@serve.zone/dcrouter 17.0.0 → 17.1.1

package/dist_ts/email/mail-dns-txt-policy.js

@@ -0,0 +1,466 @@
+import * as plugins from '../plugins.js';
+import { decodeTxtRecordContent } from '../dns/txt-record-presentation.js';
+function intentKind(intent) {
+    const desired = intent.value.trim().toLowerCase();
+    if (desired.startsWith('v=spf1'))
+        return 'spf';
+    if (desired.startsWith('v=dmarc1'))
+        return 'dmarc';
+    if (desired.startsWith('v=dkim1'))
+        return 'dkim';
+    return 'exact';
+}
+function markerForKind(kind) {
+    if (kind === 'spf')
+        return 'v=spf1';
+    if (kind === 'dmarc')
+        return 'v=dmarc1';
+    if (kind === 'dkim')
+        return 'v=dkim1';
+    return undefined;
+}
+export function classifyMailTxtRecord(intent, rawValue) {
+    const kind = intentKind(intent);
+    const decoded = decodeTxtRecordContent(rawValue);
+    if (!decoded.ok) {
+        const marker = markerForKind(kind);
+        const rawNormalized = rawValue.trim().toLowerCase();
+        const plausiblyRelevant = kind === 'dkim'
+            ? rawNormalized.length > 0
+            : kind === 'dmarc'
+                ? /(?:^|;)\s*v=dmarc1(?:;|$)/.test(rawNormalized.replace(/^"/, ''))
+                : marker
+                    ? rawNormalized.slice(0, marker.length + 4).includes(marker)
+                    : rawValue.trim().startsWith('"');
+        return plausiblyRelevant
+            ? { relevant: true, malformed: decoded.error }
+            : { relevant: false };
+    }
+    const canonicalValue = decoded.value.trim();
+    const marker = markerForKind(kind);
+    const normalizedValue = canonicalValue.toLowerCase();
+    return {
+        relevant: kind === 'dkim'
+            ? canonicalValue.length > 0
+            : kind === 'dmarc'
+                ? /(?:^|;)\s*v=dmarc1(?:;|$)/.test(normalizedValue)
+                : marker
+                    ? normalizedValue.startsWith(marker)
+                    : canonicalValue === intent.value.trim(),
+        canonicalValue,
+    };
+}
+function ipv4Bytes(address) {
+    const parts = address.split('.');
+    if (parts.length !== 4)
+        return undefined;
+    const bytes = parts.map((part) => Number(part));
+    return bytes.every((part) => Number.isInteger(part) && part >= 0 && part <= 255)
+        ? bytes
+        : undefined;
+}
+function ipv6Bytes(address) {
+    let normalized = address.toLowerCase();
+    if (normalized.includes('.')) {
+        const lastColon = normalized.lastIndexOf(':');
+        const ipv4 = ipv4Bytes(normalized.slice(lastColon + 1));
+        if (lastColon < 0 || !ipv4)
+            return undefined;
+        normalized = `${normalized.slice(0, lastColon)}:${((ipv4[0] << 8) | ipv4[1]).toString(16)}:${((ipv4[2] << 8) | ipv4[3]).toString(16)}`;
+    }
+    const halves = normalized.split('::');
+    if (halves.length > 2)
+        return undefined;
+    const left = halves[0] ? halves[0].split(':') : [];
+    const right = halves[1] ? halves[1].split(':') : [];
+    const missing = 8 - left.length - right.length;
+    if ((halves.length === 1 && missing !== 0) || missing < 0)
+        return undefined;
+    const groups = [...left, ...Array.from({ length: missing }, () => '0'), ...right];
+    if (groups.length !== 8 || groups.some((group) => !/^[0-9a-f]{1,4}$/.test(group))) {
+        return undefined;
+    }
+    return groups.flatMap((group) => {
+        const value = Number.parseInt(group, 16);
+        return [value >> 8, value & 0xff];
+    });
+}
+function parseIpNetwork(value, family) {
+    const slashIndex = value.lastIndexOf('/');
+    const address = slashIndex >= 0 ? value.slice(0, slashIndex) : value;
+    const maximumPrefix = family === 4 ? 32 : 128;
+    const rawPrefix = slashIndex >= 0 ? value.slice(slashIndex + 1) : String(maximumPrefix);
+    if (!/^\d{1,3}$/.test(rawPrefix))
+        return undefined;
+    const prefixLength = Number.parseInt(rawPrefix, 10);
+    if (prefixLength < 0 || prefixLength > maximumPrefix)
+        return undefined;
+    const bytes = family === 4 ? ipv4Bytes(address) : ipv6Bytes(address);
+    return bytes ? { family, bytes, prefixLength } : undefined;
+}
+function networkContains(network, address) {
+    if (network.family !== address.family)
+        return false;
+    const wholeBytes = Math.floor(network.prefixLength / 8);
+    const remainingBits = network.prefixLength % 8;
+    for (let index = 0; index < wholeBytes; index++) {
+        if (network.bytes[index] !== address.bytes[index])
+            return false;
+    }
+    if (remainingBits === 0)
+        return true;
+    const mask = (0xff << (8 - remainingBits)) & 0xff;
+    return (network.bytes[wholeBytes] & mask) === (address.bytes[wholeBytes] & mask);
+}
+function parseAMechanism(body) {
+    let remaining = body.slice(1);
+    let ipv6PrefixLength = 128;
+    const doubleSlashIndex = remaining.lastIndexOf('//');
+    if (doubleSlashIndex >= 0) {
+        const value = remaining.slice(doubleSlashIndex + 2);
+        if (!/^\d{1,3}$/.test(value))
+            return undefined;
+        ipv6PrefixLength = Number.parseInt(value, 10);
+        remaining = remaining.slice(0, doubleSlashIndex);
+    }
+    let ipv4PrefixLength = 32;
+    const slashIndex = remaining.lastIndexOf('/');
+    if (slashIndex >= 0) {
+        const value = remaining.slice(slashIndex + 1);
+        if (!/^\d{1,2}$/.test(value))
+            return undefined;
+        ipv4PrefixLength = Number.parseInt(value, 10);
+        remaining = remaining.slice(0, slashIndex);
+    }
+    if (ipv4PrefixLength > 32 || ipv6PrefixLength > 128)
+        return undefined;
+    if (remaining && !remaining.startsWith(':'))
+        return undefined;
+    const domain = remaining.slice(1).trim().toLowerCase().replace(/\.$/, '');
+    if (domain.includes('%') || (domain && !/^[a-z0-9_.-]+$/.test(domain)))
+        return undefined;
+    return {
+        ...(domain ? { domain } : {}),
+        ipv4PrefixLength,
+        ipv6PrefixLength,
+    };
+}
+function parseSpfRecord(value) {
+    const terms = value.trim().split(/\s+/);
+    if (terms.shift()?.toLowerCase() !== 'v=spf1') {
+        return { error: 'SPF record must start with v=spf1' };
+    }
+    const parsed = { mechanisms: [], hasRedirect: false };
+    const modifiers = new Set();
+    for (const rawTerm of terms) {
+        if (!rawTerm)
+            continue;
+        let term = rawTerm;
+        let qualifier = '+';
+        let hadQualifier = false;
+        if (/^[+\-~?]/.test(term)) {
+            qualifier = term[0];
+            term = term.slice(1);
+            hadQualifier = true;
+        }
+        if (!term)
+            return { error: 'SPF contains an empty mechanism' };
+        const normalized = term.toLowerCase();
+        if (normalized.includes('=')) {
+            const match = term.match(/^([a-z][a-z0-9_.-]*)=(\S+)$/i);
+            if (hadQualifier || !match)
+                return { error: `SPF contains an invalid modifier: ${rawTerm}` };
+            const name = match[1].toLowerCase();
+            if (modifiers.has(name))
+                return { error: `SPF contains duplicate ${name} modifiers` };
+            modifiers.add(name);
+            if (name === 'redirect')
+                parsed.hasRedirect = true;
+            continue;
+        }
+        if (normalized.startsWith('ip4:') || normalized.startsWith('ip6:')) {
+            const family = normalized.startsWith('ip4:') ? 4 : 6;
+            const network = parseIpNetwork(term.slice(4), family);
+            if (!network)
+                return { error: `SPF contains an invalid ${family === 4 ? 'ip4' : 'ip6'} mechanism: ${rawTerm}` };
+            parsed.mechanisms.push({ kind: 'ip', qualifier, network });
+            continue;
+        }
+        if (normalized === 'a' || normalized.startsWith('a:') || normalized.startsWith('a/')) {
+            const mechanism = parseAMechanism(term);
+            if (!mechanism)
+                return { error: `SPF contains an invalid a mechanism: ${rawTerm}` };
+            parsed.mechanisms.push({ kind: 'a', qualifier, mechanism });
+            continue;
+        }
+        if (normalized === 'all') {
+            parsed.mechanisms.push({ kind: 'all', qualifier });
+            continue;
+        }
+        if (normalized === 'mx'
+            || normalized.startsWith('mx:')
+            || normalized.startsWith('mx/')
+            || normalized.startsWith('include:')
+            || normalized.startsWith('exists:')
+            || normalized === 'ptr'
+            || normalized.startsWith('ptr:')) {
+            parsed.mechanisms.push({ kind: 'unsupported', name: rawTerm });
+            continue;
+        }
+        return { error: `SPF contains an unknown mechanism: ${rawTerm}` };
+    }
+    return { parsed };
+}
+function desiredSpfAddresses(value) {
+    const parsed = parseSpfRecord(value);
+    if (!parsed.parsed)
+        return { error: parsed.error };
+    const addresses = [];
+    for (const mechanism of parsed.parsed.mechanisms) {
+        if (mechanism.kind === 'all' && mechanism.qualifier === '-')
+            continue;
+        if (mechanism.kind !== 'ip'
+            || mechanism.qualifier !== '+'
+            || mechanism.network.prefixLength !== (mechanism.network.family === 4 ? 32 : 128)) {
+            return { error: 'Desired SPF intent does not contain only concrete sender addresses' };
+        }
+        addresses.push(mechanism.network);
+    }
+    return addresses.length > 0
+        ? { addresses }
+        : { error: 'Desired SPF intent does not contain concrete sender addresses' };
+}
+async function withTimeout(promise, timeoutMs) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_resolve, reject) => {
+                timer = setTimeout(() => reject(new Error(`DNS lookup timed out after ${timeoutMs}ms`)), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+async function evaluateSpf(intent, actualValue, options) {
+    const desired = desiredSpfAddresses(intent.value);
+    if (!desired.addresses)
+        return { outcome: 'invalid', reason: desired.error };
+    const actual = parseSpfRecord(actualValue);
+    if (!actual.parsed)
+        return { outcome: 'invalid', reason: actual.error };
+    const timeoutMs = Math.max(1, options.lookupTimeoutMs ?? 2_000);
+    const maxDnsLookups = Math.max(1, options.maxDnsLookups ?? 10);
+    let lookupCount = 0;
+    const cache = new Map();
+    const resolveBounded = async (name, type) => {
+        const key = `${type}:${name}`;
+        const cached = cache.get(key);
+        if (cached)
+            return await cached;
+        if (!options.resolveDns)
+            throw new Error('SPF a mechanism requires a DNS resolver');
+        if (lookupCount >= maxDnsLookups) {
+            throw new Error(`SPF DNS lookup budget of ${maxDnsLookups} was exceeded`);
+        }
+        lookupCount++;
+        const lookup = withTimeout(options.resolveDns(name, type), timeoutMs);
+        cache.set(key, lookup);
+        return await lookup;
+    };
+    try {
+        for (const address of desired.addresses) {
+            let authorized = false;
+            for (const mechanism of actual.parsed.mechanisms) {
+                if (mechanism.kind === 'unsupported') {
+                    return {
+                        outcome: 'conflict',
+                        reason: `SPF authorization is indeterminate before a proven match: ${mechanism.name}`,
+                    };
+                }
+                let matches = false;
+                if (mechanism.kind === 'ip') {
+                    matches = networkContains(mechanism.network, address);
+                }
+                else if (mechanism.kind === 'a') {
+                    const domain = mechanism.mechanism.domain || intent.name.toLowerCase().replace(/\.$/, '');
+                    const type = address.family === 4 ? 'A' : 'AAAA';
+                    const prefixLength = address.family === 4
+                        ? mechanism.mechanism.ipv4PrefixLength
+                        : mechanism.mechanism.ipv6PrefixLength;
+                    for (const answer of await resolveBounded(domain, type)) {
+                        const network = parseIpNetwork(`${answer}/${prefixLength}`, address.family);
+                        if (network && networkContains(network, address)) {
+                            matches = true;
+                            break;
+                        }
+                    }
+                }
+                else {
+                    matches = true;
+                }
+                if (!matches)
+                    continue;
+                if (mechanism.qualifier !== '+') {
+                    return {
+                        outcome: 'conflict',
+                        reason: `SPF first match for a desired edge has qualifier ${mechanism.qualifier}`,
+                    };
+                }
+                authorized = true;
+                break;
+            }
+            if (!authorized) {
+                return {
+                    outcome: 'conflict',
+                    reason: actual.parsed.hasRedirect
+                        ? 'SPF redirect is unsupported and authorization cannot be proven'
+                        : 'SPF record does not authorize every desired mail edge address',
+                };
+            }
+        }
+    }
+    catch (error) {
+        return { outcome: 'lookup-error', reason: `SPF DNS lookup failed: ${error.message}` };
+    }
+    return { outcome: 'valid', effectiveValue: actualValue };
+}
+function parseDmarc(value) {
+    const orderedTags = [];
+    const seen = new Set();
+    for (const segment of value.split(';')) {
+        const trimmed = segment.trim();
+        if (!trimmed)
+            continue;
+        const equalsIndex = trimmed.indexOf('=');
+        if (equalsIndex <= 0)
+            return { error: `Malformed DMARC tag: ${trimmed}` };
+        const key = trimmed.slice(0, equalsIndex).trim().toLowerCase();
+        const tagValue = trimmed.slice(equalsIndex + 1).trim();
+        if (!key || !tagValue || seen.has(key))
+            return { error: `Invalid or duplicate DMARC tag: ${key}` };
+        seen.add(key);
+        orderedTags.push({ key, value: tagValue });
+    }
+    if (orderedTags[0]?.key !== 'v' || orderedTags[0].value !== 'DMARC1') {
+        return { error: 'DMARC v=DMARC1 must be the first tag' };
+    }
+    const tags = new Map(orderedTags.map((tag) => [tag.key, tag.value]));
+    const rawPolicy = tags.get('p')?.toLowerCase();
+    // Malformed optional tag values are ignored and locally defaulted. A missing
+    // or malformed p therefore has effective policy "none". pct and unknown
+    // extension tags do not change the policy-strength comparison.
+    const policy = rawPolicy === 'quarantine' || rawPolicy === 'reject' || rawPolicy === 'none'
+        ? rawPolicy
+        : 'none';
+    return { policy: { policy } };
+}
+function evaluateDmarc(intent, actualValue) {
+    const desired = parseDmarc(intent.value);
+    const actual = parseDmarc(actualValue);
+    if (!desired.policy)
+        return { outcome: 'invalid', reason: desired.error };
+    if (!actual.policy)
+        return { outcome: 'invalid', reason: actual.error };
+    const strength = { none: 0, quarantine: 1, reject: 2 };
+    if (strength[actual.policy.policy] < strength[desired.policy.policy]) {
+        return { outcome: 'conflict', reason: 'Operator DMARC policy is weaker than the desired policy' };
+    }
+    return { outcome: 'valid', effectiveValue: actualValue };
+}
+function decodeDkimPublicKey(value) {
+    const normalized = value.replace(/\s+/g, '');
+    if (!normalized || !/^[A-Za-z0-9+/]+={0,2}$/.test(normalized) || normalized.length % 4 !== 0) {
+        return undefined;
+    }
+    const decoded = plugins.buffer.Buffer.from(normalized, 'base64');
+    return decoded.toString('base64').replace(/=+$/, '') === normalized.replace(/=+$/, '')
+        ? decoded
+        : undefined;
+}
+function parseDkim(value) {
+    const tags = new Map();
+    for (const segment of value.split(';')) {
+        const trimmed = segment.trim();
+        if (!trimmed)
+            continue;
+        const equalsIndex = trimmed.indexOf('=');
+        if (equalsIndex <= 0)
+            return { error: `Malformed DKIM tag: ${trimmed}` };
+        const key = trimmed.slice(0, equalsIndex).trim().toLowerCase();
+        const tagValue = trimmed.slice(equalsIndex + 1).trim();
+        if (!/^[a-z][a-z0-9]*$/.test(key) || tags.has(key)) {
+            return { error: `Invalid or duplicate DKIM tag: ${key}` };
+        }
+        tags.set(key, tagValue);
+    }
+    if (tags.has('v') && tags.get('v') !== 'DKIM1') {
+        return { error: 'DKIM v must be DKIM1 when present' };
+    }
+    const publicKey = decodeDkimPublicKey(tags.get('p') || '');
+    if (!publicKey)
+        return { error: 'DKIM p must contain a valid non-empty base64 public key' };
+    const keyType = (tags.get('k') || 'rsa').toLowerCase();
+    const hashes = (tags.get('h') || 'sha256')
+        .split(':').map((entry) => entry.trim().toLowerCase()).filter(Boolean);
+    const services = (tags.get('s') || '*')
+        .split(':').map((entry) => entry.trim().toLowerCase()).filter(Boolean);
+    return { policy: { publicKey, keyType, hashes, services } };
+}
+function equalBytes(left, right) {
+    return left.length === right.length && left.every((value, index) => value === right[index]);
+}
+function evaluateDkim(intent, actualValue) {
+    const desired = parseDkim(intent.value);
+    const actual = parseDkim(actualValue);
+    if (!desired.policy)
+        return { outcome: 'invalid', reason: desired.error };
+    if (!actual.policy)
+        return { outcome: 'invalid', reason: actual.error };
+    if (actual.policy.keyType !== 'rsa') {
+        return { outcome: 'conflict', reason: 'DKIM k does not permit the required RSA key' };
+    }
+    if (!actual.policy.hashes.includes('sha256')) {
+        return { outcome: 'conflict', reason: 'DKIM h does not permit sha256' };
+    }
+    if (!actual.policy.services.some((service) => service === '*' || service === 'email')) {
+        return { outcome: 'conflict', reason: 'DKIM s does not permit email service' };
+    }
+    if (!equalBytes(actual.policy.publicKey, desired.policy.publicKey)) {
+        return { outcome: 'conflict', reason: `DKIM record at ${intent.name} contains a different public key` };
+    }
+    return { outcome: 'valid', effectiveValue: actualValue };
+}
+export async function evaluateMailTxtIntent(intent, rawValues, options = {}) {
+    const classified = rawValues
+        .map((value) => classifyMailTxtRecord(intent, value))
+        .filter((entry) => entry.relevant);
+    if (classified.length === 0) {
+        return { outcome: 'missing', reason: `${intent.type} ${intent.name} is missing` };
+    }
+    if (classified.length > 1) {
+        return { outcome: 'duplicate', reason: `${intent.name} has multiple relevant TXT records` };
+    }
+    const record = classified[0];
+    if (record.malformed || record.canonicalValue === undefined) {
+        return { outcome: 'invalid', reason: record.malformed || 'TXT record is malformed' };
+    }
+    const kind = intentKind(intent);
+    if (kind === 'spf')
+        return await evaluateSpf(intent, record.canonicalValue, options);
+    if (kind === 'dmarc')
+        return evaluateDmarc(intent, record.canonicalValue);
+    if (kind === 'dkim')
+        return evaluateDkim(intent, record.canonicalValue);
+    if (record.canonicalValue === intent.value.trim()) {
+        return { outcome: 'valid', effectiveValue: record.canonicalValue };
+    }
+    return {
+        outcome: 'conflict',
+        reason: `TXT record at ${intent.name} does not exactly match the desired value`,
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/email/reconcile-mail-dns-singleton.d.ts

@@ -0,0 +1,47 @@
+import { DnsRecordDoc } from '../db/documents/classes.dns-record.doc.js';
+import type { IEmailDnsRecordIntent } from '../../dist_ts_interfaces/data/email-domain.js';
+import { type IMailDnsTxtPolicyResult } from './mail-dns-txt-policy.js';
+export interface IMailDnsMutationClient {
+    createRecord(args: {
+        domainId: string;
+        name: string;
+        type: 'MX' | 'TXT' | 'A' | 'AAAA';
+        value: string;
+        ttl: number;
+        createdBy: string;
+        managedBy: string;
+        managedOwnerId: string;
+        managedRecordKey: string;
+    }): Promise<{
+        success: boolean;
+        id?: string;
+        message?: string;
+    }>;
+    updateRecord(args: {
+        id: string;
+        name?: string;
+        value?: string;
+        ttl?: number;
+    }): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    deleteRecord(id: string): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+}
+export interface IReconcileMailDnsSingletonOptions {
+    intent: IEmailDnsRecordIntent;
+    rrset: DnsRecordDoc[];
+    dnsManager: IMailDnsMutationClient;
+    managedBy: string;
+    createdBy: string;
+    evaluate: (intent: IEmailDnsRecordIntent, values: string[]) => Promise<IMailDnsTxtPolicyResult>;
+}
+export declare function applyMailDnsVerificationResult(intent: IEmailDnsRecordIntent, result: IMailDnsTxtPolicyResult, phase: 'reconcile' | 'verify'): void;
+/**
+ * Reconcile SPF, DMARC, and DKIM singleton TXT records without adopting or
+ * mutating operator policy. Returns false for non-singleton intents.
+ */
+export declare function reconcileMailDnsSingleton(options: IReconcileMailDnsSingletonOptions): Promise<boolean>;