@push.rocks/smartmta 13.0.1 → 13.0.2

package/changelog.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 2026-11-01 - 13.0.2
+
+### Fixes
+
+- DKIM signing now over-signs From, Reply-To, Subject, To, Cc, Date, Message-ID, MIME-Version and Content-Type (one `h=` entry more than the instances present, so an added or duplicated field fails verification) and also signs In-Reply-To, References, Resent-Date, Resent-From, Resent-Sender, Resent-To, Resent-Cc, Resent-Message-ID and List-* when present; every signature's `h=` therefore differs from earlier releases, and verifiers need no change.
+
+### Maintenance
+
+- The release tooling moves from the deprecated `@git.zone/tsbuild`, `@git.zone/tstest` and `@git.zone/tsrust` to `@git.zone/tsrepo` ^1.1.1 (`tsrepo build`, `tsrepo check`, `tsrepo test`; tests import `@git.zone/tsrepo/tapbundle`) and `@git.zone/rsrepo` ^1.1.1 (`rsrepo`, `rsrepo verify`, `rsrepo notices`; the `.smartconfig.json` key is now `@git.zone/rsrepo`); `@git.zone/cli` ^12.0.1, `@types/node` ^26.6.5 and pnpm 12.15.0.
+
 ## 2026-10-15 - 13.0.1
 
 ### Fixes

package/dist_rust/mailer-bin_linux_amd64_musl.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "26d34a7674c6b5b739c8ad6764c4e7d5282534e0b577459f1eb7f2d6b73e5543",
+  "binarySha256": "5ced0f2fb1fbb6c79a653ff4df450da297eca2e3b2fa1d984a3f7bec689512ac",
   "buildInfo": {
     "projectName": "@push.rocks/smartmta",
-    "projectVersion": "13.0.1",
-    "gitCommit": "e7bc2248fd9d2e90a3299bd05bfdabefa193f008",
+    "projectVersion": "13.0.2",
+    "gitCommit": "32839c1c9878eac237541811a805265d1abffb7f",
     "gitDirty": false,
-    "builtAt": "2026-10-15T11:23:05.139Z",
-    "tsrustVersion": "4.6.0",
+    "builtAt": "2026-11-01T15:23:01.857Z",
+    "tsrustVersion": "1.1.1",
     "binary": "mailer-bin",
     "target": "linux_amd64_musl"
   }

package/dist_rust/mailer-bin_linux_arm64_musl.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "0c3a0c4ad7a774b1797521e287aad257f2bf10a65bd8d2b7cdc35917a8692113",
+  "binarySha256": "3cb3e0bda579449bcb6fe637f484967cb0d2f4021bb270cb585e1df02dea4836",
   "buildInfo": {
     "projectName": "@push.rocks/smartmta",
-    "projectVersion": "13.0.1",
-    "gitCommit": "e7bc2248fd9d2e90a3299bd05bfdabefa193f008",
+    "projectVersion": "13.0.2",
+    "gitCommit": "32839c1c9878eac237541811a805265d1abffb7f",
     "gitDirty": false,
-    "builtAt": "2026-10-15T11:25:18.459Z",
-    "tsrustVersion": "4.6.0",
+    "builtAt": "2026-11-01T15:26:11.899Z",
+    "tsrustVersion": "1.1.1",
     "binary": "mailer-bin",
     "target": "linux_arm64_musl"
   }

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartmta',
-    version: '13.0.1',
+    version: '13.0.2',
     description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHlIQUF5SDtDQUN2SSxDQUFBIn0=

package/dist_ts/security/classes.rustsecuritybridge.d.ts

@@ -406,7 +406,7 @@ export declare class RustSecurityBridge extends EventEmitter {
     private _deliberateStop;
     private _smtpServerConfig;
     /**
-     * Map Node.js process.platform / process.arch to the tsrust target suffix
+     * Map Node.js process.platform / process.arch to the rsrepo target suffix
      * of the shipped binaries. Linux binaries are static musl builds, e.g.
      * mailer-bin_linux_amd64_musl.
      */

package/dist_ts/security/classes.rustsecuritybridge.js

@@ -239,7 +239,7 @@ export class RustSecurityBridge extends EventEmitter {
     _deliberateStop = false;
     _smtpServerConfig = null;
     /**
-     * Map Node.js process.platform / process.arch to the tsrust target suffix
+     * Map Node.js process.platform / process.arch to the rsrepo target suffix
      * of the shipped binaries. Linux binaries are static musl builds, e.g.
      * mailer-bin_linux_amd64_musl.
      */
@@ -257,7 +257,7 @@ export class RustSecurityBridge extends EventEmitter {
         super();
         const suffix = RustSecurityBridge.getPlatformSuffix();
         const localPaths = [];
-        // dist_rust/ candidates (tsrust cross-compiled output)
+        // dist_rust/ candidates (rsrepo cross-compiled output)
         if (suffix) {
             localPaths.push(plugins.path.join(paths.packageDir, 'dist_rust', `mailer-bin_${suffix}`));
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartmta",
-  "version": "13.0.1",
+  "version": "13.0.2",
   "description": "A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.",
   "keywords": [
     "mta",
@@ -31,11 +31,10 @@
     ".": "./dist_ts/index.js"
   },
   "devDependencies": {
-    "@git.zone/cli": "^9.1.0",
-    "@git.zone/tsbuild": "^6.0.2",
-    "@git.zone/tsrust": "^4.6.0",
-    "@git.zone/tstest": "^8.0.0",
-    "@types/node": "^26.6.4",
+    "@git.zone/cli": "^12.0.1",
+    "@git.zone/rsrepo": "^1.1.1",
+    "@git.zone/tsrepo": "^1.1.1",
+    "@types/node": "^26.6.5",
     "tsx": "^4.23.15"
   },
   "dependencies": {
@@ -69,10 +68,10 @@
     "access": "public"
   },
   "scripts": {
-    "test": "tstest test/ --logfile --verbose --timeout 60",
+    "test": "tsrepo test test/ --logfile --verbose --timeout 60",
     "test:rust": "cd rust && cargo test",
-    "build": "tsbuild tsfolders && tsrust",
-    "build:release": "(tsbuild tsfolders) && (tsrust --configured-targets) && (tsrust verify)",
-    "check": "tsbuild check"
+    "build": "tsrepo build tsfolders && rsrepo",
+    "build:release": "(tsrepo build tsfolders) && (rsrepo --configured-targets) && (rsrepo verify)",
+    "check": "tsrepo check"
   }
 }

package/readme.md

@@ -912,7 +912,7 @@ Performance-critical operations are implemented in Rust and communicate with the
 | `mailer-smtp` | Complete | Full SMTP protocol engine — TCP/TLS server + client, STARTTLS, AUTH, pipelining, connection pooling, in-process security pipeline |
 | `mailer-bin` | Complete | CLI + smartrust IPC bridge — wires everything together |
 
-`RustSecurityBridge` finds `mailer-bin` in the package's `dist_rust/` (or a local `rust/target` build). Inside a Node.js single executable application (built with `@git.zone/tssea`), smartrust runs the sidecar the executable embeds under the name `mailer-bin` instead and searches nothing else; a sidecar the executable cannot provide makes `start()` resolve `false`, and background restarts look it up again.
+`RustSecurityBridge` finds `mailer-bin` in the package's `dist_rust/` (or a local `rust/target` build). Inside a Node.js single executable application (built with `tsrepo sea` from `@git.zone/tsrepo`), smartrust runs the sidecar the executable embeds under the name `mailer-bin` instead and searches nothing else; a sidecar the executable cannot provide makes `start()` resolve `false`, and background restarts look it up again.
 
 The shipped Linux binaries are static musl executables. The SMTP client connects with `TcpStream::connect("host:port")` (`rust/crates/mailer-smtp/src/client/connection.rs`), so a host name it connects to (an MX or smarthost name, or a `connect_host`) is looked up through the C library, which is musl: only `/etc/hosts` and `/etc/resolv.conf` are consulted, and no NSS modules (`nsswitch.conf`, systemd-resolved's NSS module, LDAP and the like) take part. The SPF, DKIM, DMARC and DNSBL lookups use the hickory resolver instead.
 
@@ -968,10 +968,10 @@ pnpm run build
 pnpm test
 
 # Run specific test files
-tstest test/test.e2e.server-lifecycle.node.ts --verbose --timeout 60
-tstest test/test.e2e.inbound-smtp.node.ts --verbose --timeout 60
-tstest test/test.e2e.routing-actions.node.ts --verbose --timeout 60
-tstest test/test.e2e.outbound-delivery.node.ts --verbose --timeout 60
+pnpm exec tsrepo test test/test.e2e.server-lifecycle.node.ts --verbose --timeout 60
+pnpm exec tsrepo test test/test.e2e.inbound-smtp.node.ts --verbose --timeout 60
+pnpm exec tsrepo test test/test.e2e.routing-actions.node.ts --verbose --timeout 60
+pnpm exec tsrepo test test/test.e2e.outbound-delivery.node.ts --verbose --timeout 60
 ```
 
 **E2E tests** exercise the full pipeline — starting `UnifiedEmailServer`, connecting via raw TCP sockets, sending SMTP transactions, verifying routing actions, and testing outbound delivery through a mock SMTP receiver.
@@ -1009,15 +1009,15 @@ third-party works too.
 
 Every binary carries its notices beside it in `dist_rust/`:
 `mailer-bin_<target>.third-party-notices.json` and `.txt`, in the format that
-[`@git.zone/tssea`](https://code.foss.global/git.zone/tssea) merges into a
+[`@git.zone/tsrepo`](https://code.foss.global/git.zone/tsrepo)'s `sea` build merges into a
 single executable application. Keep that pair with any separately distributed
-copy of a `mailer-bin` executable. `@git.zone/tsrust` projects them from the
+copy of a `mailer-bin` executable. [`@git.zone/rsrepo`](https://code.foss.global/git.zone/rsrepo) projects them from the
 committed `native-notices/` directory, which ships in the npm package as well.
-`tsrust notices` generates that directory from `rust/Cargo.lock`, the toolchain
+`rsrepo notices` generates that directory from `rust/Cargo.lock`, the toolchain
 pinned in `rust-toolchain.toml` and the `notices` overrides in `.smartconfig.json`
 (reviewed project texts live in `legal/`); every build checks it and
-`tsrust verify` checks the release binaries' notices. Regenerate it with
-`pnpm exec tsrust notices` after any change to the Cargo graph, the toolchain or
+`rsrepo verify` checks the release binaries' notices. Regenerate it with
+`pnpm exec rsrepo notices` after any change to the Cargo graph, the toolchain or
 the targets, and review the diff.
 
 ## License and Legal Information

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartmta',
-  version: '13.0.1',
+  version: '13.0.2',
   description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 }

package/ts/security/classes.rustsecuritybridge.ts

@@ -785,7 +785,7 @@ export class RustSecurityBridge extends EventEmitter {
   private _smtpServerConfig: ISmtpServerConfig | null = null;
 
   /**
-   * Map Node.js process.platform / process.arch to the tsrust target suffix
+   * Map Node.js process.platform / process.arch to the rsrepo target suffix
    * of the shipped binaries. Linux binaries are static musl builds, e.g.
    * mailer-bin_linux_amd64_musl.
    */
@@ -804,7 +804,7 @@ export class RustSecurityBridge extends EventEmitter {
     const suffix = RustSecurityBridge.getPlatformSuffix();
     const localPaths: string[] = [];
 
-    // dist_rust/ candidates (tsrust cross-compiled output)
+    // dist_rust/ candidates (rsrepo cross-compiled output)
     if (suffix) {
       localPaths.push(plugins.path.join(paths.packageDir, 'dist_rust', `mailer-bin_${suffix}`));
     }