domainkit 0.14.0 → 0.15.0

package/dist/types/Server.d.ts

@@ -279,6 +279,8 @@ export declare const Zones: Schema.Struct<{
     readonly connections: Schema.$Array<Schema.Struct<{
         readonly connectionId: Schema.String;
         readonly provider: Schema.String;
+        /** What the provider called the account at connect time; `null` when it named none. */
+        readonly label: Schema.NullOr<Schema.String>;
         readonly status: Schema.Literals<readonly ["disconnected", "connected", "reconnect"]>;
     }>>;
     /** Every provider a customer could connect, so a picker offers one without a second call. */
@@ -7443,6 +7445,8 @@ export declare const group: HttpApiGroup.HttpApiGroup<"domainkit", HttpApiEndpoi
     readonly connections: Schema.$Array<Schema.Struct<{
         readonly connectionId: Schema.String;
         readonly provider: Schema.String;
+        /** What the provider called the account at connect time; `null` when it named none. */
+        readonly label: Schema.NullOr<Schema.String>;
         readonly status: Schema.Literals<readonly ["disconnected", "connected", "reconnect"]>;
     }>>;
     /** Every provider a customer could connect, so a picker offers one without a second call. */

package/dist/types/Storage.d.ts

@@ -38,6 +38,11 @@ declare const Authorization_base: Schema.Class<Authorization, Schema.Struct<{
     readonly capabilities: Schema.$Array<Schema.Literals<readonly ["dns:read", "dns:write"]>>;
     /** Provider-specific account context (account id, team id, ...) decoded by the provider's `context` schema. */
     readonly context: Schema.Unknown;
+    /**
+     * What the provider called the account when the credential was issued, so a UI names the
+     * connection without a provider call. `null` when the provider names no single account.
+     */
+    readonly label: Schema.NullOr<Schema.String>;
     readonly revocation: Schema.Literals<readonly ["active", "pending", "revoked"]>;
     readonly createdBy: Schema.String;
     readonly createdAt: Schema.DateTimeUtcFromString;

package/dist/types/Testing.d.ts

@@ -22,6 +22,8 @@ export interface FakeProviderOptions {
     readonly zones?: ReadonlyArray<string>;
     /** The label each zone carries, keyed by zone. Default: the zone name. */
     readonly labels?: Readonly<Record<string, string>>;
+    /** What the fake calls the account it issues credentials for. Default: none, so the label is `null`. */
+    readonly accountLabel?: string;
     /** Pre-existing records, to produce `Noop` and `Conflict` operations. */
     readonly records?: ReadonlyArray<{
         readonly zone: string;

package/dist/types/Verify.d.ts

@@ -98,17 +98,17 @@ export interface Summary {
     readonly mismatch: number;
     readonly unknown: number;
 }
-/** The least a value has to carry to be summarised: core `Readiness` and the wire shape both do. */
-export interface Summarisable {
-    readonly requirements: ReadonlyArray<{
-        readonly status: Storage.RequirementStatus;
-    }>;
-}
 /**
  * How a readiness stands, as counts. Pure and total: a host renders "3 of 4 found" from the stored
- * fact without deciding what an absent readiness means, because `observed` says so.
+ * fact without deciding what an absent readiness means, because `observed` says so. The parameter
+ * is the least a value has to carry to be summarised, so core `Readiness` and the wire shape both
+ * pass without naming a type between them.
  */
-export declare const summary: (readiness: Summarisable | null) => Summary;
+export declare const summary: (readiness: {
+    readonly requirements: ReadonlyArray<{
+        readonly status: Storage.RequirementStatus;
+    }>;
+} | null) => Summary;
 export interface PolicyShape {
     /** Delay before the next check, given time since the first pending observation. Default ladder: 15s, 1m, 5m, 30m. */
     readonly backoff: (pendingForMs: number) => number;
@@ -124,6 +124,8 @@ export declare class Policy extends Policy_base {
 /** Why readiness was written: a DNS observation, or host evidence merged into the stored row. */
 export type Cause = "observe" | "evidence";
 export interface ReadinessChanged {
+    /** The tenant the row was written under, from the `Principal` the write ran as. */
+    readonly ownerId: string;
     readonly domain: string;
     readonly readiness: Readiness;
     readonly cause: Cause;
@@ -134,6 +136,11 @@ export interface ObserverShape {
      * rows, wakes a durable job at `nextCheckAt`, or notifies a customer hangs it here instead of
      * mirroring the fact at every call site.
      *
+     * Readiness is stored per owner and domain, and an observer provided over `DomainKit.layer` is
+     * scoped to the layer rather than to one request, so a host that serves more than one tenant
+     * keys its projection by `ownerId` and `domain`: the same domain name can be attached in two
+     * tenants at once.
+     *
      * Events for one domain are not ordered against each other: two observations that overlap both
      * store, last write wins in `Storage`, and their callbacks can finish in either order. A
      * projection compares `readiness.checkedAt`, which is the moment the row was written, and keeps

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "domainkit",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Build reviewable DNS plans for custom domains in TypeScript",
   "keywords": [
     "custom-domains",
@@ -157,5 +157,5 @@
   "engines": {
     "node": ">=24.10.0"
   },
-  "packageManager": "bun@1.4.0"
+  "packageManager": "bun@1.4.2"
 }