@serve.zone/dcrouter 34.6.0 → 34.7.0

package/dist_ts/opsserver/classes.opsserver.js

@@ -7,6 +7,7 @@ import * as interfaces from '../../dist_ts_interfaces/index.js';
 import { McpManager } from './classes.mcpmanager.js';
 import { createLogStreamAuthorizationAdapter } from './helpers/logstream-auth.js';
 import { WorkloadMailServer } from './classes.workload-mail-server.js';
+import { CoreMailGatewayServer } from './classes.coremail-gateway-server.js';
 export class OpsServer {
     dcRouterRef;
     server;
@@ -52,6 +53,8 @@ export class OpsServer {
     // Detach the edges start() adds to the dcRouter's main typedrouter, which outlives this server.
     dcRouterEdgeDisposers = [];
     workloadMailServer;
+    /** The CoreMail gateway listener (wire 9) while it runs; absent unless configured. */
+    coreMailGatewayServer;
     /** The port the Ops server listens on from its completed start until its stop begins. */
     listeningPort;
     constructor(dcRouterRefArg) {
@@ -59,8 +62,8 @@ export class OpsServer {
     }
     /**
      * The Ops server's socket once its start completed: typedserver binds every address (`0.0.0.0`)
-     * and refuses `start()` on an address another socket holds. The workload mail listener binds
-     * 127.0.0.1 only and is never public, so it is not listed.
+     * and refuses `start()` on an address another socket holds. The workload mail and CoreMail
+     * gateway listeners bind 127.0.0.1 only and are never public, so they are not listed.
      */
     getListeningSockets() {
         return this.listeningPort === undefined
@@ -91,6 +94,10 @@ export class OpsServer {
                 this.workloadMailServer = new WorkloadMailServer(this.dcRouterRef.options.workloadMailServer, () => this.dcRouterRef.workAppMailManager);
                 await this.workloadMailServer.start();
             }
+            if (this.dcRouterRef.options.coreMailGatewayServer) {
+                this.coreMailGatewayServer = new CoreMailGatewayServer(this.dcRouterRef.options.coreMailGatewayServer, this.dcRouterRef.coreMailGatewayManager);
+                await this.coreMailGatewayServer.start();
+            }
         }
         catch (startError) {
             // Nobody stops a server whose start failed (ServiceManager rolls back only the services that
@@ -209,6 +216,10 @@ export class OpsServer {
                     await this.workloadMailServer?.stop();
                     this.workloadMailServer = undefined;
                 }),
+                attempt(async () => {
+                    await this.coreMailGatewayServer?.stop();
+                    this.coreMailGatewayServer = undefined;
+                }),
                 attempt(() => this.server?.stop()),
                 attempt(() => this.logsHandler?.cleanup()),
             ]);
@@ -241,4 +252,4 @@ export class OpsServer {
             throw new AggregateError(failures, 'Ops server cleanup failed');
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/plugins.d.ts

@@ -22,6 +22,9 @@ import * as typedrequestInterfaces from '@api.global/typedrequest-interfaces';
 import * as typedserver from '@api.global/typedserver';
 import * as typedsocket from '@api.global/typedsocket';
 export { typedrequest, typedrequestInterfaces, typedserver, typedsocket, };
+import * as typedrequestCoreMail from '@api.global/typedrequest-coremail';
+import * as typedserverCoreMail from '@api.global/typedserver-coremail';
+export { typedrequestCoreMail, typedserverCoreMail, };
 import * as idpSdkServer from '@idp.global/sdk/server';
 export { idpSdkServer, };
 import * as smartdata from '@lossless.org/client/nosqldb';

package/dist_ts/plugins.js

@@ -25,6 +25,13 @@ import * as typedrequestInterfaces from '@api.global/typedrequest-interfaces';
 import * as typedserver from '@api.global/typedserver';
 import * as typedsocket from '@api.global/typedsocket';
 export { typedrequest, typedrequestInterfaces, typedserver, typedsocket, };
+// The CoreMail gateway listener's wire (Linus ruling 70, L1 and L2): TypedServer 16 with its
+// TypedSocket 10 (wire major 9) and the TypedRequest 9 copy that TypedServer resolves, under aliases
+// only `CoreMailGatewayServer` and the gateway handlers it serves use. Everything else stays on the
+// TypedSocket 8 packages above.
+import * as typedrequestCoreMail from '@api.global/typedrequest-coremail';
+import * as typedserverCoreMail from '@api.global/typedserver-coremail';
+export { typedrequestCoreMail, typedserverCoreMail, };
 // @idp.global scope
 import * as idpSdkServer from '@idp.global/sdk/server';
 export { idpSdkServer, };
@@ -76,4 +83,4 @@ import ipaddr from 'ipaddr.js';
 import * as uuid from 'uuid';
 import webpush from 'web-push';
 export { argon2, bson, lruCache, ipaddr, uuid, webpush, };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_web/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/dcrouter',
-    version: '34.6.0',
+    version: '34.7.0',
     description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHNfd2ViLzAwX2NvbW1pdGluZm9fZGF0YS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQTs7R0FFRztBQUNILE1BQU0sQ0FBQyxNQUFNLFVBQVUsR0FBRztJQUN4QixJQUFJLEVBQUUsc0JBQXNCO0lBQzVCLE9BQU8sRUFBRSxRQUFRO0lBQ2pCLFdBQVcsRUFBRSwwRUFBMEU7Q0FDeEYsQ0FBQSJ9

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@serve.zone/dcrouter",
   "private": false,
-  "version": "34.6.0",
+  "version": "34.7.0",
   "description": "A multifaceted routing service handling mail and SMS delivery functions.",
   "type": "module",
   "bin": {
@@ -15,6 +15,8 @@
   "author": "Task Venture Capital GmbH",
   "license": "MIT",
   "devDependencies": {
+    "@api.global/typedrequest-coremail-client": "npm:@api.global/typedrequest@9.1.0",
+    "@api.global/typedsocket-coremail-client": "npm:@api.global/typedsocket@9.0.2",
     "@git.zone/tsdeno": "^1.15.0",
     "@git.zone/tsdocker": "^3.14.0",
     "@git.zone/tsrepo": "^2.1.0",
@@ -29,8 +31,10 @@
   },
   "dependencies": {
     "@api.global/typedrequest": "8.0.4",
+    "@api.global/typedrequest-coremail": "npm:@api.global/typedrequest@9.2.2",
     "@api.global/typedrequest-interfaces": "7.1.0",
     "@api.global/typedserver": "13.0.2",
+    "@api.global/typedserver-coremail": "npm:@api.global/typedserver@16.0.2",
     "@api.global/typedsocket": "8.5.0",
     "@apiclient.xyz/cloudflare": "^8.0.2",
     "@aws-sdk/client-s3": "^3.1111.0",

package/readme.md

@@ -1172,11 +1172,27 @@ order, so the producer canonicalises the string before sending it.
 
 | Setting | Owner | Canonical form |
 | --- | --- | --- |
-| `gateway.endpointUrl` (in CoreMail's desired state) | producer | `wss://<dcrouter-ops-host>/` — **with** the trailing slash |
+| `gateway.endpointUrl` (in CoreMail's desired state) | producer | `wss://<gateway-host>/` — **with** the trailing slash |
 | `transferOrigin` (in the peer above) | producer | `https://<coremail-host>` — origin only, **no** trailing slash |
 
-`endpointUrl` points at dcrouter's ops server port (`opsServerPort`, default
-`3000`) — the same TypedSocket surface platformclient's `MAIL_TYPED_URL` reaches.
+Which host `endpointUrl` names depends on CoreMail's TypedSocket major, because
+the TypedSocket handshake refuses a peer of another wire:
+
+- CoreMail up to 32 (TypedSocket 8) dials dcrouter's ops server port
+  (`opsServerPort`, default `3000`) — the same TypedSocket surface
+  platformclient's `MAIL_TYPED_URL` reaches.
+- CoreMail 33 and later (TypedSocket 9; wire 9 is shared by TypedSocket 9 and 10)
+  dials the CoreMail gateway listener, `IDcRouterOptions.coreMailGatewayServer`.
+  It is disabled when the option is absent. The option has `port` and a nonempty
+  exact `hostnames` list; it always binds `127.0.0.1` and serves its socket at `/`,
+  so the operator routes one hub hostname to that port and lists the same hostname
+  in `hostnames` (other hosts, other paths, HTTP and browser Origins are answered
+  `404`). In OCI mode the option goes into the `DCROUTER_CONFIG_PATH` JSON. The
+  listener serves the three gateway calls and nothing else: no Ops, admin or
+  workload mail methods. It authenticates with the CoreMail credential behind the
+  same per-credential-id attempt limit as the ops surface and adds no source-address
+  check. The ops server keeps serving CoreMail on TypedSocket 8 alongside it.
+
 `transferOrigin` is CoreMail's own HTTPS origin, from which dcrouter fetches and
 to which it uploads message bytes; dcrouter returns it verbatim during
 authentication and CoreMail refuses the session unless it matches its own desired

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '34.6.0',
+  version: '34.7.0',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }

package/ts/classes.dcrouter.ts

@@ -25,6 +25,7 @@ import { createApplicationMigrationRunner } from '../ts_migrations/index.js';
 
 import { OpsServer } from './opsserver/index.js';
 import type { IWorkloadMailServerOptions } from './opsserver/classes.workload-mail-server.js';
+import type { ICoreMailGatewayServerOptions } from './opsserver/classes.coremail-gateway-server.js';
 import { MetricsManager, OpsEventManager } from './monitoring/index.js';
 import { RadiusServer, type IRadiusServerConfig } from './radius/index.js';
 import { RemoteIngressHubLifecycle, RemoteIngressManager, TunnelManager, buildEdgeOnlyDerivationRoutes } from './remoteingress/index.js';
@@ -230,6 +231,13 @@ export interface IDcRouterOptions {
   /** Disabled unless explicitly configured; loopback-only, separately routed two-operation mail API. */
   workloadMailServer?: IWorkloadMailServerOptions;
 
+  /**
+   * Disabled unless explicitly configured; loopback-only listener that serves the CoreMail gateway,
+   * and nothing else, to CoreMail on TypedSocket 9 or 10, behind one hub hostname route (Linus
+   * ruling 70, L2). The Ops server keeps serving the gateway on TypedSocket 8.
+   */
+  coreMailGatewayServer?: ICoreMailGatewayServerOptions;
+
   /** Optional OpsServer account authentication settings. */
   adminAuth?: {
     /** Optional idp.global password-authentication URL override. Defaults to the SDK's hosted https://app.idp.global endpoint. Can also be set through DCROUTER_IDP_GLOBAL_URL. */
@@ -479,9 +487,10 @@ export class DcRouter {
       store: new CoreMailGatewayStore(),
       runtime: createCoreMailGatewayRuntime(this),
     });
-    // CoreMail connects as a TypedSocket client to the ops surface, which
-    // serves this router through the OpsServer's own chain. Registering here
-    // keeps the manager independent of OpsServer construction.
+    // CoreMail on TypedSocket 8 connects as a TypedSocket client to the ops
+    // surface, which serves this router through the OpsServer's own chain.
+    // Registering here keeps the manager independent of OpsServer construction.
+    // CoreMail on wire 9 connects to the `coreMailGatewayServer` listener instead.
     this.typedrouter.addTypedRouter(this.coreMailGatewayManager.typedrouter);
     this.smtpAccountManager = new SmtpAccountManager(this);
     this.acceptedEmailSpool = new AcceptedEmailSpool(this);

package/ts/email/classes.coremail-gateway.manager.ts

@@ -67,6 +67,19 @@ interface ICoreMailPeerLike {
   context: { state: Record<string, unknown> };
 }
 
+/**
+ * A CoreMail connection on one of the sockets the gateway is served on: the Ops
+ * server's TypedSocket 8 or the CoreMail gateway listener's wire 9. A request to
+ * CoreMail goes out on the socket the connection belongs to.
+ */
+export interface ICoreMailGatewayConnection {
+  peer: ICoreMailPeerLike;
+  fire<T extends plugins.typedrequestInterfaces.ITypedRequest>(
+    methodArg: T['method'],
+    requestArg: T['request'],
+  ): Promise<T['response']>;
+}
+
 interface ICoreMailQueueItemLike {
   id: string;
   status: 'pending' | 'processing' | 'delivered' | 'failed' | 'deferred';
@@ -87,11 +100,8 @@ export interface ICoreMailGatewayRuntime {
     idempotencyKeyArg: string,
   ): Promise<string>;
   getQueueItem(queueItemIdArg: string): ICoreMailQueueItemLike | undefined;
-  findConnection(tagArg: string): Promise<{ peer: ICoreMailPeerLike } | undefined>;
-  createRequest<T extends plugins.typedrequestInterfaces.ITypedRequest>(
-    methodArg: T['method'],
-    connectionArg: unknown,
-  ): { fire(requestArg: T['request']): Promise<T['response']> };
+  /** The connection with this routing tag on any socket the gateway is served on. */
+  findConnection(tagArg: string): Promise<ICoreMailGatewayConnection | undefined>;
 }
 
 export interface ICoreMailGatewayManagerOptions {
@@ -121,14 +131,41 @@ export class CoreMailInboundRefusedError extends Error {
   }
 }
 
+/**
+ * The contract error a gateway request is refused with. It is definitive
+ * unless it names when to retry: CoreMail takes a non-retryable
+ * `AUTHENTICATION_FAILED` as the verdict on its credential and stops
+ * connecting with it.
+ */
 const contractError = (
   codeArg: TErrorCode,
-  retryableArg = false,
+  retryAfterMsArg?: number,
 ): plugins.typedrequest.TypedResponseError =>
-  new plugins.typedrequest.TypedResponseError('CoreMail gateway request rejected.', {
-    code: codeArg,
-    retryable: retryableArg,
-  } satisfies plugins.servezoneInterfaces.data.ICoreMailErrorData);
+  new plugins.typedrequest.TypedResponseError(
+    'CoreMail gateway request rejected.',
+    (retryAfterMsArg === undefined
+      ? { code: codeArg, retryable: false }
+      : { code: codeArg, retryable: true, retryAfterMs: retryAfterMsArg }
+    ) satisfies plugins.servezoneInterfaces.data.ICoreMailErrorData,
+  );
+
+/**
+ * Answers a wire-9 request with the handler's own contract refusal: TypedRequest 9
+ * answers an error of another class, TypedRequest 8's `TypedResponseError`
+ * included, as an internal error without its `errorData`.
+ */
+const onCoreMailGatewayWire = <TRequest, TResponse>(
+  handlerArg: (requestArg: TRequest, toolsArg: unknown) => Promise<TResponse>,
+) => async (requestArg: TRequest, toolsArg?: unknown): Promise<TResponse> => {
+  try {
+    return await handlerArg(requestArg, toolsArg);
+  } catch (error: unknown) {
+    if (error instanceof plugins.typedrequest.TypedResponseError) {
+      throw new plugins.typedrequestCoreMail.TypedResponseError(error.errorText, error.errorData);
+    }
+    throw error;
+  }
+};
 
 const toTimestamp = (valueArg: Date | number | undefined): number | undefined => {
   if (valueArg === undefined) return undefined;
@@ -146,6 +183,7 @@ const toTimestamp = (valueArg: Date | number | undefined): number | undefined =>
  * `…CompleteInboundHandoff` and `…CompleteOutboundHandoff` back on the peer.
  */
 export class CoreMailGatewayManager {
+  /** The gateway's handlers on TypedSocket 8, which the Ops server serves. */
   public typedrouter = new plugins.typedrequest.TypedRouter();
 
   private readonly store: ICoreMailGatewayStore;
@@ -184,7 +222,7 @@ export class CoreMailGatewayManager {
     this.verifyCredential = optionsArg.verifyCredential
       ?? (async (hashArg, secretArg) => await plugins.argon2.verify(hashArg, secretArg));
     this.enqueueRetryDelaysMs = optionsArg.enqueueRetryDelaysMs ?? [1_000, 5_000, 15_000];
-    this.registerHandlers();
+    this.registerGatewayHandlers(this.typedrouter);
   }
 
   // -------------------------------------------------------- peer provisioning
@@ -274,31 +312,52 @@ export class CoreMailGatewayManager {
 
   // ---------------------------------------------------------------- handlers
 
-  private registerHandlers(): void {
-    this.typedrouter.addTypedHandler(
-      new plugins.typedrequest.TypedHandler<TReq_Authenticate>(
+  /**
+   * Registers the gateway's three handlers on the router it is handed (Linus
+   * rulings 39, 3f, and 70, L2): this manager's `typedrouter` (TypedSocket 8,
+   * served by the Ops server) and the CoreMail gateway listener's router (wire 9,
+   * `CoreMailGatewayServer`). Both run the same handler bodies, and the session
+   * an authentication sets lives on the peer of the socket it arrived on.
+   */
+  public registerGatewayHandlers(
+    routerArg: plugins.typedrequest.TypedRouter | plugins.typedrequestCoreMail.TypedRouter,
+  ): void {
+    const authenticate = async (dataArg: TReq_Authenticate['request'], toolsArg: unknown) =>
+      await this.authenticate(this.requirePeer(toolsArg), dataArg);
+    const prepareOutboundHandoff = async (
+      dataArg: TReq_PrepareOutboundHandoff['request'],
+      toolsArg: unknown,
+    ) => await this.prepareOutboundHandoff(this.requireSession(this.requirePeer(toolsArg)), dataArg);
+    const getOutboundStatus = async (dataArg: TReq_GetOutboundStatus['request'], toolsArg: unknown) =>
+      await this.getOutboundStatus(this.requireSession(this.requirePeer(toolsArg)), dataArg);
+
+    if (routerArg instanceof plugins.typedrequestCoreMail.TypedRouter) {
+      routerArg.addTypedHandler(new plugins.typedrequestCoreMail.TypedHandler<TReq_Authenticate>(
         'coreMailGatewayAuthenticate',
-        async (dataArg, toolsArg) => await this.authenticate(this.requirePeer(toolsArg), dataArg),
-      ),
-    );
-    this.typedrouter.addTypedHandler(
-      new plugins.typedrequest.TypedHandler<TReq_PrepareOutboundHandoff>(
+        onCoreMailGatewayWire(authenticate),
+      ));
+      routerArg.addTypedHandler(new plugins.typedrequestCoreMail.TypedHandler<TReq_PrepareOutboundHandoff>(
         'coreMailGatewayPrepareOutboundHandoff',
-        async (dataArg, toolsArg) => await this.prepareOutboundHandoff(
-          this.requireSession(this.requirePeer(toolsArg)),
-          dataArg,
-        ),
-      ),
-    );
-    this.typedrouter.addTypedHandler(
-      new plugins.typedrequest.TypedHandler<TReq_GetOutboundStatus>(
+        onCoreMailGatewayWire(prepareOutboundHandoff),
+      ));
+      routerArg.addTypedHandler(new plugins.typedrequestCoreMail.TypedHandler<TReq_GetOutboundStatus>(
         'coreMailGatewayGetOutboundStatus',
-        async (dataArg, toolsArg) => await this.getOutboundStatus(
-          this.requireSession(this.requirePeer(toolsArg)),
-          dataArg,
-        ),
-      ),
-    );
+        onCoreMailGatewayWire(getOutboundStatus),
+      ));
+      return;
+    }
+    routerArg.addTypedHandler(new plugins.typedrequest.TypedHandler<TReq_Authenticate>(
+      'coreMailGatewayAuthenticate',
+      authenticate,
+    ));
+    routerArg.addTypedHandler(new plugins.typedrequest.TypedHandler<TReq_PrepareOutboundHandoff>(
+      'coreMailGatewayPrepareOutboundHandoff',
+      prepareOutboundHandoff,
+    ));
+    routerArg.addTypedHandler(new plugins.typedrequest.TypedHandler<TReq_GetOutboundStatus>(
+      'coreMailGatewayGetOutboundStatus',
+      getOutboundStatus,
+    ));
   }
 
   private requirePeer(toolsArg: unknown): ICoreMailPeerLike {
@@ -320,8 +379,9 @@ export class CoreMailGatewayManager {
 
   /**
    * Every gateway method other than the handshake requires an authenticated
-   * CoreMail session on this exact connection. The ops TypedSocket surface is
-   * shared with other client types, so presence on the socket proves nothing.
+   * CoreMail session on this exact connection. The Ops TypedSocket surface is
+   * shared with other client types and the gateway listener takes any peer that
+   * reaches it, so presence on a socket proves nothing.
    */
   private requireSession(peerArg: ICoreMailPeerLike): ICoreMailGatewaySession {
     const session = peerArg.data.get(coreMailGatewaySessionKey) as
@@ -353,7 +413,12 @@ export class CoreMailGatewayManager {
       bucket.refilledAt += intervals * 1_000;
     }
     if (bucket.tokens < 1) {
-      throw contractError('AUTHENTICATION_FAILED');
+      // A spent budget says nothing about the credential, so the refusal is
+      // retryable once the next token refills.
+      throw contractError(
+        'AUTHENTICATION_FAILED',
+        Math.max(1, Math.ceil(bucket.refilledAt + 1_000 - now)),
+      );
     }
     bucket.tokens -= 1;
   }
@@ -929,7 +994,7 @@ export class CoreMailGatewayManager {
     if (!connection || !session || session.coreMailServiceId !== coreMailServiceIdArg) {
       throw new Error('No authenticated CoreMail gateway peer is connected');
     }
-    return await this.runtime.createRequest<T>(methodArg, connection).fire(requestArg);
+    return await connection.fire<T>(methodArg, requestArg);
   }
 
   private async isPeerConnected(coreMailServiceIdArg: string): Promise<boolean> {

package/ts/email/coremail-gateway-runtime.ts

@@ -1,13 +1,26 @@
 import * as plugins from '../plugins.js';
 import type { DcRouter } from '../classes.dcrouter.js';
-import type { ICoreMailGatewayRuntime } from './classes.coremail-gateway.manager.js';
+import type {
+  ICoreMailGatewayConnection,
+  ICoreMailGatewayRuntime,
+} from './classes.coremail-gateway.manager.js';
+
+/** A CoreMail connection on a TypedSocket 8 server, with requests bound to that socket. */
+export const toCoreMailGatewayConnection = (
+  typedsocketArg: plugins.typedsocket.TypedSocket,
+  connectionArg: plugins.typedsocket.ISmartServeConnectionWrapper,
+): ICoreMailGatewayConnection => ({
+  peer: connectionArg.peer,
+  fire: async (methodArg, requestArg) =>
+    await typedsocketArg.createTypedRequest(methodArg, connectionArg).fire(requestArg),
+});
 
 /**
  * Binds the CoreMail gateway manager to the live dcrouter runtime.
  *
  * Everything the manager needs from dcrouter passes through this adapter, so
  * the manager stays testable against a stub and dcrouter keeps ownership of
- * the smartmta server and the ops TypedSocket.
+ * the smartmta server and the sockets the gateway is served on.
  */
 export const createCoreMailGatewayRuntime = (
   dcRouterArg: DcRouter,
@@ -28,20 +41,14 @@ export const createCoreMailGatewayRuntime = (
 
   getQueueItem: (queueItemIdArg) => dcRouterArg.emailServer?.getQueueItem(queueItemIdArg),
 
+  // The CoreMail gateway listener first: a CoreMail on TypedSocket 9 or 10 can
+  // reach only that one. A CoreMail on TypedSocket 8 reaches only the Ops server.
   findConnection: async (tagArg) => {
+    const listenerConnection = await dcRouterArg.opsServer?.coreMailGatewayServer?.findConnection(tagArg);
+    if (listenerConnection) return listenerConnection;
     const typedsocket = dcRouterArg.opsServer?.server?.typedserver?.typedsocket;
     if (!typedsocket) return undefined;
-    return await typedsocket.findTargetConnectionByTag(tagArg as never) as never;
-  },
-
-  createRequest: (methodArg, connectionArg) => {
-    const typedsocket = dcRouterArg.opsServer?.server?.typedserver?.typedsocket;
-    if (!typedsocket) {
-      throw new Error('OpsServer TypedSocket is not available for CoreMail gateway requests');
-    }
-    return typedsocket.createTypedRequest(
-      methodArg as never,
-      connectionArg as plugins.typedsocket.ISmartServeConnectionWrapper,
-    ) as never;
+    const connection = await typedsocket.findTargetConnectionByTag(tagArg);
+    return connection ? toCoreMailGatewayConnection(typedsocket, connection) : undefined;
   },
 });

package/ts/opsserver/classes.coremail-gateway-server.ts

@@ -0,0 +1,104 @@
+import * as plugins from '../plugins.js';
+import type {
+  CoreMailGatewayManager,
+  ICoreMailGatewayConnection,
+} from '../email/classes.coremail-gateway.manager.js';
+
+/**
+ * The one path the listener serves. The URL CoreMail dials, Cloudly's
+ * `coreMailGatewayEndpointUrl`, is a bare wss origin, so the socket sits at the
+ * root of the hub hostname that routes to this listener.
+ */
+export const COREMAIL_GATEWAY_SOCKET_PATH = '/';
+
+/** Opt-in loopback listener (Linus ruling 70, L2). Its hub hostname route is the operator's. */
+export interface ICoreMailGatewayServerOptions {
+  /** Port on 127.0.0.1; 0 asks the OS for one. */
+  port: number;
+  /** Hostnames of the hub route that forwards to this port; any other Host is answered 404. */
+  hostnames: readonly string[];
+}
+
+type TCoreMailGatewayTypedServer = plugins.typedserverCoreMail.TypedServer;
+
+/**
+ * The CoreMail gateway on wire 9 (TypedSocket 9 and 10), separate from the Ops
+ * server, which keeps serving it on TypedSocket 8. It serves the gateway's
+ * three handlers and nothing else: no Ops router, admin or workload mail, no
+ * HTTP RPC, no client tags and no built-in methods. Authentication is the
+ * gateway's own, the CoreMail credential behind the per-credential-id attempt
+ * limiter; the listener adds no source check.
+ */
+export class CoreMailGatewayServer {
+  private server?: TCoreMailGatewayTypedServer;
+  /** Peers are looked up only between a completed start and the beginning of stop. */
+  private serving = false;
+
+  constructor(
+    private readonly options: ICoreMailGatewayServerOptions,
+    private readonly manager: Pick<CoreMailGatewayManager, 'registerGatewayHandlers'>,
+  ) {}
+
+  public get listeningPort(): number | null {
+    return this.server?.listeningPort ?? null;
+  }
+
+  public async start(): Promise<void> {
+    if (this.server) throw new Error('CoreMail gateway server already started');
+    if (!Number.isInteger(this.options.port) || this.options.port < 0 || this.options.port > 65535) {
+      throw new Error('CoreMail gateway port must be an integer from 0 to 65535');
+    }
+    const router = new plugins.typedrequestCoreMail.TypedRouter();
+    this.manager.registerGatewayHandlers(router);
+    const server = new plugins.typedserverCoreMail.TypedServer({
+      port: this.options.port,
+      listenHostname: '127.0.0.1',
+      cors: false,
+      surfaces: [{
+        name: 'coremail-gateway',
+        match: { hostnames: this.options.hostnames, pathPrefixes: [COREMAIL_GATEWAY_SOCKET_PATH] },
+        websocketTypedRouter: router,
+        typedRequestPath: false,
+        includeBuiltinTypedHandlers: false,
+        healthzEndpoint: false,
+        cors: false,
+        requestAdmission: () => new Response('Not Found', { status: 404 }),
+        websocketAdmission: (contextArg) => (
+          contextArg.url.pathname === COREMAIL_GATEWAY_SOCKET_PATH
+          && !contextArg.url.search
+          && !contextArg.request.headers.has('origin')
+        ) ? true : new Response('Not Found', { status: 404 }),
+      }],
+    });
+    this.server = server;
+    try {
+      await server.start();
+    } catch (error) {
+      try { await this.stop(); } catch (cleanupError) {
+        throw new AggregateError([error, cleanupError], 'CoreMail gateway startup and cleanup failed');
+      }
+      throw error;
+    }
+    this.serving = true;
+  }
+
+  /** The CoreMail connection with this routing tag on this listener, requests bound to its socket. */
+  public async findConnection(tagArg: string): Promise<ICoreMailGatewayConnection | undefined> {
+    const server = this.server;
+    if (!server || !this.serving) return undefined;
+    const connection = await server.typedsocket.findTargetConnectionByTag(tagArg);
+    if (!connection) return undefined;
+    return {
+      peer: connection.peer,
+      fire: async (methodArg, requestArg) =>
+        await server.typedsocket.createTypedRequest(methodArg, connection).fire(requestArg),
+    };
+  }
+
+  public async stop(): Promise<void> {
+    this.serving = false;
+    const server = this.server;
+    await server?.stop();
+    if (this.server === server) this.server = undefined;
+  }
+}