checkly 8.14.1 → 8.15.0-prerelease-cdf176f

package/dist/constructs/ssl-assertion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-assertion.js","sourceRoot":"","sources":["../../src/constructs/ssl-assertion.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAEjF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAIV;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,YAAY;IACxB,aAAa,EAAE,eAAe;IAC9B,aAAa,EAAE,eAAe;IAC9B,aAAa,EAAE,eAAe;IAC9B,MAAM;IACN,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,QAAQ;IACR,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,QAAQ;IACR,OAAO,EAAE,SAAS;CACV,CAAA;AAIV;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU;IACV,sBAAsB,EAAE,wBAAwB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,4BAA4B,EAAE,8BAA8B;IAC5D,8CAA8C;IAC9C,qCAAqC,EAAE,uCAAuC;IAC9E,qCAAqC,EAAE,uCAAuC;IAC9E,uCAAuC,EAAE,yCAAyC;IAClF,uCAAuC,EAAE,yCAAyC;IAClF,2CAA2C,EAAE,6CAA6C;IAC1F,6CAA6C,EAAE,+CAA+C;IAC9F,6BAA6B;IAC7B,+BAA+B,EAAE,iCAAiC;IAClE,+BAA+B,EAAE,iCAAiC;IAClE,+BAA+B,EAAE,iCAAiC;IAClE,+BAA+B,EAAE,iCAAiC;IAClE,4BAA4B,EAAE,8BAA8B;IAC5D,4BAA4B,EAAE,8BAA8B;CACpD,CAAA;AAoBV,gFAAgF;AAChF,oFAAoF;AACpF,mFAAmF;AACnF,oFAAoF;AAEpF,oDAAoD;AACpD,MAAM,iCAAiC;IACrC,MAAM,CAAE,MAAc;QACpB,OAAO,WAAW,CAAC,sBAAsB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC9D,CAAC;IAED,SAAS,CAAE,MAAc;QACvB,OAAO,WAAW,CAAC,sBAAsB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAClE,CAAC;IAED,QAAQ,CAAE,MAAc;QACtB,OAAO,WAAW,CAAC,sBAAsB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;IACjE,CAAC;IAED,WAAW,CAAE,MAAc;QACzB,OAAO,WAAW,CAAC,sBAAsB,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;IACpE,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,2BAA2B;IAC/B,MAAM,CAAE,MAAc;QACpB,OAAO,WAAW,CAAC,eAAe,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvD,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,8BAA8B;IAClC,MAAM,CAAE,MAAe;QACrB,OAAO,WAAW,CAAC,kBAAkB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1D,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,gCAAgC;IACpC,MAAM,CAAE,MAAe;QACrB,OAAO,WAAW,CAAC,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,4BAA4B;IAChC,MAAM,CAAE,MAAe;QACrB,OAAO,WAAW,CAAC,eAAe,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvD,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,2BAA2B;IAC/B,MAAM,CAAE,MAAe;QACrB,OAAO,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACtD,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,0BAA0B;IAC9B,MAAM,CAAE,MAAuB;QAC7B,OAAO,WAAW,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACrD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,kCAAkC;IACtC,MAAM,CAAE,MAA+B;QACrC,OAAO,WAAW,CAAC,qBAAqB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,CAAE,MAAc;QACrB,OAAO,WAAW,CAAC,qBAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAC9D,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,2BAA2B;IAC/B,MAAM,CAAE,MAAc;QACpB,OAAO,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACtD,CAAC;IAED,SAAS,CAAE,MAAc;QACvB,OAAO,WAAW,CAAC,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAC1D,CAAC;IAED,OAAO,CAAE,MAAc;QACrB,OAAO,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACvD,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,wBAAwB;IAC5B,MAAM,CAAE,MAAc;QACpB,OAAO,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACnD,CAAC;IAED,SAAS,CAAE,MAAc;QACvB,OAAO,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IACvD,CAAC;IAED,OAAO,CAAE,MAAc;QACrB,OAAO,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACpD,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,qCAAqC;IACzC,MAAM,CAAE,MAAc;QACpB,OAAO,WAAW,CAAC,yBAAyB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACjE,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,uCAAuC;IAC3C,MAAM,CAAE,MAAc;QACpB,OAAO,WAAW,CAAC,2BAA2B,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACnE,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,mBAAmB;IAC9B,8EAA8E;IAC9E,MAAM,CAAC,iBAAiB;QACtB,OAAO,IAAI,iCAAiC,EAAE,CAAA;IAChD,CAAC;IAED,8DAA8D;IAC9D,MAAM,CAAC,WAAW;QAChB,OAAO,IAAI,2BAA2B,EAAE,CAAA;IAC1C,CAAC;IAED,oEAAoE;IACpE,MAAM,CAAC,cAAc;QACnB,OAAO,IAAI,8BAA8B,EAAE,CAAA;IAC7C,CAAC;IAED,8DAA8D;IAC9D,MAAM,CAAC,gBAAgB;QACrB,OAAO,IAAI,gCAAgC,EAAE,CAAA;IAC/C,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,YAAY;QACjB,OAAO,IAAI,4BAA4B,EAAE,CAAA;IAC3C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,0BAA0B,EAAE,CAAA;IACzC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAW;QAChB,OAAO,IAAI,2BAA2B,EAAE,CAAA;IAC1C,CAAC;IAED,gEAAgE;IAChE,MAAM,CAAC,QAAQ;QACb,OAAO,IAAI,wBAAwB,EAAE,CAAA;IACvC,CAAC;IAED,iEAAiE;IACjE,MAAM,CAAC,qBAAqB;QAC1B,OAAO,IAAI,qCAAqC,EAAE,CAAA;IACpD,CAAC;IAED,4DAA4D;IAC5D,MAAM,CAAC,uBAAuB;QAC5B,OAAO,IAAI,uCAAuC,EAAE,CAAA;IACtD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,kBAAkB;QACvB,OAAO,IAAI,kCAAkC,EAAE,CAAA;IACjD,CAAC;IAED,0EAA0E;IAC1E,MAAM,CAAC,WAAW;QAChB,OAAO,IAAI,2BAA2B,EAAE,CAAA;IAC1C,CAAC;CACF"}

package/dist/constructs/ssl-monitor-codegen.d.ts

@@ -0,0 +1,36 @@
+import { Codegen, Context } from './internal/codegen/index.js';
+import { MonitorResource } from './monitor-codegen.js';
+import { SslAssertion } from './ssl-assertion.js';
+import { IPFamily } from './ip.js';
+import { SecurityBaseline, SslClientCertificateMode } from './ssl-request.js';
+/**
+ * Wire-format shape of the SSL request as returned by the Checkly API.
+ * hostname/port/ipFamily live inside sslConfig on the wire; the construct
+ * exposes them at different levels. degradedResponseTime/maxResponseTime
+ * live at the resource top level, not inside sslConfig.
+ */
+export interface SslMonitorWireRequest {
+    sslConfig: {
+        hostname: string;
+        port?: number;
+        ipFamily?: IPFamily;
+        serverName?: string;
+        skipChainValidation?: boolean;
+        handshakeTimeoutMs?: number;
+        alertDaysBeforeExpiry?: number;
+        clientCertificateMode?: SslClientCertificateMode;
+        securityBaseline?: SecurityBaseline;
+    };
+    sslClientCertificateId?: string;
+    assertions?: Array<SslAssertion>;
+}
+export interface SslMonitorResource extends MonitorResource {
+    checkType: 'SSL';
+    request: SslMonitorWireRequest;
+    degradedResponseTime?: number;
+    maxResponseTime?: number;
+}
+export declare class SslMonitorCodegen extends Codegen<SslMonitorResource> {
+    describe(resource: SslMonitorResource): string;
+    gencode(logicalId: string, resource: SslMonitorResource, context: Context): void;
+}

package/dist/constructs/ssl-monitor-codegen.js

@@ -0,0 +1,51 @@
+import { Codegen } from './internal/codegen/index.js';
+import { expr, ident } from '../sourcegen/index.js';
+import { buildMonitorProps } from './monitor-codegen.js';
+import { valueForSslRequest } from './ssl-request-codegen.js';
+const construct = 'SslMonitor';
+export class SslMonitorCodegen extends Codegen {
+    describe(resource) {
+        return `SSL Monitor: ${resource.name}`;
+    }
+    gencode(logicalId, resource, context) {
+        const filePath = context.filePath('resources/ssl-monitors', resource.name, {
+            tags: resource.tags,
+            unique: true,
+        });
+        const file = this.program.generatedConstructFile(filePath.fullPath);
+        file.namedImport(construct, 'checkly/constructs');
+        // Map wire format to new construct shape
+        const wireReq = resource.request;
+        const constructRequest = {
+            hostname: wireReq.sslConfig.hostname,
+            port: wireReq.sslConfig.port,
+            ipFamily: wireReq.sslConfig.ipFamily,
+            sslConfig: {
+                serverName: wireReq.sslConfig.serverName,
+                sslClientCertificateId: wireReq.sslClientCertificateId,
+                skipChainValidation: wireReq.sslConfig.skipChainValidation,
+                handshakeTimeout: wireReq.sslConfig.handshakeTimeoutMs,
+                alertDaysBeforeExpiry: wireReq.sslConfig.alertDaysBeforeExpiry,
+                clientCertificateMode: wireReq.sslConfig.clientCertificateMode,
+                securityBaseline: wireReq.sslConfig.securityBaseline,
+            },
+            assertions: wireReq.assertions,
+        };
+        file.section(expr(ident(construct), builder => {
+            builder.new(builder => {
+                builder.string(logicalId);
+                builder.object(builder => {
+                    if (resource.degradedResponseTime !== undefined) {
+                        builder.number('degradedResponseTime', resource.degradedResponseTime);
+                    }
+                    if (resource.maxResponseTime !== undefined) {
+                        builder.number('maxResponseTime', resource.maxResponseTime);
+                    }
+                    buildMonitorProps(this.program, file, builder, resource, context);
+                    builder.value('request', valueForSslRequest(this.program, file, context, constructRequest));
+                });
+            });
+        }));
+    }
+}
+//# sourceMappingURL=ssl-monitor-codegen.js.map

package/dist/constructs/ssl-monitor-codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-monitor-codegen.js","sourceRoot":"","sources":["../../src/constructs/ssl-monitor-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAW,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAmB,MAAM,sBAAsB,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAmC7D,MAAM,SAAS,GAAG,YAAY,CAAA;AAE9B,MAAM,OAAO,iBAAkB,SAAQ,OAA2B;IAChE,QAAQ,CAAE,QAA4B;QACpC,OAAO,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxC,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAA4B,EAAE,OAAgB;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE,QAAQ,CAAC,IAAI,EAAE;YACzE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,yCAAyC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;QAChC,MAAM,gBAAgB,GAAe;YACnC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;YACpC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;YAC5B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;YACpC,SAAS,EAAE;gBACT,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;gBACxC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;gBACtD,mBAAmB,EAAE,OAAO,CAAC,SAAS,CAAC,mBAAmB;gBAC1D,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,kBAAkB;gBACtD,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC,qBAAqB;gBAC9D,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC,qBAAqB;gBAC9D,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,gBAAgB;aACrD;YACD,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAA;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;wBAChD,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA;oBACvE,CAAC;oBAED,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;wBAC3C,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;oBAC7D,CAAC;oBAED,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;oBAEjE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAA;gBAC7F,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}

package/dist/constructs/ssl-monitor.d.ts

@@ -0,0 +1,89 @@
+import { Monitor, MonitorProps } from './monitor.js';
+import { Diagnostics } from './diagnostics.js';
+import { SslRequest } from './ssl-request.js';
+export interface SslMonitorProps extends MonitorProps {
+    /**
+     * Determines the request that the monitor is going to run.
+     */
+    request: SslRequest;
+    /**
+     * The handshake time in milliseconds above which the monitor is considered
+     * degraded.
+     *
+     * @minimum 0
+     * @maximum 30000
+     * @defaultValue 3000
+     */
+    degradedResponseTime?: number;
+    /**
+     * The handshake time in milliseconds above which the monitor is considered
+     * failing. Must be greater than or equal to `degradedResponseTime`.
+     *
+     * @minimum 0
+     * @maximum 30000
+     * @defaultValue 10000
+     */
+    maxResponseTime?: number;
+}
+/**
+ * Creates an SSL Monitor
+ */
+export declare class SslMonitor extends Monitor {
+    request: SslRequest;
+    degradedResponseTime?: number;
+    maxResponseTime?: number;
+    /**
+     * Constructs the SSL Monitor instance
+     *
+     * @param logicalId unique project-scoped resource name identification
+     * @param props configuration properties
+     *
+     * {@link https://www.checklyhq.com/docs/constructs/ssl-monitor/ Read more in the docs}
+     */
+    constructor(logicalId: string, props: SslMonitorProps);
+    describe(): string;
+    validate(diagnostics: Diagnostics): Promise<void>;
+    synthesize(): {
+        checkType: string;
+        request: {
+            sslConfig: {
+                hostname: string;
+                port: number | undefined;
+                ipFamily: import("./ip.js").IPFamily | undefined;
+                serverName: string | undefined;
+                skipChainValidation: boolean | undefined;
+                handshakeTimeoutMs: number | undefined;
+                alertDaysBeforeExpiry: number | undefined;
+                clientCertificateMode: import("./ssl-request.js").SslClientCertificateMode | undefined;
+                securityBaseline: import("./ssl-request.js").SecurityBaseline | undefined;
+            };
+            sslClientCertificateId: string | undefined;
+            assertions: import("./ssl-assertion.js").SslAssertion[] | undefined;
+        };
+        degradedResponseTime: number | undefined;
+        maxResponseTime: number | undefined;
+        doubleCheck: boolean;
+        activated: boolean | undefined;
+        muted: boolean | undefined;
+        shouldFail: boolean | undefined;
+        locations: (keyof import("../index.js").Region)[] | undefined;
+        privateLocations: undefined;
+        tags: string[] | undefined;
+        frequency: number | undefined;
+        frequencyOffset: number | undefined;
+        groupId: import("./ref.js").Ref | null;
+        retryStrategy: import("./retry-strategy.js").LinearRetryStrategy | import("./retry-strategy.js").ExponentialRetryStrategy | import("./retry-strategy.js").FixedRetryStrategy | import("./retry-strategy.js").SingleRetryRetryStrategy | null | undefined;
+        alertSettings: import("./alert-escalation-policy.js").AlertEscalation | undefined;
+        useGlobalAlertSettings: boolean | undefined;
+        runParallel: boolean | undefined;
+        triggerIncident: {
+            serviceId: import("./ref.js").Ref;
+            severity: "MINOR" | "MEDIUM" | "MAJOR" | "CRITICAL";
+            name: string;
+            description: string;
+            notifySubscribers: boolean;
+        } | undefined;
+        description?: string | undefined;
+        name: string;
+    };
+}

package/dist/constructs/ssl-monitor.js

@@ -0,0 +1,73 @@
+import { Monitor } from './monitor.js';
+import { Session } from './session.js';
+import { validateResponseTimes } from './internal/common-diagnostics.js';
+import { validateSslAssertion } from './ssl-assertion-validation.js';
+import { RequiredPropertyDiagnostic } from './construct-diagnostics.js';
+/**
+ * Creates an SSL Monitor
+ */
+export class SslMonitor extends Monitor {
+    request;
+    degradedResponseTime;
+    maxResponseTime;
+    /**
+     * Constructs the SSL Monitor instance
+     *
+     * @param logicalId unique project-scoped resource name identification
+     * @param props configuration properties
+     *
+     * {@link https://www.checklyhq.com/docs/constructs/ssl-monitor/ Read more in the docs}
+     */
+    constructor(logicalId, props) {
+        super(logicalId, props);
+        this.request = props.request;
+        this.degradedResponseTime = props.degradedResponseTime;
+        this.maxResponseTime = props.maxResponseTime;
+        Session.registerConstruct(this);
+        this.addSubscriptions();
+        this.addPrivateLocationCheckAssignments();
+    }
+    describe() {
+        return `SslMonitor:${this.logicalId}`;
+    }
+    async validate(diagnostics) {
+        await super.validate(diagnostics);
+        const config = this.request.sslConfig;
+        if (config?.sslClientCertificateId === undefined && config?.clientCertificateMode === 'explicit') {
+            diagnostics.add(new RequiredPropertyDiagnostic('sslClientCertificateId', new Error(`A value for "sslClientCertificateId" is required when "clientCertificateMode" is "explicit".`)));
+        }
+        await validateResponseTimes(diagnostics, this, {
+            degradedResponseTime: 30_000,
+            maxResponseTime: 30_000,
+            // Backend default applied when maxResponseTime is omitted.
+            defaultMaxResponseTime: 10_000,
+        });
+        for (const [index, assertion] of (this.request.assertions ?? []).entries()) {
+            validateSslAssertion(diagnostics, assertion, index);
+        }
+    }
+    synthesize() {
+        return {
+            ...super.synthesize(),
+            checkType: 'SSL',
+            request: {
+                sslConfig: {
+                    hostname: this.request.hostname,
+                    port: this.request.port,
+                    ipFamily: this.request.ipFamily,
+                    serverName: this.request.sslConfig.serverName,
+                    skipChainValidation: this.request.sslConfig.skipChainValidation,
+                    handshakeTimeoutMs: this.request.sslConfig.handshakeTimeout,
+                    alertDaysBeforeExpiry: this.request.sslConfig.alertDaysBeforeExpiry,
+                    clientCertificateMode: this.request.sslConfig.clientCertificateMode,
+                    securityBaseline: this.request.sslConfig.securityBaseline,
+                },
+                sslClientCertificateId: this.request.sslConfig.sslClientCertificateId,
+                assertions: this.request.assertions,
+            },
+            degradedResponseTime: this.degradedResponseTime,
+            maxResponseTime: this.maxResponseTime,
+        };
+    }
+}
+//# sourceMappingURL=ssl-monitor.js.map

package/dist/constructs/ssl-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-monitor.js","sourceRoot":"","sources":["../../src/constructs/ssl-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAgB,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AA6BvE;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,OAAO;IACrC,OAAO,CAAY;IACnB,oBAAoB,CAAS;IAC7B,eAAe,CAAS;IAExB;;;;;;;OAOG;IAEH,YAAa,SAAiB,EAAE,KAAsB;QACpD,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAEvB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAA;QACtD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;QAE5C,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACvB,IAAI,CAAC,kCAAkC,EAAE,CAAA;IAC3C,CAAC;IAED,QAAQ;QACN,OAAO,cAAc,IAAI,CAAC,SAAS,EAAE,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,WAAwB;QACtC,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAA;QAErC,IAAI,MAAM,EAAE,sBAAsB,KAAK,SAAS,IAAI,MAAM,EAAE,qBAAqB,KAAK,UAAU,EAAE,CAAC;YACjG,WAAW,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAC5C,wBAAwB,EACxB,IAAI,KAAK,CACP,8FAA8F,CAC/F,CACF,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE;YAC7C,oBAAoB,EAAE,MAAM;YAC5B,eAAe,EAAE,MAAM;YACvB,2DAA2D;YAC3D,sBAAsB,EAAE,MAAM;SAC/B,CAAC,CAAA;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3E,oBAAoB,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,UAAU;QACR,OAAO;YACL,GAAG,KAAK,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE;gBACP,SAAS,EAAE;oBACT,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;oBAC/B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;oBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;oBAC/B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU;oBAC7C,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB;oBAC/D,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB;oBAC3D,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB;oBACnE,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB;oBACnE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB;iBAC1D;gBACD,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,sBAAsB;gBACrE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;aACpC;YACD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAA;IACH,CAAC;CACF"}

package/dist/constructs/ssl-request-codegen.d.ts

@@ -0,0 +1,4 @@
+import { GeneratedFile, Program, Value } from '../sourcegen/index.js';
+import { SslRequest } from './ssl-request.js';
+import { Context } from './internal/codegen/index.js';
+export declare function valueForSslRequest(program: Program, genfile: GeneratedFile, context: Context, request: SslRequest): Value;

package/dist/constructs/ssl-request-codegen.js

@@ -0,0 +1,48 @@
+import { object, unknown } from '../sourcegen/index.js';
+import { valueForSslAssertion } from './ssl-assertion-codegen.js';
+export function valueForSslRequest(program, genfile, context, request) {
+    return object(builder => {
+        builder.string('hostname', request.hostname);
+        if (request.port !== undefined && request.port !== 443) {
+            builder.number('port', request.port);
+        }
+        if (request.ipFamily && request.ipFamily !== 'IPv4') {
+            builder.string('ipFamily', request.ipFamily);
+        }
+        const config = request.sslConfig;
+        builder.object('sslConfig', builder => {
+            if (config.serverName) {
+                builder.string('serverName', config.serverName);
+            }
+            if (config.sslClientCertificateId) {
+                builder.string('sslClientCertificateId', config.sslClientCertificateId);
+            }
+            if (config.skipChainValidation) {
+                builder.boolean('skipChainValidation', config.skipChainValidation);
+            }
+            if (config.handshakeTimeout !== undefined) {
+                builder.number('handshakeTimeout', config.handshakeTimeout);
+            }
+            if (config.alertDaysBeforeExpiry !== undefined) {
+                builder.number('alertDaysBeforeExpiry', config.alertDaysBeforeExpiry);
+            }
+            if (config.clientCertificateMode) {
+                builder.string('clientCertificateMode', config.clientCertificateMode);
+            }
+            if (config.securityBaseline) {
+                builder.value('securityBaseline', unknown(config.securityBaseline));
+            }
+        });
+        if (request.assertions) {
+            const assertions = request.assertions;
+            if (assertions.length > 0) {
+                builder.array('assertions', builder => {
+                    for (const assertion of assertions) {
+                        builder.value(valueForSslAssertion(genfile, assertion));
+                    }
+                });
+            }
+        }
+    });
+}
+//# sourceMappingURL=ssl-request-codegen.js.map

package/dist/constructs/ssl-request-codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-request-codegen.js","sourceRoot":"","sources":["../../src/constructs/ssl-request-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAW,OAAO,EAAS,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAIjE,MAAM,UAAU,kBAAkB,CAChC,OAAgB,EAChB,OAAsB,EACtB,OAAgB,EAChB,OAAmB;IAEnB,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE;QACtB,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAE5C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QACtC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpD,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAA;QAChC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE;YACpC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;YACjD,CAAC;YAED,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAClC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAA;YACzE,CAAC;YAED,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAA;YACpE,CAAC;YAED,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;YAC7D,CAAC;YAED,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACvE,CAAC;YAED,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACvE,CAAC;YAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;YACrE,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;YACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE;oBACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;wBACnC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;oBACzD,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/constructs/ssl-request.d.ts

@@ -0,0 +1,143 @@
+import { SslAssertion } from './ssl-assertion.js';
+import { IPFamily } from './ip.js';
+/**
+ * The severity applied to an SSL security-baseline rule.
+ *
+ * - `fail` marks the monitor as failing when the rule is violated.
+ * - `degrade` marks the monitor as degraded when the rule is violated.
+ * - `ignore` disables the rule.
+ */
+export type SslBaselineSeverity = 'fail' | 'degrade' | 'ignore';
+/**
+ * A baseline rule whose value is a TLS version string (e.g. `TLS1.2`/`TLS1.3`).
+ */
+export interface SslBaselineTlsRule {
+    value?: string;
+    severity?: SslBaselineSeverity;
+}
+/**
+ * A baseline rule whose value is a key size in bits.
+ */
+export interface SslBaselineKeySizeRule {
+    value?: number;
+    severity?: SslBaselineSeverity;
+}
+/**
+ * A baseline rule that only carries a severity.
+ */
+export interface SslBaselineSeverityRule {
+    severity?: SslBaselineSeverity;
+}
+/**
+ * The SSL security baseline — a set of enforceable and advisory rules. Provide
+ * one only to override the server-side default baseline; omit it to inherit the
+ * account default.
+ */
+export interface SecurityBaseline {
+    /**
+     * Whether the security baseline is enforced. The server defaults this to
+     * `true` when omitted.
+     */
+    enabled?: boolean;
+    minTLSVersion?: SslBaselineTlsRule;
+    minKeySizeBits?: SslBaselineKeySizeRule;
+    weakSignatureAlgorithm?: SslBaselineSeverityRule;
+    weakCipherSuite?: SslBaselineSeverityRule;
+    knownBadCA?: SslBaselineSeverityRule;
+    recommendedTLSVersion?: SslBaselineTlsRule;
+    recommendedKeySizeBits?: SslBaselineKeySizeRule;
+    ocspMustStapleRespected?: SslBaselineSeverityRule;
+    sctPresent?: SslBaselineSeverityRule;
+}
+/**
+ * The mutual-TLS client-certificate mode.
+ *
+ * - `auto` lets Checkly select a stored certificate.
+ * - `explicit` uses the certificate referenced by `sslClientCertificateId`.
+ *
+ * Omit to inherit the account default (no certificate sent).
+ */
+export type SslClientCertificateMode = 'auto' | 'explicit';
+/**
+ * SSL-specific configuration nested inside an SSL monitor's request.
+ */
+export interface SslConfig {
+    /**
+     * An optional SNI server name to send in the TLS handshake. Defaults to
+     * `hostname` when unset.
+     */
+    serverName?: string;
+    /**
+     * The ID of the stored client certificate to present. Required when
+     * `clientCertificateMode` is `explicit`.
+     */
+    sslClientCertificateId?: string;
+    /**
+     * When true, the certificate chain is not validated against trusted roots
+     * (the certificate is still inspected for expiry and the security baseline).
+     *
+     * @defaultValue false
+     */
+    skipChainValidation?: boolean;
+    /**
+     * The number of milliseconds to wait for the TLS handshake to complete before
+     * timing out.
+     *
+     * @minimum 1000
+     * @maximum 30000
+     * @defaultValue 10000
+     */
+    handshakeTimeout?: number;
+    /**
+     * Raise an alert when the certificate is within this many days of expiry.
+     *
+     * @minimum 1
+     * @maximum 365
+     * @defaultValue 20
+     */
+    alertDaysBeforeExpiry?: number;
+    /**
+     * The mutual-TLS client-certificate mode. Omit to inherit the account default
+     * (no certificate sent).
+     */
+    clientCertificateMode?: SslClientCertificateMode;
+    /**
+     * The SSL security baseline. Omit to inherit the account default baseline.
+     */
+    securityBaseline?: SecurityBaseline;
+}
+/**
+ * Configuration for SSL requests.
+ * Defines the connection parameters and validation rules.
+ */
+export interface SslRequest {
+    /**
+     * The hostname to connect to and validate the TLS certificate of. Do not
+     * include a scheme or a port in this value.
+     *
+     * @example "example.com"
+     */
+    hostname: string;
+    /**
+     * The port number to connect to.
+     *
+     * @minimum 1
+     * @maximum 65535
+     * @defaultValue 443
+     */
+    port?: number;
+    /**
+     * The IP family to use when executing the check.
+     *
+     * @defaultValue "IPv4"
+     */
+    ipFamily?: IPFamily;
+    /**
+     * The SSL-specific configuration for the connection.
+     */
+    sslConfig: SslConfig;
+    /**
+     * Assertions to validate the TLS certificate.
+     */
+    assertions?: Array<SslAssertion>;
+}

package/dist/constructs/ssl-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ssl-request.js.map

package/dist/constructs/ssl-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-request.js","sourceRoot":"","sources":["../../src/constructs/ssl-request.ts"],"names":[],"mappings":""}

package/dist/constructs/tcp-monitor-codegen.js

@@ -1,5 +1,5 @@
 import { expr, ident } from '../sourcegen/index.js';
-import { valueForGeneralAssertion, valueForNumericAssertion } from './internal/assertion-codegen.js';
+import { unsupportedAssertionSource, valueForGeneralAssertion, valueForNumericAssertion } from './internal/assertion-codegen.js';
 import { Codegen } from './internal/codegen/index.js';
 import { buildMonitorProps } from './monitor-codegen.js';
 export function valueForTcpAssertion(genfile, assertion) {
@@ -10,7 +10,7 @@ export function valueForTcpAssertion(genfile, assertion) {
         case 'RESPONSE_TIME':
             return valueForNumericAssertion('TcpAssertionBuilder', 'responseTime', assertion);
         default:
-            throw new Error(`Unsupported TCP assertion source ${assertion.source}`);
+            return unsupportedAssertionSource(assertion.source, 'TCP');
     }
 }
 const construct = 'TcpMonitor';

package/dist/constructs/tcp-monitor-codegen.js.map

@@ -1 +1 @@
-{"version":3,"file":"tcp-monitor-codegen.js","sourceRoot":"","sources":["../../src/constructs/tcp-monitor-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAiB,KAAK,EAAS,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AACpG,OAAO,EAAE,OAAO,EAAW,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAmB,MAAM,sBAAsB,CAAA;AAUzE,MAAM,UAAU,oBAAoB,CAAE,OAAsB,EAAE,SAAuB;IACnF,OAAO,CAAC,WAAW,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAA;IAEhE,QAAQ,SAAS,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,wBAAwB,CAAC,qBAAqB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QACnF,KAAK,eAAe;YAClB,OAAO,wBAAwB,CAAC,qBAAqB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QACnF;YACE,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,YAAY,CAAA;AAE9B,MAAM,OAAO,iBAAkB,SAAQ,OAA2B;IAChE,QAAQ,CAAE,QAA4B;QACpC,OAAO,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxC,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAA4B,EAAE,OAAgB;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE,QAAQ,CAAC,IAAI,EAAE;YACzE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;wBAChD,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA;oBACvE,CAAC;oBAED,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;wBAC3C,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;oBAC7D,CAAC;oBAED,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;oBAEjE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;wBAClC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;wBACrD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;wBAE7C,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;4BAC9B,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;wBACvD,CAAC;wBAED,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;4BAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;wBAC/C,CAAC;wBAED,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;4BAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAA;4BAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCAC1B,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE;oCACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;wCACnC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;oCACtD,CAAC;gCACH,CAAC,CAAC,CAAA;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}
+{"version":3,"file":"tcp-monitor-codegen.js","sourceRoot":"","sources":["../../src/constructs/tcp-monitor-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAiB,KAAK,EAAS,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAChI,OAAO,EAAE,OAAO,EAAW,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAmB,MAAM,sBAAsB,CAAA;AAUzE,MAAM,UAAU,oBAAoB,CAAE,OAAsB,EAAE,SAAuB;IACnF,OAAO,CAAC,WAAW,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAA;IAEhE,QAAQ,SAAS,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,wBAAwB,CAAC,qBAAqB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QACnF,KAAK,eAAe;YAClB,OAAO,wBAAwB,CAAC,qBAAqB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QACnF;YACE,OAAO,0BAA0B,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,YAAY,CAAA;AAE9B,MAAM,OAAO,iBAAkB,SAAQ,OAA2B;IAChE,QAAQ,CAAE,QAA4B;QACpC,OAAO,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxC,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAA4B,EAAE,OAAgB;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE,QAAQ,CAAC,IAAI,EAAE;YACzE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;wBAChD,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA;oBACvE,CAAC;oBAED,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;wBAC3C,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;oBAC7D,CAAC;oBAED,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;oBAEjE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;wBAClC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;wBACrD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;wBAE7C,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;4BAC9B,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;wBACvD,CAAC;wBAED,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;4BAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;wBAC/C,CAAC;wBAED,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;4BAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAA;4BAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCAC1B,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE;oCACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;wCACnC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;oCACtD,CAAC;gCACH,CAAC,CAAC,CAAA;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}

package/dist/constructs/tcp-monitor.d.ts

@@ -25,7 +25,7 @@ export declare class TcpAssertionBuilder {
      * @param property Optional property path for response data
      * @returns A general assertion builder for response data content
      */
-    static responseData(property?: string): GeneralAssertionBuilder<TcpAssertionSource>;
+    static responseData(property?: string): GeneralAssertionBuilder<TcpAssertionSource, string | number | boolean>;
     /**
      * Creates an assertion builder for TCP response time.
      * @returns A numeric assertion builder for response time in milliseconds

package/dist/constructs/traceroute-assertion-codegen.d.ts

@@ -0,0 +1,3 @@
+import { GeneratedFile, Value } from '../sourcegen/index.js';
+import { TracerouteAssertion } from './traceroute-assertion.js';
+export declare function valueForTracerouteAssertion(genfile: GeneratedFile, assertion: TracerouteAssertion): Value;

package/dist/constructs/traceroute-assertion-codegen.js

@@ -0,0 +1,17 @@
+import { unsupportedAssertionSource, valueForNumericAssertion } from './internal/assertion-codegen.js';
+export function valueForTracerouteAssertion(genfile, assertion) {
+    genfile.namedImport('TracerouteAssertionBuilder', 'checkly/constructs');
+    switch (assertion.source) {
+        case 'RESPONSE_TIME':
+            return valueForNumericAssertion('TracerouteAssertionBuilder', 'responseTime', assertion, {
+                hasProperty: true,
+            });
+        case 'HOP_COUNT':
+            return valueForNumericAssertion('TracerouteAssertionBuilder', 'hopCount', assertion);
+        case 'PACKET_LOSS':
+            return valueForNumericAssertion('TracerouteAssertionBuilder', 'packetLoss', assertion);
+        default:
+            return unsupportedAssertionSource(assertion.source, 'traceroute');
+    }
+}
+//# sourceMappingURL=traceroute-assertion-codegen.js.map

package/dist/constructs/traceroute-assertion-codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traceroute-assertion-codegen.js","sourceRoot":"","sources":["../../src/constructs/traceroute-assertion-codegen.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAGtG,MAAM,UAAU,2BAA2B,CAAE,OAAsB,EAAE,SAA8B;IACjG,OAAO,CAAC,WAAW,CAAC,4BAA4B,EAAE,oBAAoB,CAAC,CAAA;IAEvE,QAAQ,SAAS,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,wBAAwB,CAAC,4BAA4B,EAAE,cAAc,EAAE,SAAS,EAAE;gBACvF,WAAW,EAAE,IAAI;aAClB,CAAC,CAAA;QACJ,KAAK,WAAW;YACd,OAAO,wBAAwB,CAAC,4BAA4B,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;QACtF,KAAK,aAAa;YAChB,OAAO,wBAAwB,CAAC,4BAA4B,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;QACxF;YACE,OAAO,0BAA0B,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACrE,CAAC;AACH,CAAC"}

package/dist/constructs/traceroute-assertion-validation.d.ts

@@ -0,0 +1,11 @@
+import { Diagnostics } from './diagnostics.js';
+import { TracerouteAssertion } from './traceroute-assertion.js';
+/**
+ * Reports traceroute assertions whose source, property or comparison the backend
+ * does not accept.
+ *
+ * Assertions written as plain object literals bypass TracerouteAssertionBuilder and
+ * are type-legal, because the fields are declared as plain strings. The backend
+ * rejects the invalid combinations with a 400, so they are caught here instead.
+ */
+export declare function validateTracerouteAssertion(diagnostics: Diagnostics, assertion: TracerouteAssertion, index: number): void;

package/dist/constructs/traceroute-assertion-validation.js

@@ -0,0 +1,77 @@
+import { addAssertionDiagnostic, quotedKeys } from './internal/assertion-validation.js';
+// Runtime counterparts of unions that exist only at compile time. Typing them as a
+// Record keyed by the union makes a missing or misspelled entry a compile-time error,
+// so neither list can drift from the union it mirrors.
+const responseTimeProperties = {
+    avg: true,
+    min: true,
+    max: true,
+    stdDev: true,
+};
+const assertionSources = {
+    RESPONSE_TIME: true,
+    HOP_COUNT: true,
+    PACKET_LOSS: true,
+};
+// Comparisons the backend accepts per source. RESPONSE_TIME additionally permits
+// NOT_EQUALS; hop count and packet loss do not. Keep in sync with the backend.
+const responseTimeComparisons = {
+    EQUALS: true,
+    NOT_EQUALS: true,
+    GREATER_THAN: true,
+    LESS_THAN: true,
+};
+const numericComparisons = {
+    EQUALS: true,
+    GREATER_THAN: true,
+    LESS_THAN: true,
+};
+/**
+ * Reports traceroute assertions whose source, property or comparison the backend
+ * does not accept.
+ *
+ * Assertions written as plain object literals bypass TracerouteAssertionBuilder and
+ * are type-legal, because the fields are declared as plain strings. The backend
+ * rejects the invalid combinations with a 400, so they are caught here instead.
+ */
+export function validateTracerouteAssertion(diagnostics, assertion, index) {
+    const location = `request.assertions[${index}]`;
+    switch (assertion.source) {
+        case 'RESPONSE_TIME':
+            if (!Object.hasOwn(responseTimeProperties, assertion.property)) {
+                addAssertionDiagnostic(diagnostics, `The RESPONSE_TIME assertion at "${location}" has an invalid property `
+                    + `${assertion.property === '' ? '(none)' : `"${assertion.property}"`}. `
+                    + `Expected one of ${quotedKeys(responseTimeProperties)}.`);
+            }
+            validateComparison(diagnostics, assertion, location, responseTimeComparisons);
+            break;
+        case 'HOP_COUNT':
+        // falls through
+        case 'PACKET_LOSS':
+            if (assertion.property) {
+                addAssertionDiagnostic(diagnostics, `The ${assertion.source} assertion at "${location}" must not specify a property, `
+                    + `but got "${assertion.property}".`);
+            }
+            validateComparison(diagnostics, assertion, location, numericComparisons);
+            break;
+        default:
+            addAssertionDiagnostic(diagnostics, `The assertion at "${location}" has an unknown source "${assertion.source}". `
+                + `Expected one of ${quotedKeys(assertionSources)}.`);
+            // Check files are loaded without type checking, so an unrecognized source reaches
+            // this branch at runtime and is reported above. This additionally makes adding a
+            // member to TracerouteAssertionSource without a matching case a compile-time error.
+            assertion.source;
+            break;
+    }
+}
+// The comparison the backend accepts depends on the source, so the allowed set is
+// passed in; an unknown source is reported separately and skips this check because
+// no set applies to it.
+function validateComparison(diagnostics, assertion, location, allowed) {
+    if (!Object.hasOwn(allowed, assertion.comparison)) {
+        addAssertionDiagnostic(diagnostics, `The ${assertion.source} assertion at "${location}" has an unsupported comparison `
+            + `${assertion.comparison === '' ? '(none)' : `"${assertion.comparison}"`}. `
+            + `Expected one of ${quotedKeys(allowed)}.`);
+    }
+}
+//# sourceMappingURL=traceroute-assertion-validation.js.map