@redsift/products 12.5.16-alpha.1 → 12.6.1

package/_internal/signal-cards.js

@@ -1,6 +1,6 @@
 import { a7 as signalCardsLogger, a8 as useSignalCardTranslation, a9 as useCollapseController, aa as adaptAmpExtractor, ab as ExtractedCategoryContent, ac as Checklist, ad as SignalCardNormal, ae as EXTRACTION_CAPTION_KEYS, af as adaptDkimExtractor, ag as useMultiNamespaceTranslation, ah as adaptDomainAnalyzerDkimExtractor, ai as COLOR, aj as parseGlossaryMarkdown, ak as TooltipInPortalWrapper, al as FONT, am as adaptDmarcExtractor, an as DmarcPromoBanner, ao as adaptDnssecExtractor, ap as adaptFcrdnsExtractor, aq as adaptMtaStsExtractor, ar as adaptSpfExtractor, E as Ehlo, R as ReturnPath, as as adaptDomainAnalyzerSpfExtractor, at as adaptSubdoExtractor, au as adaptThreatIntelligenceExtractor, av as adaptTlsExtractor, aw as adaptUrlsExtractor, ax as SignalCardDmarcDomain$1, ay as SignalCardSpfDomain$1, az as SignalCardBimi$1, a as useResolvedTheme, S as SignalCardThemeProvider, aA as withSignalCardTheme } from './SignalCardSpfDomain.js';
 export { A as ARecord, Q as ATAG, I as BimiRecord, M as CMC, i as Canonicalization, H as CipherSuite, C as CnameRecord, D as Dkim, m as DkimAlgorithm, w as DkimAlignment, h as DkimSelector, k as DkimSignature, s as DkimSigningDomain, U as Dmarc, J as DmarcCompliant, n as DmarcPolicy, E as Ehlo, F as From, a6 as GLOSSARY_ICON_MAP, G as GlossaryTerm, N as ITAG, K as KeyLength, a0 as MaxAge, _ as Mode, a1 as MtaStsCertificate, a3 as MtaStsCertificateCnameName, a5 as MtaStsCertificateCnameType, a4 as MtaStsCertificateCnameValue, a2 as MtaStsCertificateExpiry, Y as MtaStsPolicyFile, X as MtaStsRecord, $ as Mx, O as OrganizationalDomain, o as Pct, P as PtrRecord, R as ReturnPath, q as Rua, r as Ruf, L as SVG, b as SenderIp, S as SignalCardThemeProvider, j as SignedHeaders, f as SignerDomain, p as Sp, y as Spf, x as SpfAlignment, t as SpfDomain, d as SpfRecord, B as Ssl, v as SubdomainPolicy, z as Tls, W as TlsRptRecord, l as Ttl, T as TxtRecord, e as TxtRecords, V as VMC, Z as Version, c as createGlossaryLink, g as glossaryLabelIds, a as useResolvedTheme, u as useSignalCardTheme } from './SignalCardSpfDomain.js';
-import { DKIM_KEY, extractGoogleYahooComplianceData, statusToTranslationKey, buildSPFCheckerLink, getSpfPassResult, SUBDO_CARD_STATUS, SIGNAL_TYPES, BIMI_CHECKER_SIGNAL_TYPES, DOMAIN_ANALYZER_SIGNAL_TYPES, SIGNAL_CARD_POSITIONS, STATUS_ICON_STYLES, getCanonicalSignalType, DEFAULT_PRIORITY_SIGNAL_TYPES, getSignalStatus } from '@redsift/signal-logic';
+import { DKIM_KEY, getDmarcAlignmentStatus, extractGoogleYahooComplianceData, statusToTranslationKey, buildSPFCheckerLink, getSpfPassResult, SUBDO_CARD_STATUS, SIGNAL_TYPES, BIMI_CHECKER_SIGNAL_TYPES, DOMAIN_ANALYZER_SIGNAL_TYPES, SIGNAL_CARD_POSITIONS, STATUS_ICON_STYLES, getCanonicalSignalType, DEFAULT_PRIORITY_SIGNAL_TYPES, getSignalStatus } from '@redsift/signal-logic';
 export { BIMI_CHECKER_SIGNAL_TYPES, CARD_STATUS, DOMAIN_ANALYZER_SIGNAL_TYPES, PUBLIC_INVESTIGATE_SIGNAL_TYPES, SIGNAL_TYPES, getSignalStatus } from '@redsift/signal-logic';
 import { _ as _objectWithoutProperties, a as _extends, b as _objectSpread2 } from './_rollupPluginBabelHelpers.js';
 import React__default, { Component, forwardRef, useMemo, useState, useCallback, useEffect, memo } from 'react';
@@ -1494,13 +1494,37 @@ SignalCardDkimDomainAnalyzer$1.className = CLASSNAME$c;
 
 const _excluded$c = ["message"];
 const SAND = '#f5f2eb';
+/**
+ * Which aligned mechanisms carried the pass. DMARC needs only one of them, so `'pass'` (whose copy
+ * says the email "passed both DKIM and SPF") is reserved for when both did (DS-118).
+ * Returns null when neither did.
+ *
+ * The DKIM leg is read through signal-logic, never from the raw `dmarc.alignDkim` scalar. The API
+ * derives that scalar from one collapsed signing domain, so it reports `false` for a message where
+ * another signature verified and aligned (see `multi-dkim-alignment-data.ts`). signal-logic settles
+ * the leg from the signatures, and that is the verdict the card beside this box shows.
+ */
+function getPassState(dmarc, dkim) {
+  const {
+    dkimAligned,
+    spfAligned
+  } = getDmarcAlignmentStatus(dmarc, dkim, null);
+  if (dkimAligned && spfAligned) return 'pass';
+  if (dkimAligned) return 'pass-dkim-only';
+  if (spfAligned) return 'pass-spf-only';
+  return null;
+}
+
 /**
  * Determines the email compliance state from DMARC data.
  * Returns null when compliance cannot be determined (permerror, temperror, none).
  */
-function getEmailComplianceState(dmarc) {
+function getEmailComplianceState(dmarc, dkim) {
+  var _getPassState;
   if (!dmarc) return null;
-  if (dmarc.result === 'pass') return 'pass';
+  // With no alignment data at all there is no mechanism to name, so a pass keeps the both-passed
+  // copy it always had.
+  if (dmarc.result === 'pass') return (_getPassState = getPassState(dmarc, dkim)) !== null && _getPassState !== void 0 ? _getPassState : 'pass';
   if (dmarc.result === 'fail') {
     if (!dmarc.alignDkim && !dmarc.alignSpf) return 'fail-both';
     if (!dmarc.alignDkim) return 'fail-dkim';
@@ -1511,7 +1535,8 @@ function getEmailComplianceState(dmarc) {
   // evaluate compliance based on it instead of returning 'none'.
   if (dmarc.result === 'none') {
     if (dmarc.policy) {
-      if (dmarc.alignDkim || dmarc.alignSpf) return 'pass';
+      const passState = getPassState(dmarc, dkim);
+      if (passState) return passState;
       if (dmarc.alignDkim === false && dmarc.alignSpf === false) return 'fail-both';
       if (dmarc.alignDkim === false) return 'fail-dkim';
       if (dmarc.alignSpf === false) return 'fail-spf';
@@ -1524,7 +1549,8 @@ function getEmailComplianceState(dmarc) {
     // Compliance CAN be determined — evaluate alignment normally.
     const hasRua = Boolean((_dmarc$policy = dmarc.policy) === null || _dmarc$policy === void 0 ? void 0 : (_dmarc$policy$rua = _dmarc$policy.rua) === null || _dmarc$policy$rua === void 0 ? void 0 : _dmarc$policy$rua.length) || /(?:^|;\s*)rua\s*=\s*mailto:/i.test((_dmarc$raw = dmarc.raw) !== null && _dmarc$raw !== void 0 ? _dmarc$raw : '');
     if (hasRua) {
-      if (dmarc.alignDkim || dmarc.alignSpf) return 'pass';
+      const passState = getPassState(dmarc, dkim);
+      if (passState) return passState;
       if (dmarc.alignDkim === false && dmarc.alignSpf === false) return 'fail-both';
       if (dmarc.alignDkim === false) return 'fail-dkim';
       if (dmarc.alignSpf === false) return 'fail-spf';
@@ -1568,6 +1594,8 @@ function getDomainPolicyState(dmarc) {
 }
 const EMAIL_STATUS = {
   pass: 'good',
+  'pass-dkim-only': 'good',
+  'pass-spf-only': 'good',
   'fail-both': 'danger',
   'fail-dkim': 'danger',
   'fail-spf': 'danger',
@@ -1719,11 +1747,12 @@ function DmarcSummaryBoxes(_ref2) {
   var _dmarc$policy$pct, _dmarc$policy2, _dmarc$policy3, _dmarc$policy3$rua, _dmarc$raw2, _dmarc$policyDomain$r, _dmarc$policyDomain;
   let {
     dmarc,
+    dkim,
     isDomainAnalyzer = false,
     t
   } = _ref2;
   const domainState = getDomainPolicyState(dmarc);
-  const emailState = isDomainAnalyzer ? null : getEmailComplianceState(dmarc);
+  const emailState = isDomainAnalyzer ? null : getEmailComplianceState(dmarc, dkim);
   const pct = (_dmarc$policy$pct = dmarc === null || dmarc === void 0 ? void 0 : (_dmarc$policy2 = dmarc.policy) === null || _dmarc$policy2 === void 0 ? void 0 : _dmarc$policy2.pct) !== null && _dmarc$policy$pct !== void 0 ? _dmarc$policy$pct : 100;
   const reportWarnings = hasReportWarnings(dmarc);
   const hasRua = Boolean(dmarc === null || dmarc === void 0 ? void 0 : (_dmarc$policy3 = dmarc.policy) === null || _dmarc$policy3 === void 0 ? void 0 : (_dmarc$policy3$rua = _dmarc$policy3.rua) === null || _dmarc$policy3$rua === void 0 ? void 0 : _dmarc$policy3$rua.length) || /(?:^|;\s*)rua\s*=\s*mailto:/i.test((_dmarc$raw2 = dmarc === null || dmarc === void 0 ? void 0 : dmarc.raw) !== null && _dmarc$raw2 !== void 0 ? _dmarc$raw2 : '');
@@ -1804,6 +1833,10 @@ function DmarcSummaryBoxes(_ref2) {
     switch (state) {
       case 'pass':
         return t('card.dmarc.summary-email-pass');
+      case 'pass-dkim-only':
+        return t('card.dmarc.summary-email-pass-dkim-only');
+      case 'pass-spf-only':
+        return t('card.dmarc.summary-email-pass-spf-only');
       case 'fail-both':
         return t('card.dmarc.summary-email-fail-both');
       case 'fail-dkim':
@@ -1899,11 +1932,12 @@ const SignalCardDmarc$1 = /*#__PURE__*/forwardRef((props, ref) => {
     })();
     return /*#__PURE__*/React__default.createElement(React__default.Fragment, null, /*#__PURE__*/React__default.createElement(DmarcSummaryBoxes, {
       dmarc: dmarc,
+      dkim: dkim,
       isDomainAnalyzer: isDomainAnalyzer,
       cardType: cardType,
       t: t
     }), bannerContent);
-  }, [dmarc, isDomainAnalyzer, cardType, t, renderHeader, useInvestigateColors, promoHref, onPromoClick, promoText, promoButtonLabel]);
+  }, [dmarc, dkim, isDomainAnalyzer, cardType, t, renderHeader, useInvestigateColors, promoHref, onPromoClick, promoText, promoButtonLabel]);
   const sections = [...((extractedItemsCategories === null || extractedItemsCategories === void 0 ? void 0 : extractedItemsCategories.filter(cat => cat.items && cat.items.length > 0).map((cat, i) => {
     var _cat$extractionBox;
     return {