@serve.zone/dcrouter 5.0.2 → 5.0.3

package/dist_ts/cache/documents/classes.cached.ip.reputation.js

@@ -0,0 +1,323 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import * as plugins from '../../plugins.js';
+import { CachedDocument, TTL } from '../classes.cached.document.js';
+import { CacheDb } from '../classes.cachedb.js';
+/**
+ * Helper to get the smartdata database instance
+ */
+const getDb = () => CacheDb.getInstance().getDb();
+/**
+ * CachedIPReputation - Stores IP reputation lookup results
+ *
+ * Caches the results of IP reputation checks to avoid repeated
+ * external API calls. Default TTL is 24 hours.
+ */
+let CachedIPReputation = (() => {
+    let _classDecorators = [plugins.smartdata.Collection(() => getDb())];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = CachedDocument;
+    let _createdAt_decorators;
+    let _createdAt_initializers = [];
+    let _createdAt_extraInitializers = [];
+    let _expiresAt_decorators;
+    let _expiresAt_initializers = [];
+    let _expiresAt_extraInitializers = [];
+    let _lastAccessedAt_decorators;
+    let _lastAccessedAt_initializers = [];
+    let _lastAccessedAt_extraInitializers = [];
+    let _ipAddress_decorators;
+    let _ipAddress_initializers = [];
+    let _ipAddress_extraInitializers = [];
+    let _score_decorators;
+    let _score_initializers = [];
+    let _score_extraInitializers = [];
+    let _isSpam_decorators;
+    let _isSpam_initializers = [];
+    let _isSpam_extraInitializers = [];
+    let _isProxy_decorators;
+    let _isProxy_initializers = [];
+    let _isProxy_extraInitializers = [];
+    let _isTor_decorators;
+    let _isTor_initializers = [];
+    let _isTor_extraInitializers = [];
+    let _isVPN_decorators;
+    let _isVPN_initializers = [];
+    let _isVPN_extraInitializers = [];
+    let _country_decorators;
+    let _country_initializers = [];
+    let _country_extraInitializers = [];
+    let _asn_decorators;
+    let _asn_initializers = [];
+    let _asn_extraInitializers = [];
+    let _org_decorators;
+    let _org_initializers = [];
+    let _org_extraInitializers = [];
+    let _blacklists_decorators;
+    let _blacklists_initializers = [];
+    let _blacklists_extraInitializers = [];
+    let _checkCount_decorators;
+    let _checkCount_initializers = [];
+    let _checkCount_extraInitializers = [];
+    let _connectionCount_decorators;
+    let _connectionCount_initializers = [];
+    let _connectionCount_extraInitializers = [];
+    let _emailCount_decorators;
+    let _emailCount_initializers = [];
+    let _emailCount_extraInitializers = [];
+    let _spamCount_decorators;
+    let _spamCount_initializers = [];
+    let _spamCount_extraInitializers = [];
+    var CachedIPReputation = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _createdAt_decorators = [plugins.smartdata.svDb()];
+            _expiresAt_decorators = [plugins.smartdata.svDb()];
+            _lastAccessedAt_decorators = [plugins.smartdata.svDb()];
+            _ipAddress_decorators = [plugins.smartdata.unI(), plugins.smartdata.svDb()];
+            _score_decorators = [plugins.smartdata.svDb()];
+            _isSpam_decorators = [plugins.smartdata.svDb()];
+            _isProxy_decorators = [plugins.smartdata.svDb()];
+            _isTor_decorators = [plugins.smartdata.svDb()];
+            _isVPN_decorators = [plugins.smartdata.svDb()];
+            _country_decorators = [plugins.smartdata.svDb()];
+            _asn_decorators = [plugins.smartdata.svDb()];
+            _org_decorators = [plugins.smartdata.svDb()];
+            _blacklists_decorators = [plugins.smartdata.svDb()];
+            _checkCount_decorators = [plugins.smartdata.svDb()];
+            _connectionCount_decorators = [plugins.smartdata.svDb()];
+            _emailCount_decorators = [plugins.smartdata.svDb()];
+            _spamCount_decorators = [plugins.smartdata.svDb()];
+            __esDecorate(null, null, _createdAt_decorators, { kind: "field", name: "createdAt", static: false, private: false, access: { has: obj => "createdAt" in obj, get: obj => obj.createdAt, set: (obj, value) => { obj.createdAt = value; } }, metadata: _metadata }, _createdAt_initializers, _createdAt_extraInitializers);
+            __esDecorate(null, null, _expiresAt_decorators, { kind: "field", name: "expiresAt", static: false, private: false, access: { has: obj => "expiresAt" in obj, get: obj => obj.expiresAt, set: (obj, value) => { obj.expiresAt = value; } }, metadata: _metadata }, _expiresAt_initializers, _expiresAt_extraInitializers);
+            __esDecorate(null, null, _lastAccessedAt_decorators, { kind: "field", name: "lastAccessedAt", static: false, private: false, access: { has: obj => "lastAccessedAt" in obj, get: obj => obj.lastAccessedAt, set: (obj, value) => { obj.lastAccessedAt = value; } }, metadata: _metadata }, _lastAccessedAt_initializers, _lastAccessedAt_extraInitializers);
+            __esDecorate(null, null, _ipAddress_decorators, { kind: "field", name: "ipAddress", static: false, private: false, access: { has: obj => "ipAddress" in obj, get: obj => obj.ipAddress, set: (obj, value) => { obj.ipAddress = value; } }, metadata: _metadata }, _ipAddress_initializers, _ipAddress_extraInitializers);
+            __esDecorate(null, null, _score_decorators, { kind: "field", name: "score", static: false, private: false, access: { has: obj => "score" in obj, get: obj => obj.score, set: (obj, value) => { obj.score = value; } }, metadata: _metadata }, _score_initializers, _score_extraInitializers);
+            __esDecorate(null, null, _isSpam_decorators, { kind: "field", name: "isSpam", static: false, private: false, access: { has: obj => "isSpam" in obj, get: obj => obj.isSpam, set: (obj, value) => { obj.isSpam = value; } }, metadata: _metadata }, _isSpam_initializers, _isSpam_extraInitializers);
+            __esDecorate(null, null, _isProxy_decorators, { kind: "field", name: "isProxy", static: false, private: false, access: { has: obj => "isProxy" in obj, get: obj => obj.isProxy, set: (obj, value) => { obj.isProxy = value; } }, metadata: _metadata }, _isProxy_initializers, _isProxy_extraInitializers);
+            __esDecorate(null, null, _isTor_decorators, { kind: "field", name: "isTor", static: false, private: false, access: { has: obj => "isTor" in obj, get: obj => obj.isTor, set: (obj, value) => { obj.isTor = value; } }, metadata: _metadata }, _isTor_initializers, _isTor_extraInitializers);
+            __esDecorate(null, null, _isVPN_decorators, { kind: "field", name: "isVPN", static: false, private: false, access: { has: obj => "isVPN" in obj, get: obj => obj.isVPN, set: (obj, value) => { obj.isVPN = value; } }, metadata: _metadata }, _isVPN_initializers, _isVPN_extraInitializers);
+            __esDecorate(null, null, _country_decorators, { kind: "field", name: "country", static: false, private: false, access: { has: obj => "country" in obj, get: obj => obj.country, set: (obj, value) => { obj.country = value; } }, metadata: _metadata }, _country_initializers, _country_extraInitializers);
+            __esDecorate(null, null, _asn_decorators, { kind: "field", name: "asn", static: false, private: false, access: { has: obj => "asn" in obj, get: obj => obj.asn, set: (obj, value) => { obj.asn = value; } }, metadata: _metadata }, _asn_initializers, _asn_extraInitializers);
+            __esDecorate(null, null, _org_decorators, { kind: "field", name: "org", static: false, private: false, access: { has: obj => "org" in obj, get: obj => obj.org, set: (obj, value) => { obj.org = value; } }, metadata: _metadata }, _org_initializers, _org_extraInitializers);
+            __esDecorate(null, null, _blacklists_decorators, { kind: "field", name: "blacklists", static: false, private: false, access: { has: obj => "blacklists" in obj, get: obj => obj.blacklists, set: (obj, value) => { obj.blacklists = value; } }, metadata: _metadata }, _blacklists_initializers, _blacklists_extraInitializers);
+            __esDecorate(null, null, _checkCount_decorators, { kind: "field", name: "checkCount", static: false, private: false, access: { has: obj => "checkCount" in obj, get: obj => obj.checkCount, set: (obj, value) => { obj.checkCount = value; } }, metadata: _metadata }, _checkCount_initializers, _checkCount_extraInitializers);
+            __esDecorate(null, null, _connectionCount_decorators, { kind: "field", name: "connectionCount", static: false, private: false, access: { has: obj => "connectionCount" in obj, get: obj => obj.connectionCount, set: (obj, value) => { obj.connectionCount = value; } }, metadata: _metadata }, _connectionCount_initializers, _connectionCount_extraInitializers);
+            __esDecorate(null, null, _emailCount_decorators, { kind: "field", name: "emailCount", static: false, private: false, access: { has: obj => "emailCount" in obj, get: obj => obj.emailCount, set: (obj, value) => { obj.emailCount = value; } }, metadata: _metadata }, _emailCount_initializers, _emailCount_extraInitializers);
+            __esDecorate(null, null, _spamCount_decorators, { kind: "field", name: "spamCount", static: false, private: false, access: { has: obj => "spamCount" in obj, get: obj => obj.spamCount, set: (obj, value) => { obj.spamCount = value; } }, metadata: _metadata }, _spamCount_initializers, _spamCount_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            CachedIPReputation = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        // TTL fields from base class (decorators required on concrete class)
+        createdAt = __runInitializers(this, _createdAt_initializers, new Date());
+        expiresAt = (__runInitializers(this, _createdAt_extraInitializers), __runInitializers(this, _expiresAt_initializers, new Date(Date.now() + TTL.HOURS_24)));
+        lastAccessedAt = (__runInitializers(this, _expiresAt_extraInitializers), __runInitializers(this, _lastAccessedAt_initializers, new Date()));
+        /**
+         * IP address (unique identifier)
+         */
+        ipAddress = (__runInitializers(this, _lastAccessedAt_extraInitializers), __runInitializers(this, _ipAddress_initializers, void 0));
+        /**
+         * Reputation score (0-100, higher = better)
+         */
+        score = (__runInitializers(this, _ipAddress_extraInitializers), __runInitializers(this, _score_initializers, void 0));
+        /**
+         * Whether the IP is flagged as spam source
+         */
+        isSpam = (__runInitializers(this, _score_extraInitializers), __runInitializers(this, _isSpam_initializers, void 0));
+        /**
+         * Whether the IP is a known proxy
+         */
+        isProxy = (__runInitializers(this, _isSpam_extraInitializers), __runInitializers(this, _isProxy_initializers, void 0));
+        /**
+         * Whether the IP is a Tor exit node
+         */
+        isTor = (__runInitializers(this, _isProxy_extraInitializers), __runInitializers(this, _isTor_initializers, void 0));
+        /**
+         * Whether the IP is a VPN endpoint
+         */
+        isVPN = (__runInitializers(this, _isTor_extraInitializers), __runInitializers(this, _isVPN_initializers, void 0));
+        /**
+         * Country code (ISO 3166-1 alpha-2)
+         */
+        country = (__runInitializers(this, _isVPN_extraInitializers), __runInitializers(this, _country_initializers, void 0));
+        /**
+         * Autonomous System Number
+         */
+        asn = (__runInitializers(this, _country_extraInitializers), __runInitializers(this, _asn_initializers, void 0));
+        /**
+         * Organization name
+         */
+        org = (__runInitializers(this, _asn_extraInitializers), __runInitializers(this, _org_initializers, void 0));
+        /**
+         * List of blacklists the IP appears on
+         */
+        blacklists = (__runInitializers(this, _org_extraInitializers), __runInitializers(this, _blacklists_initializers, void 0));
+        /**
+         * Number of times this IP has been checked
+         */
+        checkCount = (__runInitializers(this, _blacklists_extraInitializers), __runInitializers(this, _checkCount_initializers, 0));
+        /**
+         * Number of connections from this IP
+         */
+        connectionCount = (__runInitializers(this, _checkCount_extraInitializers), __runInitializers(this, _connectionCount_initializers, 0));
+        /**
+         * Number of emails received from this IP
+         */
+        emailCount = (__runInitializers(this, _connectionCount_extraInitializers), __runInitializers(this, _emailCount_initializers, 0));
+        /**
+         * Number of spam emails from this IP
+         */
+        spamCount = (__runInitializers(this, _emailCount_extraInitializers), __runInitializers(this, _spamCount_initializers, 0));
+        constructor() {
+            super();
+            __runInitializers(this, _spamCount_extraInitializers);
+            this.setTTL(TTL.HOURS_24); // Default 24-hour TTL
+            this.blacklists = [];
+            this.score = 50; // Default neutral score
+            this.isSpam = false;
+            this.isProxy = false;
+            this.isTor = false;
+            this.isVPN = false;
+        }
+        /**
+         * Create from reputation data
+         */
+        static fromReputationData(ipAddress, data) {
+            const cached = new CachedIPReputation();
+            cached.ipAddress = ipAddress;
+            cached.score = data.score;
+            cached.isSpam = data.isSpam;
+            cached.isProxy = data.isProxy;
+            cached.isTor = data.isTor;
+            cached.isVPN = data.isVPN;
+            cached.country = data.country || '';
+            cached.asn = data.asn || '';
+            cached.org = data.org || '';
+            cached.blacklists = data.blacklists || [];
+            cached.checkCount = 1;
+            return cached;
+        }
+        /**
+         * Convert to reputation data object
+         */
+        toReputationData() {
+            this.touch();
+            return {
+                score: this.score,
+                isSpam: this.isSpam,
+                isProxy: this.isProxy,
+                isTor: this.isTor,
+                isVPN: this.isVPN,
+                country: this.country,
+                asn: this.asn,
+                org: this.org,
+                blacklists: this.blacklists,
+            };
+        }
+        /**
+         * Find by IP address
+         */
+        static async findByIP(ipAddress) {
+            return await CachedIPReputation.getInstance({
+                ipAddress,
+            });
+        }
+        /**
+         * Find all IPs flagged as spam
+         */
+        static async findSpamIPs() {
+            return await CachedIPReputation.getInstances({
+                isSpam: true,
+            });
+        }
+        /**
+         * Find IPs with score below threshold
+         */
+        static async findLowScoreIPs(threshold) {
+            return await CachedIPReputation.getInstances({
+                score: { $lt: threshold },
+            });
+        }
+        /**
+         * Record a connection from this IP
+         */
+        recordConnection() {
+            this.connectionCount++;
+            this.touch();
+        }
+        /**
+         * Record an email from this IP
+         */
+        recordEmail(isSpam = false) {
+            this.emailCount++;
+            if (isSpam) {
+                this.spamCount++;
+            }
+            this.touch();
+        }
+        /**
+         * Update the reputation data
+         */
+        updateReputation(data) {
+            this.score = data.score;
+            this.isSpam = data.isSpam;
+            this.isProxy = data.isProxy;
+            this.isTor = data.isTor;
+            this.isVPN = data.isVPN;
+            this.country = data.country || this.country;
+            this.asn = data.asn || this.asn;
+            this.org = data.org || this.org;
+            this.blacklists = data.blacklists || this.blacklists;
+            this.checkCount++;
+            this.touch();
+            // Refresh TTL on update
+            this.setTTL(TTL.HOURS_24);
+        }
+        /**
+         * Check if this IP should be blocked
+         */
+        shouldBlock() {
+            return this.isSpam || this.score < 20 || this.blacklists.length > 2;
+        }
+    };
+    return CachedIPReputation = _classThis;
+})();
+export { CachedIPReputation };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/cache/documents/index.d.ts

@@ -0,0 +1,2 @@
+export * from './classes.cached.email.js';
+export * from './classes.cached.ip.reputation.js';

package/dist_ts/cache/documents/index.js

@@ -0,0 +1,3 @@
+export * from './classes.cached.email.js';
+export * from './classes.cached.ip.reputation.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi90cy9jYWNoZS9kb2N1bWVudHMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYywyQkFBMkIsQ0FBQztBQUMxQyxjQUFjLG1DQUFtQyxDQUFDIn0=

package/dist_ts/cache/index.d.ts

@@ -0,0 +1,4 @@
+export * from './classes.cachedb.js';
+export * from './classes.cached.document.js';
+export * from './classes.cache.cleaner.js';
+export * from './documents/index.js';

package/dist_ts/cache/index.js

@@ -0,0 +1,7 @@
+// Core cache infrastructure
+export * from './classes.cachedb.js';
+export * from './classes.cached.document.js';
+export * from './classes.cache.cleaner.js';
+// Document classes
+export * from './documents/index.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9jYWNoZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSw0QkFBNEI7QUFDNUIsY0FBYyxzQkFBc0IsQ0FBQztBQUNyQyxjQUFjLDhCQUE4QixDQUFDO0FBQzdDLGNBQWMsNEJBQTRCLENBQUM7QUFFM0MsbUJBQW1CO0FBQ25CLGNBQWMsc0JBQXNCLENBQUMifQ==

package/dist_ts/classes.dcrouter.d.ts

@@ -0,0 +1,276 @@
+import * as plugins from './plugins.js';
+import { UnifiedEmailServer, type IUnifiedEmailServerOptions, type IEmailRoute } from '@push.rocks/smartmta';
+import { StorageManager, type IStorageConfig } from './storage/index.js';
+import { CacheDb, CacheCleaner } from './cache/index.js';
+import { OpsServer } from './opsserver/index.js';
+import { MetricsManager } from './monitoring/index.js';
+import { RadiusServer, type IRadiusServerConfig } from './radius/index.js';
+export interface IDcRouterOptions {
+    /**
+     * Direct SmartProxy configuration - gives full control over HTTP/HTTPS and TCP/SNI traffic
+     * This is the preferred way to configure HTTP/HTTPS and general TCP/SNI traffic
+     */
+    smartProxyConfig?: plugins.smartproxy.ISmartProxyOptions;
+    /**
+     * Email server configuration
+     * This enables all email handling with pattern-based routing
+     */
+    emailConfig?: IUnifiedEmailServerOptions;
+    /**
+     * Custom email port configuration
+     * Allows configuring specific ports for email handling
+     * This overrides the default port mapping in the emailConfig
+     */
+    emailPortConfig?: {
+        /** External to internal port mapping */
+        portMapping?: Record<number, number>;
+        /** Custom port configuration for specific ports */
+        portSettings?: Record<number, any>;
+        /** Path to store received emails */
+        receivedEmailsPath?: string;
+    };
+    /** TLS/certificate configuration */
+    tls?: {
+        /** Contact email for ACME certificates */
+        contactEmail: string;
+        /** Domain for main certificate */
+        domain?: string;
+        /** Path to certificate file (if not using auto-provisioning) */
+        certPath?: string;
+        /** Path to key file (if not using auto-provisioning) */
+        keyPath?: string;
+        /** Path to CA certificate file (for custom CAs) */
+        caPath?: string;
+    };
+    /**
+     * The nameserver domains (e.g., ['ns1.example.com', 'ns2.example.com'])
+     * These will automatically get A records pointing to publicIp or proxyIps[0]
+     * These are what go in the NS records for ALL domains in dnsScopes
+     */
+    dnsNsDomains?: string[];
+    /**
+     * Domains this DNS server is authoritative for (e.g., ['example.com', 'mail.example.org'])
+     * NS records will be auto-generated for these domains
+     * Any DNS record outside these scopes will trigger a warning
+     * Email domains with `internal-dns` mode must be included here
+     */
+    dnsScopes?: string[];
+    /**
+     * IPs of proxies that forward traffic to your server (optional)
+     * When defined AND useIngressProxy is true, A records with server IP are replaced with proxy IPs
+     * If not defined or empty, all A records use the real server IP
+     * Helps hide real server IP for security/privacy
+     */
+    proxyIps?: string[];
+    /**
+     * Public IP address for nameserver A records (required if proxyIps not set)
+     * This is the IP that will be used for the nameserver domains (dnsNsDomains)
+     * If proxyIps is set, the first proxy IP will be used instead
+     */
+    publicIp?: string;
+    /**
+     * DNS records to register
+     * Must be within the defined dnsScopes (or receive warning)
+     * Only need A, CNAME, TXT, MX records (NS records auto-generated, SOA handled by smartdns)
+     * Can use `useIngressProxy: false` to expose real server IP (defaults to true)
+     */
+    dnsRecords?: Array<{
+        name: string;
+        type: 'A' | 'AAAA' | 'CNAME' | 'MX' | 'TXT' | 'NS' | 'SOA';
+        value: string;
+        ttl?: number;
+        useIngressProxy?: boolean;
+    }>;
+    /** DNS challenge configuration for ACME (optional) */
+    dnsChallenge?: {
+        /** Cloudflare API key for DNS challenges */
+        cloudflareApiKey?: string;
+    };
+    /** Storage configuration */
+    storage?: IStorageConfig;
+    /**
+     * Cache database configuration using smartdata and LocalTsmDb
+     * Provides persistent caching for emails, IP reputation, bounces, etc.
+     */
+    cacheConfig?: {
+        /** Enable cache database (default: true) */
+        enabled?: boolean;
+        /** Storage path for TsmDB data (default: /etc/dcrouter/tsmdb) */
+        storagePath?: string;
+        /** Database name (default: dcrouter) */
+        dbName?: string;
+        /** Default TTL in days for cached items (default: 30) */
+        defaultTTLDays?: number;
+        /** Cleanup interval in hours (default: 1) */
+        cleanupIntervalHours?: number;
+        /** TTL configuration per data type (in days) */
+        ttlConfig?: {
+            /** Email cache TTL (default: 30 days) */
+            emails?: number;
+            /** IP reputation cache TTL (default: 1 day) */
+            ipReputation?: number;
+            /** Bounce records TTL (default: 30 days) */
+            bounces?: number;
+            /** DKIM keys TTL (default: 90 days) */
+            dkimKeys?: number;
+            /** Suppression list TTL (default: 30 days, can be permanent) */
+            suppression?: number;
+        };
+    };
+    /**
+     * RADIUS server configuration for network authentication
+     * Enables MAC Authentication Bypass (MAB) and VLAN assignment
+     */
+    radiusConfig?: IRadiusServerConfig;
+}
+/**
+ * DcRouter can be run on ingress and egress to and from a datacenter site.
+ */
+/**
+ * Context passed to HTTP routing rules
+ */
+/**
+ * Context passed to port proxy (SmartProxy) routing rules
+ */
+export interface PortProxyRuleContext {
+    proxy: plugins.smartproxy.SmartProxy;
+    routes: plugins.smartproxy.IRouteConfig[];
+}
+export declare class DcRouter {
+    options: IDcRouterOptions;
+    smartProxy?: plugins.smartproxy.SmartProxy;
+    dnsServer?: plugins.smartdns.dnsServerMod.DnsServer;
+    emailServer?: UnifiedEmailServer;
+    radiusServer?: RadiusServer;
+    storageManager: StorageManager;
+    opsServer: OpsServer;
+    metricsManager?: MetricsManager;
+    cacheDb?: CacheDb;
+    cacheCleaner?: CacheCleaner;
+    typedrouter: plugins.typedrequest.TypedRouter;
+    private qenv;
+    constructor(optionsArg: IDcRouterOptions);
+    start(): Promise<void>;
+    /**
+     * Log comprehensive startup summary
+     */
+    private logStartupSummary;
+    /**
+     * Set up the cache database (smartdata + LocalTsmDb)
+     */
+    private setupCacheDb;
+    /**
+     * Set up SmartProxy with direct configuration and automatic email routes
+     */
+    private setupSmartProxy;
+    /**
+     * Generate SmartProxy routes for email configuration
+     */
+    private generateEmailRoutes;
+    /**
+     * Generate SmartProxy routes for DNS configuration
+     */
+    private generateDnsRoutes;
+    /**
+     * Check if a domain matches a pattern (including wildcard support)
+     * @param domain The domain to check
+     * @param pattern The pattern to match against (e.g., "*.example.com")
+     * @returns Whether the domain matches the pattern
+     */
+    private isDomainMatch;
+    stop(): Promise<void>;
+    /**
+     * Update SmartProxy configuration
+     * @param config New SmartProxy configuration
+     */
+    updateSmartProxyConfig(config: plugins.smartproxy.ISmartProxyOptions): Promise<void>;
+    /**
+     * Set up unified email handling with pattern-based routing
+     * This implements the consolidated emailConfig approach
+     */
+    private setupUnifiedEmailHandling;
+    /**
+     * Update the unified email configuration
+     * @param config New email configuration
+     */
+    updateEmailConfig(config: IUnifiedEmailServerOptions): Promise<void>;
+    /**
+     * Stop all unified email components
+     */
+    private stopUnifiedEmailComponents;
+    /**
+     * Update domain rules for email routing
+     * @param rules New domain rules to apply
+     */
+    updateEmailRoutes(routes: IEmailRoute[]): Promise<void>;
+    /**
+     * Get statistics from all components
+     */
+    getStats(): any;
+    /**
+     * Register DNS records with the DNS server
+     * @param records Array of DNS records to register
+     */
+    private registerDnsRecords;
+    /**
+     * Parse DNS record data based on record type
+     * @param type DNS record type
+     * @param value DNS record value
+     * @returns Parsed data for the DNS response
+     */
+    private parseDnsRecordData;
+    /**
+     * Set up DNS server with socket handler for DoH
+     */
+    private setupDnsWithSocketHandler;
+    /**
+     * Create DNS socket handler for DoH
+     */
+    private createDnsSocketHandler;
+    /**
+     * Validate DNS configuration
+     */
+    private validateDnsConfiguration;
+    /**
+     * Generate email DNS records for domains with internal-dns mode
+     */
+    private generateEmailDnsRecords;
+    /**
+     * Load DKIM records from JSON files
+     * Reads all *.dkimrecord.json files from the DNS records directory
+     */
+    private loadDkimRecords;
+    /**
+     * Initialize DKIM keys for all configured email domains
+     * This ensures DKIM records are available immediately at startup
+     */
+    private initializeDkimForEmailDomains;
+    /**
+     * Generate authoritative DNS records (NS only) for all domains in dnsScopes
+     * SOA records are now automatically generated by smartdns with primaryNameserver setting
+     */
+    private generateAuthoritativeRecords;
+    /**
+     * Extract the base domain from a DNS record name
+     */
+    private extractDomain;
+    /**
+     * Apply proxy IP replacement logic to DNS records
+     */
+    private applyProxyIpReplacement;
+    /**
+     * Detect the server's public IP address
+     */
+    private detectServerPublicIp;
+    /**
+     * Set up RADIUS server for network authentication
+     */
+    private setupRadiusServer;
+    /**
+     * Update RADIUS configuration at runtime
+     */
+    updateRadiusConfig(config: IRadiusServerConfig): Promise<void>;
+}
+export type { IUnifiedEmailServerOptions };
+export type { IRadiusServerConfig };
+export default DcRouter;