@serve.zone/dcrouter 15.2.5 → 15.3.1

package/ts/opsserver/handlers/admin.handler.ts

@@ -455,6 +455,39 @@ export class AdminHandler {
     }
   }
 
+  public async getVerifiedAdminIdentityFromJwt(
+    jwtArg: string,
+  ): Promise<interfaces.data.IIdentity> {
+    if (!jwtArg) {
+      throw new plugins.typedrequest.TypedResponseError('Valid identity required');
+    }
+
+    let jwtData: IJwtData;
+    try {
+      jwtData = await this.smartjwtInstance.verifyJWTAndGetData(jwtArg);
+    } catch {
+      throw new plugins.typedrequest.TypedResponseError('Valid identity required');
+    }
+
+    if (jwtData.status !== 'loggedIn' || jwtData.expiresAt < Date.now()) {
+      throw new plugins.typedrequest.TypedResponseError('Valid identity required');
+    }
+
+    const user = await this.resolveUser(jwtData.userId);
+    if (!user || user.role !== 'admin') {
+      throw new plugins.typedrequest.TypedResponseError('Admin access required');
+    }
+
+    return {
+      jwt: jwtArg,
+      userId: user.id,
+      name: user.name || user.username,
+      expiresAt: jwtData.expiresAt,
+      role: user.role,
+      type: 'user',
+    };
+  }
+
   private async authenticateUser(optionsArg: {
     username: string;
     password: string;

package/ts/opsserver/index.ts

@@ -1 +1,2 @@
 export * from './classes.opsserver.js';
+export * from './classes.mcpmanager.js';

package/ts/plugins.ts

@@ -62,6 +62,7 @@ import * as smartguard from '@push.rocks/smartguard';
 import * as smartjwt from '@push.rocks/smartjwt';
 import * as smartlog from '@push.rocks/smartlog';
 import * as smartmetrics from '@push.rocks/smartmetrics';
+import * as smartmcp from '@push.rocks/smartmcp';
 import * as smartmta from '@push.rocks/smartmta';
 import * as smartdb from '@push.rocks/smartdb';
 import * as smartnetwork from '@push.rocks/smartnetwork';
@@ -75,7 +76,7 @@ import * as smartrx from '@push.rocks/smartrx';
 import * as smartunique from '@push.rocks/smartunique';
 import * as taskbuffer from '@push.rocks/taskbuffer';
 
-export { projectinfo, qenv, smartacme, smartchallenge, smartdata, smartdns, smartfs, smartguard, smartjwt, smartlog, smartmetrics, smartdb, smartmta, smartnetwork, smartpath, smartproxy, smartpromise, smartradius, smartrequest, smartrx, smartunique, smartvpn, taskbuffer };
+export { projectinfo, qenv, smartacme, smartchallenge, smartdata, smartdns, smartfs, smartguard, smartjwt, smartlog, smartmetrics, smartmcp, smartdb, smartmta, smartnetwork, smartpath, smartproxy, smartpromise, smartradius, smartrequest, smartrx, smartunique, smartvpn, taskbuffer };
 
 // Define SmartLog types for use in error handling
 export type TLogLevel = 'error' | 'warn' | 'info' | 'success' | 'debug';

package/ts/readme.md

@@ -30,7 +30,7 @@ pnpm add @serve.zone/dcrouter
 import { DcRouter } from '@serve.zone/dcrouter';
 
 const router = new DcRouter({
-  smartProxyConfig: {
+  coreTrafficConfig: {
     routes: [
       {
         name: 'local-app',
@@ -51,6 +51,8 @@ const router = new DcRouter({
 await router.start();
 ```
 
+`coreTrafficConfig` is the preferred route configuration key. `smartProxyConfig` remains accepted as a legacy alias for existing callers.
+
 ## What `DcRouter` Manages
 
 - SmartProxy for HTTP/HTTPS/TCP routes
@@ -59,6 +61,7 @@ await router.start();
 - embedded authoritative DNS and DoH route generation from `dnsNsDomains` and `dnsScopes`
 - VPN, RADIUS, and remote ingress services when their config blocks are enabled
 - OpsServer and the dashboard, which start on every boot
+- an admin-JWT authenticated read-only MCP endpoint at `/mcp` for safe route, DNS, email, RemoteIngress, and VPN summaries
 
 ## Important Runtime Behavior
 

package/ts_apiclient/readme.md

@@ -1,6 +1,6 @@
 # @serve.zone/dcrouter-apiclient
 
-`@serve.zone/dcrouter-apiclient` is the object-oriented TypeScript client for the dcrouter OpsServer API. It wraps `/typedrequest` calls in managers, builders, and resource classes for routes, certificates, API tokens, remote ingress, email, stats, config, logs, RADIUS, and WorkHoster integrations.
+`@serve.zone/dcrouter-apiclient` is the object-oriented TypeScript client for the dcrouter OpsServer API. It wraps `/typedrequest` calls in managers, builders, and resource classes for routes, certificates, API tokens, remote ingress, email, stats, config, logs, RADIUS, and gateway-client integrations.
 
 ## Issue Reporting and Security
 
@@ -68,7 +68,7 @@ const tokenClient = new DcRouterApiClient({
 | `client.apiTokens` | Create, list, toggle, roll, and revoke API tokens. |
 | `client.remoteIngress` | Manage edge registrations, statuses, ports, tags, and connection tokens. |
 | `client.emails` | Inspect received/cached email items and trigger resend flows. |
-| `client.workHosters` | Manage WorkHoster-facing route/application integration calls. |
+| `client.gatewayClients` | Manage gateway-client route, DNS, and domain integration calls. |
 | `client.stats` | Read health, counters, summaries, and runtime status. |
 | `client.config` | Read the current configuration view. |
 | `client.logs` | Read recent log information. |
@@ -124,9 +124,9 @@ console.log(token.tokenValue, connectionToken);
 
 - It does not start dcrouter.
 - It does not serve or bundle the Ops dashboard.
-- It does not replace `@serve.zone/dcrouter-interfaces` when you want raw TypedRequest contracts.
+- It does not replace `@serve.zone/dcrouter-interfaces` when you want dcrouter-local raw TypedRequest contracts.
 
-Use `@serve.zone/dcrouter` for the server runtime and `@serve.zone/dcrouter-interfaces` for shared request/data types.
+Use `@serve.zone/dcrouter` for the server runtime and `@serve.zone/dcrouter-interfaces` for dcrouter-local request/data types. The canonical machine-facing gateway client route, DNS, and domain contracts used by `client.gatewayClients` come from `@serve.zone/interfaces`.
 
 ## Development
 

package/ts_web/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '15.2.5',
+  version: '15.3.1',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }