@serve.zone/dcrouter 11.13.0 → 11.14.0

package/dist_serve/bundle.js

@@ -40174,7 +40174,7 @@ Customer Support Team`}};async onActivate(b){this.appui=b.appui,this.appui.setCo
       }
     `];render(){return w`
       <dees-appui></dees-appui>
-    `}async firstUpdated(){let o=this.shadowRoot?.querySelector("dees-appui");o&&(o.configure({branding:{logoIcon:"lucide:Box",logoText:"serve.zone"},appBar:{showSearch:!0,breadcrumbs:"serve.zone",menuItems:[{name:"File",action:i(async()=>{},"action"),submenu:[{name:"New Service",shortcut:"Cmd+N",action:i(async()=>{console.log("New Service")},"action")},{name:"Import Configuration",action:i(async()=>{console.log("Import")},"action")},{name:"Export Configuration",action:i(async()=>{console.log("Export")},"action")},{divider:!0},{name:"Preferences",shortcut:"Cmd+,",action:i(async()=>{o.navigateToView("settings")},"action")}]},{name:"View",action:i(async()=>{},"action"),submenu:[{name:"Dashboard",shortcut:"Cmd+1",action:i(async()=>{o.navigateToView("dashboard")},"action")},{name:"Services",shortcut:"Cmd+2",action:i(async()=>{o.navigateToView("services")},"action")},{name:"Network",shortcut:"Cmd+3",action:i(async()=>{o.navigateToView("network")},"action")},{divider:!0},{name:"Activity Log",shortcut:"Cmd+Shift+A",action:i(async()=>{o.toggleActivityLog()},"action")},{name:"Toggle Sidebar",shortcut:"Cmd+B",action:i(async()=>{o.setMainMenuCollapsed(!o.mainmenuCollapsed)},"action")}]},{name:"Services",action:i(async()=>{},"action"),submenu:[{name:"Deploy New Service",action:i(async()=>{console.log("Deploy")},"action")},{name:"Start All",action:i(async()=>{console.log("Start all")},"action")},{name:"Stop All",action:i(async()=>{console.log("Stop all")},"action")},{divider:!0},{name:"Garbage Collect",action:i(async()=>{console.log("GC")},"action")}]},{name:"Help",action:i(async()=>{},"action"),submenu:[{name:"Documentation",action:i(async()=>{window.open("https://docs.serve.zone","_blank")},"action")},{name:"Release Notes",action:i(async()=>{console.log("Release notes")},"action")},{divider:!0},{name:"About serve.zone",action:i(async()=>{console.log("About")},"action")}]}]},views:[{id:"dashboard",name:"Dashboard",iconName:"lucide:LayoutDashboard",content:"sz-demo-view-dashboard"},{id:"services",name:"Services",iconName:"lucide:Server",content:"sz-demo-view-services"},{id:"network",name:"Network",iconName:"lucide:Network",content:"sz-demo-view-network"},{id:"registries",name:"Registries",iconName:"lucide:Archive",content:"sz-demo-view-registries"},{id:"tokens",name:"Tokens",iconName:"lucide:Key",content:"sz-demo-view-tokens"},{id:"mta",name:"Email / MTA",iconName:"lucide:Mail",content:"sz-demo-view-mta"},{id:"routes",name:"Routes",iconName:"lucide:Route",content:"sz-demo-view-routes"},{id:"settings",name:"Settings",iconName:"lucide:Settings",content:"sz-demo-view-settings"}],mainMenu:{sections:[{name:"Overview",views:["dashboard"]},{name:"Infrastructure",views:["services","network","registries","mta","routes"]},{name:"Administration",views:["tokens","settings"]}]},defaultView:"dashboard",onViewChange:i((l,h)=>{console.log("View changed to:",l,h)},"onViewChange")}),o.setUser({name:"Admin User",email:"admin@serve.zone",status:"online"}),o.setProfileMenuItems([{name:"Profile",iconName:"lucide:User",action:i(async()=>{console.log("Profile")},"action")},{name:"Preferences",iconName:"lucide:SlidersHorizontal",action:i(async()=>{console.log("Preferences")},"action")},{divider:!0},{name:"Sign Out",iconName:"lucide:LogOut",action:i(async()=>{console.log("Sign Out")},"action")}]))}static{Mva(r,a)}};return n=r})();var xu={};it(xu,{TypedSocket:()=>nqe});var sqe={};it(sqe,{sha256FromString:()=>Cva});var uH={};it(uH,{Smartenv:()=>iqe});var rqe=K1(Qaa(),1);var iqe=class{static{i(this,"Smartenv")}constructor(){this.loadedScripts=[]}async getEnvAwareModule(e){if(this.isNode)return await this.getSafeNodeModule(e.nodeModuleName);if(this.isBrowser)return await this.getSafeWebModule(e.webUrlArg,e.getFunction);console.error("platform for loading not supported by smartenv")}async getSafeNodeModule(e){if(!this.isNode){console.error(`You tried to load a node module in a wrong context: ${e}`);return}return new Function(`return import('${e}')`)()}async getSafeWebModule(e,a){if(!this.isBrowser){console.error("You tried to load a web module in a wrong context");return}if(this.loadedScripts.includes(e))return a();this.loadedScripts.push(e);let r=rqe.defer();if(globalThis.importScripts)globalThis.importScripts(e),r.resolve();else{let s=document.createElement("script");s.onload=()=>{r.resolve()},s.src=e,document.head.appendChild(s)}return await r.promise,a()}get runtimeEnv(){return typeof process<"u"?"node":"browser"}get isBrowser(){return!this.isNode}get userAgent(){return this.isBrowser?navigator.userAgent:"undefined"}get isNode(){return this.runtimeEnv==="node"}get nodeVersion(){return process.version}get isCI(){return this.isNode?!!process.env.CI:!1}async isMacAsync(){return this.isNode?(await this.getSafeNodeModule("os")).platform()==="darwin":!1}async isWindowsAsync(){return this.isNode?(await this.getSafeNodeModule("os")).platform()==="win32":!1}async isLinuxAsync(){return this.isNode?(await this.getSafeNodeModule("os")).platform()==="linux":!1}async printEnv(){this.isNode?(console.log("running on NODE"),console.log("node version is "+this.nodeVersion)):(console.log("running on BROWSER"),console.log("browser is "+this.userAgent))}};var Sva=i(t=>{let e=[],a=new DataView(t);for(let r=0;r<a.byteLength;r+=4){let n=a.getUint32(r).toString(16),o="00000000",l=(o+n).slice(-o.length);e.push(l)}return e.join("")},"hex"),Cva=i(async t=>{let e=new uH.Smartenv;if(e.isBrowser){let a=new TextEncoder().encode(t),r=await crypto.subtle.digest("SHA-256",a);return Sva(r)}else if(e.isNode)return await(await e.getSafeNodeModule("@pushrocks/smarthash")).sha256FromString(t)},"sha256FromString");J5();u5();O2();vse();cr();ns();a0();UW();var oqe="__typedsocket_tag__";function Tva(t){return{peer:t,async getTagById(e){if(!t.tags.has(e))return;let a=t.data.get(`${oqe}${e}`);return{id:e,payload:a}}}}i(Tva,"wrapSmartServePeer");var nqe=class t{static{i(this,"TypedSocket")}static async createClient(e,a,r={}){let n={...{autoReconnect:!0,maxRetries:100,initialBackoffMs:1e3,maxBackoffMs:6e4},...r},o=new t("client",e);return o.clientOptions=n,o.serverUrl=a,o.currentBackoff=n.initialBackoffMs,await o.connect(),o}static{this.useWindowLocationOriginUrl=()=>Hi.Smarturl.createFromUrl(globalThis.location.origin).toString()}static fromSmartServe(e,a){let r=new Map;t.registerTagHandlers(a);let s=new t("server",a);return s.smartServeRef=e,s.smartServeConnectionWrappers=r,s}static registerTagHandlers(e){e.addTypedHandler(new a1.TypedHandler("__typedsocket_setTag",async(a,r)=>{let s=r?.localData?.peer;return s?(s.tags.add(a.name),s.data.set(`${oqe}${a.name}`,a.payload),{success:!0}):(console.warn("setTag: No peer found in request context"),{success:!1})})),e.addTypedHandler(new a1.TypedHandler("__typedsocket_removeTag",async(a,r)=>{let s=r?.localData?.peer;return s?(s.tags.delete(a.name),s.data.delete(`${oqe}${a.name}`),{success:!0}):(console.warn("removeTag: No peer found in request context"),{success:!1})}))}constructor(e,a){this.statusSubject=new Wt.rxjs.Subject,this.connectionStatus="new",this.websocket=null,this.clientOptions=null,this.serverUrl="",this.retryCount=0,this.currentBackoff=1e3,this.pendingRequests=new Map,this.smartServeRef=null,this.smartServeConnectionWrappers=new Map,this.side=e,this.typedrouter=a}async connect(){let e=Je.defer();this.updateStatus("connecting");let a=this.toWebSocketUrl(this.serverUrl);console.log(`TypedSocket connecting to ${a}...`),this.websocket=new WebSocket(a);let r=setTimeout(()=>{this.connectionStatus!=="connected"&&(console.warn("TypedSocket connection timeout"),this.websocket?.close(),e.reject(new Error("Connection timeout")))},1e4);this.websocket.onopen=()=>{clearTimeout(r),console.log("TypedSocket connected!"),this.updateStatus("connected"),this.retryCount=0,this.currentBackoff=this.clientOptions?.initialBackoffMs??1e3,e.resolve()},this.websocket.onmessage=async s=>{await this.handleMessage(s.data)},this.websocket.onclose=()=>{clearTimeout(r),this.handleDisconnect()},this.websocket.onerror=s=>{console.error("TypedSocket WebSocket error:",s)};try{await e.promise}catch(s){if(clearTimeout(r),this.clientOptions?.autoReconnect)await this.scheduleReconnect();else throw s}}toWebSocketUrl(e){let a=new URL(e);return`${a.protocol==="https:"?"wss:":"ws:"}//${a.host}${a.pathname}`}async handleMessage(e){try{let a=typeof e=="string"?e:new TextDecoder().decode(e),r=ri.parse(a);if(r.correlation?.id&&this.pendingRequests.has(r.correlation.id)){let n=this.pendingRequests.get(r.correlation.id);this.pendingRequests.delete(r.correlation.id),n.resolve(r);return}let s=await this.typedrouter.routeAndAddResponse(r);s&&this.websocket?.readyState===WebSocket.OPEN&&this.websocket.send(ri.stringify(s))}catch(a){console.error("TypedSocket failed to process message:",a)}}handleDisconnect(){if(this.connectionStatus!=="disconnected"){this.updateStatus("disconnected");for(let[e,a]of this.pendingRequests)a.reject(new Error("TypedSocket disconnected"));this.pendingRequests.clear(),this.clientOptions?.autoReconnect&&this.retryCount<this.clientOptions.maxRetries&&this.scheduleReconnect()}}async scheduleReconnect(){if(!this.clientOptions)return;this.updateStatus("reconnecting"),this.retryCount++;let e=this.currentBackoff*.2*(Math.random()*2-1),a=Math.min(this.currentBackoff+e,this.clientOptions.maxBackoffMs);console.log(`TypedSocket reconnecting in ${Math.round(a)}ms (attempt ${this.retryCount}/${this.clientOptions.maxRetries})`),await St.delayFor(a),this.currentBackoff=Math.min(this.currentBackoff*2,this.clientOptions.maxBackoffMs);try{await this.connect()}catch(r){console.error("TypedSocket reconnection failed:",r)}}updateStatus(e){this.connectionStatus!==e&&(this.connectionStatus=e,this.statusSubject.next(e))}async sendRequest(e){if(!this.websocket||this.websocket.readyState!==WebSocket.OPEN)throw new Error("WebSocket not connected");return new Promise((a,r)=>{let s=setTimeout(()=>{this.pendingRequests.delete(e.correlation.id),r(new Error("Request timeout"))},3e4);this.pendingRequests.set(e.correlation.id,{resolve:i(n=>{clearTimeout(s),a(n)},"resolve"),reject:i(n=>{clearTimeout(s),r(n)},"reject")}),this.websocket.send(ri.stringify(e))})}createTypedRequest(e,a){let r=i(async s=>{if(this.side==="client")return this.sendRequest(s);if(!this.smartServeRef)throw new Error("Server not initialized");let n=a;if(!n){let l=this.smartServeRef.getWebSocketConnections();if(l.length===1){let h=l[0];n=this.getOrCreateWrapper(h)}else throw l.length===0?new Error("No WebSocket connections available"):new Error("Multiple connections available - specify targetConnection")}let o=await this.typedrouter.fireEventInterestMap.addInterest(s.correlation.id,s);return n.peer.send(ri.stringify(s)),await o.interestFullfilled},"postMethod");return new a1.TypedRequest(new a1.TypedTarget({postMethod:r}),e)}getStatus(){return this.connectionStatus}async stop(){this.side==="client"?(this.clientOptions&&(this.clientOptions.autoReconnect=!1),this.websocket&&(this.websocket.close(),this.websocket=null),this.pendingRequests.clear()):this.smartServeConnectionWrappers.clear()}async setTag(e,a){if(this.side!=="client")throw new Error("setTag is only available on clients");if(!(await this.createTypedRequest("__typedsocket_setTag").fire({name:e,payload:a})).success)throw new Error("Failed to set tag on server")}async removeTag(e){if(this.side!=="client")throw new Error("removeTag is only available on clients");if(!(await this.createTypedRequest("__typedsocket_removeTag").fire({name:e})).success)throw new Error("Failed to remove tag on server")}getOrCreateWrapper(e){let a=this.smartServeConnectionWrappers.get(e.id);return a||(a=Tva(e),this.smartServeConnectionWrappers.set(e.id,a)),a}async findAllTargetConnections(e){if(this.side!=="server"||!this.smartServeRef)throw new Error("findAllTargetConnections is only available on servers");let a=[];for(let r of this.smartServeRef.getWebSocketConnections()){let s=this.getOrCreateWrapper(r);await e(s)&&a.push(s)}return a}async findTargetConnection(e){return(await this.findAllTargetConnections(e))[0]}async findAllTargetConnectionsByTag(e,a){if(this.side!=="server"||!this.smartServeRef)throw new Error("findAllTargetConnectionsByTag is only available on servers");let r=this.smartServeRef.getWebSocketConnectionsByTag(e),s=[];for(let n of r){let o=this.getOrCreateWrapper(n);if(a!==void 0){let l=await o.getTagById(e);if(ri.stringify(l?.payload)!==ri.stringify(a))continue}s.push(o)}return s}async findTargetConnectionByTag(e,a){return(await this.findAllTargetConnectionsByTag(e,a))[0]}};de();Xa();var vt=gt;u5();var Jaa={};var e1a={};var Hs=new vt.plugins.smartstate.Smartstate,Ka=await Hs.getStatePart("login",{identity:null,isLoggedIn:!1},"persistent"),lr=await Hs.getStatePart("stats",{serverStats:null,emailStats:null,dnsStats:null,securityMetrics:null,lastUpdated:0,isLoading:!1,error:null},"soft"),H6=await Hs.getStatePart("config",{config:null,isLoading:!1,error:null}),Lva=i(()=>{let t=typeof window<"u"?window.location.pathname:"/",e=["overview","network","emails","logs","routes","apitokens","configuration","security","certificates","remoteingress"],r=t.split("/").filter(Boolean)[0];return e.includes(r)?r:"overview"},"getInitialView"),ci=await Hs.getStatePart("ui",{activeView:Lva(),sidebarCollapsed:!1,autoRefresh:!0,refreshInterval:1e3,theme:"light"}),jo=await Hs.getStatePart("logs",{recentLogs:[],isStreaming:!1,filters:{}},"soft"),$2=await Hs.getStatePart("network",{connections:[],connectionsByIP:{},throughputRate:{bytesInPerSecond:0,bytesOutPerSecond:0},totalBytes:{in:0,out:0},topIPs:[],throughputByIP:[],throughputHistory:[],requestsPerSecond:0,requestsTotal:0,backends:[],lastUpdated:0,isLoading:!1,error:null},"soft"),NX=await Hs.getStatePart("emailOps",{emails:[],isLoading:!1,error:null,lastUpdated:0},"soft"),di=await Hs.getStatePart("certificates",{certificates:[],summary:{total:0,valid:0,expiring:0,expired:0,failed:0,unknown:0},isLoading:!1,error:null,lastUpdated:0},"soft"),S1=await Hs.getStatePart("remoteIngress",{edges:[],statuses:[],selectedEdgeId:null,newEdgeId:null,isLoading:!1,error:null,lastUpdated:0},"soft"),pa=await Hs.getStatePart("routeManagement",{mergedRoutes:[],warnings:[],apiTokens:[],isLoading:!1,error:null,lastUpdated:0},"soft"),Jt=i(()=>{let t=Ka.getState().identity;return t&&t.expiresAt&&t.expiresAt<Date.now()?{identity:null}:{identity:t}},"getActionContext"),o1a=Ka.createAction(async(t,e)=>{let a=new vt.plugins.typedrequest.TypedRequest("/typedrequest","adminLoginWithUsernameAndPassword");try{let r=await a.fire({username:e.username,password:e.password});return r.identity?{identity:r.identity,isLoggedIn:!0}:t.getState()}catch(r){return console.error("Login failed:",r),t.getState()}}),wu=Ka.createAction(async t=>{let e=Jt();if(e.identity){let a=new vt.plugins.typedrequest.TypedRequest("/typedrequest","adminLogout");try{await a.fire({identity:e.identity})}catch(r){console.error("Logout error:",r)}}return{identity:null,isLoggedIn:!1}}),Mu=lr.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getCombinedMetrics").fire({identity:e.identity,sections:{server:!0,email:!0,dns:!0,security:!0,network:!1}});return{serverStats:s.metrics.server||a.serverStats,emailStats:s.metrics.email||a.emailStats,dnsStats:s.metrics.dns||a.dnsStats,securityMetrics:s.metrics.security||a.securityMetrics,lastUpdated:Date.now(),isLoading:!1,error:null}}catch(r){return{...a,isLoading:!1,error:r.message||"Failed to fetch statistics"}}}),IX=H6.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{return{config:(await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getConfiguration").fire({identity:e.identity})).config,isLoading:!1,error:null}}catch(r){return{...a,isLoading:!1,error:r.message||"Failed to fetch configuration"}}}),FX=jo.createAction(async(t,e)=>{let a=Jt();if(!a.identity)return t.getState();let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRecentLogs").fire({identity:a.identity,limit:e.limit||100,level:e.level,category:e.category});return{...t.getState(),recentLogs:s.logs}}),Bji=ci.createAction(async t=>{let e=t.getState();return{...e,autoRefresh:!e.autoRefresh}}),Hji=ci.createAction(async(t,e)=>{let a=t.getState();return e==="network"&&a.activeView!=="network"&&setTimeout(()=>{$2.dispatchAction(pqe,null)},100),e==="certificates"&&a.activeView!=="certificates"&&setTimeout(()=>{di.dispatchAction(xl,null)},100),e==="routes"&&a.activeView!=="routes"&&setTimeout(()=>{pa.dispatchAction(D2,null)},100),e==="apitokens"&&a.activeView!=="apitokens"&&setTimeout(()=>{pa.dispatchAction(yl,null)},100),e==="remoteingress"&&a.activeView!=="remoteingress"&&setTimeout(()=>{S1.dispatchAction(vl,null)},100),{...a,activeView:e}}),pqe=$2.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getActiveConnections").fire({identity:e.identity}),o=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getNetworkStats").fire({identity:e.identity}),l={};return o.connectionsByIP&&Array.isArray(o.connectionsByIP)?o.connectionsByIP.forEach(h=>{l[h.ip]=h.count}):s.connections.forEach(h=>{let p=h.remoteAddress;l[p]=(l[p]||0)+1}),{connections:s.connections,connectionsByIP:l,throughputRate:o.throughputRate||{bytesInPerSecond:0,bytesOutPerSecond:0},totalBytes:o.totalDataTransferred?{in:o.totalDataTransferred.bytesIn,out:o.totalDataTransferred.bytesOut}:{in:0,out:0},topIPs:o.topIPs||[],throughputByIP:o.throughputByIP||[],throughputHistory:o.throughputHistory||[],requestsPerSecond:o.requestsPerSecond||0,requestsTotal:o.requestsTotal||0,backends:o.backends||[],lastUpdated:Date.now(),isLoading:!1,error:null}}catch(r){return console.error("Failed to fetch network stats:",r),{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch network stats"}}}),n1a=NX.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{return{emails:(await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getAllEmails").fire({identity:e.identity})).emails,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch emails"}}}),xl=di.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getCertificateOverview").fire({identity:e.identity});return{certificates:s.certificates,summary:s.summary,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch certificate overview"}}}),l1a=di.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","reprovisionCertificateDomain").fire({identity:r.identity,domain:e}),await a.dispatch(xl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to reprovision certificate"}}}),c1a=di.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteCertificate").fire({identity:r.identity,domain:e}),await a.dispatch(xl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete certificate"}}}),d1a=di.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","importCertificate").fire({identity:r.identity,cert:e}),await a.dispatch(xl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to import certificate"}}});async function u1a(t){let e=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","exportCertificate").fire({identity:e.identity,domain:t})}i(u1a,"fetchCertificateExport");async function fqe(t){let e=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRemoteIngressConnectionToken").fire({identity:e.identity,edgeId:t})}i(fqe,"fetchConnectionToken");var vl=S1.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let r=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRemoteIngresses"),s=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRemoteIngressStatus"),[n,o]=await Promise.all([r.fire({identity:e.identity}),s.fire({identity:e.identity})]);return{...a,edges:n.edges,statuses:o.statuses,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch remote ingress data"}}}),p1a=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{let o=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","createRemoteIngress").fire({identity:r.identity,name:e.name,listenPorts:e.listenPorts,autoDerivePorts:e.autoDerivePorts,tags:e.tags});return o.success?(await a.dispatch(vl,null),{...t.getState(),newEdgeId:o.edge.id}):s}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to create edge"}}}),f1a=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteRemoteIngress").fire({identity:r.identity,id:e}),await a.dispatch(vl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete edge"}}}),h1a=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","updateRemoteIngress").fire({identity:r.identity,id:e.id,name:e.name,listenPorts:e.listenPorts,autoDerivePorts:e.autoDerivePorts,tags:e.tags}),await a.dispatch(vl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to update edge"}}}),m1a=S1.createAction(async(t,e)=>{let a=Jt(),r=t.getState();try{return(await new vt.plugins.typedrequest.TypedRequest("/typedrequest","regenerateRemoteIngressSecret").fire({identity:a.identity,id:e})).success?{...r,newEdgeId:e}:r}catch(s){return{...r,error:s instanceof Error?s.message:"Failed to regenerate secret"}}}),g1a=S1.createAction(async t=>({...t.getState(),newEdgeId:null})),hqe=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","updateRemoteIngress").fire({identity:r.identity,id:e.id,enabled:e.enabled}),await a.dispatch(vl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle edge"}}}),ui=await Hs.getStatePart("vpn",{clients:[],status:null,isLoading:!1,error:null,lastUpdated:0,newClientConfig:null},"soft"),yu=ui.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let r=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getVpnClients"),s=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getVpnStatus"),[n,o]=await Promise.all([r.fire({identity:e.identity}),s.fire({identity:e.identity})]);return{...a,clients:n.clients,status:o.status,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch VPN data"}}}),b1a=ui.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{let o=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","createVpnClient").fire({identity:r.identity,clientId:e.clientId,tags:e.tags,description:e.description});return o.success?{...await a.dispatch(yu,null),newClientConfig:o.wireguardConfig||null}:{...s,error:o.message||"Failed to create client"}}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to create VPN client"}}}),v1a=ui.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteVpnClient").fire({identity:r.identity,clientId:e}),await a.dispatch(yu,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete VPN client"}}}),x1a=ui.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{let n=e.enabled?"enableVpnClient":"disableVpnClient";return await new vt.plugins.typedrequest.TypedRequest("/typedrequest",n).fire({identity:r.identity,clientId:e.clientId}),await a.dispatch(yu,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle VPN client"}}}),y1a=ui.createAction(async t=>({...t.getState(),newClientConfig:null})),D2=pa.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getMergedRoutes").fire({identity:e.identity});return{...a,mergedRoutes:s.routes,warnings:s.warnings,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch routes"}}}),w1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","createRoute").fire({identity:r.identity,route:e.route,enabled:e.enabled}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to create route"}}}),M1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteRoute").fire({identity:r.identity,id:e}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete route"}}}),k1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","toggleRoute").fire({identity:r.identity,id:e.id,enabled:e.enabled}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle route"}}}),mqe=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","setRouteOverride").fire({identity:r.identity,routeName:e.routeName,enabled:e.enabled}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to set override"}}}),z1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","removeRouteOverride").fire({identity:r.identity,routeName:e}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to remove override"}}}),yl=pa.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","listApiTokens").fire({identity:e.identity});return{...a,apiTokens:s.tokens}}catch(r){return{...a,error:r instanceof Error?r.message:"Failed to fetch tokens"}}});async function S1a(t,e,a){let r=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","createApiToken").fire({identity:r.identity,name:t,scopes:e,expiresInDays:a})}i(S1a,"createApiToken");async function C1a(t){let e=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","rollApiToken").fire({identity:e.identity,id:t})}i(C1a,"rollApiToken");var _1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","revokeApiToken").fire({identity:r.identity,id:e}),await a.dispatch(yl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to revoke token"}}}),gqe=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","toggleApiToken").fire({identity:r.identity,id:e.id,enabled:e.enabled}),await a.dispatch(yl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle token"}}}),O6=null,t1a=new vt.plugins.typedrequest.TypedRouter,EX=[],lqe=!1;function $va(){if(lqe=!1,EX.length===0)return;let t=jo.getState(),e=[...t.recentLogs,...EX];EX=[],e.length>2e3&&e.splice(0,e.length-2e3),jo.setState({...t,recentLogs:e})}i($va,"flushLogEntries"),t1a.addTypedHandler(new vt.plugins.typedrequest.TypedHandler("pushLogEntry",async t=>(EX.push(t.entry),lqe||(lqe=!0,requestAnimationFrame($va)),{})));async function cqe(){if(!O6)try{O6=await xu.TypedSocket.createClient(t1a,xu.TypedSocket.useWindowLocationOriginUrl()),await O6.setTag("role","ops_dashboard")}catch(t){console.error("TypedSocket connection failed:",t),O6=null}}i(cqe,"connectSocket");async function a1a(){if(O6){try{await O6.stop()}catch{}O6=null}}i(a1a,"disconnectSocket");var dqe=!1;async function Dva(){if(!dqe){dqe=!0;try{await Ava()}finally{dqe=!1}}}i(Dva,"dispatchCombinedRefreshAction");async function Ava(){let t=Jt();if(!t.identity)return;let e=ci.getState().activeView;try{let r=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getCombinedMetrics").fire({identity:t.identity,sections:{server:!0,email:!0,dns:!0,security:!0,network:e==="network"}}),s=lr.getState();if(lr.setState({...s,serverStats:r.metrics.server||s.serverStats,emailStats:r.metrics.email||s.emailStats,dnsStats:r.metrics.dns||s.dnsStats,securityMetrics:r.metrics.security||s.securityMetrics,lastUpdated:Date.now(),isLoading:!1,error:null}),r.metrics.network&&e==="network"){let n=r.metrics.network,o={};n.connectionDetails.forEach(l=>{o[l.remoteAddress]=(o[l.remoteAddress]||0)+1});try{let h=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getActiveConnections").fire({identity:t.identity});$2.setState({...$2.getState(),connections:h.connections,connectionsByIP:o,throughputRate:{bytesInPerSecond:n.totalBandwidth.in,bytesOutPerSecond:n.totalBandwidth.out},totalBytes:n.totalBytes||{in:0,out:0},topIPs:n.topEndpoints.map(p=>({ip:p.endpoint,count:p.requests})),throughputByIP:n.topEndpoints.map(p=>({ip:p.endpoint,in:p.bandwidth?.in||0,out:p.bandwidth?.out||0})),throughputHistory:n.throughputHistory||[],requestsPerSecond:n.requestsPerSecond||0,requestsTotal:n.requestsTotal||0,backends:n.backends||[],lastUpdated:Date.now(),isLoading:!1,error:null})}catch(l){console.error("Failed to fetch connections:",l),$2.setState({...$2.getState(),connections:[],connectionsByIP:o,throughputRate:{bytesInPerSecond:n.totalBandwidth.in,bytesOutPerSecond:n.totalBandwidth.out},totalBytes:n.totalBytes||{in:0,out:0},topIPs:n.topEndpoints.map(h=>({ip:h.endpoint,count:h.requests})),throughputByIP:n.topEndpoints.map(h=>({ip:h.endpoint,in:h.bandwidth?.in||0,out:h.bandwidth?.out||0})),throughputHistory:n.throughputHistory||[],requestsPerSecond:n.requestsPerSecond||0,requestsTotal:n.requestsTotal||0,backends:n.backends||[],lastUpdated:Date.now(),isLoading:!1,error:null})}}if(e==="certificates")try{await di.dispatchAction(xl,null)}catch(n){console.error("Certificate refresh failed:",n)}if(e==="remoteingress")try{await S1.dispatchAction(vl,null)}catch(n){console.error("Remote ingress refresh failed:",n)}if(e==="vpn")try{await ui.dispatchAction(yu,null)}catch(n){console.error("VPN refresh failed:",n)}}catch(a){console.error("Combined refresh failed:",a);let r=String(a);(r.includes("invalid")||r.includes("unauthorized")||r.includes("401"))&&(await Ka.dispatchAction(wu,null),window.location.reload())}}i(Ava,"dispatchCombinedRefreshActionInner");var Pva=lr.createAction(async t=>(await Dva(),t.getState())),B6=null,uqe=i(()=>{let t=ci.getState(),e=Ka.getState();t.autoRefresh&&e.isLoggedIn?(B6&&(B6.dispose(),B6=null),B6=lr.createScheduledAction({action:Pva,payload:void 0,intervalMs:t.refreshInterval,autoPause:"visibility"})):B6&&(B6.dispose(),B6=null)},"startAutoRefresh"),r1a=ci.getState().autoRefresh,i1a=ci.getState().refreshInterval,s1a=Ka.getState().isLoggedIn;ci.select(t=>({autoRefresh:t.autoRefresh,refreshInterval:t.refreshInterval})).subscribe(t=>{(t.autoRefresh!==r1a||t.refreshInterval!==i1a)&&(r1a=t.autoRefresh,i1a=t.refreshInterval,uqe())}),Ka.select(t=>t.isLoggedIn).subscribe(t=>{t!==s1a&&(s1a=t,uqe(),t?cqe():a1a())}),document.addEventListener("visibilitychange",()=>{document.hidden?a1a():Ka.getState().isLoggedIn&&cqe()}),uqe(),Ka.getState().isLoggedIn&&cqe();var Eva=vt.plugins.smartrouter.SmartRouter,bqe=["overview","network","emails","logs","routes","apitokens","configuration","security","certificates","remoteingress"],vqe=class{static{i(this,"AppRouter")}router;initialized=!1;suppressStateUpdate=!1;constructor(){this.router=new Eva({debug:!1})}init(){this.initialized||(this.setupRoutes(),this.setupStateSync(),this.handleInitialRoute(),this.initialized=!0)}setupRoutes(){for(let e of bqe)this.router.on(`/${e}`,async()=>{this.updateViewState(e)});this.router.on("/",async()=>{this.navigateTo("/overview")})}setupStateSync(){ci.select().subscribe(e=>{if(this.suppressStateUpdate)return;let a=window.location.pathname,r=`/${e.activeView}`;a!==r&&(this.suppressStateUpdate=!0,this.router.pushUrl(r),this.suppressStateUpdate=!1)})}handleInitialRoute(){let e=window.location.pathname;if(!e||e==="/")this.router.pushUrl("/overview");else{let r=e.split("/").filter(Boolean)[0];bqe.includes(r)?this.updateViewState(r):this.router.pushUrl("/overview")}}updateViewState(e){this.suppressStateUpdate=!0;let a=ci.getState();a.activeView!==e&&ci.setState({...a,activeView:e}),this.suppressStateUpdate=!1}navigateTo(e){this.router.pushUrl(e)}navigateToView(e){bqe.includes(e)?this.navigateTo(`/${e}`):this.navigateTo("/overview")}getCurrentView(){return ci.getState().activeView}destroy(){this.router.destroy(),this.initialized=!1}},ku=new vqe;de();var n1=Z`
+    `}async firstUpdated(){let o=this.shadowRoot?.querySelector("dees-appui");o&&(o.configure({branding:{logoIcon:"lucide:Box",logoText:"serve.zone"},appBar:{showSearch:!0,breadcrumbs:"serve.zone",menuItems:[{name:"File",action:i(async()=>{},"action"),submenu:[{name:"New Service",shortcut:"Cmd+N",action:i(async()=>{console.log("New Service")},"action")},{name:"Import Configuration",action:i(async()=>{console.log("Import")},"action")},{name:"Export Configuration",action:i(async()=>{console.log("Export")},"action")},{divider:!0},{name:"Preferences",shortcut:"Cmd+,",action:i(async()=>{o.navigateToView("settings")},"action")}]},{name:"View",action:i(async()=>{},"action"),submenu:[{name:"Dashboard",shortcut:"Cmd+1",action:i(async()=>{o.navigateToView("dashboard")},"action")},{name:"Services",shortcut:"Cmd+2",action:i(async()=>{o.navigateToView("services")},"action")},{name:"Network",shortcut:"Cmd+3",action:i(async()=>{o.navigateToView("network")},"action")},{divider:!0},{name:"Activity Log",shortcut:"Cmd+Shift+A",action:i(async()=>{o.toggleActivityLog()},"action")},{name:"Toggle Sidebar",shortcut:"Cmd+B",action:i(async()=>{o.setMainMenuCollapsed(!o.mainmenuCollapsed)},"action")}]},{name:"Services",action:i(async()=>{},"action"),submenu:[{name:"Deploy New Service",action:i(async()=>{console.log("Deploy")},"action")},{name:"Start All",action:i(async()=>{console.log("Start all")},"action")},{name:"Stop All",action:i(async()=>{console.log("Stop all")},"action")},{divider:!0},{name:"Garbage Collect",action:i(async()=>{console.log("GC")},"action")}]},{name:"Help",action:i(async()=>{},"action"),submenu:[{name:"Documentation",action:i(async()=>{window.open("https://docs.serve.zone","_blank")},"action")},{name:"Release Notes",action:i(async()=>{console.log("Release notes")},"action")},{divider:!0},{name:"About serve.zone",action:i(async()=>{console.log("About")},"action")}]}]},views:[{id:"dashboard",name:"Dashboard",iconName:"lucide:LayoutDashboard",content:"sz-demo-view-dashboard"},{id:"services",name:"Services",iconName:"lucide:Server",content:"sz-demo-view-services"},{id:"network",name:"Network",iconName:"lucide:Network",content:"sz-demo-view-network"},{id:"registries",name:"Registries",iconName:"lucide:Archive",content:"sz-demo-view-registries"},{id:"tokens",name:"Tokens",iconName:"lucide:Key",content:"sz-demo-view-tokens"},{id:"mta",name:"Email / MTA",iconName:"lucide:Mail",content:"sz-demo-view-mta"},{id:"routes",name:"Routes",iconName:"lucide:Route",content:"sz-demo-view-routes"},{id:"settings",name:"Settings",iconName:"lucide:Settings",content:"sz-demo-view-settings"}],mainMenu:{sections:[{name:"Overview",views:["dashboard"]},{name:"Infrastructure",views:["services","network","registries","mta","routes"]},{name:"Administration",views:["tokens","settings"]}]},defaultView:"dashboard",onViewChange:i((l,h)=>{console.log("View changed to:",l,h)},"onViewChange")}),o.setUser({name:"Admin User",email:"admin@serve.zone",status:"online"}),o.setProfileMenuItems([{name:"Profile",iconName:"lucide:User",action:i(async()=>{console.log("Profile")},"action")},{name:"Preferences",iconName:"lucide:SlidersHorizontal",action:i(async()=>{console.log("Preferences")},"action")},{divider:!0},{name:"Sign Out",iconName:"lucide:LogOut",action:i(async()=>{console.log("Sign Out")},"action")}]))}static{Mva(r,a)}};return n=r})();var xu={};it(xu,{TypedSocket:()=>nqe});var sqe={};it(sqe,{sha256FromString:()=>Cva});var uH={};it(uH,{Smartenv:()=>iqe});var rqe=K1(Qaa(),1);var iqe=class{static{i(this,"Smartenv")}constructor(){this.loadedScripts=[]}async getEnvAwareModule(e){if(this.isNode)return await this.getSafeNodeModule(e.nodeModuleName);if(this.isBrowser)return await this.getSafeWebModule(e.webUrlArg,e.getFunction);console.error("platform for loading not supported by smartenv")}async getSafeNodeModule(e){if(!this.isNode){console.error(`You tried to load a node module in a wrong context: ${e}`);return}return new Function(`return import('${e}')`)()}async getSafeWebModule(e,a){if(!this.isBrowser){console.error("You tried to load a web module in a wrong context");return}if(this.loadedScripts.includes(e))return a();this.loadedScripts.push(e);let r=rqe.defer();if(globalThis.importScripts)globalThis.importScripts(e),r.resolve();else{let s=document.createElement("script");s.onload=()=>{r.resolve()},s.src=e,document.head.appendChild(s)}return await r.promise,a()}get runtimeEnv(){return typeof process<"u"?"node":"browser"}get isBrowser(){return!this.isNode}get userAgent(){return this.isBrowser?navigator.userAgent:"undefined"}get isNode(){return this.runtimeEnv==="node"}get nodeVersion(){return process.version}get isCI(){return this.isNode?!!process.env.CI:!1}async isMacAsync(){return this.isNode?(await this.getSafeNodeModule("os")).platform()==="darwin":!1}async isWindowsAsync(){return this.isNode?(await this.getSafeNodeModule("os")).platform()==="win32":!1}async isLinuxAsync(){return this.isNode?(await this.getSafeNodeModule("os")).platform()==="linux":!1}async printEnv(){this.isNode?(console.log("running on NODE"),console.log("node version is "+this.nodeVersion)):(console.log("running on BROWSER"),console.log("browser is "+this.userAgent))}};var Sva=i(t=>{let e=[],a=new DataView(t);for(let r=0;r<a.byteLength;r+=4){let n=a.getUint32(r).toString(16),o="00000000",l=(o+n).slice(-o.length);e.push(l)}return e.join("")},"hex"),Cva=i(async t=>{let e=new uH.Smartenv;if(e.isBrowser){let a=new TextEncoder().encode(t),r=await crypto.subtle.digest("SHA-256",a);return Sva(r)}else if(e.isNode)return await(await e.getSafeNodeModule("@pushrocks/smarthash")).sha256FromString(t)},"sha256FromString");J5();u5();O2();vse();cr();ns();a0();UW();var oqe="__typedsocket_tag__";function Tva(t){return{peer:t,async getTagById(e){if(!t.tags.has(e))return;let a=t.data.get(`${oqe}${e}`);return{id:e,payload:a}}}}i(Tva,"wrapSmartServePeer");var nqe=class t{static{i(this,"TypedSocket")}static async createClient(e,a,r={}){let n={...{autoReconnect:!0,maxRetries:100,initialBackoffMs:1e3,maxBackoffMs:6e4},...r},o=new t("client",e);return o.clientOptions=n,o.serverUrl=a,o.currentBackoff=n.initialBackoffMs,await o.connect(),o}static{this.useWindowLocationOriginUrl=()=>Hi.Smarturl.createFromUrl(globalThis.location.origin).toString()}static fromSmartServe(e,a){let r=new Map;t.registerTagHandlers(a);let s=new t("server",a);return s.smartServeRef=e,s.smartServeConnectionWrappers=r,s}static registerTagHandlers(e){e.addTypedHandler(new a1.TypedHandler("__typedsocket_setTag",async(a,r)=>{let s=r?.localData?.peer;return s?(s.tags.add(a.name),s.data.set(`${oqe}${a.name}`,a.payload),{success:!0}):(console.warn("setTag: No peer found in request context"),{success:!1})})),e.addTypedHandler(new a1.TypedHandler("__typedsocket_removeTag",async(a,r)=>{let s=r?.localData?.peer;return s?(s.tags.delete(a.name),s.data.delete(`${oqe}${a.name}`),{success:!0}):(console.warn("removeTag: No peer found in request context"),{success:!1})}))}constructor(e,a){this.statusSubject=new Wt.rxjs.Subject,this.connectionStatus="new",this.websocket=null,this.clientOptions=null,this.serverUrl="",this.retryCount=0,this.currentBackoff=1e3,this.pendingRequests=new Map,this.smartServeRef=null,this.smartServeConnectionWrappers=new Map,this.side=e,this.typedrouter=a}async connect(){let e=Je.defer();this.updateStatus("connecting");let a=this.toWebSocketUrl(this.serverUrl);console.log(`TypedSocket connecting to ${a}...`),this.websocket=new WebSocket(a);let r=setTimeout(()=>{this.connectionStatus!=="connected"&&(console.warn("TypedSocket connection timeout"),this.websocket?.close(),e.reject(new Error("Connection timeout")))},1e4);this.websocket.onopen=()=>{clearTimeout(r),console.log("TypedSocket connected!"),this.updateStatus("connected"),this.retryCount=0,this.currentBackoff=this.clientOptions?.initialBackoffMs??1e3,e.resolve()},this.websocket.onmessage=async s=>{await this.handleMessage(s.data)},this.websocket.onclose=()=>{clearTimeout(r),this.handleDisconnect()},this.websocket.onerror=s=>{console.error("TypedSocket WebSocket error:",s)};try{await e.promise}catch(s){if(clearTimeout(r),this.clientOptions?.autoReconnect)await this.scheduleReconnect();else throw s}}toWebSocketUrl(e){let a=new URL(e);return`${a.protocol==="https:"?"wss:":"ws:"}//${a.host}${a.pathname}`}async handleMessage(e){try{let a=typeof e=="string"?e:new TextDecoder().decode(e),r=ri.parse(a);if(r.correlation?.id&&this.pendingRequests.has(r.correlation.id)){let n=this.pendingRequests.get(r.correlation.id);this.pendingRequests.delete(r.correlation.id),n.resolve(r);return}let s=await this.typedrouter.routeAndAddResponse(r);s&&this.websocket?.readyState===WebSocket.OPEN&&this.websocket.send(ri.stringify(s))}catch(a){console.error("TypedSocket failed to process message:",a)}}handleDisconnect(){if(this.connectionStatus!=="disconnected"){this.updateStatus("disconnected");for(let[e,a]of this.pendingRequests)a.reject(new Error("TypedSocket disconnected"));this.pendingRequests.clear(),this.clientOptions?.autoReconnect&&this.retryCount<this.clientOptions.maxRetries&&this.scheduleReconnect()}}async scheduleReconnect(){if(!this.clientOptions)return;this.updateStatus("reconnecting"),this.retryCount++;let e=this.currentBackoff*.2*(Math.random()*2-1),a=Math.min(this.currentBackoff+e,this.clientOptions.maxBackoffMs);console.log(`TypedSocket reconnecting in ${Math.round(a)}ms (attempt ${this.retryCount}/${this.clientOptions.maxRetries})`),await St.delayFor(a),this.currentBackoff=Math.min(this.currentBackoff*2,this.clientOptions.maxBackoffMs);try{await this.connect()}catch(r){console.error("TypedSocket reconnection failed:",r)}}updateStatus(e){this.connectionStatus!==e&&(this.connectionStatus=e,this.statusSubject.next(e))}async sendRequest(e){if(!this.websocket||this.websocket.readyState!==WebSocket.OPEN)throw new Error("WebSocket not connected");return new Promise((a,r)=>{let s=setTimeout(()=>{this.pendingRequests.delete(e.correlation.id),r(new Error("Request timeout"))},3e4);this.pendingRequests.set(e.correlation.id,{resolve:i(n=>{clearTimeout(s),a(n)},"resolve"),reject:i(n=>{clearTimeout(s),r(n)},"reject")}),this.websocket.send(ri.stringify(e))})}createTypedRequest(e,a){let r=i(async s=>{if(this.side==="client")return this.sendRequest(s);if(!this.smartServeRef)throw new Error("Server not initialized");let n=a;if(!n){let l=this.smartServeRef.getWebSocketConnections();if(l.length===1){let h=l[0];n=this.getOrCreateWrapper(h)}else throw l.length===0?new Error("No WebSocket connections available"):new Error("Multiple connections available - specify targetConnection")}let o=await this.typedrouter.fireEventInterestMap.addInterest(s.correlation.id,s);return n.peer.send(ri.stringify(s)),await o.interestFullfilled},"postMethod");return new a1.TypedRequest(new a1.TypedTarget({postMethod:r}),e)}getStatus(){return this.connectionStatus}async stop(){this.side==="client"?(this.clientOptions&&(this.clientOptions.autoReconnect=!1),this.websocket&&(this.websocket.close(),this.websocket=null),this.pendingRequests.clear()):this.smartServeConnectionWrappers.clear()}async setTag(e,a){if(this.side!=="client")throw new Error("setTag is only available on clients");if(!(await this.createTypedRequest("__typedsocket_setTag").fire({name:e,payload:a})).success)throw new Error("Failed to set tag on server")}async removeTag(e){if(this.side!=="client")throw new Error("removeTag is only available on clients");if(!(await this.createTypedRequest("__typedsocket_removeTag").fire({name:e})).success)throw new Error("Failed to remove tag on server")}getOrCreateWrapper(e){let a=this.smartServeConnectionWrappers.get(e.id);return a||(a=Tva(e),this.smartServeConnectionWrappers.set(e.id,a)),a}async findAllTargetConnections(e){if(this.side!=="server"||!this.smartServeRef)throw new Error("findAllTargetConnections is only available on servers");let a=[];for(let r of this.smartServeRef.getWebSocketConnections()){let s=this.getOrCreateWrapper(r);await e(s)&&a.push(s)}return a}async findTargetConnection(e){return(await this.findAllTargetConnections(e))[0]}async findAllTargetConnectionsByTag(e,a){if(this.side!=="server"||!this.smartServeRef)throw new Error("findAllTargetConnectionsByTag is only available on servers");let r=this.smartServeRef.getWebSocketConnectionsByTag(e),s=[];for(let n of r){let o=this.getOrCreateWrapper(n);if(a!==void 0){let l=await o.getTagById(e);if(ri.stringify(l?.payload)!==ri.stringify(a))continue}s.push(o)}return s}async findTargetConnectionByTag(e,a){return(await this.findAllTargetConnectionsByTag(e,a))[0]}};de();Xa();var vt=gt;u5();var Jaa={};var e1a={};var Hs=new vt.plugins.smartstate.Smartstate,Ka=await Hs.getStatePart("login",{identity:null,isLoggedIn:!1},"persistent"),lr=await Hs.getStatePart("stats",{serverStats:null,emailStats:null,dnsStats:null,securityMetrics:null,lastUpdated:0,isLoading:!1,error:null},"soft"),H6=await Hs.getStatePart("config",{config:null,isLoading:!1,error:null}),Lva=i(()=>{let t=typeof window<"u"?window.location.pathname:"/",e=["overview","network","emails","logs","routes","apitokens","configuration","security","certificates","remoteingress"],r=t.split("/").filter(Boolean)[0];return e.includes(r)?r:"overview"},"getInitialView"),ci=await Hs.getStatePart("ui",{activeView:Lva(),sidebarCollapsed:!1,autoRefresh:!0,refreshInterval:1e3,theme:"light"}),jo=await Hs.getStatePart("logs",{recentLogs:[],isStreaming:!1,filters:{}},"soft"),$2=await Hs.getStatePart("network",{connections:[],connectionsByIP:{},throughputRate:{bytesInPerSecond:0,bytesOutPerSecond:0},totalBytes:{in:0,out:0},topIPs:[],throughputByIP:[],throughputHistory:[],requestsPerSecond:0,requestsTotal:0,backends:[],lastUpdated:0,isLoading:!1,error:null},"soft"),NX=await Hs.getStatePart("emailOps",{emails:[],isLoading:!1,error:null,lastUpdated:0},"soft"),di=await Hs.getStatePart("certificates",{certificates:[],summary:{total:0,valid:0,expiring:0,expired:0,failed:0,unknown:0},isLoading:!1,error:null,lastUpdated:0},"soft"),S1=await Hs.getStatePart("remoteIngress",{edges:[],statuses:[],selectedEdgeId:null,newEdgeId:null,isLoading:!1,error:null,lastUpdated:0},"soft"),pa=await Hs.getStatePart("routeManagement",{mergedRoutes:[],warnings:[],apiTokens:[],isLoading:!1,error:null,lastUpdated:0},"soft"),Jt=i(()=>{let t=Ka.getState().identity;return t&&t.expiresAt&&t.expiresAt<Date.now()?{identity:null}:{identity:t}},"getActionContext"),o1a=Ka.createAction(async(t,e)=>{let a=new vt.plugins.typedrequest.TypedRequest("/typedrequest","adminLoginWithUsernameAndPassword");try{let r=await a.fire({username:e.username,password:e.password});return r.identity?{identity:r.identity,isLoggedIn:!0}:t.getState()}catch(r){return console.error("Login failed:",r),t.getState()}}),wu=Ka.createAction(async t=>{let e=Jt();if(e.identity){let a=new vt.plugins.typedrequest.TypedRequest("/typedrequest","adminLogout");try{await a.fire({identity:e.identity})}catch(r){console.error("Logout error:",r)}}return{identity:null,isLoggedIn:!1}}),Mu=lr.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getCombinedMetrics").fire({identity:e.identity,sections:{server:!0,email:!0,dns:!0,security:!0,network:!1}});return{serverStats:s.metrics.server||a.serverStats,emailStats:s.metrics.email||a.emailStats,dnsStats:s.metrics.dns||a.dnsStats,securityMetrics:s.metrics.security||a.securityMetrics,lastUpdated:Date.now(),isLoading:!1,error:null}}catch(r){return{...a,isLoading:!1,error:r.message||"Failed to fetch statistics"}}}),IX=H6.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{return{config:(await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getConfiguration").fire({identity:e.identity})).config,isLoading:!1,error:null}}catch(r){return{...a,isLoading:!1,error:r.message||"Failed to fetch configuration"}}}),FX=jo.createAction(async(t,e)=>{let a=Jt();if(!a.identity)return t.getState();let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRecentLogs").fire({identity:a.identity,limit:e.limit||100,level:e.level,category:e.category});return{...t.getState(),recentLogs:s.logs}}),Bji=ci.createAction(async t=>{let e=t.getState();return{...e,autoRefresh:!e.autoRefresh}}),Hji=ci.createAction(async(t,e)=>{let a=t.getState();return e==="network"&&a.activeView!=="network"&&setTimeout(()=>{$2.dispatchAction(pqe,null)},100),e==="certificates"&&a.activeView!=="certificates"&&setTimeout(()=>{di.dispatchAction(xl,null)},100),e==="routes"&&a.activeView!=="routes"&&setTimeout(()=>{pa.dispatchAction(D2,null)},100),e==="apitokens"&&a.activeView!=="apitokens"&&setTimeout(()=>{pa.dispatchAction(yl,null)},100),e==="remoteingress"&&a.activeView!=="remoteingress"&&setTimeout(()=>{S1.dispatchAction(vl,null)},100),{...a,activeView:e}}),pqe=$2.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getActiveConnections").fire({identity:e.identity}),o=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getNetworkStats").fire({identity:e.identity}),l={};return o.connectionsByIP&&Array.isArray(o.connectionsByIP)?o.connectionsByIP.forEach(h=>{l[h.ip]=h.count}):s.connections.forEach(h=>{let p=h.remoteAddress;l[p]=(l[p]||0)+1}),{connections:s.connections,connectionsByIP:l,throughputRate:o.throughputRate||{bytesInPerSecond:0,bytesOutPerSecond:0},totalBytes:o.totalDataTransferred?{in:o.totalDataTransferred.bytesIn,out:o.totalDataTransferred.bytesOut}:{in:0,out:0},topIPs:o.topIPs||[],throughputByIP:o.throughputByIP||[],throughputHistory:o.throughputHistory||[],requestsPerSecond:o.requestsPerSecond||0,requestsTotal:o.requestsTotal||0,backends:o.backends||[],lastUpdated:Date.now(),isLoading:!1,error:null}}catch(r){return console.error("Failed to fetch network stats:",r),{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch network stats"}}}),n1a=NX.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{return{emails:(await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getAllEmails").fire({identity:e.identity})).emails,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch emails"}}}),xl=di.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getCertificateOverview").fire({identity:e.identity});return{certificates:s.certificates,summary:s.summary,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch certificate overview"}}}),l1a=di.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","reprovisionCertificateDomain").fire({identity:r.identity,domain:e}),await a.dispatch(xl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to reprovision certificate"}}}),c1a=di.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteCertificate").fire({identity:r.identity,domain:e}),await a.dispatch(xl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete certificate"}}}),d1a=di.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","importCertificate").fire({identity:r.identity,cert:e}),await a.dispatch(xl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to import certificate"}}});async function u1a(t){let e=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","exportCertificate").fire({identity:e.identity,domain:t})}i(u1a,"fetchCertificateExport");async function fqe(t){let e=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRemoteIngressConnectionToken").fire({identity:e.identity,edgeId:t})}i(fqe,"fetchConnectionToken");var vl=S1.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let r=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRemoteIngresses"),s=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getRemoteIngressStatus"),[n,o]=await Promise.all([r.fire({identity:e.identity}),s.fire({identity:e.identity})]);return{...a,edges:n.edges,statuses:o.statuses,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch remote ingress data"}}}),p1a=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{let o=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","createRemoteIngress").fire({identity:r.identity,name:e.name,listenPorts:e.listenPorts,autoDerivePorts:e.autoDerivePorts,tags:e.tags});return o.success?(await a.dispatch(vl,null),{...t.getState(),newEdgeId:o.edge.id}):s}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to create edge"}}}),f1a=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteRemoteIngress").fire({identity:r.identity,id:e}),await a.dispatch(vl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete edge"}}}),h1a=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","updateRemoteIngress").fire({identity:r.identity,id:e.id,name:e.name,listenPorts:e.listenPorts,autoDerivePorts:e.autoDerivePorts,tags:e.tags}),await a.dispatch(vl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to update edge"}}}),m1a=S1.createAction(async(t,e)=>{let a=Jt(),r=t.getState();try{return(await new vt.plugins.typedrequest.TypedRequest("/typedrequest","regenerateRemoteIngressSecret").fire({identity:a.identity,id:e})).success?{...r,newEdgeId:e}:r}catch(s){return{...r,error:s instanceof Error?s.message:"Failed to regenerate secret"}}}),g1a=S1.createAction(async t=>({...t.getState(),newEdgeId:null})),hqe=S1.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","updateRemoteIngress").fire({identity:r.identity,id:e.id,enabled:e.enabled}),await a.dispatch(vl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle edge"}}}),ui=await Hs.getStatePart("vpn",{clients:[],status:null,isLoading:!1,error:null,lastUpdated:0,newClientConfig:null},"soft"),yu=ui.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let r=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getVpnClients"),s=new vt.plugins.typedrequest.TypedRequest("/typedrequest","getVpnStatus"),[n,o]=await Promise.all([r.fire({identity:e.identity}),s.fire({identity:e.identity})]);return{...a,clients:n.clients,status:o.status,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch VPN data"}}}),b1a=ui.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{let o=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","createVpnClient").fire({identity:r.identity,clientId:e.clientId,tags:e.tags,description:e.description});return o.success?{...await a.dispatch(yu,null),newClientConfig:o.wireguardConfig||null}:{...s,error:o.message||"Failed to create client"}}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to create VPN client"}}}),v1a=ui.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteVpnClient").fire({identity:r.identity,clientId:e}),await a.dispatch(yu,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete VPN client"}}}),x1a=ui.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{let n=e.enabled?"enableVpnClient":"disableVpnClient";return await new vt.plugins.typedrequest.TypedRequest("/typedrequest",n).fire({identity:r.identity,clientId:e.clientId}),await a.dispatch(yu,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle VPN client"}}}),y1a=ui.createAction(async t=>({...t.getState(),newClientConfig:null})),D2=pa.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getMergedRoutes").fire({identity:e.identity});return{...a,mergedRoutes:s.routes,warnings:s.warnings,isLoading:!1,error:null,lastUpdated:Date.now()}}catch(r){return{...a,isLoading:!1,error:r instanceof Error?r.message:"Failed to fetch routes"}}}),w1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","createRoute").fire({identity:r.identity,route:e.route,enabled:e.enabled}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to create route"}}}),M1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","deleteRoute").fire({identity:r.identity,id:e}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to delete route"}}}),k1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","toggleRoute").fire({identity:r.identity,id:e.id,enabled:e.enabled}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle route"}}}),mqe=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","setRouteOverride").fire({identity:r.identity,routeName:e.routeName,enabled:e.enabled}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to set override"}}}),z1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","removeRouteOverride").fire({identity:r.identity,routeName:e}),await a.dispatch(D2,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to remove override"}}}),yl=pa.createAction(async t=>{let e=Jt(),a=t.getState();if(!e.identity)return a;try{let s=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","listApiTokens").fire({identity:e.identity});return{...a,apiTokens:s.tokens}}catch(r){return{...a,error:r instanceof Error?r.message:"Failed to fetch tokens"}}});async function S1a(t,e,a){let r=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","createApiToken").fire({identity:r.identity,name:t,scopes:e,expiresInDays:a})}i(S1a,"createApiToken");async function C1a(t){let e=Jt();return new vt.plugins.typedrequest.TypedRequest("/typedrequest","rollApiToken").fire({identity:e.identity,id:t})}i(C1a,"rollApiToken");var _1a=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","revokeApiToken").fire({identity:r.identity,id:e}),await a.dispatch(yl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to revoke token"}}}),gqe=pa.createAction(async(t,e,a)=>{let r=Jt(),s=t.getState();try{return await new vt.plugins.typedrequest.TypedRequest("/typedrequest","toggleApiToken").fire({identity:r.identity,id:e.id,enabled:e.enabled}),await a.dispatch(yl,null)}catch(n){return{...s,error:n instanceof Error?n.message:"Failed to toggle token"}}}),O6=null,t1a=new vt.plugins.typedrequest.TypedRouter,EX=[],lqe=!1;function $va(){if(lqe=!1,EX.length===0)return;let t=jo.getState(),e=[...t.recentLogs,...EX];EX=[],e.length>2e3&&e.splice(0,e.length-2e3),jo.setState({...t,recentLogs:e})}i($va,"flushLogEntries"),t1a.addTypedHandler(new vt.plugins.typedrequest.TypedHandler("pushLogEntry",async t=>(EX.push(t.entry),lqe||(lqe=!0,requestAnimationFrame($va)),{})));async function cqe(){if(!O6)try{O6=await xu.TypedSocket.createClient(t1a,xu.TypedSocket.useWindowLocationOriginUrl()),await O6.setTag("role","ops_dashboard")}catch(t){console.error("TypedSocket connection failed:",t),O6=null}}i(cqe,"connectSocket");async function a1a(){if(O6){try{await O6.stop()}catch{}O6=null}}i(a1a,"disconnectSocket");var dqe=!1;async function Dva(){if(!dqe){dqe=!0;try{await Ava()}finally{dqe=!1}}}i(Dva,"dispatchCombinedRefreshAction");async function Ava(){let t=Jt();if(!t.identity)return;let e=ci.getState().activeView;try{let r=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getCombinedMetrics").fire({identity:t.identity,sections:{server:!0,email:!0,dns:!0,security:!0,network:e==="network"}}),s=lr.getState();if(lr.setState({...s,serverStats:r.metrics.server||s.serverStats,emailStats:r.metrics.email||s.emailStats,dnsStats:r.metrics.dns||s.dnsStats,securityMetrics:r.metrics.security||s.securityMetrics,lastUpdated:Date.now(),isLoading:!1,error:null}),r.metrics.network&&e==="network"){let n=r.metrics.network,o={};n.connectionDetails.forEach(l=>{o[l.remoteAddress]=(o[l.remoteAddress]||0)+1});try{let h=await new vt.plugins.typedrequest.TypedRequest("/typedrequest","getActiveConnections").fire({identity:t.identity});$2.setState({...$2.getState(),connections:h.connections,connectionsByIP:o,throughputRate:{bytesInPerSecond:n.totalBandwidth.in,bytesOutPerSecond:n.totalBandwidth.out},totalBytes:n.totalBytes||{in:0,out:0},topIPs:n.topEndpoints.map(p=>({ip:p.endpoint,count:p.requests})),throughputByIP:n.topEndpoints.map(p=>({ip:p.endpoint,in:p.bandwidth?.in||0,out:p.bandwidth?.out||0})),throughputHistory:n.throughputHistory||[],requestsPerSecond:n.requestsPerSecond||0,requestsTotal:n.requestsTotal||0,backends:n.backends||[],lastUpdated:Date.now(),isLoading:!1,error:null})}catch(l){console.error("Failed to fetch connections:",l),$2.setState({...$2.getState(),connections:[],connectionsByIP:o,throughputRate:{bytesInPerSecond:n.totalBandwidth.in,bytesOutPerSecond:n.totalBandwidth.out},totalBytes:n.totalBytes||{in:0,out:0},topIPs:n.topEndpoints.map(h=>({ip:h.endpoint,count:h.requests})),throughputByIP:n.topEndpoints.map(h=>({ip:h.endpoint,in:h.bandwidth?.in||0,out:h.bandwidth?.out||0})),throughputHistory:n.throughputHistory||[],requestsPerSecond:n.requestsPerSecond||0,requestsTotal:n.requestsTotal||0,backends:n.backends||[],lastUpdated:Date.now(),isLoading:!1,error:null})}}if(e==="certificates")try{await di.dispatchAction(xl,null)}catch(n){console.error("Certificate refresh failed:",n)}if(e==="remoteingress")try{await S1.dispatchAction(vl,null)}catch(n){console.error("Remote ingress refresh failed:",n)}if(e==="vpn")try{await ui.dispatchAction(yu,null)}catch(n){console.error("VPN refresh failed:",n)}}catch(a){console.error("Combined refresh failed:",a);let r=String(a);(r.includes("invalid")||r.includes("unauthorized")||r.includes("401"))&&(await Ka.dispatchAction(wu,null),window.location.reload())}}i(Ava,"dispatchCombinedRefreshActionInner");var Pva=lr.createAction(async t=>(await Dva(),t.getState())),B6=null,uqe=i(()=>{let t=ci.getState(),e=Ka.getState();t.autoRefresh&&e.isLoggedIn?(B6&&(B6.dispose(),B6=null),B6=lr.createScheduledAction({action:Pva,payload:void 0,intervalMs:t.refreshInterval,autoPause:"visibility"})):B6&&(B6.dispose(),B6=null)},"startAutoRefresh"),r1a=ci.getState().autoRefresh,i1a=ci.getState().refreshInterval,s1a=Ka.getState().isLoggedIn;ci.select(t=>({autoRefresh:t.autoRefresh,refreshInterval:t.refreshInterval})).subscribe(t=>{(t.autoRefresh!==r1a||t.refreshInterval!==i1a)&&(r1a=t.autoRefresh,i1a=t.refreshInterval,uqe())}),Ka.select(t=>t.isLoggedIn).subscribe(t=>{t!==s1a&&(s1a=t,uqe(),t?cqe():a1a())}),document.addEventListener("visibilitychange",()=>{document.hidden?a1a():Ka.getState().isLoggedIn&&cqe()}),uqe(),Ka.getState().isLoggedIn&&cqe();var Eva=vt.plugins.smartrouter.SmartRouter,bqe=["overview","network","emails","logs","routes","apitokens","configuration","security","certificates","remoteingress","vpn"],vqe=class{static{i(this,"AppRouter")}router;initialized=!1;suppressStateUpdate=!1;constructor(){this.router=new Eva({debug:!1})}init(){this.initialized||(this.setupRoutes(),this.setupStateSync(),this.handleInitialRoute(),this.initialized=!0)}setupRoutes(){for(let e of bqe)this.router.on(`/${e}`,async()=>{this.updateViewState(e)});this.router.on("/",async()=>{this.navigateTo("/overview")})}setupStateSync(){ci.select().subscribe(e=>{if(this.suppressStateUpdate)return;let a=window.location.pathname,r=`/${e.activeView}`;a!==r&&(this.suppressStateUpdate=!0,this.router.pushUrl(r),this.suppressStateUpdate=!1)})}handleInitialRoute(){let e=window.location.pathname;if(!e||e==="/")this.router.pushUrl("/overview");else{let r=e.split("/").filter(Boolean)[0];bqe.includes(r)?this.updateViewState(r):this.router.pushUrl("/overview")}}updateViewState(e){this.suppressStateUpdate=!0;let a=ci.getState();a.activeView!==e&&ci.setState({...a,activeView:e}),this.suppressStateUpdate=!1}navigateTo(e){this.router.pushUrl(e)}navigateToView(e){bqe.includes(e)?this.navigateTo(`/${e}`):this.navigateTo("/overview")}getCurrentView(){return ci.getState().activeView}destroy(){this.router.destroy(),this.initialized=!1}},ku=new vqe;de();var n1=Z`
   :host {
     display: block;
     margin: auto;
@@ -43364,4 +43364,4 @@ ibantools/jsnext/ibantools.js:
    * @preferred
    *)
 */
-//# sourceMappingURL=bundle-1774858549242.js.map
+//# sourceMappingURL=bundle-1774859083330.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@serve.zone/dcrouter",
   "private": false,
-  "version": "11.13.0",
+  "version": "11.14.0",
   "description": "A multifaceted routing service handling mail and SMS delivery functions.",
   "type": "module",
   "exports": {

package/readme.md

@@ -4,7 +4,7 @@
 
 **dcrouter: The all-in-one gateway for your datacenter.** 🚀
 
-A comprehensive traffic routing solution that provides unified gateway capabilities for HTTP/HTTPS, TCP/SNI, email (SMTP), DNS, RADIUS, and remote edge ingress — all from a single process. Designed for enterprises requiring robust traffic management, automatic TLS certificate provisioning, distributed edge networking, and enterprise-grade email infrastructure.
+A comprehensive traffic routing solution that provides unified gateway capabilities for HTTP/HTTPS, TCP/SNI, email (SMTP), DNS, RADIUS, VPN, and remote edge ingress — all from a single process. Designed for enterprises requiring robust traffic management, automatic TLS certificate provisioning, VPN-based access control, distributed edge networking, and enterprise-grade email infrastructure.
 
 ## Issue Reporting and Security
 
@@ -23,6 +23,7 @@ For reporting bugs, issues, or security vulnerabilities, please visit [community
 - [DNS Server](#dns-server)
 - [RADIUS Server](#radius-server)
 - [Remote Ingress](#remote-ingress)
+- [VPN Access Control](#vpn-access-control)
 - [Certificate Management](#certificate-management)
 - [Storage & Caching](#storage--caching)
 - [Security Features](#security-features)
@@ -73,6 +74,14 @@ For reporting bugs, issues, or security vulnerabilities, please visit [community
 - **Real-time status monitoring** — connected/disconnected state, public IP, active tunnels, heartbeat tracking
 - **OpsServer dashboard** with enable/disable, edit, secret regeneration, token copy, and delete actions
 
+### 🔐 VPN Access Control (powered by [smartvpn](https://code.foss.global/push.rocks/smartvpn))
+- **WireGuard + native transports** — standard WireGuard clients (iOS, Android, macOS, Windows, Linux) plus custom WebSocket/QUIC tunnels
+- **Route-level VPN gating** — mark any route with `vpn: { required: true }` to restrict access to VPN clients only
+- **Rootless operation** — auto-detects privileges: kernel TUN when running as root, userspace NAT (smoltcp) when not
+- **Client management** — create, enable, disable, rotate keys, export WireGuard `.conf` files via OpsServer API
+- **IP-based enforcement** — VPN clients get IPs from a configurable subnet; SmartProxy enforces `ipAllowList` per route
+- **PROXY protocol v2** — in socket mode, the NAT engine sends PP v2 on outbound connections to preserve VPN client identity
+
 ### ⚡ High Performance
 - **Rust-powered proxy engine** via SmartProxy for maximum throughput
 - **Rust-powered MTA engine** via smartmta (TypeScript + Rust hybrid) for reliable email delivery
@@ -89,7 +98,7 @@ For reporting bugs, issues, or security vulnerabilities, please visit [community
 ### 🖥️ OpsServer Dashboard
 - **Web-based management interface** with real-time monitoring
 - **JWT authentication** with session persistence
-- **Live views** for connections, email queues, DNS queries, RADIUS sessions, certificates, remote ingress edges, and security events
+- **Live views** for connections, email queues, DNS queries, RADIUS sessions, certificates, remote ingress edges, VPN clients, and security events
 - **Domain-centric certificate overview** with backoff status and one-click reprovisioning
 - **Remote ingress management** with connection token generation and one-click copy
 - **Read-only configuration display** — DcRouter is configured through code
@@ -248,6 +257,13 @@ const router = new DcRouter({
     hubDomain: 'hub.example.com',
   },
 
+  // VPN — restrict sensitive routes to VPN clients
+  vpnConfig: {
+    enabled: true,
+    serverEndpoint: 'vpn.example.com',
+    wgListenPort: 51820,
+  },
+
   // Persistent storage
   storage: { fsPath: '/var/lib/dcrouter/data' },
 
@@ -276,6 +292,7 @@ graph TB
         DNS[DNS Queries]
         RAD[RADIUS Clients]
         EDGE[Edge Nodes]
+        VPN[VPN Clients]
     end
 
     subgraph "DcRouter Core"
@@ -285,6 +302,7 @@ graph TB
         DS[SmartDNS Server<br/><i>Rust-powered</i>]
         RS[SmartRadius Server]
         RI[RemoteIngress Hub<br/><i>Rust data plane</i>]
+        VS[SmartVPN Server<br/><i>Rust data plane</i>]
         CM[Certificate Manager<br/><i>smartacme v9</i>]
         OS[OpsServer Dashboard]
         MM[Metrics Manager]
@@ -305,12 +323,14 @@ graph TB
     DNS --> DS
     RAD --> RS
     EDGE --> RI
+    VPN --> VS
 
     DC --> SP
     DC --> ES
     DC --> DS
     DC --> RS
     DC --> RI
+    DC --> VS
     DC --> CM
     DC --> OS
     DC --> MM
@@ -428,6 +448,17 @@ interface IDcRouterOptions {
     };
   };
 
+  // ── VPN ───────────────────────────────────────────────────────
+  /** VPN server for route-level access control */
+  vpnConfig?: {
+    enabled?: boolean;                   // default: false
+    subnet?: string;                     // default: '10.8.0.0/24'
+    wgListenPort?: number;               // default: 51820
+    dns?: string[];                      // DNS servers pushed to VPN clients
+    serverEndpoint?: string;             // Hostname in generated client configs
+    forwardingMode?: 'tun' | 'socket';   // default: auto-detect (root → tun, else socket)
+  };
+
   // ── HTTP/3 (QUIC) ────────────────────────────────────────────
   /** HTTP/3 config — enabled by default on qualifying HTTPS routes */
   http3?: {
@@ -975,6 +1006,78 @@ The OpsServer Remote Ingress view provides:
 | **Copy Token** | Generate and copy a base64url connection token to clipboard |
 | **Delete** | Remove the edge registration |
 
+## VPN Access Control
+
+DcRouter integrates [`@push.rocks/smartvpn`](https://code.foss.global/push.rocks/smartvpn) to provide VPN-based route access control. VPN clients connect via standard WireGuard or native WebSocket/QUIC transports, receive an IP from a configurable subnet, and can then access routes that are restricted to VPN-only traffic.
+
+### How It Works
+
+1. **SmartVPN daemon** runs inside dcrouter with a Rust data plane (WireGuard via `boringtun`, custom protocol via Noise IK)
+2. Clients connect and get assigned an IP from the VPN subnet (e.g. `10.8.0.0/24`)
+3. Routes with `vpn: { required: true }` get `security.ipAllowList` automatically injected with the VPN subnet
+4. SmartProxy enforces the allowlist — only VPN-sourced traffic is accepted on those routes
+
+### Two Operating Modes
+
+| Mode | Root Required? | How It Works |
+|------|---------------|-------------|
+| **TUN** (`forwardingMode: 'tun'`) | Yes | Kernel TUN device — VPN traffic enters the network stack with real VPN IPs |
+| **Socket** (`forwardingMode: 'socket'`) | No | Userspace NAT via smoltcp — outbound connections send PROXY protocol v2 to preserve VPN client IPs |
+
+DcRouter auto-detects: if running as root, it uses TUN mode; otherwise, it falls back to socket mode. You can override this with the `forwardingMode` option.
+
+### Configuration
+
+```typescript
+const router = new DcRouter({
+  vpnConfig: {
+    enabled: true,
+    subnet: '10.8.0.0/24',          // VPN client IP pool (default)
+    wgListenPort: 51820,             // WireGuard UDP port (default)
+    serverEndpoint: 'vpn.example.com', // Hostname in generated client configs
+    dns: ['1.1.1.1', '8.8.8.8'],    // DNS servers pushed to clients
+    // forwardingMode: 'socket',     // Override auto-detection
+  },
+  smartProxyConfig: {
+    routes: [
+      // This route is VPN-only — non-VPN clients are blocked
+      {
+        name: 'admin-panel',
+        match: { domains: ['admin.example.com'], ports: [443] },
+        action: {
+          type: 'forward',
+          targets: [{ host: '192.168.1.50', port: 8080 }],
+          tls: { mode: 'terminate', certificate: 'auto' },
+        },
+        vpn: { required: true },  // 🔐 Only VPN clients can access this
+      },
+      // This route is public — anyone can access it
+      {
+        name: 'public-site',
+        match: { domains: ['example.com'], ports: [443] },
+        action: {
+          type: 'forward',
+          targets: [{ host: '192.168.1.10', port: 80 }],
+          tls: { mode: 'terminate', certificate: 'auto' },
+        },
+      },
+    ],
+  },
+});
+```
+
+### Client Management via OpsServer API
+
+Once the VPN server is running, you can manage clients through the OpsServer dashboard or API:
+
+- **Create client** — generates WireGuard keypairs, assigns IP, returns a ready-to-use `.conf` file
+- **Enable / Disable** — toggle client access without deleting
+- **Rotate keys** — generate fresh keypairs (invalidates old ones)
+- **Export config** — re-export in WireGuard or SmartVPN format
+- **Telemetry** — per-client bytes sent/received, keepalives, rate limiting
+
+Standard WireGuard clients on any platform (iOS, Android, macOS, Windows, Linux) can connect using the generated `.conf` file or QR code — no custom VPN software needed.
+
 ## Certificate Management
 
 DcRouter uses [`@push.rocks/smartacme`](https://code.foss.global/push.rocks/smartacme) v9 for ACME certificate provisioning. smartacme v9 brings significant improvements over previous versions:
@@ -1458,6 +1561,7 @@ The container exposes all service ports:
 | 1812, 1813 | UDP | RADIUS auth/acct |
 | 3000 | TCP | OpsServer dashboard |
 | 8443 | TCP | Remote ingress tunnels |
+| 51820 | UDP | WireGuard VPN |
 | 29000–30000 | TCP | Dynamic port range |
 
 ### Building the Image
@@ -1471,7 +1575,7 @@ The Docker build supports multi-platform (`linux/amd64`, `linux/arm64`) via [tsd
 
 ## License and Legal Information
 
-This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [license](./license) file.
+This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [LICENSE](./LICENSE) file.
 
 **Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
 

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '11.13.0',
+  version: '11.14.0',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

package/ts_web/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '11.13.0',
+  version: '11.14.0',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

package/ts_web/readme.md

@@ -50,6 +50,13 @@ For reporting bugs, issues, or security vulnerabilities, please visit [community
 - **Connection token generation** — one-click "Copy Token" for easy edge provisioning
 - Enable/disable, edit, secret regeneration, and delete actions
 
+### 🔐 VPN Management
+- VPN server status with forwarding mode, subnet, and WireGuard port
+- Client registration table with create, enable/disable, and delete actions
+- WireGuard config download and clipboard copy on client creation
+- Per-client telemetry (bytes sent/received, keepalives)
+- Server public key display for manual client configuration
+
 ### 📜 Log Viewer
 - Real-time log streaming
 - Filter by log level (error, warning, info, debug)
@@ -100,6 +107,7 @@ ts_web/
     ├── ops-view-emails.ts    # Email queue management
     ├── ops-view-certificates.ts  # Certificate overview & reprovisioning
     ├── ops-view-remoteingress.ts # Remote ingress edge management
+    ├── ops-view-vpn.ts       # VPN client management
     ├── ops-view-logs.ts      # Log viewer
     ├── ops-view-routes.ts    # Route & API token management
     ├── ops-view-config.ts    # Configuration display
@@ -124,6 +132,7 @@ The app uses `@push.rocks/smartstate` v2.3+ with multiple state parts, scheduled
 | `emailOpsStatePart` | Soft | Email queues, bounces, suppression list |
 | `certificateStatePart` | Soft | Certificate list, summary, loading state |
 | `remoteIngressStatePart` | Soft | Edge list, statuses, new edge secret |
+| `vpnStatePart` | Soft | VPN clients, server status, new client config |
 
 ### Tab Visibility Optimization
 
@@ -173,6 +182,13 @@ regenerateRemoteIngressSecretAction(id) // New secret
 toggleRemoteIngressAction(id, enabled)  // Enable/disable
 clearNewEdgeSecretAction()         // Dismiss secret banner
 fetchConnectionToken(edgeId)       // Get connection token (standalone function)
+
+// VPN
+fetchVpnAction()                   // Clients + server status
+createVpnClientAction(data)        // Create new VPN client
+deleteVpnClientAction(clientId)    // Remove VPN client
+toggleVpnClientAction(id, enabled) // Enable/disable
+clearNewClientConfigAction()       // Dismiss config banner
 ```
 
 ### Client-Side Routing
@@ -187,6 +203,7 @@ fetchConnectionToken(edgeId)       // Get connection token (standalone function)
   /emails/security  → Security incidents
 /certificates    → Certificate management
 /remoteingress   → Remote ingress edge management
+/vpn             → VPN client management
 /routes          → Route & API token management
 /logs            → Log viewer
 /configuration   → System configuration

package/ts_web/router.ts

@@ -3,7 +3,7 @@ import * as appstate from './appstate.js';
 
 const SmartRouter = plugins.domtools.plugins.smartrouter.SmartRouter;
 
-export const validViews = ['overview', 'network', 'emails', 'logs', 'routes', 'apitokens', 'configuration', 'security', 'certificates', 'remoteingress'] as const;
+export const validViews = ['overview', 'network', 'emails', 'logs', 'routes', 'apitokens', 'configuration', 'security', 'certificates', 'remoteingress', 'vpn'] as const;
 
 export type TValidView = typeof validViews[number];
 

package/dist_ts/00_commitinfo_data.d.ts

@@ -1,8 +0,0 @@
-/**
- * autocreated commitinfo by @push.rocks/commitinfo
- */
-export declare const commitinfo: {
-    name: string;
-    version: string;
-    description: string;
-};

package/dist_ts/00_commitinfo_data.js

@@ -1,9 +0,0 @@
-/**
- * autocreated commitinfo by @push.rocks/commitinfo
- */
-export const commitinfo = {
-    name: '@serve.zone/dcrouter',
-    version: '11.13.0',
-    description: 'A multifaceted routing service handling mail and SMS delivery functions.'
-};
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLFNBQVM7SUFDbEIsV0FBVyxFQUFFLDBFQUEwRTtDQUN4RixDQUFBIn0=

package/dist_ts/cache/classes.cache.cleaner.d.ts

@@ -1,47 +0,0 @@
-import { CacheDb } from './classes.cachedb.js';
-/**
- * Configuration for the cache cleaner
- */
-export interface ICacheCleanerOptions {
-    /** Cleanup interval in milliseconds (default: 1 hour) */
-    intervalMs?: number;
-    /** Enable verbose logging */
-    verbose?: boolean;
-}
-/**
- * CacheCleaner - Periodically removes expired documents from the cache
- *
- * Runs on a configurable interval (default: hourly) and queries each
- * collection for documents where expiresAt < now(), then deletes them.
- */
-export declare class CacheCleaner {
-    private cleanupInterval;
-    private isRunning;
-    private options;
-    private cacheDb;
-    constructor(cacheDb: CacheDb, options?: ICacheCleanerOptions);
-    /**
-     * Start the periodic cleanup process
-     */
-    start(): void;
-    /**
-     * Stop the periodic cleanup process
-     */
-    stop(): void;
-    /**
-     * Run a single cleanup cycle
-     */
-    runCleanup(): Promise<void>;
-    /**
-     * Clean expired documents from a specific collection using smartdata API
-     */
-    private cleanExpiredDocuments;
-    /**
-     * Check if the cleaner is running
-     */
-    isActive(): boolean;
-    /**
-     * Get the cleanup interval in milliseconds
-     */
-    getIntervalMs(): number;
-}