@mridang/webhint-hint-plumbline 0.13.0 → 0.14.0

package/dist/lib/tls/remote.d.ts

@@ -0,0 +1,54 @@
+import type { EphemeralKey } from './evaluate.js';
+import type { TlsConnect } from './client.js';
+/** The certificate facts the prober reads, named as Node names them. */
+export interface RemoteCertificate {
+    subject: Record<string, string>;
+    issuer: Record<string, string>;
+    subjectaltname: string;
+    valid_from: string;
+    valid_to: string;
+    serialNumber: string;
+    fingerprint256: string;
+    keyType: string;
+    bits?: number;
+    asn1Curve?: string;
+    signatureAlgorithm: string;
+    /** Where the issuer's certificate and an OCSP answer can be had, as Node names the keys. */
+    infoAccess?: Record<string, string[]>;
+}
+/** What the prober answers. */
+export interface RemoteHandshake {
+    protocol: string;
+    cipher: {
+        name: string;
+        standardName: string;
+    };
+    authorized: boolean;
+    authorizationError: string | null;
+    ephemeral: EphemeralKey | null;
+    /** DER, base64, leaf first. */
+    chain: string[] | null;
+    certificates: RemoteCertificate[] | null;
+    /** DER, base64. */
+    ocsp: string | null;
+    compression?: boolean;
+}
+/** What is asked of the prober. */
+export interface RemoteRequest {
+    host: string;
+    port: number;
+    starttls?: 'smtp';
+    minVersion?: string;
+    maxVersion?: string;
+    /** An OpenSSL cipher list. */
+    ciphers?: string;
+    /** An OpenSSL signature algorithm list. */
+    sigalgs?: string;
+    /** Colon separated key exchange groups. */
+    ecdhCurve?: string;
+    requestOCSP?: boolean;
+}
+/** Makes one request to the prober; rejects when the handshake failed. */
+export type RemoteCall = (request: RemoteRequest) => Promise<RemoteHandshake>;
+/** A `TlsConnect` that asks the prober. */
+export declare function remoteConnect(call: RemoteCall): TlsConnect;

package/dist/lib/tls/remote.js

@@ -0,0 +1,54 @@
+import { TLS_VERSIONS } from './constants.js';
+/** The base64 text as bytes. */
+function bytesOf(base64) {
+    return Buffer.from(base64, 'base64');
+}
+/** The leaf certificate as Node shows it, from what the prober read. */
+function peerOf(certs, chain) {
+    const leaf = certs[0];
+    return {
+        subject: leaf?.subject ?? {},
+        issuer: leaf?.issuer ?? {},
+        subjectaltname: leaf?.subjectaltname,
+        valid_from: leaf?.valid_from,
+        valid_to: leaf?.valid_to,
+        serialNumber: leaf?.serialNumber,
+        fingerprint256: leaf?.fingerprint256,
+        bits: leaf?.bits,
+        asn1Curve: leaf?.asn1Curve,
+        infoAccess: leaf?.infoAccess,
+        raw: chain[0],
+    };
+}
+/** A `TlsConnect` that asks the prober. */
+export function remoteConnect(call) {
+    return async (target, options) => {
+        const answer = await call({
+            host: target.host,
+            port: target.port,
+            ...(target.starttls ? { starttls: target.starttls } : {}),
+            ...(options.minVersion ? { minVersion: options.minVersion } : {}),
+            ...(options.maxVersion ? { maxVersion: options.maxVersion } : {}),
+            ...(options.ciphers ? { ciphers: options.ciphers } : {}),
+            ...(options.sigalgs ? { sigalgs: options.sigalgs } : {}),
+            ...(options.ecdhCurve ? { ecdhCurve: options.ecdhCurve } : {}),
+            ...(options.requestOCSP ? { requestOCSP: true } : {}),
+        });
+        const chain = (answer.chain ?? []).map(bytesOf);
+        const protocol = TLS_VERSIONS.includes(answer.protocol)
+            ? answer.protocol
+            : null;
+        const result = {
+            protocol,
+            cipher: answer.cipher,
+            ephemeral: answer.ephemeral,
+            authorized: answer.authorized,
+            authorizationError: answer.authorizationError,
+            chain,
+            peerCertificate: peerOf(answer.certificates ?? [], chain),
+            ocspResponse: answer.ocsp ? bytesOf(answer.ocsp) : null,
+        };
+        return result;
+    };
+}
+//# sourceMappingURL=remote.js.map

package/dist/lib/tls/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../src/lib/tls/remote.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAmB,MAAM,gBAAgB,CAAC;AAuD/D,gCAAgC;AAChC,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,wEAAwE;AACxE,SAAS,MAAM,CACb,KAAmC,EACnC,KAAwB;IAExB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE;QAC5B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;QAC1B,cAAc,EAAE,IAAI,EAAE,cAAc;QACpC,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,QAAQ,EAAE,IAAI,EAAE,QAAQ;QACxB,YAAY,EAAE,IAAI,EAAE,YAAY;QAChC,cAAc,EAAE,IAAI,EAAE,cAAc;QACpC,IAAI,EAAE,IAAI,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI,EAAE,SAAS;QAC1B,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;KACgB,CAAC;AAClC,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAI,YAAkC,CAAC,QAAQ,CAC3D,MAAM,CAAC,QAAQ,CAChB;YACC,CAAC,CAAE,MAAM,CAAC,QAAuB;YACjC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,MAAM,GAAgB;YAC1B,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,KAAK;YACL,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC;YACzD,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SACxD,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/worker/hint.d.ts

@@ -0,0 +1,12 @@
+/**
+ * What the hints take from webhint's core at run time, for a runtime that
+ * cannot load the core (a Cloudflare Worker: the core reads files and loads
+ * packages by name). The hints only need the scope names; the rest of webhint
+ * is types. `package.json` points `#hint` here under the `workerd` condition.
+ */
+/** Where a hint applies: the site, a local project, or either. Same values as webhint's. */
+export declare enum HintScope {
+    local = "local",
+    site = "site",
+    any = "any"
+}

package/dist/worker/hint.js

@@ -0,0 +1,14 @@
+/**
+ * What the hints take from webhint's core at run time, for a runtime that
+ * cannot load the core (a Cloudflare Worker: the core reads files and loads
+ * packages by name). The hints only need the scope names; the rest of webhint
+ * is types. `package.json` points `#hint` here under the `workerd` condition.
+ */
+/** Where a hint applies: the site, a local project, or either. Same values as webhint's. */
+export var HintScope;
+(function (HintScope) {
+    HintScope["local"] = "local";
+    HintScope["site"] = "site";
+    HintScope["any"] = "any";
+})(HintScope || (HintScope = {}));
+//# sourceMappingURL=hint.js.map

package/dist/worker/hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hint.js","sourceRoot":"","sources":["../../src/worker/hint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4FAA4F;AAC5F,MAAM,CAAN,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,4BAAe,CAAA;IACf,0BAAa,CAAA;IACb,wBAAW,CAAA;AACb,CAAC,EAJW,SAAS,KAAT,SAAS,QAIpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mridang/webhint-hint-plumbline",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "type": "module",
   "scripts": {
     "prepack": "tsc --build",
@@ -17,6 +17,7 @@
   },
   "imports": {
     "#hint": {
+      "workerd": "./dist/worker/hint.js",
       "default": "hint"
     },
     "#net": {