@serve.zone/dcrouter 18.2.1 → 18.3.0

package/dist_ts_web/elements/email/ops-view-emails.js

@@ -32,7 +32,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
     }
     return useValue ? value : void 0;
 };
-import { DeesElement, property, html, customElement, css, state, cssManager } from '@design.estate/dees-element';
+import { DeesElement, html, customElement, css, state, cssManager } from '@design.estate/dees-element';
 import * as appstate from '../../appstate.js';
 import * as shared from '../shared/index.js';
 import * as interfaces from '../../../dist_ts_interfaces/index.js';
@@ -54,6 +54,12 @@ let OpsViewEmails = (() => {
     let _isLoading_decorators;
     let _isLoading_initializers = [];
     let _isLoading_extraInitializers = [];
+    let _traffic_decorators;
+    let _traffic_initializers = [];
+    let _traffic_extraInitializers = [];
+    let _searchQuery_decorators;
+    let _searchQuery_initializers = [];
+    let _searchQuery_extraInitializers = [];
     var OpsViewEmails = class extends _classSuper {
         static { _classThis = this; }
         static {
@@ -62,10 +68,14 @@ let OpsViewEmails = (() => {
             _selectedEmail_decorators = [state()];
             _currentView_decorators = [state()];
             _isLoading_decorators = [state()];
+            _traffic_decorators = [state()];
+            _searchQuery_decorators = [state()];
             __esDecorate(this, null, _emails_decorators, { kind: "accessor", name: "emails", static: false, private: false, access: { has: obj => "emails" in obj, get: obj => obj.emails, set: (obj, value) => { obj.emails = value; } }, metadata: _metadata }, _emails_initializers, _emails_extraInitializers);
             __esDecorate(this, null, _selectedEmail_decorators, { kind: "accessor", name: "selectedEmail", static: false, private: false, access: { has: obj => "selectedEmail" in obj, get: obj => obj.selectedEmail, set: (obj, value) => { obj.selectedEmail = value; } }, metadata: _metadata }, _selectedEmail_initializers, _selectedEmail_extraInitializers);
             __esDecorate(this, null, _currentView_decorators, { kind: "accessor", name: "currentView", static: false, private: false, access: { has: obj => "currentView" in obj, get: obj => obj.currentView, set: (obj, value) => { obj.currentView = value; } }, metadata: _metadata }, _currentView_initializers, _currentView_extraInitializers);
             __esDecorate(this, null, _isLoading_decorators, { kind: "accessor", name: "isLoading", static: false, private: false, access: { has: obj => "isLoading" in obj, get: obj => obj.isLoading, set: (obj, value) => { obj.isLoading = value; } }, metadata: _metadata }, _isLoading_initializers, _isLoading_extraInitializers);
+            __esDecorate(this, null, _traffic_decorators, { kind: "accessor", name: "traffic", static: false, private: false, access: { has: obj => "traffic" in obj, get: obj => obj.traffic, set: (obj, value) => { obj.traffic = value; } }, metadata: _metadata }, _traffic_initializers, _traffic_extraInitializers);
+            __esDecorate(this, null, _searchQuery_decorators, { kind: "accessor", name: "searchQuery", static: false, private: false, access: { has: obj => "searchQuery" in obj, get: obj => obj.searchQuery, set: (obj, value) => { obj.searchQuery = value; } }, metadata: _metadata }, _searchQuery_initializers, _searchQuery_extraInitializers);
             __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
             OpsViewEmails = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
@@ -82,13 +92,22 @@ let OpsViewEmails = (() => {
         #isLoading_accessor_storage = (__runInitializers(this, _currentView_extraInitializers), __runInitializers(this, _isLoading_initializers, false));
         get isLoading() { return this.#isLoading_accessor_storage; }
         set isLoading(value) { this.#isLoading_accessor_storage = value; }
-        stateSubscription = __runInitializers(this, _isLoading_extraInitializers);
+        #traffic_accessor_storage = (__runInitializers(this, _isLoading_extraInitializers), __runInitializers(this, _traffic_initializers, null));
+        get traffic() { return this.#traffic_accessor_storage; }
+        set traffic(value) { this.#traffic_accessor_storage = value; }
+        #searchQuery_accessor_storage = (__runInitializers(this, _traffic_extraInitializers), __runInitializers(this, _searchQuery_initializers, ''));
+        get searchQuery() { return this.#searchQuery_accessor_storage; }
+        set searchQuery(value) { this.#searchQuery_accessor_storage = value; }
+        stateSubscription = __runInitializers(this, _searchQuery_extraInitializers);
         lastEmailOpsUpdate = 0;
         detailRequestGeneration = 0;
+        searchDebounceTimer;
         async connectedCallback() {
             await super.connectedCallback();
             this.stateSubscription = appstate.emailOpsStatePart.select().subscribe((state) => {
                 this.emails = state.emails;
+                this.traffic = state.traffic;
+                this.searchQuery = state.searchQuery;
                 const hasNewSnapshot = state.lastUpdated > this.lastEmailOpsUpdate;
                 this.lastEmailOpsUpdate = Math.max(this.lastEmailOpsUpdate, state.lastUpdated);
                 if (hasNewSnapshot && this.selectedEmail) {
@@ -104,6 +123,10 @@ let OpsViewEmails = (() => {
             if (this.stateSubscription) {
                 this.stateSubscription.unsubscribe();
             }
+            if (this.searchDebounceTimer !== undefined) {
+                window.clearTimeout(this.searchDebounceTimer);
+                this.searchDebounceTimer = undefined;
+            }
         }
         static styles = [
             cssManager.defaultStyles,
@@ -117,6 +140,10 @@ let OpsViewEmails = (() => {
       .viewContainer {
         height: 100%;
       }
+
+      dees-chart-area[slot='above-table'] {
+        min-height: 360px;
+      }
     `,
         ];
         render() {
@@ -133,8 +160,24 @@ let OpsViewEmails = (() => {
                 : html `
               <sz-mta-list-view
                 .emails=${this.emails}
+                .searchQuery=${this.searchQuery}
+                .stickyFilterBar=${true}
+                @search-change=${this.handleSearchChange}
                 @email-click=${this.handleEmailClick}
-              ></sz-mta-list-view>
+              >
+                ${this.traffic ? html `
+                  <dees-chart-area
+                    slot="above-table"
+                    .label=${this.traffic.label}
+                    .series=${this.getEmailTrafficSeries()}
+                    .realtimeMode=${true}
+                    .rollingWindow=${this.traffic.durationMs}
+                    .legendStats=${['latest']}
+                    .chartLines=${[]}
+                    .yAxisFormatter=${(valueArg) => `${valueArg}`}
+                  ></dees-chart-area>
+                ` : html ``}
+              </sz-mta-list-view>
             `}
       </div>
     `;
@@ -162,6 +205,37 @@ let OpsViewEmails = (() => {
         async handleEmailClick(e) {
             await this.refreshEmailDetail(e.detail.id, true);
         }
+        handleSearchChange(eventArg) {
+            const searchQuery = appstate.setActiveEmailSearchQuery(eventArg.detail.searchQuery);
+            if (this.searchDebounceTimer !== undefined) {
+                window.clearTimeout(this.searchDebounceTimer);
+            }
+            this.searchDebounceTimer = window.setTimeout(() => {
+                this.searchDebounceTimer = undefined;
+                void appstate.emailOpsStatePart.dispatchAction(appstate.fetchAllEmailsAction, { searchQuery });
+            }, 300);
+        }
+        getEmailTrafficSeries() {
+            if (!this.traffic)
+                return [];
+            return [
+                {
+                    name: 'Sent',
+                    color: '#22c55e',
+                    data: this.traffic.sent.map((point) => ({ x: point.timestamp, y: point.value })),
+                },
+                {
+                    name: 'Received',
+                    color: '#3b82f6',
+                    data: this.traffic.received.map((point) => ({ x: point.timestamp, y: point.value })),
+                },
+                {
+                    name: 'Failed',
+                    color: '#ef4444',
+                    data: this.traffic.failed.map((point) => ({ x: point.timestamp, y: point.value })),
+                },
+            ];
+        }
         handleBack() {
             this.detailRequestGeneration++;
             this.selectedEmail = null;
@@ -174,4 +248,4 @@ let OpsViewEmails = (() => {
     return OpsViewEmails = _classThis;
 })();
 export { OpsViewEmails };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoib3BzLXZpZXctZW1haWxzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vdHNfd2ViL2VsZW1lbnRzL2VtYWlsL29wcy12aWV3LWVtYWlscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsT0FBTyxFQUFFLFdBQVcsRUFBRSxJQUFJLEVBQUUsYUFBYSxFQUFFLEdBQUcsRUFBRSxLQUFLLEVBQUUsVUFBVSxFQUFFLE1BQU0sNkJBQTZCLENBQUM7QUFDdkcsT0FBTyxLQUFLLFFBQVEsTUFBTSxtQkFBbUIsQ0FBQztBQUM5QyxPQUFPLEtBQUssTUFBTSxNQUFNLG9CQUFvQixDQUFDO0FBQzdDLE9BQU8sS0FBSyxVQUFVLE1BQU0sc0NBQXNDLENBQUM7SUFTdEQsYUFBYTs0QkFEekIsYUFBYSxDQUFDLGlCQUFpQixDQUFDOzs7O3NCQUNFLFdBQVc7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7NkJBQW5CLFNBQVEsV0FBVzs7OztrQ0FDM0MsS0FBSyxFQUFFO3lDQUdQLEtBQUssRUFBRTt1Q0FHUCxLQUFLLEVBQUU7cUNBR1AsS0FBSyxFQUFFO21DQUdQLEtBQUssRUFBRTt1Q0FHUCxLQUFLLEVBQUU7WUFkUix1S0FBUyxNQUFNLDZCQUFOLE1BQU0sdUZBQW9DO1lBR25ELDRMQUFTLGFBQWEsNkJBQWIsYUFBYSxxR0FBaUQ7WUFHdkUsc0xBQVMsV0FBVyw2QkFBWCxXQUFXLGlHQUE2QjtZQUdqRCxnTEFBUyxTQUFTLDZCQUFULFNBQVMsNkZBQVM7WUFHM0IsMEtBQVMsT0FBTyw2QkFBUCxPQUFPLHlGQUFxRDtZQUdyRSxzTEFBUyxXQUFXLDZCQUFYLFdBQVcsaUdBQU07WUFqQjVCLDZLQStLQzs7OztRQTdLQyx5RUFBZ0QsRUFBRSxFQUFDO1FBQW5ELElBQVMsTUFBTSw0Q0FBb0M7UUFBbkQsSUFBUyxNQUFNLGtEQUFvQztRQUduRCw0SUFBa0UsSUFBSSxHQUFDO1FBQXZFLElBQVMsYUFBYSxtREFBaUQ7UUFBdkUsSUFBUyxhQUFhLHlEQUFpRDtRQUd2RSwrSUFBMEMsTUFBTSxHQUFDO1FBQWpELElBQVMsV0FBVyxpREFBNkI7UUFBakQsSUFBUyxXQUFXLHVEQUE2QjtRQUdqRCx5SUFBcUIsS0FBSyxHQUFDO1FBQTNCLElBQVMsU0FBUywrQ0FBUztRQUEzQixJQUFTLFNBQVMscURBQVM7UUFHM0IsbUlBQWdFLElBQUksR0FBQztRQUFyRSxJQUFTLE9BQU8sNkNBQXFEO1FBQXJFLElBQVMsT0FBTyxtREFBcUQ7UUFHckUseUlBQXVCLEVBQUUsR0FBQztRQUExQixJQUFTLFdBQVcsaURBQU07UUFBMUIsSUFBUyxXQUFXLHVEQUFNO1FBRWxCLGlCQUFpQiwyREFBTTtRQUN2QixrQkFBa0IsR0FBRyxDQUFDLENBQUM7UUFDdkIsdUJBQXVCLEdBQUcsQ0FBQyxDQUFDO1FBQzVCLG1CQUFtQixDQUFxQjtRQUVoRCxLQUFLLENBQUMsaUJBQWlCO1lBQ3JCLE1BQU0sS0FBSyxDQUFDLGlCQUFpQixFQUFFLENBQUM7WUFDaEMsSUFBSSxDQUFDLGlCQUFpQixHQUFHLFFBQVEsQ0FBQyxpQkFBaUIsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxTQUFTLENBQUMsQ0FBQyxLQUFLLEVBQUUsRUFBRTtnQkFDL0UsSUFBSSxDQUFDLE1BQU0sR0FBRyxLQUFLLENBQUMsTUFBTSxDQUFDO2dCQUMzQixJQUFJLENBQUMsT0FBTyxHQUFHLEtBQUssQ0FBQyxPQUFPLENBQUM7Z0JBQzdCLElBQUksQ0FBQyxXQUFXLEdBQUcsS0FBSyxDQUFDLFdBQVcsQ0FBQztnQkFDckMsTUFBTSxjQUFjLEdBQUcsS0FBSyxDQUFDLFdBQVcsR0FBRyxJQUFJLENBQUMsa0JBQWtCLENBQUM7Z0JBQ25FLElBQUksQ0FBQyxrQkFBa0IsR0FBRyxJQUFJLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxrQkFBa0IsRUFBRSxLQUFLLENBQUMsV0FBVyxDQUFDLENBQUM7Z0JBQy9FLElBQUksY0FBYyxJQUFJLElBQUksQ0FBQyxhQUFhLEVBQUUsQ0FBQztvQkFDekMsS0FBSyxJQUFJLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxFQUFFLENBQUMsQ0FBQztnQkFDdEQsQ0FBQztnQkFDRCxJQUFJLENBQUMsU0FBUyxHQUFHLEtBQUssQ0FBQyxTQUFTLENBQUM7WUFDbkMsQ0FBQyxDQUFDLENBQUM7WUFDSCxnQkFBZ0I7WUFDaEIsTUFBTSxRQUFRLENBQUMsaUJBQWlCLENBQUMsY0FBYyxDQUFDLFFBQVEsQ0FBQyxvQkFBb0IsRUFBRSxJQUFJLENBQUMsQ0FBQztRQUN2RixDQUFDO1FBRUQsS0FBSyxDQUFDLG9CQUFvQjtZQUN4QixNQUFNLEtBQUssQ0FBQyxvQkFBb0IsRUFBRSxDQUFDO1lBQ25DLElBQUksSUFBSSxDQUFDLGlCQUFpQixFQUFFLENBQUM7Z0JBQzNCLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxXQUFXLEVBQUUsQ0FBQztZQUN2QyxDQUFDO1lBQ0QsSUFBSSxJQUFJLENBQUMsbUJBQW1CLEtBQUssU0FBUyxFQUFFLENBQUM7Z0JBQzNDLE1BQU0sQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLG1CQUFtQixDQUFDLENBQUM7Z0JBQzlDLElBQUksQ0FBQyxtQkFBbUIsR0FBRyxTQUFTLENBQUM7WUFDdkMsQ0FBQztRQUNILENBQUM7UUFFTSxNQUFNLENBQUMsTUFBTSxHQUFHO1lBQ3JCLFVBQVUsQ0FBQyxhQUFhO1lBQ3hCLE1BQU0sQ0FBQyxXQUFXO1lBQ2xCLEdBQUcsQ0FBQTs7Ozs7Ozs7Ozs7OztLQWFGO1NBQ0YsQ0FBQztRQUVLLE1BQU07WUFDWCxPQUFPLElBQUksQ0FBQTs7O1VBR0wsSUFBSSxDQUFDLFdBQVcsS0FBSyxRQUFRLElBQUksSUFBSSxDQUFDLGFBQWE7Z0JBQ25ELENBQUMsQ0FBQyxJQUFJLENBQUE7O3lCQUVTLElBQUksQ0FBQyxhQUFhO3dCQUNuQixJQUFJLENBQUMsVUFBVTs7YUFFMUI7Z0JBQ0gsQ0FBQyxDQUFDLElBQUksQ0FBQTs7MEJBRVUsSUFBSSxDQUFDLE1BQU07K0JBQ04sSUFBSSxDQUFDLFdBQVc7bUNBQ1osSUFBSTtpQ0FDTixJQUFJLENBQUMsa0JBQWtCOytCQUN6QixJQUFJLENBQUMsZ0JBQWdCOztrQkFFbEMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFBOzs7NkJBR1IsSUFBSSxDQUFDLE9BQU8sQ0FBQyxLQUFLOzhCQUNqQixJQUFJLENBQUMscUJBQXFCLEVBQUU7b0NBQ3RCLElBQUk7cUNBQ0gsSUFBSSxDQUFDLE9BQU8sQ0FBQyxVQUFVO21DQUN6QixDQUFDLFFBQVEsQ0FBQztrQ0FDWCxFQUFFO3NDQUNFLENBQUMsUUFBZ0IsRUFBRSxFQUFFLENBQUMsR0FBRyxRQUFRLEVBQUU7O2lCQUV4RCxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUEsRUFBRTs7YUFHbEI7O0tBRUgsQ0FBQztRQUNKLENBQUM7UUFFTyxLQUFLLENBQUMsa0JBQWtCLENBQUMsVUFBa0IsRUFBRSxhQUFhLEdBQUcsS0FBSztZQUN4RSxNQUFNLGlCQUFpQixHQUFHLEVBQUUsSUFBSSxDQUFDLHVCQUF1QixDQUFDO1lBQ3pELElBQUksQ0FBQztnQkFDSCxNQUFNLEtBQUssR0FBRyxNQUFNLFFBQVEsQ0FBQyx3QkFBd0IsQ0FBQyxVQUFVLENBQUMsQ0FBQztnQkFDbEUsSUFBSSxpQkFBaUIsS0FBSyxJQUFJLENBQUMsdUJBQXVCO29CQUFFLE9BQU87Z0JBQy9ELElBQUksS0FBSyxFQUFFLENBQUM7b0JBQ1YsSUFBSSxDQUFDLGFBQWEsR0FBRyxLQUFLLENBQUM7b0JBQzNCLElBQUksYUFBYSxFQUFFLENBQUM7d0JBQ2xCLElBQUksQ0FBQyxXQUFXLEdBQUcsUUFBUSxDQUFDO29CQUM5QixDQUFDO2dCQUNILENBQUM7cUJBQU0sSUFBSSxJQUFJLENBQUMsYUFBYSxFQUFFLEVBQUUsS0FBSyxVQUFVLEVBQUUsQ0FBQztvQkFDakQsSUFBSSxDQUFDLFVBQVUsRUFBRSxDQUFDO2dCQUNwQixDQUFDO1lBQ0gsQ0FBQztZQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7Z0JBQ2YsT0FBTyxDQUFDLEtBQUssQ0FBQywrQkFBK0IsRUFBRSxLQUFLLENBQUMsQ0FBQztZQUN4RCxDQUFDO1FBQ0gsQ0FBQztRQUVPLEtBQUssQ0FBQyxnQkFBZ0IsQ0FBQyxDQUEwQztZQUN2RSxNQUFNLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsRUFBRSxJQUFJLENBQUMsQ0FBQztRQUNuRCxDQUFDO1FBRU8sa0JBQWtCLENBQUMsUUFBOEM7WUFDdkUsTUFBTSxXQUFXLEdBQUcsUUFBUSxDQUFDLHlCQUF5QixDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsV0FBVyxDQUFDLENBQUM7WUFDcEYsSUFBSSxJQUFJLENBQUMsbUJBQW1CLEtBQUssU0FBUyxFQUFFLENBQUM7Z0JBQzNDLE1BQU0sQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLG1CQUFtQixDQUFDLENBQUM7WUFDaEQsQ0FBQztZQUNELElBQUksQ0FBQyxtQkFBbUIsR0FBRyxNQUFNLENBQUMsVUFBVSxDQUFDLEdBQUcsRUFBRTtnQkFDaEQsSUFBSSxDQUFDLG1CQUFtQixHQUFHLFNBQVMsQ0FBQztnQkFDckMsS0FBSyxRQUFRLENBQUMsaUJBQWlCLENBQUMsY0FBYyxDQUM1QyxRQUFRLENBQUMsb0JBQW9CLEVBQzdCLEVBQUUsV0FBVyxFQUFFLENBQ2hCLENBQUM7WUFDSixDQUFDLEVBQUUsR0FBRyxDQUFDLENBQUM7UUFDVixDQUFDO1FBRU8scUJBQXFCO1lBSzNCLElBQUksQ0FBQyxJQUFJLENBQUMsT0FBTztnQkFBRSxPQUFPLEVBQUUsQ0FBQztZQUM3QixPQUFPO2dCQUNMO29CQUNFLElBQUksRUFBRSxNQUFNO29CQUNaLEtBQUssRUFBRSxTQUFTO29CQUNoQixJQUFJLEVBQUUsSUFBSSxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLEtBQUssQ0FBQyxTQUFTLEVBQUUsQ0FBQyxFQUFFLEtBQUssQ0FBQyxLQUFLLEVBQUUsQ0FBQyxDQUFDO2lCQUNqRjtnQkFDRDtvQkFDRSxJQUFJLEVBQUUsVUFBVTtvQkFDaEIsS0FBSyxFQUFFLFNBQVM7b0JBQ2hCLElBQUksRUFBRSxJQUFJLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxHQUFHLENBQUMsQ0FBQyxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsS0FBSyxDQUFDLFNBQVMsRUFBRSxDQUFDLEVBQUUsS0FBSyxDQUFDLEtBQUssRUFBRSxDQUFDLENBQUM7aUJBQ3JGO2dCQUNEO29CQUNFLElBQUksRUFBRSxRQUFRO29CQUNkLEtBQUssRUFBRSxTQUFTO29CQUNoQixJQUFJLEVBQUUsSUFBSSxDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLEtBQUssQ0FBQyxTQUFTLEVBQUUsQ0FBQyxFQUFFLEtBQUssQ0FBQyxLQUFLLEVBQUUsQ0FBQyxDQUFDO2lCQUNuRjthQUNGLENBQUM7UUFDSixDQUFDO1FBRU8sVUFBVTtZQUNoQixJQUFJLENBQUMsdUJBQXVCLEVBQUUsQ0FBQztZQUMvQixJQUFJLENBQUMsYUFBYSxHQUFHLElBQUksQ0FBQztZQUMxQixJQUFJLENBQUMsV0FBVyxHQUFHLE1BQU0sQ0FBQztRQUM1QixDQUFDOztZQTlLVSx1REFBYTs7Ozs7U0FBYixhQUFhIn0=

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@serve.zone/dcrouter",
   "private": false,
-  "version": "18.2.1",
+  "version": "18.3.0",
   "description": "A multifaceted routing service handling mail and SMS delivery functions.",
   "type": "module",
   "bin": {
@@ -20,7 +20,7 @@
     "@git.zone/tsdeno": "^1.7.0",
     "@git.zone/tsdocker": "^3.1.0",
     "@git.zone/tsrun": "^2.0.5",
-    "@git.zone/tstest": "^3.6.6",
+    "@git.zone/tstest": "^3.6.7",
     "@git.zone/tswatch": "^3.3.5",
     "@types/node": "26.1.1",
     "@types/web-push": "3.6.4"
@@ -63,7 +63,7 @@
     "@push.rocks/smartunique": "^3.0.10",
     "@push.rocks/smartvpn": "1.22.0",
     "@push.rocks/taskbuffer": "^8.0.2",
-    "@serve.zone/catalog": "^2.19.0",
+    "@serve.zone/catalog": "^2.20.0",
     "@serve.zone/interfaces": "^19.2.0",
     "@serve.zone/remoteingress": "^5.0.3",
     "@tsclass/tsclass": "^9.5.1",

package/readme.plan.md

@@ -0,0 +1,22 @@
+# Platform refactoring program
+
+Status: approved 2026-07-21, derived from that day's incident ledger (deploy-verification crashes, unbounded scans, DNS/IP logic duplication, version-skew scares). Upstream foundations are RELEASED; consumer adoption and the dcrouter-internal refactors are sequenced below — do not start them mid-wave, fold them into the next natural release of each surface.
+
+## Shipped upstream (adopt on next dependency bump)
+
+1. **Typed-request error boundary — already existed.** @api.global/typedrequest ≥ 3.3.2 sanitizes every handler/middleware throw into a structured error envelope (no socket destruction). Action: ensure every deployed consumer (cloudly, dcrouter, coreflow, onebox) resolves ≥ 3.3.2 and remove any local try/catch layers that only re-implement it.
+2. **Canonical IP helpers — @push.rocks/smartnetwork 4.9.0.** `isPublicIpAddress`, `toReverseDnsName` (non-throwing), `expandIpv6`, alongside the existing `getIpVersion`/`isValidIpv4`/`isValidIpv6`. Adoption: dcrouter ts/email/classes.mail-dns-sync.ts drops its private `toReverseDnsName`/`expandIpv6` (and the `Invalid IP address:` throw); cloudly's `isPublicDeploymentAddress` (classes.deploymentoperationmanager.ts) delegates to `isPublicIpAddress` (IPv4 semantics are byte-identical; IPv6 is 2000::/3 minus 2001:db8::/32).
+3. **Cursor pagination as the org default — @push.rocks/smartdata 7.4.0.** `SmartDataDbDoc.getPagedInstances({ filter, sortField, sortDirection, uniqueField, limit ≤ 1000, cursor, withTotal })` — seek pagination with a unique tiebreaker, never materializes the full set. Adoption: OpsConfigEventDoc.findFiltered becomes a thin wrapper; every future list surface uses it. Review rule: a list API without a cursor is a defect.
+4. **Binary provenance — @git.zone/tsrust 1.7.0.** Every built binary gets a JSON trailer (project, version, git commit, target, builtAt, tsrust version); `tsrust inspect <binary>` prints it. Adoption: bump tsrust across the Rust-bridge repos (smartdb, smartproxy, smartmta, smartnetwork, coretraffic, remoteingress) on their next releases; deployment verification can then assert binary identity instead of guessing (see the strings-on-x86 pitfall in smartdb readme.hints.md).
+
+## Sequenced (do NOT start mid-wave)
+
+5. **Ops-handler base class (dcrouter).** 25 handler files carry 11 copies of the requireAuth wrapper and 49 hand-written "manager not initialized" guards. Introduce a base with `registerMethod(name, scope, handlerFn)` doing auth, manager guard, error boundary, and realtime invalidation; migrate handlers opportunistically (new handlers must use it; old ones migrate when touched).
+6. **Composition-root service table (dcrouter).** classes.dcrouter.ts (2,326 lines) has 20 near-identical addService blocks with drift (withRetry presence, error logging). Replace with a declarative registration table; behavior-preserving.
+7. **Mail-detail contract dedup (interfaces + catalog + dcrouter).** IEmailDetail and friends exist twice by convention ("matches @serve.zone/catalog"). Move the contract into @serve.zone/interfaces; catalog and dcrouter consume it. Sequence AFTER the in-flight mail-detail wave (countdown, verdicts, transfer stats) fully lands — one migration wave, no compatibility layer.
+8. **Version-skew hardening (conventions).** (a) Tolerant-reader parsing for persisted operation/evidence/state documents that cross release boundaries; (b) version handshake wherever a live process or socket is reused across upgrades (LocalSmartDb engine reuse — smartdb plan Track 6; gateway-client policyGeneration is the precedent).
+
+## Non-goals
+
+- No big-bang rewrites: every item lands either additive-upstream or inside a surface's next natural release.
+- No compatibility layers (org rule): consumers move to the canonical helpers outright when their wave touches the code.

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '18.2.1',
+  version: '18.3.0',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

package/ts/db/documents/classes.cached.email.ts

@@ -2,6 +2,7 @@ import * as plugins from '../../plugins.js';
 import { DcRouterDb } from '../classes.dcrouter-db.js';
 
 const TTL = plugins.smartdata.smartdataTtlValues;
+const DB_OPERATION_TIMEOUT_MS = 5_000;
 
 /**
  * Email status in the cache
@@ -14,6 +15,19 @@ export type TCachedEmailStatus = 'pending' | 'processing' | 'queued' | 'delivere
  */
 export type TCachedEmailDirection = 'inbound' | 'outbound';
 
+export interface ICachedEmailListFilter {
+  direction?: TCachedEmailDirection;
+  recipientDomain?: string;
+  search?: string;
+}
+
+export interface ICachedEmailTrafficBucket {
+  bucketStart: number;
+  sent: number;
+  received: number;
+  failed: number;
+}
+
 export type TCachedEmailSmtpDeliveryPhase =
   | 'connect'
   | 'greeting'
@@ -222,6 +236,7 @@ export class CachedEmail extends plugins.smartdata.SmartdataCachedDocument<Cache
   /**
    * Epoch ms when the message was accepted (for newest-first listings)
    */
+  @plugins.smartdata.index()
   @plugins.smartdata.svDb()
   public acceptedAt: number = 0;
 
@@ -366,21 +381,140 @@ export class CachedEmail extends plugins.smartdata.SmartdataCachedDocument<Cache
     }
   }
 
+  private static getNativeCollection() {
+    return getDb().mongoDb.collection('CachedEmail');
+  }
+
+  private static buildListQuery(filterArg: ICachedEmailListFilter): Record<string, any> {
+    const query: Record<string, any> = {};
+    if (filterArg.direction) {
+      query.direction = filterArg.direction;
+    }
+    if (filterArg.recipientDomain) {
+      query.recipientDomains = filterArg.recipientDomain.toLowerCase();
+    }
+    if (filterArg.search) {
+      if (typeof filterArg.search !== 'string' || filterArg.search.length > 200) {
+        throw new Error('Invalid CachedEmail search');
+      }
+      const escapedSearch = filterArg.search.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+      query.$or = [
+        { from: { $regex: escapedSearch, $options: 'i' } },
+        { to: { $regex: escapedSearch, $options: 'i' } },
+        { subject: { $regex: escapedSearch, $options: 'i' } },
+        { messageId: { $regex: escapedSearch, $options: 'i' } },
+      ];
+    }
+    return query;
+  }
+
   /**
    * Find the most recently accepted emails, newest first.
    */
   public static async findRecent(
     limit = 200,
-    filter: { direction?: TCachedEmailDirection; recipientDomain?: string } = {},
+    filter: ICachedEmailListFilter = {},
   ): Promise<CachedEmail[]> {
-    const query: Record<string, any> = {};
-    if (filter.direction) {
-      query.direction = filter.direction;
+    const query = CachedEmail.buildListQuery(filter);
+    return await CachedEmail.findLimited(query, limit, { acceptedAt: -1 });
+  }
+
+  public static async findOldestAcceptedAt(
+    filterArg: ICachedEmailListFilter,
+    cutoffArg: number,
+  ): Promise<number | null> {
+    if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
+      throw new Error('CachedEmail.findOldestAcceptedAt requires a valid cutoff');
     }
-    if (filter.recipientDomain) {
-      query.recipientDomains = filter.recipientDomain.toLowerCase();
+    const query = CachedEmail.buildListQuery(filterArg);
+    query.acceptedAt = { $gte: cutoffArg };
+    const collection = await CachedEmail.getNativeCollection();
+    const row = await collection.findOne(
+      query,
+      {
+        projection: { acceptedAt: 1 },
+        sort: { acceptedAt: 1 },
+        timeoutMS: DB_OPERATION_TIMEOUT_MS,
+      },
+    );
+    const acceptedAt = Number(row?.acceptedAt);
+    return Number.isSafeInteger(acceptedAt) && acceptedAt >= 0 ? acceptedAt : null;
+  }
+
+  public static async aggregateEmailLogTraffic(
+    filterArg: ICachedEmailListFilter,
+    windowStartArg: number,
+    windowEndArg: number,
+    bucketSizeMsArg: number,
+  ): Promise<ICachedEmailTrafficBucket[]> {
+    if (
+      !Number.isSafeInteger(windowStartArg)
+      || !Number.isSafeInteger(windowEndArg)
+      || !Number.isSafeInteger(bucketSizeMsArg)
+      || windowStartArg < 0
+      || windowEndArg < windowStartArg
+      || bucketSizeMsArg <= 0
+    ) {
+      throw new Error('CachedEmail.aggregateEmailLogTraffic received an invalid window');
     }
-    return await CachedEmail.findLimited(query, limit, { acceptedAt: -1 });
+    const query = CachedEmail.buildListQuery(filterArg);
+    query.acceptedAt = { $gte: windowStartArg, $lte: windowEndArg };
+    const collection = await CachedEmail.getNativeCollection();
+    const cursor = collection.find(
+      query,
+      {
+        projection: { acceptedAt: 1, direction: 1, status: 1 },
+        batchSize: 1000,
+        timeoutMS: DB_OPERATION_TIMEOUT_MS,
+      },
+    );
+    try {
+      const buckets = new Map<number, ICachedEmailTrafficBucket>();
+      while (await cursor.hasNext()) {
+        const row = await cursor.next();
+        if (!row) {
+          continue;
+        }
+        const acceptedAt = Number(row.acceptedAt);
+        if (!Number.isSafeInteger(acceptedAt)) {
+          continue;
+        }
+        const bucketStart = Math.floor(acceptedAt / bucketSizeMsArg) * bucketSizeMsArg;
+        let bucket = buckets.get(bucketStart);
+        if (!bucket) {
+          bucket = { bucketStart, sent: 0, received: 0, failed: 0 };
+          buckets.set(bucketStart, bucket);
+        }
+        if (row.status === 'failed' || row.status === 'rejected') {
+          bucket.failed++;
+        } else if (row.direction === 'outbound') {
+          bucket.sent++;
+        } else if (row.direction === 'inbound') {
+          bucket.received++;
+        }
+      }
+      return [...buckets.values()].sort((firstArg, secondArg) => (
+        firstArg.bucketStart - secondArg.bucketStart
+      ));
+    } finally {
+      await cursor.close({ timeoutMS: DB_OPERATION_TIMEOUT_MS });
+    }
+  }
+
+  public static async findRecentSecurityCandidates(
+    limitArg: number,
+    cutoffArg: number,
+  ): Promise<CachedEmail[]> {
+    const safeLimit = Math.min(Math.max(Math.floor(limitArg), 1), 1000);
+    if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
+      throw new Error('CachedEmail.findRecentSecurityCandidates requires a valid cutoff');
+    }
+    return await CachedEmail.findLimited({
+      direction: 'inbound',
+      status: { $in: ['flagged', 'rejected', 'deferred'] },
+      inboundSecurityResults: { $exists: true, $ne: '' },
+      acceptedAt: { $gte: cutoffArg },
+    }, safeLimit, { acceptedAt: -1 });
   }
 
   /**

package/ts/email/classes.accepted-email-spool.ts

@@ -18,58 +18,11 @@ import type {
   UnifiedEmailServer,
 } from '@push.rocks/smartmta';
 import type { DcRouter } from '../classes.dcrouter.js';
-
-
-/** Inbound authentication verdict evaluation for acceptance semantics. */
-export interface IInboundAcceptanceEvaluation {
-  status: 'accepted' | 'flagged';
-  doubts: string[];
-  dmarcReject: boolean;
-  dmarcDomain?: string;
-}
-
-export function evaluateInboundAcceptance(securityResults: any): IInboundAcceptanceEvaluation {
-  const doubts: string[] = [];
-  let dmarcReject = false;
-  let dmarcDomain: string | undefined;
-
-  // Infrastructure failures (temperror, resolver problems) are OUR problem,
-  // not evidence against the sender — they never produce doubts.
-  const spfResult = String(securityResults?.spf?.result || '').toLowerCase();
-  if (spfResult === 'fail' || spfResult === 'softfail') {
-    doubts.push(`SPF ${spfResult} for ${securityResults?.spf?.domain || 'sender domain'}`);
-  }
-
-  // The verdict bridge emits a placeholder entry (status 'none') when a
-  // message carries no DKIM signature at all; only real failed signatures
-  // count as doubts.
-  const dkimSignatures = (Array.isArray(securityResults?.dkim) ? securityResults.dkim : [])
-    .filter((signature: any) => String(signature?.status || '').toLowerCase() !== 'none');
-  if (dkimSignatures.length > 0 && !dkimSignatures.some((signature: any) => signature?.is_valid)) {
-    doubts.push('DKIM signature(s) present but none verified');
-  }
-
-  // DMARC only matters when the sender domain publishes an enforcing policy;
-  // absent records surface as policy 'none' and are not doubts.
-  const dmarc = securityResults?.dmarc;
-  if (dmarc && dmarc.passed === false) {
-    const policy = String(dmarc.policy || '').toLowerCase();
-    const action = String(dmarc.action || '').toLowerCase();
-    if (policy === 'reject' || policy === 'quarantine' || action === 'reject' || action === 'quarantine') {
-      dmarcDomain = dmarc.domain || undefined;
-      if (action === 'reject' || policy === 'reject') {
-        dmarcReject = true;
-      }
-      doubts.push(`DMARC failed for ${dmarc.domain || 'sender domain'} (policy ${dmarc.policy || 'unknown'})`);
-    }
-  }
-  return {
-    status: doubts.length > 0 ? 'flagged' : 'accepted',
-    doubts,
-    dmarcReject,
-    dmarcDomain,
-  };
-}
+import { evaluateInboundAcceptance } from './helpers.inbound-security.js';
+export {
+  evaluateInboundAcceptance,
+  type IInboundAcceptanceEvaluation,
+} from './helpers.inbound-security.js';
 
 export const DCROUTER_CACHE_ID_HEADER = 'X-Dcrouter-Cached-Email-Id';
 const ACCEPTED_EMAIL_SPOOL_INTERVAL_MS = 60_000;

package/ts/email/helpers.email-log-traffic.ts

@@ -0,0 +1,117 @@
+import type {
+  IEmail,
+  IEmailLogTraffic,
+  TEmailLogTrafficWindow,
+} from '../../ts_interfaces/requests/email-ops.js';
+
+const MINUTE_MS = 60_000;
+const HOUR_MS = 60 * MINUTE_MS;
+const DAY_MS = 24 * HOUR_MS;
+export const EMAIL_LOG_RETENTION_MS = 30 * DAY_MS;
+export const EMAIL_LOG_SEARCH_MAX_LENGTH = 200;
+
+export interface IEmailLogTrafficWindowDescriptor {
+  window: TEmailLogTrafficWindow;
+  label: string;
+  durationMs: number;
+  bucketSizeMs: number;
+}
+
+export interface IEmailLogSparseTrafficBucket {
+  bucketStart: number;
+  sent: number;
+  received: number;
+  failed: number;
+}
+
+const trafficWindows: IEmailLogTrafficWindowDescriptor[] = [
+  { window: '24h', label: 'Email Traffic — Last 24 Hours', durationMs: DAY_MS, bucketSizeMs: MINUTE_MS },
+  { window: '7d', label: 'Email Traffic — Last 7 Days', durationMs: 7 * DAY_MS, bucketSizeMs: 15 * MINUTE_MS },
+  { window: '14d', label: 'Email Traffic — Last 14 Days', durationMs: 14 * DAY_MS, bucketSizeMs: 30 * MINUTE_MS },
+  { window: '30d', label: 'Email Traffic — Last 30 Days', durationMs: 30 * DAY_MS, bucketSizeMs: HOUR_MS },
+];
+
+export function normalizeEmailLogSearch(searchArg: unknown): string {
+  if (searchArg === undefined || searchArg === null) return '';
+  if (typeof searchArg !== 'string') {
+    throw new Error('Email log search must be a string');
+  }
+  const search = searchArg.trim();
+  if (search.length > EMAIL_LOG_SEARCH_MAX_LENGTH) {
+    throw new Error(`Email log search accepts at most ${EMAIL_LOG_SEARCH_MAX_LENGTH} characters`);
+  }
+  return search;
+}
+
+export function selectEmailLogTrafficWindow(
+  searchArg: string,
+  oldestMatchAtArg: number | null,
+  nowArg = Date.now(),
+): IEmailLogTrafficWindowDescriptor {
+  if (!searchArg || oldestMatchAtArg === null || !Number.isFinite(oldestMatchAtArg)) {
+    return trafficWindows[0];
+  }
+  return trafficWindows.find((window) => {
+    const lastBucketStart = Math.floor(nowArg / window.bucketSizeMs) * window.bucketSizeMs;
+    const windowStart = lastBucketStart - window.durationMs + window.bucketSizeMs;
+    return oldestMatchAtArg >= windowStart;
+  }) || trafficWindows.at(-1)!;
+}
+
+export function buildEmailLogTraffic(
+  descriptorArg: IEmailLogTrafficWindowDescriptor,
+  sparseBucketsArg: IEmailLogSparseTrafficBucket[],
+  nowArg = Date.now(),
+): IEmailLogTraffic {
+  const lastBucketStart = Math.floor(nowArg / descriptorArg.bucketSizeMs) * descriptorArg.bucketSizeMs;
+  const windowStart = lastBucketStart - descriptorArg.durationMs + descriptorArg.bucketSizeMs;
+  const bucketsByStart = new Map(
+    sparseBucketsArg.map((bucket) => [bucket.bucketStart, bucket]),
+  );
+  const sent: IEmailLogTraffic['sent'] = [];
+  const received: IEmailLogTraffic['received'] = [];
+  const failed: IEmailLogTraffic['failed'] = [];
+  for (
+    let timestamp = windowStart;
+    timestamp <= lastBucketStart;
+    timestamp += descriptorArg.bucketSizeMs
+  ) {
+    const bucket = bucketsByStart.get(timestamp);
+    sent.push({ timestamp, value: Math.max(0, Number(bucket?.sent || 0)) });
+    received.push({ timestamp, value: Math.max(0, Number(bucket?.received || 0)) });
+    failed.push({ timestamp, value: Math.max(0, Number(bucket?.failed || 0)) });
+  }
+  return {
+    ...descriptorArg,
+    windowStart,
+    windowEnd: nowArg,
+    sent,
+    received,
+    failed,
+  };
+}
+
+export function aggregateEmailLogTrafficInMemory(
+  emailsArg: IEmail[],
+  descriptorArg: IEmailLogTrafficWindowDescriptor,
+  nowArg = Date.now(),
+): IEmailLogSparseTrafficBucket[] {
+  const lastBucketStart = Math.floor(nowArg / descriptorArg.bucketSizeMs) * descriptorArg.bucketSizeMs;
+  const windowStart = lastBucketStart - descriptorArg.durationMs + descriptorArg.bucketSizeMs;
+  const buckets = new Map<number, IEmailLogSparseTrafficBucket>();
+  for (const email of emailsArg) {
+    const timestamp = new Date(email.timestamp).getTime();
+    if (!Number.isFinite(timestamp) || timestamp < windowStart || timestamp > nowArg) continue;
+    const bucketStart = Math.floor(timestamp / descriptorArg.bucketSizeMs) * descriptorArg.bucketSizeMs;
+    const bucket = buckets.get(bucketStart) || { bucketStart, sent: 0, received: 0, failed: 0 };
+    if (email.status === 'bounced' || email.status === 'rejected') {
+      bucket.failed++;
+    } else if (email.direction === 'outbound') {
+      bucket.sent++;
+    } else {
+      bucket.received++;
+    }
+    buckets.set(bucketStart, bucket);
+  }
+  return [...buckets.values()].sort((a, b) => a.bucketStart - b.bucketStart);
+}

package/ts/email/helpers.inbound-security.ts

@@ -0,0 +1,46 @@
+/** Inbound authentication verdict evaluation shared by SMTP acceptance and ops reporting. */
+export interface IInboundAcceptanceEvaluation {
+  status: 'accepted' | 'flagged';
+  doubts: string[];
+  dmarcReject: boolean;
+  dmarcDomain?: string;
+}
+
+export function evaluateInboundAcceptance(securityResults: any): IInboundAcceptanceEvaluation {
+  const doubts: string[] = [];
+  let dmarcReject = false;
+  let dmarcDomain: string | undefined;
+
+  // Infrastructure failures are our problem, not evidence against the sender.
+  const spfResult = String(securityResults?.spf?.result || '').toLowerCase();
+  if (spfResult === 'fail' || spfResult === 'softfail') {
+    doubts.push(`SPF ${spfResult} for ${securityResults?.spf?.domain || 'sender domain'}`);
+  }
+
+  // Ignore the placeholder emitted when no DKIM signature exists.
+  const dkimSignatures = (Array.isArray(securityResults?.dkim) ? securityResults.dkim : [])
+    .filter((signature: any) => String(signature?.status || '').toLowerCase() !== 'none');
+  if (dkimSignatures.length > 0 && !dkimSignatures.some((signature: any) => signature?.is_valid)) {
+    doubts.push('DKIM signature(s) present but none verified');
+  }
+
+  // Only enforcing DMARC policies produce a security finding.
+  const dmarc = securityResults?.dmarc;
+  if (dmarc && dmarc.passed === false) {
+    const policy = String(dmarc.policy || '').toLowerCase();
+    const action = String(dmarc.action || '').toLowerCase();
+    if (policy === 'reject' || policy === 'quarantine' || action === 'reject' || action === 'quarantine') {
+      dmarcDomain = dmarc.domain || undefined;
+      if (action === 'reject' || policy === 'reject') {
+        dmarcReject = true;
+      }
+      doubts.push(`DMARC failed for ${dmarc.domain || 'sender domain'} (policy ${dmarc.policy || 'unknown'})`);
+    }
+  }
+  return {
+    status: doubts.length > 0 ? 'flagged' : 'accepted',
+    doubts,
+    dmarcReject,
+    dmarcDomain,
+  };
+}

package/ts/email/index.ts

@@ -15,3 +15,5 @@ export * from './classes.smtp-account.manager.js';
 export * from './smtp-scram.js';
 export * from './classes.workapp-mail-manager.js';
 export * from './email-dns-records.js';
+export * from './helpers.email-log-traffic.js';
+export * from './helpers.inbound-security.js';