recker 1.0.15-next.c7370be → 1.0.15-next.eb07368

package/dist/cli/index.js

@@ -279,6 +279,85 @@ complete -F _rek_completions rek
         const { openSearchPanel } = await import('./tui/search-panel.js');
         await openSearchPanel(query || undefined);
     });
+    program
+        .command('security')
+        .alias('headers')
+        .description('Analyze HTTP response headers for security best practices')
+        .argument('<url>', 'URL to analyze')
+        .action(async (url) => {
+        if (!url.startsWith('http'))
+            url = `https://${url}`;
+        const { createClient } = await import('../core/client.js');
+        const { analyzeSecurityHeaders } = await import('../utils/security-grader.js');
+        console.log(pc.gray(`Analyzing security headers for ${url}...`));
+        try {
+            const origin = new URL(url).origin;
+            const client = createClient({ baseUrl: origin });
+            const res = await client.get(url);
+            const report = analyzeSecurityHeaders(res.headers);
+            let gradeColor = pc.red;
+            if (report.grade.startsWith('A'))
+                gradeColor = pc.green;
+            if (report.grade.startsWith('B'))
+                gradeColor = pc.blue;
+            if (report.grade.startsWith('C'))
+                gradeColor = pc.yellow;
+            console.log(`
+${pc.bold(pc.cyan('🛡️  Security Headers Report'))}
+Grade: ${gradeColor(pc.bold(report.grade))}  (${report.score}/100)
+
+${pc.bold('Details:')}`);
+            report.details.forEach(item => {
+                const icon = item.status === 'pass' ? pc.green('✔') : item.status === 'warn' ? pc.yellow('⚠') : pc.red('✖');
+                const headerName = pc.bold(item.header);
+                const value = item.value ? pc.gray(`= ${item.value.length > 50 ? item.value.slice(0, 47) + '...' : item.value}`) : pc.gray('(missing)');
+                console.log(`  ${icon} ${headerName} ${value}`);
+                if (item.status !== 'pass') {
+                    console.log(`      ${pc.red('→')} ${item.message}`);
+                }
+            });
+            console.log('');
+        }
+        catch (error) {
+            console.error(pc.red(`Analysis failed: ${error.message}`));
+            process.exit(1);
+        }
+    });
+    program
+        .command('ip')
+        .description('Get IP address intelligence (Geo, ASN, ISP)')
+        .argument('<address>', 'IP address to lookup')
+        .action(async (address) => {
+        const { getIpInfo } = await import('../utils/ip-intel.js');
+        console.log(pc.gray(`Fetching intelligence for ${address}...`));
+        try {
+            const info = await getIpInfo(address);
+            if (info.bogon) {
+                console.log(pc.yellow(`\n⚠  ${address} is a Bogon/Private IP.`));
+                return;
+            }
+            console.log(`
+${pc.bold(pc.cyan('🌍 IP Intelligence Report'))}
+
+${pc.bold('Location:')}
+  ${pc.gray('City:')}      ${info.city || 'N/A'}
+  ${pc.gray('Region:')}    ${info.region || 'N/A'}
+  ${pc.gray('Country:')}   ${info.country || 'N/A'}
+  ${pc.gray('Timezone:')}  ${info.timezone || 'N/A'}
+  ${pc.gray('Coords:')}    ${info.loc ? pc.cyan(info.loc) : 'N/A'}
+
+${pc.bold('Network:')}
+  ${pc.gray('IP:')}        ${info.ip}
+  ${pc.gray('Hostname:')}  ${info.hostname || 'N/A'}
+  ${pc.gray('ASN/Org:')}   ${info.org || 'N/A'}
+  ${pc.gray('Anycast:')}   ${info.anycast ? pc.green('Yes') : pc.gray('No')}
+`);
+        }
+        catch (err) {
+            console.error(pc.red(`IP Lookup Failed: ${err.message}`));
+            process.exit(1);
+        }
+    });
     const dns = program.command('dns').description('DNS tools and diagnostics');
     dns
         .command('propagate')

package/dist/cli/tui/scroll-buffer.d.ts

@@ -36,7 +36,7 @@ export declare class ScrollBuffer extends EventEmitter {
         percent: number;
     };
 }
-export declare function parseScrollKey(data: Buffer): 'pageUp' | 'pageDown' | 'scrollUp' | 'scrollDown' | 'home' | 'end' | 'escape' | null;
+export declare function parseScrollKey(data: Buffer): 'pageUp' | 'pageDown' | 'scrollUp' | 'scrollDown' | 'home' | 'end' | 'quit' | null;
 export declare function parseMouseScroll(data: Buffer): 'scrollUp' | 'scrollDown' | null;
 export declare function enableMouseReporting(): void;
 export declare function disableMouseReporting(): void;

package/dist/cli/tui/scroll-buffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scroll-buffer.d.ts","sourceRoot":"","sources":["../../../src/cli/tui/scroll-buffer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,YAAa,SAAQ,YAAY;IAC5C,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,aAAa,CAA4C;IACjE,OAAO,CAAC,aAAa,CAAc;gBAEvB,OAAO,GAAE,mBAAwB;IAS7C,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAuB5B,KAAK,IAAI,IAAI;IAUb,IAAI,SAAS,IAAI,MAAM,CAEtB;IAKD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAKD,IAAI,YAAY,IAAI,OAAO,CAE1B;IAKD,QAAQ,CAAC,KAAK,GAAE,MAAU,GAAG,OAAO;IAcpC,UAAU,CAAC,KAAK,GAAE,MAAU,GAAG,OAAO;IAatC,MAAM,IAAI,OAAO;IAOjB,QAAQ,IAAI,OAAO;IAOnB,WAAW,IAAI,IAAI;IAOnB,cAAc,IAAI,IAAI;IAOtB,eAAe,IAAI,MAAM,EAAE;IAS3B,MAAM,IAAI,MAAM;IAsBhB,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAOrC,eAAe,IAAI,IAAI;IAcvB,cAAc,IAAI,IAAI;IAWtB,IAAI,YAAY,IAAI,OAAO,CAE1B;IAKD,KAAK,IAAI,IAAI;IASb,aAAa,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAOrE;AAKD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAyBjI;AAOD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,IAAI,CAqB/E;AAKD,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAKD,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}
+{"version":3,"file":"scroll-buffer.d.ts","sourceRoot":"","sources":["../../../src/cli/tui/scroll-buffer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,YAAa,SAAQ,YAAY;IAC5C,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,aAAa,CAA4C;IACjE,OAAO,CAAC,aAAa,CAAc;gBAEvB,OAAO,GAAE,mBAAwB;IAS7C,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAuB5B,KAAK,IAAI,IAAI;IAUb,IAAI,SAAS,IAAI,MAAM,CAEtB;IAKD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAKD,IAAI,YAAY,IAAI,OAAO,CAE1B;IAKD,QAAQ,CAAC,KAAK,GAAE,MAAU,GAAG,OAAO;IAcpC,UAAU,CAAC,KAAK,GAAE,MAAU,GAAG,OAAO;IAatC,MAAM,IAAI,OAAO;IAOjB,QAAQ,IAAI,OAAO;IAOnB,WAAW,IAAI,IAAI;IAOnB,cAAc,IAAI,IAAI;IAOtB,eAAe,IAAI,MAAM,EAAE;IAS3B,MAAM,IAAI,MAAM;IAsBhB,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAOrC,eAAe,IAAI,IAAI;IAcvB,cAAc,IAAI,IAAI;IAWtB,IAAI,YAAY,IAAI,OAAO,CAE1B;IAKD,KAAK,IAAI,IAAI;IASb,aAAa,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAOrE;AAKD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,CAyB/H;AAOD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,IAAI,CAqB/E;AAKD,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAKD,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}

package/dist/cli/tui/scroll-buffer.js

@@ -131,8 +131,8 @@ export function parseScrollKey(data) {
         return 'home';
     if (str === '\x1b[F' || str === '\x1b[4~' || str === '\x1bOF')
         return 'end';
-    if (str === '\x1b' || str === '\x1b\x1b')
-        return 'escape';
+    if (str === 'q' || str === 'Q')
+        return 'quit';
     return null;
 }
 export function parseMouseScroll(data) {

package/dist/cli/tui/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/cli/tui/shell.ts"],"names":[],"mappings":"AAsCA,qBAAa,QAAQ;IACnB,OAAO,CAAC,EAAE,CAAsB;IAChC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,YAAY,CAAkB;;YAgBxB,iBAAiB;IAe/B,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,SAAS;IAcJ,KAAK;IA8ClB,OAAO,CAAC,kBAAkB;IA2B1B,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,eAAe;IAmEvB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,gBAAgB;IA8BxB,OAAO,CAAC,MAAM;YAKA,aAAa;YAoMb,kBAAkB;YAkBlB,SAAS;YAkBT,WAAW;IA0DzB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,QAAQ;IAoCV,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM;IA6CnC,OAAO,CAAC,gBAAgB;IAqBxB,OAAO,CAAC,UAAU;YAeJ,cAAc;YAyEd,QAAQ;YA8GR,MAAM;YA2DN,MAAM;YA2EN,iBAAiB;YAuBjB,OAAO;YA+DP,OAAO;YA0CP,QAAQ;YAoER,SAAS;YAsCT,aAAa;YA8Bb,aAAa;YA+Bb,aAAa;YA6Bb,cAAc;YAkCd,eAAe;YA+Ef,gBAAgB;YAmEhB,YAAY;YAiEZ,mBAAmB;YAsFnB,QAAQ;YA0FR,YAAY;YAoCZ,YAAY;YA6CZ,WAAW;IA6CzB,OAAO,CAAC,UAAU;IA4GlB,OAAO,CAAC,WAAW;YAgFL,eAAe;YAkBf,cAAc;YAgDd,SAAS;YAgBT,UAAU;YAuBV,UAAU;IAwBxB,OAAO,CAAC,aAAa;IAuCrB,OAAO,CAAC,SAAS;CA8ElB"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/cli/tui/shell.ts"],"names":[],"mappings":"AAsCA,qBAAa,QAAQ;IACnB,OAAO,CAAC,EAAE,CAAsB;IAChC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,YAAY,CAAkB;;YAgBxB,iBAAiB;IAe/B,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,SAAS;IAcJ,KAAK;IA8ClB,OAAO,CAAC,kBAAkB;IA2B1B,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,qBAAqB;IAqE7B,OAAO,CAAC,eAAe;IAmEvB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,gBAAgB;IA8BxB,OAAO,CAAC,MAAM;YAKA,aAAa;YAoMb,kBAAkB;YAkBlB,SAAS;YAkBT,WAAW;IA0DzB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,QAAQ;IAoCV,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM;IA6CnC,OAAO,CAAC,gBAAgB;IAqBxB,OAAO,CAAC,UAAU;YAeJ,cAAc;YAyEd,QAAQ;YA8GR,MAAM;YA4FN,MAAM;YA2EN,iBAAiB;YAuBjB,OAAO;YA+DP,OAAO;YA0CP,QAAQ;YAoER,SAAS;YAsCT,aAAa;YA8Bb,aAAa;YA+Bb,aAAa;YA6Bb,cAAc;YAkCd,eAAe;YA+Ef,gBAAgB;YAmEhB,YAAY;YAiEZ,mBAAmB;YAsFnB,QAAQ;YA0FR,YAAY;YAoCZ,YAAY;YA6CZ,WAAW;IA6CzB,OAAO,CAAC,UAAU;IA4GlB,OAAO,CAAC,WAAW;YAgFL,eAAe;YAkBf,cAAc;YAgDd,SAAS;YAgBT,UAAU;YAuBV,UAAU;IAwBxB,OAAO,CAAC,aAAa;IAuCrB,OAAO,CAAC,SAAS;CA8ElB"}

package/dist/cli/tui/shell.js

@@ -152,18 +152,44 @@ export class RekShell {
     setupScrollKeyHandler() {
         enableMouseReporting();
         if (process.stdin.isTTY) {
-            process.stdin.on('data', (data) => {
-                const scrollKey = parseScrollKey(data);
-                if (scrollKey) {
-                    this.handleScrollKey(scrollKey);
-                    return;
-                }
-                const mouseScroll = parseMouseScroll(data);
-                if (mouseScroll) {
-                    this.handleScrollKey(mouseScroll);
-                    return;
+            const originalEmit = process.stdin.emit.bind(process.stdin);
+            const self = this;
+            process.stdin.emit = function (event, ...args) {
+                if (event === 'data') {
+                    const data = args[0];
+                    const str = data.toString();
+                    if (str.includes('\x1b[<')) {
+                        const mouseScroll = parseMouseScroll(data);
+                        if (mouseScroll) {
+                            self.handleScrollKey(mouseScroll);
+                        }
+                        return true;
+                    }
+                    if (data.length >= 6 && data[0] === 0x1b && data[1] === 0x5b && data[2] === 0x4d) {
+                        const mouseScroll = parseMouseScroll(data);
+                        if (mouseScroll) {
+                            self.handleScrollKey(mouseScroll);
+                        }
+                        return true;
+                    }
+                    const scrollKey = parseScrollKey(data);
+                    if (scrollKey) {
+                        if (scrollKey === 'quit') {
+                            if (self.inScrollMode) {
+                                self.exitScrollMode();
+                                return true;
+                            }
+                            return originalEmit(event, ...args);
+                        }
+                        self.handleScrollKey(scrollKey);
+                        return true;
+                    }
+                    if (self.inScrollMode) {
+                        return true;
+                    }
                 }
-            });
+                return originalEmit(event, ...args);
+            };
         }
     }
     handleScrollKey(key) {
@@ -209,7 +235,7 @@ export class RekShell {
                     return;
                 }
                 break;
-            case 'escape':
+            case 'quit':
                 if (this.inScrollMode) {
                     this.exitScrollMode();
                     return;
@@ -261,7 +287,7 @@ export class RekShell {
         const scrollInfo = this.scrollBuffer.isScrolledUp
             ? colors.yellow(`↑ ${this.scrollBuffer.position} lines | ${info.percent}% | `)
             : '';
-        const helpText = colors.gray('Page Up/Down • Home/End • Esc to exit');
+        const helpText = colors.gray('Page Up/Down • Home/End • Q to exit');
         const statusBar = `\x1b[${rows};1H\x1b[7m ${scrollInfo}${helpText} \x1b[0m`;
         this.originalStdoutWrite(statusBar);
     }
@@ -806,25 +832,56 @@ export class RekShell {
             const duration = Math.round(performance.now() - startTime);
             const statusIcon = info.valid ? colors.green('✔') : colors.red('✖');
             const statusText = info.valid ? colors.green('Valid') : colors.red('Invalid/Expired');
-            console.log(`${statusIcon} Certificate ${statusText}` + colors.gray(` (${duration}ms)\n`));
-            console.log(colors.bold('  Certificate:'));
-            console.log(`    ${colors.cyan('Subject')}: ${info.subject?.CN || info.subject?.O || 'N/A'}`);
-            console.log(`    ${colors.cyan('Issuer')}: ${info.issuer?.CN || info.issuer?.O || 'N/A'}`);
-            console.log(`    ${colors.cyan('Valid From')}: ${info.validFrom.toISOString()}`);
-            console.log(`    ${colors.cyan('Valid To')}: ${info.validTo.toISOString()}`);
             const daysColor = info.daysRemaining < 30 ? colors.red : info.daysRemaining < 90 ? colors.yellow : colors.green;
-            console.log(`    ${colors.cyan('Days Remaining')}: ${daysColor(String(info.daysRemaining))}`);
-            console.log(colors.bold('\n  Connection:'));
-            console.log(`    ${colors.cyan('Protocol')}: ${info.protocol || 'N/A'}`);
-            console.log(`    ${colors.cyan('Cipher')}: ${info.cipher?.name || 'N/A'}`);
-            console.log(`    ${colors.cyan('Authorized')}: ${info.authorized ? colors.green('Yes') : colors.red('No')}`);
+            console.log(`\n${colors.bold(colors.cyan('🔒 TLS/SSL Report'))}`);
+            console.log(`${statusIcon} Certificate ${statusText}` + colors.gray(` (${duration}ms)\n`));
+            console.log(colors.bold('Certificate:'));
+            console.log(`  ${colors.gray('Subject:')}`);
+            for (const key of Object.keys(info.subject || {})) {
+                console.log(`    ${colors.gray(key.padEnd(10))}: ${info.subject[key]}`);
+            }
+            console.log(`  ${colors.gray('Issuer:')}`);
+            for (const key of Object.keys(info.issuer || {})) {
+                console.log(`    ${colors.gray(key.padEnd(10))}: ${info.issuer[key]}`);
+            }
+            console.log(`  ${colors.gray('Expires:')}   ${daysColor(info.daysRemaining + ' days')} (${info.validTo.toISOString().split('T')[0]})`);
+            console.log(`  ${colors.gray('Valid From:')} ${info.validFrom.toISOString().split('T')[0]}`);
+            console.log(`  ${colors.gray('Valid To:')}   ${info.validTo.toISOString().split('T')[0]}`);
+            console.log(`  ${colors.gray('Valid:')}     ${info.valid ? colors.green('Yes') : colors.red('No')}`);
+            if (info.altNames && info.altNames.length > 0) {
+                console.log(colors.bold('\nSubject Alternative Names (SANs):'));
+                for (const name of info.altNames) {
+                    console.log(`   ${colors.cyan('→')} ${name}`);
+                }
+            }
+            console.log(colors.bold('\nPublic Key:'));
+            if (info.pubkey) {
+                console.log(`  ${colors.gray('Algorithm:')} ${info.pubkey.algo}`);
+                console.log(`  ${colors.gray('Size:')}      ${info.pubkey.size} bits`);
+            }
+            else {
+                console.log('  Not available');
+            }
+            console.log(colors.bold('\nExtended Key Usage:'));
+            if (info.extKeyUsage && info.extKeyUsage.length > 0) {
+                for (const oid of info.extKeyUsage) {
+                    console.log(`   ${colors.cyan('→')} ${oid}`);
+                }
+            }
+            else {
+                console.log('  None');
+            }
+            console.log(colors.bold('\nConnection:'));
+            console.log(`  ${colors.gray('Protocol:')}  ${info.protocol || 'N/A'}`);
+            console.log(`  ${colors.gray('Cipher:')}    ${info.cipher?.name || 'N/A'}`);
+            console.log(`  ${colors.gray('Auth:')}      ${info.authorized ? colors.green('Trusted') : colors.red('Untrusted')}`);
             if (info.authorizationError) {
-                console.log(`    ${colors.cyan('Auth Error')}: ${colors.red(String(info.authorizationError))}`);
+                console.log(`  ${colors.gray('Auth Error:')} ${colors.red(String(info.authorizationError))}`);
             }
-            console.log(colors.bold('\n  Fingerprints:'));
-            console.log(`    ${colors.cyan('SHA1')}: ${info.fingerprint}`);
-            console.log(`    ${colors.cyan('SHA256')}: ${info.fingerprint256}`);
-            console.log(`    ${colors.cyan('Serial')}: ${info.serialNumber}`);
+            console.log(colors.bold('\nFingerprints:'));
+            console.log(`  ${colors.gray('SHA1:')}     ${info.fingerprint}`);
+            console.log(`  ${colors.gray('SHA256:')}    ${info.fingerprint256}`);
+            console.log(`  ${colors.gray('Serial:')}    ${info.serialNumber}`);
             this.lastResponse = info;
         }
         catch (error) {

package/dist/transport/undici.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"undici.d.ts","sourceRoot":"","sources":["../../src/transport/undici.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,aAAa,EAAE,cAAc,EAAW,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAgB,UAAU,EAAkD,MAAM,mBAAmB,CAAC;AAOxN,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAwNzD,UAAU,sBAAsB;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAqDD,qBAAa,eAAgB,YAAW,SAAS;IAC/C,OAAO,CAAC,MAAM,CAAC,cAAc,CAAK;IAElC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,QAAQ,CAAC,CAAQ;IACzB,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,eAAe,CAAC,CAAW;IACnC,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAU;gBAEnB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;IAmG3D,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;YA4U7C,YAAY;CAkQ3B"}
+{"version":3,"file":"undici.d.ts","sourceRoot":"","sources":["../../src/transport/undici.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,aAAa,EAAE,cAAc,EAAW,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAgB,UAAU,EAAkD,MAAM,mBAAmB,CAAC;AAOxN,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAwNzD,UAAU,sBAAsB;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAqDD,qBAAa,eAAgB,YAAW,SAAS;IAC/C,OAAO,CAAC,MAAM,CAAC,cAAc,CAAK;IAElC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,QAAQ,CAAC,CAAQ;IACzB,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,eAAe,CAAC,CAAW;IACnC,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAU;gBAEnB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;IAmG3D,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;YAqV7C,YAAY;CA0Q3B"}

package/dist/transport/undici.js

@@ -303,7 +303,7 @@ export class UndiciTransport {
                         connectTimeout: timeouts.connectTimeout,
                         headersTimeout: timeouts.headersTimeout,
                         bodyTimeout: timeouts.bodyTimeout,
-                        maxRedirections: handleRedirectsManually ? 0 : this.options.maxRedirections,
+                        maxRedirections: 0,
                     };
                     if (finalBody && (finalBody instanceof ReadableStream ||
                         (typeof finalBody.pipe === 'function') ||
@@ -347,39 +347,49 @@ export class UndiciTransport {
                     }
                     const statusCode = undiciResponse.statusCode;
                     const isRedirect = statusCode >= 300 && statusCode < 400;
-                    if (handleRedirectsManually && isRedirect && followRedirects && redirectCount < maxRedirects) {
+                    if (isRedirect && followRedirects && redirectCount < maxRedirects) {
                         const locationHeader = undiciResponse.headers['location'];
                         const location = Array.isArray(locationHeader) ? locationHeader[0] : locationHeader;
                         if (location) {
                             const nextUrl = new URL(location, currentUrl).toString();
-                            const responseHeaders = new Headers();
-                            for (const [key, value] of Object.entries(undiciResponse.headers)) {
-                                if (value !== undefined) {
-                                    if (Array.isArray(value)) {
-                                        value.forEach(v => responseHeaders.append(key, v));
-                                    }
-                                    else {
-                                        responseHeaders.set(key, value);
+                            if (handleRedirectsManually) {
+                                const responseHeaders = new Headers();
+                                for (const [key, value] of Object.entries(undiciResponse.headers)) {
+                                    if (value !== undefined) {
+                                        if (Array.isArray(value)) {
+                                            value.forEach(v => responseHeaders.append(key, v));
+                                        }
+                                        else {
+                                            responseHeaders.set(key, value);
+                                        }
                                     }
                                 }
+                                const redirectInfo = {
+                                    from: currentUrl,
+                                    to: nextUrl,
+                                    status: statusCode,
+                                    headers: responseHeaders,
+                                };
+                                const hookResult = await req.beforeRedirect(redirectInfo);
+                                if (hookResult === false) {
+                                    const finalResponse = req.onDownloadProgress
+                                        ? wrapDownloadResponse(undiciResponse, req.onDownloadProgress)
+                                        : undiciResponse;
+                                    return new HttpResponse(finalResponse, {
+                                        timings: requestContext.timings,
+                                        connection: requestContext.connection
+                                    });
+                                }
+                                if (typeof hookResult === 'string') {
+                                    currentUrl = hookResult;
+                                }
+                                else {
+                                    currentUrl = nextUrl;
+                                }
                             }
-                            const redirectInfo = {
-                                from: currentUrl,
-                                to: nextUrl,
-                                status: statusCode,
-                                headers: responseHeaders,
-                            };
-                            const hookResult = await req.beforeRedirect(redirectInfo);
-                            if (hookResult === false) {
-                                const finalResponse = req.onDownloadProgress
-                                    ? wrapDownloadResponse(undiciResponse, req.onDownloadProgress)
-                                    : undiciResponse;
-                                return new HttpResponse(finalResponse, {
-                                    timings: requestContext.timings,
-                                    connection: requestContext.connection
-                                });
+                            else {
+                                currentUrl = nextUrl;
                             }
-                            currentUrl = typeof hookResult === 'string' ? hookResult : nextUrl;
                             if (statusCode === 303 || ((statusCode === 301 || statusCode === 302) && currentMethod !== 'GET' && currentMethod !== 'HEAD')) {
                                 currentMethod = 'GET';
                                 currentBody = null;
@@ -518,7 +528,7 @@ export class UndiciTransport {
                     connectTimeout: timeouts.connectTimeout,
                     headersTimeout: timeouts.headersTimeout,
                     bodyTimeout: timeouts.bodyTimeout,
-                    maxRedirections: handleRedirectsManually ? 0 : this.options.maxRedirections,
+                    maxRedirections: 0,
                 };
                 if (finalBody && (finalBody instanceof ReadableStream ||
                     (typeof finalBody.pipe === 'function') ||
@@ -562,39 +572,49 @@ export class UndiciTransport {
                 }
                 const statusCode = undiciResponse.statusCode;
                 const isRedirect = statusCode >= 300 && statusCode < 400;
-                if (handleRedirectsManually && isRedirect && followRedirects && redirectCount < maxRedirects) {
+                if (isRedirect && followRedirects && redirectCount < maxRedirects) {
                     const locationHeader = undiciResponse.headers['location'];
                     const location = Array.isArray(locationHeader) ? locationHeader[0] : locationHeader;
                     if (location) {
                         const nextUrl = new URL(location, currentUrl).toString();
-                        const responseHeaders = new Headers();
-                        for (const [key, value] of Object.entries(undiciResponse.headers)) {
-                            if (value !== undefined) {
-                                if (Array.isArray(value)) {
-                                    value.forEach(v => responseHeaders.append(key, v));
-                                }
-                                else {
-                                    responseHeaders.set(key, value);
+                        if (handleRedirectsManually) {
+                            const responseHeaders = new Headers();
+                            for (const [key, value] of Object.entries(undiciResponse.headers)) {
+                                if (value !== undefined) {
+                                    if (Array.isArray(value)) {
+                                        value.forEach(v => responseHeaders.append(key, v));
+                                    }
+                                    else {
+                                        responseHeaders.set(key, value);
+                                    }
                                 }
                             }
+                            const redirectInfo = {
+                                from: currentUrl,
+                                to: nextUrl,
+                                status: statusCode,
+                                headers: responseHeaders,
+                            };
+                            const hookResult = await req.beforeRedirect(redirectInfo);
+                            if (hookResult === false) {
+                                const finalResponse = req.onDownloadProgress
+                                    ? wrapDownloadResponse(undiciResponse, req.onDownloadProgress)
+                                    : undiciResponse;
+                                return new HttpResponse(finalResponse, {
+                                    timings: {},
+                                    connection: {}
+                                });
+                            }
+                            if (typeof hookResult === 'string') {
+                                currentUrl = hookResult;
+                            }
+                            else {
+                                currentUrl = nextUrl;
+                            }
                         }
-                        const redirectInfo = {
-                            from: currentUrl,
-                            to: nextUrl,
-                            status: statusCode,
-                            headers: responseHeaders,
-                        };
-                        const hookResult = await req.beforeRedirect(redirectInfo);
-                        if (hookResult === false) {
-                            const finalResponse = req.onDownloadProgress
-                                ? wrapDownloadResponse(undiciResponse, req.onDownloadProgress)
-                                : undiciResponse;
-                            return new HttpResponse(finalResponse, {
-                                timings: {},
-                                connection: {}
-                            });
+                        else {
+                            currentUrl = nextUrl;
                         }
-                        currentUrl = typeof hookResult === 'string' ? hookResult : nextUrl;
                         if (statusCode === 303 || ((statusCode === 301 || statusCode === 302) && currentMethod !== 'GET' && currentMethod !== 'HEAD')) {
                             currentMethod = 'GET';
                             currentBody = null;

package/dist/utils/ip-intel.d.ts

@@ -0,0 +1,15 @@
+export interface IpInfo {
+    ip: string;
+    hostname?: string;
+    city?: string;
+    region?: string;
+    country?: string;
+    loc?: string;
+    org?: string;
+    timezone?: string;
+    postal?: string;
+    anycast?: boolean;
+    bogon?: boolean;
+}
+export declare function getIpInfo(ip: string): Promise<IpInfo>;
+//# sourceMappingURL=ip-intel.d.ts.map

package/dist/utils/ip-intel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-intel.d.ts","sourceRoot":"","sources":["../../src/utils/ip-intel.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAOD,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoC3D"}

package/dist/utils/ip-intel.js

@@ -0,0 +1,30 @@
+import { Client } from '../core/client.js';
+export async function getIpInfo(ip) {
+    if (ip.startsWith('127.') ||
+        ip.startsWith('10.') ||
+        ip.startsWith('192.168.') ||
+        ip.startsWith('169.254.') ||
+        ip === '::1') {
+        return { ip, bogon: true, org: 'Localhost / Private Network' };
+    }
+    try {
+        const client = new Client();
+        const url = `https://ipinfo.io/${ip}/json`;
+        const data = await client.get(url).json();
+        return {
+            ip: data.ip,
+            hostname: data.hostname,
+            city: data.city,
+            region: data.region,
+            country: data.country,
+            loc: data.loc,
+            org: data.org,
+            timezone: data.timezone,
+            postal: data.postal,
+            anycast: data.anycast
+        };
+    }
+    catch (error) {
+        throw new Error(`Failed to fetch IP info: ${error.message}`);
+    }
+}

package/dist/utils/security-grader.d.ts

@@ -0,0 +1,14 @@
+export interface SecurityHeaderResult {
+    header: string;
+    value?: string;
+    status: 'pass' | 'warn' | 'fail';
+    score: number;
+    message: string;
+}
+export interface SecurityReport {
+    grade: string;
+    score: number;
+    details: SecurityHeaderResult[];
+}
+export declare function analyzeSecurityHeaders(headers: Headers): SecurityReport;
+//# sourceMappingURL=security-grader.d.ts.map

package/dist/utils/security-grader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-grader.d.ts","sourceRoot":"","sources":["../../src/utils/security-grader.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAkFD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,CAkDvE"}

package/dist/utils/security-grader.js

@@ -0,0 +1,132 @@
+const HEADERS_CHECKS = [
+    {
+        header: 'strict-transport-security',
+        weight: 25,
+        check: (val) => {
+            if (!val)
+                return { status: 'fail', message: 'HSTS not enabled. Vulnerable to SSL stripping.' };
+            if (!val.includes('max-age='))
+                return { status: 'fail', message: 'Invalid HSTS: missing max-age.' };
+            const maxAge = parseInt(val.match(/max-age=(\d+)/)?.[1] || '0');
+            if (maxAge < 15552000)
+                return { status: 'warn', message: 'HSTS max-age is less than 6 months.' };
+            if (!val.includes('includeSubDomains'))
+                return { status: 'warn', message: 'HSTS does not include subdomains.' };
+            return { status: 'pass', message: 'HSTS enabled with long duration.' };
+        }
+    },
+    {
+        header: 'content-security-policy',
+        weight: 25,
+        check: (val) => {
+            if (!val)
+                return { status: 'fail', message: 'CSP is missing. Vulnerable to XSS.' };
+            if (val.includes("'unsafe-inline'") || val.includes("'unsafe-eval'"))
+                return { status: 'warn', message: 'CSP includes unsafe directives.' };
+            if (val.includes('default-src *') || val.includes('script-src *'))
+                return { status: 'warn', message: 'CSP too permissive (*).' };
+            return { status: 'pass', message: 'CSP enabled.' };
+        }
+    },
+    {
+        header: 'x-frame-options',
+        weight: 15,
+        check: (val) => {
+            if (!val)
+                return { status: 'fail', message: 'Missing X-Frame-Options. Vulnerable to Clickjacking.' };
+            if (val.toUpperCase() === 'DENY' || val.toUpperCase() === 'SAMEORIGIN')
+                return { status: 'pass', message: 'Clickjacking protection enabled.' };
+            return { status: 'warn', message: 'X-Frame-Options set but might be permissive.' };
+        }
+    },
+    {
+        header: 'x-content-type-options',
+        weight: 10,
+        check: (val) => {
+            if (!val)
+                return { status: 'fail', message: 'Missing X-Content-Type-Options.' };
+            if (val.toLowerCase() === 'nosniff')
+                return { status: 'pass', message: 'MIME sniffing disabled.' };
+            return { status: 'fail', message: 'Value must be "nosniff".' };
+        }
+    },
+    {
+        header: 'referrer-policy',
+        weight: 10,
+        check: (val) => {
+            if (!val)
+                return { status: 'warn', message: 'Missing Referrer-Policy.' };
+            if (val.includes('no-referrer') || val.includes('same-origin') || val.includes('strict-origin'))
+                return { status: 'pass', message: 'Referrer leakage limited.' };
+            return { status: 'warn', message: 'Referrer-Policy might leak information.' };
+        }
+    },
+    {
+        header: 'permissions-policy',
+        weight: 10,
+        check: (val) => {
+            if (!val)
+                return { status: 'warn', message: 'Missing Permissions-Policy (Feature-Policy).' };
+            return { status: 'pass', message: 'Permissions-Policy enabled.' };
+        }
+    },
+    {
+        header: 'server',
+        weight: 0,
+        check: (val) => {
+            if (val)
+                return { status: 'warn', message: 'Server header exposes technology stack.' };
+            return { status: 'pass', message: 'Server info hidden.' };
+        }
+    },
+    {
+        header: 'x-powered-by',
+        weight: 5,
+        check: (val) => {
+            if (val)
+                return { status: 'fail', message: 'X-Powered-By exposes technology stack (e.g. Express/PHP).' };
+            return { status: 'pass', message: 'Technology stack hidden.' };
+        }
+    }
+];
+export function analyzeSecurityHeaders(headers) {
+    let totalScore = 100;
+    let penalty = 0;
+    const details = [];
+    for (const check of HEADERS_CHECKS) {
+        const value = headers.get(check.header);
+        const result = check.check(value || undefined);
+        let itemPenalty = 0;
+        if (result.status === 'fail') {
+            itemPenalty = check.weight;
+        }
+        else if (result.status === 'warn') {
+            itemPenalty = Math.ceil(check.weight / 2);
+        }
+        penalty += itemPenalty;
+        details.push({
+            header: check.header,
+            value: value || undefined,
+            status: result.status,
+            score: -itemPenalty,
+            message: result.message
+        });
+    }
+    const finalScore = Math.max(0, totalScore - penalty);
+    let grade = 'F';
+    if (finalScore >= 95)
+        grade = 'A+';
+    else if (finalScore >= 90)
+        grade = 'A';
+    else if (finalScore >= 80)
+        grade = 'B';
+    else if (finalScore >= 70)
+        grade = 'C';
+    else if (finalScore >= 60)
+        grade = 'D';
+    return {
+        grade,
+        score: finalScore,
+        details
+    };
+}

package/dist/utils/tls-inspector.d.ts

@@ -16,6 +16,12 @@ export interface TLSInfo {
     } | null;
     authorized: boolean;
     authorizationError?: Error;
+    altNames?: string[];
+    pubkey: {
+        algo: string;
+        size: number;
+    } | null;
+    extKeyUsage?: string[];
 }
 export declare function inspectTLS(host: string, port?: number, options?: ConnectionOptions): Promise<TLSInfo>;
 //# sourceMappingURL=tls-inspector.d.ts.map

package/dist/utils/tls-inspector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tls-inspector.d.ts","sourceRoot":"","sources":["../../src/utils/tls-inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEjE,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI,CAAC;IACT,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,CAAC,EAAE,KAAK,CAAC;CAC5B;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAY,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CA4C9G"}
+{"version":3,"file":"tls-inspector.d.ts","sourceRoot":"","sources":["../../src/utils/tls-inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAGjE,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI,CAAC;IACT,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAE3B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAY,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CAkF9G"}

package/dist/utils/tls-inspector.js

@@ -1,4 +1,5 @@
 import { connect } from 'node:tls';
+import * as crypto from 'node:crypto';
 export function inspectTLS(host, port = 443, options = {}) {
     return new Promise((resolve, reject) => {
         const socket = connect(port, host, { ...options, servername: host }, () => {
@@ -11,6 +12,36 @@ export function inspectTLS(host, port = 443, options = {}) {
             const validTo = new Date(cert.valid_to);
             const now = new Date();
             const daysRemaining = Math.floor((validTo.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+            const altNames = cert.subjectaltname
+                ? cert.subjectaltname.split(', ').map(s => s.replace(/^DNS:|^IP Address:/, '')).filter(Boolean)
+                : [];
+            let pubkey = null;
+            if (cert.pubkey) {
+                try {
+                    const keyObject = crypto.createPublicKey(cert.pubkey);
+                    let keySize;
+                    const keyAlgo = keyObject.asymmetricKeyType || 'unknown';
+                    if (keyObject.asymmetricKeyDetails) {
+                        if (keyObject.asymmetricKeyDetails.modulusLength) {
+                            keySize = keyObject.asymmetricKeyDetails.modulusLength;
+                        }
+                        else if (keyObject.asymmetricKeyDetails.namedCurve) {
+                            const curve = keyObject.asymmetricKeyDetails.namedCurve;
+                            if (curve.includes('256') || curve.includes('p256'))
+                                keySize = 256;
+                            else if (curve.includes('384') || curve.includes('p384'))
+                                keySize = 384;
+                            else if (curve.includes('521') || curve.includes('p521'))
+                                keySize = 521;
+                        }
+                    }
+                    if (keySize) {
+                        pubkey = { algo: keyAlgo, size: keySize };
+                    }
+                }
+                catch {
+                }
+            }
             const info = {
                 valid: now >= validFrom && now <= validTo,
                 validFrom,
@@ -24,7 +55,10 @@ export function inspectTLS(host, port = 443, options = {}) {
                 protocol: socket.getProtocol(),
                 cipher: socket.getCipher(),
                 authorized: socket.authorized,
-                authorizationError: socket.authorizationError
+                authorizationError: socket.authorizationError,
+                altNames,
+                pubkey,
+                extKeyUsage: cert.ext_key_usage || []
             };
             socket.end();
             resolve(info);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "recker",
-  "version": "1.0.15-next.c7370be",
+  "version": "1.0.15-next.eb07368",
   "description": "AI & DevX focused HTTP client for Node.js 18+",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",