From 8e38dc7892efa59e4d77123352a74dc0f3ef78bb Mon Sep 17 00:00:00 2001 From: TJBK Date: Fri, 15 May 2026 19:35:30 +0100 Subject: [PATCH 01/15] Add copyable audit report --- entrypoints/popup/main.ts | 69 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 69 insertions(+) diff --git a/entrypoints/popup/main.ts b/entrypoints/popup/main.ts index 47ed131..9becd62 100644 --- a/entrypoints/popup/main.ts +++ b/entrypoints/popup/main.ts @@ -100,6 +100,11 @@ function statusLabel(status: HealthStatus): string { } } +function gradeStatusLabel(status: GradeLine['status']): string { + if (status === 'info') return 'Info'; + return statusLabel(status); +} + function truncate(s: string, max: number): string { const t = s.trim(); if (t.length <= max) return t; @@ -142,6 +147,7 @@ function renderResultFooterActions(result: CheckResult): string { return `
+ Crosscheck on MXToolbox ${castShameBtn}
@@ -258,6 +264,62 @@ function renderScoreRing(overall: number): string { `; } +function statusSummary(label: string, score: FullScore['spf']): string { + return `${label}: ${statusLabel(score.status)} (${formatScoreTenth(score.points)}/${score.max}) - ${score.detail}`; +} + +function reportLines(result: CheckResult): string[] { + const lines = [ + `JayQuery report for ${result.queryHostname}`, + `Checked hostname: ${result.tabHostname}`, + `DMARC lookup: _dmarc.${result.dmarcLookupHost}`, + `Mode: ${result.mode === 'apex' ? 'Root domain' : 'Tab hostname'}`, + `Overall score: ${formatScoreTenth(result.full.overall)}/10`, + '', + statusSummary('SPF', result.full.spf), + statusSummary('DMARC', result.full.dmarc), + statusSummary('DKIM', result.full.dkim), + ]; + + if (result.dkim.selector) { + lines.push(`DKIM selector: ${result.dkim.selector}`); + } + + lines.push('', 'Mail infrastructure:'); + for (const check of result.mailInfra) { + lines.push(`- ${check.title}: ${statusLabel(check.status)} - ${check.summary}`); + } + + const findings = [ + ...filterBreakdownForCompactMode(result.spfBreakdown), + ...filterBreakdownForCompactMode(result.dmarcBreakdown), + ...filterBreakdownForCompactMode(result.dkimBreakdown), + ]; + if (findings.length) { + lines.push('', 'Findings:'); + for (const finding of findings) { + lines.push(`- ${gradeStatusLabel(finding.status)}: ${finding.text}`); + } + } + + return lines; +} + +async function copyReport(result: CheckResult, btn: HTMLButtonElement): Promise { + const originalText = btn.textContent ?? 'Copy report'; + try { + await navigator.clipboard.writeText(reportLines(result).join('\n')); + btn.textContent = 'Copied'; + } catch (err) { + console.error('clipboard: failed to copy report', err); + btn.textContent = 'Copy failed'; + } finally { + window.setTimeout(() => { + btn.textContent = originalText; + }, 1400); + } +} + function renderGradeBreakdown(lines: GradeLine[]): string { if (!lines.length) return ''; return `
    ${lines @@ -563,9 +625,16 @@ function renderResult(result: CheckResult): void { bindModeButtons(result.mode, false); bindSettingsFab(); bindCastShameModal(result); + bindCopyReport(result); bindMailInfraCopyButtons(); } +function bindCopyReport(result: CheckResult): void { + const btn = document.getElementById('btn-copy-report'); + if (!(btn instanceof HTMLButtonElement)) return; + btn.addEventListener('click', () => void copyReport(result, btn)); +} + function renderSettings(): void { root.innerHTML = `
    From 377989240c5c2ca93ac16322341684d40e87b251 Mon Sep 17 00:00:00 2001 From: TJBK Date: Fri, 15 May 2026 19:36:37 +0100 Subject: [PATCH 02/15] Add manual domain checks --- entrypoints/popup/main.ts | 61 ++++++++++++++++++++++++++++++++++++ entrypoints/popup/style.css | 62 +++++++++++++++++++++++++++++++++++++ 2 files changed, 123 insertions(+) diff --git a/entrypoints/popup/main.ts b/entrypoints/popup/main.ts index 9becd62..96afd8b 100644 --- a/entrypoints/popup/main.ts +++ b/entrypoints/popup/main.ts @@ -437,6 +437,18 @@ function renderHeaderBrand(hostname: string): string { `; } +function renderManualLookupForm(hostname: string): string { + return ` +
    + +
    + + +
    +
    + `; +} + function renderWelcome(): void { const targets = resolveCheckTargets(tabHostname, 'apex'); const rootHost = targets.queryHost; @@ -451,6 +463,7 @@ function renderWelcome(): void { root.innerHTML = shellWithFabFooterOnly(`
    ${renderHeaderBrand(rootHost)} + ${renderManualLookupForm(rootHost)}

    First run

    @@ -465,6 +478,7 @@ function renderWelcome(): void {
    `); bindWelcomeActions(); + bindManualLookupForm(); bindSettingsFab(); } @@ -476,6 +490,7 @@ function renderLoading(mode: CheckMode): void { root.innerHTML = shellWithFabFooterOnly(`
    ${headerHost ? renderHeaderBrand(headerHost) : '

    JayQuery

    '} + ${renderManualLookupForm(headerHost || tabHostname)} ${modeChips(mode, showExact)}

    ${escapeHtml(loadingLabel(mode, tabHostname))}

    @@ -485,6 +500,7 @@ function renderLoading(mode: CheckMode): void {
    `); bindModeButtons(mode, true); + bindManualLookupForm(); bindSettingsFab(); } @@ -493,11 +509,13 @@ function renderError(message: string): void { root.innerHTML = shellWithFabFooterOnly(`
    ${tabHostname ? renderHeaderBrand(tabHostname) : '

    JayQuery

    '} + ${tabHostname ? renderManualLookupForm(tabHostname) : ''}

    ${escapeHtml(message)}

    `); + bindManualLookupForm(); bindSettingsFab(); } @@ -565,6 +583,7 @@ function renderResult(result: CheckResult): void {
    ${renderHeaderBrand(result.queryHostname)} + ${renderManualLookupForm(result.queryHostname)} ${modeChips(result.mode, showExact)}
    @@ -623,6 +642,7 @@ function renderResult(result: CheckResult): void {
    `; bindModeButtons(result.mode, false); + bindManualLookupForm(); bindSettingsFab(); bindCastShameModal(result); bindCopyReport(result); @@ -774,6 +794,47 @@ function bindSettingsFab(): void { }); } +function hostnameFromManualInput(raw: string): string | null { + const trimmed = raw.trim(); + if (!trimmed) return null; + const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) + ? trimmed + : `https://${trimmed}`; + try { + const u = new URL(withScheme); + const host = u.hostname.trim().toLowerCase().replace(/\.+$/, ''); + return host || null; + } catch { + return trimmed + .toLowerCase() + .replace(/^https?:\/\//, '') + .split('/')[0] + .split(':')[0] + .trim() + .replace(/\.+$/, '') || null; + } +} + +function bindManualLookupForm(): void { + const form = document.getElementById('manual-lookup-form'); + const input = document.getElementById('manual-lookup-domain'); + if (!(form instanceof HTMLFormElement) || !(input instanceof HTMLInputElement)) { + return; + } + form.addEventListener('submit', (e) => { + e.preventDefault(); + const host = hostnameFromManualInput(input.value); + if (!host) { + input.focus(); + return; + } + tabHostname = host; + lastResult = null; + currentView = 'main'; + void runCheck('apex'); + }); +} + async function dismissWelcomeAndRun(mode: CheckMode): Promise { settings = { ...settings, firstRunWelcomeSeen: true }; try { diff --git a/entrypoints/popup/style.css b/entrypoints/popup/style.css index a0f200e..720b4cf 100644 --- a/entrypoints/popup/style.css +++ b/entrypoints/popup/style.css @@ -532,6 +532,68 @@ body { word-break: break-all; } +.manual-lookup { + margin: 8px 0 10px; +} + +.manual-lookup__label { + display: block; + margin-bottom: 5px; + font-size: 0.68rem; + font-weight: 700; + letter-spacing: 0.05em; + text-transform: uppercase; + color: var(--muted); +} + +.manual-lookup__row { + display: flex; + gap: 8px; +} + +.manual-lookup__input { + min-width: 0; + flex: 1; + height: 34px; + padding: 7px 9px; + border: 1px solid var(--border); + border-radius: 8px; + background: var(--surface2); + color: var(--text); + font-family: ui-monospace, 'Cascadia Code', monospace; + font-size: 0.76rem; + outline: none; +} + +.manual-lookup__input:focus { + border-color: rgba(91, 140, 255, 0.55); + box-shadow: 0 0 0 3px rgba(91, 140, 255, 0.14); +} + +.manual-lookup__btn { + flex-shrink: 0; + height: 34px; + padding: 0 12px; + border: 1px solid rgba(91, 140, 255, 0.45); + border-radius: 8px; + background: rgba(91, 140, 255, 0.18); + color: var(--text); + font-family: inherit; + font-size: 0.74rem; + font-weight: 700; + cursor: pointer; +} + +.manual-lookup__btn:hover { + border-color: rgba(91, 140, 255, 0.65); + background: rgba(91, 140, 255, 0.25); +} + +.manual-lookup__btn:focus-visible { + outline: 2px solid var(--accent); + outline-offset: 2px; +} + .mode-row { display: flex; gap: 8px; From 5d4ad58fc005bcb25e6c27e1ffeb9cce3d887798 Mon Sep 17 00:00:00 2001 From: TJBK Date: Fri, 15 May 2026 19:37:21 +0100 Subject: [PATCH 03/15] Add remediation guidance --- entrypoints/popup/main.ts | 38 ++++++++++++++++++++++++++++++- entrypoints/popup/style.css | 24 +++++++++++++++++++ lib/checks/mailProviderSpfHint.ts | 5 ++++ 3 files changed, 66 insertions(+), 1 deletion(-) diff --git a/entrypoints/popup/main.ts b/entrypoints/popup/main.ts index 96afd8b..29a6a06 100644 --- a/entrypoints/popup/main.ts +++ b/entrypoints/popup/main.ts @@ -348,6 +348,38 @@ function renderSpfMailProviderHint(h: SpfMailProviderHint): string {
`; } +function renderFixGuidance(title: 'SPF' | 'DMARC' | 'DKIM', result: CheckResult): string { + const score = title === 'SPF' + ? result.full.spf + : title === 'DMARC' + ? result.full.dmarc + : result.full.dkim; + if (score.status === 'pass') return ''; + + const host = title === 'DMARC' + ? `_dmarc.${result.dmarcLookupHost}` + : result.queryHostname; + let guidance = ''; + if (title === 'SPF') { + const providerInclude = result.spfMailProviderHint?.expectedInclude; + const example = providerInclude + ? `v=spf1 include:${providerInclude} -all` + : 'v=spf1 -all'; + guidance = `Publish one TXT record at ${host}. Example for a domain that sends no mail, or after adding approved senders: ${example}`; + } else if (title === 'DMARC') { + guidance = `Publish one TXT record at ${host}. Start with reporting, then move toward enforcement: v=DMARC1; p=none; rua=mailto:dmarc@example.com`; + } else { + guidance = 'Confirm the selector your mail platform signs with, then publish that selector under selector._domainkey. Custom selectors can be added in settings.'; + } + + return ` +
+ Fix guidance +

${escapeHtml(guidance)}

+
+ `; +} + function renderProtocolCard( title: string, score: FullScore['spf'], @@ -578,6 +610,7 @@ function renderResult(result: CheckResult): void { (detailedBreakdown || result.spfMailProviderHint.status !== 'pass') ? renderSpfMailProviderHint(result.spfMailProviderHint) : ''; + const spfFooter = `${spfSupplement}${renderFixGuidance('SPF', result)}`; root.innerHTML = `
@@ -601,7 +634,7 @@ function renderResult(result: CheckResult): void { result.spfBreakdown, detailedBreakdown, undefined, - spfSupplement || undefined, + spfFooter || undefined, )} ${renderProtocolCard( 'DMARC', @@ -611,6 +644,7 @@ function renderResult(result: CheckResult): void { result.dmarcBreakdown, detailedBreakdown, dmarcHint(result), + renderFixGuidance('DMARC', result) || undefined, )} ${renderProtocolCard( 'DKIM', @@ -619,6 +653,8 @@ function renderResult(result: CheckResult): void { dkimRaw, result.dkimBreakdown, detailedBreakdown, + undefined, + renderFixGuidance('DKIM', result) || undefined, )} ${result.mailInfra .map((c) => diff --git a/entrypoints/popup/style.css b/entrypoints/popup/style.css index 720b4cf..2f0236b 100644 --- a/entrypoints/popup/style.css +++ b/entrypoints/popup/style.css @@ -1103,6 +1103,30 @@ body { margin-bottom: 2px; } +.fix-guidance { + margin-top: 12px; + padding-top: 10px; + border-top: 1px solid var(--border); + font-size: 0.74rem; + color: var(--muted); +} + +.fix-guidance summary { + cursor: pointer; + font-weight: 700; + color: var(--accent); +} + +.fix-guidance summary:hover { + color: #7ea6ff; +} + +.fix-guidance p { + margin: 8px 0 0; + line-height: 1.45; + color: #a8afbf; +} + .badge { font-size: 0.65rem; font-weight: 600; diff --git a/lib/checks/mailProviderSpfHint.ts b/lib/checks/mailProviderSpfHint.ts index a2e7ccc..032936a 100644 --- a/lib/checks/mailProviderSpfHint.ts +++ b/lib/checks/mailProviderSpfHint.ts @@ -5,6 +5,7 @@ import type { HealthStatus } from '@/lib/score/common'; /** Supplementary SPF check vs inbound MX provider profile; does not affect scoring. */ export type SpfMailProviderHint = { providerName: string; + expectedInclude: string; status: HealthStatus; summary: string; lines: string[]; @@ -26,6 +27,7 @@ export function buildMailProviderSpfHint( if (orgSpfTxt.dnsState === 'error') { return { providerName, + expectedInclude: expected, status: 'fail', summary: 'SPF lookup failed', lines: [ @@ -40,6 +42,7 @@ export function buildMailProviderSpfHint( if (!spfA.present) { return { providerName, + expectedInclude: expected, status: 'missing', summary: 'No SPF on mail domain', lines: [ @@ -62,6 +65,7 @@ export function buildMailProviderSpfHint( // Summary already states the include; avoid repeating the same line below. return { providerName, + expectedInclude: expected, status: spfA.multipleRecords ? 'warn' : 'pass', summary: `Includes ${expected}`, lines, @@ -76,6 +80,7 @@ export function buildMailProviderSpfHint( ); return { providerName, + expectedInclude: expected, status: 'warn', summary: `Missing include:${expected}`, lines, From 10e9dde5138ce1dd19e0dc13679c3391becbf87c Mon Sep 17 00:00:00 2001 From: TJBK Date: Fri, 15 May 2026 19:38:55 +0100 Subject: [PATCH 04/15] Add custom DKIM selectors --- entrypoints/background.ts | 1 + entrypoints/popup/main.ts | 35 ++++++++++++++++++++++++++++++++++- entrypoints/popup/style.css | 25 +++++++++++++++++++++++++ lib/checkDomain.ts | 7 ++++++- lib/parse/dkim.test.ts | 14 ++++++++++++++ lib/parse/dkim.ts | 10 ++++++++++ lib/settings.ts | 20 ++++++++++++++++++++ 7 files changed, 110 insertions(+), 2 deletions(-) diff --git a/entrypoints/background.ts b/entrypoints/background.ts index 6f927bb..2e85dbf 100644 --- a/entrypoints/background.ts +++ b/entrypoints/background.ts @@ -56,6 +56,7 @@ async function refreshToolbarIconForTab( treatDnsResolutionErrorsAsFailure: settings.treatDnsResolutionErrorsAsFailure, dnsProvider: settings.dnsProvider, + customDkimSelectors: settings.customDkimSelectors, }); if (toolbarRefreshGenByTabId.get(tabId) !== token) { return; diff --git a/entrypoints/popup/main.ts b/entrypoints/popup/main.ts index 29a6a06..70a22d0 100644 --- a/entrypoints/popup/main.ts +++ b/entrypoints/popup/main.ts @@ -736,6 +736,13 @@ function renderSettings(): void {
Advanced
+