@serve.zone/dcrouter 2.12.4

package/dist_ts/mail/security/classes.spfverifier.js

@@ -0,0 +1,492 @@
+import * as plugins from '../../plugins.js';
+import { logger } from '../../logger.js';
+import { SecurityLogger, SecurityLogLevel, SecurityEventType } from '../../security/index.js';
+/**
+ * SPF result qualifiers
+ */
+export var SpfQualifier;
+(function (SpfQualifier) {
+    SpfQualifier["PASS"] = "+";
+    SpfQualifier["NEUTRAL"] = "?";
+    SpfQualifier["SOFTFAIL"] = "~";
+    SpfQualifier["FAIL"] = "-";
+})(SpfQualifier || (SpfQualifier = {}));
+/**
+ * SPF mechanism types
+ */
+export var SpfMechanismType;
+(function (SpfMechanismType) {
+    SpfMechanismType["ALL"] = "all";
+    SpfMechanismType["INCLUDE"] = "include";
+    SpfMechanismType["A"] = "a";
+    SpfMechanismType["MX"] = "mx";
+    SpfMechanismType["IP4"] = "ip4";
+    SpfMechanismType["IP6"] = "ip6";
+    SpfMechanismType["EXISTS"] = "exists";
+    SpfMechanismType["REDIRECT"] = "redirect";
+    SpfMechanismType["EXP"] = "exp";
+})(SpfMechanismType || (SpfMechanismType = {}));
+/**
+ * Maximum lookup limit for SPF records (prevent infinite loops)
+ */
+const MAX_SPF_LOOKUPS = 10;
+/**
+ * Class for verifying SPF records
+ */
+export class SpfVerifier {
+    constructor(dnsManager) {
+        this.lookupCount = 0;
+        this.dnsManager = dnsManager;
+    }
+    /**
+     * Parse SPF record from TXT record
+     * @param record SPF TXT record
+     * @returns Parsed SPF record or null if invalid
+     */
+    parseSpfRecord(record) {
+        if (!record.startsWith('v=spf1')) {
+            return null;
+        }
+        try {
+            const spfRecord = {
+                version: 'spf1',
+                mechanisms: [],
+                modifiers: {}
+            };
+            // Split into terms
+            const terms = record.split(' ').filter(term => term.length > 0);
+            // Skip version term
+            for (let i = 1; i < terms.length; i++) {
+                const term = terms[i];
+                // Check if it's a modifier (name=value)
+                if (term.includes('=')) {
+                    const [name, value] = term.split('=');
+                    spfRecord.modifiers[name] = value;
+                    continue;
+                }
+                // Parse as mechanism
+                let qualifier = SpfQualifier.PASS; // Default is +
+                let mechanismText = term;
+                // Check for qualifier
+                if (term.startsWith('+') || term.startsWith('-') ||
+                    term.startsWith('~') || term.startsWith('?')) {
+                    qualifier = term[0];
+                    mechanismText = term.substring(1);
+                }
+                // Parse mechanism type and value
+                const colonIndex = mechanismText.indexOf(':');
+                let type;
+                let value;
+                if (colonIndex !== -1) {
+                    type = mechanismText.substring(0, colonIndex);
+                    value = mechanismText.substring(colonIndex + 1);
+                }
+                else {
+                    type = mechanismText;
+                }
+                spfRecord.mechanisms.push({ qualifier, type, value });
+            }
+            return spfRecord;
+        }
+        catch (error) {
+            logger.log('error', `Error parsing SPF record: ${error.message}`, {
+                record,
+                error: error.message
+            });
+            return null;
+        }
+    }
+    /**
+     * Check if IP is in CIDR range
+     * @param ip IP address to check
+     * @param cidr CIDR range
+     * @returns Whether the IP is in the CIDR range
+     */
+    isIpInCidr(ip, cidr) {
+        try {
+            const ipAddress = plugins.ip.Address4.parse(ip);
+            return ipAddress.isInSubnet(new plugins.ip.Address4(cidr));
+        }
+        catch (error) {
+            // Try IPv6
+            try {
+                const ipAddress = plugins.ip.Address6.parse(ip);
+                return ipAddress.isInSubnet(new plugins.ip.Address6(cidr));
+            }
+            catch (e) {
+                return false;
+            }
+        }
+    }
+    /**
+     * Check if a domain has the specified IP in its A or AAAA records
+     * @param domain Domain to check
+     * @param ip IP address to check
+     * @returns Whether the domain resolves to the IP
+     */
+    async isDomainResolvingToIp(domain, ip) {
+        try {
+            // First try IPv4
+            const ipv4Addresses = await plugins.dns.promises.resolve4(domain);
+            if (ipv4Addresses.includes(ip)) {
+                return true;
+            }
+            // Then try IPv6
+            const ipv6Addresses = await plugins.dns.promises.resolve6(domain);
+            if (ipv6Addresses.includes(ip)) {
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            return false;
+        }
+    }
+    /**
+     * Verify SPF for a given email with IP and helo domain
+     * @param email Email to verify
+     * @param ip Sender IP address
+     * @param heloDomain HELO/EHLO domain used by sender
+     * @returns SPF verification result
+     */
+    async verify(email, ip, heloDomain) {
+        const securityLogger = SecurityLogger.getInstance();
+        // Reset lookup count
+        this.lookupCount = 0;
+        // Get domain from envelope from (return-path)
+        const domain = email.getEnvelopeFrom().split('@')[1] || '';
+        if (!domain) {
+            return {
+                result: 'permerror',
+                explanation: 'No envelope from domain',
+                domain: '',
+                ip
+            };
+        }
+        try {
+            // Look up SPF record
+            const spfVerificationResult = this.dnsManager ?
+                await this.dnsManager.verifySpfRecord(domain) :
+                { found: false, valid: false, error: 'DNS Manager not available' };
+            if (!spfVerificationResult.found) {
+                return {
+                    result: 'none',
+                    explanation: 'No SPF record found',
+                    domain,
+                    ip
+                };
+            }
+            if (!spfVerificationResult.valid) {
+                return {
+                    result: 'permerror',
+                    explanation: 'Invalid SPF record',
+                    domain,
+                    ip,
+                    record: spfVerificationResult.value
+                };
+            }
+            // Parse SPF record
+            const spfRecord = this.parseSpfRecord(spfVerificationResult.value);
+            if (!spfRecord) {
+                return {
+                    result: 'permerror',
+                    explanation: 'Failed to parse SPF record',
+                    domain,
+                    ip,
+                    record: spfVerificationResult.value
+                };
+            }
+            // Check SPF record
+            const result = await this.checkSpfRecord(spfRecord, domain, ip);
+            // Log the result
+            const spfLogLevel = result.result === 'pass' ?
+                SecurityLogLevel.INFO :
+                (result.result === 'fail' ? SecurityLogLevel.WARN : SecurityLogLevel.INFO);
+            securityLogger.logEvent({
+                level: spfLogLevel,
+                type: SecurityEventType.SPF,
+                message: `SPF ${result.result} for ${domain} from IP ${ip}`,
+                domain,
+                details: {
+                    ip,
+                    heloDomain,
+                    result: result.result,
+                    explanation: result.explanation,
+                    record: spfVerificationResult.value
+                },
+                success: result.result === 'pass'
+            });
+            return {
+                ...result,
+                domain,
+                ip,
+                record: spfVerificationResult.value
+            };
+        }
+        catch (error) {
+            // Log error
+            logger.log('error', `SPF verification error: ${error.message}`, {
+                domain,
+                ip,
+                error: error.message
+            });
+            securityLogger.logEvent({
+                level: SecurityLogLevel.ERROR,
+                type: SecurityEventType.SPF,
+                message: `SPF verification error for ${domain}`,
+                domain,
+                details: {
+                    ip,
+                    error: error.message
+                },
+                success: false
+            });
+            return {
+                result: 'temperror',
+                explanation: `Error verifying SPF: ${error.message}`,
+                domain,
+                ip,
+                error: error.message
+            };
+        }
+    }
+    /**
+     * Check SPF record against IP address
+     * @param spfRecord Parsed SPF record
+     * @param domain Domain being checked
+     * @param ip IP address to check
+     * @returns SPF result
+     */
+    async checkSpfRecord(spfRecord, domain, ip) {
+        // Check for 'redirect' modifier
+        if (spfRecord.modifiers.redirect) {
+            this.lookupCount++;
+            if (this.lookupCount > MAX_SPF_LOOKUPS) {
+                return {
+                    result: 'permerror',
+                    explanation: 'Too many DNS lookups',
+                    domain,
+                    ip
+                };
+            }
+            // Handle redirect
+            const redirectDomain = spfRecord.modifiers.redirect;
+            const redirectResult = this.dnsManager ?
+                await this.dnsManager.verifySpfRecord(redirectDomain) :
+                { found: false, valid: false, error: 'DNS Manager not available' };
+            if (!redirectResult.found || !redirectResult.valid) {
+                return {
+                    result: 'permerror',
+                    explanation: `Invalid redirect to ${redirectDomain}`,
+                    domain,
+                    ip
+                };
+            }
+            const redirectRecord = this.parseSpfRecord(redirectResult.value);
+            if (!redirectRecord) {
+                return {
+                    result: 'permerror',
+                    explanation: `Failed to parse redirect record from ${redirectDomain}`,
+                    domain,
+                    ip
+                };
+            }
+            return this.checkSpfRecord(redirectRecord, redirectDomain, ip);
+        }
+        // Check each mechanism in order
+        for (const mechanism of spfRecord.mechanisms) {
+            let matched = false;
+            switch (mechanism.type) {
+                case SpfMechanismType.ALL:
+                    matched = true;
+                    break;
+                case SpfMechanismType.IP4:
+                    if (mechanism.value) {
+                        matched = this.isIpInCidr(ip, mechanism.value);
+                    }
+                    break;
+                case SpfMechanismType.IP6:
+                    if (mechanism.value) {
+                        matched = this.isIpInCidr(ip, mechanism.value);
+                    }
+                    break;
+                case SpfMechanismType.A:
+                    this.lookupCount++;
+                    if (this.lookupCount > MAX_SPF_LOOKUPS) {
+                        return {
+                            result: 'permerror',
+                            explanation: 'Too many DNS lookups',
+                            domain,
+                            ip
+                        };
+                    }
+                    // Check if domain has A/AAAA record matching IP
+                    const checkDomain = mechanism.value || domain;
+                    matched = await this.isDomainResolvingToIp(checkDomain, ip);
+                    break;
+                case SpfMechanismType.MX:
+                    this.lookupCount++;
+                    if (this.lookupCount > MAX_SPF_LOOKUPS) {
+                        return {
+                            result: 'permerror',
+                            explanation: 'Too many DNS lookups',
+                            domain,
+                            ip
+                        };
+                    }
+                    // Check MX records
+                    const mxDomain = mechanism.value || domain;
+                    try {
+                        const mxRecords = await plugins.dns.promises.resolveMx(mxDomain);
+                        for (const mx of mxRecords) {
+                            // Check if this MX record's IP matches
+                            const mxMatches = await this.isDomainResolvingToIp(mx.exchange, ip);
+                            if (mxMatches) {
+                                matched = true;
+                                break;
+                            }
+                        }
+                    }
+                    catch (error) {
+                        // No MX records or error
+                        matched = false;
+                    }
+                    break;
+                case SpfMechanismType.INCLUDE:
+                    if (!mechanism.value) {
+                        continue;
+                    }
+                    this.lookupCount++;
+                    if (this.lookupCount > MAX_SPF_LOOKUPS) {
+                        return {
+                            result: 'permerror',
+                            explanation: 'Too many DNS lookups',
+                            domain,
+                            ip
+                        };
+                    }
+                    // Check included domain's SPF record
+                    const includeDomain = mechanism.value;
+                    const includeResult = this.dnsManager ?
+                        await this.dnsManager.verifySpfRecord(includeDomain) :
+                        { found: false, valid: false, error: 'DNS Manager not available' };
+                    if (!includeResult.found || !includeResult.valid) {
+                        continue; // Skip this mechanism
+                    }
+                    const includeRecord = this.parseSpfRecord(includeResult.value);
+                    if (!includeRecord) {
+                        continue; // Skip this mechanism
+                    }
+                    // Recursively check the included SPF record
+                    const includeCheck = await this.checkSpfRecord(includeRecord, includeDomain, ip);
+                    // Include mechanism matches if the result is "pass"
+                    matched = includeCheck.result === 'pass';
+                    break;
+                case SpfMechanismType.EXISTS:
+                    if (!mechanism.value) {
+                        continue;
+                    }
+                    this.lookupCount++;
+                    if (this.lookupCount > MAX_SPF_LOOKUPS) {
+                        return {
+                            result: 'permerror',
+                            explanation: 'Too many DNS lookups',
+                            domain,
+                            ip
+                        };
+                    }
+                    // Check if domain exists (has any A record)
+                    try {
+                        await plugins.dns.promises.resolve(mechanism.value, 'A');
+                        matched = true;
+                    }
+                    catch (error) {
+                        matched = false;
+                    }
+                    break;
+            }
+            // If this mechanism matched, return its result
+            if (matched) {
+                switch (mechanism.qualifier) {
+                    case SpfQualifier.PASS:
+                        return {
+                            result: 'pass',
+                            explanation: `Matched ${mechanism.type}${mechanism.value ? ':' + mechanism.value : ''}`,
+                            domain,
+                            ip
+                        };
+                    case SpfQualifier.FAIL:
+                        return {
+                            result: 'fail',
+                            explanation: `Matched ${mechanism.type}${mechanism.value ? ':' + mechanism.value : ''}`,
+                            domain,
+                            ip
+                        };
+                    case SpfQualifier.SOFTFAIL:
+                        return {
+                            result: 'softfail',
+                            explanation: `Matched ${mechanism.type}${mechanism.value ? ':' + mechanism.value : ''}`,
+                            domain,
+                            ip
+                        };
+                    case SpfQualifier.NEUTRAL:
+                        return {
+                            result: 'neutral',
+                            explanation: `Matched ${mechanism.type}${mechanism.value ? ':' + mechanism.value : ''}`,
+                            domain,
+                            ip
+                        };
+                }
+            }
+        }
+        // If no mechanism matched, default to neutral
+        return {
+            result: 'neutral',
+            explanation: 'No matching mechanism found',
+            domain,
+            ip
+        };
+    }
+    /**
+     * Check if email passes SPF verification
+     * @param email Email to verify
+     * @param ip Sender IP address
+     * @param heloDomain HELO/EHLO domain used by sender
+     * @returns Whether email passes SPF
+     */
+    async verifyAndApply(email, ip, heloDomain) {
+        const result = await this.verify(email, ip, heloDomain);
+        // Add headers
+        email.headers['Received-SPF'] = `${result.result} (${result.domain}: ${result.explanation}) client-ip=${ip}; envelope-from=${email.getEnvelopeFrom()}; helo=${heloDomain};`;
+        // Apply policy based on result
+        switch (result.result) {
+            case 'fail':
+                // Fail - mark as spam
+                email.mightBeSpam = true;
+                logger.log('warn', `SPF failed for ${result.domain} from ${ip}: ${result.explanation}`);
+                return false;
+            case 'softfail':
+                // Soft fail - accept but mark as suspicious
+                email.mightBeSpam = true;
+                logger.log('info', `SPF softfailed for ${result.domain} from ${ip}: ${result.explanation}`);
+                return true;
+            case 'neutral':
+            case 'none':
+                // Neutral or none - accept but note in headers
+                logger.log('info', `SPF ${result.result} for ${result.domain} from ${ip}: ${result.explanation}`);
+                return true;
+            case 'pass':
+                // Pass - accept
+                logger.log('info', `SPF passed for ${result.domain} from ${ip}: ${result.explanation}`);
+                return true;
+            case 'temperror':
+            case 'permerror':
+                // Temporary or permanent error - log but accept
+                logger.log('error', `SPF error for ${result.domain} from ${ip}: ${result.explanation}`);
+                return true;
+            default:
+                return true;
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/mail/security/index.d.ts

@@ -0,0 +1,4 @@
+export * from './classes.dkimcreator.js';
+export * from './classes.dkimverifier.js';
+export * from './classes.dmarcverifier.js';
+export * from './classes.spfverifier.js';

package/dist_ts/mail/security/index.js

@@ -0,0 +1,6 @@
+// Email security components
+export * from './classes.dkimcreator.js';
+export * from './classes.dkimverifier.js';
+export * from './classes.dmarcverifier.js';
+export * from './classes.spfverifier.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9tYWlsL3NlY3VyaXR5L2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLDRCQUE0QjtBQUM1QixjQUFjLDBCQUEwQixDQUFDO0FBQ3pDLGNBQWMsMkJBQTJCLENBQUM7QUFDMUMsY0FBYyw0QkFBNEIsQ0FBQztBQUMzQyxjQUFjLDBCQUEwQixDQUFDIn0=

package/dist_ts/opsserver/classes.opsserver.d.ts

@@ -0,0 +1,14 @@
+import type DcRouter from '../classes.dcrouter.js';
+import * as plugins from '../plugins.js';
+export declare class OpsServer {
+    dcRouterRef: DcRouter;
+    server: plugins.typedserver.utilityservers.UtilityWebsiteServer;
+    typedrouter: plugins.typedrequest.TypedRouter;
+    constructor(dcRouterRefArg: DcRouter);
+    start(): Promise<void>;
+    /**
+     * Set up all TypedRequest handlers
+     */
+    private setupHandlers;
+    stop(): Promise<void>;
+}

package/dist_ts/opsserver/classes.opsserver.js

@@ -0,0 +1,37 @@
+import * as plugins from '../plugins.js';
+import * as paths from '../paths.js';
+export class OpsServer {
+    constructor(dcRouterRefArg) {
+        // TypedRouter for OpsServer-specific handlers
+        this.typedrouter = new plugins.typedrequest.TypedRouter();
+        this.dcRouterRef = dcRouterRefArg;
+        // Add our typedrouter to the dcRouter's main typedrouter
+        this.dcRouterRef.typedrouter.addTypedRouter(this.typedrouter);
+    }
+    async start() {
+        this.server = new plugins.typedserver.utilityservers.UtilityWebsiteServer({
+            domain: 'localhost',
+            feedMetadata: null,
+            serveDir: paths.distServe,
+        });
+        // The server has a built-in typedrouter at /typedrequest
+        // Add the main dcRouter typedrouter to the server's typedrouter
+        this.server.typedrouter.addTypedRouter(this.dcRouterRef.typedrouter);
+        // Set up handlers
+        this.setupHandlers();
+        await this.server.start(3000);
+    }
+    /**
+     * Set up all TypedRequest handlers
+     */
+    setupHandlers() {
+        // Handler setup will be implemented next
+        // For now, just a placeholder to ensure the structure is correct
+    }
+    async stop() {
+        if (this.server) {
+            await this.server.stop();
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/opsserver/index.d.ts

@@ -0,0 +1 @@
+export * from './classes.opsserver.js';

package/dist_ts/opsserver/index.js

@@ -0,0 +1,2 @@
+export * from './classes.opsserver.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90cy9vcHNzZXJ2ZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyx3QkFBd0IsQ0FBQyJ9

package/dist_ts/paths.d.ts

@@ -0,0 +1,14 @@
+export declare const baseDir: string;
+export declare const packageDir: string;
+export declare const distServe: string;
+export declare const dataDir: string;
+export declare const keysDir: string;
+export declare const dnsRecordsDir: string;
+export declare const sentEmailsDir: string;
+export declare const receivedEmailsDir: string;
+export declare const failedEmailsDir: string;
+export declare const logsDir: string;
+export declare const emailTemplatesDir: string;
+export declare const MtaAttachmentsDir: string;
+export declare const configPath: string;
+export declare function ensureDirectories(): void;

package/dist_ts/paths.js

@@ -0,0 +1,39 @@
+import * as plugins from './plugins.js';
+// Base directories
+export const baseDir = process.cwd();
+export const packageDir = plugins.path.join(plugins.smartpath.get.dirnameFromImportMetaUrl(import.meta.url), '../');
+export const distServe = plugins.path.join(packageDir, './dist_serve');
+// Configure data directory with environment variable or default to .nogit/data
+const DEFAULT_DATA_PATH = '.nogit/data';
+export const dataDir = process.env.DATA_DIR
+    ? process.env.DATA_DIR
+    : plugins.path.join(baseDir, DEFAULT_DATA_PATH);
+// MTA directories 
+export const keysDir = plugins.path.join(dataDir, 'keys');
+export const dnsRecordsDir = plugins.path.join(dataDir, 'dns');
+export const sentEmailsDir = plugins.path.join(dataDir, 'emails', 'sent');
+export const receivedEmailsDir = plugins.path.join(dataDir, 'emails', 'received');
+export const failedEmailsDir = plugins.path.join(dataDir, 'emails', 'failed'); // For failed emails
+export const logsDir = plugins.path.join(dataDir, 'logs'); // For logs
+// Email template directories
+export const emailTemplatesDir = plugins.path.join(dataDir, 'templates', 'email');
+export const MtaAttachmentsDir = plugins.path.join(dataDir, 'attachments'); // For email attachments
+// Configuration path
+export const configPath = process.env.CONFIG_PATH
+    ? process.env.CONFIG_PATH
+    : plugins.path.join(baseDir, 'config.json');
+// Create directories if they don't exist
+export function ensureDirectories() {
+    // Ensure data directories
+    plugins.smartfile.fs.ensureDirSync(dataDir);
+    plugins.smartfile.fs.ensureDirSync(keysDir);
+    plugins.smartfile.fs.ensureDirSync(dnsRecordsDir);
+    plugins.smartfile.fs.ensureDirSync(sentEmailsDir);
+    plugins.smartfile.fs.ensureDirSync(receivedEmailsDir);
+    plugins.smartfile.fs.ensureDirSync(failedEmailsDir);
+    plugins.smartfile.fs.ensureDirSync(logsDir);
+    // Ensure email template directories
+    plugins.smartfile.fs.ensureDirSync(emailTemplatesDir);
+    plugins.smartfile.fs.ensureDirSync(MtaAttachmentsDir);
+}
+//# sourceMappingURL=data:application/json;base64,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