@push.rocks/smartdns 7.6.1 → 7.8.1

package/dist_ts_server/classes.rustdnsbridge.d.ts

@@ -0,0 +1,119 @@
+import * as plugins from './plugins.js';
+export type TDnsCommands = {
+    start: {
+        params: {
+            config: IRustDnsConfig;
+        };
+        result: Record<string, never>;
+    };
+    stop: {
+        params: Record<string, never>;
+        result: Record<string, never>;
+    };
+    dnsQueryResult: {
+        params: {
+            correlationId: string;
+            answers: IIpcDnsAnswer[];
+            answered: boolean;
+        };
+        result: {
+            resolved: boolean;
+        };
+    };
+    updateCerts: {
+        params: {
+            httpsKey: string;
+            httpsCert: string;
+        };
+        result: Record<string, never>;
+    };
+    processPacket: {
+        params: {
+            packet: string;
+        };
+        result: {
+            packet: string;
+        };
+    };
+    ping: {
+        params: Record<string, never>;
+        result: {
+            pong: boolean;
+        };
+    };
+};
+export interface IRustDnsConfig {
+    udpPort: number;
+    httpsPort: number;
+    udpBindInterface: string;
+    httpsBindInterface: string;
+    httpsKey: string;
+    httpsCert: string;
+    dnssecZone: string;
+    dnssecAlgorithm: string;
+    primaryNameserver: string;
+    enableLocalhostHandling: boolean;
+    manualUdpMode: boolean;
+    manualHttpsMode: boolean;
+}
+export interface IIpcDnsQuestion {
+    name: string;
+    type: string;
+    class: string;
+}
+export interface IIpcDnsAnswer {
+    name: string;
+    type: string;
+    class: string;
+    ttl: number;
+    data: any;
+}
+export interface IDnsQueryEvent {
+    correlationId: string;
+    questions: IIpcDnsQuestion[];
+    dnssecRequested: boolean;
+}
+/**
+ * Bridge to the Rust DNS binary via smartrust IPC.
+ */
+export declare class RustDnsBridge extends plugins.events.EventEmitter {
+    private bridge;
+    constructor();
+    /**
+     * Spawn the Rust binary and wait for readiness.
+     */
+    spawn(): Promise<boolean>;
+    /**
+     * Start the DNS server with given config.
+     */
+    startServer(config: IRustDnsConfig): Promise<void>;
+    /**
+     * Stop the DNS server.
+     */
+    stopServer(): Promise<void>;
+    /**
+     * Send a DNS query result back to Rust.
+     */
+    sendQueryResult(correlationId: string, answers: IIpcDnsAnswer[], answered: boolean): Promise<void>;
+    /**
+     * Update TLS certificates.
+     */
+    updateCerts(httpsKey: string, httpsCert: string): Promise<void>;
+    /**
+     * Process a raw DNS packet via IPC (for manual/passthrough mode).
+     * Returns the DNS response as a Buffer.
+     */
+    processPacket(packet: Buffer): Promise<Buffer>;
+    /**
+     * Ping the Rust binary for health check.
+     */
+    ping(): Promise<boolean>;
+    /**
+     * Kill the Rust process.
+     */
+    kill(): void;
+    /**
+     * Whether the bridge is running.
+     */
+    get running(): boolean;
+}

package/dist_ts_server/classes.rustdnsbridge.js

@@ -0,0 +1,136 @@
+import * as plugins from './plugins.js';
+/**
+ * Bridge to the Rust DNS binary via smartrust IPC.
+ */
+export class RustDnsBridge extends plugins.events.EventEmitter {
+    constructor() {
+        super();
+        const packageDir = plugins.path.resolve(plugins.path.dirname(new URL(import.meta.url).pathname), '..');
+        // Determine platform suffix for dist_rust binaries (matches tsrust naming)
+        const platformSuffix = getPlatformSuffix();
+        const localPaths = [];
+        // dist_rust/ candidates (tsrust cross-compiled output, platform-specific)
+        if (platformSuffix) {
+            localPaths.push(plugins.path.join(packageDir, 'dist_rust', `rustdns_${platformSuffix}`));
+        }
+        // dist_rust/ without suffix (native build)
+        localPaths.push(plugins.path.join(packageDir, 'dist_rust', 'rustdns'));
+        // Local dev build paths
+        localPaths.push(plugins.path.join(packageDir, 'rust', 'target', 'release', 'rustdns'));
+        localPaths.push(plugins.path.join(packageDir, 'rust', 'target', 'debug', 'rustdns'));
+        this.bridge = new plugins.smartrust.RustBridge({
+            binaryName: 'rustdns',
+            cliArgs: ['--management'],
+            requestTimeoutMs: 30_000,
+            readyTimeoutMs: 10_000,
+            localPaths,
+            searchSystemPath: false,
+        });
+        // Forward events from inner bridge
+        this.bridge.on('management:dnsQuery', (data) => {
+            this.emit('dnsQuery', data);
+        });
+        this.bridge.on('management:started', () => {
+            this.emit('started');
+        });
+        this.bridge.on('management:stopped', () => {
+            this.emit('stopped');
+        });
+        this.bridge.on('management:error', (data) => {
+            this.emit('error', new Error(data.message));
+        });
+        this.bridge.on('stderr', (line) => {
+            // Forward Rust tracing output as debug logs
+            if (line.trim()) {
+                console.log(`[rustdns] ${line}`);
+            }
+        });
+    }
+    /**
+     * Spawn the Rust binary and wait for readiness.
+     */
+    async spawn() {
+        return this.bridge.spawn();
+    }
+    /**
+     * Start the DNS server with given config.
+     */
+    async startServer(config) {
+        await this.bridge.sendCommand('start', { config });
+    }
+    /**
+     * Stop the DNS server.
+     */
+    async stopServer() {
+        await this.bridge.sendCommand('stop', {});
+    }
+    /**
+     * Send a DNS query result back to Rust.
+     */
+    async sendQueryResult(correlationId, answers, answered) {
+        await this.bridge.sendCommand('dnsQueryResult', {
+            correlationId,
+            answers,
+            answered,
+        });
+    }
+    /**
+     * Update TLS certificates.
+     */
+    async updateCerts(httpsKey, httpsCert) {
+        await this.bridge.sendCommand('updateCerts', { httpsKey, httpsCert });
+    }
+    /**
+     * Process a raw DNS packet via IPC (for manual/passthrough mode).
+     * Returns the DNS response as a Buffer.
+     */
+    async processPacket(packet) {
+        const result = await this.bridge.sendCommand('processPacket', {
+            packet: packet.toString('base64'),
+        });
+        return Buffer.from(result.packet, 'base64');
+    }
+    /**
+     * Ping the Rust binary for health check.
+     */
+    async ping() {
+        const result = await this.bridge.sendCommand('ping', {});
+        return result.pong;
+    }
+    /**
+     * Kill the Rust process.
+     */
+    kill() {
+        this.bridge.kill();
+    }
+    /**
+     * Whether the bridge is running.
+     */
+    get running() {
+        return this.bridge.running;
+    }
+}
+/**
+ * Get the tsrust platform suffix for the current platform.
+ * Matches the naming convention used by @git.zone/tsrust.
+ */
+function getPlatformSuffix() {
+    const platform = process.platform;
+    const arch = process.arch;
+    const platformMap = {
+        'linux': 'linux',
+        'darwin': 'macos',
+        'win32': 'windows',
+    };
+    const archMap = {
+        'x64': 'amd64',
+        'arm64': 'arm64',
+    };
+    const p = platformMap[platform];
+    const a = archMap[arch];
+    if (p && a) {
+        return `${p}_${a}`;
+    }
+    return null;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_server/index.d.ts

@@ -1 +1,2 @@
 export * from './classes.dnsserver.js';
+export * from './classes.rustdnsbridge.js';

package/dist_ts_server/index.js

@@ -1,2 +1,3 @@
 export * from './classes.dnsserver.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90c19zZXJ2ZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyx3QkFBd0IsQ0FBQyJ9
+export * from './classes.rustdnsbridge.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90c19zZXJ2ZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyx3QkFBd0IsQ0FBQztBQUN2QyxjQUFjLDRCQUE0QixDQUFDIn0=

package/dist_ts_server/plugins.d.ts

@@ -1,14 +1,14 @@
 import crypto from 'crypto';
 import dgram from 'dgram';
+import { EventEmitter } from 'events';
 import fs from 'fs';
-import http from 'http';
-import https from 'https';
 import * as net from 'net';
 import * as path from 'path';
-export { crypto, dgram, fs, http, https, net, path, };
-import * as smartpromise from '@push.rocks/smartpromise';
-export { smartpromise, };
-import elliptic from 'elliptic';
-import * as dnsPacket from 'dns-packet';
+export { crypto, dgram, fs, net, path, };
+export declare const events: {
+    EventEmitter: typeof EventEmitter;
+};
+import * as smartrust from '@push.rocks/smartrust';
+export { smartrust, };
 import * as minimatch from 'minimatch';
-export { dnsPacket, elliptic, minimatch, };
+export { minimatch, };

package/dist_ts_server/plugins.js

@@ -1,18 +1,16 @@
 // node native
 import crypto from 'crypto';
 import dgram from 'dgram';
+import { EventEmitter } from 'events';
 import fs from 'fs';
-import http from 'http';
-import https from 'https';
 import * as net from 'net';
 import * as path from 'path';
-export { crypto, dgram, fs, http, https, net, path, };
+export { crypto, dgram, fs, net, path, };
+export const events = { EventEmitter };
 // @push.rocks scope
-import * as smartpromise from '@push.rocks/smartpromise';
-export { smartpromise, };
+import * as smartrust from '@push.rocks/smartrust';
+export { smartrust, };
 // third party
-import elliptic from 'elliptic';
-import * as dnsPacket from 'dns-packet';
 import * as minimatch from 'minimatch';
-export { dnsPacket, elliptic, minimatch, };
-//# sourceMappingURL=data:application/json;base64,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
+export { minimatch, };
+//# sourceMappingURL=data:application/json;base64,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

package/npmextra.json

@@ -1,5 +1,11 @@
 {
-  "gitzone": {
+  "@git.zone/tsrust": {
+    "targets": [
+      "linux_amd64",
+      "linux_arm64"
+    ]
+  },
+  "@git.zone/cli": {
     "projectType": "npm",
     "module": {
       "githost": "code.foss.global",
@@ -27,14 +33,20 @@
         "Domain Propagation",
         "DNS Server"
       ]
+    },
+    "release": {
+      "registries": [
+        "https://verdaccio.lossless.digital",
+        "https://registry.npmjs.org"
+      ],
+      "accessLevel": "public"
     }
   },
-  "npmci": {
+  "@git.zone/tsdoc": {
+    "legal": "\n## License and Legal Information\n\nThis repository contains open-source code that is licensed under the MIT License. A copy of the MIT License can be found in the [license](license) file within this repository. \n\n**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.\n\n### Trademarks\n\nThis project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH and are not included within the scope of the MIT license granted herein. Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines, and any usage must be approved in writing by Task Venture Capital GmbH.\n\n### Company Information\n\nTask Venture Capital GmbH  \nRegistered at District court Bremen HRB 35230 HB, Germany\n\nFor any legal inquiries or if you require further information, please contact us via email at hello@task.vc.\n\nBy using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.\n"
+  },
+  "@ship.zone/szci": {
     "npmGlobalTools": [],
-    "npmAccessLevel": "public",
     "npmRegistryUrl": "registry.npmjs.org"
-  },
-  "tsdoc": {
-    "legal": "\n## License and Legal Information\n\nThis repository contains open-source code that is licensed under the MIT License. A copy of the MIT License can be found in the [license](license) file within this repository. \n\n**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.\n\n### Trademarks\n\nThis project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH and are not included within the scope of the MIT license granted herein. Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines, and any usage must be approved in writing by Task Venture Capital GmbH.\n\n### Company Information\n\nTask Venture Capital GmbH  \nRegistered at District court Bremen HRB 35230 HB, Germany\n\nFor any legal inquiries or if you require further information, please contact us via email at hello@task.vc.\n\nBy using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.\n"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartdns",
-  "version": "7.6.1",
+  "version": "7.8.1",
   "private": false,
   "description": "A robust TypeScript library providing advanced DNS management and resolution capabilities including support for DNSSEC, custom DNS servers, and integration with various DNS providers.",
   "exports": {
@@ -8,6 +8,11 @@
     "./server": "./dist_ts_server/index.js",
     "./client": "./dist_ts_client/index.js"
   },
+  "scripts": {
+    "test": "(tstest test/ --verbose --timeout 60)",
+    "build": "(tsbuild tsfolders --web --allowimplicitany) && (tsrust)",
+    "buildDocs": "tsdoc"
+  },
   "repository": {
     "type": "git",
     "url": "https://code.foss.global/push.rocks/smartdns.git"
@@ -39,22 +44,21 @@
   "homepage": "https://code.foss.global/push.rocks/smartdns",
   "dependencies": {
     "@push.rocks/smartdelay": "^3.0.1",
-    "@push.rocks/smartenv": "^5.0.13",
+    "@push.rocks/smartenv": "^6.0.0",
     "@push.rocks/smartpromise": "^4.2.3",
-    "@push.rocks/smartrequest": "^2.1.0",
-    "@tsclass/tsclass": "^9.2.0",
-    "@types/dns-packet": "^5.6.5",
-    "@types/elliptic": "^6.4.18",
+    "@push.rocks/smartrust": "^1.2.1",
+    "@tsclass/tsclass": "^9.3.0",
     "acme-client": "^5.4.0",
-    "dns-packet": "^5.6.1",
-    "elliptic": "^6.6.1",
-    "minimatch": "^10.0.1"
+    "minimatch": "^10.2.0"
   },
   "devDependencies": {
-    "@git.zone/tsbuild": "^2.6.8",
-    "@git.zone/tsrun": "^1.3.3",
-    "@git.zone/tstest": "^2.3.7",
-    "@types/node": "^22.15.21"
+    "@git.zone/tsbuild": "^4.1.2",
+    "@git.zone/tsrun": "^2.0.1",
+    "@git.zone/tsrust": "^1.3.0",
+    "@git.zone/tstest": "^3.1.8",
+    "@types/dns-packet": "^5.6.5",
+    "@types/node": "^25.2.3",
+    "dns-packet": "^5.6.1"
   },
   "files": [
     "ts/**/*",
@@ -72,9 +76,5 @@
     "last 1 chrome versions"
   ],
   "type": "module",
-  "scripts": {
-    "test": "(tstest test/ --verbose --timeout 60)",
-    "build": "(tsbuild tsfolders --web --allowimplicitany)",
-    "buildDocs": "tsdoc"
-  }
-}
+  "packageManager": "pnpm@10.10.0+sha512.d615db246fe70f25dcfea6d8d73dee782ce23e2245e3c4f6f888249fb568149318637dca73c2c5c8ef2a4ca0d5657fb9567188bfab47f566d1ee6ce987815c39"
+}

package/readme.hints.md

@@ -5,8 +5,35 @@
 The smartdns library is structured into three main modules:
 
 1. **Client Module** (`ts_client/`) - DNS client functionality
-2. **Server Module** (`ts_server/`) - DNS server implementation
+2. **Server Module** (`ts_server/`) - DNS server with Rust backend
 3. **Main Module** (`ts/`) - Re-exports both client and server
+4. **Rust Module** (`rust/`) - High-performance DNS server binary
+
+## Rust Backend Architecture (v8.0+)
+
+The DNS server's network I/O, packet parsing/encoding, and DNSSEC signing run in Rust.
+TypeScript retains handler registration, ACME orchestration, and the public API.
+
+### Rust Crate Structure
+- `rustdns` - Main binary with IPC management loop (`--management` flag)
+- `rustdns-protocol` - DNS wire format parsing/encoding, record types
+- `rustdns-server` - Async UDP + HTTPS DoH servers (tokio, hyper, rustls)
+- `rustdns-dnssec` - ECDSA P-256 / ED25519 key generation and RRset signing
+
+### IPC Flow
+```
+DNS Query -> Rust (UDP/HTTPS) -> Parse packet
+  -> Try local resolution (localhost, DNSKEY)
+  -> If handler needed: emit "dnsQuery" event to TypeScript
+  -> TypeScript runs minimatch handlers, sends "dnsQueryResult" back
+  -> Rust builds response, signs DNSSEC if requested, sends packet
+```
+
+### Key Files
+- `ts_server/classes.rustdnsbridge.ts` - TypeScript IPC bridge wrapping smartrust.RustBridge
+- `ts_server/classes.dnsserver.ts` - DnsServer class (public API, delegates to Rust bridge)
+- `rust/crates/rustdns/src/management.rs` - IPC management loop
+- `rust/crates/rustdns/src/resolver.rs` - DNS resolver with callback support
 
 ## Client Module (Smartdns class)
 
@@ -67,11 +94,10 @@ The smartdns library is structured into three main modules:
 
 ## Key Dependencies
 
-- `dns-packet`: DNS packet encoding/decoding (wire format)
-- `elliptic`: Cryptographic operations for DNSSEC
+- `dns-packet`: DNS packet encoding/decoding (wire format, used by TS fallback path)
 - `acme-client`: Let's Encrypt certificate automation
 - `minimatch`: Glob pattern matching for domains
-- `@push.rocks/smartrequest`: HTTP client for DoH queries
+- `@push.rocks/smartrust`: TypeScript-to-Rust IPC bridge
 - `@tsclass/tsclass`: Type definitions for DNS records
 
 ## Testing Insights