@thymian/rules-rfc-9110 0.1.0

package/dist/rules/methods/method-definitions/put/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/put/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/put/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-put')
+    .description('An origin server SHOULD ignore unrecognized header and trailer fields received in a PUT request (i.e., not save them as part of the resource state).')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.js.map

package/dist/rules/methods/method-definitions/put/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-should-ingore-unrecognized-header-and-trailer-fields-received-in-put-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,oGAAoG,CACrG;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,sJAAsJ,CACvJ;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/put/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.d.ts.map

package/dist/rules/methods/method-definitions/put/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.ts"],"names":[],"mappings":";AAGA,wBAgBU"}

package/dist/rules/methods/method-definitions/put/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.js

@@ -0,0 +1,11 @@
+import { method, not, or, statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation')
+    .severity('warn')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-put')
+    .description('When a PUT representation is inconsistent with the target resource, the origin server SHOULD either make them consistent, by transforming the representation or changing the resource configuration, or respond with an appropriate error message containing sufficient information to explain why the representation is unsuitable. The 409 (Conflict) or 415 (Unsupported Media Type) status codes are suggested, with the latter being specific to constraints on Content-Type values.')
+    .appliesTo('origin server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(method('PUT'), not(or(statusCode(409), statusCode(415)))))
+    .done();
+//# sourceMappingURL=origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.js.map

package/dist/rules/methods/method-definitions/put/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-should-response-with-409-or-415-status-code-to-put-request-for-inconsistent-representation.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,kHAAkH,CACnH;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,2dAA2d,CAC5d;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,MAAM,CAAC,KAAK,CAAC,EACb,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1C,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/put/origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/put/origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/put/origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-verify-constraints-for-target-resource-for-put-request')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-put')
+    .description('An origin server SHOULD verify that the PUT representation is consistent with its configured constraints for the target resource.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.js.map

package/dist/rules/methods/method-definitions/put/origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-should-verify-constraints-for-target-resource-for-put-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qFAAqF,CACtF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,mIAAmI,CACpI;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/put/origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.d.ts.map

package/dist/rules/methods/method-definitions/put/origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/put/origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/service-that-selects-uri-for-client-should-use-post-instead-of-put')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-put')
+    .description('A service that selects a proper URI on behalf of the client, after receiving a state-changing request, SHOULD be implemented using the POST method rather than PUT.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.js.map

package/dist/rules/methods/method-definitions/put/origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/origin-server-that-selects-uri-for-client-should-use-post-instead-of-put.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4EAA4E,CAC7E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,qKAAqK,CACtK;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/put/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/put/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.ts"],"names":[],"mappings":";AAGA,wBAcU"}

package/dist/rules/methods/method-definitions/put/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.js

@@ -0,0 +1,10 @@
+import { and, method, statusCodeRange } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-put')
+    .description('The user agent MAY then make its own decision regarding whether or not to redirect the request.')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(method('PUT'), statusCodeRange(300, 399))))
+    .done();
+//# sourceMappingURL=user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.js.map

package/dist/rules/methods/method-definitions/put/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/put/user-agent-may-make-own-decision-to-redirect-request-for-3xx-response-to-put-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,8FAA8F,CAC/F;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,iGAAiG,CAClG;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAC9C,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/trace/client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/trace/client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.ts"],"names":[],"mappings":";AAMA,wBAgBU"}

package/dist/rules/methods/method-definitions/trace/client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.js

@@ -0,0 +1,13 @@
+import { method, or, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+// TODO: Add more headers
+const sensitiveHeaders = ['Authorization', 'Proxy-Authorization', 'X-API-Key'];
+export default httpRule('rfc9110/client-must-not-generate-fields-containing-sensitive-data-in-trace-request')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-trace')
+    .description('A client MUST NOT generate fields in a TRACE request containing sensitive data that might be disclosed by the response.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(method('TRACE'), or(...sensitiveHeaders.map((header) => requestHeader(header)))))
+    .done();
+//# sourceMappingURL=client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.js.map

package/dist/rules/methods/method-definitions/trace/client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/client-must-not-generate-fields-containing-sensitive-data-in-trace-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,yBAAyB;AACzB,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,qBAAqB,EAAE,WAAW,CAAC,CAAC;AAE/E,eAAe,QAAQ,CACrB,oFAAoF,CACrF;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,wDAAwD,CAAC;KAC7D,WAAW,CACV,yHAAyH,CAC1H;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,MAAM,CAAC,OAAO,CAAC,EACf,EAAE,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAC/D,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/trace/client-must-not-send-content-in-trace-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-not-send-content-in-trace-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/trace/client-must-not-send-content-in-trace-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-send-content-in-trace-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/client-must-not-send-content-in-trace-request.rule.ts"],"names":[],"mappings":";AAGA,wBASU"}

package/dist/rules/methods/method-definitions/trace/client-must-not-send-content-in-trace-request.rule.js

@@ -0,0 +1,11 @@
+import { hasRequestBody, method } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-not-send-content-in-trace-request')
+    .severity('error')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-trace')
+    .description('A client MUST NOT send content in a TRACE request.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(method('TRACE'), hasRequestBody()))
+    .done();
+//# sourceMappingURL=client-must-not-send-content-in-trace-request.rule.js.map

package/dist/rules/methods/method-definitions/trace/client-must-not-send-content-in-trace-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-send-content-in-trace-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/client-must-not-send-content-in-trace-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,uDAAuD,CAAC;KAC7E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,wDAAwD,CAAC;KAC7D,WAAW,CAAC,oDAAoD,CAAC;KACjE,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC,CACtE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/trace/final-recipient-of-trace-request-should-reflect-received-message.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=final-recipient-of-trace-request-should-reflect-received-message.rule.d.ts.map

package/dist/rules/methods/method-definitions/trace/final-recipient-of-trace-request-should-reflect-received-message.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"final-recipient-of-trace-request-should-reflect-received-message.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/final-recipient-of-trace-request-should-reflect-received-message.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/trace/final-recipient-of-trace-request-should-reflect-received-message.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/final-recipient-of-trace-request-should-reflect-received-message')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-trace')
+    .description('The final recipient of the request SHOULD reflect the message received, excluding some fields described below, back to the client as the content of a 200 (OK) response.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=final-recipient-of-trace-request-should-reflect-received-message.rule.js.map

package/dist/rules/methods/method-definitions/trace/final-recipient-of-trace-request-should-reflect-received-message.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"final-recipient-of-trace-request-should-reflect-received-message.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/final-recipient-of-trace-request-should-reflect-received-message.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0EAA0E,CAC3E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,wDAAwD,CAAC;KAC7D,WAAW,CACV,0KAA0K,CAC3K;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/trace/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.d.ts.map

package/dist/rules/methods/method-definitions/trace/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/trace/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-trace')
+    .description('The final recipient of the request SHOULD exclude any request fields that are likely to contain sensitive data when that recipient generates the response content.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.js.map

package/dist/rules/methods/method-definitions/trace/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/trace/final-recipient-should-exclude-sensitive-request-data-from-response-to-trace.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sFAAsF,CACvF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,wDAAwD,CAAC;KAC7D,WAAW,CACV,oKAAoK,CACrK;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-a-failed-automatic-retry.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-should-not-automatically-retry-a-failed-automatic-retry.rule.d.ts.map

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-a-failed-automatic-retry.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-automatically-retry-a-failed-automatic-retry.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/client-should-not-automatically-retry-a-failed-automatic-retry.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-a-failed-automatic-retry.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-should-not-automatically-retry-a-failed-automatic-retry')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-idempotent-methods')
+    .description('A client SHOULD NOT automatically retry a failed automatic retry.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-should-not-automatically-retry-a-failed-automatic-retry.rule.js.map

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-a-failed-automatic-retry.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-automatically-retry-a-failed-automatic-retry.rule.js","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/client-should-not-automatically-retry-a-failed-automatic-retry.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CACV,mEAAmE,CACpE;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-request-with-non-idempotent-method.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-should-not-automatically-retry-request-with-non-idempotent-method.rule.d.ts.map

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-request-with-non-idempotent-method.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-automatically-retry-request-with-non-idempotent-method.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/client-should-not-automatically-retry-request-with-non-idempotent-method.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-request-with-non-idempotent-method.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-should-not-automatically-retry-request-with-non-idempotent-method')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-idempotent-methods')
+    .description('A client SHOULD NOT automatically retry a request with a non-idempotent method unless it has some means to know that the request semantics are actually idempotent, regardless of the method, or some means to detect that the original request was never applied.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-should-not-automatically-retry-request-with-non-idempotent-method.rule.js.map

package/dist/rules/methods/method-properties/client-should-not-automatically-retry-request-with-non-idempotent-method.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-automatically-retry-request-with-non-idempotent-method.rule.js","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/client-should-not-automatically-retry-request-with-non-idempotent-method.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,kFAAkF,CACnF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CACV,oQAAoQ,CACrQ;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-properties/origin-server-must-disable-safe-methods-for-unsafe-resources.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-disable-safe-methods-for-unsafe-resources.rule.d.ts.map

package/dist/rules/methods/method-properties/origin-server-must-disable-safe-methods-for-unsafe-resources.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-disable-safe-methods-for-unsafe-resources.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/origin-server-must-disable-safe-methods-for-unsafe-resources.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/methods/method-properties/origin-server-must-disable-safe-methods-for-unsafe-resources.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-disable-safe-methods-for-unsafe-resources')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-safe-methods')
+    .summary('If the purpose of such a resource is to perform an unsafe action, then the resource owner MUST disable or disallow that action when it is accessed using a safe request method.')
+    .description('When a resource is constructed such that parameters within the target URI have the effect of selecting an action, it is the resource owner\'s responsibility to ensure that the action is consistent with the request method semantics. For example, it is common for Web-based content editing software to use actions within query parameters, such as "page?do=delete". If the purpose of such a resource is to perform an unsafe action, then the resource owner MUST disable or disallow that action when it is accessed using a safe request method.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-must-disable-safe-methods-for-unsafe-resources.rule.js.map

package/dist/rules/methods/method-properties/origin-server-must-disable-safe-methods-for-unsafe-resources.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-disable-safe-methods-for-unsafe-resources.rule.js","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/origin-server-must-disable-safe-methods-for-unsafe-resources.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,OAAO,CACN,iLAAiL,CAClL;KACA,WAAW,CACV,4hBAA4hB,CAC7hB;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-properties/proxy-must-not-automatically-retry-non-idempontent-requests.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-not-automatically-retry-non-idempontent-requests.rule.d.ts.map

package/dist/rules/methods/method-properties/proxy-must-not-automatically-retry-non-idempontent-requests.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-automatically-retry-non-idempontent-requests.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/proxy-must-not-automatically-retry-non-idempontent-requests.rule.ts"],"names":[],"mappings":";AAEA,wBAQU"}

package/dist/rules/methods/method-properties/proxy-must-not-automatically-retry-non-idempontent-requests.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-must-not-automatically-retry-non-idempontent-requests')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-idempotent-methods')
+    .description('A proxy MUST NOT automatically retry non-idempotent requests.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-must-not-automatically-retry-non-idempontent-requests.rule.js.map

package/dist/rules/methods/method-properties/proxy-must-not-automatically-retry-non-idempontent-requests.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-automatically-retry-non-idempontent-requests.rule.js","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/proxy-must-not-automatically-retry-non-idempontent-requests.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CAAC,+DAA+D,CAAC;KAC5E,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-properties/user-agent-distinguish-between-safe-and-unsafe-methods.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-distinguish-between-safe-and-unsafe-methods.rule.d.ts.map

package/dist/rules/methods/method-properties/user-agent-distinguish-between-safe-and-unsafe-methods.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-distinguish-between-safe-and-unsafe-methods.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/user-agent-distinguish-between-safe-and-unsafe-methods.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-properties/user-agent-distinguish-between-safe-and-unsafe-methods.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-distinguish-between-safe-and-unsafe-methods')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-safe-methods')
+    .description('A user agent SHOULD distinguish between safe and unsafe methods when presenting potential actions to a user, such that the user can be made aware of an unsafe action before it is requested.')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-distinguish-between-safe-and-unsafe-methods.rule.js.map

package/dist/rules/methods/method-properties/user-agent-distinguish-between-safe-and-unsafe-methods.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-distinguish-between-safe-and-unsafe-methods.rule.js","sourceRoot":"","sources":["../../../../src/rules/methods/method-properties/user-agent-distinguish-between-safe-and-unsafe-methods.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,gEAAgE,CACjE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,WAAW,CACV,+LAA+L,CAChM;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/origin-server-should-send-405-response-for-unallowed-method.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-send-405-response-for-unallowed-method.rule.d.ts.map

package/dist/rules/methods/origin-server-should-send-405-response-for-unallowed-method.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-405-response-for-unallowed-method.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/methods/origin-server-should-send-405-response-for-unallowed-method.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/origin-server-should-send-405-response-for-unallowed-method.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-send-405-response-for-unallowed-method')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-overview')
+    .description('An origin server that receives a request method that is recognized and implemented, but not allowed for the target resource, SHOULD respond with the 405 (Method Not Allowed) status code.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-should-send-405-response-for-unallowed-method.rule.js.map

package/dist/rules/methods/origin-server-should-send-405-response-for-unallowed-method.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-405-response-for-unallowed-method.rule.js","sourceRoot":"","sources":["../../../src/rules/methods/origin-server-should-send-405-response-for-unallowed-method.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV,4LAA4L,CAC7L;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/origin-server-should-send-501-response-for-unrecognized-method.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-send-501-response-for-unrecognized-method.rule.d.ts.map

package/dist/rules/methods/origin-server-should-send-501-response-for-unrecognized-method.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-501-response-for-unrecognized-method.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/methods/origin-server-should-send-501-response-for-unrecognized-method.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/origin-server-should-send-501-response-for-unrecognized-method.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-send-501-response-for-unrecognized-method')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-overview')
+    .description('An origin server that receives a request method that is unrecognized or not implemented SHOULD respond with the 501 (Not Implemented) status code.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-should-send-501-response-for-unrecognized-method.rule.js.map

package/dist/rules/methods/origin-server-should-send-501-response-for-unrecognized-method.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-501-response-for-unrecognized-method.rule.js","sourceRoot":"","sources":["../../../src/rules/methods/origin-server-should-send-501-response-for-unrecognized-method.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV,oJAAoJ,CACrJ;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/other-methods-than-get-and-head-are-optional.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=other-methods-than-get-and-head-are-optional.rule.d.ts.map

package/dist/rules/methods/other-methods-than-get-and-head-are-optional.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"other-methods-than-get-and-head-are-optional.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/methods/other-methods-than-get-and-head-are-optional.rule.ts"],"names":[],"mappings":";AAGA,wBAYU"}

package/dist/rules/methods/other-methods-than-get-and-head-are-optional.rule.js

@@ -0,0 +1,11 @@
+import { method, not, or, statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/other-methods-than-get-and-head-are-optional')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-overview')
+    .description('Other methods than GET and HEAD are OPTIONAL.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(not(or(method('GET'), method('HEAD'))), statusCode(501)))
+    .done();
+//# sourceMappingURL=other-methods-than-get-and-head-are-optional.rule.js.map

package/dist/rules/methods/other-methods-than-get-and-head-are-optional.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"other-methods-than-get-and-head-are-optional.rule.js","sourceRoot":"","sources":["../../../src/rules/methods/other-methods-than-get-and-head-are-optional.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,sDAAsD,CAAC;KAC5E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CAAC,+CAA+C,CAAC;KAC5D,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EACtC,UAAU,CAAC,GAAG,CAAC,CAChB,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/range-requests/accept-ranges/accept-ranges-may-be-sent-in-trailer.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=accept-ranges-may-be-sent-in-trailer.rule.d.ts.map

package/dist/rules/range-requests/accept-ranges/accept-ranges-may-be-sent-in-trailer.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept-ranges-may-be-sent-in-trailer.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/accept-ranges-may-be-sent-in-trailer.rule.ts"],"names":[],"mappings":";AAGA,wBAkBU"}

package/dist/rules/range-requests/accept-ranges/accept-ranges-may-be-sent-in-trailer.rule.js

@@ -0,0 +1,11 @@
+import { and, not, requestHeader, responseTrailer } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/accept-ranges-may-be-sent-in-trailer')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-accept-ranges')
+    .description('The Accept-Ranges field MAY be sent in a trailer section, but is preferred to be sent as a header field because the information is particularly useful for restarting large information transfers that have failed in mid-content (before the trailer section is received).')
+    .summary('Accept-Ranges may be sent in trailer but header field is preferred for failed transfer recovery.')
+    .rule((ctx) => ctx.validateHttpTransactions(and(requestHeader('accept-ranges'), not(responseTrailer('accept-ranges')))))
+    .done();
+//# sourceMappingURL=accept-ranges-may-be-sent-in-trailer.rule.js.map

package/dist/rules/range-requests/accept-ranges/accept-ranges-may-be-sent-in-trailer.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept-ranges-may-be-sent-in-trailer.rule.js","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/accept-ranges-may-be-sent-in-trailer.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,8CAA8C,CAAC;KACpE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,gEAAgE,CAAC;KACrE,WAAW,CACV,6QAA6Q,CAC9Q;KACA,OAAO,CACN,kGAAkG,CACnG;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CACD,aAAa,CAAC,eAAe,CAAC,EAC9B,GAAG,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CACtC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/range-requests/accept-ranges/client-may-generate-range-requests-without-accept-ranges.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-may-generate-range-requests-without-accept-ranges.rule.d.ts.map

package/dist/rules/range-requests/accept-ranges/client-may-generate-range-requests-without-accept-ranges.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-may-generate-range-requests-without-accept-ranges.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/client-may-generate-range-requests-without-accept-ranges.rule.ts"],"names":[],"mappings":";AAGA,wBAeU"}

package/dist/rules/range-requests/accept-ranges/client-may-generate-range-requests-without-accept-ranges.rule.js

@@ -0,0 +1,11 @@
+import { and, method, not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-may-generate-range-requests-without-accept-ranges')
+    .severity('hint')
+    .type('analytics', 'static')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-accept-ranges')
+    .description('A client MAY generate range requests regardless of having received an Accept-Ranges field. The information only provides advice for the sake of improving performance and reducing unnecessary network transfers.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(method('GET'), not(requestHeader('range')))))
+    .done();
+//# sourceMappingURL=client-may-generate-range-requests-without-accept-ranges.rule.js.map

package/dist/rules/range-requests/accept-ranges/client-may-generate-range-requests-without-accept-ranges.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-may-generate-range-requests-without-accept-ranges.rule.js","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/client-may-generate-range-requests-without-accept-ranges.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,kEAAkE,CACnE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;KAC3B,GAAG,CAAC,gEAAgE,CAAC;KACrE,WAAW,CACV,mNAAmN,CACpN;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAChD,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/range-requests/accept-ranges/client-must-not-assume-future-range-support-from-accept-ranges.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-not-assume-future-range-support-from-accept-ranges.rule.d.ts.map

package/dist/rules/range-requests/accept-ranges/client-must-not-assume-future-range-support-from-accept-ranges.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-assume-future-range-support-from-accept-ranges.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/client-must-not-assume-future-range-support-from-accept-ranges.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/range-requests/accept-ranges/client-must-not-assume-future-range-support-from-accept-ranges.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-not-assume-future-range-support-from-accept-ranges')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-accept-ranges')
+    .description('A client MUST NOT assume that receiving an Accept-Ranges field means that future range requests will return partial responses. The content might change, the server might only support range requests at certain times or under certain conditions, or a different intermediary might process the next request.')
+    .summary('Client must not assume future range support based on Accept-Ranges field as conditions may change.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-must-not-assume-future-range-support-from-accept-ranges.rule.js.map

package/dist/rules/range-requests/accept-ranges/client-must-not-assume-future-range-support-from-accept-ranges.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-assume-future-range-support-from-accept-ranges.rule.js","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/client-must-not-assume-future-range-support-from-accept-ranges.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,gEAAgE,CAAC;KACrE,WAAW,CACV,iTAAiT,CAClT;KACA,OAAO,CACN,oGAAoG,CACrG;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/range-requests/accept-ranges/server-may-send-accept-ranges-none.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-may-send-accept-ranges-none.rule.d.ts.map

package/dist/rules/range-requests/accept-ranges/server-may-send-accept-ranges-none.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-send-accept-ranges-none.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/server-may-send-accept-ranges-none.rule.ts"],"names":[],"mappings":";AAGA,wBA2BU"}

package/dist/rules/range-requests/accept-ranges/server-may-send-accept-ranges-none.rule.js

@@ -0,0 +1,18 @@
+import { and, getHeader, not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-may-send-accept-ranges-none')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-accept-ranges')
+    .description('A server that does not support any kind of range request for the target resource MAY send "Accept-Ranges: none" to advise the client not to attempt a range request on the same request path. The range unit "none" is reserved for this purpose.')
+    .summary('Server may send "Accept-Ranges: none" to advise against range requests.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateHttpTransactions(and(not(requestHeader('range'))), (req, res) => {
+    const acceptRanges = getHeader(res.headers, 'accept-ranges');
+    if (!acceptRanges) {
+        return true;
+    }
+    return (Array.isArray(acceptRanges) ? acceptRanges : [acceptRanges]).every((range) => !range.match(/none/i));
+}))
+    .done();
+//# sourceMappingURL=server-may-send-accept-ranges-none.rule.js.map

package/dist/rules/range-requests/accept-ranges/server-may-send-accept-ranges-none.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-send-accept-ranges-none.rule.js","sourceRoot":"","sources":["../../../../src/rules/range-requests/accept-ranges/server-may-send-accept-ranges-none.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,4CAA4C,CAAC;KAClE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,gEAAgE,CAAC;KACrE,WAAW,CACV,mPAAmP,CACpP;KACA,OAAO,CACN,yEAAyE,CAC1E;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAChC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACX,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE7D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAC5D,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5C,CAAC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/range-requests/content-range/proxy-should-forward-206-with-unknown-range-unit.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-should-forward-206-with-unknown-range-unit.rule.d.ts.map

package/dist/rules/range-requests/content-range/proxy-should-forward-206-with-unknown-range-unit.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-should-forward-206-with-unknown-range-unit.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/range-requests/content-range/proxy-should-forward-206-with-unknown-range-unit.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}