recker 1.0.15-next.0dab95d → 1.0.15-next.0eabd39

package/dist/utils/doh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doh.d.ts","sourceRoot":"","sources":["../../src/utils/doh.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAsBrE,wBAAgB,eAAe,CAAC,QAAQ,GAAE,WAA0B,IAGpD,UAAU,MAAM,EAAE,MAAM,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,mBAwElH"}
+{"version":3,"file":"doh.d.ts","sourceRoot":"","sources":["../../src/utils/doh.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAsBrE,wBAAgB,eAAe,CAAC,QAAQ,GAAE,WAA0B,IAGpD,UAAU,MAAM,EAAE,MAAM,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,mBA+DlH"}

package/dist/utils/doh.js

@@ -1,5 +1,5 @@
 import { request } from 'undici';
-import { ReckerError } from '../core/errors.js';
+import { ProtocolError, NotFoundError } from '../core/errors.js';
 const PROVIDERS = {
     cloudflare: 'https://1.1.1.1/dns-query',
     google: 'https://8.8.8.8/resolve',
@@ -17,29 +17,26 @@ export function createDoHLookup(provider = 'cloudflare') {
                 headers: { 'Accept': 'application/dns-json' }
             });
             if (statusCode !== 200) {
-                throw new ReckerError(`DoH request failed with status ${statusCode}`, undefined, undefined, [
-                    'Verify the DNS-over-HTTPS endpoint URL.',
-                    'Check network connectivity and TLS settings for the DoH provider.',
-                    'Retry the request; some providers throttle bursts.'
-                ]);
+                throw new ProtocolError(`DoH request failed with status ${statusCode}`, {
+                    protocol: 'dns',
+                    code: statusCode,
+                    phase: 'doh-request',
+                    retriable: statusCode >= 500 || statusCode === 429,
+                });
             }
             const data = await body.json();
             if (data.Status !== 0 || !data.Answer || data.Answer.length === 0) {
-                return callback(new ReckerError(`DNS lookup failed for ${hostname}`, undefined, undefined, [
-                    'Confirm the hostname is correct.',
-                    'Check that the DoH provider is reachable.',
-                    'Retry or fall back to system DNS if the provider is down.'
-                ]), '', 4);
+                return callback(new NotFoundError(`DNS lookup failed for ${hostname}`, {
+                    resource: hostname,
+                }), '', 4);
             }
             const record = data.Answer.find(r => r.type === 1);
             if (record) {
                 return callback(null, record.data, 4);
             }
-            callback(new ReckerError(`No A record found for ${hostname}`, undefined, undefined, [
-                'Verify the domain has an A record (or use AAAA for IPv6).',
-                'Check DNS propagation if the record was recently added.',
-                'Try an alternate resolver to rule out stale caches.'
-            ]), '', 4);
+            callback(new NotFoundError(`No A record found for ${hostname}`, {
+                resource: `A:${hostname}`,
+            }), '', 4);
         }
         catch (err) {
             callback(err, '', 0);

package/dist/utils/download.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../src/utils/download.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG1E,MAAM,WAAW,qBAAqB;IAKpC,MAAM,CAAC,EAAE,OAAO,CAAC;IAKjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAKhE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAK9B,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,oBAAoB,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAyCzB"}
+{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../src/utils/download.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG1E,MAAM,WAAW,qBAAqB;IAKpC,MAAM,CAAC,EAAE,OAAO,CAAC;IAKjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAKhE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAK9B,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,oBAAoB,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAuCzB"}

package/dist/utils/download.js

@@ -1,6 +1,6 @@
 import { createWriteStream, existsSync, statSync } from 'node:fs';
 import { pipeline } from 'node:stream/promises';
-import { ReckerError } from '../core/errors.js';
+import { DownloadError, StreamError } from '../core/errors.js';
 export async function downloadToFile(client, url, destination, options = {}) {
     const resumeEnabled = options.resume === true;
     const existingSize = resumeEnabled && existsSync(destination) ? statSync(destination).size : 0;
@@ -15,11 +15,11 @@ export async function downloadToFile(client, url, destination, options = {}) {
     });
     const shouldAppend = resumeEnabled && existingSize > 0 && response.status === 206;
     if (resumeEnabled && existingSize > 0 && response.status === 416) {
-        throw new ReckerError('Requested range not satisfiable for resume download.', undefined, response, [
-            'Verify the destination file size matches the server content.',
-            'Delete the local file and retry without resume.',
-            'Ensure the server supports Range requests for this resource.'
-        ]);
+        throw new DownloadError('Requested range not satisfiable for resume download.', {
+            url,
+            statusCode: response.status,
+            retriable: false,
+        });
     }
     const bytesWritten = await streamToFile(response, destination, shouldAppend);
     return {
@@ -31,11 +31,10 @@ export async function downloadToFile(client, url, destination, options = {}) {
 async function streamToFile(response, destination, append) {
     const nodeStream = response.toNodeStream();
     if (!nodeStream) {
-        throw new ReckerError('Response has no body to write', undefined, response, [
-            'Ensure the request returned a body (avoid HEAD/204).',
-            'Check upstream for empty responses or errors.',
-            'Retry the download if the connection was interrupted.'
-        ]);
+        throw new StreamError('Response has no body to write', {
+            streamType: 'download',
+            retriable: true,
+        });
     }
     const writer = createWriteStream(destination, { flags: append ? 'a' : 'w' });
     await pipeline(nodeStream, writer);

package/dist/utils/rdap.d.ts

@@ -1,6 +1,7 @@
 import { Client } from '../core/client.js';
 export interface RDAPResult {
     handle?: string;
+    ldhName?: string;
     status?: string[];
     events?: Array<{
         eventAction: string;
@@ -11,7 +12,15 @@ export interface RDAPResult {
         roles?: string[];
         vcardArray?: any[];
     }>;
+    nameservers?: Array<{
+        ldhName: string;
+    }>;
+    secureDNS?: {
+        delegationSigned: boolean;
+    };
     [key: string]: any;
 }
 export declare function rdap(client: Client, query: string): Promise<RDAPResult>;
+export declare function supportsRDAP(tld: string): boolean;
+export declare function getNoRDAPTLDs(): string[];
 //# sourceMappingURL=rdap.d.ts.map

package/dist/utils/rdap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rdap.d.ts","sourceRoot":"","sources":["../../src/utils/rdap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAa3C,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5E,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,wBAAsB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAiC7E"}
+{"version":3,"file":"rdap.d.ts","sourceRoot":"","sources":["../../src/utils/rdap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAqC3C,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5E,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE;QAAE,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AA4ED,wBAAsB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA+C7E;AAKD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjD;AAKD,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAExC"}

package/dist/utils/rdap.js

@@ -1,32 +1,101 @@
+import { NotFoundError, UnsupportedError } from '../core/errors.js';
+const IANA_RDAP_BOOTSTRAP = 'https://data.iana.org/rdap/dns.json';
+let ianaBootstrapCache = null;
+let ianaBootstrapLastFetch = 0;
+const IANA_CACHE_TTL = 24 * 60 * 60 * 1000;
 const RDAP_SERVERS = {
     'com': 'https://rdap.verisign.com/com/v1/',
     'net': 'https://rdap.verisign.com/net/v1/',
     'org': 'https://rdap.publicinterestregistry.net/rdap/org/',
-    'io': 'https://rdap.nic.io/domain/',
     'br': 'https://rdap.registro.br/',
-    'default': 'https://rdap.org/domain/'
+    'dev': 'https://rdap.nic.google/',
+    'app': 'https://rdap.nic.google/',
+    'xyz': 'https://rdap.centralnic.com/xyz/',
+    'info': 'https://rdap.afilias.net/rdap/info/',
+    'me': 'https://rdap.nic.me/',
+    'co': 'https://rdap.nic.co/',
+    'uk': 'https://rdap.nominet.uk/uk/',
+    'de': 'https://rdap.denic.de/',
+    'eu': 'https://rdap.eurid.eu/',
+    'nl': 'https://rdap.sidn.nl/',
+    'au': 'https://rdap.auda.org.au/',
 };
+const NO_RDAP_TLDS = new Set([
+    'io', 'ai', 'gg', 'im', 'je', 'sh', 'ac', 'cx', 'gs', 'ms', 'nf', 'pn', 'tc', 'vg',
+]);
+async function getIANABootstrap(client) {
+    const now = Date.now();
+    if (ianaBootstrapCache && (now - ianaBootstrapLastFetch) < IANA_CACHE_TTL) {
+        return ianaBootstrapCache;
+    }
+    try {
+        const data = await client.get(IANA_RDAP_BOOTSTRAP, { timeout: 5000 }).json();
+        const map = new Map();
+        for (const [tlds, servers] of data.services) {
+            const server = servers[0];
+            for (const tld of tlds) {
+                map.set(tld.toLowerCase(), server);
+            }
+        }
+        ianaBootstrapCache = map;
+        ianaBootstrapLastFetch = now;
+        return map;
+    }
+    catch {
+        return new Map();
+    }
+}
+async function getRDAPServer(client, tld) {
+    if (NO_RDAP_TLDS.has(tld)) {
+        return null;
+    }
+    if (RDAP_SERVERS[tld]) {
+        return RDAP_SERVERS[tld];
+    }
+    const bootstrap = await getIANABootstrap(client);
+    if (bootstrap.has(tld)) {
+        return bootstrap.get(tld);
+    }
+    return null;
+}
 export async function rdap(client, query) {
-    const isIp = /^\d+\.\d+\.\d+\.\d+$/.test(query);
+    const isIp = /^\d+\.\d+\.\d+\.\d+$/.test(query) || query.includes(':');
     let url;
     if (isIp) {
         url = `https://rdap.arin.net/registry/ip/${query}`;
     }
     else {
         const tld = query.split('.').pop()?.toLowerCase() || '';
-        const base = RDAP_SERVERS[tld] || RDAP_SERVERS['default'];
-        url = base.endsWith('/') ? `${base}domain/${query}` : `${base}/${query}`;
-        if (base.includes('/domain/')) {
-            url = `${base}${query}`;
+        const server = await getRDAPServer(client, tld);
+        if (!server) {
+            throw new UnsupportedError(`RDAP is not available for .${tld} domains. Use WHOIS instead: "rek whois ${query}"`, { feature: `rdap-${tld}` });
         }
+        const base = server.endsWith('/') ? server : `${server}/`;
+        url = `${base}domain/${query}`;
     }
     try {
-        return await client.get(url, { followRedirects: true }).json();
+        const result = await client.get(url, {
+            followRedirects: true,
+            timeout: 10000,
+            headers: {
+                'Accept': 'application/rdap+json, application/json',
+            }
+        }).json();
+        return result;
     }
     catch (error) {
         if (error.status === 404) {
-            throw new Error(`RDAP entry not found for ${query}`);
+            throw new NotFoundError(`RDAP entry not found for ${query}`, {
+                resource: query,
+            });
         }
         throw error;
     }
 }
+export function supportsRDAP(tld) {
+    const normalizedTld = tld.toLowerCase().replace(/^\./, '');
+    return !NO_RDAP_TLDS.has(normalizedTld);
+}
+export function getNoRDAPTLDs() {
+    return Array.from(NO_RDAP_TLDS);
+}

package/dist/utils/security-grader.d.ts

@@ -0,0 +1,47 @@
+export interface SecurityHeaderResult {
+    header: string;
+    value?: string;
+    status: 'pass' | 'warn' | 'fail';
+    score: number;
+    message: string;
+    recommendation?: string;
+}
+export interface CSPDirective {
+    name: string;
+    values: string[];
+    issues: string[];
+    severity: 'safe' | 'warn' | 'dangerous';
+}
+export interface CSPAnalysis {
+    raw: string;
+    directives: CSPDirective[];
+    issues: string[];
+    score: number;
+    hasUnsafeInline: boolean;
+    hasUnsafeEval: boolean;
+    hasWildcard: boolean;
+    missingDirectives: string[];
+}
+export interface SecurityReport {
+    grade: string;
+    score: number;
+    details: SecurityHeaderResult[];
+    csp?: CSPAnalysis;
+    summary: {
+        passed: number;
+        warnings: number;
+        failed: number;
+    };
+}
+export declare function analyzeCSP(cspValue: string): CSPAnalysis;
+export declare function generateRecommendedCSP(options?: {
+    strictMode?: boolean;
+    allowInlineStyles?: boolean;
+    trustedDomains?: string[];
+}): string;
+export declare function analyzeSecurityHeaders(headers: Headers): SecurityReport;
+export declare function quickSecurityCheck(headers: Headers): {
+    secure: boolean;
+    criticalIssues: string[];
+};
+//# sourceMappingURL=security-grader.d.ts.map

package/dist/utils/security-grader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-grader.d.ts","sourceRoot":"","sources":["../../src/utils/security-grader.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AA2CD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAmHxD;AAKD,wBAAgB,sBAAsB,CAAC,OAAO,GAAE;IAC9C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,GAAG,MAAM,CAiCd;AAkeD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,CA6DvE;AAKD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAgCA"}