@push.rocks/smartdns 8.1.0 → 8.2.1

package/dist_rust/rustdns-client_linux_amd64.tsrust-build.json

@@ -0,0 +1,14 @@
+{
+  "format": "tsrust.build-provenance.v2",
+  "binarySha256": "b0419c40c34a6d5fa6d6687847f9e7cb2290348d1fc0930fe4e83c808760078a",
+  "buildInfo": {
+    "projectName": "@push.rocks/smartdns",
+    "projectVersion": "8.2.1",
+    "gitCommit": "81f8e6aa1589378fc9883a3038bc8e39f6db6be4",
+    "gitDirty": false,
+    "builtAt": "2026-08-23T09:51:59.907Z",
+    "tsrustVersion": "1.10.0",
+    "binary": "rustdns-client",
+    "target": "linux_amd64"
+  }
+}

package/dist_rust/rustdns-client_linux_arm64.tsrust-build.json

@@ -0,0 +1,14 @@
+{
+  "format": "tsrust.build-provenance.v2",
+  "binarySha256": "8b24aa046dbac269aa71e6b7b554565d5f50e5664f8f6a54c59d7fe05d232ab5",
+  "buildInfo": {
+    "projectName": "@push.rocks/smartdns",
+    "projectVersion": "8.2.1",
+    "gitCommit": "81f8e6aa1589378fc9883a3038bc8e39f6db6be4",
+    "gitDirty": false,
+    "builtAt": "2026-08-23T09:52:00.225Z",
+    "tsrustVersion": "1.10.0",
+    "binary": "rustdns-client",
+    "target": "linux_arm64"
+  }
+}

package/dist_rust/rustdns_linux_amd64.tsrust-build.json

@@ -0,0 +1,14 @@
+{
+  "format": "tsrust.build-provenance.v2",
+  "binarySha256": "562c4ff14d42e17d0fccd653729eea025dc4eba7be56cb4b49cd2aafe1203bb4",
+  "buildInfo": {
+    "projectName": "@push.rocks/smartdns",
+    "projectVersion": "8.2.1",
+    "gitCommit": "81f8e6aa1589378fc9883a3038bc8e39f6db6be4",
+    "gitDirty": false,
+    "builtAt": "2026-08-23T09:51:59.907Z",
+    "tsrustVersion": "1.10.0",
+    "binary": "rustdns",
+    "target": "linux_amd64"
+  }
+}

package/dist_rust/rustdns_linux_arm64.tsrust-build.json

@@ -0,0 +1,14 @@
+{
+  "format": "tsrust.build-provenance.v2",
+  "binarySha256": "b2d37952a49874fc35b8ee7bdd5d4c794458dd93e1f2c315425351aa111f2c49",
+  "buildInfo": {
+    "projectName": "@push.rocks/smartdns",
+    "projectVersion": "8.2.1",
+    "gitCommit": "81f8e6aa1589378fc9883a3038bc8e39f6db6be4",
+    "gitDirty": false,
+    "builtAt": "2026-08-23T09:52:00.225Z",
+    "tsrustVersion": "1.10.0",
+    "binary": "rustdns",
+    "target": "linux_arm64"
+  }
+}

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartdns',
-    version: '8.1.0',
+    version: '8.2.1',
     description: 'A robust TypeScript library providing advanced DNS management and resolution capabilities including support for DNSSEC, custom DNS servers, and integration with various DNS providers.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHlMQUF5TDtDQUN2TSxDQUFBIn0=

package/dist_ts_server/classes.dnsserver.d.ts

@@ -93,7 +93,7 @@ interface LetsEncryptOptions {
 export interface IDnsQueryCompletedEvent {
     /** The original questions from the query */
     questions: IIpcDnsQuestion[];
-    /** Whether any handler answered the query */
+    /** Whether the response contains or synthesizes an answer */
     answered: boolean;
     /** The outcome actually sent on the wire */
     responseKind: TDnsQueryResponseKind;
@@ -127,9 +127,18 @@ export declare class DnsServer extends plugins.events.EventEmitter {
     /** Stable for the lifetime of this server, so the apex SOA does not churn. */
     private readonly soaSerial;
     private bridgeSpawned;
+    private lifecycleState;
+    private lifecycleTail;
+    private pendingLifecycleOperations;
     private httpsServer;
     private udpServer;
     private tcpServer;
+    private readonly manualHttp1Server;
+    private readonly manualHttp2Server;
+    private readonly manualHttpSockets;
+    private readonly manualHttpStreams;
+    private readonly manualHttpTimeouts;
+    private readonly manualHttpHeaderTimeouts;
     constructor(options: IDnsServerOptions);
     /**
      * Register a DNS handler for a domain pattern and record types.
@@ -165,14 +174,25 @@ export declare class DnsServer extends plugins.events.EventEmitter {
     unregisterHandlersByOwner(owner: string): number;
     /** Every currently registered handler, for introspection and leak checks. */
     listHandlers(): IDnsHandlerInfo[];
+    /**
+     * Replace the authoritative zone set used by subsequent queries without
+     * restarting any listener. The input is validated and copied before the live
+     * set changes; an explicit empty array means the server claims no DNS zone.
+     */
+    setAuthoritativeZones(authoritativeZones: string[]): void;
     /**
      * Start the DNS server.
      */
     start(): Promise<void>;
+    private startInternal;
     /**
-     * Stop the DNS server.
+     * Stop the DNS server and resolve only after the Rust process has closed.
      */
     stop(): Promise<void>;
+    private stopInternal;
+    private enqueueLifecycle;
+    private confirmBridgeTerminationAfterFailure;
+    private clearBridgeOwnership;
     /**
      * Initialize servers (no-op with Rust bridge, kept for API compatibility).
      */
@@ -190,6 +210,23 @@ export declare class DnsServer extends plugins.events.EventEmitter {
      * In Rust mode, this is not directly supported — use processRawDnsPacket instead.
      */
     handleHttpsSocket(socket: plugins.net.Socket): void;
+    /**
+     * Handle a cleartext HTTP stream after an upstream proxy has terminated TLS.
+     * Supports HTTP/1.1 and prior-knowledge HTTP/2 RFC 8484 requests. Encrypted
+     * TLS sockets must not be passed here.
+     */
+    handleHttpSocket(socket: plugins.net.Socket): void;
+    /** Replay sniffed bytes through a Duplex because Node's native HTTP/2 parser bypasses unshift(). */
+    private createReplayStream;
+    private createHttpTimeout;
+    private clearHttpTimeout;
+    private armHttpHeaderTimeout;
+    private clearHttpHeaderTimeout;
+    private handleDohHttpRequest;
+    private readDohRequestBody;
+    private rejectDohRequest;
+    private handleDohHttpFailure;
+    private writeDohError;
     /**
      * Handle a UDP message manually.
      */
@@ -215,6 +252,8 @@ export declare class DnsServer extends plugins.events.EventEmitter {
      * Filter domains to include only those the server is authoritative for.
      */
     filterAuthorizedDomains(domainNames: string[]): string[];
+    private applyUpdatedCertificates;
+    private isOperational;
     /**
      * Resolve a DNS query event from Rust using TypeScript handlers.
      *
@@ -227,6 +266,9 @@ export declare class DnsServer extends plugins.events.EventEmitter {
     private normalizeName;
     /** Configured authoritative zones, most specific first. */
     private normalizedAuthoritativeZones;
+    /** Canonical set used only to detect semantically equivalent updates. */
+    private canonicalAuthoritativeZoneSet;
+    private warnIfHandlerIsOutsideAuthority;
     /** The most specific configured zone containing `name`, if any. */
     private zoneForName;
     /**