farai 0.3.9 → 0.4.0

package/dist/cli/index.js

@@ -9266,8 +9266,8 @@ var init_renderers = __esm(() => {
 
 // src/version.ts
 function resolveFaraiVersion() {
-  if ("0.3.9")
-    return "0.3.9";
+  if ("0.4.0")
+    return "0.4.0";
   try {
     const parsed = JSON.parse(readBoundedFileTextSync(new URL("../package.json", import.meta.url), 1024 * 1024, "package metadata"));
     if (typeof parsed.version === "string" && parsed.version)
@@ -15653,8 +15653,8 @@ function buildDnsProbeCommand(args) {
   const resolvers = optionalStringList(args.resolvers, "resolvers", 100);
   const queries = names.flatMap((name) => recordTypes.map((type) => `${name} ${type.toUpperCase()}`));
   const queryLines = queries.map(shellQuote3).join(" ");
-  const fixed = ["dig", "+noall", "+answer", "+nocomments", "+tries=1", `+time=${timeout}`].join(" ");
-  const server = resolvers[0] ? ` ${shellQuote3(`@${resolvers[0]}`)}` : "";
+  const fixed = ["dig", "+noall", "+answer", "+nocomments", "+tries=2", `+time=${timeout}`].join(" ");
+  const server = ` ${shellQuote3(`@${resolvers[0] ?? "1.1.1.1"}`)}`;
   return ['file="$(mktemp /tmp/farai-dig.XXXXXX)" || exit 1', `trap 'rm -f "$file"' EXIT`, `printf '%s\\n' ${queryLines} > "$file"`, `${fixed}${server} -f "$file"`].join(`
 `);
 }
@@ -15703,7 +15703,7 @@ var init_dns_probe = __esm(() => {
   DNS_RECORD_TYPES = ["a", "aaaa", "cname", "ns", "txt", "srv", "ptr", "mx", "soa", "caa"];
   dnsProbeTool = {
     name: "dns_resolve",
-    description: "Resolve one or many hostnames with dig using selected DNS record types and optional custom resolver. Returns answer records grouped by name (following CNAME targets as their own entries). Use this to validate candidates from asset_subdomains before HTTP or port probing; it is not a passive discovery source.",
+    description: "Resolve one or many hostnames with dig using selected DNS record types. Queries the public resolver 1.1.1.1 by default (the container's own resolver is unreliable); pass resolvers to override for internal names. Returns answer records grouped by name (following CNAME targets as their own entries). Use this to validate candidates from asset_subdomains before HTTP or port probing; it is not a passive discovery source.",
     inputSchema: {
       type: "object",
       required: ["names"],
@@ -15741,7 +15741,7 @@ var init_dns_probe = __esm(() => {
             maxItems: 100,
             uniqueItems: true
           }],
-          description: "optional custom resolver; the first entry is passed to dig as @resolver"
+          description: "optional custom resolver passed to dig as @resolver; defaults to the public resolver 1.1.1.1 because the container's default resolver is unreliable. set an internal resolver here for internal-only names"
         },
         timeoutSeconds: {
           type: "integer",
@@ -81459,5 +81459,5 @@ Examples:
 `);
 }
 
-//# debugId=96D533A4297076F264756E2164756E21
+//# debugId=CEA52C50ECFD6CB064756E2164756E21
 //# sourceMappingURL=index.js.map