ysk-server-shared 1.0.0

package/dist/cdn.d.ts

@@ -0,0 +1,83 @@
+/**
+ * CDN multi-node contracts (YSK self-hosted edge network).
+ * Implemented incrementally; types are the product contract.
+ */
+import type { ApplyStatus } from './ops.js';
+export type CdnNodeRole = 'control' | 'origin' | 'edge' | 'dns';
+export type CdnNodeStatus = 'online' | 'offline' | 'draining' | 'unknown';
+export type CdnSiteMode = 'origin_pull' | 'reverse_proxy' | 'static_edge';
+export type CdnDnsStrategy = 'single' | 'multi_a' | 'failover' | 'weighted' | 'geo';
+export interface CdnNodeDto {
+    id: string;
+    name: string;
+    baseUrl?: string;
+    fleetAgentId?: string;
+    sshIdentityId?: string;
+    /** SSH target for fan-out (PR-C3); falls back to publicIpv4[0] */
+    sshHost?: string;
+    sshPort?: number;
+    sshUsername?: string;
+    /** Remote path for ysk-cdn-*.conf (default /etc/nginx/conf.d) */
+    remoteNginxConfDir?: string;
+    roles: CdnNodeRole[];
+    region: string;
+    publicIpv4: string[];
+    publicIpv6: string[];
+    healthUrl?: string;
+    weight: number;
+    status: CdnNodeStatus;
+    lastHeartbeatAt?: string;
+    lastHealth?: {
+        ok: boolean;
+        latencyMs?: number;
+        at: string;
+    };
+}
+export interface CdnSiteDto {
+    id: string;
+    name: string;
+    domains: string[];
+    mode: CdnSiteMode;
+    origin: {
+        kind: 'project' | 'url';
+        projectId?: string;
+        url?: string;
+        sni?: string;
+    };
+    edgeNodeIds: string[];
+    /**
+     * Origin shield (PR-C7): non-shield edges pull via this edge instead of origin.
+     * Shield node itself still uses origin upstream.
+     */
+    originShieldNodeId?: string;
+    dns: {
+        zoneId?: string;
+        strategy: CdnDnsStrategy;
+        ttlHealthy: number;
+        ttlUnhealthy: number;
+        minHealthyEdges: number;
+        /**
+         * region → edge node ids (PR-C7 geo).
+         * Apex multi-A uses union of healthy geo edges; optional region subdomains.
+         */
+        geoMap?: Record<string, string[]>;
+        /** When true, also write A/AAAA for `{region}.` relative names */
+        geoSubdomains?: boolean;
+        /** Prefer this region for failover/single under geo strategy */
+        geoDefaultRegion?: string;
+    };
+    cache: {
+        enabled: boolean;
+        zoneSize: string;
+        maxAge: string;
+        bypassCookies?: boolean;
+        bypassAuth?: boolean;
+    };
+    ssl: {
+        mode: 'off' | 'le_http01' | 'le_dns01' | 'upload';
+        certId?: string;
+    };
+    apply_status: ApplyStatus;
+    edge_status: Record<string, ApplyStatus>;
+}
+//# sourceMappingURL=cdn.d.ts.map

package/dist/cdn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn.d.ts","sourceRoot":"","sources":["../src/cdn.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEhE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,eAAe,GAAG,aAAa,CAAC;AAE1E,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,SAAS,GACT,UAAU,GACV,UAAU,GACV,KAAK,CAAC;AAEV,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE;QACN,IAAI,EAAE,SAAS,GAAG,KAAK,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,EAAE;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,cAAc,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,kEAAkE;QAClE,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,gEAAgE;QAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,GAAG,EAAE;QACH,IAAI,EAAE,KAAK,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;QAClD,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,YAAY,EAAE,WAAW,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC1C"}

package/dist/cdn.js

@@ -0,0 +1,6 @@
+/**
+ * CDN multi-node contracts (YSK self-hosted edge network).
+ * Implemented incrementally; types are the product contract.
+ */
+export {};
+//# sourceMappingURL=cdn.js.map

package/dist/cdn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn.js","sourceRoot":"","sources":["../src/cdn.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/databases.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Database engine / service settings / Redis — API contract.
+ */
+export type DbServiceEngine = 'redis' | 'mysql' | 'mariadb' | 'postgres';
+export type DbEngineKind = 'mysql' | 'mariadb';
+export interface RedisServiceSettingsDto {
+    port: number;
+    bind: string;
+    databases: number;
+    maxmemory: string;
+    maxmemoryPolicy: string;
+    requirepass: string;
+    appendonly: boolean;
+    protectedMode: boolean;
+    timeout: number;
+}
+export interface SqlServiceSettingsDto {
+    port: number;
+    bindAddress: string;
+    maxConnections: number;
+    characterSetServer?: string;
+}
+export interface PostgresServiceSettingsDto {
+    port: number;
+    listenAddresses: string;
+    maxConnections: number;
+}
+export type RedisServiceSettings = RedisServiceSettingsDto;
+export type SqlServiceSettings = SqlServiceSettingsDto;
+export type PostgresServiceSettings = PostgresServiceSettingsDto;
+export interface DbEngineStatusDto {
+    engine: DbEngineKind;
+    title: string;
+    clientInstalled: boolean;
+    serverInstalled: boolean;
+    unit: string;
+    active: string;
+    version?: string;
+    executeEnabled: boolean;
+    isRoot: boolean;
+    canProvision: boolean;
+    canInstall: boolean;
+    blockMessage?: string;
+    /** Other exclusive engine installed on host (e.g. mariadb-server) */
+    blockedByExclusive?: string;
+    /** Debian/Ubuntu /etc/mysql/FROZEN present — daemon blocked after engine switch */
+    frozen?: boolean;
+    frozenMode?: string;
+    /** Data dir looks empty / no system tables — safe to re-init after unfreeze */
+    datadirEmpty?: boolean;
+    /** Generic health findings (sqlEngineHealth.finding.*) for mass-market repair UI */
+    healthFindings?: Array<{
+        id: string;
+        severity: string;
+        messageKey: string;
+    }>;
+}
+export type DbEngineStatus = DbEngineStatusDto;
+export interface RedisServiceStatusDto {
+    serverInstalled: boolean;
+    clientInstalled: boolean;
+    unit: string;
+    active: string;
+    reachable: boolean;
+    ping: string | null;
+    executeEnabled: boolean;
+    isRoot: boolean;
+    canRead: boolean;
+    canWrite: boolean;
+    canInstall: boolean;
+    version?: string;
+    usedMemory?: string;
+    connectedClients?: string;
+    keyspace: Array<{
+        db: number;
+        keys: number;
+        expires?: number;
+    }>;
+    databases?: number;
+    configuredDatabases?: number;
+    blockMessage?: string;
+}
+export type RedisServiceStatus = RedisServiceStatusDto;
+export interface RedisKeyListItemDto {
+    key: string;
+    type?: string;
+    ttl?: number;
+}
+export type RedisKeyListItem = RedisKeyListItemDto;
+export interface RedisKeyViewDto {
+    key: string;
+    type: string;
+    ttl: number;
+    value: string | Record<string, string> | string[] | Array<{
+        member: string;
+        score: string;
+    }>;
+}
+export type RedisKeyView = RedisKeyViewDto;
+/** DB service console (lifecycle + settings) — shared by core API + web. */
+export type ServiceConsoleLifecycleAction = 'start' | 'stop' | 'restart' | 'reload' | 'enable' | 'disable';
+export interface ServiceConsoleSettingDto {
+    key: string;
+    label: string;
+    category: string;
+    type: string;
+    unit?: string;
+    enumValues?: string[];
+    description?: string;
+    applyMode: string;
+    liveValue?: string;
+    draftValue?: string;
+    supported?: boolean;
+    danger?: boolean;
+    advanced?: boolean;
+}
+export interface ServiceConsoleCategoryDto {
+    id: string;
+    label: string;
+    description: string;
+    settings: ServiceConsoleSettingDto[];
+}
+export interface ServiceConsoleDto {
+    engine: DbServiceEngine;
+    title: string;
+    version?: string;
+    unit: string;
+    active: string;
+    activeLabel: string;
+    enabled?: string;
+    installed: boolean;
+    executeEnabled: boolean;
+    isRoot: boolean;
+    canLifecycle: boolean;
+    blockMessage?: string;
+    /** e.g. mariadb-server when viewing MySQL console */
+    blockedByExclusive?: string;
+    metrics: Record<string, string>;
+    categories: ServiceConsoleCategoryDto[];
+    live: Record<string, string>;
+}
+//# sourceMappingURL=databases.d.ts.map

package/dist/databases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"databases.d.ts","sourceRoot":"","sources":["../src/databases.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;AAEzE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/C,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAC3D,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACvD,MAAM,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mFAAmF;IACnF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oFAAoF;IACpF,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9E;AAED,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAE/C,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EACD,MAAM,GACN,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,MAAM,EAAE,GACR,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC;AAE3C,4EAA4E;AAC5E,MAAM,MAAM,6BAA6B,GACrC,OAAO,GACP,MAAM,GACN,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,wBAAwB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,EAAE,yBAAyB,EAAE,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B"}

package/dist/databases.js

@@ -0,0 +1,5 @@
+/**
+ * Database engine / service settings / Redis — API contract.
+ */
+export {};
+//# sourceMappingURL=databases.js.map

package/dist/databases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"databases.js","sourceRoot":"","sources":["../src/databases.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/dto.d.ts

@@ -0,0 +1,308 @@
+/**
+ * Data Transfer Objects shared between API, CLI, and Web.
+ */
+import type { CapabilityId } from './capabilities.js';
+import type { AgentRuntimeKind, ApprovalStatus, HostingRuntime, OperationLevel, ProtectionMode, ResourceScope, RiskTier, SystemRole, UpdateAdvice } from './types.js';
+export interface AuthLoginRequest {
+    username: string;
+    password: string;
+    /** Optional TOTP when 2FA enabled */
+    totp?: string;
+}
+export interface AuthLoginResponse {
+    token: string;
+    user: UserDto;
+    expiresAt: string;
+    /** Admin policy: must enable TOTP soon */
+    mustEnrollTotp?: boolean;
+    /** Bootstrap / weak password — change before production */
+    mustChangePassword?: boolean;
+    message?: string;
+}
+export interface UserDto {
+    id: string;
+    username: string;
+    roles: SystemRole[];
+    locale: string;
+    /** Operator has confirmed TOTP 2FA */
+    totpEnabled?: boolean;
+    /** Force password change (weak/bootstrap password) */
+    mustChangePassword?: boolean;
+    /** Effective capabilities (from roles + policies + overrides) */
+    capabilities?: CapabilityId[];
+    /** Per-user extra grants */
+    capabilityGrants?: CapabilityId[];
+    /** Per-user revokes */
+    capabilityRevokes?: CapabilityId[];
+}
+export interface HealthResponse {
+    status: 'ok' | 'degraded' | 'offline';
+    product: string;
+    version: string;
+    protectionMode: ProtectionMode;
+    timestamp: string;
+    /** Host can run system mutations (YSK_EXECUTE) */
+    executeEnabled?: boolean;
+    /** Process running as root */
+    isRoot?: boolean;
+    /** production_capable when execute + root */
+    mode?: 'production_capable' | 'degraded';
+}
+export interface ApprovalRequestDto {
+    id: string;
+    action: string;
+    risk: RiskTier;
+    requestedBy: string;
+    status: ApprovalStatus;
+    payload: unknown;
+    createdAt: string;
+    decidedAt?: string;
+    decidedBy?: string;
+}
+export interface ToolCallRequest {
+    tool: string;
+    args: Record<string, unknown>;
+    dryRun?: boolean;
+    scope?: ResourceScope;
+}
+export interface ToolCallResult {
+    allowed: boolean;
+    requiresApproval: boolean;
+    approvalId?: string;
+    dryRun: boolean;
+    result?: unknown;
+    denialReason?: string;
+}
+export interface RbacCheckRequest {
+    role: SystemRole;
+    scope: ResourceScope;
+    level: OperationLevel;
+}
+export interface RbacCheckResponse {
+    allowed: boolean;
+    reason?: string;
+}
+export interface LlmChatRequest {
+    model?: string;
+    messages: Array<{
+        role: 'system' | 'user' | 'assistant';
+        content: string;
+    }>;
+    temperature?: number;
+}
+export interface LlmChatResponse {
+    id: string;
+    content: string;
+    model: string;
+    /** Always treat as untrusted */
+    untrusted: true;
+}
+export interface ProjectDto {
+    id: string;
+    name: string;
+    domain?: string;
+    /** Extra server_name entries (aliases / www / subdomains) */
+    domainAliases?: string[];
+    linuxUser: string;
+    linuxGroup: string;
+    homeDir: string;
+    /** Panel user who owns the project (package quota) */
+    ownerUserId?: string;
+    runtime: HostingRuntime;
+    runtimeVersion?: string;
+    env: 'staging' | 'production';
+    /** Control-plane lifecycle: active | running | stopped | suspended | unhealthy | failed | … */
+    status?: string;
+    port?: number;
+    /** User-requested fixed process port for deploy */
+    preferredPort?: number;
+    pid?: number;
+    processStatus?: string;
+    nginxConfigPath?: string;
+    /** When SSL published: redirect HTTP → HTTPS */
+    forceHttps?: boolean;
+    /** HSTS header when SSL published */
+    hsts?: boolean;
+    /** Whole-site redirect URL */
+    siteRedirectUrl?: string;
+    httpAuthUser?: string;
+    /** Document root relative to homeDir */
+    docRoot?: string;
+    /** Nginx listen bind IP */
+    bindIp?: string;
+    /**
+     * CDN/proxy real client IP provider for this project.
+     * undefined = inherit system default; 'none' | 'cloudflare' | 'fastly' | …
+     */
+    realIpProvider?: string;
+    lastHealth?: Record<string, unknown>;
+    lastDeployAt?: string;
+    osProvisioned?: boolean;
+    gitUrl?: string;
+    gitBranch?: string;
+    gitCommit?: string;
+    envVars?: Record<string, string>;
+    lastBackupPath?: string;
+    lastBackupAt?: string;
+    /** Disk quota in MiB (null/undefined = unlimited) */
+    quotaMb?: number;
+    memoryMax?: string;
+    cpuQuotaPercent?: number;
+    /** systemd TasksMax */
+    tasksMax?: number;
+    /** systemd LimitNOFILE */
+    limitNofile?: number;
+    /** Linux login shell */
+    shell?: string;
+    /** Account locked via usermod -L */
+    accountLocked?: boolean;
+    /** Last process deploy entry (persisted server-side) */
+    deployEntry?: string;
+    /** Recent deploy notes for UI summary */
+    lastDeployNotes?: string[];
+    /**
+     * Extra log directories relative to homeDir (besides logs/ and log/).
+     * e.g. storage/logs, var/log
+     */
+    logExtraDirs?: string[];
+}
+/** Live OS user probe for a project (GET /os-user) */
+export interface ProjectOsUserLiveDto {
+    linuxUser: string;
+    linuxGroup: string;
+    homeDir: string;
+    canonicalHome: string;
+    osProvisioned: boolean;
+    userExists: boolean;
+    uid?: number;
+    gid?: number;
+    shellLive?: string;
+    homeExists: boolean;
+    homeMode?: string;
+    homeOwner?: string;
+    locked?: boolean | null;
+    notes: string[];
+}
+export interface ProjectOsUserLimitsDto {
+    quotaMb?: number;
+    memoryMax?: string;
+    cpuQuotaPercent?: number;
+    tasksMax?: number;
+    limitNofile?: number;
+    shell?: string;
+    accountLocked?: boolean;
+}
+/** Result of real deploy / publish / health ops */
+export interface OpsApplyResultDto {
+    ok: boolean;
+    projectId: string;
+    port?: number;
+    pid?: number;
+    pidfile?: string;
+    url?: string;
+    processStatus: string;
+    health?: {
+        ok: boolean;
+        status?: number;
+        body?: string;
+        ms?: number;
+        error?: string;
+    };
+    listening: boolean;
+    nginxPath?: string;
+    notes: string[];
+    written: string[];
+}
+export interface SslCertPlan {
+    domain: string;
+    email: string;
+    provider: 'letsencrypt' | 'upload';
+    challenge: 'http-01' | 'dns-01';
+}
+export interface NginxProxyConfig {
+    /** Space-separated server_name list (primary + aliases) */
+    serverName: string;
+    upstream: string;
+    ssl: boolean;
+    /**
+     * @deprecated Prefer realIpProvider / host real-ip config.
+     * true still enables Cloudflare real_ip when host default is none.
+     */
+    cloudflareRealIp: boolean;
+    /**
+     * Multi-CDN real client IP provider id (none|cloudflare|fastly|…).
+     * When set, overrides cloudflareRealIp.
+     */
+    realIpProvider?: string;
+    /** Optional paths for uploaded / managed certs (defaults to Let's Encrypt layout) */
+    sslCertificate?: string;
+    sslCertificateKey?: string;
+    /** Separate :80 → 301 https (requires ssl) */
+    forceHttps?: boolean;
+    /** Strict-Transport-Security when ssl */
+    hsts?: boolean;
+    /** Whole-site redirect (takes precedence over proxy) */
+    siteRedirectUrl?: string;
+    /** auth_basic realm user file path */
+    authBasicUserFile?: string;
+    authBasicRealm?: string;
+    /** Optional bind IP for listen (empty = all interfaces) */
+    bindIp?: string;
+}
+export interface UpdateItemDto {
+    packageName: string;
+    currentVersion: string;
+    candidateVersion: string;
+    advice: UpdateAdvice;
+    risk: RiskTier;
+    cves: string[];
+    requiresApproval: boolean;
+    summary: string;
+}
+export interface SelfUpdateStatus {
+    currentVersion: string;
+    latestVersion?: string;
+    updateAvailable: boolean;
+    lastCheckAt?: string;
+}
+export interface EmailDnsRecord {
+    type: 'MX' | 'TXT' | 'A' | 'AAAA' | 'CNAME';
+    name: string;
+    value: string;
+    priority?: number;
+    importance: 'required' | 'recommended' | 'optional';
+    description: string;
+}
+export interface EmailExternalTodo {
+    id: string;
+    category: 'dns' | 'ptr' | 'port25' | 'reputation' | 'other';
+    title: string;
+    description: string;
+    required: boolean;
+    completed: boolean;
+}
+export interface EmailHealthReport {
+    score: number;
+    maxScore: number;
+    records: EmailDnsRecord[];
+    externalTodos: EmailExternalTodo[];
+    ptrOk: boolean;
+    port25Open: boolean | null;
+    messages: string[];
+}
+export interface AgentRuntimeDto {
+    kind: AgentRuntimeKind;
+    name: string;
+    version?: string;
+    status: 'stopped' | 'running' | 'error' | 'unknown' | 'not_installed';
+    installPath?: string;
+}
+export interface SetupConfigDto {
+    dataDir: string;
+    listenHost: string;
+    listenPort: number;
+    adminUsername: string;
+    locale: string;
+    nonInteractive: boolean;
+}
+//# sourceMappingURL=dto.d.ts.map

package/dist/dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dto.d.ts","sourceRoot":"","sources":["../src/dto.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,aAAa,EACb,QAAQ,EACR,UAAU,EACV,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,4BAA4B;IAC5B,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC;IAClC,uBAAuB;IACvB,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,oBAAoB,GAAG,UAAU,CAAC;CAC1C;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9B,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gDAAgD;IAChD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qCAAqC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8BAA8B;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,GAAG,QAAQ,CAAC;IACnC,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb;;;OAGG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8CAA8C;IAC9C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,wDAAwD;IACxD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,IAAI,GAAG,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;IACpD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,eAAe,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;CACzB"}

package/dist/dto.js

@@ -0,0 +1,5 @@
+/**
+ * Data Transfer Objects shared between API, CLI, and Web.
+ */
+export {};
+//# sourceMappingURL=dto.js.map

package/dist/dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dto.js","sourceRoot":"","sources":["../src/dto.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/email-domain.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Email domain control-plane rows + DNS bundle for panel.
+ * Complements EmailDnsRecord / EmailHealthReport in dto.ts.
+ */
+export interface EmailDomainDto {
+    id: string;
+    domain: string;
+    health_score: number;
+    server_ip: string;
+    apply_status?: string;
+    last_apply?: Record<string, unknown>;
+    /** Control-plane suspend flag — not live MTA reject unless system-applied */
+    suspended?: boolean;
+    status?: string;
+    autoreply_enabled?: boolean;
+    /** Outbound rate limit (msgs/hour); null/omit = use defaults */
+    rate_limit_per_hour?: number | null;
+    /** Domain antispam flag (Rspamd multimap) */
+    antispam?: boolean;
+}
+/**
+ * Lightweight DNS / health bundle returned by create + dns endpoints.
+ * (Full EmailHealthReport lives in dto.ts for richer checks.)
+ */
+export interface EmailDomainBundleDto {
+    records: Array<{
+        type: string;
+        name: string;
+        value: string;
+        description: string;
+    }>;
+    externalTodos: Array<{
+        id: string;
+        title: string;
+        description: string;
+        completed: boolean;
+    }>;
+    health: {
+        score: number;
+        maxScore: number;
+        messages: string[];
+    };
+}
+export type EmailDomain = EmailDomainDto;
+export type EmailBundle = EmailDomainBundleDto;
+//# sourceMappingURL=email-domain.d.ts.map

package/dist/email-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-domain.d.ts","sourceRoot":"","sources":["../src/email-domain.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACjE;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,CAAC;AACzC,MAAM,MAAM,WAAW,GAAG,oBAAoB,CAAC"}

package/dist/email-domain.js

@@ -0,0 +1,6 @@
+/**
+ * Email domain control-plane rows + DNS bundle for panel.
+ * Complements EmailDnsRecord / EmailHealthReport in dto.ts.
+ */
+export {};
+//# sourceMappingURL=email-domain.js.map

package/dist/email-domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-domain.js","sourceRoot":"","sources":["../src/email-domain.ts"],"names":[],"mappings":"AAAA;;;GAGG"}