dkimkit 0.0.0-stage → 0.7.0

package/dist/src/hosted/serialize.d.ts

@@ -0,0 +1,144 @@
+import type { BillingEstimate } from './billing.js';
+import type { Account, DomainEvent, DomainRow, UsageRow, UsageTotals } from './store.js';
+export declare const iso: (ms: number | null) => string | null;
+/** The public JSON shape of a domain. Never includes credentials. */
+export declare function toPublicDomain(row: DomainRow): {
+    id: string;
+    object: string;
+    domain: string;
+    subdomain: string | null;
+    tenant_id: string | null;
+    metadata: Record<string, string>;
+    status: import("./store.js").DomainStatus;
+    provider_domain_id: string;
+    sendgrid_subuser: string | null;
+    dns: {
+        provider: string;
+        credentials_set: boolean;
+    };
+    inbound: {
+        url: string;
+        hostname: string;
+        spam_check: boolean;
+        send_raw: boolean;
+    } | null;
+    records: {
+        purpose: string | null;
+        status: string;
+        priority?: number | undefined;
+        type: import("../types.js").RecordType;
+        name: string;
+        value: string;
+    }[];
+    validation: {
+        valid: boolean;
+        results: {
+            record: string;
+            valid: boolean;
+            reason: string | null;
+        }[];
+    } | null;
+    conflicts: {
+        type: import("../types.js").RecordType;
+        name: string;
+        value: string;
+        reason: string | null;
+    }[] | null;
+    last_error: string | null;
+    attempts: number;
+    next_check_at: string | null;
+    verified_at: string | null;
+    expires_at: string | null;
+    created_at: string | null;
+    updated_at: string | null;
+};
+export declare function toPublicEvent(event: DomainEvent): {
+    id: string;
+    object: string;
+    type: string;
+    domain_id: string;
+    data: Record<string, unknown>;
+    created_at: string | null;
+};
+export declare function toPublicAccount(account: Account): {
+    id: string;
+    object: string;
+    name: string;
+    webhook_url: string | null;
+    webhook_secret: string;
+    email_provider: string;
+    email_credentials_set: boolean;
+    widget_origins: string[];
+    domain_limit: number | null;
+    email: string | null;
+    billing_status: import("./store.js").BillingStatus;
+    created_at: string | null;
+};
+export declare function toPublicEstimate(e: BillingEstimate): {
+    plan: "free" | "pay_as_you_go";
+    status: import("./store.js").BillingStatus;
+    period_start: string;
+    period_end: string | null;
+    active_domains: number;
+    free_domains: number;
+    billable_domains: number;
+    unit_amount: number;
+    amount_due: number;
+    currency: string;
+};
+/**
+ * What the embedded widget shows an end user. Leaves out anything that is the
+ * app owner's business: webhook URLs, metadata, SendGrid ids and SendGrid errors.
+ */
+export declare function toWidgetDomain(row: DomainRow): {
+    domain: string;
+    status: import("./store.js").DomainStatus;
+    dns_provider: string;
+    inbound_hostname: string | null;
+    records: {
+        status: string;
+        priority?: number | undefined;
+        type: import("../types.js").RecordType;
+        name: string;
+        value: string;
+    }[];
+    conflicts: {
+        type: import("../types.js").RecordType;
+        name: string;
+        value: string;
+        reason: string | null;
+    }[] | null;
+    validation: {
+        valid: boolean;
+        results: {
+            record: string;
+            valid: boolean;
+            reason: string | null;
+        }[];
+    } | null;
+    error: string | null;
+    next_check_at: string | null;
+    verified_at: string | null;
+};
+export declare function toPublicUsage(from: string, to: string, usage: {
+    totals: UsageTotals;
+    byTenant: UsageRow[] | null;
+    domainCount: number;
+}, account: Account): {
+    by_tenant?: {
+        domains_created: number;
+        verifications: number;
+        active_domains: number;
+        active_domain_days: number;
+        tenant_id: string | null;
+    }[] | undefined;
+    current_domains: number;
+    domain_limit: number | null;
+    domains_created: number;
+    verifications: number;
+    active_domains: number;
+    active_domain_days: number;
+    object: string;
+    from: string;
+    to: string;
+};

package/dist/src/hosted/serialize.js

@@ -0,0 +1,126 @@
+export const iso = (ms) => (ms === null ? null : new Date(ms).toISOString());
+/** The public JSON shape of a domain. Never includes credentials. */
+export function toPublicDomain(row) {
+    const pending = new Set(row.pending);
+    const conflicting = new Set((row.conflicts ?? []).map((c) => `${c.record.type}|${c.record.name}`));
+    const recordStatus = (type, name) => {
+        if (conflicting.has(`${type}|${name}`))
+            return 'conflict';
+        if (row.status === 'verified')
+            return 'live';
+        return row.status === 'pending' || pending.has(name) ? 'pending' : 'live';
+    };
+    return {
+        id: row.id,
+        object: 'domain',
+        domain: row.domain,
+        subdomain: row.subdomain,
+        tenant_id: row.tenantId,
+        metadata: row.metadata,
+        status: row.status,
+        provider_domain_id: row.providerDomainId,
+        sendgrid_subuser: row.sendgridSubuser,
+        dns: { provider: row.dnsProvider, credentials_set: Boolean(row.dnsCredentialsEnc) },
+        inbound: row.inbound && {
+            url: row.inbound.url,
+            hostname: row.inbound.hostname,
+            spam_check: row.inbound.spamCheck,
+            send_raw: row.inbound.sendRaw,
+        },
+        records: row.records.map((r) => ({
+            type: r.type,
+            name: r.name,
+            value: r.value,
+            ...(r.priority !== undefined ? { priority: r.priority } : {}),
+            purpose: r.purpose ?? null,
+            status: recordStatus(r.type, r.name),
+        })),
+        validation: row.validation && {
+            valid: row.validation.valid,
+            results: row.validation.results.map((r) => ({ record: r.record, valid: r.valid, reason: r.reason ?? null })),
+        },
+        conflicts: row.conflicts?.map((c) => ({ type: c.record.type, name: c.record.name, value: c.record.value, reason: c.reason ?? null })) ??
+            null,
+        last_error: row.lastError,
+        attempts: row.attempts,
+        next_check_at: iso(row.nextRunAt),
+        verified_at: iso(row.verifiedAt),
+        expires_at: row.status === 'verified' ? null : iso(row.expiresAt),
+        created_at: iso(row.createdAt),
+        updated_at: iso(row.updatedAt),
+    };
+}
+export function toPublicEvent(event) {
+    return { id: event.id, object: 'event', type: event.type, domain_id: event.domainId, data: event.data, created_at: iso(event.createdAt) };
+}
+export function toPublicAccount(account) {
+    return {
+        id: account.id,
+        object: 'account',
+        name: account.name,
+        webhook_url: account.webhookUrl,
+        webhook_secret: account.webhookSecret,
+        email_provider: account.emailProvider,
+        email_credentials_set: Boolean(account.emailCredentialsEnc),
+        widget_origins: account.widgetOrigins,
+        domain_limit: account.domainLimit,
+        email: account.email,
+        billing_status: account.billingStatus,
+        created_at: iso(account.createdAt),
+    };
+}
+export function toPublicEstimate(e) {
+    return {
+        plan: e.plan,
+        status: e.status,
+        period_start: e.periodStart,
+        period_end: e.periodEnd,
+        active_domains: e.activeDomains,
+        free_domains: e.freeDomains,
+        billable_domains: e.billableDomains,
+        unit_amount: e.unitAmount,
+        amount_due: e.amountDue,
+        currency: e.currency,
+    };
+}
+/**
+ * What the embedded widget shows an end user. Leaves out anything that is the
+ * app owner's business: webhook URLs, metadata, SendGrid ids and SendGrid errors.
+ */
+export function toWidgetDomain(row) {
+    const full = toPublicDomain(row);
+    // Allowlist: only DNS problems the end user can act on are shown to them. Anything
+    // else (email provider errors, configuration) is the app owner's to fix.
+    const endUserFixable = /^(Cloudflare API error|Route53 API error|No Cloudflare zone|No public Route53|Not verified in time|DNS records conflict|dns\.)/;
+    const ownerSide = row.lastError !== null && !endUserFixable.test(row.lastError);
+    return {
+        domain: row.domain,
+        status: row.status,
+        dns_provider: row.dnsProvider,
+        inbound_hostname: row.inbound?.hostname ?? null,
+        records: full.records.map(({ purpose: _purpose, ...r }) => r),
+        conflicts: full.conflicts,
+        validation: full.validation,
+        error: row.lastError === null ? null : ownerSide ? 'Something went wrong on our side. Please try again later.' : row.lastError,
+        next_check_at: full.next_check_at,
+        verified_at: full.verified_at,
+    };
+}
+const usageTotals = (u) => ({
+    domains_created: u.domainsCreated,
+    verifications: u.verifications,
+    active_domains: u.activeDomains,
+    active_domain_days: u.activeDomainDays,
+});
+export function toPublicUsage(from, to, usage, account) {
+    return {
+        object: 'usage',
+        from,
+        to,
+        ...usageTotals(usage.totals),
+        current_domains: usage.domainCount,
+        domain_limit: account.domainLimit,
+        ...(usage.byTenant ? { by_tenant: usage.byTenant.map((r) => ({ tenant_id: r.tenantId ?? null, ...usageTotals(r) })) } : {}),
+    };
+}
+//# sourceMappingURL=serialize.js.map

package/dist/src/hosted/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../../../src/hosted/serialize.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,EAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAE5F,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,GAAc;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE;QAClD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,UAAU,CAAC;QAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC;QAC7C,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,kBAAkB,EAAE,GAAG,CAAC,gBAAgB;QACxC,gBAAgB,EAAE,GAAG,CAAC,eAAe;QACrC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE;QACnF,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI;YACtB,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG;YACpB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;YAC9B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;SAC9B;QACD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;SACrC,CAAC,CAAC;QACH,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI;YAC5B,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;YAC3B,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;SAC7G;QACD,SAAS,EACP,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YAC1H,IAAI;QACN,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QACjC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;QAChC,UAAU,EAAE,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QACjE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9B,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AAC5I,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,UAAU;QAC/B,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC3D,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IACjD,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,cAAc,EAAE,CAAC,CAAC,aAAa;QAC/B,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,gBAAgB,EAAE,CAAC,CAAC,eAAe;QACnC,WAAW,EAAE,CAAC,CAAC,UAAU;QACzB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAc;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,mFAAmF;IACnF,yEAAyE;IACzE,MAAM,cAAc,GAAG,gIAAgI,CAAC;IACxJ,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChF,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,WAAW;QAC7B,gBAAgB,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI;QAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS;QAC9H,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC;IACvC,eAAe,EAAE,CAAC,CAAC,cAAc;IACjC,aAAa,EAAE,CAAC,CAAC,aAAa;IAC9B,cAAc,EAAE,CAAC,CAAC,aAAa;IAC/B,kBAAkB,EAAE,CAAC,CAAC,gBAAgB;CACvC,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,EAAU,EACV,KAAgF,EAChF,OAAgB;IAEhB,OAAO;QACL,MAAM,EAAE,OAAO;QACf,IAAI;QACJ,EAAE;QACF,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5H,CAAC;AACJ,CAAC"}

package/dist/src/hosted/service.d.ts

@@ -0,0 +1,170 @@
+import { type DnsLookup } from '../propagation.js';
+import { type EmailCredentials } from '../providers/email/factory.js';
+import type { DnsProvider, EmailProvider } from '../types.js';
+import { type Vault } from './crypto.js';
+import { type Account, type DomainRow, type InboundConfig, type ListDomainsQuery, type Store, type UsageRow, type UsageTotals } from './store.js';
+export interface DnsCredentials {
+    cloudflareApiToken?: string;
+    awsAccessKeyId?: string;
+    awsSecretAccessKey?: string;
+    awsSessionToken?: string;
+    route53HostedZoneId?: string;
+}
+/** Inbound settings as given; the hostname defaults per email provider (e.g. parse.<domain>). */
+export type InboundInput = Omit<InboundConfig, 'hostname'> & {
+    hostname?: string;
+};
+export interface DomainInput {
+    domain: string;
+    subdomain?: string | null;
+    tenantId?: string | null;
+    metadata?: Record<string, string>;
+    sendgridSubuser?: string | null;
+    inbound?: InboundInput | null;
+    dnsProvider: string;
+    dnsCredentials?: DnsCredentials;
+    overwrite?: boolean;
+}
+export interface DomainPatch {
+    tenantId?: string | null;
+    metadata?: Record<string, string>;
+    inbound?: InboundInput | null;
+    dnsProvider?: string;
+    dnsCredentials?: DnsCredentials;
+    overwrite?: boolean;
+}
+/** Which email provider an account uses, and its credentials. */
+export interface EmailProviderSetting {
+    provider: string;
+    credentials: EmailCredentials;
+}
+export interface AccountPatch {
+    name?: string;
+    webhookUrl?: string | null;
+    /** Shorthand for { provider: 'sendgrid', credentials: { apiKey } }. */
+    sendgridApiKey?: string;
+    emailProvider?: EmailProviderSetting;
+    widgetOrigins?: string[];
+}
+export interface ProviderFactory {
+    email(provider: string, credentials: EmailCredentials, subuser: string | null): EmailProvider;
+    dns(provider: string, credentials: DnsCredentials): DnsProvider;
+}
+/** Tenant credentials only: never falls back to the operator's environment or ~/.aws files. */
+export declare const realProviders: ProviderFactory;
+export declare class NotFoundError extends Error {
+}
+/** The account is at its plan's domain limit. */
+export declare class PlanLimitError extends Error {
+    readonly limit: number;
+    /** Where to fix it, e.g. the billing dashboard. */
+    readonly upgradeUrl?: string | undefined;
+    constructor(limit: number, message?: string, 
+    /** Where to fix it, e.g. the billing dashboard. */
+    upgradeUrl?: string | undefined);
+}
+/** A plan-imposed cap on domains (e.g. the free tier), checked alongside the operator's domainLimit. */
+export interface PlanCap {
+    limit: number;
+    message: string;
+    upgradeUrl?: string;
+}
+export declare class ConflictError extends Error {
+    readonly existingId: string;
+    constructor(message: string, existingId: string);
+}
+export interface ServiceOptions {
+    store: Store;
+    vault: Vault;
+    providers?: ProviderFactory;
+    lookup?: (domain: string) => Promise<DnsLookup>;
+    now?: () => number;
+    /** Give up on an unverified domain after this long. Default 72h. */
+    maxAgeMs?: number;
+    /** Re-validate verified domains this often to catch DNS drift. Default 24h. */
+    reverifyMs?: number;
+    allowPrivateWebhooks?: boolean;
+    /** Plan-based domain cap for an account (e.g. the free tier); null for none. */
+    planCap?: (account: Account) => PlanCap | null;
+    log?: Logger;
+}
+export type Logger = (level: 'info' | 'warn' | 'error', message: string, fields?: Record<string, unknown>) => void;
+export declare class DomainService {
+    private readonly opts;
+    private readonly store;
+    private readonly vault;
+    private readonly providers;
+    private readonly lookup;
+    private readonly now;
+    private readonly maxAgeMs;
+    private readonly reverifyMs;
+    private readonly log;
+    constructor(opts: ServiceOptions);
+    /** `provider` is the email provider and credentials, or a SendGrid API key as shorthand. */
+    createAccount(name: string, provider?: string | EmailProviderSetting, opts?: {
+        email?: string;
+    }): Promise<{
+        account: Account;
+        apiKey: string;
+    }>;
+    authenticate(apiKey: string): Promise<Account | undefined>;
+    updateAccount(account: Account, patch: AccountPatch): Promise<Account>;
+    rotateApiKey(account: Account): Promise<string>;
+    rotateWebhookSecret(account: Account): Promise<Account>;
+    getDomain(account: Account, id: string): Promise<DomainRow>;
+    listDomains(account: Account, query: ListDomainsQuery): Promise<{
+        domains: DomainRow[];
+        next: string | null;
+    }>;
+    listEvents(domainId: string, limit?: number): Promise<import("./store.js").DomainEvent[]>;
+    /** Creates the domain at the email provider right away so the response can include its DNS records. */
+    createDomain(account: Account, input: DomainInput): Promise<DomainRow>;
+    private readonly accountQueues;
+    /** Runs `fn` after any earlier call for the same account has settled. */
+    private serialized;
+    private insertNewDomain;
+    updateDomain(account: Account, id: string, patch: DomainPatch): Promise<DomainRow>;
+    /**
+     * Checks that DNS credentials work for this domain's zone by planning the
+     * changes, without writing anything. Throws the provider's error if not.
+     */
+    testDnsAccess(row: DomainRow, provider: string, credentials: DnsCredentials): Promise<import("../types.js").PlannedChange[]>;
+    /** Schedules an immediate check. Restarts the clock for failed or conflicting domains. */
+    verifyNow(account: Account, id: string): Promise<DomainRow>;
+    /** Removes the domain here; with `remote`, also deletes it (and its inbound parse) at the email provider. */
+    deleteDomain(account: Account, id: string, { remote }?: {
+        remote?: boolean | undefined;
+    }): Promise<void>;
+    /**
+     * One step of the lifecycle for a leased domain: write DNS if needed, check
+     * propagation once, validate once, then reschedule. Always releases the lease.
+     */
+    runDomain(leased: DomainRow): Promise<DomainRow>;
+    private reverify;
+    private handleError;
+    private fail;
+    private retry;
+    /** Records an active day for every verified domain. Idempotent; the runner calls it hourly. */
+    meterActiveDomains(): Promise<void>;
+    /** One account's usage for a period, optionally broken down by tenant. */
+    usage(account: Account, from: string, to: string, groupByTenant: boolean): Promise<{
+        totals: UsageTotals;
+        byTenant: UsageRow[] | null;
+        domainCount: number;
+    }>;
+    /** Every account's usage for a period, for invoicing. */
+    usageReport(from: string, to: string): Promise<(UsageRow & {
+        name: string;
+        domainLimit: number | null;
+    })[]>;
+    setDomainLimit(accountId: string, limit: number | null): Promise<Account>;
+    private recordUsage;
+    private emit;
+    /** Fills in the provider's default inbound hostname, and rejects inbound where the provider can't receive. */
+    private resolveInbound;
+    /** The account's provider credentials; legacy rows hold a bare (encrypted) SendGrid key. */
+    private credentialsOf;
+    private emailFor;
+    private dnsFor;
+}
+export declare function assertDnsCredentials(provider: string, c: DnsCredentials): void;