fix(api): tenant-проверка account/template в CreateDomain (HIGH), атомарный import через транзакцию (MEDIUM)

internal/store/tenant.go

@@ -5,6 +5,7 @@ import (
 
 	"github.com/google/uuid"
 
+	"github.com/vasyakrg/dns-autoresolver/internal/provider"
 	"github.com/vasyakrg/dns-autoresolver/internal/store/db"
 	"github.com/vasyakrg/dns-autoresolver/internal/store/dto"
 )
@@ -109,6 +110,16 @@ func (s *Store) DeleteTemplate(ctx context.Context, id, projectID uuid.UUID) err
 	return s.q.DeleteTemplate(ctx, db.DeleteTemplateParams{ID: id, ProjectID: projectID})
 }
 
+// GetTemplate is a scoped lookup used to verify a template belongs to
+// projectID before it is referenced elsewhere (e.g. CreateDomain).
+func (s *Store) GetTemplate(ctx context.Context, id, projectID uuid.UUID) (Template, error) {
+	t, err := s.q.GetTemplate(ctx, db.GetTemplateParams{ID: id, ProjectID: projectID})
+	if err != nil {
+		return Template{}, err
+	}
+	return templateFromDB(t), nil
+}
+
 type Domain struct {
 	ID                uuid.UUID
 	ProjectID         uuid.UUID
@@ -151,3 +162,31 @@ func (s *Store) ListDomains(ctx context.Context, projectID uuid.UUID) ([]Domain,
 func (s *Store) DeleteDomain(ctx context.Context, id, projectID uuid.UUID) error {
 	return s.q.DeleteDomain(ctx, db.DeleteDomainParams{ID: id, ProjectID: projectID})
 }
+
+// ImportDomains creates one domain per zone inside a single transaction: if
+// any zone fails to be created, the whole batch is rolled back so callers
+// never observe a partially-imported set of domains.
+func (s *Store) ImportDomains(ctx context.Context, projectID, accountID uuid.UUID, zones []provider.Zone) ([]Domain, error) {
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, err
+	}
+	defer tx.Rollback(ctx) // no-op once Commit has succeeded
+
+	q := s.q.WithTx(tx)
+	out := make([]Domain, 0, len(zones))
+	for _, z := range zones {
+		d, err := q.CreateDomain(ctx, db.CreateDomainParams{
+			ID: uuid.New(), ProjectID: projectID, ProviderAccountID: accountID,
+			ZoneName: z.Name, ZoneID: z.ID, TemplateID: nil,
+		})
+		if err != nil {
+			return nil, err
+		}
+		out = append(out, domainFromDB(d))
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, err
+	}
+	return out, nil
+}