v5.0.2

changelog.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 2026-02-12 - 5.0.2 - fix(docs)
+update documentation and packaging configuration: document smartmta/smartdns integrations, adjust API method names, and add release registry info
+
+- README: document SmartDNS as Rust-powered DNS engine and smartmta as TypeScript+Rust MTA; add Rust-powered architecture section and component package table
+- README: update Node.js requirement from 18+ to 20+; replace embedded cache DB TsmDb with LocalTsmDb and reduce listed cached document types
+- README & ts_interfaces: rename typedrequest API adminLogin -> adminLoginWithUsernameAndPassword and add/clarify several API methods (logout, suppression management, RADIUS client/VLAN helpers)
+- README: update test instructions, change test file references and add a test coverage table
+- npmextra.json: re-key package configs (@git.zone/cli, @ship.zone/szci), tidy watch array formatting, and add release.registries and accessLevel for publishing
+
+## 2026-02-11 - 5.0.1 - fix(deps/tests)
+bump two dependencies and disable cache in tests
+
+- Bumped @api.global/typedrequest from ^3.2.5 to ^3.2.6
+- Bumped @push.rocks/smartradius from ^1.1.0 to ^1.1.1
+- Disabled cache in tests by adding cacheConfig: { enabled: false } to DcRouter instantiation in test/test.jwt-auth.ts, test/test.opsserver-api.ts, and test/test.protected-endpoint.ts
+
 ## 2026-02-11 - 5.0.0 - BREAKING CHANGE(mta)
 migrate internal MTA to @push.rocks/smartmta and remove legacy mail/deliverability implementation
 

npmextra.json

@@ -3,7 +3,11 @@
     "watchers": [
       {
         "name": "dcrouter-dev",
-        "watch": ["ts/**/*.ts", "ts_*/**/*.ts", "test_watch/devserver.ts"],
+        "watch": [
+          "ts/**/*.ts",
+          "ts_*/**/*.ts",
+          "test_watch/devserver.ts"
+        ],
         "command": "pnpm run build && tsrun test_watch/devserver.ts",
         "restart": true,
         "debounce": 500,
@@ -22,7 +26,7 @@
       }
     ]
   },
-  "gitzone": {
+  "@git.zone/cli": {
     "projectType": "service",
     "module": {
       "githost": "gitlab.com",
@@ -53,9 +57,16 @@
         "SMTP STARTTLS",
         "DNS management"
       ]
+    },
+    "release": {
+      "registries": [
+        "https://verdaccio.lossless.digital",
+        "https://registry.npmjs.org"
+      ],
+      "accessLevel": "public"
     }
   },
-  "npmci": {
+  "@ship.zone/szci": {
     "npmGlobalTools": [],
     "dockerRegistryRepoMap": {
       "registry.gitlab.com": "code.foss.global/serve.zone/dcrouter"

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@serve.zone/dcrouter",
   "private": false,
-  "version": "5.0.0",
+  "version": "5.0.2",
   "description": "A multifaceted routing service handling mail and SMS delivery functions.",
   "type": "module",
   "exports": {
@@ -27,7 +27,7 @@
     "@types/node": "^25.2.3"
   },
   "dependencies": {
-    "@api.global/typedrequest": "^3.2.5",
+    "@api.global/typedrequest": "^3.2.6",
     "@api.global/typedrequest-interfaces": "^3.0.19",
     "@api.global/typedserver": "^8.3.0",
     "@api.global/typedsocket": "^4.1.0",
@@ -50,7 +50,7 @@
     "@push.rocks/smartpath": "^6.0.0",
     "@push.rocks/smartpromise": "^4.2.3",
     "@push.rocks/smartproxy": "^23.1.2",
-    "@push.rocks/smartradius": "^1.1.0",
+    "@push.rocks/smartradius": "^1.1.1",
     "@push.rocks/smartrequest": "^5.0.1",
     "@push.rocks/smartrx": "^3.0.10",
     "@push.rocks/smartstate": "^2.0.30",

pnpm-lock.yaml

@@ -9,8 +9,8 @@ importers:
   .:
     dependencies:
       '@api.global/typedrequest':
-        specifier: ^3.2.5
+        specifier: ^3.2.6
-        version: 3.2.5
+        version: 3.2.6
       '@api.global/typedrequest-interfaces':
         specifier: ^3.0.19
         version: 3.0.19
@@ -78,8 +78,8 @@ importers:
         specifier: ^23.1.2
         version: 23.1.2(socks@2.8.7)
       '@push.rocks/smartradius':
-        specifier: ^1.1.0
+        specifier: ^1.1.1
-        version: 1.1.0
+        version: 1.1.1
       '@push.rocks/smartrequest':
         specifier: ^5.0.1
         version: 5.0.1
@@ -132,8 +132,8 @@ packages:
   '@api.global/typedrequest-interfaces@3.0.19':
     resolution: {integrity: sha512-uuHUXJeOy/inWSDrwD0Cwax2rovpxYllDhM2RWh+6mVpQuNmZ3uw6IVg6dA2G1rOe24Ebs+Y9SzEogo+jYN7vw==}
 
-  '@api.global/typedrequest@3.2.5':
+  '@api.global/typedrequest@3.2.6':
-    resolution: {integrity: sha512-LM/sUTuYnU5xY4gNZrN6ERMiKr+SpDZuSxJkAZz1YazC7ymGfo6uQ8sCnN8eNNQNFqIOkC+BtfYRayfbGwYLLg==}
+    resolution: {integrity: sha512-CnvbjYjnGGw3rwL+7bTHSgRHEpDujzhs3cv7l1xgCXMPQe3DcPg74+9ep1Y5cu21T/w0pxNnDCJpbb0SHqHzAw==}
 
   '@api.global/typedserver@3.0.80':
     resolution: {integrity: sha512-dcp0oXsjBL+XdFg1wUUP08uJQid5bQ0Yv3V3Y3lnI2QCbat0FU+Tsb0TZRnZ4+P150Vj/ITBqJUgDzFsF34grA==}
@@ -1046,8 +1046,8 @@ packages:
   '@push.rocks/smartpuppeteer@2.0.5':
     resolution: {integrity: sha512-yK/qSeWVHIGWRp3c8S5tfdGP6WCKllZC4DR8d8CQlEjszOSBmHtlTdyyqOMBZ/BA4kd+eU5f3A1r4K2tGYty1g==}
 
-  '@push.rocks/smartradius@1.1.0':
+  '@push.rocks/smartradius@1.1.1':
-    resolution: {integrity: sha512-eocddp/bDcB5a/JOt5lezz0uBWezOKpnDQgMx+I4bl8eJ20KIWh0B6PhYuKYjGuDwo/t01p+s+m0gG7IgyPmzQ==}
+    resolution: {integrity: sha512-WTKZAGhld8FtzqebgdHlbvZYLFwWM52j5Dt+U+sAWviRUhp5pgJ35DE4H0ePUFPjEa2Tr+HWxRN/PIckZYKRnQ==}
 
   '@push.rocks/smartrequest@2.1.0':
     resolution: {integrity: sha512-3eHLTRInHA+u+W98TqJwgTES7rRimBAsJC4JxVNQC3UUezmblAhM5/TIQsEBQTsbjAY8SeQKy6NHzW6iTiaD8w==}
@@ -1131,8 +1131,8 @@ packages:
   '@push.rocks/webrequest@3.0.37':
     resolution: {integrity: sha512-fLN7kP6GeHFxE4UH4r9C9pjcQb0QkJxHeAMwXvbOqB9hh0MFNKhtGU7GoaTn8SVRGRMPc9UqZVNwo6u5l8Wn0A==}
 
-  '@push.rocks/webrequest@4.0.1':
+  '@push.rocks/webrequest@4.0.2':
-    resolution: {integrity: sha512-I60XZZLVf8W5I7YdmUVVu4G92teE3rg3/aKaV00BRg8vJ3VXx3wc59Qj4em7zxQ5o0HvL8m1Aezw3RFMDPyVgA==}
+    resolution: {integrity: sha512-rowzty+Q2papFBcnNYPcy+8CQJukSn/FGfQG8ap0bUgQUsx882u8kEyLM0Q+GlGHS5OiZ+Z0z5TZqLKlk3XHxA==}
 
   '@push.rocks/websetup@3.0.19':
     resolution: {integrity: sha512-iKJDwXdMmQdu5siOIgziPRxM51lN1AU9HOr+yMteu1YMDkZT7HKCyisDAr4gC9WZ9a7FzsG8zgthm4dMeA8NTw==}
@@ -4341,7 +4341,7 @@ snapshots:
 
   '@api.global/typedrequest-interfaces@3.0.19': {}
 
-  '@api.global/typedrequest@3.2.5':
+  '@api.global/typedrequest@3.2.6':
     dependencies:
       '@api.global/typedrequest-interfaces': 3.0.19
       '@push.rocks/isounique': 1.0.5
@@ -4350,12 +4350,12 @@ snapshots:
       '@push.rocks/smartdelay': 3.0.5
       '@push.rocks/smartguard': 3.1.0
       '@push.rocks/smartpromise': 4.2.3
-      '@push.rocks/webrequest': 3.0.37
+      '@push.rocks/webrequest': 4.0.2
       '@push.rocks/webstream': 1.0.10
 
   '@api.global/typedserver@3.0.80(@push.rocks/smartserve@2.0.1)':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@api.global/typedrequest-interfaces': 3.0.19
       '@api.global/typedsocket': 3.1.1(@push.rocks/smartserve@2.0.1)
       '@cloudflare/workers-types': 4.20260210.0
@@ -4403,7 +4403,7 @@ snapshots:
 
   '@api.global/typedserver@8.3.0(@tiptap/pm@2.27.2)':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@api.global/typedrequest-interfaces': 3.0.19
       '@api.global/typedsocket': 4.1.0(@push.rocks/smartserve@2.0.1)
       '@cloudflare/workers-types': 4.20260210.0
@@ -4434,7 +4434,7 @@ snapshots:
       '@push.rocks/smarttime': 4.1.1
       '@push.rocks/smartwatch': 6.3.0
       '@push.rocks/taskbuffer': 3.5.0
-      '@push.rocks/webrequest': 4.0.1
+      '@push.rocks/webrequest': 4.0.2
       '@push.rocks/webstore': 2.0.20
       '@tsclass/tsclass': 9.3.0
       lit: 3.3.2
@@ -4449,7 +4449,7 @@ snapshots:
 
   '@api.global/typedsocket@3.1.1(@push.rocks/smartserve@2.0.1)':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@api.global/typedrequest-interfaces': 3.0.19
       '@push.rocks/isohash': 2.0.1
       '@push.rocks/smartjson': 5.2.0
@@ -4469,7 +4469,7 @@ snapshots:
 
   '@api.global/typedsocket@4.1.0(@push.rocks/smartserve@2.0.1)':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@api.global/typedrequest-interfaces': 3.0.19
       '@push.rocks/isohash': 2.0.1
       '@push.rocks/smartdelay': 3.0.5
@@ -5054,14 +5054,14 @@ snapshots:
 
   '@design.estate/dees-comms@1.0.30':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@api.global/typedrequest-interfaces': 3.0.19
       '@push.rocks/smartdelay': 3.0.5
       broadcast-channel: 7.3.0
 
   '@design.estate/dees-domtools@2.3.8':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@design.estate/dees-comms': 1.0.30
       '@push.rocks/lik': 6.2.2
       '@push.rocks/smartdelay': 3.0.5
@@ -5815,7 +5815,7 @@ snapshots:
 
   '@push.rocks/qenv@6.1.3':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@configvault.io/interfaces': 1.0.17
       '@push.rocks/smartfile': 11.2.7
       '@push.rocks/smartlog': 3.1.10
@@ -6484,7 +6484,7 @@ snapshots:
       - typescript
       - utf-8-validate
 
-  '@push.rocks/smartradius@1.1.0':
+  '@push.rocks/smartradius@1.1.1':
     dependencies:
       '@push.rocks/smartdelay': 3.0.5
       '@push.rocks/smartpromise': 4.2.3
@@ -6541,7 +6541,7 @@ snapshots:
 
   '@push.rocks/smartserve@2.0.1':
     dependencies:
-      '@api.global/typedrequest': 3.2.5
+      '@api.global/typedrequest': 3.2.6
       '@cfworker/json-schema': 4.1.1
       '@push.rocks/lik': 6.2.2
       '@push.rocks/smartenv': 6.0.0
@@ -6567,7 +6567,7 @@ snapshots:
       '@push.rocks/smartfeed': 1.4.0
       '@push.rocks/smartxml': 2.0.0
       '@push.rocks/smartyaml': 3.0.4
-      '@push.rocks/webrequest': 4.0.1
+      '@push.rocks/webrequest': 4.0.2
       '@tsclass/tsclass': 9.3.0
 
   '@push.rocks/smartsocket@2.1.0':
@@ -6719,7 +6719,7 @@ snapshots:
       '@push.rocks/smartpromise': 4.2.3
       '@push.rocks/webstore': 2.0.20
 
-  '@push.rocks/webrequest@4.0.1':
+  '@push.rocks/webrequest@4.0.2':
     dependencies:
       '@push.rocks/smartdelay': 3.0.5
       '@push.rocks/smartenv': 5.0.13

readme.md

@@ -34,10 +34,10 @@ For reporting bugs, issues, or security vulnerabilities, please visit [community
 ### 🌐 Universal Traffic Router
 - **HTTP/HTTPS routing** with domain matching, path-based forwarding, and automatic TLS
 - **TCP/SNI proxy** for any protocol with TLS termination or passthrough
-- **DNS server** with authoritative zones, dynamic record management, and DNS-over-HTTPS
+- **DNS server** (Rust-powered via [SmartDNS](https://code.foss.global/push.rocks/smartdns)) with authoritative zones, dynamic record management, and DNS-over-HTTPS
 - **Multi-protocol support** on the same infrastructure via [SmartProxy](https://code.foss.global/push.rocks/smartproxy)
 
-### 📧 Complete Email Infrastructure
+### 📧 Complete Email Infrastructure (powered by [smartmta](https://code.foss.global/push.rocks/smartmta))
 - **Multi-domain SMTP server** on standard ports (25, 587, 465)
 - **Pattern-based email routing** with four action types: forward, process, deliver, reject
 - **DKIM signing & verification**, SPF, DMARC authentication stack
@@ -59,14 +59,16 @@ For reporting bugs, issues, or security vulnerabilities, please visit [community
 
 ### ⚡ High Performance
 - **Rust-powered proxy engine** via SmartProxy for maximum throughput
+- **Rust-powered MTA engine** via smartmta (TypeScript + Rust hybrid) for reliable email delivery
+- **Rust-powered DNS engine** via SmartDNS for high-performance UDP and DNS-over-HTTPS
 - **Connection pooling** for outbound SMTP and backend services
 - **Socket-handler mode** — direct socket passing eliminates internal port hops
 - **Real-time metrics** via SmartMetrics (CPU, memory, connections, throughput)
 
 ### 💾 Persistent Storage & Caching
 - **Multiple storage backends**: filesystem, custom functions, or in-memory
-- **Embedded cache database** via smartdata + TsmDb (MongoDB-compatible)
+- **Embedded cache database** via smartdata + LocalTsmDb (MongoDB-compatible)
-- **Automatic TTL-based cleanup** for cached emails, IP reputation, DKIM keys, and more
+- **Automatic TTL-based cleanup** for cached emails and IP reputation data
 
 ### 🖥️ OpsServer Dashboard
 - **Web-based management interface** with real-time monitoring
@@ -84,7 +86,7 @@ npm install @serve.zone/dcrouter
 
 ### Prerequisites
 
-- **Node.js 18+** with ES module support
+- **Node.js 20+** with ES module support
 - Valid domain with DNS control (for ACME certificate automation)
 - Cloudflare API token (for DNS-01 challenges) — optional
 
@@ -172,7 +174,7 @@ const router = new DcRouter({
     acme: { email: 'ssl@example.com', enabled: true, useProduction: true }
   },
 
-  // Email system
+  // Email system (powered by smartmta)
   emailConfig: {
     ports: [25, 587, 465],
     hostname: 'mail.example.com',
@@ -244,10 +246,10 @@ graph TB
 
     subgraph "DcRouter Core"
         DC[DcRouter Orchestrator]
-        SP[SmartProxy Engine]
+        SP[SmartProxy Engine<br/><i>Rust-powered</i>]
-        ES[Unified Email Server]
+        ES[smartmta Email Server<br/><i>TypeScript + Rust</i>]
-        DS[DNS Server]
+        DS[SmartDNS Server<br/><i>Rust-powered</i>]
-        RS[RADIUS Server]
+        RS[SmartRadius Server]
         CM[Certificate Manager]
         OS[OpsServer Dashboard]
         MM[Metrics Manager]
@@ -289,17 +291,36 @@ graph TB
 
 ### Core Components
 
-| Component | Description |
+| Component | Package | Description |
-|-----------|-------------|
+|-----------|---------|-------------|
-| **DcRouter** | Central orchestrator — starts, stops, and coordinates all services |
+| **DcRouter** | `@serve.zone/dcrouter` | Central orchestrator — starts, stops, and coordinates all services |
-| **SmartProxy** | High-performance HTTP/HTTPS and TCP/SNI proxy with route-based config |
+| **SmartProxy** | `@push.rocks/smartproxy` | High-performance HTTP/HTTPS and TCP/SNI proxy with route-based config (Rust engine) |
-| **UnifiedEmailServer** | Full SMTP server with pattern-based routing, DKIM, queue management |
+| **UnifiedEmailServer** | `@push.rocks/smartmta` | Full SMTP server with pattern-based routing, DKIM, queue management (TypeScript + Rust) |
-| **DNS Server** | Authoritative DNS with dynamic records, DKIM TXT auto-generation |
+| **DNS Server** | `@push.rocks/smartdns` | Authoritative DNS with dynamic records and DKIM TXT auto-generation (Rust engine) |
-| **RADIUS Server** | Network authentication with MAB, VLAN assignment, and accounting |
+| **RADIUS Server** | `@push.rocks/smartradius` | Network authentication with MAB, VLAN assignment, and accounting |
-| **OpsServer** | Web dashboard + TypedRequest API for monitoring and management |
+| **OpsServer** | `@api.global/typedserver` | Web dashboard + TypedRequest API for monitoring and management |
-| **MetricsManager** | Real-time metrics collection (CPU, memory, email, DNS, security) |
+| **MetricsManager** | `@push.rocks/smartmetrics` | Real-time metrics collection (CPU, memory, email, DNS, security) |
-| **StorageManager** | Pluggable key-value storage (filesystem, custom, or in-memory) |
+| **StorageManager** | built-in | Pluggable key-value storage (filesystem, custom, or in-memory) |
-| **CacheDb** | Embedded MongoDB-compatible database for persistent caching |
+| **CacheDb** | `@push.rocks/smartdata` | Embedded MongoDB-compatible database (LocalTsmDb) for persistent caching |
+
+### How It Works
+
+DcRouter acts purely as an **orchestrator** — it doesn't implement protocols itself. Instead, it wires together best-in-class packages for each protocol:
+
+1. **On `start()`**: DcRouter initializes OpsServer (port 3000), then spins up SmartProxy, smartmta, SmartDNS, and SmartRadius based on which configs are provided.
+2. **During operation**: Each service handles its own protocol independently. SmartProxy uses a Rust-powered engine for maximum throughput. smartmta uses a hybrid TypeScript + Rust architecture for reliable email delivery.
+3. **On `stop()`**: All services are gracefully shut down in reverse order.
+
+### Rust-Powered Architecture
+
+DcRouter itself is a pure TypeScript orchestrator, but three of its core sub-components ship with **compiled Rust binaries** for performance-critical paths. At runtime each package detects the platform, unpacks the correct binary, and communicates with TypeScript over IPC/FFI — so you get the ergonomics of TypeScript with the throughput of native code.
+
+| Component | Rust Binary | What It Handles |
+|-----------|-------------|-----------------|
+| **SmartProxy** | `smartproxy-bin` | All TCP/TLS/HTTP proxy networking, NFTables integration, connection metrics |
+| **smartmta** | `mailer-bin` | SMTP server + client, DKIM/SPF/DMARC, content scanning, IP reputation |
+| **SmartDNS** | `smartdns-bin` | DNS server (UDP + DNS-over-HTTPS), DNSSEC, DNS client resolution |
+| **SmartRadius** | — | Pure TypeScript (no Rust component) |
 
 ## Configuration Reference
 
@@ -312,22 +333,8 @@ interface IDcRouterOptions {
   smartProxyConfig?: ISmartProxyOptions;
 
   // ── Email ──────────────────────────────────────────────────────
-  /** Unified email server configuration */
+  /** Unified email server configuration (smartmta) */
-  emailConfig?: {
+  emailConfig?: IUnifiedEmailServerOptions;
-    ports: number[];                     // e.g. [25, 587, 465]
-    hostname: string;                    // e.g. 'mail.example.com'
-    domains: IEmailDomainConfig[];       // Domain infrastructure
-    routes: IEmailRoute[];               // Routing rules
-    useSocketHandler?: boolean;          // Direct socket passing (no port binding)
-    auth?: { required?: boolean; methods?: ('PLAIN'|'LOGIN'|'OAUTH2')[]; users?: Array<{username: string; password: string}> };
-    tls?: { certPath?: string; keyPath?: string; caPath?: string };
-    maxMessageSize?: number;
-    defaults?: {
-      dnsMode?: 'forward' | 'internal-dns' | 'external-dns';
-      dkim?: IEmailDomainConfig['dkim'];
-      rateLimits?: IEmailDomainConfig['rateLimits'];
-    };
-  };
 
   /** Custom email port mapping overrides */
   emailPortConfig?: {
@@ -338,9 +345,9 @@ interface IDcRouterOptions {
 
   // ── DNS ────────────────────────────────────────────────────────
   /** Nameserver domains — get A records automatically */
-  dnsNsDomains?: string[];               // e.g. ['ns1.example.com', 'ns2.example.com']
+  dnsNsDomains?: string[];
   /** Domains this server is authoritative for */
-  dnsScopes?: string[];                  // e.g. ['example.com']
+  dnsScopes?: string[];
   /** Public IP for NS A records */
   publicIp?: string;
   /** Ingress proxy IPs (hides real server IP) */
@@ -453,7 +460,7 @@ DcRouter uses [SmartProxy](https://code.foss.global/push.rocks/smartproxy) for a
 
 ## Email System
 
-The email system is built around the **UnifiedEmailServer**, which handles SMTP sessions, route matching, delivery queuing, DKIM signing, and all email processing in a single unified component.
+The email system is powered by [`@push.rocks/smartmta`](https://code.foss.global/push.rocks/smartmta), a TypeScript + Rust hybrid MTA. DcRouter configures and orchestrates smartmta's **UnifiedEmailServer**, which handles SMTP sessions, route matching, delivery queuing, DKIM signing, and all email processing.
 
 ### Email Domain Configuration
 
@@ -722,7 +729,7 @@ Used for: DKIM keys, email routes, bounce/suppression lists, IP reputation data,
 
 ### Cache Database
 
-An embedded MongoDB-compatible database (via smartdata + TsmDb) for persistent caching with automatic TTL cleanup:
+An embedded MongoDB-compatible database (via smartdata + LocalTsmDb) for persistent caching with automatic TTL cleanup:
 
 ```typescript
 cacheConfig: {
@@ -740,7 +747,7 @@ cacheConfig: {
 }
 ```
 
-Cached document types: `CachedEmail`, `CachedIPReputation`, `CachedBounce`, `CachedSuppression`, `CachedDKIMKey`.
+Cached document types: `CachedEmail`, `CachedIPReputation`.
 
 ## Security Features
 
@@ -814,31 +821,39 @@ All management is done via TypedRequest over HTTP POST to `/typedrequest`:
 
 ```typescript
 // Authentication
-{ method: 'adminLogin', data: { username, password } }
+'adminLoginWithUsernameAndPassword'   // Login with credentials → returns JWT identity
-{ method: 'verifyIdentity', data: { identity } }
+'verifyIdentity'                       // Verify JWT token validity
+'adminLogout'                          // End admin session
 
-// Statistics
+// Statistics & Health
-{ method: 'getServerStatistics', data: { identity } }
+'getServerStatistics'                  // Uptime, CPU, memory, connections
-{ method: 'getCombinedMetrics', data: { identity } }
+'getHealthStatus'                      // System health check
-{ method: 'getHealthStatus', data: { identity } }
+'getCombinedMetrics'                   // All metrics in one call
 
 // Email Operations
-{ method: 'getQueuedEmails', data: { identity } }
+'getQueuedEmails'                      // Emails pending delivery
-{ method: 'getSentEmails', data: { identity } }
+'getSentEmails'                        // Successfully delivered emails
-{ method: 'getFailedEmails', data: { identity } }
+'getFailedEmails'                      // Failed emails
-{ method: 'resendEmail', data: { identity, emailId } }
+'resendEmail'                          // Re-queue a failed email
-{ method: 'getBounceRecords', data: { identity } }
+'getBounceRecords'                     // Bounce records
+'removeFromSuppressionList'            // Unsuppress an address
 
 // Configuration (read-only)
-{ method: 'getConfiguration', data: { identity } }
+'getConfiguration'                     // Current system config
 
 // Logs
-{ method: 'getLogs', data: { identity, level, limit } }
+'getLogs'                              // Retrieve system logs
 
 // RADIUS
-{ method: 'getRadiusSessions', data: { identity } }
+'getRadiusSessions'                    // Active RADIUS sessions
-{ method: 'getRadiusClients', data: { identity } }
+'getRadiusClients'                     // List NAS clients
-{ method: 'getRadiusStatistics', data: { identity } }
+'getRadiusStatistics'                  // RADIUS stats
+'setRadiusClient'                      // Add/update NAS client
+'removeRadiusClient'                   // Remove NAS client
+'getVlanMappings'                      // List VLAN mappings
+'setVlanMapping'                       // Add/update VLAN mapping
+'removeVlanMapping'                    // Remove VLAN mapping
+'testVlanAssignment'                   // Test what VLAN a MAC gets
 ```
 
 ## API Reference
@@ -869,7 +884,7 @@ const router = new DcRouter(options: IDcRouterOptions);
 |----------|------|-------------|
 | `options` | `IDcRouterOptions` | Current configuration |
 | `smartProxy` | `SmartProxy` | SmartProxy instance |
-| `emailServer` | `UnifiedEmailServer` | Email server instance |
+| `emailServer` | `UnifiedEmailServer` | Email server instance (from smartmta) |
 | `dnsServer` | `DnsServer` | DNS server instance |
 | `radiusServer` | `RadiusServer` | RADIUS server instance |
 | `storageManager` | `StorageManager` | Storage backend |
@@ -877,6 +892,21 @@ const router = new DcRouter(options: IDcRouterOptions);
 | `metricsManager` | `MetricsManager` | Metrics collector |
 | `cacheDb` | `CacheDb` | Cache database instance |
 
+### Re-exported Types
+
+DcRouter re-exports key types from smartmta for convenience:
+
+```typescript
+import {
+  DcRouter,
+  IDcRouterOptions,
+  UnifiedEmailServer,
+  type IUnifiedEmailServerOptions,
+  type IEmailRoute,
+  type IEmailDomainConfig,
+} from '@serve.zone/dcrouter';
+```
+
 ## Sub-Modules
 
 DcRouter is published as a monorepo with separately-installable interface and web packages:
@@ -895,31 +925,34 @@ import { data, requests } from '@serve.zone/dcrouter/interfaces';
 
 ## Testing
 
-DcRouter includes a comprehensive test suite with **198 test files** covering all system components:
+DcRouter includes a comprehensive test suite covering all system components:
-
-- **SMTP Protocol** — EHLO, MAIL FROM, RCPT TO, DATA, STARTTLS, AUTH, pipelining
-- **Email Routing** — Pattern matching, route priorities, all action types
-- **Email Security** — DKIM, SPF, DMARC, content scanning, rate limiting
-- **DNS** — Record management, socket handler, validation, mode switching
-- **RADIUS** — Authentication, VLAN assignment, accounting
-- **Deliverability** — IP warmup, reputation monitoring, bounce management
-- **Storage & Cache** — All backends, TTL cleanup, persistence
-- **OpsServer** — API authentication, protected endpoints, statistics
-- **Integration** — Full end-to-end workflows
-
-### Running Tests
 
 ```bash
-# Run all tests
+# Run all tests (10 files, 73 tests)
 pnpm test
 
 # Run a specific test file
-tstest test/test.email.router.ts --verbose
+tstest test/test.jwt-auth.ts --verbose
 
-# Run SMTP protocol suite
+# Run with extended timeout
-tstest test/suite/smtpserver_commands/test.cmd-01.ehlo-command.ts --verbose
+tstest test/test.opsserver-api.ts --verbose --timeout 60
 ```
 
+### Test Coverage
+
+| Test File | Area | Tests |
+|-----------|------|-------|
+| `test.contentscanner.ts` | Content scanning (spam, phishing, malware, attachments) | 13 |
+| `test.dcrouter.email.ts` | Email config, domain and route setup | 4 |
+| `test.dns-server-config.ts` | DNS record parsing, grouping, extraction | 5 |
+| `test.dns-socket-handler.ts` | DNS socket handler and route generation | 6 |
+| `test.errors.ts` | Error classes, handler, retry utilities | 5 |
+| `test.ipreputationchecker.ts` | IP reputation, DNSBL, caching, risk classification | 10 |
+| `test.jwt-auth.ts` | JWT login, verification, logout, invalid credentials | 8 |
+| `test.opsserver-api.ts` | Health, statistics, configuration, log APIs | 6 |
+| `test.protected-endpoint.ts` | Admin auth, identity verification, public endpoints | 8 |
+| `test.storagemanager.ts` | Memory, filesystem, custom backends, concurrency | 8 |
+
 ## License and Legal Information
 
 This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [LICENSE](./LICENSE) file.

test/test.jwt-auth.ts

@@ -9,6 +9,7 @@ let identity: interfaces.data.IIdentity;
 tap.test('should start DCRouter with OpsServer', async () => {
   testDcRouter = new DcRouter({
     // Minimal config for testing
+    cacheConfig: { enabled: false },
   });
   
   await testDcRouter.start();

test/test.opsserver-api.ts

@@ -8,6 +8,7 @@ let testDcRouter: DcRouter;
 tap.test('should start DCRouter with OpsServer', async () => {
   testDcRouter = new DcRouter({
     // Minimal config for testing
+    cacheConfig: { enabled: false },
   });
   
   await testDcRouter.start();

test/test.protected-endpoint.ts

@@ -9,6 +9,7 @@ let adminIdentity: interfaces.data.IIdentity;
 tap.test('should start DCRouter with OpsServer', async () => {
   testDcRouter = new DcRouter({
     // Minimal config for testing
+    cacheConfig: { enabled: false },
   });
 
   await testDcRouter.start();

ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '5.0.0',
+  version: '5.0.2',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

ts_interfaces/readme.md

@@ -89,7 +89,7 @@ TypedRequest interfaces for the OpsServer API, organized by domain:
 #### 🔐 Authentication
 | Interface | Method | Description |
 |-----------|--------|-------------|
-| `IReq_AdminLoginWithUsernameAndPassword` | `adminLogin` | Authenticate as admin |
+| `IReq_AdminLoginWithUsernameAndPassword` | `adminLoginWithUsernameAndPassword` | Authenticate as admin |
 | `IReq_AdminLogout` | `adminLogout` | End admin session |
 | `IReq_VerifyIdentity` | `verifyIdentity` | Verify JWT token validity |
 

ts_web/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '5.0.0',
+  version: '5.0.2',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }