@thymian/rules-rfc-9110 0.0.0-PLACEHOLDER

package/dist/rules/representation-data-and-metadata/content-length/server-may-send-content-length-for-head-response.rule.js

@@ -0,0 +1,35 @@
+import { constant, getHeader, method, not, responseHeader, } from '@thymian/core';
+import { httpRule, singleTestCase } from '@thymian/core';
+export default httpRule('rfc9110/server-may-send-content-length-for-head-response')
+    .severity('error')
+    .type('test')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6')
+    .description(`A server MAY send a Content-Length header field in a response to a HEAD request;
+    a server MUST NOT send Content-Length in such a response unless its field value equals
+    the decimal number of octets that would have been sent in the content of a response if
+    the same request had used the GET method.`)
+    .summary('Servers MAY send Content-Length in HEAD responses (must match what GET would return).')
+    .rule((ctx) => ctx.httpTest(singleTestCase()
+    .forTransactionsWith(method('head'))
+    .run({ checkResponse: false })
+    .skipIf(not(responseHeader('content-length')), 'Content-Length header is not present in HEAD response.')
+    .replayStep((step) => step.set(method(), constant('get')).run().done())
+    .transactions(([headTransaction, getTransaction]) => {
+    const headContentLength = getHeader(headTransaction.response.headers, 'content-length');
+    const getContentLength = getHeader(getTransaction.response.headers, 'content-length');
+    if (typeof headContentLength === 'string' &&
+        typeof getContentLength === 'string' &&
+        headContentLength !== getContentLength) {
+        ctx.reportViolation({
+            message: `Content-Length in HEAD response does not match GET response (${headContentLength} != ${getContentLength}).`,
+            location: {
+                elementType: 'edge',
+                elementId: headTransaction.source.transactionId,
+            },
+        });
+    }
+})
+    .done()))
+    .done();
+//# sourceMappingURL=server-may-send-content-length-for-head-response.rule.js.map

package/dist/rules/representation-data-and-metadata/content-length/server-may-send-content-length-for-head-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-send-content-length-for-head-response.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/server-may-send-content-length-for-head-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,SAAS,EACT,MAAM,EACN,GAAG,EACH,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzD,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,MAAM,CAAC;KACZ,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV;;;8CAG0C,CAC3C;KACA,OAAO,CACN,uFAAuF,CACxF;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,QAAQ,CACV,cAAc,EAAE;KACb,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;KACnC,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;KAC7B,MAAM,CACL,GAAG,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,EACrC,wDAAwD,CACzD;KACA,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;KACtE,YAAY,CAAC,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,EAAE;IAClD,MAAM,iBAAiB,GAAG,SAAS,CACjC,eAAe,CAAC,QAAQ,CAAC,OAAO,EAChC,gBAAgB,CACjB,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,CAChC,cAAc,CAAC,QAAQ,CAAC,OAAO,EAC/B,gBAAgB,CACjB,CAAC;IAEF,IACE,OAAO,iBAAiB,KAAK,QAAQ;QACrC,OAAO,gBAAgB,KAAK,QAAQ;QACpC,iBAAiB,KAAK,gBAAgB,EACtC,CAAC;QACD,GAAG,CAAC,eAAe,CAAC;YAClB,OAAO,EAAE,gEAAgE,iBAAiB,OAAO,gBAAgB,IAAI;YACrH,QAAQ,EAAE;gBACR,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,aAAa;aAChD;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;KACD,IAAI,EAAE,CACV,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-1xx-or-204.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-not-send-content-length-for-1xx-or-204.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-1xx-or-204.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-send-content-length-for-1xx-or-204.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-1xx-or-204.rule.ts"],"names":[],"mappings":";AASA,wBAmBU"}

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-1xx-or-204.rule.js

@@ -0,0 +1,12 @@
+import { and, or, responseHeader, statusCode, statusCodeRange, } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-not-send-content-length-for-1xx-or-204')
+    .severity('error')
+    .type('static', 'test', 'analytics')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6')
+    .description(`A server MUST NOT send a Content-Length header field in any response with a status code of 1xx (Informational) or 204 (No Content).`)
+    .summary('Servers MUST NOT send Content-Length header in 1xx or 204 responses.')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(or(statusCodeRange(100, 199), statusCode(204))), responseHeader('content-length')))
+    .done();
+//# sourceMappingURL=server-must-not-send-content-length-for-1xx-or-204.rule.js.map

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-1xx-or-204.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-send-content-length-for-1xx-or-204.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-1xx-or-204.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,EAAE,EACF,cAAc,EACd,UAAU,EACV,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4DAA4D,CAC7D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;KACnC,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,qIAAqI,CACtI;KACA,OAAO,CACN,sEAAsE,CACvE;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EACnD,cAAc,CAAC,gBAAgB,CAAC,CACjC,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-2xx-connect-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-not-send-content-length-for-2xx-connect-response.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-2xx-connect-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-send-content-length-for-2xx-connect-response.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-2xx-connect-response.rule.ts"],"names":[],"mappings":";AAGA,wBAmBU"}

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-2xx-connect-response.rule.js

@@ -0,0 +1,12 @@
+import { and, method, responseHeader, statusCodeRange } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-not-send-content-length-for-2xx-connect-response')
+    .severity('error')
+    .type('static', 'test', 'analytics')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6')
+    .description(`A server MUST NOT send a Content-Length header field in any 2xx (Successful) response to a CONNECT request.`)
+    .summary('Servers MUST NOT send Content-Length header in 2xx responses to CONNECT requests.')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(method('connect'), statusCodeRange(200, 299)), responseHeader('content-length')))
+    .done();
+//# sourceMappingURL=server-must-not-send-content-length-for-2xx-connect-response.rule.js.map

package/dist/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-2xx-connect-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-send-content-length-for-2xx-connect-response.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/server-must-not-send-content-length-for-2xx-connect-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;KACnC,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,6GAA6G,CAC9G;KACA,OAAO,CACN,mFAAmF,CACpF;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EACjD,cAAc,CAAC,gBAAgB,CAAC,CACjC,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-not-send-content-length-without-content.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-not-send-content-length-without-content.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-not-send-content-length-without-content.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-send-content-length-without-content.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/user-agent-should-not-send-content-length-without-content.rule.ts"],"names":[],"mappings":";AAUA,wBAqCU"}

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-not-send-content-length-without-content.rule.js

@@ -0,0 +1,20 @@
+import { and, hasRequestBody, method, not, or, requestHeader, } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-not-send-content-length-without-content')
+    .severity('warn')
+    .type('analytics')
+    .appliesTo('user-agent', 'client')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6')
+    .description(`A user agent SHOULD NOT send a Content-Length header field when the request message does not contain content
+    and the method semantics do not anticipate such data. This prevents confusion and potential security issues
+    from unexpected Content-Length headers in requests that should not have message bodies.
+
+    Methods that typically do not have request content: GET, HEAD, DELETE, CONNECT, OPTIONS, TRACE.
+    Methods that typically have request content: POST, PUT, PATCH.
+
+    This rule validates that GET, HEAD, DELETE, CONNECT, OPTIONS, and TRACE requests do not send a Content-Length
+    header with a non-zero value.`)
+    .summary('User agents SHOULD NOT send Content-Length when request has no content.')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(and(or(method('get'), method('head'), method('delete'), method('connect'), method('options'), method('trace')), requestHeader('content-length'), not(hasRequestBody()))))
+    .done();
+//# sourceMappingURL=user-agent-should-not-send-content-length-without-content.rule.js.map

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-not-send-content-length-without-content.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-send-content-length-without-content.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/user-agent-should-not-send-content-length-without-content.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,cAAc,EACd,MAAM,EACN,GAAG,EACH,EAAE,EACF,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,mEAAmE,CACpE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC;KACjC,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV;;;;;;;;kCAQ8B,CAC/B;KACA,OAAO,CACN,yEAAyE,CAC1E;KACA,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CACD,EAAE,CACA,MAAM,CAAC,KAAK,CAAC,EACb,MAAM,CAAC,MAAM,CAAC,EACd,MAAM,CAAC,QAAQ,CAAC,EAChB,MAAM,CAAC,SAAS,CAAC,EACjB,MAAM,CAAC,SAAS,CAAC,EACjB,MAAM,CAAC,OAAO,CAAC,CAChB,EACD,aAAa,CAAC,gBAAgB,CAAC,EAC/B,GAAG,CAAC,cAAc,EAAE,CAAC,CACtB,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-send-content-length-for-request-with-defined-content.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-send-content-length-for-request-with-defined-content.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-send-content-length-for-request-with-defined-content.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-send-content-length-for-request-with-defined-content.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/user-agent-should-send-content-length-for-request-with-defined-content.rule.ts"],"names":[],"mappings":";AAGA,wBAoBU"}

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-send-content-length-for-request-with-defined-content.rule.js

@@ -0,0 +1,12 @@
+import { and, getHeader, method, not, or, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-send-content-length-for-request-with-defined-content')
+    .severity('warn')
+    .type('analytics')
+    .appliesTo('user-agent', 'client')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6')
+    .description(`A user agent SHOULD send Content-Length in a request when the method defines a meaning for enclosed content and it is not sending Transfer-Encoding.`)
+    .summary('User agents SHOULD send Content-Length in requests with content.')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(and(or(method('post'), method('put'), method('patch')), not(requestHeader('transfer-encoding')), not(requestHeader('content-length')))))
+    .done();
+//# sourceMappingURL=user-agent-should-send-content-length-for-request-with-defined-content.rule.js.map

package/dist/rules/representation-data-and-metadata/content-length/user-agent-should-send-content-length-for-request-with-defined-content.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-send-content-length-for-request-with-defined-content.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-length/user-agent-should-send-content-length-for-request-with-defined-content.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,gFAAgF,CACjF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC;KACjC,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,sJAAsJ,CACvJ;KACA,OAAO,CAAC,kEAAkE,CAAC;KAC3E,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,EAClD,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,EACvC,GAAG,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CACrC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-location/content-location-201-response-semantics.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=content-location-201-response-semantics.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-location/content-location-201-response-semantics.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-location-201-response-semantics.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-location/content-location-201-response-semantics.rule.ts"],"names":[],"mappings":";AAEA,wBA0BU"}

package/dist/rules/representation-data-and-metadata/content-location/content-location-201-response-semantics.rule.js

@@ -0,0 +1,25 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/content-location-201-response-semantics')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.7')
+    .description(`For a 201 (Created) response, if the Content-Location field value is identical to the Location header field value,
+    then the representation is a current representation of the newly created resource. If the values differ, the
+    representation is a representation of some resource related to the creation but not the created resource itself.
+
+    Example:
+    - POST /items -> 201 Created
+      Location: /items/123
+      Content-Location: /items/123
+      (Content represents the newly created resource at /items/123)
+
+    - POST /items -> 201 Created
+      Location: /items/123
+      Content-Location: /items/summary
+      (Content represents a summary, not the created resource itself)
+
+    Note: This rule cannot be automatically validated because it requires semantic understanding of whether
+    Content-Location matches Location in 201 responses, and whether that match is intentional.`)
+    .summary('In 201 responses, Content-Location semantics depend on whether it matches Location.')
+    .done();
+//# sourceMappingURL=content-location-201-response-semantics.rule.js.map

package/dist/rules/representation-data-and-metadata/content-location/content-location-201-response-semantics.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-location-201-response-semantics.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-location/content-location-201-response-semantics.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,iDAAiD,CAAC;KACvE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV;;;;;;;;;;;;;;;;+FAgB2F,CAC5F;KACA,OAAO,CACN,qFAAqF,CACtF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-location/content-location-semantics-for-2xx-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=content-location-semantics-for-2xx-response.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-location/content-location-semantics-for-2xx-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-location-semantics-for-2xx-response.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-location/content-location-semantics-for-2xx-response.rule.ts"],"names":[],"mappings":";AAEA,wBAcU"}

package/dist/rules/representation-data-and-metadata/content-location/content-location-semantics-for-2xx-response.rule.js

@@ -0,0 +1,13 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/content-location-semantics-for-2xx-response')
+    .severity('off')
+    .type('informational')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.7')
+    .description(`The "Content-Location" header field references a URI that can be used as an identifier for a specific resource
+    corresponding to the representation in this message's content. If Content-Location is included in a 2xx response
+    and its value refers to the same URI as the target URI, then the recipient MAY consider the content to be a current
+    representation of that resource at the time indicated by the message origination date.`)
+    .summary('Content-Location provides a URI identifier for the representation in the message content.')
+    .done();
+//# sourceMappingURL=content-location-semantics-for-2xx-response.rule.js.map

package/dist/rules/representation-data-and-metadata/content-location/content-location-semantics-for-2xx-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-location-semantics-for-2xx-response.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-location/content-location-semantics-for-2xx-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,qDAAqD,CAAC;KAC3E,QAAQ,CAAC,KAAK,CAAC;KACf,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV;;;2FAGuF,CACxF;KACA,OAAO,CACN,2FAA2F,CAC5F;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-location/origin-server-must-treat-content-location-as-transitory-context.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-treat-content-location-as-transitory-context.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-location/origin-server-must-treat-content-location-as-transitory-context.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-treat-content-location-as-transitory-context.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-location/origin-server-must-treat-content-location-as-transitory-context.rule.ts"],"names":[],"mappings":";AAEA,wBAmBU"}

package/dist/rules/representation-data-and-metadata/content-location/origin-server-must-treat-content-location-as-transitory-context.rule.js

@@ -0,0 +1,16 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-treat-content-location-as-transitory-context')
+    .severity('error')
+    .type('informational')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.7')
+    .description(`An origin server that receives a Content-Location field in a request message MUST treat the information
+    as transitory request context rather than as metadata to be saved verbatim as part of the representation.
+    An origin server MUST NOT use such context information to alter the request semantics.
+
+    Note: This rule cannot be automatically validated because it concerns server-internal handling of Content-Location
+    in request messages. Compliance requires verifying through code review that the server does not persist
+    Content-Location as representation metadata or use it to modify request semantics.`)
+    .summary('Origin servers MUST treat Content-Location in requests as transitory context.')
+    .done();
+//# sourceMappingURL=origin-server-must-treat-content-location-as-transitory-context.rule.js.map

package/dist/rules/representation-data-and-metadata/content-location/origin-server-must-treat-content-location-as-transitory-context.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-treat-content-location-as-transitory-context.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-location/origin-server-must-treat-content-location-as-transitory-context.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV;;;;;;uFAMmF,CACpF;KACA,OAAO,CACN,+EAA+E,CAChF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-type/recipient-may-assume-media-type-or-determine-its-type.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-may-assume-media-type-or-determine-its-type.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-type/recipient-may-assume-media-type-or-determine-its-type.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-assume-media-type-or-determine-its-type.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-type/recipient-may-assume-media-type-or-determine-its-type.rule.ts"],"names":[],"mappings":";AAWA,wBAkBU"}

package/dist/rules/representation-data-and-metadata/content-type/recipient-may-assume-media-type-or-determine-its-type.rule.js

@@ -0,0 +1,10 @@
+import { and, hasRequestBody, hasResponseBody, not, or, requestHeader, responseHeader, } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/recipient-may-assume-media-type-or-determine-its-type')
+    .severity('warn')
+    .type('test', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.3')
+    .description(`If a Content-Type header field is not present, the recipient MAY either assume a media type of "application/octet-stream" ([RFC2046], Section 4.5.1) or examine the data to determine its type.`)
+    .rule((ctx) => ctx.validateHttpTransactions(or(hasRequestBody(), hasResponseBody()), or(and(hasRequestBody(), not(requestHeader('content-type'))), and(hasResponseBody(), not(responseHeader('content-type'))))))
+    .done();
+//# sourceMappingURL=recipient-may-assume-media-type-or-determine-its-type.rule.js.map

package/dist/rules/representation-data-and-metadata/content-type/recipient-may-assume-media-type-or-determine-its-type.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-assume-media-type-or-determine-its-type.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-type/recipient-may-assume-media-type-or-determine-its-type.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,cAAc,EACd,eAAe,EACf,GAAG,EACH,EAAE,EACF,aAAa,EACb,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,+DAA+D,CAChE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;KACzB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,iMAAiM,CAClM;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,EAAE,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,EACvC,EAAE,CACA,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,EACzD,GAAG,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,CAC5D,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-type/sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-type/sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-type/sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.ts"],"names":[],"mappings":";AAEA,wBASU"}

package/dist/rules/representation-data-and-metadata/content-type/sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.js

@@ -0,0 +1,8 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-only-generate-crlf-for-line-breaks-between-parts')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.3.3')
+    .description('A sender MUST generate only CRLF to represent line breaks between body parts.')
+    .done();
+//# sourceMappingURL=sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.js.map

package/dist/rules/representation-data-and-metadata/content-type/sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-type/sender-must-only-generate-crlf-for-line-breaks-between-parts.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV,+EAA+E,CAChF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/content-type/sender-should-generate-content-type-for-message-with-content.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-should-generate-content-type-for-message-with-content.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/content-type/sender-should-generate-content-type-for-message-with-content.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-generate-content-type-for-message-with-content.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-type/sender-should-generate-content-type-for-message-with-content.rule.ts"],"names":[],"mappings":";AAGA,wBAsBU"}

package/dist/rules/representation-data-and-metadata/content-type/sender-should-generate-content-type-for-message-with-content.rule.js

@@ -0,0 +1,14 @@
+import { and, hasResponseBody, not, responseHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-should-generate-content-type-for-message-with-content')
+    .severity('warn')
+    .type('static', 'test', 'analytics')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.3')
+    .description(`A sender that generates a message containing content SHOULD generate a Content-Type header field
+    in that message unless the intended media type of the enclosed representation is unknown to the sender.`)
+    .summary('Servers SHOULD send Content-Type header in responses containing content.')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(hasResponseBody(), not(responseHeader('content-type')))))
+    .overrideStaticRule((ctx) => ctx.validateHttpTransactions((req, res) => !!res.schema && !res.mediaType))
+    .done();
+//# sourceMappingURL=sender-should-generate-content-type-for-message-with-content.rule.js.map

package/dist/rules/representation-data-and-metadata/content-type/sender-should-generate-content-type-for-message-with-content.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-generate-content-type-for-message-with-content.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/content-type/sender-should-generate-content-type-for-message-with-content.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;KACnC,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV;4GACwG,CACzG;KACA,OAAO,CACN,0EAA0E,CAC3E;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,CAC5D,CACF;KACA,kBAAkB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAC3E;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-must-differ-for-different-content-encodings.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=etag-must-differ-for-different-content-encodings.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-must-differ-for-different-content-encodings.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag-must-differ-for-different-content-encodings.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/etag-must-differ-for-different-content-encodings.rule.ts"],"names":[],"mappings":";AAEA,wBAyBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-must-differ-for-different-content-encodings.rule.js

@@ -0,0 +1,22 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/etag-must-differ-for-different-content-encodings')
+    .severity('error')
+    .type('informational')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3.3')
+    .description(`Content codings are a property of the representation data. A strong entity tag for a content-encoded
+    representation has to be distinct from the entity tag of an unencoded representation to prevent potential
+    conflicts during cache updates and range requests.
+
+    For example:
+    - GET /resource (no encoding) -> ETag: "abc123"
+    - GET /resource (gzip encoded) -> ETag: "def456" (MUST be different)
+
+    In contrast, transfer codings (like chunked encoding) apply only during message transfer and do not
+    result in distinct entity tags.
+
+    Note: This rule cannot be automatically validated because it requires comparing ETags across different
+    Content-Encoding variants of the same resource, which requires access to multiple representations.`)
+    .summary('Strong ETags MUST differ between encoded and unencoded representations.')
+    .done();
+//# sourceMappingURL=etag-must-differ-for-different-content-encodings.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-must-differ-for-different-content-encodings.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag-must-differ-for-different-content-encodings.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/etag-must-differ-for-different-content-encodings.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;;;;;;;;;;;uGAYmG,CACpG;KACA,OAAO,CACN,yEAAyE,CAC1E;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-strong-comparison-rules.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=etag-strong-comparison-rules.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-strong-comparison-rules.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag-strong-comparison-rules.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/etag-strong-comparison-rules.rule.ts"],"names":[],"mappings":";AAEA,wBAqBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-strong-comparison-rules.rule.js

@@ -0,0 +1,20 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/etag-strong-comparison-rules')
+    .severity('off')
+    .type('informational')
+    .appliesTo('server', 'client', 'intermediary')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3.2')
+    .description(`Strong comparison: Two entity tags are equivalent if and only if both are not weak AND their opaque-tags
+    match character-by-character. Strong comparison is used for:
+    - Cache validation when exact match is required
+    - Range requests (If-Range with ETag)
+    - Preventing lost updates (If-Match)
+
+    Comparison examples:
+    - W/"1" vs W/"1": no match (both weak)
+    - W/"1" vs "1": no match (one weak)
+    - "1" vs "1": match (both strong, opaque-tags match)
+    - "1" vs "2": no match (opaque-tags differ)`)
+    .summary('Strong ETag comparison requires both tags to be strong with matching opaque-tags.')
+    .done();
+//# sourceMappingURL=etag-strong-comparison-rules.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-strong-comparison-rules.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag-strong-comparison-rules.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/etag-strong-comparison-rules.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,sCAAsC,CAAC;KAC5D,QAAQ,CAAC,KAAK,CAAC;KACf,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC;KAC7C,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;;;;;;;;;gDAU4C,CAC7C;KACA,OAAO,CACN,mFAAmF,CACpF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-weak-comparison-rules.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=etag-weak-comparison-rules.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-weak-comparison-rules.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag-weak-comparison-rules.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/etag-weak-comparison-rules.rule.ts"],"names":[],"mappings":";AAEA,wBAoBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-weak-comparison-rules.rule.js

@@ -0,0 +1,19 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/etag-weak-comparison-rules')
+    .severity('off')
+    .type('informational')
+    .appliesTo('server', 'client', 'intermediary')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3.2')
+    .description(`Weak comparison: Two entity tags are equivalent if their opaque-tags match character-by-character,
+    regardless of either or both being tagged as "weak". Weak comparison is used for:
+    - Cache validation when semantic equivalence is sufficient (If-None-Match)
+    - When the client doesn't require exact equality with previously obtained data
+
+    Comparison examples:
+    - W/"1" vs W/"1": match (opaque-tags match)
+    - W/"1" vs "1": match (opaque-tags match, ignore weak prefix)
+    - "1" vs "1": match (opaque-tags match)
+    - W/"1" vs W/"2": no match (opaque-tags differ)`)
+    .summary('Weak ETag comparison matches if opaque-tags match, ignoring weak prefix.')
+    .done();
+//# sourceMappingURL=etag-weak-comparison-rules.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/etag-weak-comparison-rules.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag-weak-comparison-rules.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/etag-weak-comparison-rules.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,oCAAoC,CAAC;KAC1D,QAAQ,CAAC,KAAK,CAAC;KACf,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC;KAC7C,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;;;;;;;;oDASgD,CACjD;KACA,OAAO,CACN,0EAA0E,CAC3E;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-must-mark-weak-entity-tag.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-mark-weak-entity-tag.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-must-mark-weak-entity-tag.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-mark-weak-entity-tag.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/origin-server-must-mark-weak-entity-tag.rule.ts"],"names":[],"mappings":";AAEA,wBAgBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-must-mark-weak-entity-tag.rule.js

@@ -0,0 +1,17 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-mark-weak-entity-tag')
+    .severity('error')
+    .type('informational')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3')
+    .description(`If an origin server provides an entity tag for a representation and the generation of that entity tag does not
+    satisfy all of the characteristics of a strong validator, then the origin server MUST mark the entity tag as weak
+    by prefixing its opaque value with "W/" (case-sensitive).
+
+    Note: This rule cannot be automatically validated because it requires knowledge of the server's entity tag
+    generation mechanism and whether it satisfies the characteristics of a strong validator (changes value whenever
+    the representation data changes in an observable way). This must be verified through code review of the ETag
+    generation logic.`)
+    .summary('Origin servers MUST mark weak entity tags with "W/" prefix.')
+    .done();
+//# sourceMappingURL=origin-server-must-mark-weak-entity-tag.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-must-mark-weak-entity-tag.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-mark-weak-entity-tag.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/origin-server-must-mark-weak-entity-tag.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,iDAAiD,CAAC;KACvE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV;;;;;;;sBAOkB,CACnB;KACA,OAAO,CAAC,6DAA6D,CAAC;KACtE,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-avoid-backslash-in-entity-tags.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-avoid-backslash-in-entity-tags.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-avoid-backslash-in-entity-tags.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-avoid-backslash-in-entity-tags.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-avoid-backslash-in-entity-tags.rule.ts"],"names":[],"mappings":";AAGA,wBAuBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-avoid-backslash-in-entity-tags.rule.js

@@ -0,0 +1,19 @@
+import { getHeader, responseHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-avoid-backslash-in-entity-tags')
+    .severity('warn')
+    .type('test', 'analytics')
+    .appliesTo('origin server', 'server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3')
+    .description(`Previously, opaque-tag was defined to be a quoted-string; thus, some recipients might perform backslash unescaping.
+    Servers therefore ought to avoid backslash characters in entity tags.`)
+    .summary('Servers SHOULD avoid backslash characters in entity tags.')
+    .rule((ctx) => ctx.validateHttpTransactions(responseHeader('etag'), (req, res) => {
+    const etag = getHeader(res.headers, 'etag');
+    if (typeof etag !== 'string') {
+        return false;
+    }
+    return etag.includes('\\');
+}))
+    .done();
+//# sourceMappingURL=origin-server-should-avoid-backslash-in-entity-tags.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-avoid-backslash-in-entity-tags.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-avoid-backslash-in-entity-tags.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-avoid-backslash-in-entity-tags.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6DAA6D,CAC9D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;KACzB,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC;KACpC,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV;0EACsE,CACvE;KACA,OAAO,CAAC,2DAA2D,CAAC;KACpE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE5C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-send-etag.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-send-etag.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-send-etag.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-etag.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-send-etag.rule.ts"],"names":[],"mappings":";AAGA,wBAuBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-send-etag.rule.js

@@ -0,0 +1,18 @@
+import { and, not, responseHeader, statusCodeRange } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-send-etag')
+    .severity('warn')
+    .type('static', 'test', 'analytics')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3.1')
+    .description(`An origin server SHOULD send an ETag for any selected representation for which detection of changes can be
+    reasonably and consistently determined, since the entity tag's use in conditional requests and evaluating cache
+    freshness can substantially reduce unnecessary transfers and significantly improve service availability, scalability, and reliability.`)
+    .summary('Origin servers SHOULD send ETag header when change detection can be determined.')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(
+// Only for successful responses
+statusCodeRange(200, 299), 
+// Should have at least one validator
+not(responseHeader('etag')))))
+    .done();
+//# sourceMappingURL=origin-server-should-send-etag.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-send-etag.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-etag.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/origin-server-should-send-etag.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,wCAAwC,CAAC;KAC9D,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;KACnC,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;2IAEuI,CACxI;KACA,OAAO,CACN,iFAAiF,CAClF;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG;AACD,gCAAgC;AAChC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;AACzB,qCAAqC;AACrC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAC5B,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/sender-may-send-etag-in-trailer.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-may-send-etag-in-trailer.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/etag/sender-may-send-etag-in-trailer.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-may-send-etag-in-trailer.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/sender-may-send-etag-in-trailer.rule.ts"],"names":[],"mappings":";AAGA,wBAkBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/etag/sender-may-send-etag-in-trailer.rule.js

@@ -0,0 +1,13 @@
+import { not, responseTrailer, statusCodeRange } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-may-send-etag-in-trailer')
+    .severity('hint')
+    .type('test', 'analytics')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.3')
+    .description(`A sender MAY send the ETag field in a trailer section. However, since trailers are often ignored, it is
+    preferable to send ETag as a header field unless the entity tag is generated while sending the content.`)
+    .summary('Servers MAY send ETag in trailer section (but header field is preferable).')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(statusCodeRange(200, 299), not(responseTrailer('etag'))))
+    .done();
+//# sourceMappingURL=sender-may-send-etag-in-trailer.rule.js.map