@serve.zone/dcrouter 18.1.0 → 18.1.1

package/deno.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/dcrouter",
-  "version": "18.1.0",
+  "version": "18.1.1",
   "exports": "./binary/dcrouter.ts",
   "compile": {
     "include": [

package/dist_serve/bundle.js

@@ -48403,7 +48403,7 @@ Minimum version required to store current data is: `+o+`.
         <dees-heading level="hr">Activity Charts</dees-heading>
         <div class="chartGrid">
           <dees-chart-area
-            .label=${"Email Traffic (24h)"}
+            .label=${"Email Traffic \u2014 Last 24 Hours"}
             .series=${this.getEmailTrafficSeries()}
             .realtimeMode=${!0}
             .rollingWindow=${864e5}
@@ -48443,7 +48443,7 @@ Minimum version required to store current data is: `+o+`.
     `}renderVpnStats(){if(!this.statsState.vpnStats)return x``;let t=this.statsState.vpnStats,a=[{id:"vpnStatus",title:"VPN Status",value:t.running?"Running":"Stopped",type:"text",icon:"lucide:Shield",color:t.running?"#22c55e":"#ef4444",description:`Subnet: ${t.subnet}`},{id:"connectedClients",title:"Connected Clients",value:t.connectedClients,type:"number",icon:"lucide:Wifi",color:"#3b82f6",description:`${t.registeredClients} registered`},{id:"wgPort",title:"WireGuard Port",value:t.wgListenPort,type:"number",icon:"lucide:Network",color:"#8b5cf6"}];return x`
       <dees-heading level="hr">VPN Statistics</dees-heading>
       <dees-statsgrid .tiles=${a}></dees-statsgrid>
-    `}getRecentEventEntries(){return this.logState.recentLogs.map(t=>({timestamp:new Date(t.timestamp).toISOString(),level:t.level,message:t.message,source:t.category}))}getSecurityAlertEntries(){return(this.statsState.securityMetrics?.recentEvents||[]).map(a=>({timestamp:new Date(a.timestamp).toISOString(),level:a.level==="critical"||a.level==="error"?"error":a.level==="warn"?"warn":"info",message:a.message,source:a.type}))}getDnsQueryEntries(){return(this.statsState.dnsStats?.recentQueries||[]).map(a=>({timestamp:new Date(a.timestamp).toISOString(),level:a.answered?"info":"warn",message:`${a.type} ${a.domain} (${a.responseTimeMs}ms)`,source:"dns"}))}getEmailTrafficSeries(){let t=this.statsState.emailStats?.timeSeries;return t?[{name:"Sent",color:"#22c55e",data:(t.sent||[]).map(a=>({x:a.timestamp,y:a.value}))},{name:"Received",color:"#3b82f6",data:(t.received||[]).map(a=>({x:a.timestamp,y:a.value}))}]:[]}getDnsQuerySeries(){let t=this.statsState.dnsStats?.timeSeries;return t?[{name:"Queries",color:"#8b5cf6",data:(t.queries||[]).map(a=>({x:a.timestamp,y:a.value}))}]:[]}};Qp=zt(aPt),fKe=new WeakMap,mKe=new WeakMap,Ge(Qp,4,"statsState",rPt,Xp,fKe),Ge(Qp,4,"logState",tPt,Xp,mKe),Xp=Ge(Qp,0,"OpsViewOverview",sPt,Xp),s(Xp,"OpsViewOverview"),ut(Xp,"styles",[w.defaultStyles,jt,ee`
+    `}getRecentEventEntries(){return this.logState.recentLogs.map(t=>({timestamp:new Date(t.timestamp).toISOString(),level:t.level,message:t.message,source:t.category}))}getSecurityAlertEntries(){return(this.statsState.securityMetrics?.recentEvents||[]).map(a=>({timestamp:new Date(a.timestamp).toISOString(),level:a.level==="critical"||a.level==="error"?"error":a.level==="warn"?"warn":"info",message:a.message,source:a.type}))}getDnsQueryEntries(){return(this.statsState.dnsStats?.recentQueries||[]).map(a=>({timestamp:new Date(a.timestamp).toISOString(),level:a.answered?"info":"warn",message:`${a.type} ${a.domain} (${a.responseTimeMs}ms)`,source:"dns"}))}getEmailTrafficSeries(){let t=this.statsState.emailStats?.timeSeries;return t?[{name:"Sent",color:"#22c55e",data:(t.sent||[]).map(a=>({x:a.timestamp,y:a.value}))},{name:"Received",color:"#3b82f6",data:(t.received||[]).map(a=>({x:a.timestamp,y:a.value}))},{name:"Failed",color:"#ef4444",data:(t.failed||[]).map(a=>({x:a.timestamp,y:a.value}))}]:[]}getDnsQuerySeries(){let t=this.statsState.dnsStats?.timeSeries;return t?[{name:"Queries",color:"#8b5cf6",data:(t.queries||[]).map(a=>({x:a.timestamp,y:a.value}))}]:[]}};Qp=zt(aPt),fKe=new WeakMap,mKe=new WeakMap,Ge(Qp,4,"statsState",rPt,Xp,fKe),Ge(Qp,4,"logState",tPt,Xp,mKe),Xp=Ge(Qp,0,"OpsViewOverview",sPt,Xp),s(Xp,"OpsViewOverview"),ut(Xp,"styles",[w.defaultStyles,jt,ee`
       .chartGrid {
         display: grid;
         grid-template-columns: repeat(2, 1fr);
@@ -50532,11 +50532,11 @@ Minimum version required to store current data is: `+o+`.
         <div class="loadingMessage">
           <p>Loading security metrics...</p>
         </div>
-      `;let a=this.calculateThreatLevel(t),i=this.getThreatScore(t),o=t.recentEvents||[],n=Date.now()-36e5,l=o.filter(d=>d.type==="authentication"&&d.success===!0&&d.timestamp>=n).length,c=[{id:"threatLevel",title:"Threat Level",value:i,type:"gauge",icon:"lucide:Shield",gaugeOptions:{min:0,max:100,thresholds:[{value:0,color:"#ef4444"},{value:30,color:"#f59e0b"},{value:70,color:"#22c55e"}]},description:`Status: ${a.toUpperCase()}`},{id:"blockedThreats",title:"Blocked Threats",value:(t.blockedIPs?.length||0)+t.spamDetected,type:"number",icon:"lucide:ShieldCheck",color:"#ef4444",description:"Total threats blocked today"},{id:"activeSessions",title:"Active Sessions",value:l,type:"number",icon:"lucide:Users",color:"#22c55e",description:"Authenticated in last hour"},{id:"authFailures",title:"Auth Failures",value:t.authenticationFailures,type:"number",icon:"lucide:LockOpen",color:t.authenticationFailures>10?"#ef4444":"#f59e0b",description:"Failed login attempts today"}];return x`
+      `;let a=this.calculateThreatLevel(t),i=this.getThreatScore(t),o=t.authenticationSuccesses||0,n=[{id:"threatLevel",title:"Threat Level",value:i,type:"gauge",icon:"lucide:Shield",gaugeOptions:{min:0,max:100,thresholds:[{value:0,color:"#ef4444"},{value:30,color:"#f59e0b"},{value:70,color:"#22c55e"}]},description:`Status: ${a.toUpperCase()}`},{id:"blockedThreats",title:"Blocked Threats",value:(t.blockedIPs?.length||0)+t.spamDetected,type:"number",icon:"lucide:ShieldCheck",color:"#ef4444",description:"Threats observed in the last 24 hours"},{id:"successfulLogins",title:"Successful Logins",value:o,type:"number",icon:"lucide:Users",color:"#22c55e",description:"Successful logins in the last 24 hours"},{id:"authFailures",title:"Auth Failures",value:t.authenticationFailures,type:"number",icon:"lucide:LockOpen",color:t.authenticationFailures>10?"#ef4444":"#f59e0b",description:"Failed login attempts in the last 24 hours"}];return x`
       <dees-heading level="3">Overview</dees-heading>
 
       <dees-statsgrid
-        .tiles=${c}
+        .tiles=${n}
         .minTileWidth=${200}
       ></dees-statsgrid>
 
@@ -50545,7 +50545,7 @@ Minimum version required to store current data is: `+o+`.
         .heading1=${"Security Events"}
         .heading2=${"Last 24 hours"}
         .data=${this.getSecurityEvents(t)}
-        .displayFunction=${d=>({Time:new Date(d.timestamp).toLocaleTimeString(),Event:d.event,Severity:d.severity,Details:d.details})}
+        .displayFunction=${l=>({Time:new Date(l.timestamp).toLocaleTimeString(),Event:l.event,Severity:l.severity,Details:l.details})}
       ></dees-table>
     `}calculateThreatLevel(t){let a=this.getThreatScore(t);return a<30?"alert":a<70?"warning":"success"}getThreatScore(t){let a=100,i=Array.isArray(t.blockedIPs)?t.blockedIPs.length:t.blockedIPs||0;return a-=i*2,a-=(t.authenticationFailures||0)*1,a-=(t.spamDetected||0)*.5,a-=(t.malwareDetected||0)*3,a-=(t.phishingDetected||0)*3,a-=(t.suspiciousActivities||0)*2,Math.max(0,Math.min(100,Math.round(a)))}getSecurityEvents(t){return(t.recentEvents||[]).map(i=>({timestamp:i.timestamp,event:i.message,severity:i.level==="critical"?"critical":i.level==="error"?"high":i.level==="warn"?"warning":"info",details:i.ipAddress?`IP: ${i.ipAddress}`:i.domain?`Domain: ${i.domain}`:i.type}))}};aS=zt(UEt),pYe=new WeakMap,Ge(aS,4,"statsState",jEt,dm,pYe),dm=Ge(aS,0,"OpsViewSecurityOverview",WEt,dm),s(dm,"OpsViewSecurityOverview"),ut(dm,"styles",[w.defaultStyles,jt,ee`
       h2 {
@@ -50704,11 +50704,11 @@ Minimum version required to store current data is: `+o+`.
         <div class="loadingMessage">
           <p>Loading security metrics...</p>
         </div>
-      `;let i=(t.recentEvents||[]).filter(c=>c.type==="authentication"),o=i.filter(c=>c.success===!0).length,n=[{id:"authFailures",title:"Authentication Failures",value:t.authenticationFailures,type:"number",icon:"lucide:LockOpen",color:t.authenticationFailures>10?"#ef4444":"#f59e0b",description:"Failed authentication attempts today"},{id:"successfulLogins",title:"Successful Logins",value:o,type:"number",icon:"lucide:Lock",color:"#22c55e",description:"Successful logins today"}],l=i.map(c=>({timestamp:c.timestamp,username:c.details?.username||"unknown",ipAddress:c.ipAddress||"unknown",success:c.success??!1,reason:c.success?"":c.message||"Authentication failed"}));return x`
+      `;let a=t.authenticationEvents||[],i=t.authenticationSuccesses||0,o=[{id:"authFailures",title:"Authentication Failures",value:t.authenticationFailures,type:"number",icon:"lucide:LockOpen",color:t.authenticationFailures>10?"#ef4444":"#f59e0b",description:"Failed authentication attempts in the last 24 hours"},{id:"successfulLogins",title:"Successful Logins",value:i,type:"number",icon:"lucide:Lock",color:"#22c55e",description:"Successful logins in the last 24 hours"}],n={invalidCredentials:"Invalid credentials",serviceUnavailable:"Authentication service unavailable",identityIssuanceFailed:"Session identity could not be issued",internalError:"Internal authentication error"},l=a.map(c=>({timestamp:c.timestamp,username:c.username,source:c.resolvedAuthSource?c.requestedAuthSource==="auto"?`Auto \u2192 ${c.resolvedAuthSource}`:c.resolvedAuthSource:c.requestedAuthSource,success:c.success,reason:c.success?"":n[c.failureReason||""]||"Authentication failed"}));return x`
       <dees-heading level="3">Authentication</dees-heading>
 
       <dees-statsgrid
-        .tiles=${n}
+        .tiles=${o}
         .minTileWidth=${200}
       ></dees-statsgrid>
 
@@ -50717,7 +50717,7 @@ Minimum version required to store current data is: `+o+`.
         .heading1=${"Login History"}
         .heading2=${"Recent authentication attempts"}
         .data=${l}
-        .displayFunction=${c=>({Time:new Date(c.timestamp).toLocaleString(),Username:c.username,"IP Address":c.ipAddress,Status:c.success?"Success":"Failed",Reason:c.reason||"-"})}
+        .displayFunction=${c=>({Time:new Date(c.timestamp).toLocaleString(),Username:c.username,Source:c.source,Status:c.success?"Success":"Failed",Reason:c.reason||"-"})}
       ></dees-table>
     `}};iS=zt(QEt),fYe=new WeakMap,Ge(iS,4,"statsState",ZEt,pm,fYe),pm=Ge(iS,0,"OpsViewSecurityAuthentication",XEt,pm),s(pm,"OpsViewSecurityAuthentication"),ut(pm,"styles",[w.defaultStyles,jt,ee`
       h2 {

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/dcrouter',
-    version: '18.1.0',
+    version: '18.1.1',
     description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLDBFQUEwRTtDQUN4RixDQUFBIn0=

package/dist_ts/classes.dcrouter.d.ts

@@ -9,7 +9,7 @@ import { RadiusServer, type IRadiusServerConfig } from './radius/index.js';
 import { RemoteIngressHubLifecycle, RemoteIngressManager, TunnelManager } from './remoteingress/index.js';
 import { VpnAccessResolver, VpnManager } from './vpn/index.js';
 import { RouteConfigManager, ApiTokenManager, GatewayClientManager, ReferenceResolver, TargetProfileManager } from './config/index.js';
-import { SecurityPolicyManager, RoutePolicyAugmenter } from './security/index.js';
+import { SecurityPolicyManager, RoutePolicyAugmenter, AuthenticationEventManager } from './security/index.js';
 import { type IHttp3Config } from './http3/index.js';
 import { DnsManager } from './dns/manager.dns.js';
 import { DnsAuthorityManager } from './dns/manager.dns-authority.js';
@@ -226,6 +226,7 @@ export declare class DcRouter {
     emailServer?: UnifiedEmailServer;
     radiusServer?: RadiusServer;
     opsServer: OpsServer;
+    private opsServerStopped;
     metricsManager?: MetricsManager;
     private emailEventSubscriptions;
     storageManager: IStorageManagerLike;
@@ -260,6 +261,7 @@ export declare class DcRouter {
     mailDnsSync: MailDnsSync;
     mailEdgeEligibility: MailEdgeEligibility;
     securityPolicyManager?: SecurityPolicyManager;
+    authenticationEventManager: AuthenticationEventManager;
     detectedPublicIp: string | null;
     certificateStatusMap: Map<string, {
         status: "valid" | "failed";
@@ -328,6 +330,7 @@ export declare class DcRouter {
      * Find ALL route names that match a given domain
      */
     findRouteNamesForDomain(domain: string): string[];
+    private stopOpsServer;
     stop(): Promise<void>;
     /**
      * Update SmartProxy configuration