@thymian/rules-rfc-9110 0.1.0

package/dist/rules/routing/message-forwarding/via/gateway-may-send-via-header-in-responses.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-may-send-via-header-in-responses.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/gateway-may-send-via-header-in-responses.rule.ts"],"names":[],"mappings":";AAGA,wBAeU"}

package/dist/rules/routing/message-forwarding/via/gateway-may-send-via-header-in-responses.rule.js

@@ -0,0 +1,12 @@
+import { not, responseHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/gateway-may-send-via-header-in-responses')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('An HTTP-to-HTTP gateway MAY send a Via header field in forwarded response messages. This is optional for responses, unlike requests where it is required.')
+    .summary('Gateway MAY send Via header in forwarded responses.')
+    .appliesTo('gateway')
+    .rule((ctx) => ctx.validateCapturedHttpTransactions(not(responseHeader('via')), ({ response }) => response.meta.role === 'gateway'))
+    .done();
+//# sourceMappingURL=gateway-may-send-via-header-in-responses.rule.js.map

package/dist/rules/routing/message-forwarding/via/gateway-may-send-via-header-in-responses.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-may-send-via-header-in-responses.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/gateway-may-send-via-header-in-responses.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,kDAAkD,CAAC;KACxE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,2JAA2J,CAC5J;KACA,OAAO,CAAC,qDAAqD,CAAC;KAC9D,SAAS,CAAC,SAAS,CAAC;KACpB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,gCAAgC,CAClC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAC1B,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CACnD,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/gateway-must-send-via-header-in-inbound-requests.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=gateway-must-send-via-header-in-inbound-requests.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/gateway-must-send-via-header-in-inbound-requests.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-must-send-via-header-in-inbound-requests.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/gateway-must-send-via-header-in-inbound-requests.rule.ts"],"names":[],"mappings":";AAGA,wBAiBU"}

package/dist/rules/routing/message-forwarding/via/gateway-must-send-via-header-in-inbound-requests.rule.js

@@ -0,0 +1,12 @@
+import { not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/gateway-must-send-via-header-in-inbound-requests')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('An HTTP-to-HTTP gateway MUST send an appropriate Via header field in each inbound request message. This enables tracking of the message path and protocol capabilities along the request/response chain.')
+    .summary('Gateway MUST send Via header in inbound requests.')
+    .appliesTo('gateway')
+    .rule((ctx) => ctx.validateCapturedHttpTransactions(not(requestHeader('via')), ({ request }) => request.meta.role === 'gateway'))
+    .done();
+//# sourceMappingURL=gateway-must-send-via-header-in-inbound-requests.rule.js.map

package/dist/rules/routing/message-forwarding/via/gateway-must-send-via-header-in-inbound-requests.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-must-send-via-header-in-inbound-requests.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/gateway-must-send-via-header-in-inbound-requests.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,0MAA0M,CAC3M;KACA,OAAO,CAAC,mDAAmD,CAAC;KAC5D,SAAS,CAAC,SAAS,CAAC;KACpB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,gCAAgC,CAClC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EACzB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CACjD,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/intermediary-may-combine-via-entries-with-identical-protocols.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-may-combine-via-entries-with-identical-protocols.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/intermediary-may-combine-via-entries-with-identical-protocols.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-may-combine-via-entries-with-identical-protocols.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/intermediary-may-combine-via-entries-with-identical-protocols.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/via/intermediary-may-combine-via-entries-with-identical-protocols.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-may-combine-via-entries-with-identical-protocols')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('An intermediary MAY combine an ordered subsequence of Via header field list members into a single member if the entries have identical received-protocol values. This can reduce header size while maintaining the essential routing information.')
+    .summary('Intermediary MAY combine Via entries with identical protocols.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-may-combine-via-entries-with-identical-protocols.rule.js.map

package/dist/rules/routing/message-forwarding/via/intermediary-may-combine-via-entries-with-identical-protocols.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-may-combine-via-entries-with-identical-protocols.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/intermediary-may-combine-via-entries-with-identical-protocols.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,uEAAuE,CACxE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,mPAAmP,CACpP;KACA,OAAO,CAAC,gEAAgE,CAAC;KACzE,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/proxy-must-send-via-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-send-via-header.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/proxy-must-send-via-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-send-via-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/proxy-must-send-via-header.rule.ts"],"names":[],"mappings":";AAGA,wBAeU"}

package/dist/rules/routing/message-forwarding/via/proxy-must-send-via-header.rule.js

@@ -0,0 +1,12 @@
+import { not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-must-send-via-header')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('A proxy MUST send an appropriate Via header field in each message that it forwards. The Via header field indicates the presence of intermediate protocols and recipients between the user agent and the server, and is used for tracking message forwards, avoiding request loops, and identifying protocol capabilities.')
+    .summary('Proxy MUST send Via header in forwarded messages.')
+    .appliesTo('proxy')
+    .rule((ctx) => ctx.validateCapturedHttpTransactions(not(requestHeader('via')), ({ request }) => request.meta.role === 'proxy'))
+    .done();
+//# sourceMappingURL=proxy-must-send-via-header.rule.js.map

package/dist/rules/routing/message-forwarding/via/proxy-must-send-via-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-send-via-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/proxy-must-send-via-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,oCAAoC,CAAC;KAC1D,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,2TAA2T,CAC5T;KACA,OAAO,CAAC,mDAAmD,CAAC;KAC5D,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,gCAAgC,CAClC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EACzB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAC/C,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/recipient-may-interpret-missing-port-as-default.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-may-interpret-missing-port-as-default.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/recipient-may-interpret-missing-port-as-default.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-interpret-missing-port-as-default.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/recipient-may-interpret-missing-port-as-default.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/routing/message-forwarding/via/recipient-may-interpret-missing-port-as-default.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/recipient-may-interpret-missing-port-as-default')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('If a port is not provided in the Via header field, a recipient MAY interpret that as meaning it was received on the default port, if any, for the received-protocol.')
+    .summary('Recipient MAY interpret missing port as default port in Via header.')
+    .done();
+//# sourceMappingURL=recipient-may-interpret-missing-port-as-default.rule.js.map

package/dist/rules/routing/message-forwarding/via/recipient-may-interpret-missing-port-as-default.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-interpret-missing-port-as-default.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/recipient-may-interpret-missing-port-as-default.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,sKAAsK,CACvK;KACA,OAAO,CACN,qEAAqE,CACtE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/recipient-may-remove-comments-before-forwarding.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-may-remove-comments-before-forwarding.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/recipient-may-remove-comments-before-forwarding.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-remove-comments-before-forwarding.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/recipient-may-remove-comments-before-forwarding.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/routing/message-forwarding/via/recipient-may-remove-comments-before-forwarding.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/recipient-may-remove-comments-before-forwarding')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('Comments in Via are optional, and a recipient MAY remove them prior to forwarding the message. This allows intermediaries to strip potentially sensitive or unnecessary information.')
+    .summary('Recipient MAY remove comments from Via header before forwarding.')
+    .done();
+//# sourceMappingURL=recipient-may-remove-comments-before-forwarding.rule.js.map

package/dist/rules/routing/message-forwarding/via/recipient-may-remove-comments-before-forwarding.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-remove-comments-before-forwarding.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/recipient-may-remove-comments-before-forwarding.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,sLAAsL,CACvL;KACA,OAAO,CAAC,kEAAkE,CAAC;KAC3E,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/sender-may-generate-comments-to-identify-software.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-may-generate-comments-to-identify-software.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/sender-may-generate-comments-to-identify-software.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-may-generate-comments-to-identify-software.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-may-generate-comments-to-identify-software.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/routing/message-forwarding/via/sender-may-generate-comments-to-identify-software.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-may-generate-comments-to-identify-software')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('A sender MAY generate comments to identify the software of each recipient, analogous to the User-Agent and Server header fields. However, comments in Via are optional.')
+    .summary('Sender MAY generate comments in Via header to identify software.')
+    .done();
+//# sourceMappingURL=sender-may-generate-comments-to-identify-software.rule.js.map

package/dist/rules/routing/message-forwarding/via/sender-may-generate-comments-to-identify-software.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-may-generate-comments-to-identify-software.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-may-generate-comments-to-identify-software.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,2DAA2D,CAC5D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,yKAAyK,CAC1K;KACA,OAAO,CAAC,kEAAkE,CAAC;KAC3E,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/sender-may-replace-host-with-pseudonym.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-may-replace-host-with-pseudonym.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/sender-may-replace-host-with-pseudonym.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-may-replace-host-with-pseudonym.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-may-replace-host-with-pseudonym.rule.ts"],"names":[],"mappings":";AAGA,wBAgBU"}

package/dist/rules/routing/message-forwarding/via/sender-may-replace-host-with-pseudonym.rule.js

@@ -0,0 +1,11 @@
+import { and, or, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-may-replace-host-with-pseudonym')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('The received-by portion of the Via header is normally the host and optional port number of a recipient server or client that subsequently forwarded the message. However, if the real host is considered to be sensitive information, a sender MAY replace it with a pseudonym.')
+    .summary('Sender MAY replace host with pseudonym in Via header.')
+    .rule((ctx) => ctx.validateHttpTransactions(and(or(requestHeader('host'), requestHeader(':authority')), requestHeader('via'))))
+    .done();
+//# sourceMappingURL=sender-may-replace-host-with-pseudonym.rule.js.map

package/dist/rules/routing/message-forwarding/via/sender-may-replace-host-with-pseudonym.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-may-replace-host-with-pseudonym.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-may-replace-host-with-pseudonym.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,gDAAgD,CAAC;KACtE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,iRAAiR,CAClR;KACA,OAAO,CAAC,uDAAuD,CAAC;KAChE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,EACtD,aAAa,CAAC,KAAK,CAAC,CACrB,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/sender-must-not-combine-via-entries-with-different-protocols.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-not-combine-via-entries-with-different-protocols.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/sender-must-not-combine-via-entries-with-different-protocols.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-not-combine-via-entries-with-different-protocols.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-must-not-combine-via-entries-with-different-protocols.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/via/sender-must-not-combine-via-entries-with-different-protocols.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-not-combine-via-entries-with-different-protocols')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('A sender MUST NOT combine members that have different received-protocol values. Combining Via entries is only permitted when the protocol versions are identical, as different protocols need to be separately tracked.')
+    .summary('Sender MUST NOT combine Via entries with different protocols.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=sender-must-not-combine-via-entries-with-different-protocols.rule.js.map

package/dist/rules/routing/message-forwarding/via/sender-must-not-combine-via-entries-with-different-protocols.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-not-combine-via-entries-with-different-protocols.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-must-not-combine-via-entries-with-different-protocols.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,yNAAyN,CAC1N;KACA,OAAO,CAAC,+DAA+D,CAAC;KACxE,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/sender-should-not-combine-via-entries-unless-same-organization.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-should-not-combine-via-entries-unless-same-organization.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/sender-should-not-combine-via-entries-unless-same-organization.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-not-combine-via-entries-unless-same-organization.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-should-not-combine-via-entries-unless-same-organization.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/routing/message-forwarding/via/sender-should-not-combine-via-entries-unless-same-organization.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-should-not-combine-via-entries-unless-same-organization')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('A sender SHOULD NOT combine multiple list members unless they are all under the same organizational control and the hosts have already been replaced by pseudonyms. This ensures transparency about the intermediaries involved in the request/response chain.')
+    .summary('Sender SHOULD NOT combine Via entries unless under same organizational control.')
+    .done();
+//# sourceMappingURL=sender-should-not-combine-via-entries-unless-same-organization.rule.js.map

package/dist/rules/routing/message-forwarding/via/sender-should-not-combine-via-entries-unless-same-organization.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-not-combine-via-entries-unless-same-organization.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/sender-should-not-combine-via-entries-unless-same-organization.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,gQAAgQ,CACjQ;KACA,OAAO,CACN,iFAAiF,CAClF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-transformations/proxy-may-add-domain-to-non-fqdn-hostname.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-may-add-domain-to-non-fqdn-hostname.rule.d.ts.map

package/dist/rules/routing/message-transformations/proxy-may-add-domain-to-non-fqdn-hostname.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-may-add-domain-to-non-fqdn-hostname.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-may-add-domain-to-non-fqdn-hostname.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-transformations/proxy-may-add-domain-to-non-fqdn-hostname.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-may-add-domain-to-non-fqdn-hostname')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-transformations')
+    .description('If a proxy receives a target URI with a host name that is not a fully qualified domain name, it MAY add its own domain to the host name it received when forwarding the request. This can help resolve ambiguous host names.')
+    .summary('Proxy MAY add domain to non-FQDN host name.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-may-add-domain-to-non-fqdn-hostname.rule.js.map

package/dist/rules/routing/message-transformations/proxy-may-add-domain-to-non-fqdn-hostname.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-may-add-domain-to-non-fqdn-hostname.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-may-add-domain-to-non-fqdn-hostname.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,mDAAmD,CAAC;KACzE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,0EAA0E,CAC3E;KACA,WAAW,CACV,8NAA8N,CAC/N;KACA,OAAO,CAAC,6CAA6C,CAAC;KACtD,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-transformations/proxy-may-transform-content-without-no-transform-directive.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-may-transform-content-without-no-transform-directive.rule.d.ts.map

package/dist/rules/routing/message-transformations/proxy-may-transform-content-without-no-transform-directive.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-may-transform-content-without-no-transform-directive.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-may-transform-content-without-no-transform-directive.rule.ts"],"names":[],"mappings":";AAGA,wBA0CU"}

package/dist/rules/routing/message-transformations/proxy-may-transform-content-without-no-transform-directive.rule.js

@@ -0,0 +1,29 @@
+import { getHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-may-transform-content-without-no-transform-directive')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-transformations')
+    .description('A proxy MAY transform the content of a message that does not contain a no-transform cache directive. A proxy that transforms the content of a 200 (OK) response can inform downstream recipients that a transformation has been applied by changing the response status code to 203 (Non-Authoritative Information).')
+    .summary('Proxy MAY transform content without no-transform directive.')
+    .appliesTo('proxy')
+    .rule((ctx) => ctx.validateCapturedHttpTraces((trace, location) => {
+    for (let i = 1; i < trace.length; i++) {
+        const prev = trace[i - 1];
+        const curr = trace[i];
+        if (!prev || !curr) {
+            continue;
+        }
+        const cacheControlHeader = getHeader(prev.request.data.headers, 'cache-control');
+        if (cacheControlHeader &&
+            !cacheControlHeader.includes('no-transform') &&
+            prev.request.data === curr.request.data) {
+            ctx.reportViolation({
+                location,
+            });
+        }
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=proxy-may-transform-content-without-no-transform-directive.rule.js.map

package/dist/rules/routing/message-transformations/proxy-may-transform-content-without-no-transform-directive.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-may-transform-content-without-no-transform-directive.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-may-transform-content-without-no-transform-directive.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,oEAAoE,CACrE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CACF,0EAA0E,CAC3E;KACA,WAAW,CACV,sTAAsT,CACvT;KACA,OAAO,CAAC,6DAA6D,CAAC;KACtE,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,kBAAkB,GAAG,SAAS,CAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EACzB,eAAe,CAChB,CAAC;QAEF,IACE,kBAAkB;YAClB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EACvC,CAAC;YACD,GAAG,CAAC,eAAe,CAAC;gBAClB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-transformations/proxy-must-not-change-fqdn-hostname.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-not-change-fqdn-hostname.rule.d.ts.map

package/dist/rules/routing/message-transformations/proxy-must-not-change-fqdn-hostname.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-change-fqdn-hostname.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-must-not-change-fqdn-hostname.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/message-transformations/proxy-must-not-change-fqdn-hostname.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-must-not-change-fqdn-hostname')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-transformations')
+    .description('A proxy MUST NOT change the host name if the target URI contains a fully qualified domain name. This prevents incorrect routing and ensures the request reaches the intended destination.')
+    .summary('Proxy MUST NOT change host name when it is a fully qualified domain name.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-must-not-change-fqdn-hostname.rule.js.map

package/dist/rules/routing/message-transformations/proxy-must-not-change-fqdn-hostname.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-change-fqdn-hostname.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-must-not-change-fqdn-hostname.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,6CAA6C,CAAC;KACnE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,0EAA0E,CAC3E;KACA,WAAW,CACV,2LAA2L,CAC5L;KACA,OAAO,CACN,2EAA2E,CAC5E;KACA,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-transformations/proxy-must-not-modify-absolute-path-and-query.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-not-modify-absolute-path-and-query.rule.d.ts.map

package/dist/rules/routing/message-transformations/proxy-must-not-modify-absolute-path-and-query.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-modify-absolute-path-and-query.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-must-not-modify-absolute-path-and-query.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-transformations/proxy-must-not-modify-absolute-path-and-query.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-must-not-modify-absolute-path-and-query')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-transformations')
+    .description('A proxy MUST NOT modify the "absolute-path" and "query" parts of the received target URI when forwarding it to the next inbound server except as required by that forwarding protocol. For example, a proxy forwarding a request to an origin server via HTTP/1.1 will replace an empty path with "/" or "*", depending on the request method.')
+    .summary('Proxy MUST NOT modify absolute-path and query parts of target URI.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-must-not-modify-absolute-path-and-query.rule.js.map

package/dist/rules/routing/message-transformations/proxy-must-not-modify-absolute-path-and-query.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-modify-absolute-path-and-query.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-must-not-modify-absolute-path-and-query.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,uDAAuD,CAAC;KAC7E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,0EAA0E,CAC3E;KACA,WAAW,CACV,gVAAgV,CACjV;KACA,OAAO,CAAC,oEAAoE,CAAC;KAC7E,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-transformations/proxy-must-not-transform-content-with-no-transform-directive.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-not-transform-content-with-no-transform-directive.rule.d.ts.map

package/dist/rules/routing/message-transformations/proxy-must-not-transform-content-with-no-transform-directive.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-transform-content-with-no-transform-directive.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-must-not-transform-content-with-no-transform-directive.rule.ts"],"names":[],"mappings":";AAGA,wBAuDU"}

package/dist/rules/routing/message-transformations/proxy-must-not-transform-content-with-no-transform-directive.rule.js

@@ -0,0 +1,36 @@
+import { getHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-must-not-transform-content-with-no-transform-directive')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-transformations')
+    .description('A proxy MUST NOT transform the content of a response message that contains a no-transform cache directive. Note that this does not apply to message transformations that do not change the content, such as the addition or removal of transfer codings.')
+    .summary('Proxy MUST NOT transform content when no-transform directive is present.')
+    .appliesTo('proxy')
+    .rule((ctx) => ctx.validateCapturedHttpTraces((trace, location) => {
+    for (let i = 1; i < trace.length; i++) {
+        // contains response from proxy (if there is a proxy)
+        const prev = trace[i - 1];
+        // contains response to proxy (if there is a proxy)
+        const curr = trace[i];
+        if (!prev || !curr || prev.response.meta.role !== 'proxy') {
+            continue;
+        }
+        const cacheControlHeader = getHeader(curr.response.data.headers, 'cache-control');
+        if (!cacheControlHeader) {
+            continue;
+        }
+        const cacheDirectives = Array.isArray(cacheControlHeader)
+            ? cacheControlHeader
+            : [cacheControlHeader];
+        if (cacheDirectives.some((directive) => directive.toLowerCase().trim() === 'no-transform') &&
+            prev.request.data !== curr.request.data) {
+            ctx.reportViolation({
+                location,
+            });
+        }
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=proxy-must-not-transform-content-with-no-transform-directive.rule.js.map

package/dist/rules/routing/message-transformations/proxy-must-not-transform-content-with-no-transform-directive.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-transform-content-with-no-transform-directive.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-must-not-transform-content-with-no-transform-directive.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CACF,0EAA0E,CAC3E;KACA,WAAW,CACV,0PAA0P,CAC3P;KACA,OAAO,CACN,0EAA0E,CAC3E;KACA,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,qDAAqD;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,mDAAmD;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,MAAM,kBAAkB,GAAG,SAAS,CAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAC1B,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACvD,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAEzB,IACE,eAAe,CAAC,IAAI,CAClB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,cAAc,CACjE;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EACvC,CAAC;YACD,GAAG,CAAC,eAAe,CAAC;gBAClB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-transformations/proxy-should-not-modify-endpoint-and-representation-headers.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-should-not-modify-endpoint-and-representation-headers.rule.d.ts.map

package/dist/rules/routing/message-transformations/proxy-should-not-modify-endpoint-and-representation-headers.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-should-not-modify-endpoint-and-representation-headers.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-should-not-modify-endpoint-and-representation-headers.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/message-transformations/proxy-should-not-modify-endpoint-and-representation-headers.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-should-not-modify-endpoint-and-representation-headers')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-transformations')
+    .description("A proxy SHOULD NOT modify header fields that provide information about the endpoints of the communication chain, the resource state, or the selected representation (other than the content) unless the field's definition specifically allows such modification or the modification is deemed necessary for privacy or security.")
+    .summary('Proxy SHOULD NOT modify endpoint and representation headers.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-should-not-modify-endpoint-and-representation-headers.rule.js.map

package/dist/rules/routing/message-transformations/proxy-should-not-modify-endpoint-and-representation-headers.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-should-not-modify-endpoint-and-representation-headers.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-transformations/proxy-should-not-modify-endpoint-and-representation-headers.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,0EAA0E,CAC3E;KACA,WAAW,CACV,mUAAmU,CACpU;KACA,OAAO,CAAC,8DAA8D,CAAC;KACvE,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/origin-server-must-reject-https-requests-without-valid-certificate.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-reject-https-requests-without-valid-certificate.rule.d.ts.map

package/dist/rules/routing/origin-server-must-reject-https-requests-without-valid-certificate.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-reject-https-requests-without-valid-certificate.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/routing/origin-server-must-reject-https-requests-without-valid-certificate.rule.ts"],"names":[],"mappings":";AAEA,wBAeU"}

package/dist/rules/routing/origin-server-must-reject-https-requests-without-valid-certificate.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-reject-https-requests-without-valid-certificate')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-rejecting-misdirected-reque')
+    .description('Unless the connection is from a trusted gateway, an origin server MUST reject a request for an "https" resource unless it has been received over a connection that has been secured via a certificate valid for that target URI\'s origin, as defined by Section 4.2.2.')
+    .summary('Origin server MUST reject HTTPS requests not received over properly secured connections.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-must-reject-https-requests-without-valid-certificate.rule.js.map

package/dist/rules/routing/origin-server-must-reject-https-requests-without-valid-certificate.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-reject-https-requests-without-valid-certificate.rule.js","sourceRoot":"","sources":["../../../src/rules/routing/origin-server-must-reject-https-requests-without-valid-certificate.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4EAA4E,CAC7E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,8EAA8E,CAC/E;KACA,WAAW,CACV,yQAAyQ,CAC1Q;KACA,OAAO,CACN,0FAA0F,CAC3F;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/routing/origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.d.ts.map

package/dist/rules/routing/origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/routing/origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.ts"],"names":[],"mappings":";AAEA,wBAeU"}

package/dist/rules/routing/origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-reject-requests-not-meeting-scheme-requirements')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-rejecting-misdirected-reque')
+    .description('Unless the connection is from a trusted gateway, an origin server MUST reject a request if any scheme-specific requirements for the target URI are not met. This is important for security to prevent misdirected requests, bypass attempts, or content delivery to unintended recipients.')
+    .summary('Origin server MUST reject requests that do not meet scheme-specific requirements.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.js.map

package/dist/rules/routing/origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.js","sourceRoot":"","sources":["../../../src/rules/routing/origin-server-must-reject-requests-not-meeting-scheme-requirements.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4EAA4E,CAC7E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,8EAA8E,CAC/E;KACA,WAAW,CACV,4RAA4R,CAC7R;KACA,OAAO,CACN,mFAAmF,CACpF;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/client-may-send-upgrade-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-may-send-upgrade-header.rule.d.ts.map

package/dist/rules/routing/upgrade/client-may-send-upgrade-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-may-send-upgrade-header.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/client-may-send-upgrade-header.rule.ts"],"names":[],"mappings":";AAGA,wBAUU"}

package/dist/rules/routing/upgrade/client-may-send-upgrade-header.rule.js

@@ -0,0 +1,12 @@
+import { not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-may-send-upgrade-header')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('A client MAY send a list of protocol names in the Upgrade header field of a request to invite the server to switch to one or more of the named protocols, in order of descending preference, before sending the final response.')
+    .summary('Client MAY send Upgrade header to invite protocol switch.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateHttpTransactions(not(requestHeader('upgrade'))))
+    .done();
+//# sourceMappingURL=client-may-send-upgrade-header.rule.js.map

package/dist/rules/routing/upgrade/client-may-send-upgrade-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-may-send-upgrade-header.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/client-may-send-upgrade-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,wCAAwC,CAAC;KAC9D,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,iOAAiO,CAClO;KACA,OAAO,CAAC,2DAA2D,CAAC;KACpE,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KAC1E,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.d.ts.map

package/dist/rules/routing/upgrade/recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/routing/upgrade/recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/recipient-should-use-case-insensitive-comparison-for-protocol-names')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-upgrade')
+    .description('Although protocol names are registered with a preferred case, recipients SHOULD use case-insensitive comparison when matching each protocol-name to supported protocols. This ensures compatibility despite variations in protocol name casing.')
+    .summary('Recipient SHOULD use case-insensitive comparison for protocol names.')
+    .done();
+//# sourceMappingURL=recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.js.map

package/dist/rules/routing/upgrade/recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/recipient-should-use-case-insensitive-comparison-for-protocol-names.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6EAA6E,CAC9E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,iPAAiP,CAClP;KACA,OAAO,CACN,sEAAsE,CACvE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/upgrade/sender-must-send-upgrade-connection-option.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-send-upgrade-connection-option.rule.d.ts.map

package/dist/rules/routing/upgrade/sender-must-send-upgrade-connection-option.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-send-upgrade-connection-option.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/upgrade/sender-must-send-upgrade-connection-option.rule.ts"],"names":[],"mappings":";AAGA,wBAyBU"}