nlcurl 0.5.0 → 0.7.0

package/dist/dns/codec.js

@@ -0,0 +1,254 @@
+/**
+ * Minimal DNS wire-format encoder/decoder for DNS-over-HTTPS (RFC 8484)
+ * and HTTPS/SVCB record parsing (RFC 9460).
+ *
+ * Supports building A/AAAA/HTTPS queries and parsing response packets
+ * including SvcParam extraction. Uses only Node.js built-in `Buffer`.
+ */
+import { RCLASS, SvcParamKey } from "./types.js";
+/**
+ * Builds a DNS query packet in wire format (RFC 1035 §4).
+ *
+ * @param name  The domain name to query.
+ * @param type  DNS record type (A = 1, AAAA = 28, HTTPS = 65).
+ * @param id    16-bit query ID.
+ * @returns Raw DNS query packet.
+ */
+export function buildDNSQuery(name, type, id = 0) {
+    const labels = encodeName(name);
+    const buf = Buffer.alloc(12 + labels.length + 4);
+    buf.writeUInt16BE(id & 0xffff, 0);
+    buf.writeUInt16BE(0x0100, 2);
+    buf.writeUInt16BE(1, 4);
+    buf.writeUInt16BE(0, 6);
+    buf.writeUInt16BE(0, 8);
+    buf.writeUInt16BE(0, 10);
+    labels.copy(buf, 12);
+    buf.writeUInt16BE(type, 12 + labels.length);
+    buf.writeUInt16BE(RCLASS.IN, 12 + labels.length + 2);
+    return buf;
+}
+/**
+ * Encodes a domain name into DNS wire format labels.
+ */
+function encodeName(name) {
+    const parts = name.replace(/\.$/, "").split(".");
+    const buffers = [];
+    for (const part of parts) {
+        const label = Buffer.from(part, "ascii");
+        if (label.length > 63)
+            throw new Error(`DNS label too long: "${part}"`);
+        buffers.push(Buffer.from([label.length]), label);
+    }
+    buffers.push(Buffer.from([0]));
+    return Buffer.concat(buffers);
+}
+/**
+ * Parses a DNS response packet and extracts answer records.
+ *
+ * @param packet Raw DNS response bytes.
+ * @returns Array of parsed DNS records from the answer section.
+ */
+export function parseDNSResponse(packet) {
+    if (packet.length < 12)
+        throw new Error("DNS packet too short");
+    const flags = packet.readUInt16BE(2);
+    const rcode = flags & 0x000f;
+    if (rcode !== 0) {
+        throw new Error(`DNS query failed with RCODE ${rcode}`);
+    }
+    const qdcount = packet.readUInt16BE(4);
+    const ancount = packet.readUInt16BE(6);
+    let offset = 12;
+    for (let i = 0; i < qdcount; i++) {
+        const result = skipName(packet, offset);
+        offset = result + 4;
+    }
+    const records = [];
+    for (let i = 0; i < ancount; i++) {
+        const { name, newOffset } = decodeName(packet, offset);
+        offset = newOffset;
+        if (offset + 10 > packet.length)
+            break;
+        const type = packet.readUInt16BE(offset);
+        offset += 2;
+        packet.readUInt16BE(offset);
+        offset += 2;
+        const ttl = packet.readUInt32BE(offset);
+        offset += 4;
+        const rdlength = packet.readUInt16BE(offset);
+        offset += 2;
+        if (offset + rdlength > packet.length)
+            break;
+        const data = packet.subarray(offset, offset + rdlength);
+        offset += rdlength;
+        records.push({ name, type, ttl, data });
+    }
+    return records;
+}
+/**
+ * Decodes a DNS compressed name from a packet.
+ */
+function decodeName(packet, offset) {
+    const labels = [];
+    let jumped = false;
+    let returnOffset = offset;
+    let depth = 0;
+    while (offset < packet.length) {
+        if (depth++ > 128)
+            throw new Error("DNS name compression loop detected");
+        const len = packet[offset];
+        if (len === 0) {
+            if (!jumped)
+                returnOffset = offset + 1;
+            break;
+        }
+        if ((len & 0xc0) === 0xc0) {
+            if (!jumped)
+                returnOffset = offset + 2;
+            offset = ((len & 0x3f) << 8) | packet[offset + 1];
+            jumped = true;
+            continue;
+        }
+        offset++;
+        labels.push(packet.subarray(offset, offset + len).toString("ascii"));
+        offset += len;
+    }
+    if (!jumped && labels.length > 0)
+        returnOffset = offset + 1;
+    return { name: labels.join("."), newOffset: returnOffset };
+}
+/**
+ * Skips past a DNS name in a packet (handles compression pointers).
+ */
+function skipName(packet, offset) {
+    let depth = 0;
+    while (offset < packet.length) {
+        if (depth++ > 128)
+            throw new Error("DNS name compression loop detected");
+        const len = packet[offset];
+        if (len === 0)
+            return offset + 1;
+        if ((len & 0xc0) === 0xc0)
+            return offset + 2;
+        offset += 1 + len;
+    }
+    return offset;
+}
+/**
+ * Parses an A record (IPv4 address) from rdata.
+ */
+export function parseARecord(data) {
+    if (data.length !== 4)
+        throw new Error("Invalid A record length");
+    return `${data[0]}.${data[1]}.${data[2]}.${data[3]}`;
+}
+/**
+ * Parses an AAAA record (IPv6 address) from rdata.
+ */
+export function parseAAAARecord(data) {
+    if (data.length !== 16)
+        throw new Error("Invalid AAAA record length");
+    const groups = [];
+    for (let i = 0; i < 16; i += 2) {
+        groups.push(data.readUInt16BE(i).toString(16));
+    }
+    return groups.join(":");
+}
+/**
+ * Parses an HTTPS/SVCB record from rdata (RFC 9460 §2.2).
+ */
+export function parseSVCBRecord(data) {
+    if (data.length < 3)
+        throw new Error("SVCB record too short");
+    const priority = data.readUInt16BE(0);
+    let offset = 2;
+    const labels = [];
+    while (offset < data.length) {
+        const len = data[offset];
+        if (len === 0) {
+            offset++;
+            break;
+        }
+        offset++;
+        if (offset + len > data.length)
+            break;
+        labels.push(data.subarray(offset, offset + len).toString("ascii"));
+        offset += len;
+    }
+    const target = labels.join(".");
+    const record = { priority, target };
+    while (offset + 4 <= data.length) {
+        const key = data.readUInt16BE(offset);
+        offset += 2;
+        const valLen = data.readUInt16BE(offset);
+        offset += 2;
+        if (offset + valLen > data.length)
+            break;
+        const value = data.subarray(offset, offset + valLen);
+        offset += valLen;
+        switch (key) {
+            case SvcParamKey.ALPN:
+                record.alpn = parseAlpnParam(value);
+                break;
+            case SvcParamKey.NO_DEFAULT_ALPN:
+                record.noDefaultAlpn = true;
+                break;
+            case SvcParamKey.PORT:
+                if (value.length >= 2)
+                    record.port = value.readUInt16BE(0);
+                break;
+            case SvcParamKey.IPV4HINT:
+                record.ipv4Hints = parseIPv4Hints(value);
+                break;
+            case SvcParamKey.IPV6HINT:
+                record.ipv6Hints = parseIPv6Hints(value);
+                break;
+            case SvcParamKey.ECH:
+                record.echConfigList = Buffer.from(value);
+                break;
+        }
+    }
+    return record;
+}
+/**
+ * Parses the ALPN SvcParam — length-prefixed protocol identifier list.
+ */
+function parseAlpnParam(data) {
+    const protocols = [];
+    let offset = 0;
+    while (offset < data.length) {
+        const len = data[offset];
+        offset++;
+        if (offset + len > data.length)
+            break;
+        protocols.push(data.subarray(offset, offset + len).toString("ascii"));
+        offset += len;
+    }
+    return protocols;
+}
+/**
+ * Parses IPv4 address hints from SvcParam value.
+ */
+function parseIPv4Hints(data) {
+    const addresses = [];
+    for (let i = 0; i + 4 <= data.length; i += 4) {
+        addresses.push(`${data[i]}.${data[i + 1]}.${data[i + 2]}.${data[i + 3]}`);
+    }
+    return addresses;
+}
+/**
+ * Parses IPv6 address hints from SvcParam value.
+ */
+function parseIPv6Hints(data) {
+    const addresses = [];
+    for (let i = 0; i + 16 <= data.length; i += 16) {
+        const groups = [];
+        for (let j = 0; j < 16; j += 2) {
+            groups.push(data.readUInt16BE(i + j).toString(16));
+        }
+        addresses.push(groups.join(":"));
+    }
+    return addresses;
+}
+//# sourceMappingURL=codec.js.map

package/dist/dns/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/dns/codec.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAS,MAAM,EAAE,WAAW,EAAmC,MAAM,YAAY,CAAC;AAEzF;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa,CAAC;IACtE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEjD,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrB,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAErD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,GAAG,SAAS,CAAC;QAEnB,IAAI,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM;QAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,CAAC;QAEZ,IAAI,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM;QAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC;QAEnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,MAAc;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,YAAY,GAAG,MAAM,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,EAAE,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAEzE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,MAAM;gBAAE,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;YACvC,MAAM;QACR,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM;gBAAE,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;YACvC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YACnD,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;IAE5D,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,EAAE,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,MAAM,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,MAAM,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,MAAM,EAAE,CAAC;YACT,MAAM;QACR,CAAC;QACD,MAAM,EAAE,CAAC;QACT,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAEhD,OAAO,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,CAAC;QAEZ,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,MAAM,CAAC;QAEjB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,WAAW,CAAC,IAAI;gBACnB,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM;YACR,KAAK,WAAW,CAAC,eAAe;gBAC9B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,WAAW,CAAC,IAAI;gBACnB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC3D,MAAM;YACR,KAAK,WAAW,CAAC,QAAQ;gBACvB,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,WAAW,CAAC,QAAQ;gBACvB,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,WAAW,CAAC,GAAG;gBAClB,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;QAC1B,MAAM,EAAE,CAAC;QACT,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM;QACtC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/dns/doh-resolver.d.ts

@@ -0,0 +1,52 @@
+import type { DoHConfig, DNSRecord } from "./types.js";
+/**
+ * DNS-over-HTTPS resolver for encrypted DNS resolution.
+ *
+ * Usage:
+ * ```typescript
+ * const resolver = new DoHResolver({ server: "https://1.1.1.1/dns-query" });
+ * const records = await resolver.query("example.com", "A");
+ * ```
+ */
+export declare class DoHResolver {
+    private readonly serverUrl;
+    private readonly method;
+    private readonly timeout;
+    private readonly bootstrap;
+    private queryId;
+    constructor(config: DoHConfig);
+    /**
+     * Sends a DNS query over HTTPS and returns the parsed answer records.
+     *
+     * @param name   Domain name to resolve.
+     * @param type   Record type: "A", "AAAA", "HTTPS", or "SVCB".
+     * @param signal Optional AbortSignal for cancellation.
+     * @returns Array of raw DNS records from the answer section.
+     */
+    query(name: string, type: "A" | "AAAA" | "HTTPS" | "SVCB", signal?: AbortSignal): Promise<DNSRecord[]>;
+    /**
+     * Sends the DNS wire-format query to the DoH server.
+     */
+    private sendQuery;
+    /**
+     * GET method: base64url-encode the DNS query in the `dns` query parameter.
+     */
+    private sendGET;
+    /**
+     * POST method: send DNS wire-format directly in the request body.
+     */
+    private sendPOST;
+    /**
+     * Make the HTTPS request with timeout and abort support.
+     */
+    private httpRequest;
+    /**
+     * Resolves the DoH server hostname to an IP address (bootstrap).
+     * Uses the system DNS resolver for this bootstrap step to avoid
+     * a circular dependency (we can't use DoH to resolve the DoH server).
+     *
+     * If the server URL already uses an IP address, returns it directly.
+     */
+    private resolveServerHost;
+}
+//# sourceMappingURL=doh-resolver.d.ts.map

package/dist/dns/doh-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doh-resolver.d.ts","sourceRoot":"","sources":["../../src/dns/doh-resolver.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AASvD;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAM;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,OAAO,CAAK;gBAER,MAAM,EAAE,SAAS;IAO7B;;;;;;;OAOG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAS5G;;OAEG;YACW,SAAS;IASvB;;OAEG;IACH,OAAO,CAAC,OAAO;IAqBf;;OAEG;IACH,OAAO,CAAC,QAAQ;IAmBhB;;OAEG;IACH,OAAO,CAAC,WAAW;IA+EnB;;;;;;OAMG;YACW,iBAAiB;CAmBhC"}

package/dist/dns/doh-resolver.js

@@ -0,0 +1,192 @@
+/**
+ * DNS-over-HTTPS (DoH) resolver implementing RFC 8484.
+ *
+ * Sends DNS queries over HTTPS to a configured DoH server, providing
+ * encrypted DNS resolution for privacy. Supports both GET (wire-format
+ * in query parameter) and POST (wire-format in body) methods.
+ *
+ * @see https://datatracker.ietf.org/doc/html/rfc8484
+ */
+import * as https from "node:https";
+import * as http from "node:http";
+import { lookup } from "node:dns/promises";
+import { buildDNSQuery, parseDNSResponse } from "./codec.js";
+import { RTYPE } from "./types.js";
+const DOH_CONTENT_TYPE = "application/dns-message";
+const DEFAULT_TIMEOUT = 5000;
+/** Cache of bootstrapped DoH server IP → avoid infinite recursion. */
+const bootstrapCache = new Map();
+/**
+ * DNS-over-HTTPS resolver for encrypted DNS resolution.
+ *
+ * Usage:
+ * ```typescript
+ * const resolver = new DoHResolver({ server: "https://1.1.1.1/dns-query" });
+ * const records = await resolver.query("example.com", "A");
+ * ```
+ */
+export class DoHResolver {
+    serverUrl;
+    method;
+    timeout;
+    bootstrap;
+    queryId = 0;
+    constructor(config) {
+        this.serverUrl = new URL(config.server);
+        this.method = config.method ?? "POST";
+        this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+        this.bootstrap = config.bootstrap ?? true;
+    }
+    /**
+     * Sends a DNS query over HTTPS and returns the parsed answer records.
+     *
+     * @param name   Domain name to resolve.
+     * @param type   Record type: "A", "AAAA", "HTTPS", or "SVCB".
+     * @param signal Optional AbortSignal for cancellation.
+     * @returns Array of raw DNS records from the answer section.
+     */
+    async query(name, type, signal) {
+        const rtype = RTYPE[type];
+        const id = this.queryId++ & 0xffff;
+        const queryPacket = buildDNSQuery(name, rtype, id);
+        const responseData = await this.sendQuery(queryPacket, signal);
+        return parseDNSResponse(responseData);
+    }
+    /**
+     * Sends the DNS wire-format query to the DoH server.
+     */
+    async sendQuery(packet, signal) {
+        const host = await this.resolveServerHost();
+        if (this.method === "GET") {
+            return this.sendGET(packet, host, signal);
+        }
+        return this.sendPOST(packet, host, signal);
+    }
+    /**
+     * GET method: base64url-encode the DNS query in the `dns` query parameter.
+     */
+    sendGET(packet, host, signal) {
+        const encoded = packet.toString("base64url");
+        const url = new URL(this.serverUrl.toString());
+        url.searchParams.set("dns", encoded);
+        return this.httpRequest({
+            method: "GET",
+            hostname: host,
+            port: parseInt(this.serverUrl.port) || 443,
+            path: `${url.pathname}${url.search}`,
+            headers: {
+                accept: DOH_CONTENT_TYPE,
+                host: this.serverUrl.hostname,
+            },
+        }, undefined, signal);
+    }
+    /**
+     * POST method: send DNS wire-format directly in the request body.
+     */
+    sendPOST(packet, host, signal) {
+        return this.httpRequest({
+            method: "POST",
+            hostname: host,
+            port: parseInt(this.serverUrl.port) || 443,
+            path: this.serverUrl.pathname,
+            headers: {
+                "content-type": DOH_CONTENT_TYPE,
+                accept: DOH_CONTENT_TYPE,
+                "content-length": packet.length.toString(),
+                host: this.serverUrl.hostname,
+            },
+        }, packet, signal);
+    }
+    /**
+     * Make the HTTPS request with timeout and abort support.
+     */
+    httpRequest(options, body, signal) {
+        return new Promise((resolve, reject) => {
+            if (signal?.aborted) {
+                reject(new Error("DoH query aborted"));
+                return;
+            }
+            const isHTTPS = this.serverUrl.protocol === "https:";
+            const requestFn = isHTTPS ? https.request : http.request;
+            const tlsOpts = isHTTPS
+                ? {
+                    ...options,
+                    rejectUnauthorized: true,
+                    servername: this.serverUrl.hostname,
+                }
+                : options;
+            const req = requestFn(tlsOpts, (res) => {
+                if (res.statusCode !== 200) {
+                    req.destroy();
+                    reject(new Error(`DoH server returned HTTP ${res.statusCode}`));
+                    return;
+                }
+                const contentType = res.headers["content-type"];
+                if (contentType && !contentType.includes(DOH_CONTENT_TYPE)) {
+                    req.destroy();
+                    reject(new Error(`DoH server returned unexpected content-type: ${contentType}`));
+                    return;
+                }
+                const chunks = [];
+                let totalSize = 0;
+                const MAX_DNS_RESPONSE = 65535;
+                res.on("data", (chunk) => {
+                    totalSize += chunk.length;
+                    if (totalSize > MAX_DNS_RESPONSE) {
+                        req.destroy();
+                        reject(new Error("DoH response exceeds maximum DNS message size"));
+                        return;
+                    }
+                    chunks.push(chunk);
+                });
+                res.on("end", () => {
+                    resolve(Buffer.concat(chunks));
+                });
+                res.on("error", reject);
+            });
+            req.on("error", reject);
+            const timer = setTimeout(() => {
+                req.destroy();
+                reject(new Error("DoH query timed out"));
+            }, this.timeout);
+            req.once("close", () => clearTimeout(timer));
+            if (signal) {
+                const onAbort = () => {
+                    clearTimeout(timer);
+                    req.destroy();
+                    reject(new Error("DoH query aborted"));
+                };
+                signal.addEventListener("abort", onAbort, { once: true });
+                req.once("close", () => signal.removeEventListener("abort", onAbort));
+            }
+            if (body) {
+                req.write(body);
+            }
+            req.end();
+        });
+    }
+    /**
+     * Resolves the DoH server hostname to an IP address (bootstrap).
+     * Uses the system DNS resolver for this bootstrap step to avoid
+     * a circular dependency (we can't use DoH to resolve the DoH server).
+     *
+     * If the server URL already uses an IP address, returns it directly.
+     */
+    async resolveServerHost() {
+        const host = this.serverUrl.hostname;
+        if (/^\d+\.\d+\.\d+\.\d+$/.test(host) || host.includes(":")) {
+            return host;
+        }
+        const cached = bootstrapCache.get(host);
+        if (cached)
+            return cached;
+        if (!this.bootstrap) {
+            return host;
+        }
+        const result = await lookup(host, { family: 0 });
+        const address = Array.isArray(result) ? result[0].address : result.address;
+        bootstrapCache.set(host, address);
+        return address;
+    }
+}
+//# sourceMappingURL=doh-resolver.js.map

package/dist/dns/doh-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doh-resolver.js","sourceRoot":"","sources":["../../src/dns/doh-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,sEAAsE;AACtE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACL,SAAS,CAAM;IACf,MAAM,CAAiB;IACvB,OAAO,CAAS;IAChB,SAAS,CAAU;IAC5B,OAAO,GAAG,CAAC,CAAC;IAEpB,YAAY,MAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAqC,EAAE,MAAoB;QACnF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;QACnC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAEnD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,OAAO,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,MAAoB;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,MAAoB;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAErC,OAAO,IAAI,CAAC,WAAW,CACrB;YACE,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG;YAC1C,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;YACpC,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;aAC9B;SACF,EACD,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,MAAoB;QACjE,OAAO,IAAI,CAAC,WAAW,CACrB;YACE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG;YAC1C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;YAC7B,OAAO,EAAE;gBACP,cAAc,EAAE,gBAAgB;gBAChC,MAAM,EAAE,gBAAgB;gBACxB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC1C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;aAC9B;SACF,EACD,MAAM,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAA6B,EAAE,IAAwB,EAAE,MAAoB;QAC/F,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACrD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAEzD,MAAM,OAAO,GAAyB,OAAO;gBAC3C,CAAC,CAAC;oBACE,GAAG,OAAO;oBACV,kBAAkB,EAAE,IAAI;oBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;iBACpC;gBACH,CAAC,CAAC,OAAO,CAAC;YAEZ,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrC,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAChD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,WAAW,EAAE,CAAC,CAAC,CAAC;oBACjF,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,MAAM,gBAAgB,GAAG,KAAK,CAAC;gBAE/B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC1B,IAAI,SAAS,GAAG,gBAAgB,EAAE,CAAC;wBACjC,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAExB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC3C,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAEjB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAE7C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,iBAAiB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAErC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5E,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/dns/https-rr.d.ts

@@ -0,0 +1,51 @@
+import { type SVCBRecord, type DoHConfig, type ResolvedAddress } from "./types.js";
+/**
+ * Result of an HTTPS-RR lookup, combining SVCB records with address hints.
+ */
+export interface HTTPSRRResult {
+    /** Parsed SVCB/HTTPS records, sorted by priority (lowest first). */
+    svcb: SVCBRecord[];
+    /** ECH config list from the highest-priority record that has one. */
+    echConfigList?: Buffer;
+    /** ALPN protocols from the highest-priority ServiceMode record. */
+    alpn?: string[];
+    /** IP address hints extracted from SVCB records + A/AAAA. */
+    addresses: ResolvedAddress[];
+    /** Port override from the SVCB record, if any. */
+    port?: number;
+}
+/**
+ * Resolver for HTTPS/SVCB DNS Resource Records (RFC 9460).
+ *
+ * Supports two modes:
+ * 1. **System DNS** — Uses `node:dns` (resolveAny or raw query).
+ * 2. **DoH** — Uses a DoHResolver for encrypted HTTPS-RR queries.
+ */
+export declare class HTTPSRRResolver {
+    private readonly dohResolver?;
+    private readonly systemResolver;
+    constructor(dohConfig?: DoHConfig);
+    /**
+     * Queries HTTPS records for a hostname and parses the results.
+     *
+     * @param hostname The domain to look up HTTPS records for.
+     * @param signal   Optional AbortSignal for cancellation.
+     * @returns Parsed HTTPS-RR result with SVCB params, or null if no records found.
+     */
+    resolve(hostname: string, signal?: AbortSignal): Promise<HTTPSRRResult | null>;
+    /**
+     * Resolves HTTPS records via DoH.
+     */
+    private resolveViaDoH;
+    /**
+     * Resolves HTTPS records via the system DNS resolver.
+     * Uses raw DNS query + decode since node:dns doesn't natively support type 65.
+     */
+    private resolveViaSystem;
+    /**
+     * Parses a native Node.js HTTPS DNS record into our SVCBRecord format.
+     * Node.js 22+ may return HTTPS records with a specific structure.
+     */
+    private parseNativeHTTPSRecord;
+}
+//# sourceMappingURL=https-rr.d.ts.map

package/dist/dns/https-rr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-rr.d.ts","sourceRoot":"","sources":["../../src/dns/https-rr.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAS,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAE1F;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,6DAA6D;IAC7D,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAW;gBAE9B,SAAS,CAAC,EAAE,SAAS;IAOjC;;;;;;OAMG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA+CpF;;OAEG;YACW,aAAa;IAK3B;;;OAGG;YACW,gBAAgB;IAU9B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAc/B"}