blackveil-dns 2.1.0 → 2.2.2

package/dist/index.d.ts

@@ -160,7 +160,40 @@ declare function sanitizeDomain(input: string): string;
 declare function sanitizeInput(input: string, maxLength?: number): string;
 
 /** Server version — keep in sync with package.json */
-declare const SERVER_VERSION = "2.1.0";
+declare const SERVER_VERSION = "2.2.2";
+
+/**
+ * Map of every tool name to its Zod argument schema.
+ * Used for runtime validation in tools.ts and for inputSchema generation.
+ */
+declare const TOOL_SCHEMA_MAP: Record<string, z.ZodTypeAny>;
+
+type ToolGroup = 'email_auth' | 'infrastructure' | 'brand_threats' | 'dns_hygiene' | 'intelligence' | 'remediation' | 'meta';
+type ToolTier = 'core' | 'protective' | 'hardening';
+interface McpTool {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: Record<string, unknown>;
+        required?: string[];
+        [key: string]: unknown;
+    };
+    annotations?: {
+        title?: string;
+        readOnlyHint?: boolean;
+        destructiveHint?: boolean;
+        idempotentHint?: boolean;
+        openWorldHint?: boolean;
+    };
+    /** Functional group for client-side tool discoverability. Not used in dispatch. */
+    group: ToolGroup;
+    /** Scoring tier from the three-tier model. Absent for non-scoring tools (meta/intelligence/remediation). */
+    tier?: ToolTier;
+    /** True when this tool is included in the scan_domain parallel orchestration. */
+    scanIncluded: boolean;
+}
+declare const TOOLS: McpTool[];
 
 /**
  * Check BIMI records for a domain.
@@ -192,6 +225,7 @@ declare function checkDmarc(domain: string, dnsOptions?: QueryDnsOptions): Promi
  * Check DNSSEC configuration for a domain.
  * Verifies the AD (Authenticated Data) flag, checks for DNSKEY/DS records,
  * and audits algorithm and digest type security.
+ * Augments results with dnssecSource metadata: 'domain_configured' or 'tld_inherited'.
  */
 declare function checkDnssec(domain: string, dnsOptions?: QueryDnsOptions): Promise<CheckResult>;
 
@@ -365,6 +399,14 @@ interface StructuredScanResult {
         penalty: number;
         narrative: string;
     }>;
+    /** Execution status per check category. 'completed' = ran normally, 'timeout' = per-check timeout, 'error' = threw. */
+    checkStatuses: Record<string, 'completed' | 'timeout' | 'error'>;
+    /** DNSSEC configuration source. 'domain_configured' = domain has own DNSKEY/DS; 'tld_inherited' = inherited from TLD registry. null = not yet available. */
+    dnssecSource: 'domain_configured' | 'tld_inherited' | null;
+    /** CDN provider detected from HTTP response headers. null when no CDN detected or check did not run. */
+    cdnProvider: string | null;
+    /** Email categories that scored 100 due to web-only/non-mail profile (no MX). Downstream consumers should treat these as N/A rather than perfect. */
+    notApplicableCategories: string[];
     timestamp: string;
     cached: boolean;
 }
@@ -410,4 +452,4 @@ interface ScanDomainResult {
  */
 declare function scanDomain(domain: string, kv?: KVNamespace, runtimeOptions?: ScanRuntimeOptions): Promise<ScanDomainResult>;
 
-export { type CaaRecord, type CheckMxOptions, type DnsAnswer, type DnsAuthority, DnsQueryError, type DohResponse, type ExplanationResult, type MaturityStage, type QueryDnsOptions, RecordType, type RecordTypeName, SERVER_VERSION, type ScanDomainResult, type ScanRuntimeOptions, type StructuredScanResult, buildStructuredScanResult, checkBimi, checkCaa, checkDkim, checkDmarc, checkDnssec, checkLookalikes, checkMtaSts, checkMx, checkNs, checkSpf, checkSsl, checkSubdomainTakeover, checkTlsrpt, explainFinding, formatExplanation, formatScanReport, parseCaaRecord, queryCaaRecords, queryDns, queryDnsRecords, queryMxRecords, queryTxtRecords, resolveImpactNarrative, sanitizeDomain, sanitizeInput, scanDomain, validateDomain };
+export { type CaaRecord, type CheckMxOptions, type DnsAnswer, type DnsAuthority, DnsQueryError, type DohResponse, type ExplanationResult, type MaturityStage, type McpTool, type QueryDnsOptions, RecordType, type RecordTypeName, SERVER_VERSION, type ScanDomainResult, type ScanRuntimeOptions, type StructuredScanResult, TOOLS, TOOL_SCHEMA_MAP, type ToolGroup, type ToolTier, buildStructuredScanResult, checkBimi, checkCaa, checkDkim, checkDmarc, checkDnssec, checkLookalikes, checkMtaSts, checkMx, checkNs, checkSpf, checkSsl, checkSubdomainTakeover, checkTlsrpt, explainFinding, formatExplanation, formatScanReport, parseCaaRecord, queryCaaRecords, queryDns, queryDnsRecords, queryMxRecords, queryTxtRecords, resolveImpactNarrative, sanitizeDomain, sanitizeInput, scanDomain, validateDomain };