(`UPDATE webhook_deliveries SET locked_until = $lease
+         WHERE id IN (
+           SELECT id FROM webhook_deliveries
+           WHERE status = 'pending' AND next_attempt_at <= $now AND (locked_until IS NULL OR locked_until < $now)
+           ORDER BY next_attempt_at LIMIT $limit
+         )
+         RETURNING *`)
+            .all({ $lease: now + leaseMs, $now: now, $limit: limit })
+            .map((r) => fromRow(DELIVERY_COLUMNS, r));
+    }
+    async updateDelivery(id, patch) {
+        this.update('webhook_deliveries', id, toRow(DELIVERY_COLUMNS, patch));
+    }
+    async createWidgetSession(session) {
+        this.insert('widget_sessions', toRow(SESSION_COLUMNS, session));
+    }
+    async getWidgetSessionByHash(hash) {
+        return fromRow(SESSION_COLUMNS, this.db.prepare('SELECT * FROM widget_sessions WHERE token_hash = ?').get(hash));
+    }
+    async updateWidgetSession(id, patch) {
+        this.update('widget_sessions', id, toRow(SESSION_COLUMNS, patch));
+    }
+    async listAccounts() {
+        return this.db.prepare('SELECT * FROM accounts ORDER BY created_at, id').all().map((r) => fromRow(ACCOUNT_COLUMNS, r));
+    }
+    async countDomains(accountId) {
+        return Number(this.db.prepare('SELECT COUNT(*) AS n FROM domains WHERE account_id = ?').get(accountId).n);
+    }
+    async recordUsage(records) {
+        for (const record of records) {
+            const row = toRow(USAGE_COLUMNS, record);
+            const columns = Object.keys(row);
+            this.db
+                .prepare(`INSERT OR IGNORE INTO usage_records (${columns.join(', ')}) VALUES (${columns.map((c) => `$${c}`).join(', ')})`)
+                .run(Object.fromEntries(columns.map((c) => [`$${c}`, row[c]])));
+        }
+    }
+    async recordActiveDomainDays(day, now) {
+        this.db
+            .prepare(`INSERT OR IGNORE INTO usage_records (id, account_id, tenant_id, domain_id, domain, metric, quantity, day, occurred_at)
+         SELECT 'active_domain_day:' || id || ':' || $day, account_id, tenant_id, id, domain, 'active_domain_day', 1, $day, $now
+         FROM domains WHERE status = 'verified'`)
+            .run({ $day: day, $now: now });
+    }
+    async summarizeUsage(query) {
+        const params = [query.from, query.to, ...(query.accountId ? [query.accountId] : [])];
+        return this.db
+            .prepare(usageSql(query, () => '?'))
+            .all(...params)
+            .map((r) => toUsageRow(r, Boolean(query.groupByTenant)));
+    }
+    async getAccountByEmail(email) {
+        return fromRow(ACCOUNT_COLUMNS, this.db.prepare('SELECT * FROM accounts WHERE email = ?').get(email));
+    }
+    async getAccountByBillingCustomer(customerId) {
+        return fromRow(ACCOUNT_COLUMNS, this.db.prepare('SELECT * FROM accounts WHERE billing_customer_id = ?').get(customerId));
+    }
+    async listBillableAccounts() {
+        return this.db
+            .prepare("SELECT * FROM accounts WHERE billing_status IN ('active', 'past_due') AND billing_customer_id IS NOT NULL ORDER BY id")
+            .all()
+            .map((r) => fromRow(ACCOUNT_COLUMNS, r));
+    }
+    async createLoginToken(token) {
+        this.insert('login_tokens', toRow(LOGIN_TOKEN_COLUMNS, token));
+    }
+    async consumeLoginToken(tokenHash, now) {
+        const row = this.db
+            .prepare('UPDATE login_tokens SET used_at = $now WHERE token_hash = $hash AND used_at IS NULL AND expires_at > $now RETURNING *')
+            .get({ $now: now, $hash: tokenHash });
+        return fromRow(LOGIN_TOKEN_COLUMNS, row);
+    }
+    async createDashboardSession(session) {
+        this.insert('dashboard_sessions', toRow(DASHBOARD_SESSION_COLUMNS, session));
+    }
+    async getDashboardSession(tokenHash) {
+        return fromRow(DASHBOARD_SESSION_COLUMNS, this.db.prepare('SELECT * FROM dashboard_sessions WHERE token_hash = ?').get(tokenHash));
+    }
+    async deleteDashboardSession(tokenHash) {
+        this.db.prepare('DELETE FROM dashboard_sessions WHERE token_hash = ?').run(tokenHash);
+    }
+    async markBillingEventProcessed(eventId, now) {
+        // `changes` may be a bigint.
+        return Number(this.db.prepare('INSERT OR IGNORE INTO billing_events (id, processed_at) VALUES (?, ?)').run(eventId, now).changes) === 1;
+    }
+    async close() {
+        this.db.close();
+    }
+    insert(table, row) {
+        const columns = Object.keys(row);
+        this.db
+            .prepare(`INSERT INTO ${table} (${columns.join(', ')}) VALUES (${columns.map((c) => `$${c}`).join(', ')})`)
+            .run(Object.fromEntries(columns.map((c) => [`$${c}`, row[c]])));
+    }
+    update(table, id, row) {
+        const columns = Object.keys(row);
+        if (columns.length === 0)
+            return;
+        this.db
+            .prepare(`UPDATE ${table} SET ${columns.map((c) => `${c} = $${c}`).join(', ')} WHERE id = $__id`)
+            .run({ ...Object.fromEntries(columns.map((c) => [`$${c}`, row[c]])), $__id: id });
+    }
+}
+//# sourceMappingURL=sqlite-store.js.map

package/dist/src/hosted/sqlite-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-store.js","sourceRoot":"","sources":["../../../src/hosted/sqlite-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EAGnB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EACZ,eAAe,EACf,SAAS,EACT,UAAU,EACV,aAAa,EACb,QAAQ,GAaT,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyGd,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,GAA0D;IACxE,CAAC,UAAU,EAAE,gBAAgB,EAAE,4BAA4B,CAAC;IAC5D,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC;IACvC,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAA4B,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7G,CAAC;AAEF,6DAA6D;AAC7D,MAAM,cAAc,GAAG;;;;;CAKtB,CAAC;AAIF,SAAS,MAAM,CAAC,IAAgB,EAAE,CAAU;IAC1C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,aAAa;QAAE,OAAQ,CAAmB,IAAI,EAAE,CAAC;IAC9D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAQ,CAAmB,IAAI,IAAI,CAAC;AACtC,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,CAAU;IAC1C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAW,CAAC,CAAC;IAClH,OAAO,CAAC,IAAI,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,KAAK,GAAG,CAAI,GAAiB,EAAE,KAAiB,EAAO,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9F,MAAM,OAAO,GAAG,CAAI,GAAiB,EAAE,GAAY,EAAiB,EAAE,CAAC,WAAW,CAAI,GAAG,EAAE,GAA0C,EAAE,MAAM,CAAC,CAAC;AAE/I,MAAM,OAAO,WAAW;IACL,EAAE,CAAe;IAElC,sDAAsD;IACtD,YAAY,IAAY;QACtB,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACjG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qBAAqB,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,OAAO,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY;QACpC,OAAO,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAuB;QACrD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAiB;QAClC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;YAC3H,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,EAAU;QAC3C,OAAO,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9H,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,SAAwB;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAuB;QAC1D,MAAM,KAAK,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,MAAM,GAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACrE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACnF,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,iDAAiD,CAAC;aAC5G,GAAG,CAAC,MAAM,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAY,cAAc,EAAE,CAAC,CAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,KAAyB;QACtD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,CAAY,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAE,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe;QAC/D,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;qBAMa,CACd;aACA,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAY,cAAc,EAAE,CAAC,CAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAkB;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,KAAa;QAC9C,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,uFAAuF,CAAC;aAChG,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAc,aAAa,EAAE,CAAC,CAAE,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAyB;QACzC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe;QAClE,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;qBAMa,CACd;aACA,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAkB,gBAAgB,EAAE,CAAC,CAAE,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU,EAAE,KAA+B;QAC9D,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAsB;QAC9C,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAY;QACvC,OAAO,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,EAAU,EAAE,KAA6B;QACjE,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAU,eAAe,EAAE,CAAC,CAAE,CAAC,CAAC;IACnI,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,OAAO,MAAM,CAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAmB,CAAC,CAAC,CAAC,CAAC;IAC/H,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAsB;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;iBACzH,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,GAAW,EAAE,GAAW;QACnD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;gDAEwC,CACzC;aACA,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAiB;QACpC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;aACnC,GAAG,CAAC,GAAG,MAAM,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAA4B,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,OAAO,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,UAAkB;QAClD,OAAO,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3H,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,uHAAuH,CAAC;aAChI,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAU,eAAe,EAAE,CAAC,CAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB;QACtC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,uHAAuH,CAAC;aAChI,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAyB;QACpD,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACrI,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,OAAe,EAAE,GAAW;QAC1D,6BAA6B;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1I,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,KAAa,EAAE,GAAQ;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,eAAe,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aAC1G,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,KAAa,EAAE,EAAU,EAAE,GAAQ;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,UAAU,KAAK,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;aAChG,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;CACF"}

package/dist/src/hosted/store.d.ts

@@ -0,0 +1,257 @@
+import type { DnsRecord, PlannedChange, ValidationResult } from '../types.js';
+export type DomainStatus = 'pending' | 'awaiting_dns' | 'verifying' | 'verified' | 'conflict' | 'failed';
+export interface Account {
+    id: string;
+    name: string;
+    apiKeyHash: string;
+    /** sendgrid | postmark | mailgun | ses */
+    emailProvider: string;
+    /** Encrypted JSON of the provider's credentials (see EmailCredentials). */
+    emailCredentialsEnc: string | null;
+    webhookUrl: string | null;
+    webhookSecret: string;
+    /** Origins allowed to embed the widget. */
+    widgetOrigins: string[];
+    /** Max domains this account may have at once; null for unlimited. Set by the operator. */
+    domainLimit: number | null;
+    /** Sign-in email for self-serve accounts; null for operator-created ones. */
+    email: string | null;
+    billingCustomerId: string | null;
+    billingSubscriptionId: string | null;
+    billingStatus: BillingStatus;
+    /** Current billing period from the payment provider, ms. */
+    billingPeriodStart: number | null;
+    billingPeriodEnd: number | null;
+    /** Active domains already reported to the payment provider this period. */
+    reportedQuantity: number;
+    /** Time (seconds) of the last billing event applied, to ignore stale, out-of-order ones. */
+    billingEventAt: number | null;
+    createdAt: number;
+}
+/** free: no card on file. active: paying. past_due: payment failing, the provider is retrying. */
+export type BillingStatus = 'free' | 'active' | 'past_due';
+/** A single-use email sign-in / sign-up link. */
+export interface LoginToken {
+    tokenHash: string;
+    email: string;
+    name: string | null;
+    expiresAt: number;
+    usedAt: number | null;
+    createdAt: number;
+}
+export interface DashboardSession {
+    tokenHash: string;
+    accountId: string;
+    expiresAt: number;
+    createdAt: number;
+}
+export type UsageMetric = 'domain_created' | 'domain_verified' | 'active_domain_day';
+/**
+ * One billable fact. Append-only, and the id is deterministic (e.g.
+ * "active_domain_day:dom_1:2026-10-25"), so recording the same fact twice is a no-op.
+ * Domain name and tenant are snapshots, so history survives domain deletion.
+ */
+export interface UsageRecord {
+    id: string;
+    accountId: string;
+    tenantId: string | null;
+    domainId: string;
+    domain: string;
+    metric: UsageMetric;
+    quantity: number;
+    /** UTC calendar day, YYYY-MM-DD. */
+    day: string;
+    occurredAt: number;
+}
+export interface UsageTotals {
+    domainsCreated: number;
+    verifications: number;
+    /** Distinct domains that were verified on at least one day of the period. */
+    activeDomains: number;
+    /** Sum over days of verified domains: for prorated billing. */
+    activeDomainDays: number;
+}
+export interface UsageQuery {
+    /** Inclusive UTC days, YYYY-MM-DD. */
+    from: string;
+    to: string;
+    /** Omit for every account (operator reports). */
+    accountId?: string;
+    groupByTenant?: boolean;
+}
+export interface UsageRow extends UsageTotals {
+    accountId: string;
+    /** Present when grouped by tenant. */
+    tenantId?: string | null;
+}
+export interface WidgetDefaults {
+    tenantId: string;
+    metadata: Record<string, string>;
+    subdomain: string | null;
+    sendgridSubuser: string | null;
+    /** Inbound parse webhook; the hostname becomes parse.<domain>. */
+    inboundUrl: string | null;
+}
+/** A short-lived browser credential scoped to one domain (or to creating one). */
+export interface WidgetSession {
+    id: string;
+    accountId: string;
+    tokenHash: string;
+    domainId: string | null;
+    /** Used when the end user enters the domain in the widget. */
+    defaults: WidgetDefaults | null;
+    expiresAt: number;
+    createdAt: number;
+}
+export interface InboundConfig {
+    url: string;
+    hostname: string;
+    spamCheck: boolean;
+    sendRaw: boolean;
+}
+export interface DomainRow {
+    id: string;
+    accountId: string;
+    domain: string;
+    subdomain: string | null;
+    tenantId: string | null;
+    metadata: Record<string, string>;
+    status: DomainStatus;
+    /** The domain's id at the email provider. */
+    providerDomainId: string;
+    sendgridSubuser: string | null;
+    dnsProvider: string;
+    dnsCredentialsEnc: string | null;
+    inbound: InboundConfig | null;
+    overwrite: boolean;
+    records: DnsRecord[];
+    /** Names of records not yet visible in DNS at the last check. */
+    pending: string[];
+    validation: ValidationResult | null;
+    conflicts: PlannedChange[] | null;
+    lastError: string | null;
+    attempts: number;
+    nextRunAt: number | null;
+    lockedUntil: number | null;
+    verifiedAt: number | null;
+    expiresAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface DomainEvent {
+    id: string;
+    domainId: string;
+    accountId: string;
+    type: string;
+    data: Record<string, unknown>;
+    createdAt: number;
+}
+export interface WebhookDelivery {
+    id: string;
+    accountId: string;
+    eventId: string;
+    url: string;
+    payload: string;
+    status: 'pending' | 'delivered' | 'failed';
+    attempts: number;
+    nextAttemptAt: number | null;
+    lockedUntil: number | null;
+    lastError: string | null;
+    responseStatus: number | null;
+    createdAt: number;
+}
+export interface ListDomainsQuery {
+    tenantId?: string;
+    status?: DomainStatus;
+    limit: number;
+    /** Opaque cursor from a previous page. */
+    after?: string;
+}
+export declare class DuplicateError extends Error {
+}
+/** Persistence for the hosted API. Implemented by SqliteStore and PostgresStore. */
+export interface Store {
+    createAccount(account: Account): Promise<void>;
+    getAccount(id: string): Promise<Account | undefined>;
+    getAccountByKeyHash(hash: string): Promise<Account | undefined>;
+    updateAccount(id: string, patch: Partial<Omit<Account, 'id' | 'createdAt'>>): Promise<void>;
+    /** Throws DuplicateError when the account already has this domain + subdomain. */
+    insertDomain(domain: DomainRow): Promise<void>;
+    getDomain(accountId: string, id: string): Promise<DomainRow | undefined>;
+    findDomain(accountId: string, domain: string, subdomain: string | null): Promise<DomainRow | undefined>;
+    listDomains(accountId: string, query: ListDomainsQuery): Promise<{
+        domains: DomainRow[];
+        next: string | null;
+    }>;
+    updateDomain(id: string, patch: Partial<Omit<DomainRow, 'id' | 'accountId' | 'createdAt'>>): Promise<DomainRow>;
+    deleteDomain(id: string): Promise<void>;
+    /** Atomically leases up to `limit` domains whose next run is due. */
+    claimDueDomains(now: number, limit: number, leaseMs: number): Promise<DomainRow[]>;
+    addEvent(event: DomainEvent): Promise<void>;
+    listEvents(domainId: string, limit: number): Promise<DomainEvent[]>;
+    addDelivery(delivery: WebhookDelivery): Promise<void>;
+    claimDueDeliveries(now: number, limit: number, leaseMs: number): Promise<WebhookDelivery[]>;
+    updateDelivery(id: string, patch: Partial<Omit<WebhookDelivery, 'id' | 'accountId' | 'createdAt'>>): Promise<void>;
+    createWidgetSession(session: WidgetSession): Promise<void>;
+    getWidgetSessionByHash(hash: string): Promise<WidgetSession | undefined>;
+    updateWidgetSession(id: string, patch: Partial<Pick<WidgetSession, 'domainId'>>): Promise<void>;
+    listAccounts(): Promise<Account[]>;
+    /** Current number of domains (any status) for plan limits. */
+    countDomains(accountId: string): Promise<number>;
+    /** Inserts records, silently skipping ids that already exist. */
+    recordUsage(records: UsageRecord[]): Promise<void>;
+    /** Records an active day for every currently verified domain. Idempotent per domain and day. */
+    recordActiveDomainDays(day: string, now: number): Promise<void>;
+    summarizeUsage(query: UsageQuery): Promise<UsageRow[]>;
+    getAccountByEmail(email: string): Promise<Account | undefined>;
+    getAccountByBillingCustomer(customerId: string): Promise<Account | undefined>;
+    /** Accounts with a card on file (active or past_due) and a billing customer. */
+    listBillableAccounts(): Promise<Account[]>;
+    createLoginToken(token: LoginToken): Promise<void>;
+    /** Marks the token used and returns it, or undefined if unknown, expired or already used. Atomic. */
+    consumeLoginToken(tokenHash: string, now: number): Promise<LoginToken | undefined>;
+    createDashboardSession(session: DashboardSession): Promise<void>;
+    getDashboardSession(tokenHash: string): Promise<DashboardSession | undefined>;
+    deleteDashboardSession(tokenHash: string): Promise<void>;
+    /** Records a billing webhook event id; false if it was already processed. */
+    markBillingEventProcessed(eventId: string, now: number): Promise<boolean>;
+    close(): Promise<void>;
+}
+/**
+ * How a model field is stored. Each store turns these into its own encoding
+ * (e.g. JSON is TEXT in SQLite and JSONB in Postgres; booleans are 0/1 in SQLite).
+ */
+export type ColumnKind = 'text' | 'int' | 'bool'
+/** '' in the column (so UNIQUE constraints work) ↔ null in the model. */
+ | 'emptyAsNull' | {
+    json: unknown;
+};
+export type ColumnMap<T> = Record<keyof T, readonly [column: string, kind: ColumnKind]>;
+export declare const ACCOUNT_COLUMNS: ColumnMap<Account>;
+export declare const LOGIN_TOKEN_COLUMNS: ColumnMap<LoginToken>;
+export declare const DASHBOARD_SESSION_COLUMNS: ColumnMap<DashboardSession>;
+/** Billing columns added to accounts after the first release: [column, SQLite type, Postgres type]. */
+export declare const ACCOUNT_BILLING_COLUMNS: [string, string, string][];
+export declare const USAGE_COLUMNS: ColumnMap<UsageRecord>;
+/** UTC calendar day of a timestamp, YYYY-MM-DD. */
+export declare const utcDay: (ms: number) => string;
+/**
+ * The aggregate both stores run. Grouped by account (and tenant if asked).
+ * Parameters: $1 from, $2 to, then optionally $3 account id.
+ */
+export declare function usageSql(query: UsageQuery, placeholder: (n: number) => string): string;
+/** Aggregate row → UsageRow. Counts may arrive as strings (Postgres bigint/numeric) or null. */
+export declare function toUsageRow(row: Record<string, unknown>, groupByTenant: boolean): UsageRow;
+export declare const DOMAIN_COLUMNS: ColumnMap<DomainRow>;
+export declare const EVENT_COLUMNS: ColumnMap<DomainEvent>;
+export declare const DELIVERY_COLUMNS: ColumnMap<WebhookDelivery>;
+export declare const SESSION_COLUMNS: ColumnMap<WidgetSession>;
+/** Model object → { column: encoded value }, skipping undefined fields (so it works for patches). */
+export declare function toColumns<T, V>(map: ColumnMap<T>, value: Partial<T>, encode: (kind: ColumnKind, v: unknown) => V): Record<string, V>;
+export declare function fromColumns<T>(map: ColumnMap<T>, row: Record<string, unknown> | undefined, decode: (kind: ColumnKind, v: unknown) => unknown): T | undefined;
+/** A fresh copy of a JSON column's fallback, so rows never share one mutable object. */
+export declare const jsonFallback: (kind: {
+    json: unknown;
+}) => unknown;
+/** Opens a store by URL: postgres://… or postgresql://… for Postgres, anything else is a SQLite path (or :memory:). */
+export declare function openStore(url: string): Promise<Store>;