@serve.zone/dcrouter 18.2.1 → 18.4.0

package/dist_ts_web/elements/email/ops-view-emails.js

@@ -32,7 +32,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
     }
     return useValue ? value : void 0;
 };
-import { DeesElement, property, html, customElement, css, state, cssManager } from '@design.estate/dees-element';
+import { DeesElement, html, customElement, css, state, cssManager } from '@design.estate/dees-element';
 import * as appstate from '../../appstate.js';
 import * as shared from '../shared/index.js';
 import * as interfaces from '../../../dist_ts_interfaces/index.js';
@@ -54,6 +54,15 @@ let OpsViewEmails = (() => {
     let _isLoading_decorators;
     let _isLoading_initializers = [];
     let _isLoading_extraInitializers = [];
+    let _traffic_decorators;
+    let _traffic_initializers = [];
+    let _traffic_extraInitializers = [];
+    let _searchQuery_decorators;
+    let _searchQuery_initializers = [];
+    let _searchQuery_extraInitializers = [];
+    let _selectedRange_decorators;
+    let _selectedRange_initializers = [];
+    let _selectedRange_extraInitializers = [];
     var OpsViewEmails = class extends _classSuper {
         static { _classThis = this; }
         static {
@@ -62,10 +71,16 @@ let OpsViewEmails = (() => {
             _selectedEmail_decorators = [state()];
             _currentView_decorators = [state()];
             _isLoading_decorators = [state()];
+            _traffic_decorators = [state()];
+            _searchQuery_decorators = [state()];
+            _selectedRange_decorators = [state()];
             __esDecorate(this, null, _emails_decorators, { kind: "accessor", name: "emails", static: false, private: false, access: { has: obj => "emails" in obj, get: obj => obj.emails, set: (obj, value) => { obj.emails = value; } }, metadata: _metadata }, _emails_initializers, _emails_extraInitializers);
             __esDecorate(this, null, _selectedEmail_decorators, { kind: "accessor", name: "selectedEmail", static: false, private: false, access: { has: obj => "selectedEmail" in obj, get: obj => obj.selectedEmail, set: (obj, value) => { obj.selectedEmail = value; } }, metadata: _metadata }, _selectedEmail_initializers, _selectedEmail_extraInitializers);
             __esDecorate(this, null, _currentView_decorators, { kind: "accessor", name: "currentView", static: false, private: false, access: { has: obj => "currentView" in obj, get: obj => obj.currentView, set: (obj, value) => { obj.currentView = value; } }, metadata: _metadata }, _currentView_initializers, _currentView_extraInitializers);
             __esDecorate(this, null, _isLoading_decorators, { kind: "accessor", name: "isLoading", static: false, private: false, access: { has: obj => "isLoading" in obj, get: obj => obj.isLoading, set: (obj, value) => { obj.isLoading = value; } }, metadata: _metadata }, _isLoading_initializers, _isLoading_extraInitializers);
+            __esDecorate(this, null, _traffic_decorators, { kind: "accessor", name: "traffic", static: false, private: false, access: { has: obj => "traffic" in obj, get: obj => obj.traffic, set: (obj, value) => { obj.traffic = value; } }, metadata: _metadata }, _traffic_initializers, _traffic_extraInitializers);
+            __esDecorate(this, null, _searchQuery_decorators, { kind: "accessor", name: "searchQuery", static: false, private: false, access: { has: obj => "searchQuery" in obj, get: obj => obj.searchQuery, set: (obj, value) => { obj.searchQuery = value; } }, metadata: _metadata }, _searchQuery_initializers, _searchQuery_extraInitializers);
+            __esDecorate(this, null, _selectedRange_decorators, { kind: "accessor", name: "selectedRange", static: false, private: false, access: { has: obj => "selectedRange" in obj, get: obj => obj.selectedRange, set: (obj, value) => { obj.selectedRange = value; } }, metadata: _metadata }, _selectedRange_initializers, _selectedRange_extraInitializers);
             __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
             OpsViewEmails = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
@@ -82,13 +97,26 @@ let OpsViewEmails = (() => {
         #isLoading_accessor_storage = (__runInitializers(this, _currentView_extraInitializers), __runInitializers(this, _isLoading_initializers, false));
         get isLoading() { return this.#isLoading_accessor_storage; }
         set isLoading(value) { this.#isLoading_accessor_storage = value; }
-        stateSubscription = __runInitializers(this, _isLoading_extraInitializers);
+        #traffic_accessor_storage = (__runInitializers(this, _isLoading_extraInitializers), __runInitializers(this, _traffic_initializers, null));
+        get traffic() { return this.#traffic_accessor_storage; }
+        set traffic(value) { this.#traffic_accessor_storage = value; }
+        #searchQuery_accessor_storage = (__runInitializers(this, _traffic_extraInitializers), __runInitializers(this, _searchQuery_initializers, ''));
+        get searchQuery() { return this.#searchQuery_accessor_storage; }
+        set searchQuery(value) { this.#searchQuery_accessor_storage = value; }
+        #selectedRange_accessor_storage = (__runInitializers(this, _searchQuery_extraInitializers), __runInitializers(this, _selectedRange_initializers, null));
+        get selectedRange() { return this.#selectedRange_accessor_storage; }
+        set selectedRange(value) { this.#selectedRange_accessor_storage = value; }
+        stateSubscription = __runInitializers(this, _selectedRange_extraInitializers);
         lastEmailOpsUpdate = 0;
         detailRequestGeneration = 0;
+        searchDebounceTimer;
         async connectedCallback() {
             await super.connectedCallback();
             this.stateSubscription = appstate.emailOpsStatePart.select().subscribe((state) => {
                 this.emails = state.emails;
+                this.traffic = state.traffic;
+                this.searchQuery = state.searchQuery;
+                this.selectedRange = state.selectedRange;
                 const hasNewSnapshot = state.lastUpdated > this.lastEmailOpsUpdate;
                 this.lastEmailOpsUpdate = Math.max(this.lastEmailOpsUpdate, state.lastUpdated);
                 if (hasNewSnapshot && this.selectedEmail) {
@@ -104,6 +132,10 @@ let OpsViewEmails = (() => {
             if (this.stateSubscription) {
                 this.stateSubscription.unsubscribe();
             }
+            if (this.searchDebounceTimer !== undefined) {
+                window.clearTimeout(this.searchDebounceTimer);
+                this.searchDebounceTimer = undefined;
+            }
         }
         static styles = [
             cssManager.defaultStyles,
@@ -117,6 +149,26 @@ let OpsViewEmails = (() => {
       .viewContainer {
         height: 100%;
       }
+
+      .chartStack {
+        display: flex;
+        flex-direction: column;
+        gap: 8px;
+      }
+
+      .rangeSummary {
+        display: flex;
+        align-items: center;
+        justify-content: space-between;
+        min-height: 32px;
+        padding: 0 4px;
+        color: ${cssManager.bdTheme('#374151', '#d1d5db')};
+        font-size: 13px;
+      }
+
+      .chartStack dees-chart-area {
+        min-height: 360px;
+      }
     `,
         ];
         render() {
@@ -133,8 +185,34 @@ let OpsViewEmails = (() => {
                 : html `
               <sz-mta-list-view
                 .emails=${this.emails}
+                .searchQuery=${this.searchQuery}
+                .stickyFilterBar=${true}
+                @search-change=${this.handleSearchChange}
                 @email-click=${this.handleEmailClick}
-              ></sz-mta-list-view>
+              >
+                ${this.traffic ? html `
+                  <div slot="above-table" class="chartStack">
+                    ${this.selectedRange ? html `
+                      <div class="rangeSummary">
+                        <span>${this.formatSelectedRange()}</span>
+                        <dees-button @click=${this.clearSelectedRange}>Clear time range</dees-button>
+                      </div>
+                    ` : html ``}
+                    <dees-chart-area
+                      .label=${this.traffic.label}
+                      .series=${this.getEmailTrafficSeries()}
+                      .realtimeMode=${true}
+                      .rollingWindow=${this.traffic.durationMs}
+                      .legendStats=${['latest']}
+                      .chartLines=${[]}
+                      .rangeSelectionEnabled=${true}
+                      .selectedRange=${this.selectedRange}
+                      .yAxisFormatter=${(valueArg) => `${valueArg}`}
+                      @range-change=${this.handleRangeChange}
+                    ></dees-chart-area>
+                  </div>
+                ` : html ``}
+              </sz-mta-list-view>
             `}
       </div>
     `;
@@ -162,6 +240,52 @@ let OpsViewEmails = (() => {
         async handleEmailClick(e) {
             await this.refreshEmailDetail(e.detail.id, true);
         }
+        handleSearchChange(eventArg) {
+            const searchQuery = appstate.setActiveEmailSearchQuery(eventArg.detail.searchQuery);
+            if (this.searchDebounceTimer !== undefined) {
+                window.clearTimeout(this.searchDebounceTimer);
+            }
+            this.searchDebounceTimer = window.setTimeout(() => {
+                this.searchDebounceTimer = undefined;
+                void appstate.emailOpsStatePart.dispatchAction(appstate.fetchAllEmailsAction, { searchQuery });
+            }, 300);
+        }
+        handleRangeChange = (eventArg) => {
+            void appstate.emailOpsStatePart.dispatchAction(appstate.fetchAllEmailsAction, { selectedRange: eventArg.detail });
+        };
+        clearSelectedRange = () => {
+            void appstate.emailOpsStatePart.dispatchAction(appstate.fetchAllEmailsAction, { selectedRange: null });
+        };
+        formatSelectedRange() {
+            if (!this.selectedRange)
+                return '';
+            const formatter = new Intl.DateTimeFormat(undefined, {
+                dateStyle: 'medium',
+                timeStyle: 'short',
+            });
+            return `Showing emails from ${formatter.format(this.selectedRange.from)} to ${formatter.format(this.selectedRange.to)}`;
+        }
+        getEmailTrafficSeries() {
+            if (!this.traffic)
+                return [];
+            return [
+                {
+                    name: 'Sent',
+                    color: '#22c55e',
+                    data: this.traffic.sent.map((point) => ({ x: point.timestamp, y: point.value })),
+                },
+                {
+                    name: 'Received',
+                    color: '#3b82f6',
+                    data: this.traffic.received.map((point) => ({ x: point.timestamp, y: point.value })),
+                },
+                {
+                    name: 'Failed',
+                    color: '#ef4444',
+                    data: this.traffic.failed.map((point) => ({ x: point.timestamp, y: point.value })),
+                },
+            ];
+        }
         handleBack() {
             this.detailRequestGeneration++;
             this.selectedEmail = null;
@@ -174,4 +298,4 @@ let OpsViewEmails = (() => {
     return OpsViewEmails = _classThis;
 })();
 export { OpsViewEmails };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoib3BzLXZpZXctZW1haWxzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vdHNfd2ViL2VsZW1lbnRzL2VtYWlsL29wcy12aWV3LWVtYWlscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsT0FBTyxFQUFFLFdBQVcsRUFBRSxRQUFRLEVBQUUsSUFBSSxFQUFFLGFBQWEsRUFBdUIsR0FBRyxFQUFFLEtBQUssRUFBRSxVQUFVLEVBQUUsTUFBTSw2QkFBNkIsQ0FBQztBQUN0SSxPQUFPLEtBQUssUUFBUSxNQUFNLG1CQUFtQixDQUFDO0FBQzlDLE9BQU8sS0FBSyxNQUFNLE1BQU0sb0JBQW9CLENBQUM7QUFDN0MsT0FBTyxLQUFLLFVBQVUsTUFBTSxzQ0FBc0MsQ0FBQztJQVN0RCxhQUFhOzRCQUR6QixhQUFhLENBQUMsaUJBQWlCLENBQUM7Ozs7c0JBQ0UsV0FBVzs7Ozs7Ozs7Ozs7Ozs2QkFBbkIsU0FBUSxXQUFXOzs7O2tDQUMzQyxLQUFLLEVBQUU7eUNBR1AsS0FBSyxFQUFFO3VDQUdQLEtBQUssRUFBRTtxQ0FHUCxLQUFLLEVBQUU7WUFSUix1S0FBUyxNQUFNLDZCQUFOLE1BQU0sdUZBQW9DO1lBR25ELDRMQUFTLGFBQWEsNkJBQWIsYUFBYSxxR0FBaUQ7WUFHdkUsc0xBQVMsV0FBVyw2QkFBWCxXQUFXLGlHQUE2QjtZQUdqRCxnTEFBUyxTQUFTLDZCQUFULFNBQVMsNkZBQVM7WUFYN0IsNktBdUdDOzs7O1FBckdDLHlFQUFnRCxFQUFFLEVBQUM7UUFBbkQsSUFBUyxNQUFNLDRDQUFvQztRQUFuRCxJQUFTLE1BQU0sa0RBQW9DO1FBR25ELDRJQUFrRSxJQUFJLEdBQUM7UUFBdkUsSUFBUyxhQUFhLG1EQUFpRDtRQUF2RSxJQUFTLGFBQWEseURBQWlEO1FBR3ZFLCtJQUEwQyxNQUFNLEdBQUM7UUFBakQsSUFBUyxXQUFXLGlEQUE2QjtRQUFqRCxJQUFTLFdBQVcsdURBQTZCO1FBR2pELHlJQUFxQixLQUFLLEdBQUM7UUFBM0IsSUFBUyxTQUFTLCtDQUFTO1FBQTNCLElBQVMsU0FBUyxxREFBUztRQUVuQixpQkFBaUIseURBQU07UUFDdkIsa0JBQWtCLEdBQUcsQ0FBQyxDQUFDO1FBQ3ZCLHVCQUF1QixHQUFHLENBQUMsQ0FBQztRQUVwQyxLQUFLLENBQUMsaUJBQWlCO1lBQ3JCLE1BQU0sS0FBSyxDQUFDLGlCQUFpQixFQUFFLENBQUM7WUFDaEMsSUFBSSxDQUFDLGlCQUFpQixHQUFHLFFBQVEsQ0FBQyxpQkFBaUIsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxTQUFTLENBQUMsQ0FBQyxLQUFLLEVBQUUsRUFBRTtnQkFDL0UsSUFBSSxDQUFDLE1BQU0sR0FBRyxLQUFLLENBQUMsTUFBTSxDQUFDO2dCQUMzQixNQUFNLGNBQWMsR0FBRyxLQUFLLENBQUMsV0FBVyxHQUFHLElBQUksQ0FBQyxrQkFBa0IsQ0FBQztnQkFDbkUsSUFBSSxDQUFDLGtCQUFrQixHQUFHLElBQUksQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLGtCQUFrQixFQUFFLEtBQUssQ0FBQyxXQUFXLENBQUMsQ0FBQztnQkFDL0UsSUFBSSxjQUFjLElBQUksSUFBSSxDQUFDLGFBQWEsRUFBRSxDQUFDO29CQUN6QyxLQUFLLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxJQUFJLENBQUMsYUFBYSxDQUFDLEVBQUUsQ0FBQyxDQUFDO2dCQUN0RCxDQUFDO2dCQUNELElBQUksQ0FBQyxTQUFTLEdBQUcsS0FBSyxDQUFDLFNBQVMsQ0FBQztZQUNuQyxDQUFDLENBQUMsQ0FBQztZQUNILGdCQUFnQjtZQUNoQixNQUFNLFFBQVEsQ0FBQyxpQkFBaUIsQ0FBQyxjQUFjLENBQUMsUUFBUSxDQUFDLG9CQUFvQixFQUFFLElBQUksQ0FBQyxDQUFDO1FBQ3ZGLENBQUM7UUFFRCxLQUFLLENBQUMsb0JBQW9CO1lBQ3hCLE1BQU0sS0FBSyxDQUFDLG9CQUFvQixFQUFFLENBQUM7WUFDbkMsSUFBSSxJQUFJLENBQUMsaUJBQWlCLEVBQUUsQ0FBQztnQkFDM0IsSUFBSSxDQUFDLGlCQUFpQixDQUFDLFdBQVcsRUFBRSxDQUFDO1lBQ3ZDLENBQUM7UUFDSCxDQUFDO1FBRU0sTUFBTSxDQUFDLE1BQU0sR0FBRztZQUNyQixVQUFVLENBQUMsYUFBYTtZQUN4QixNQUFNLENBQUMsV0FBVztZQUNsQixHQUFHLENBQUE7Ozs7Ozs7OztLQVNGO1NBQ0YsQ0FBQztRQUVLLE1BQU07WUFDWCxPQUFPLElBQUksQ0FBQTs7O1VBR0wsSUFBSSxDQUFDLFdBQVcsS0FBSyxRQUFRLElBQUksSUFBSSxDQUFDLGFBQWE7Z0JBQ25ELENBQUMsQ0FBQyxJQUFJLENBQUE7O3lCQUVTLElBQUksQ0FBQyxhQUFhO3dCQUNuQixJQUFJLENBQUMsVUFBVTs7YUFFMUI7Z0JBQ0gsQ0FBQyxDQUFDLElBQUksQ0FBQTs7MEJBRVUsSUFBSSxDQUFDLE1BQU07K0JBQ04sSUFBSSxDQUFDLGdCQUFnQjs7YUFHNUM7O0tBRUgsQ0FBQztRQUNKLENBQUM7UUFFTyxLQUFLLENBQUMsa0JBQWtCLENBQUMsVUFBa0IsRUFBRSxhQUFhLEdBQUcsS0FBSztZQUN4RSxNQUFNLGlCQUFpQixHQUFHLEVBQUUsSUFBSSxDQUFDLHVCQUF1QixDQUFDO1lBQ3pELElBQUksQ0FBQztnQkFDSCxNQUFNLEtBQUssR0FBRyxNQUFNLFFBQVEsQ0FBQyx3QkFBd0IsQ0FBQyxVQUFVLENBQUMsQ0FBQztnQkFDbEUsSUFBSSxpQkFBaUIsS0FBSyxJQUFJLENBQUMsdUJBQXVCO29CQUFFLE9BQU87Z0JBQy9ELElBQUksS0FBSyxFQUFFLENBQUM7b0JBQ1YsSUFBSSxDQUFDLGFBQWEsR0FBRyxLQUFLLENBQUM7b0JBQzNCLElBQUksYUFBYSxFQUFFLENBQUM7d0JBQ2xCLElBQUksQ0FBQyxXQUFXLEdBQUcsUUFBUSxDQUFDO29CQUM5QixDQUFDO2dCQUNILENBQUM7cUJBQU0sSUFBSSxJQUFJLENBQUMsYUFBYSxFQUFFLEVBQUUsS0FBSyxVQUFVLEVBQUUsQ0FBQztvQkFDakQsSUFBSSxDQUFDLFVBQVUsRUFBRSxDQUFDO2dCQUNwQixDQUFDO1lBQ0gsQ0FBQztZQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7Z0JBQ2YsT0FBTyxDQUFDLEtBQUssQ0FBQywrQkFBK0IsRUFBRSxLQUFLLENBQUMsQ0FBQztZQUN4RCxDQUFDO1FBQ0gsQ0FBQztRQUVPLEtBQUssQ0FBQyxnQkFBZ0IsQ0FBQyxDQUEwQztZQUN2RSxNQUFNLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsRUFBRSxJQUFJLENBQUMsQ0FBQztRQUNuRCxDQUFDO1FBRU8sVUFBVTtZQUNoQixJQUFJLENBQUMsdUJBQXVCLEVBQUUsQ0FBQztZQUMvQixJQUFJLENBQUMsYUFBYSxHQUFHLElBQUksQ0FBQztZQUMxQixJQUFJLENBQUMsV0FBVyxHQUFHLE1BQU0sQ0FBQztRQUM1QixDQUFDOztZQXRHVSx1REFBYTs7Ozs7U0FBYixhQUFhIn0=
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@serve.zone/dcrouter",
   "private": false,
-  "version": "18.2.1",
+  "version": "18.4.0",
   "description": "A multifaceted routing service handling mail and SMS delivery functions.",
   "type": "module",
   "bin": {
@@ -20,7 +20,7 @@
     "@git.zone/tsdeno": "^1.7.0",
     "@git.zone/tsdocker": "^3.1.0",
     "@git.zone/tsrun": "^2.0.5",
-    "@git.zone/tstest": "^3.6.6",
+    "@git.zone/tstest": "^3.6.7",
     "@git.zone/tswatch": "^3.3.5",
     "@types/node": "26.1.1",
     "@types/web-push": "3.6.4"
@@ -31,7 +31,7 @@
     "@api.global/typedserver": "^8.6.4",
     "@api.global/typedsocket": "^5.0.0",
     "@apiclient.xyz/cloudflare": "^7.1.0",
-    "@design.estate/dees-catalog": "^3.98.1",
+    "@design.estate/dees-catalog": "^3.99.0",
     "@design.estate/dees-element": "^2.4.0",
     "@idp.global/sdk": "^14.3.0",
     "@push.rocks/lik": "^6.4.1",
@@ -50,7 +50,7 @@
     "@push.rocks/smartmcp": "^0.3.0",
     "@push.rocks/smartmetrics": "^3.0.3",
     "@push.rocks/smartmigration": "1.4.1",
-    "@push.rocks/smartmta": "^9.3.0",
+    "@push.rocks/smartmta": "^9.4.0",
     "@push.rocks/smartnetwork": "^4.8.0",
     "@push.rocks/smartpath": "^6.0.0",
     "@push.rocks/smartpromise": "^4.2.4",
@@ -63,9 +63,9 @@
     "@push.rocks/smartunique": "^3.0.10",
     "@push.rocks/smartvpn": "1.22.0",
     "@push.rocks/taskbuffer": "^8.0.2",
-    "@serve.zone/catalog": "^2.19.0",
+    "@serve.zone/catalog": "^2.21.0",
     "@serve.zone/interfaces": "^19.2.0",
-    "@serve.zone/remoteingress": "^5.0.3",
+    "@serve.zone/remoteingress": "^5.1.0",
     "@tsclass/tsclass": "^9.5.1",
     "@types/qrcode": "^1.5.6",
     "ipaddr.js": "^2.4.0",

package/readme.md

@@ -474,6 +474,25 @@ Use `@serve.zone/dcrouter/interfaces` or `@serve.zone/dcrouter-interfaces` when
 
 Gateway-client mail contracts let Cloudly or Onebox claim exact app addresses, attach inbound `smtpForward` targets, enable managed outbound SMTP credentials, rotate those credentials, enqueue service mail, and query delivery status through TypedRequest. Managed SMTP users can only send as their exact claimed address; mismatched envelope or header `From` values are rejected before relay. Delivery status queries return the dcrouter spool item state, including deferred SmartMTA errors and next retry timestamps when outbound delivery is temporarily delayed.
 
+### Email Operations Views
+
+The Email Log keeps its search controls sticky and renders the traffic chart
+above the message table. With no query, the chart covers the latest 24 hours.
+Searches expand the chart window to the smallest supported period that contains
+matching retained messages (7, 14, or 30 days). Dragging across the chart
+selects an epoch-millisecond time range for the table while the chart continues
+to show the complete search context; clearing the selection restores the full
+result list.
+
+Inbound messages persist a separate security disposition:
+`accepted`, `flagged`, or `rejected`. SPF, DKIM, or DMARC findings therefore
+remain visible in Email Security without overwriting the transport/delivery
+status. The security table shows time, sender, recipients, subject, and the
+specific authentication failure. Sent-message detail exposes the asynchronous
+outbound authentication self-check based on the exact post-DKIM bytes and the
+actual RemoteIngress source address. It is diagnostic evidence, not a receipt
+from the destination server.
+
 ### RemoteIngress SMTP Egress
 
 The email settings API and Ops UI expose `outboundMode`. Keep it at `direct` to let SmartMTA dial destination MX hosts from the dcrouter hub. Set it to `remoteIngress` to make SmartMTA request a one-shot RemoteIngress TCP egress proxy for each outbound SMTP connection while keeping the logical MX host and port for SMTP/TLS identity.

package/readme.plan.md

@@ -0,0 +1,22 @@
+# Platform refactoring program
+
+Status: approved 2026-07-21, derived from that day's incident ledger (deploy-verification crashes, unbounded scans, DNS/IP logic duplication, version-skew scares). Upstream foundations are RELEASED; consumer adoption and the dcrouter-internal refactors are sequenced below — do not start them mid-wave, fold them into the next natural release of each surface.
+
+## Shipped upstream (adopt on next dependency bump)
+
+1. **Typed-request error boundary — already existed.** @api.global/typedrequest ≥ 3.3.2 sanitizes every handler/middleware throw into a structured error envelope (no socket destruction). Action: ensure every deployed consumer (cloudly, dcrouter, coreflow, onebox) resolves ≥ 3.3.2 and remove any local try/catch layers that only re-implement it.
+2. **Canonical IP helpers — @push.rocks/smartnetwork 4.9.0.** `isPublicIpAddress`, `toReverseDnsName` (non-throwing), `expandIpv6`, alongside the existing `getIpVersion`/`isValidIpv4`/`isValidIpv6`. Adoption: dcrouter ts/email/classes.mail-dns-sync.ts drops its private `toReverseDnsName`/`expandIpv6` (and the `Invalid IP address:` throw); cloudly's `isPublicDeploymentAddress` (classes.deploymentoperationmanager.ts) delegates to `isPublicIpAddress` (IPv4 semantics are byte-identical; IPv6 is 2000::/3 minus 2001:db8::/32).
+3. **Cursor pagination as the org default — @push.rocks/smartdata 7.4.0.** `SmartDataDbDoc.getPagedInstances({ filter, sortField, sortDirection, uniqueField, limit ≤ 1000, cursor, withTotal })` — seek pagination with a unique tiebreaker, never materializes the full set. Adoption: OpsConfigEventDoc.findFiltered becomes a thin wrapper; every future list surface uses it. Review rule: a list API without a cursor is a defect.
+4. **Binary provenance — @git.zone/tsrust 1.7.0.** Every built binary gets a JSON trailer (project, version, git commit, target, builtAt, tsrust version); `tsrust inspect <binary>` prints it. Adoption: bump tsrust across the Rust-bridge repos (smartdb, smartproxy, smartmta, smartnetwork, coretraffic, remoteingress) on their next releases; deployment verification can then assert binary identity instead of guessing (see the strings-on-x86 pitfall in smartdb readme.hints.md).
+
+## Sequenced (do NOT start mid-wave)
+
+5. **Ops-handler base class (dcrouter).** 25 handler files carry 11 copies of the requireAuth wrapper and 49 hand-written "manager not initialized" guards. Introduce a base with `registerMethod(name, scope, handlerFn)` doing auth, manager guard, error boundary, and realtime invalidation; migrate handlers opportunistically (new handlers must use it; old ones migrate when touched).
+6. **Composition-root service table (dcrouter).** classes.dcrouter.ts (2,326 lines) has 20 near-identical addService blocks with drift (withRetry presence, error logging). Replace with a declarative registration table; behavior-preserving.
+7. **Mail-detail contract dedup (interfaces + catalog + dcrouter).** IEmailDetail and friends exist twice by convention ("matches @serve.zone/catalog"). Move the contract into @serve.zone/interfaces; catalog and dcrouter consume it. Sequence AFTER the in-flight mail-detail wave (countdown, verdicts, transfer stats) fully lands — one migration wave, no compatibility layer.
+8. **Version-skew hardening (conventions).** (a) Tolerant-reader parsing for persisted operation/evidence/state documents that cross release boundaries; (b) version handshake wherever a live process or socket is reused across upgrades (LocalSmartDb engine reuse — smartdb plan Track 6; gateway-client policyGeneration is the precedent).
+
+## Non-goals
+
+- No big-bang rewrites: every item lands either additive-upstream or inside a surface's next natural release.
+- No compatibility layers (org rule): consumers move to the canonical helpers outright when their wave touches the code.

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '18.2.1',
+  version: '18.4.0',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

package/ts/classes.dcrouter.ts

@@ -2142,6 +2142,13 @@ export class DcRouter {
           await this.acceptedEmailSpool.trackSmtpTransaction(transaction, emailServer);
         },
       );
+      this.addEmailEventSubscription(
+        emailServer.deliverySystem,
+        'smtpTransactionUpdated',
+        async (transaction: import('./db/documents/classes.cached.email.js').ICachedEmailSmtpTransaction) => {
+          await this.acceptedEmailSpool.trackSmtpTransaction(transaction, emailServer);
+        },
+      );
 
       // Wire delivery events to MetricsManager and logger using smartmta's public queue APIs.
       if (this.metricsManager) {

package/ts/db/documents/classes.cached.email.ts

@@ -2,6 +2,7 @@ import * as plugins from '../../plugins.js';
 import { DcRouterDb } from '../classes.dcrouter-db.js';
 
 const TTL = plugins.smartdata.smartdataTtlValues;
+const DB_OPERATION_TIMEOUT_MS = 5_000;
 
 /**
  * Email status in the cache
@@ -13,6 +14,22 @@ export type TCachedEmailStatus = 'pending' | 'processing' | 'queued' | 'delivere
  * 'outbound' = locally submitted for delivery.
  */
 export type TCachedEmailDirection = 'inbound' | 'outbound';
+export type TCachedEmailSecurityDisposition = 'accepted' | 'flagged' | 'rejected';
+
+export interface ICachedEmailListFilter {
+  direction?: TCachedEmailDirection;
+  recipientDomain?: string;
+  search?: string;
+  from?: number;
+  to?: number;
+}
+
+export interface ICachedEmailTrafficBucket {
+  bucketStart: number;
+  sent: number;
+  received: number;
+  failed: number;
+}
 
 export type TCachedEmailSmtpDeliveryPhase =
   | 'connect'
@@ -53,6 +70,7 @@ export interface ICachedEmailSmtpTransaction {
   }>;
   failurePhase?: TCachedEmailSmtpDeliveryPhase;
   error?: string;
+  outboundAuthentication?: ICachedEmailOutboundAuthenticationCheck;
   transcript: Array<{
     timestampMs: number;
     phase: TCachedEmailSmtpDeliveryPhase;
@@ -62,6 +80,40 @@ export interface ICachedEmailSmtpTransaction {
   }>;
 }
 
+export interface ICachedEmailOutboundAuthenticationCheck {
+  state: 'pending' | 'completed' | 'indeterminate' | 'not-evaluated';
+  overall: 'pass' | 'fail' | 'indeterminate';
+  checkedAt: string;
+  signedMessageSha256?: string;
+  error?: string;
+  identity?: {
+    sourceIp: string;
+    addressFamily: 'ipv4' | 'ipv6';
+    heloDomain: string;
+    receiverHostname: string;
+    envelopeFrom: string;
+    dkimDomain?: string;
+    dkimSelector?: string;
+  };
+  dkim?: Array<{
+    is_valid: boolean;
+    domain: string | null;
+    selector: string | null;
+    status: string;
+    details: string | null;
+  }>;
+  spf?: { result: string; domain: string; ip: string; explanation: string | null } | null;
+  dmarc?: {
+    passed: boolean;
+    policy: string;
+    domain: string;
+    dkim_result: string;
+    spf_result: string;
+    action: string;
+    details: string | null;
+  } | null;
+}
+
 /**
  * Helper to get the smartdata database instance
  */
@@ -161,6 +213,11 @@ export class CachedEmail extends plugins.smartdata.SmartdataCachedDocument<Cache
   @plugins.smartdata.svDb()
   public inboundSecurityResults?: string;
 
+  /** Authentication disposition, kept separate from delivery/lifecycle status. */
+  @plugins.smartdata.index()
+  @plugins.smartdata.svDb()
+  public inboundSecurityDisposition?: TCachedEmailSecurityDisposition;
+
   /**
    * Number of delivery attempts
    */
@@ -222,6 +279,7 @@ export class CachedEmail extends plugins.smartdata.SmartdataCachedDocument<Cache
   /**
    * Epoch ms when the message was accepted (for newest-first listings)
    */
+  @plugins.smartdata.index()
   @plugins.smartdata.svDb()
   public acceptedAt: number = 0;
 
@@ -276,6 +334,9 @@ export class CachedEmail extends plugins.smartdata.SmartdataCachedDocument<Cache
     if (this.rawContentObjectKey) {
       delete savableObject.rawContent;
     }
+    if (this.inboundSecurityDisposition === undefined) {
+      delete savableObject.inboundSecurityDisposition;
+    }
     return savableObject;
   }
 
@@ -366,21 +427,152 @@ export class CachedEmail extends plugins.smartdata.SmartdataCachedDocument<Cache
     }
   }
 
+  private static getNativeCollection() {
+    return getDb().mongoDb.collection('CachedEmail');
+  }
+
+  private static buildListQuery(filterArg: ICachedEmailListFilter): Record<string, any> {
+    const query: Record<string, any> = {};
+    if (filterArg.direction) {
+      query.direction = filterArg.direction;
+    }
+    if (filterArg.recipientDomain) {
+      query.recipientDomains = filterArg.recipientDomain.toLowerCase();
+    }
+    if (filterArg.search) {
+      if (typeof filterArg.search !== 'string' || filterArg.search.length > 200) {
+        throw new Error('Invalid CachedEmail search');
+      }
+      const escapedSearch = filterArg.search.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+      query.$or = [
+        { from: { $regex: escapedSearch, $options: 'i' } },
+        { to: { $regex: escapedSearch, $options: 'i' } },
+        { subject: { $regex: escapedSearch, $options: 'i' } },
+        { messageId: { $regex: escapedSearch, $options: 'i' } },
+      ];
+    }
+    if (filterArg.from !== undefined || filterArg.to !== undefined) {
+      const from = filterArg.from;
+      const to = filterArg.to;
+      if (
+        !Number.isSafeInteger(from)
+        || !Number.isSafeInteger(to)
+        || (from as number) < 0
+        || (to as number) < (from as number)
+      ) {
+        throw new Error('Invalid CachedEmail time range');
+      }
+      query.acceptedAt = { $gte: from, $lte: to };
+    }
+    return query;
+  }
+
   /**
    * Find the most recently accepted emails, newest first.
    */
   public static async findRecent(
     limit = 200,
-    filter: { direction?: TCachedEmailDirection; recipientDomain?: string } = {},
+    filter: ICachedEmailListFilter = {},
   ): Promise<CachedEmail[]> {
-    const query: Record<string, any> = {};
-    if (filter.direction) {
-      query.direction = filter.direction;
+    const query = CachedEmail.buildListQuery(filter);
+    return await CachedEmail.findLimited(query, limit, { acceptedAt: -1 });
+  }
+
+  public static async findOldestAcceptedAt(
+    filterArg: ICachedEmailListFilter,
+    cutoffArg: number,
+  ): Promise<number | null> {
+    if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
+      throw new Error('CachedEmail.findOldestAcceptedAt requires a valid cutoff');
+    }
+    const query = CachedEmail.buildListQuery(filterArg);
+    query.acceptedAt = { $gte: cutoffArg };
+    const collection = await CachedEmail.getNativeCollection();
+    const row = await collection.findOne(
+      query,
+      {
+        projection: { acceptedAt: 1 },
+        sort: { acceptedAt: 1 },
+        timeoutMS: DB_OPERATION_TIMEOUT_MS,
+      },
+    );
+    const acceptedAt = Number(row?.acceptedAt);
+    return Number.isSafeInteger(acceptedAt) && acceptedAt >= 0 ? acceptedAt : null;
+  }
+
+  public static async aggregateEmailLogTraffic(
+    filterArg: ICachedEmailListFilter,
+    windowStartArg: number,
+    windowEndArg: number,
+    bucketSizeMsArg: number,
+  ): Promise<ICachedEmailTrafficBucket[]> {
+    if (
+      !Number.isSafeInteger(windowStartArg)
+      || !Number.isSafeInteger(windowEndArg)
+      || !Number.isSafeInteger(bucketSizeMsArg)
+      || windowStartArg < 0
+      || windowEndArg < windowStartArg
+      || bucketSizeMsArg <= 0
+    ) {
+      throw new Error('CachedEmail.aggregateEmailLogTraffic received an invalid window');
     }
-    if (filter.recipientDomain) {
-      query.recipientDomains = filter.recipientDomain.toLowerCase();
+    const query = CachedEmail.buildListQuery(filterArg);
+    query.acceptedAt = { $gte: windowStartArg, $lte: windowEndArg };
+    const collection = await CachedEmail.getNativeCollection();
+    const cursor = collection.find(
+      query,
+      {
+        projection: { acceptedAt: 1, direction: 1, status: 1 },
+        batchSize: 1000,
+        timeoutMS: DB_OPERATION_TIMEOUT_MS,
+      },
+    );
+    try {
+      const buckets = new Map<number, ICachedEmailTrafficBucket>();
+      while (await cursor.hasNext()) {
+        const row = await cursor.next();
+        if (!row) {
+          continue;
+        }
+        const acceptedAt = Number(row.acceptedAt);
+        if (!Number.isSafeInteger(acceptedAt)) {
+          continue;
+        }
+        const bucketStart = Math.floor(acceptedAt / bucketSizeMsArg) * bucketSizeMsArg;
+        let bucket = buckets.get(bucketStart);
+        if (!bucket) {
+          bucket = { bucketStart, sent: 0, received: 0, failed: 0 };
+          buckets.set(bucketStart, bucket);
+        }
+        if (row.status === 'failed' || row.status === 'rejected') {
+          bucket.failed++;
+        } else if (row.direction === 'outbound') {
+          bucket.sent++;
+        } else if (row.direction === 'inbound') {
+          bucket.received++;
+        }
+      }
+      return [...buckets.values()].sort((firstArg, secondArg) => (
+        firstArg.bucketStart - secondArg.bucketStart
+      ));
+    } finally {
+      await cursor.close({ timeoutMS: DB_OPERATION_TIMEOUT_MS });
     }
-    return await CachedEmail.findLimited(query, limit, { acceptedAt: -1 });
+  }
+
+  public static async findRecentSecurityCandidates(
+    limitArg: number,
+    cutoffArg: number,
+  ): Promise<CachedEmail[]> {
+    const safeLimit = Math.min(Math.max(Math.floor(limitArg), 1), 1000);
+    if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
+      throw new Error('CachedEmail.findRecentSecurityCandidates requires a valid cutoff');
+    }
+    return await CachedEmail.findLimited({
+      direction: 'inbound',
+      inboundSecurityDisposition: { $in: ['flagged', 'rejected'] },
+      acceptedAt: { $gte: cutoffArg },
+    }, safeLimit, { acceptedAt: -1 });
   }
 
   /**