nlcurl 0.6.0 → 0.8.0

package/dist/dns/codec.js

@@ -0,0 +1,238 @@
+import { RCLASS, SvcParamKey } from "./types.js";
+/**
+ * Build a raw DNS query packet.
+ *
+ * @param {string} name - Domain name to query.
+ * @param {number} type - Numeric record type.
+ * @param {number} [id] - Query identifier (defaults to 0).
+ * @returns {Buffer} Wire-format DNS query buffer.
+ */
+export function buildDNSQuery(name, type, id = 0) {
+    const labels = encodeName(name);
+    const buf = Buffer.alloc(12 + labels.length + 4);
+    buf.writeUInt16BE(id & 0xffff, 0);
+    buf.writeUInt16BE(0x0100, 2);
+    buf.writeUInt16BE(1, 4);
+    buf.writeUInt16BE(0, 6);
+    buf.writeUInt16BE(0, 8);
+    buf.writeUInt16BE(0, 10);
+    labels.copy(buf, 12);
+    buf.writeUInt16BE(type, 12 + labels.length);
+    buf.writeUInt16BE(RCLASS.IN, 12 + labels.length + 2);
+    return buf;
+}
+function encodeName(name) {
+    const parts = name.replace(/\.$/, "").split(".");
+    const buffers = [];
+    for (const part of parts) {
+        const label = Buffer.from(part, "ascii");
+        if (label.length > 63)
+            throw new Error(`DNS label too long: "${part}"`);
+        buffers.push(Buffer.from([label.length]), label);
+    }
+    buffers.push(Buffer.from([0]));
+    return Buffer.concat(buffers);
+}
+/**
+ * Parse a wire-format DNS response packet into records.
+ *
+ * @param {Buffer} packet - Raw DNS response data.
+ * @returns {DNSRecord[]} Array of parsed DNS records from the answer section.
+ */
+export function parseDNSResponse(packet) {
+    if (packet.length < 12)
+        throw new Error("DNS packet too short");
+    const flags = packet.readUInt16BE(2);
+    const rcode = flags & 0x000f;
+    if (rcode !== 0) {
+        throw new Error(`DNS query failed with RCODE ${rcode}`);
+    }
+    const qdcount = packet.readUInt16BE(4);
+    const ancount = packet.readUInt16BE(6);
+    let offset = 12;
+    for (let i = 0; i < qdcount; i++) {
+        const result = skipName(packet, offset);
+        offset = result + 4;
+    }
+    const records = [];
+    for (let i = 0; i < ancount; i++) {
+        const { name, newOffset } = decodeName(packet, offset);
+        offset = newOffset;
+        if (offset + 10 > packet.length)
+            break;
+        const type = packet.readUInt16BE(offset);
+        offset += 2;
+        packet.readUInt16BE(offset);
+        offset += 2;
+        const ttl = packet.readUInt32BE(offset);
+        offset += 4;
+        const rdlength = packet.readUInt16BE(offset);
+        offset += 2;
+        if (offset + rdlength > packet.length)
+            break;
+        const data = packet.subarray(offset, offset + rdlength);
+        offset += rdlength;
+        records.push({ name, type, ttl, data });
+    }
+    return records;
+}
+function decodeName(packet, offset) {
+    const labels = [];
+    let jumped = false;
+    let returnOffset = offset;
+    let depth = 0;
+    while (offset < packet.length) {
+        if (depth++ > 128)
+            throw new Error("DNS name compression loop detected");
+        const len = packet[offset];
+        if (len === 0) {
+            if (!jumped)
+                returnOffset = offset + 1;
+            break;
+        }
+        if ((len & 0xc0) === 0xc0) {
+            if (!jumped)
+                returnOffset = offset + 2;
+            offset = ((len & 0x3f) << 8) | packet[offset + 1];
+            jumped = true;
+            continue;
+        }
+        offset++;
+        labels.push(packet.subarray(offset, offset + len).toString("ascii"));
+        offset += len;
+    }
+    if (!jumped && labels.length > 0)
+        returnOffset = offset + 1;
+    return { name: labels.join("."), newOffset: returnOffset };
+}
+function skipName(packet, offset) {
+    let depth = 0;
+    while (offset < packet.length) {
+        if (depth++ > 128)
+            throw new Error("DNS name compression loop detected");
+        const len = packet[offset];
+        if (len === 0)
+            return offset + 1;
+        if ((len & 0xc0) === 0xc0)
+            return offset + 2;
+        offset += 1 + len;
+    }
+    return offset;
+}
+/**
+ * Parse a 4-byte buffer into a dotted-decimal IPv4 address string.
+ *
+ * @param {Buffer} data - Raw A record data.
+ * @returns {string} IPv4 address string.
+ */
+export function parseARecord(data) {
+    if (data.length !== 4)
+        throw new Error("Invalid A record length");
+    return `${data[0]}.${data[1]}.${data[2]}.${data[3]}`;
+}
+/**
+ * Parse a 16-byte buffer into a colon-hex IPv6 address string.
+ *
+ * @param {Buffer} data - Raw AAAA record data.
+ * @returns {string} IPv6 address string.
+ */
+export function parseAAAARecord(data) {
+    if (data.length !== 16)
+        throw new Error("Invalid AAAA record length");
+    const groups = [];
+    for (let i = 0; i < 16; i += 2) {
+        groups.push(data.readUInt16BE(i).toString(16));
+    }
+    return groups.join(":");
+}
+/**
+ * Parse raw SVCB/HTTPS record data into a structured record.
+ *
+ * @param {Buffer} data - Raw SVCB record data.
+ * @returns {SVCBRecord} Parsed SVCB record with service parameters.
+ */
+export function parseSVCBRecord(data) {
+    if (data.length < 3)
+        throw new Error("SVCB record too short");
+    const priority = data.readUInt16BE(0);
+    let offset = 2;
+    const labels = [];
+    while (offset < data.length) {
+        const len = data[offset];
+        if (len === 0) {
+            offset++;
+            break;
+        }
+        offset++;
+        if (offset + len > data.length)
+            break;
+        labels.push(data.subarray(offset, offset + len).toString("ascii"));
+        offset += len;
+    }
+    const target = labels.join(".");
+    const record = { priority, target };
+    while (offset + 4 <= data.length) {
+        const key = data.readUInt16BE(offset);
+        offset += 2;
+        const valLen = data.readUInt16BE(offset);
+        offset += 2;
+        if (offset + valLen > data.length)
+            break;
+        const value = data.subarray(offset, offset + valLen);
+        offset += valLen;
+        switch (key) {
+            case SvcParamKey.ALPN:
+                record.alpn = parseAlpnParam(value);
+                break;
+            case SvcParamKey.NO_DEFAULT_ALPN:
+                record.noDefaultAlpn = true;
+                break;
+            case SvcParamKey.PORT:
+                if (value.length >= 2)
+                    record.port = value.readUInt16BE(0);
+                break;
+            case SvcParamKey.IPV4HINT:
+                record.ipv4Hints = parseIPv4Hints(value);
+                break;
+            case SvcParamKey.IPV6HINT:
+                record.ipv6Hints = parseIPv6Hints(value);
+                break;
+            case SvcParamKey.ECH:
+                record.echConfigList = Buffer.from(value);
+                break;
+        }
+    }
+    return record;
+}
+function parseAlpnParam(data) {
+    const protocols = [];
+    let offset = 0;
+    while (offset < data.length) {
+        const len = data[offset];
+        offset++;
+        if (offset + len > data.length)
+            break;
+        protocols.push(data.subarray(offset, offset + len).toString("ascii"));
+        offset += len;
+    }
+    return protocols;
+}
+function parseIPv4Hints(data) {
+    const addresses = [];
+    for (let i = 0; i + 4 <= data.length; i += 4) {
+        addresses.push(`${data[i]}.${data[i + 1]}.${data[i + 2]}.${data[i + 3]}`);
+    }
+    return addresses;
+}
+function parseIPv6Hints(data) {
+    const addresses = [];
+    for (let i = 0; i + 16 <= data.length; i += 16) {
+        const groups = [];
+        for (let j = 0; j < 16; j += 2) {
+            groups.push(data.readUInt16BE(i + j).toString(16));
+        }
+        addresses.push(groups.join(":"));
+    }
+    return addresses;
+}
+//# sourceMappingURL=codec.js.map

package/dist/dns/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/dns/codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,WAAW,EAAmC,MAAM,YAAY,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa,CAAC;IACtE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEjD,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrB,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAErD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,GAAG,SAAS,CAAC;QAEnB,IAAI,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM;QAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,CAAC;QAEZ,IAAI,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM;QAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC;QAEnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,MAAc;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,YAAY,GAAG,MAAM,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,EAAE,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAEzE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,MAAM;gBAAE,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;YACvC,MAAM;QACR,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM;gBAAE,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;YACvC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YACnD,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;IAE5D,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,EAAE,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,MAAM,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,MAAM,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,MAAM,EAAE,CAAC;YACT,MAAM;QACR,CAAC;QACD,MAAM,EAAE,CAAC;QACT,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAEhD,OAAO,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,CAAC;QAEZ,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,MAAM,CAAC;QAEjB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,WAAW,CAAC,IAAI;gBACnB,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM;YACR,KAAK,WAAW,CAAC,eAAe;gBAC9B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,WAAW,CAAC,IAAI;gBACnB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC3D,MAAM;YACR,KAAK,WAAW,CAAC,QAAQ;gBACvB,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,WAAW,CAAC,QAAQ;gBACvB,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,WAAW,CAAC,GAAG;gBAClB,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;QAC1B,MAAM,EAAE,CAAC;QACT,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM;QACtC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/dns/doh-resolver.d.ts

@@ -0,0 +1,38 @@
+import type { DoHConfig, DNSRecord } from "./types.js";
+import { DNSCache } from "./cache.js";
+/** DNS-over-HTTPS resolver supporting GET and POST wire-format queries. */
+export declare class DoHResolver {
+    private readonly serverUrl;
+    private readonly method;
+    private readonly timeout;
+    private readonly bootstrap;
+    private readonly cache;
+    private queryId;
+    /**
+     * Create a new DoH resolver.
+     *
+     * @param {DoHConfig} config - DoH connection and cache configuration.
+     */
+    constructor(config: DoHConfig);
+    /**
+     * Perform a DNS query over HTTPS.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @param {"A"|"AAAA"|"HTTPS"|"SVCB"} type - Record type to query.
+     * @param {AbortSignal} [signal] - Optional abort signal.
+     * @returns {Promise<DNSRecord[]>} Array of DNS records from the response.
+     */
+    query(name: string, type: "A" | "AAAA" | "HTTPS" | "SVCB", signal?: AbortSignal): Promise<DNSRecord[]>;
+    /**
+     * Return the underlying DNS cache.
+     *
+     * @returns {DNSCache} The resolver's DNS cache instance.
+     */
+    getCache(): DNSCache;
+    private sendQuery;
+    private sendGET;
+    private sendPOST;
+    private httpRequest;
+    private resolveServerHost;
+}
+//# sourceMappingURL=doh-resolver.d.ts.map

package/dist/dns/doh-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doh-resolver.d.ts","sourceRoot":"","sources":["../../src/dns/doh-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAStC,2EAA2E;AAC3E,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAM;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,OAAO,CAAK;IAEpB;;;;OAIG;gBACS,MAAM,EAAE,SAAS;IAQ7B;;;;;;;OAOG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAgB5G;;;;OAIG;IACH,QAAQ,IAAI,QAAQ;YAIN,SAAS;IASvB,OAAO,CAAC,OAAO;IAqBf,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,WAAW;YAmFL,iBAAiB;CA8BhC"}

package/dist/dns/doh-resolver.js

@@ -0,0 +1,191 @@
+import * as https from "node:https";
+import * as http from "node:http";
+import { lookup } from "node:dns/promises";
+import { buildDNSQuery, parseDNSResponse } from "./codec.js";
+import { RTYPE } from "./types.js";
+import { DNSCache } from "./cache.js";
+const DOH_CONTENT_TYPE = "application/dns-message";
+const DEFAULT_TIMEOUT = 5000;
+const BOOTSTRAP_CACHE_MAX = 50;
+const BOOTSTRAP_CACHE_TTL = 300_000;
+const bootstrapCache = new Map();
+/** DNS-over-HTTPS resolver supporting GET and POST wire-format queries. */
+export class DoHResolver {
+    serverUrl;
+    method;
+    timeout;
+    bootstrap;
+    cache;
+    queryId = 0;
+    /**
+     * Create a new DoH resolver.
+     *
+     * @param {DoHConfig} config - DoH connection and cache configuration.
+     */
+    constructor(config) {
+        this.serverUrl = new URL(config.server);
+        this.method = config.method ?? "POST";
+        this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+        this.bootstrap = config.bootstrap ?? true;
+        this.cache = new DNSCache(config.cache);
+    }
+    /**
+     * Perform a DNS query over HTTPS.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @param {"A"|"AAAA"|"HTTPS"|"SVCB"} type - Record type to query.
+     * @param {AbortSignal} [signal] - Optional abort signal.
+     * @returns {Promise<DNSRecord[]>} Array of DNS records from the response.
+     */
+    async query(name, type, signal) {
+        const cached = this.cache.get(name, type);
+        if (cached)
+            return cached;
+        const rtype = RTYPE[type];
+        const id = this.queryId++ & 0xffff;
+        const queryPacket = buildDNSQuery(name, rtype, id);
+        const responseData = await this.sendQuery(queryPacket, signal);
+        const records = parseDNSResponse(responseData);
+        this.cache.set(name, type, records);
+        return records;
+    }
+    /**
+     * Return the underlying DNS cache.
+     *
+     * @returns {DNSCache} The resolver's DNS cache instance.
+     */
+    getCache() {
+        return this.cache;
+    }
+    async sendQuery(packet, signal) {
+        const host = await this.resolveServerHost();
+        if (this.method === "GET") {
+            return this.sendGET(packet, host, signal);
+        }
+        return this.sendPOST(packet, host, signal);
+    }
+    sendGET(packet, host, signal) {
+        const encoded = packet.toString("base64url");
+        const url = new URL(this.serverUrl.toString());
+        url.searchParams.set("dns", encoded);
+        return this.httpRequest({
+            method: "GET",
+            hostname: host,
+            port: parseInt(this.serverUrl.port) || 443,
+            path: `${url.pathname}${url.search}`,
+            headers: {
+                accept: DOH_CONTENT_TYPE,
+                host: this.serverUrl.hostname,
+            },
+        }, undefined, signal);
+    }
+    sendPOST(packet, host, signal) {
+        return this.httpRequest({
+            method: "POST",
+            hostname: host,
+            port: parseInt(this.serverUrl.port) || 443,
+            path: this.serverUrl.pathname,
+            headers: {
+                "content-type": DOH_CONTENT_TYPE,
+                accept: DOH_CONTENT_TYPE,
+                "content-length": packet.length.toString(),
+                host: this.serverUrl.hostname,
+            },
+        }, packet, signal);
+    }
+    httpRequest(options, body, signal) {
+        return new Promise((resolve, reject) => {
+            if (signal?.aborted) {
+                reject(new Error("DoH query aborted"));
+                return;
+            }
+            const isHTTPS = this.serverUrl.protocol === "https:";
+            const requestFn = isHTTPS ? https.request : http.request;
+            const tlsOpts = isHTTPS
+                ? {
+                    ...options,
+                    rejectUnauthorized: true,
+                    servername: this.serverUrl.hostname,
+                }
+                : options;
+            const req = requestFn(tlsOpts, (res) => {
+                if (res.statusCode !== 200) {
+                    req.destroy();
+                    reject(new Error(`DoH server returned HTTP ${res.statusCode}`));
+                    return;
+                }
+                const contentType = res.headers["content-type"];
+                if (contentType && !contentType.includes(DOH_CONTENT_TYPE)) {
+                    req.destroy();
+                    reject(new Error(`DoH server returned unexpected content-type: ${contentType}`));
+                    return;
+                }
+                const chunks = [];
+                let totalSize = 0;
+                const MAX_DNS_RESPONSE = 65535;
+                res.on("data", (chunk) => {
+                    totalSize += chunk.length;
+                    if (totalSize > MAX_DNS_RESPONSE) {
+                        req.destroy();
+                        reject(new Error("DoH response exceeds maximum DNS message size"));
+                        return;
+                    }
+                    chunks.push(chunk);
+                });
+                res.on("end", () => {
+                    resolve(Buffer.concat(chunks));
+                });
+                res.on("error", reject);
+            });
+            req.on("error", reject);
+            const timer = setTimeout(() => {
+                req.destroy();
+                reject(new Error("DoH query timed out"));
+            }, this.timeout);
+            req.once("close", () => {
+                clearTimeout(timer);
+            });
+            if (signal) {
+                const onAbort = () => {
+                    clearTimeout(timer);
+                    req.destroy();
+                    reject(new Error("DoH query aborted"));
+                };
+                signal.addEventListener("abort", onAbort, { once: true });
+                req.once("close", () => {
+                    signal.removeEventListener("abort", onAbort);
+                });
+            }
+            if (body) {
+                req.write(body);
+            }
+            req.end();
+        });
+    }
+    async resolveServerHost() {
+        const host = this.serverUrl.hostname;
+        if (/^\d+\.\d+\.\d+\.\d+$/.test(host) || host.includes(":")) {
+            return host;
+        }
+        const cached = bootstrapCache.get(host);
+        if (cached) {
+            if (Date.now() - cached.storedAt < BOOTSTRAP_CACHE_TTL) {
+                return cached.address;
+            }
+            bootstrapCache.delete(host);
+        }
+        if (!this.bootstrap) {
+            return host;
+        }
+        const result = await lookup(host, { family: 0 });
+        const address = Array.isArray(result) ? result[0].address : result.address;
+        if (bootstrapCache.size >= BOOTSTRAP_CACHE_MAX) {
+            const firstKey = bootstrapCache.keys().next().value;
+            if (firstKey)
+                bootstrapCache.delete(firstKey);
+        }
+        bootstrapCache.set(host, { address, storedAt: Date.now() });
+        return address;
+    }
+}
+//# sourceMappingURL=doh-resolver.js.map

package/dist/dns/doh-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doh-resolver.js","sourceRoot":"","sources":["../../src/dns/doh-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAiD,CAAC;AAEhF,2EAA2E;AAC3E,MAAM,OAAO,WAAW;IACL,SAAS,CAAM;IACf,MAAM,CAAiB;IACvB,OAAO,CAAS;IAChB,SAAS,CAAU;IACnB,KAAK,CAAW;IACzB,OAAO,GAAG,CAAC,CAAC;IAEpB;;;;OAIG;IACH,YAAY,MAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAqC,EAAE,MAAoB;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;QACnC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAEnD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE/C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAEpC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,MAAoB;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,MAAoB;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAErC,OAAO,IAAI,CAAC,WAAW,CACrB;YACE,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG;YAC1C,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;YACpC,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;aAC9B;SACF,EACD,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,MAAoB;QACjE,OAAO,IAAI,CAAC,WAAW,CACrB;YACE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG;YAC1C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;YAC7B,OAAO,EAAE;gBACP,cAAc,EAAE,gBAAgB;gBAChC,MAAM,EAAE,gBAAgB;gBACxB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC1C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;aAC9B;SACF,EACD,MAAM,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,OAA6B,EAAE,IAAwB,EAAE,MAAoB;QAC/F,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACrD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAEzD,MAAM,OAAO,GAAyB,OAAO;gBAC3C,CAAC,CAAC;oBACE,GAAG,OAAO;oBACV,kBAAkB,EAAE,IAAI;oBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;iBACpC;gBACH,CAAC,CAAC,OAAO,CAAC;YAEZ,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrC,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAChD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,WAAW,EAAE,CAAC,CAAC,CAAC;oBACjF,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,MAAM,gBAAgB,GAAG,KAAK,CAAC;gBAE/B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC1B,IAAI,SAAS,GAAG,gBAAgB,EAAE,CAAC;wBACjC,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAExB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC3C,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAEjB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACrB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAErC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;gBACvD,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAE5E,IAAI,cAAc,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACpD,IAAI,QAAQ;gBAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;QAED,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/dns/dot-resolver.d.ts

@@ -0,0 +1,89 @@
+import { RTYPE, type DNSRecord } from "./types.js";
+type RTYPEValue = (typeof RTYPE)[keyof typeof RTYPE];
+/** Configuration for a DNS-over-TLS resolver. */
+export interface DoTConfig {
+    /** DoT server IP address or hostname. */
+    server?: string;
+    /** Server port (default 853). */
+    port?: number;
+    /** TLS server name for certificate verification. */
+    servername?: string;
+    /** Query timeout in milliseconds. */
+    timeout?: number;
+    /** Whether to reuse the TLS connection across queries. */
+    keepAlive?: boolean;
+    /** Whether to skip TLS certificate verification. */
+    insecure?: boolean;
+}
+/** Pre-configured DNS-over-TLS server entries. */
+export declare const DOT_SERVERS: {
+    readonly cloudflare: {
+        readonly server: "1.1.1.1";
+        readonly servername: "cloudflare-dns.com";
+    };
+    readonly "cloudflare-ipv6": {
+        readonly server: "2606:4700:4700::1111";
+        readonly servername: "cloudflare-dns.com";
+    };
+    readonly google: {
+        readonly server: "8.8.8.8";
+        readonly servername: "dns.google";
+    };
+    readonly "google-ipv6": {
+        readonly server: "2001:4860:4860::8888";
+        readonly servername: "dns.google";
+    };
+    readonly quad9: {
+        readonly server: "9.9.9.9";
+        readonly servername: "dns.quad9.net";
+    };
+    readonly adguard: {
+        readonly server: "94.140.14.14";
+        readonly servername: "dns.adguard-dns.com";
+    };
+};
+/** DNS-over-TLS resolver using a persistent TLS connection. */
+export declare class DoTResolver {
+    private readonly server;
+    private readonly port;
+    private readonly servername;
+    private readonly timeout;
+    private readonly insecure;
+    private readonly keepAlive;
+    private socket;
+    private connected;
+    /**
+     * Create a new DoT resolver.
+     *
+     * @param {DoTConfig} [config] - DoT connection configuration.
+     */
+    constructor(config?: DoTConfig);
+    /**
+     * Resolve a domain name to DNS records over TLS.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @param {RTYPEValue} [type] - Numeric record type (defaults to A).
+     * @returns {Promise<DNSRecord[]>} Array of parsed DNS records.
+     */
+    resolve(name: string, type?: RTYPEValue): Promise<DNSRecord[]>;
+    /**
+     * Resolve a domain name to IPv4 addresses.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @returns {Promise<string[]>} Array of IPv4 address strings.
+     */
+    resolve4(name: string): Promise<string[]>;
+    /**
+     * Resolve a domain name to IPv6 addresses.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @returns {Promise<string[]>} Array of IPv6 address strings.
+     */
+    resolve6(name: string): Promise<string[]>;
+    /** Close the underlying TLS socket and release resources. */
+    close(): void;
+    private send;
+    private getSocket;
+}
+export {};
+//# sourceMappingURL=dot-resolver.d.ts.map

package/dist/dns/dot-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dot-resolver.d.ts","sourceRoot":"","sources":["../../src/dns/dot-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAEnD,KAAK,UAAU,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC;AAErD,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,kDAAkD;AAClD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;CAOd,CAAC;AAEX,+DAA+D;AAC/D,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;gBACS,MAAM,CAAC,EAAE,SAAS;IAS9B;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAkB7E;;;;;OAKG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK/C;;;;;OAKG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK/C,6DAA6D;IAC7D,KAAK,IAAI,IAAI;YAQC,IAAI;YAqDJ,SAAS;CAiCxB"}