nlcurl 0.7.0 → 0.9.0

package/dist/dns/dot-resolver.js

@@ -0,0 +1,166 @@
+import * as tls from "node:tls";
+import { buildDNSQuery, parseDNSResponse } from "./codec.js";
+import { RTYPE } from "./types.js";
+/** Pre-configured DNS-over-TLS server entries. */
+export const DOT_SERVERS = {
+    cloudflare: { server: "1.1.1.1", servername: "cloudflare-dns.com" },
+    "cloudflare-ipv6": { server: "2606:4700:4700::1111", servername: "cloudflare-dns.com" },
+    google: { server: "8.8.8.8", servername: "dns.google" },
+    "google-ipv6": { server: "2001:4860:4860::8888", servername: "dns.google" },
+    quad9: { server: "9.9.9.9", servername: "dns.quad9.net" },
+    adguard: { server: "94.140.14.14", servername: "dns.adguard-dns.com" },
+};
+/** DNS-over-TLS resolver using a persistent TLS connection. */
+export class DoTResolver {
+    server;
+    port;
+    servername;
+    timeout;
+    insecure;
+    keepAlive;
+    socket = null;
+    connected = false;
+    /**
+     * Create a new DoT resolver.
+     *
+     * @param {DoTConfig} [config] - DoT connection configuration.
+     */
+    constructor(config) {
+        this.server = config?.server ?? "1.1.1.1";
+        this.port = config?.port ?? 853;
+        this.servername = config?.servername ?? "cloudflare-dns.com";
+        this.timeout = config?.timeout ?? 5000;
+        this.insecure = config?.insecure ?? false;
+        this.keepAlive = config?.keepAlive ?? false;
+    }
+    /**
+     * Resolve a domain name to DNS records over TLS.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @param {RTYPEValue} [type] - Numeric record type (defaults to A).
+     * @returns {Promise<DNSRecord[]>} Array of parsed DNS records.
+     */
+    async resolve(name, type = RTYPE.A) {
+        const queryBuf = buildDNSQuery(name, type);
+        const framed = Buffer.allocUnsafe(2 + queryBuf.length);
+        framed.writeUInt16BE(queryBuf.length, 0);
+        queryBuf.copy(framed, 2);
+        const responseData = await this.send(framed);
+        if (responseData.length < 2) {
+            throw new Error("DoT response too short");
+        }
+        const msgLen = responseData.readUInt16BE(0);
+        const dnsMsg = responseData.subarray(2, 2 + msgLen);
+        return parseDNSResponse(dnsMsg);
+    }
+    /**
+     * Resolve a domain name to IPv4 addresses.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @returns {Promise<string[]>} Array of IPv4 address strings.
+     */
+    async resolve4(name) {
+        const records = await this.resolve(name, RTYPE.A);
+        return records.filter((r) => r.type === RTYPE.A && r.data.length === 4).map((r) => `${r.data[0]}.${r.data[1]}.${r.data[2]}.${r.data[3]}`);
+    }
+    /**
+     * Resolve a domain name to IPv6 addresses.
+     *
+     * @param {string} name - Domain name to resolve.
+     * @returns {Promise<string[]>} Array of IPv6 address strings.
+     */
+    async resolve6(name) {
+        const records = await this.resolve(name, RTYPE.AAAA);
+        return records
+            .filter((r) => r.type === RTYPE.AAAA && r.data.length === 16)
+            .map((r) => {
+            const parts = [];
+            for (let i = 0; i < 16; i += 2) {
+                parts.push(r.data.readUInt16BE(i).toString(16));
+            }
+            return parts.join(":");
+        });
+    }
+    /** Close the underlying TLS socket and release resources. */
+    close() {
+        if (this.socket) {
+            this.socket.destroy();
+            this.socket = null;
+            this.connected = false;
+        }
+    }
+    async send(data) {
+        const socket = await this.getSocket();
+        return new Promise((resolve, reject) => {
+            let timer;
+            let response = Buffer.alloc(0);
+            const cleanup = () => {
+                if (timer)
+                    clearTimeout(timer);
+                socket.removeListener("data", onData);
+                socket.removeListener("error", onError);
+            };
+            const onData = (chunk) => {
+                response = Buffer.concat([response, chunk]);
+                if (response.length >= 2) {
+                    const expectedLen = response.readUInt16BE(0) + 2;
+                    if (response.length >= expectedLen) {
+                        cleanup();
+                        if (!this.keepAlive) {
+                            socket.destroy();
+                            this.socket = null;
+                            this.connected = false;
+                        }
+                        resolve(response);
+                    }
+                }
+            };
+            const onError = (err) => {
+                cleanup();
+                this.socket = null;
+                this.connected = false;
+                reject(err);
+            };
+            timer = setTimeout(() => {
+                cleanup();
+                if (!this.keepAlive) {
+                    socket.destroy();
+                    this.socket = null;
+                    this.connected = false;
+                }
+                reject(new Error("DoT query timed out"));
+            }, this.timeout);
+            socket.on("data", onData);
+            socket.on("error", onError);
+            socket.write(data);
+        });
+    }
+    async getSocket() {
+        if (this.socket && this.connected) {
+            return this.socket;
+        }
+        return new Promise((resolve, reject) => {
+            const socket = tls.connect({
+                host: this.server,
+                port: this.port,
+                servername: this.servername,
+                rejectUnauthorized: !this.insecure,
+                ALPNProtocols: ["dot"],
+            }, () => {
+                this.socket = socket;
+                this.connected = true;
+                resolve(socket);
+            });
+            socket.once("error", (err) => {
+                this.socket = null;
+                this.connected = false;
+                reject(err);
+            });
+            socket.setTimeout(this.timeout, () => {
+                socket.destroy();
+                reject(new Error("DoT connection timed out"));
+            });
+        });
+    }
+}
+//# sourceMappingURL=dot-resolver.js.map

package/dist/dns/dot-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dot-resolver.js","sourceRoot":"","sources":["../../src/dns/dot-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAkB,MAAM,YAAY,CAAC;AAoBnD,kDAAkD;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE;IACnE,iBAAiB,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,oBAAoB,EAAE;IACvF,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE;IACvD,aAAa,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,YAAY,EAAE;IAC3E,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE;IACzD,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE;CAC9D,CAAC;AAEX,+DAA+D;AAC/D,MAAM,OAAO,WAAW;IACL,MAAM,CAAS;IACf,IAAI,CAAS;IACb,UAAU,CAAS;IACnB,OAAO,CAAS;IAChB,QAAQ,CAAU;IAClB,SAAS,CAAU;IAC5B,MAAM,GAAyB,IAAI,CAAC;IACpC,SAAS,GAAG,KAAK,CAAC;IAE1B;;;;OAIG;IACH,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,SAAS,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,oBAAoB,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAmB,KAAK,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAEzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAEpD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5I,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC;aAC5D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,6DAA6D;IAC7D,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEtC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,KAAgD,CAAC;YACrD,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAE/B,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC,CAAC;YAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC/B,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;gBAE5C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBACzB,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACjD,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;wBACnC,OAAO,EAAE,CAAC;wBACV,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;4BACpB,MAAM,CAAC,OAAO,EAAE,CAAC;4BACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;4BACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;wBACzB,CAAC;wBACD,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC7B,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YAEF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACpB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACzB,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC3C,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAEjB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CACxB;gBACE,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,kBAAkB,EAAE,CAAC,IAAI,CAAC,QAAQ;gBAClC,aAAa,EAAE,CAAC,KAAK,CAAC;aACvB,EACD,GAAG,EAAE;gBACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CACF,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/dns/https-rr.d.ts

@@ -1,51 +1,40 @@
 import { type SVCBRecord, type DoHConfig, type ResolvedAddress } from "./types.js";
-/**
- * Result of an HTTPS-RR lookup, combining SVCB records with address hints.
- */
+import { type Logger } from "../utils/logger.js";
+/** Resolved HTTPS resource record data including ECH, ALPN, and address hints. */
 export interface HTTPSRRResult {
-    /** Parsed SVCB/HTTPS records, sorted by priority (lowest first). */
+    /** All SVCB records returned by the query. */
     svcb: SVCBRecord[];
-    /** ECH config list from the highest-priority record that has one. */
+    /** Encrypted Client Hello configuration list, if present. */
     echConfigList?: Buffer;
-    /** ALPN protocols from the highest-priority ServiceMode record. */
+    /** Advertised ALPN protocol identifiers from the best record. */
     alpn?: string[];
-    /** IP address hints extracted from SVCB records + A/AAAA. */
+    /** IPv4 and IPv6 address hints extracted from service records. */
     addresses: ResolvedAddress[];
-    /** Port override from the SVCB record, if any. */
+    /** Alternate port from the highest-priority service record. */
     port?: number;
 }
-/**
- * Resolver for HTTPS/SVCB DNS Resource Records (RFC 9460).
- *
- * Supports two modes:
- * 1. **System DNS** — Uses `node:dns` (resolveAny or raw query).
- * 2. **DoH** — Uses a DoHResolver for encrypted HTTPS-RR queries.
- */
+/** Resolver for HTTPS/SVCB resource records via DoH or the system resolver. */
 export declare class HTTPSRRResolver {
     private readonly dohResolver?;
     private readonly systemResolver;
-    constructor(dohConfig?: DoHConfig);
+    private readonly logger;
     /**
-     * Queries HTTPS records for a hostname and parses the results.
+     * Create a new HTTPS RR resolver.
      *
-     * @param hostname The domain to look up HTTPS records for.
-     * @param signal   Optional AbortSignal for cancellation.
-     * @returns Parsed HTTPS-RR result with SVCB params, or null if no records found.
+     * @param {DoHConfig} [dohConfig] - Optional DoH configuration; falls back to system DNS when omitted.
+     * @param {Logger} [logger] - Optional logger; falls back to the default logger.
      */
-    resolve(hostname: string, signal?: AbortSignal): Promise<HTTPSRRResult | null>;
+    constructor(dohConfig?: DoHConfig, logger?: Logger);
     /**
-     * Resolves HTTPS records via DoH.
+     * Resolve HTTPS resource records for a hostname.
+     *
+     * @param {string} hostname - Domain name to query.
+     * @param {AbortSignal} [signal] - Optional abort signal.
+     * @returns {Promise<HTTPSRRResult|null>} Parsed HTTPS RR result, or `null` if no service records are found.
      */
+    resolve(hostname: string, signal?: AbortSignal): Promise<HTTPSRRResult | null>;
     private resolveViaDoH;
-    /**
-     * Resolves HTTPS records via the system DNS resolver.
-     * Uses raw DNS query + decode since node:dns doesn't natively support type 65.
-     */
     private resolveViaSystem;
-    /**
-     * Parses a native Node.js HTTPS DNS record into our SVCBRecord format.
-     * Node.js 22+ may return HTTPS records with a specific structure.
-     */
     private parseNativeHTTPSRecord;
 }
 //# sourceMappingURL=https-rr.d.ts.map

package/dist/dns/https-rr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"https-rr.d.ts","sourceRoot":"","sources":["../../src/dns/https-rr.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAS,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAE1F;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,6DAA6D;IAC7D,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAW;gBAE9B,SAAS,CAAC,EAAE,SAAS;IAOjC;;;;;;OAMG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA+CpF;;OAEG;YACW,aAAa;IAK3B;;;OAGG;YACW,gBAAgB;IAU9B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAc/B"}
+{"version":3,"file":"https-rr.d.ts","sourceRoot":"","sources":["../../src/dns/https-rr.ts"],"names":[],"mappings":"AAGA,OAAO,EAAS,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1F,OAAO,EAAE,KAAK,MAAM,EAAoB,MAAM,oBAAoB,CAAC;AAYnE,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,kEAAkE;IAClE,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,+EAA+E;AAC/E,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAW;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC;;;;;OAKG;gBACS,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM;IAQlD;;;;;;OAMG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;YAgDtE,aAAa;YAKb,gBAAgB;IAa9B,OAAO,CAAC,sBAAsB;CAc/B"}

package/dist/dns/https-rr.js

@@ -1,43 +1,32 @@
-/**
- * HTTPS Resource Record resolver (RFC 9460).
- *
- * Queries HTTPS/SVCB DNS records to discover:
- * - ECH (Encrypted Client Hello) configuration keys
- * - ALPN protocol hints (e.g. h2, h3)
- * - IP address hints for faster connection setup
- * - Port overrides
- *
- * Can use either the system DNS resolver (via `node:dns`) or a DoH
- * resolver for encrypted queries.
- *
- * @see https://datatracker.ietf.org/doc/html/rfc9460
- */
 import { Resolver } from "node:dns/promises";
 import { DoHResolver } from "./doh-resolver.js";
 import { parseSVCBRecord } from "./codec.js";
 import { RTYPE } from "./types.js";
-/**
- * Resolver for HTTPS/SVCB DNS Resource Records (RFC 9460).
- *
- * Supports two modes:
- * 1. **System DNS** — Uses `node:dns` (resolveAny or raw query).
- * 2. **DoH** — Uses a DoHResolver for encrypted HTTPS-RR queries.
- */
+import { getDefaultLogger } from "../utils/logger.js";
+/** Resolver for HTTPS/SVCB resource records via DoH or the system resolver. */
 export class HTTPSRRResolver {
     dohResolver;
     systemResolver;
-    constructor(dohConfig) {
+    logger;
+    /**
+     * Create a new HTTPS RR resolver.
+     *
+     * @param {DoHConfig} [dohConfig] - Optional DoH configuration; falls back to system DNS when omitted.
+     * @param {Logger} [logger] - Optional logger; falls back to the default logger.
+     */
+    constructor(dohConfig, logger) {
         if (dohConfig) {
             this.dohResolver = new DoHResolver(dohConfig);
         }
         this.systemResolver = new Resolver();
+        this.logger = logger ?? getDefaultLogger();
     }
     /**
-     * Queries HTTPS records for a hostname and parses the results.
+     * Resolve HTTPS resource records for a hostname.
      *
-     * @param hostname The domain to look up HTTPS records for.
-     * @param signal   Optional AbortSignal for cancellation.
-     * @returns Parsed HTTPS-RR result with SVCB params, or null if no records found.
+     * @param {string} hostname - Domain name to query.
+     * @param {AbortSignal} [signal] - Optional abort signal.
+     * @returns {Promise<HTTPSRRResult|null>} Parsed HTTPS RR result, or `null` if no service records are found.
      */
     async resolve(hostname, signal) {
         try {
@@ -77,35 +66,28 @@ export class HTTPSRRResolver {
                 port: best.port,
             };
         }
-        catch {
+        catch (err) {
+            this.logger.debug("HTTPS RR resolution failed", err instanceof Error ? err.message : String(err));
             return null;
         }
     }
-    /**
-     * Resolves HTTPS records via DoH.
-     */
     async resolveViaDoH(hostname, signal) {
         const records = await this.dohResolver.query(hostname, "HTTPS", signal);
         return records.filter((r) => r.type === RTYPE.HTTPS || r.type === RTYPE.SVCB).map((r) => parseSVCBRecord(r.data));
     }
-    /**
-     * Resolves HTTPS records via the system DNS resolver.
-     * Uses raw DNS query + decode since node:dns doesn't natively support type 65.
-     */
     async resolveViaSystem(hostname) {
         try {
-            const results = await this.systemResolver.resolve(hostname, "HTTPS").catch(() => []);
+            const resolver = this.systemResolver;
+            const results = await resolver.resolve(hostname, "HTTPS").catch(() => []);
             if (Array.isArray(results) && results.length > 0) {
                 return results.map((r) => this.parseNativeHTTPSRecord(r));
             }
         }
-        catch { }
+        catch (err) {
+            this.logger.debug("System HTTPS RR lookup unsupported", err instanceof Error ? err.message : String(err));
+        }
         return [];
     }
-    /**
-     * Parses a native Node.js HTTPS DNS record into our SVCBRecord format.
-     * Node.js 22+ may return HTTPS records with a specific structure.
-     */
     parseNativeHTTPSRecord(record) {
         const result = {
             priority: record.priority ?? 0,

package/dist/dns/https-rr.js.map

@@ -1 +1 @@
-{"version":3,"file":"https-rr.js","sourceRoot":"","sources":["../../src/dns/https-rr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAmC,eAAe,EAAiC,MAAM,YAAY,CAAC;AAC7G,OAAO,EAAE,KAAK,EAAyD,MAAM,YAAY,CAAC;AAkB1F;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IACT,WAAW,CAAe;IAC1B,cAAc,CAAW;IAE1C,YAAY,SAAqB;QAC/B,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,QAAQ,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,MAAoB;QAClD,IAAI,CAAC;YACH,IAAI,WAAyB,CAAC;YAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE1C,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAEpD,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE7C,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;YAEhC,MAAM,SAAS,GAAsB,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;gBACjC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;wBACjC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;wBACjC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAE9D,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,aAAa,EAAE,SAAS,EAAE,aAAa;gBACvC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS;gBACT,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,MAAoB;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAO,IAAI,CAAC,cAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAAC,MAAW;QACxC,MAAM,MAAM,GAAe;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;SAC5B,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,GAAG;YAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEpH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"https-rr.js","sourceRoot":"","sources":["../../src/dns/https-rr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAyD,MAAM,YAAY,CAAC;AAC1F,OAAO,EAAe,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AA0BnE,+EAA+E;AAC/E,MAAM,OAAO,eAAe;IACT,WAAW,CAAe;IAC1B,cAAc,CAAW;IACzB,MAAM,CAAS;IAEhC;;;;;OAKG;IACH,YAAY,SAAqB,EAAE,MAAe;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,MAAoB;QAClD,IAAI,CAAC;YACH,IAAI,WAAyB,CAAC;YAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE1C,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAEpD,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE7C,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;YAEhC,MAAM,SAAS,GAAsB,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;gBACjC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;wBACjC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;wBACjC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAE9D,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,aAAa,EAAE,SAAS,EAAE,aAAa;gBACvC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS;gBACT,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,MAAoB;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,cAA8F,CAAC;YACrH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAe,CAAC,CAAC;YACvF,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAsB,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,sBAAsB,CAAC,MAAyB;QACtD,MAAM,MAAM,GAAe;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;SAC5B,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,GAAG;YAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEpH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/dns/types.d.ts

@@ -1,45 +1,35 @@
-/**
- * Type definitions for the DNS resolution subsystem, including DNS-over-HTTPS
- * (RFC 8484), HTTPS/SVCB resource records (RFC 9460), and resolver interfaces.
- */
-/**
- * A resolved IP address entry.
- */
+/** Resolved IP address with protocol family. */
 export interface ResolvedAddress {
+    /** IP address string. */
     address: string;
+    /** Internet protocol family — 4 for IPv4, 6 for IPv6. */
     family: 4 | 6;
 }
-/**
- * DNS query types used by the resolver.
- */
+/** Supported DNS resource record type names. */
 export type DNSRecordType = "A" | "AAAA" | "HTTPS" | "SVCB";
-/**
- * A parsed DNS resource record.
- */
+/** Parsed DNS resource record. */
 export interface DNSRecord {
+    /** Domain name the record belongs to. */
     name: string;
+    /** Numeric record type (matches RTYPE constants). */
     type: number;
+    /** Time-to-live in seconds. */
     ttl: number;
+    /** Raw record data. */
     data: Buffer;
 }
-/**
- * Wire-format DNS record type numbers.
- */
+/** Numeric DNS record type constants. */
 export declare const RTYPE: {
     readonly A: 1;
     readonly AAAA: 28;
     readonly HTTPS: 65;
     readonly SVCB: 64;
 };
-/**
- * Wire-format DNS class numbers.
- */
+/** DNS record class constants. */
 export declare const RCLASS: {
     readonly IN: 1;
 };
-/**
- * SvcParam keys defined in RFC 9460 §14.3.
- */
+/** SVCB/HTTPS service parameter key constants. */
 export declare const SvcParamKey: {
     readonly MANDATORY: 0;
     readonly ALPN: 1;
@@ -48,63 +38,45 @@ export declare const SvcParamKey: {
     readonly IPV4HINT: 4;
     readonly ECH: 5;
     readonly IPV6HINT: 6;
-    /** draft-ietf-dnsop-svcb-https §14 — DNS-over-HTTPS path template */
     readonly DOHPATH: 7;
 };
-/**
- * Parsed HTTPS/SVCB record service parameters (RFC 9460).
- */
+/** Parsed SVCB/HTTPS DNS resource record. */
 export interface SVCBRecord {
-    /** SvcPriority — 0 = AliasMode, >0 = ServiceMode. */
+    /** Record priority — 0 indicates an alias record. */
     priority: number;
-    /** TargetName — the target domain (empty = use record owner). */
+    /** Target domain name for the service. */
     target: string;
-    /** ALPN protocol identifiers (e.g. ["h2", "h3"]). */
+    /** Supported ALPN protocol identifiers. */
     alpn?: string[];
-    /** TCP port override. */
+    /** Alternate port for the service. */
     port?: number;
-    /** IPv4 address hints. */
+    /** IPv4 address hints for the service. */
     ipv4Hints?: string[];
-    /** IPv6 address hints. */
+    /** IPv6 address hints for the service. */
     ipv6Hints?: string[];
-    /** ECH configuration (raw bytes). */
+    /** Encrypted Client Hello configuration list. */
     echConfigList?: Buffer;
-    /** Whether no-default-alpn is set. */
+    /** Whether the default ALPN should not be used. */
     noDefaultAlpn?: boolean;
 }
-/**
- * Configuration options for the DoH resolver.
- */
+/** Configuration for a DNS-over-HTTPS resolver. */
 export interface DoHConfig {
-    /** DoH server URL (e.g. "https://1.1.1.1/dns-query"). */
+    /** DoH server URL (e.g. "https://cloudflare-dns.com/dns-query"). */
     server: string;
-    /**
-     * HTTP method for DoH queries.
-     * - `"GET"`: DNS wire-format base64url-encoded in `?dns=` query parameter.
-     * - `"POST"`: DNS wire-format in request body.
-     * @default "POST"
-     */
+    /** HTTP method to use for queries. */
     method?: "GET" | "POST";
-    /** Timeout in ms for each DoH query. @default 5000 */
+    /** Query timeout in milliseconds. */
     timeout?: number;
-    /**
-     * Whether to bootstrap the DoH server address via system DNS if the
-     * server URL uses a hostname instead of an IP.
-     * @default true
-     */
+    /** Whether to use system DNS to bootstrap the DoH server address. */
     bootstrap?: boolean;
+    /** DNS cache configuration. */
+    cache?: import("./cache.js").DNSCacheConfig;
 }
-/**
- * Combined DNS configuration for the library.
- */
+/** Top-level DNS resolver configuration. */
 export interface DNSConfig {
-    /** DoH resolver configuration. When set, DNS queries use DNS-over-HTTPS. */
+    /** DNS-over-HTTPS resolver configuration. */
     doh?: DoHConfig;
-    /**
-     * Whether to query HTTPS/SVCB records alongside A/AAAA.
-     * Enables ECH key discovery, ALPN hints, and IP hints.
-     * @default false
-     */
+    /** Whether to query HTTPS resource records for ECH and ALPN hints. */
     httpsRR?: boolean;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/dns/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/dns/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;CACf;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,GAAG,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,eAAO,MAAM,KAAK;;;;;CAKR,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,MAAM;;CAET,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;IAQtB,qEAAqE;;CAE7D,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,qCAAqC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/dns/types.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG,GAAG,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5D,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yCAAyC;AACzC,eAAO,MAAM,KAAK;;;;;CAKR,CAAC;AAEX,kCAAkC;AAClC,eAAO,MAAM,MAAM;;CAET,CAAC;AAEX,kDAAkD;AAClD,eAAO,MAAM,WAAW;;;;;;;;;CASd,CAAC;AAEX,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC;CAC7C;AAED,4CAA4C;AAC5C,MAAM,WAAW,SAAS;IACxB,6CAA6C;IAC7C,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB"}

package/dist/dns/types.js

@@ -1,25 +1,15 @@
-/**
- * Type definitions for the DNS resolution subsystem, including DNS-over-HTTPS
- * (RFC 8484), HTTPS/SVCB resource records (RFC 9460), and resolver interfaces.
- */
-/**
- * Wire-format DNS record type numbers.
- */
+/** Numeric DNS record type constants. */
 export const RTYPE = {
     A: 1,
     AAAA: 28,
     HTTPS: 65,
     SVCB: 64,
 };
-/**
- * Wire-format DNS class numbers.
- */
+/** DNS record class constants. */
 export const RCLASS = {
     IN: 1,
 };
-/**
- * SvcParam keys defined in RFC 9460 §14.3.
- */
+/** SVCB/HTTPS service parameter key constants. */
 export const SvcParamKey = {
     MANDATORY: 0,
     ALPN: 1,
@@ -28,7 +18,6 @@ export const SvcParamKey = {
     IPV4HINT: 4,
     ECH: 5,
     IPV6HINT: 6,
-    /** draft-ietf-dnsop-svcb-https §14 — DNS-over-HTTPS path template */
     DOHPATH: 7,
 };
 //# sourceMappingURL=types.js.map

package/dist/dns/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/dns/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyBH;;GAEG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,CAAC,EAAE,CAAC;IACJ,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;CACA,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,EAAE,EAAE,CAAC;CACG,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,SAAS,EAAE,CAAC;IACZ,IAAI,EAAE,CAAC;IACP,eAAe,EAAE,CAAC;IAClB,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,GAAG,EAAE,CAAC;IACN,QAAQ,EAAE,CAAC;IACX,qEAAqE;IACrE,OAAO,EAAE,CAAC;CACF,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/dns/types.ts"],"names":[],"mappings":"AAuBA,yCAAyC;AACzC,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,CAAC,EAAE,CAAC;IACJ,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;CACA,CAAC;AAEX,kCAAkC;AAClC,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,EAAE,EAAE,CAAC;CACG,CAAC;AAEX,kDAAkD;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,SAAS,EAAE,CAAC;IACZ,IAAI,EAAE,CAAC;IACP,eAAe,EAAE,CAAC;IAClB,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,GAAG,EAAE,CAAC;IACN,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;CACF,CAAC"}

package/dist/fingerprints/akamai.d.ts

@@ -1,17 +1,9 @@
 import type { H2Profile } from "./types.js";
 /**
- * Computes the Akamai HTTP/2 fingerprint string for a browser profile. The
- * string encodes the SETTINGS frame parameters, connection window update,
- * optional PRIORITY frame configuration, and pseudo-header ordering,
- * separated by pipe characters (`|`).
+ * Generate an Akamai HTTP/2 fingerprint string.
  *
- * @param {H2Profile} profile - The HTTP/2 profile to fingerprint.
- * @returns {string} The Akamai fingerprint string in the format
- *   `"S1:V1;S2:V2|WU|P1:E1:D1:W1,...|:method,:path,..."`.
- *
- * @example
- * const fp = akamaiFingerprint(chromeLatest.h2);
- * // => "1:65536;2:0;3:1000;4:6291456;6:262144|15663105|0:0:0:255|m,p,a,s"
+ * @param {H2Profile} profile - HTTP/2 connection profile.
+ * @returns {string} Pipe-separated fingerprint of settings, window update, priority frames, and pseudo-header order.
  */
 export declare function akamaiFingerprint(profile: H2Profile): string;
 //# sourceMappingURL=akamai.d.ts.map

package/dist/fingerprints/akamai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"akamai.d.ts","sourceRoot":"","sources":["../../src/fingerprints/akamai.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAU5D"}
+{"version":3,"file":"akamai.d.ts","sourceRoot":"","sources":["../../src/fingerprints/akamai.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAU5D"}

package/dist/fingerprints/akamai.js

@@ -1,16 +1,8 @@
 /**
- * Computes the Akamai HTTP/2 fingerprint string for a browser profile. The
- * string encodes the SETTINGS frame parameters, connection window update,
- * optional PRIORITY frame configuration, and pseudo-header ordering,
- * separated by pipe characters (`|`).
+ * Generate an Akamai HTTP/2 fingerprint string.
  *
- * @param {H2Profile} profile - The HTTP/2 profile to fingerprint.
- * @returns {string} The Akamai fingerprint string in the format
- *   `"S1:V1;S2:V2|WU|P1:E1:D1:W1,...|:method,:path,..."`.
- *
- * @example
- * const fp = akamaiFingerprint(chromeLatest.h2);
- * // => "1:65536;2:0;3:1000;4:6291456;6:262144|15663105|0:0:0:255|m,p,a,s"
+ * @param {H2Profile} profile - HTTP/2 connection profile.
+ * @returns {string} Pipe-separated fingerprint of settings, window update, priority frames, and pseudo-header order.
  */
 export function akamaiFingerprint(profile) {
     const settings = profile.settings.map((s) => `${s.id}:${s.value}`).join(";");

package/dist/fingerprints/akamai.js.map

@@ -1 +1 @@
-{"version":3,"file":"akamai.js","sourceRoot":"","sources":["../../src/fingerprints/akamai.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAkB;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE7E,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAExI,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO,GAAG,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;AACnD,CAAC"}
+{"version":3,"file":"akamai.js","sourceRoot":"","sources":["../../src/fingerprints/akamai.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAkB;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE7E,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAExI,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO,GAAG,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;AACnD,CAAC"}