@serve.zone/dcrouter 13.17.0 → 13.17.2

package/dist_ts_interfaces/requests/stats.d.ts

@@ -0,0 +1,177 @@
+import * as plugins from '../plugins.js';
+import * as authInterfaces from '../data/auth.js';
+import * as statsInterfaces from '../data/stats.js';
+export interface IReq_GetServerStatistics extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetServerStatistics> {
+    method: 'getServerStatistics';
+    request: {
+        identity: authInterfaces.IIdentity;
+        includeHistory?: boolean;
+        timeRange?: '1h' | '6h' | '24h' | '7d' | '30d';
+    };
+    response: {
+        stats: statsInterfaces.IServerStats;
+        history?: Array<{
+            timestamp: number;
+            value: number;
+        }>;
+    };
+}
+export interface IReq_GetEmailStatistics extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetEmailStatistics> {
+    method: 'getEmailStatistics';
+    request: {
+        identity: authInterfaces.IIdentity;
+        timeRange?: '1h' | '6h' | '24h' | '7d' | '30d';
+        domain?: string;
+        includeDetails?: boolean;
+    };
+    response: {
+        stats: statsInterfaces.IEmailStats;
+        domainBreakdown?: {
+            [domain: string]: statsInterfaces.IEmailStats;
+        };
+    };
+}
+export interface IReq_GetDnsStatistics extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetDnsStatistics> {
+    method: 'getDnsStatistics';
+    request: {
+        identity: authInterfaces.IIdentity;
+        timeRange?: '1h' | '6h' | '24h' | '7d' | '30d';
+        domain?: string;
+        includeQueryTypes?: boolean;
+    };
+    response: {
+        stats: statsInterfaces.IDnsStats;
+        domainBreakdown?: {
+            [domain: string]: statsInterfaces.IDnsStats;
+        };
+    };
+}
+export interface IReq_GetRateLimitStatus extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetRateLimitStatus> {
+    method: 'getRateLimitStatus';
+    request: {
+        identity: authInterfaces.IIdentity;
+        domain?: string;
+        ip?: string;
+        includeBlocked?: boolean;
+    };
+    response: {
+        limits: statsInterfaces.IRateLimitInfo[];
+        globalLimit?: {
+            current: number;
+            limit: number;
+            remaining: number;
+        };
+    };
+}
+export interface IReq_GetSecurityMetrics extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetSecurityMetrics> {
+    method: 'getSecurityMetrics';
+    request: {
+        identity: authInterfaces.IIdentity;
+        timeRange?: '1h' | '6h' | '24h' | '7d' | '30d';
+        includeDetails?: boolean;
+    };
+    response: {
+        metrics: statsInterfaces.ISecurityMetrics;
+        trends?: {
+            spam: Array<{
+                timestamp: number;
+                value: number;
+            }>;
+            malware: Array<{
+                timestamp: number;
+                value: number;
+            }>;
+            phishing: Array<{
+                timestamp: number;
+                value: number;
+            }>;
+        };
+    };
+}
+export interface IReq_GetActiveConnections extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetActiveConnections> {
+    method: 'getActiveConnections';
+    request: {
+        identity: authInterfaces.IIdentity;
+        protocol?: 'smtp' | 'smtps' | 'http' | 'https';
+        state?: string;
+    };
+    response: {
+        connections: statsInterfaces.IConnectionInfo[];
+        summary: {
+            total: number;
+            byProtocol: {
+                [protocol: string]: number;
+            };
+            byState: {
+                [state: string]: number;
+            };
+        };
+    };
+}
+export interface IReq_GetQueueStatus extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetQueueStatus> {
+    method: 'getQueueStatus';
+    request: {
+        identity: authInterfaces.IIdentity;
+        queueName?: string;
+    };
+    response: {
+        queues: statsInterfaces.IQueueStatus[];
+        totalItems: number;
+    };
+}
+export interface IReq_GetHealthStatus extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetHealthStatus> {
+    method: 'getHealthStatus';
+    request: {
+        identity: authInterfaces.IIdentity;
+        detailed?: boolean;
+    };
+    response: {
+        health: statsInterfaces.IHealthStatus;
+    };
+}
+export interface IReq_GetNetworkStats extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetNetworkStats> {
+    method: 'getNetworkStats';
+    request: {
+        identity: authInterfaces.IIdentity;
+    };
+    response: {
+        connectionsByIP: Array<{
+            ip: string;
+            count: number;
+        }>;
+        throughputRate: {
+            bytesInPerSecond: number;
+            bytesOutPerSecond: number;
+        };
+        topIPs: Array<{
+            ip: string;
+            count: number;
+        }>;
+        totalDataTransferred: {
+            bytesIn: number;
+            bytesOut: number;
+        };
+        throughputHistory: Array<{
+            timestamp: number;
+            in: number;
+            out: number;
+        }>;
+        throughputByIP: Array<{
+            ip: string;
+            in: number;
+            out: number;
+        }>;
+        requestsPerSecond: number;
+        requestsTotal: number;
+        backends?: statsInterfaces.IBackendInfo[];
+        topIPsByBandwidth: Array<{
+            ip: string;
+            count: number;
+            bwIn: number;
+            bwOut: number;
+        }>;
+        domainActivity: statsInterfaces.IDomainActivity[];
+        frontendProtocols?: statsInterfaces.IProtocolDistribution | null;
+        backendProtocols?: statsInterfaces.IProtocolDistribution | null;
+    };
+}

package/dist_ts_interfaces/requests/stats.js

@@ -0,0 +1,4 @@
+import * as plugins from '../plugins.js';
+import * as authInterfaces from '../data/auth.js';
+import * as statsInterfaces from '../data/stats.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic3RhdHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90c19pbnRlcmZhY2VzL3JlcXVlc3RzL3N0YXRzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sZUFBZSxDQUFDO0FBQ3pDLE9BQU8sS0FBSyxjQUFjLE1BQU0saUJBQWlCLENBQUM7QUFDbEQsT0FBTyxLQUFLLGVBQWUsTUFBTSxrQkFBa0IsQ0FBQyJ9

package/dist_ts_interfaces/requests/target-profiles.d.ts

@@ -0,0 +1,103 @@
+import * as plugins from '../plugins.js';
+import type * as authInterfaces from '../data/auth.js';
+import type { ITargetProfile, ITargetProfileTarget } from '../data/target-profile.js';
+/**
+ * Get all target profiles.
+ */
+export interface IReq_GetTargetProfiles extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetTargetProfiles> {
+    method: 'getTargetProfiles';
+    request: {
+        identity?: authInterfaces.IIdentity;
+        apiToken?: string;
+    };
+    response: {
+        profiles: ITargetProfile[];
+    };
+}
+/**
+ * Get a single target profile by ID.
+ */
+export interface IReq_GetTargetProfile extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetTargetProfile> {
+    method: 'getTargetProfile';
+    request: {
+        identity?: authInterfaces.IIdentity;
+        apiToken?: string;
+        id: string;
+    };
+    response: {
+        profile: ITargetProfile | null;
+    };
+}
+/**
+ * Create a new target profile.
+ */
+export interface IReq_CreateTargetProfile extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CreateTargetProfile> {
+    method: 'createTargetProfile';
+    request: {
+        identity?: authInterfaces.IIdentity;
+        apiToken?: string;
+        name: string;
+        description?: string;
+        domains?: string[];
+        targets?: ITargetProfileTarget[];
+        routeRefs?: string[];
+    };
+    response: {
+        success: boolean;
+        id?: string;
+        message?: string;
+    };
+}
+/**
+ * Update a target profile.
+ */
+export interface IReq_UpdateTargetProfile extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_UpdateTargetProfile> {
+    method: 'updateTargetProfile';
+    request: {
+        identity?: authInterfaces.IIdentity;
+        apiToken?: string;
+        id: string;
+        name?: string;
+        description?: string;
+        domains?: string[];
+        targets?: ITargetProfileTarget[];
+        routeRefs?: string[];
+    };
+    response: {
+        success: boolean;
+        message?: string;
+    };
+}
+/**
+ * Delete a target profile.
+ */
+export interface IReq_DeleteTargetProfile extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_DeleteTargetProfile> {
+    method: 'deleteTargetProfile';
+    request: {
+        identity?: authInterfaces.IIdentity;
+        apiToken?: string;
+        id: string;
+        force?: boolean;
+    };
+    response: {
+        success: boolean;
+        message?: string;
+    };
+}
+/**
+ * Get which VPN clients reference a target profile.
+ */
+export interface IReq_GetTargetProfileUsage extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetTargetProfileUsage> {
+    method: 'getTargetProfileUsage';
+    request: {
+        identity?: authInterfaces.IIdentity;
+        apiToken?: string;
+        id: string;
+    };
+    response: {
+        clients: Array<{
+            clientId: string;
+            description?: string;
+        }>;
+    };
+}

package/dist_ts_interfaces/requests/target-profiles.js

@@ -0,0 +1,2 @@
+import * as plugins from '../plugins.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidGFyZ2V0LXByb2ZpbGVzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHNfaW50ZXJmYWNlcy9yZXF1ZXN0cy90YXJnZXQtcHJvZmlsZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxlQUFlLENBQUMifQ==

package/dist_ts_interfaces/requests/users.d.ts

@@ -0,0 +1,19 @@
+import * as plugins from '../plugins.js';
+import * as authInterfaces from '../data/auth.js';
+/**
+ * List all OpsServer users (admin-only, read-only).
+ * Deliberately omits password/secret fields from the response.
+ */
+export interface IReq_ListUsers extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_ListUsers> {
+    method: 'listUsers';
+    request: {
+        identity: authInterfaces.IIdentity;
+    };
+    response: {
+        users: Array<{
+            id: string;
+            username: string;
+            role: string;
+        }>;
+    };
+}

package/dist_ts_interfaces/requests/users.js

@@ -0,0 +1,3 @@
+import * as plugins from '../plugins.js';
+import * as authInterfaces from '../data/auth.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXNlcnMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90c19pbnRlcmZhY2VzL3JlcXVlc3RzL3VzZXJzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sZUFBZSxDQUFDO0FBQ3pDLE9BQU8sS0FBSyxjQUFjLE1BQU0saUJBQWlCLENBQUMifQ==

package/dist_ts_interfaces/requests/vpn.d.ts

@@ -0,0 +1,177 @@
+import * as plugins from '../plugins.js';
+import * as authInterfaces from '../data/auth.js';
+import type { IVpnClient, IVpnServerStatus, IVpnClientTelemetry, IVpnConnectedClient } from '../data/vpn.js';
+/**
+ * Get all registered VPN clients.
+ */
+export interface IReq_GetVpnClients extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetVpnClients> {
+    method: 'getVpnClients';
+    request: {
+        identity: authInterfaces.IIdentity;
+    };
+    response: {
+        clients: IVpnClient[];
+    };
+}
+/**
+ * Get VPN server status.
+ */
+export interface IReq_GetVpnStatus extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetVpnStatus> {
+    method: 'getVpnStatus';
+    request: {
+        identity: authInterfaces.IIdentity;
+    };
+    response: {
+        status: IVpnServerStatus;
+    };
+}
+/**
+ * Create a new VPN client. Returns the config bundle (secrets only shown once).
+ */
+export interface IReq_CreateVpnClient extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CreateVpnClient> {
+    method: 'createVpnClient';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+        targetProfileIds?: string[];
+        description?: string;
+        destinationAllowList?: string[];
+        destinationBlockList?: string[];
+        useHostIp?: boolean;
+        useDhcp?: boolean;
+        staticIp?: string;
+        forceVlan?: boolean;
+        vlanId?: number;
+    };
+    response: {
+        success: boolean;
+        client?: IVpnClient;
+        /** WireGuard .conf file content (only returned at creation) */
+        wireguardConfig?: string;
+        message?: string;
+    };
+}
+/**
+ * Update a VPN client's metadata (description, tags) without rotating keys.
+ */
+export interface IReq_UpdateVpnClient extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_UpdateVpnClient> {
+    method: 'updateVpnClient';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+        description?: string;
+        targetProfileIds?: string[];
+        destinationAllowList?: string[];
+        destinationBlockList?: string[];
+        useHostIp?: boolean;
+        useDhcp?: boolean;
+        staticIp?: string;
+        forceVlan?: boolean;
+        vlanId?: number;
+    };
+    response: {
+        success: boolean;
+        message?: string;
+    };
+}
+/**
+ * Get currently connected VPN clients.
+ */
+export interface IReq_GetVpnConnectedClients extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetVpnConnectedClients> {
+    method: 'getVpnConnectedClients';
+    request: {
+        identity: authInterfaces.IIdentity;
+    };
+    response: {
+        connectedClients: IVpnConnectedClient[];
+    };
+}
+/**
+ * Delete a VPN client.
+ */
+export interface IReq_DeleteVpnClient extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_DeleteVpnClient> {
+    method: 'deleteVpnClient';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+    };
+    response: {
+        success: boolean;
+        message?: string;
+    };
+}
+/**
+ * Enable a VPN client.
+ */
+export interface IReq_EnableVpnClient extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_EnableVpnClient> {
+    method: 'enableVpnClient';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+    };
+    response: {
+        success: boolean;
+        message?: string;
+    };
+}
+/**
+ * Disable a VPN client.
+ */
+export interface IReq_DisableVpnClient extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_DisableVpnClient> {
+    method: 'disableVpnClient';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+    };
+    response: {
+        success: boolean;
+        message?: string;
+    };
+}
+/**
+ * Rotate a VPN client's keys. Returns the new config bundle.
+ */
+export interface IReq_RotateVpnClientKey extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_RotateVpnClientKey> {
+    method: 'rotateVpnClientKey';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+    };
+    response: {
+        success: boolean;
+        /** WireGuard .conf file content with new keys */
+        wireguardConfig?: string;
+        message?: string;
+    };
+}
+/**
+ * Export a VPN client config.
+ */
+export interface IReq_ExportVpnClientConfig extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_ExportVpnClientConfig> {
+    method: 'exportVpnClientConfig';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+        format: 'smartvpn' | 'wireguard';
+    };
+    response: {
+        success: boolean;
+        config?: string;
+        message?: string;
+    };
+}
+/**
+ * Get telemetry for a specific VPN client.
+ */
+export interface IReq_GetVpnClientTelemetry extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_GetVpnClientTelemetry> {
+    method: 'getVpnClientTelemetry';
+    request: {
+        identity: authInterfaces.IIdentity;
+        clientId: string;
+    };
+    response: {
+        success: boolean;
+        telemetry?: IVpnClientTelemetry;
+        message?: string;
+    };
+}

package/dist_ts_interfaces/requests/vpn.js

@@ -0,0 +1,3 @@
+import * as plugins from '../plugins.js';
+import * as authInterfaces from '../data/auth.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidnBuLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHNfaW50ZXJmYWNlcy9yZXF1ZXN0cy92cG4udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxlQUFlLENBQUM7QUFDekMsT0FBTyxLQUFLLGNBQWMsTUFBTSxpQkFBaUIsQ0FBQyJ9

package/dist_ts_migrations/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * dcrouter migration runner.
+ *
+ * Uses @push.rocks/smartmigration via dynamic import so smartmigration's type
+ * chain (which pulls in mongodb 7.x and related types) doesn't leak into
+ * compile-time type checking for this folder.
+ */
+/** Matches the subset of IMigrationRunResult we actually log. */
+export interface IMigrationRunResult {
+    stepsApplied: Array<unknown>;
+    wasFreshInstall: boolean;
+    currentVersionBefore: string | null;
+    currentVersionAfter: string;
+    totalDurationMs: number;
+}
+export interface IMigrationRunner {
+    run(): Promise<IMigrationRunResult>;
+}
+/**
+ * Create a configured SmartMigration runner with all dcrouter migration steps registered.
+ *
+ * Call `.run()` on the returned instance at startup (after DcRouterDb is ready,
+ * before any service that reads migrated collections).
+ *
+ * @param db - The initialized SmartdataDb instance from DcRouterDb.getDb()
+ * @param targetVersion - The current app version (from commitinfo.version)
+ */
+export declare function createMigrationRunner(db: unknown, targetVersion: string): Promise<IMigrationRunner>;

package/dist_ts_migrations/index.js

@@ -0,0 +1,82 @@
+/// <reference types="node" />
+/**
+ * Create a configured SmartMigration runner with all dcrouter migration steps registered.
+ *
+ * Call `.run()` on the returned instance at startup (after DcRouterDb is ready,
+ * before any service that reads migrated collections).
+ *
+ * @param db - The initialized SmartdataDb instance from DcRouterDb.getDb()
+ * @param targetVersion - The current app version (from commitinfo.version)
+ */
+export async function createMigrationRunner(db, targetVersion) {
+    const sm = await import('@push.rocks/smartmigration');
+    const migration = new sm.SmartMigration({
+        targetVersion,
+        db: db,
+        // Brand-new installs skip all migrations and stamp directly to the current version.
+        freshInstallVersion: targetVersion,
+    });
+    // Register steps in execution order. Each step's .from() must match the
+    // previous step's .to() to form a contiguous chain.
+    migration
+        .step('rename-target-profile-host-to-ip')
+        .from('13.0.11').to('13.1.0')
+        .description('Rename ITargetProfileTarget.host → ip on all target profiles')
+        .up(async (ctx) => {
+        const collection = ctx.mongo.collection('targetprofiledoc');
+        const cursor = collection.find({ 'targets.host': { $exists: true } });
+        let migrated = 0;
+        for await (const doc of cursor) {
+            const targets = (doc.targets || []).map((t) => {
+                if (t && typeof t === 'object' && 'host' in t && !('ip' in t)) {
+                    const { host, ...rest } = t;
+                    return { ...rest, ip: host };
+                }
+                return t;
+            });
+            await collection.updateOne({ _id: doc._id }, { $set: { targets } });
+            migrated++;
+        }
+        ctx.log.log('info', `rename-target-profile-host-to-ip: migrated ${migrated} profile(s)`);
+    })
+        .step('rename-domain-source-manual-to-dcrouter')
+        .from('13.1.0').to('13.8.1')
+        .description('Rename DomainDoc.source value from "manual" to "dcrouter"')
+        .up(async (ctx) => {
+        const collection = ctx.mongo.collection('domaindoc');
+        const result = await collection.updateMany({ source: 'manual' }, { $set: { source: 'dcrouter' } });
+        ctx.log.log('info', `rename-domain-source-manual-to-dcrouter: migrated ${result.modifiedCount} domain(s)`);
+    })
+        .step('rename-record-source-manual-to-local')
+        .from('13.8.1').to('13.8.2')
+        .description('Rename DnsRecordDoc.source value from "manual" to "local"')
+        .up(async (ctx) => {
+        const collection = ctx.mongo.collection('dnsrecorddoc');
+        const result = await collection.updateMany({ source: 'manual' }, { $set: { source: 'local' } });
+        ctx.log.log('info', `rename-record-source-manual-to-local: migrated ${result.modifiedCount} record(s)`);
+    })
+        .step('unify-routes-rename-collection')
+        .from('13.8.2').to('13.16.0')
+        .description('Rename StoredRouteDoc → RouteDoc, add origin field, drop RouteOverrideDoc')
+        .up(async (ctx) => {
+        const db = ctx.mongo;
+        // 1. Rename StoredRouteDoc → RouteDoc (smartdata uses exact class names)
+        const collections = await db.listCollections({ name: 'StoredRouteDoc' }).toArray();
+        if (collections.length > 0) {
+            await db.renameCollection('StoredRouteDoc', 'RouteDoc');
+            ctx.log.log('info', 'Renamed StoredRouteDoc → RouteDoc');
+        }
+        // 2. Set origin='api' on all migrated docs (they were API-created)
+        const routeCol = db.collection('RouteDoc');
+        const result = await routeCol.updateMany({ origin: { $exists: false } }, { $set: { origin: 'api' } });
+        ctx.log.log('info', `Set origin='api' on ${result.modifiedCount} migrated route(s)`);
+        // 3. Drop RouteOverrideDoc collection
+        const overrideCollections = await db.listCollections({ name: 'RouteOverrideDoc' }).toArray();
+        if (overrideCollections.length > 0) {
+            await db.collection('RouteOverrideDoc').drop();
+            ctx.log.log('info', 'Dropped RouteOverrideDoc collection');
+        }
+    });
+    return migration;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_oci_container/index.d.ts

@@ -0,0 +1,8 @@
+import type { IDcRouterOptions } from '../dist_ts/classes.dcrouter.js';
+/**
+ * Builds IDcRouterOptions from environment variables for OCI container mode.
+ *
+ * If DCROUTER_CONFIG_PATH is set and the file exists, it is loaded as a JSON base config.
+ * Individual env vars are then applied as overrides on top.
+ */
+export declare function getOciContainerConfig(): IDcRouterOptions;