@serve.zone/dcrouter 32.1.2 → 32.1.4

package/readme.md

@@ -342,6 +342,8 @@ Web Push is disabled by default and does not read its secret configuration while
 
 Each key ring has the form `{"currentKeyId":"key-2026-07","keys":{"key-2026-07":"<32-byte-unpadded-base64url>"}}`, supports at most eight distinct keys, and must name a configured current key. Encryption and HMAC rings must never reuse key material.
 
+All four values are resolved through `@push.rocks/qenv` from the process environment, a `.nogit/env.json` beside the working directory, or a Docker secret, in that order. dcrouter ships no `qenv.yml` and declares no `required:` list, because none of these names is mandatory while the feature is off: with the flag on, `WebPushManager.start()` refuses and names the missing key material, and the `webpush-encryption-context` migration refuses when sealed documents exist without `DCROUTER_WEB_PUSH_MASTER_KEY_RING`. A `qenv.yml` left in the working directory is not enforced at start; it only logs the names it finds missing.
+
 Operational behavior:
 
 - Control-plane callers need gateway-client `readWebPush` or `manageWebPush` capability. App calls use the one-time binding credential returned by `syncWebPushBinding`; the active credential record stores only its HMAC verifier. To recover a lost rotation response, dcrouter may return the same issuance again during its 15-minute overlap window; that recovery secret is AES-GCM encrypted at rest and is removed when the window expires.

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '32.1.2',
+  version: '32.1.4',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

package/ts/classes.dcrouter.ts

@@ -419,8 +419,16 @@ export class DcRouter {
   // Live DoH routes used during SmartProxy bootstrap before RouteConfigManager re-applies stored routes.
   private runtimeDnsRoutes: plugins.smartproxy.IRouteConfig[] = [];
 
-  // Environment access
-  private qenv = new plugins.qenv.Qenv('./', '.nogit/');
+  // Environment access. dcrouter ships no qenv.yml and declares no `required:` list, because it has
+  // no unconditionally mandatory variable: every name it reads is conditional on a feature being
+  // switched on or on what is already stored (the Web Push key rings, and the master key ring the
+  // reseal migration below only demands when sealed documents exist), and every other name is read
+  // straight from `process.env` with a default of its own. The reader owns the refusal in each case
+  // and names the missing variable and the feature it blocks, so `failOnMissing` is false here and
+  // at the second construction site
+  // (`ts/webpush/classes.webpush-manager.ts`): a qenv.yml an operator leaves in the working
+  // directory must never take the DNS and mail gateway down for a disabled optional feature.
+  private qenv = new plugins.qenv.Qenv('./', '.nogit/', false);
   
   constructor(optionsArg: IDcRouterOptions) {
     const coreTrafficConfig = optionsArg.coreTrafficConfig || optionsArg.smartProxyConfig;

package/ts/db/documents/classes.webpush-binding.doc.ts

@@ -99,7 +99,7 @@ export class WebPushBindingDoc extends plugins.smartdata.SmartDataDbDoc<
   WebPushBindingDoc,
   WebPushBindingDoc
 > {
-  @plugins.smartdata.svDb()
+  @plugins.smartdata.unI({ indexName: 'web_push_binding_id_unique' })
   public id!: string;
 
   @plugins.smartdata.svDb()

package/ts/db/documents/classes.webpush-spool.doc.ts

@@ -48,7 +48,7 @@ export class WebPushSpoolDoc extends plugins.smartdata.SmartDataDbDoc<
   WebPushSpoolDoc,
   WebPushSpoolDoc
 > {
-  @plugins.smartdata.svDb()
+  @plugins.smartdata.unI({ indexName: 'web_push_spool_id_unique' })
   public id!: string;
 
   @plugins.smartdata.svDb()

package/ts/webpush/classes.webpush-manager.ts

@@ -621,6 +621,9 @@ export class WebPushManager {
   private inactiveLifecycleCursor?: string;
 
   public constructor(optionsArg: IWebPushManagerOptions = {}) {
+    // Same arguments as the DcRouter-owned instance (`ts/classes.dcrouter.ts`), for the reason
+    // stated there: no qenv.yml declares these names as required, because they are only required
+    // once DCROUTER_WEB_PUSH_ENABLED is on — `start()` below is what refuses, naming all three.
     this.qenv = optionsArg.qenv ?? new plugins.qenv.Qenv('./', '.nogit/', false);
     this.transport = optionsArg.transport ?? new WebPushHttpTransport();
     this.startWorker = optionsArg.startWorker !== false;

package/ts_web/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '32.1.2',
+  version: '32.1.4',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }