Initial commit

CalDAV and CardDAV checkers sharing a single Go module. Discovery follows
RFC 6764 (/.well-known + SRV/TXT), authenticated probes cover principal,
home-set, collections and a minimal REPORT query on top of go-webdav.
Common shape in internal/dav/; CalDAV adds a scheduling rule.

Surfaces its context URL (and each secure-SRV target) as TLS endpoints via
the EndpointDiscoverer interface, so the dedicated TLS checker can pick
them up without re-parsing observations.

HTML report foregrounds common misconfigs (well-known returning 200,
missing SRV, plaintext-only SRV, missing DAV capability, skipped auth
phase) as action-item callouts before the full phase breakdown.

caldav/collect.go

@@ -0,0 +1,142 @@
+package caldav
+
+import (
+	"context"
+	"net/http"
+	"time"
+
+	"git.happydns.org/checker-dav/internal/dav"
+	sdk "git.happydns.org/checker-sdk-go/checker"
+	webdav "github.com/emersion/go-webdav"
+	"github.com/emersion/go-webdav/caldav"
+)
+
+// Collect is intentionally resilient: each phase records its outcome and we
+// keep going as long as the next phase has something to work with. Rules
+// later turn the captured state into CheckStates.
+func (p *caldavProvider) Collect(ctx context.Context, opts sdk.CheckerOptions) (any, error) {
+	domain, _ := sdk.GetOption[string](opts, "domain_name")
+	user, _ := sdk.GetOption[string](opts, "username")
+	pass, _ := sdk.GetOption[string](opts, "password")
+	explicit, _ := sdk.GetOption[string](opts, "context_url")
+	timeoutSec := sdk.GetFloatOption(opts, "timeout_seconds", 10)
+
+	timeout := time.Duration(timeoutSec * float64(time.Second))
+	if timeout <= 0 {
+		timeout = 10 * time.Second
+	}
+
+	obs := &dav.Observation{
+		Kind:           dav.KindCalDAV,
+		Domain:         domain,
+		HasCredentials: user != "" && pass != "",
+		CollectedAt:    time.Now(),
+		Scheduling:     &dav.SchedulingResult{},
+	}
+
+	anonClient := dav.NewHTTPClient(timeout)
+
+	// Phase 1: Discovery
+	obs.Discovery = dav.Discover(ctx, anonClient, dav.KindCalDAV, domain, explicit)
+	if obs.Discovery.ContextURL == "" {
+		return obs, nil
+	}
+
+	// Phase 2: Transport + OPTIONS (no auth required)
+	optsRes, err := dav.ProbeOptions(ctx, anonClient, obs.Discovery.ContextURL)
+	obs.Options = optsRes
+	if err != nil {
+		obs.Transport = dav.TransportResult{Error: err.Error()}
+		return obs, nil
+	}
+	obs.Transport = dav.TransportResult{Reached: true}
+	obs.Scheduling.Advertised = optsRes.HasCapability("calendar-schedule")
+
+	// Phase 3: Authenticated probes
+	if !obs.HasCredentials {
+		obs.Principal.Skipped = true
+		obs.HomeSet.Skipped = true
+		obs.Collections.Skipped = true
+		obs.Report.Skipped = true
+		return obs, nil
+	}
+
+	authClient := dav.WithBasicAuth(anonClient, obs.Discovery.ContextURL, user, pass)
+
+	principal, err := dav.FindPrincipal(ctx, authClient, obs.Discovery.ContextURL)
+	if err != nil {
+		obs.Principal.Error = err.Error()
+		obs.HomeSet.Skipped = true
+		obs.Collections.Skipped = true
+		obs.Report.Skipped = true
+		return obs, nil
+	}
+	obs.Principal.URL = principal
+
+	cal, err := caldav.NewClient(asHTTPClient(authClient), obs.Discovery.ContextURL)
+	if err != nil {
+		obs.HomeSet.Error = err.Error()
+		obs.Collections.Skipped = true
+		obs.Report.Skipped = true
+		return obs, nil
+	}
+	home, err := cal.FindCalendarHomeSet(ctx, principal)
+	if err != nil {
+		obs.HomeSet.Error = err.Error()
+		obs.Collections.Skipped = true
+		obs.Report.Skipped = true
+		return obs, nil
+	}
+	obs.HomeSet.URL = home
+
+	calendars, err := cal.FindCalendars(ctx, home)
+	if err != nil {
+		obs.Collections.Error = err.Error()
+		obs.Report.Skipped = true
+	} else {
+		for _, c := range calendars {
+			obs.Collections.Items = append(obs.Collections.Items, dav.CollectionInfo{
+				Path:                  c.Path,
+				Name:                  c.Name,
+				Description:           c.Description,
+				MaxResourceSize:       c.MaxResourceSize,
+				SupportedComponentSet: c.SupportedComponentSet,
+			})
+		}
+	}
+
+	// Empty calendar-query against the first calendar: cheapest probe that
+	// still exercises the REPORT pipeline end-to-end.
+	if len(obs.Collections.Items) > 0 {
+		first := obs.Collections.Items[0].Path
+		obs.Report.ProbePath = first
+		q := &caldav.CalendarQuery{
+			CompRequest: caldav.CalendarCompRequest{
+				Name: "VCALENDAR",
+				Comps: []caldav.CalendarCompRequest{
+					{Name: "VEVENT"},
+				},
+			},
+		}
+		if _, err := cal.QueryCalendar(ctx, first, q); err != nil {
+			obs.Report.Error = err.Error()
+		} else {
+			obs.Report.QueryOK = true
+		}
+	} else {
+		obs.Report.Skipped = true
+	}
+
+	if obs.Scheduling.Advertised {
+		inbox, outbox, err := dav.FindScheduleURLs(ctx, authClient, principal)
+		if err != nil {
+			obs.Scheduling.Error = err.Error()
+		}
+		obs.Scheduling.InboxURL = inbox
+		obs.Scheduling.OutboxURL = outbox
+	}
+
+	return obs, nil
+}
+
+func asHTTPClient(c *http.Client) webdav.HTTPClient { return c }

caldav/definition.go

@@ -0,0 +1,41 @@
+package caldav
+
+import (
+	"time"
+
+	"git.happydns.org/checker-dav/internal/dav"
+	sdk "git.happydns.org/checker-sdk-go/checker"
+)
+
+// Version is overridden at link time by the standalone binary via -ldflags.
+var Version = "built-in"
+
+func (p *caldavProvider) Definition() *sdk.CheckerDefinition {
+	return &sdk.CheckerDefinition{
+		ID:      "caldav",
+		Name:    "CalDAV server",
+		Version: Version,
+		Availability: sdk.CheckerAvailability{
+			ApplyToDomain: true,
+			// Service scope keeps downstream TLS alerts on a dedicated
+			// "CalDAV" page rather than the domain page. abstract.CalDAV
+			// isn't in the catalog yet, so this is a no-op until it is.
+			ApplyToService:  true,
+			LimitToServices: []string{"abstract.CalDAV"},
+		},
+		ObservationKeys: []sdk.ObservationKey{ObservationKey},
+		Options: sdk.CheckerOptionsDocumentation{
+			UserOpts:   dav.UserOptions(),
+			DomainOpts: dav.DomainOptions(),
+			RunOpts:    dav.RunOptions(),
+		},
+		Rules:      dav.Rules(dav.KindCalDAV, ObservationKey),
+		Aggregator: dav.WorstStatus{},
+		Interval: &sdk.CheckIntervalSpec{
+			Min:     1 * time.Minute,
+			Max:     1 * time.Hour,
+			Default: 15 * time.Minute,
+		},
+		HasHTMLReport: true,
+	}
+}

caldav/discovery.go

@@ -0,0 +1,16 @@
+package caldav
+
+import (
+	"fmt"
+
+	"git.happydns.org/checker-dav/internal/dav"
+	sdk "git.happydns.org/checker-sdk-go/checker"
+)
+
+func (p *caldavProvider) DiscoverEntries(data any) ([]sdk.DiscoveryEntry, error) {
+	obs, ok := data.(*dav.Observation)
+	if !ok {
+		return nil, fmt.Errorf("unexpected data type %T", data)
+	}
+	return dav.DiscoverEntries(obs), nil
+}

caldav/provider.go

@@ -0,0 +1,25 @@
+package caldav
+
+import (
+	"net/http"
+
+	"git.happydns.org/checker-dav/internal/dav"
+	sdk "git.happydns.org/checker-sdk-go/checker"
+)
+
+// Provider's return value also satisfies CheckerDefinitionProvider,
+// CheckerHTMLReporter, and EndpointDiscoverer; the SDK server probes for
+// those at runtime.
+func Provider() sdk.ObservationProvider {
+	return &caldavProvider{}
+}
+
+type caldavProvider struct{}
+
+func (p *caldavProvider) Key() sdk.ObservationKey { return ObservationKey }
+
+func (p *caldavProvider) RenderForm() []sdk.CheckerOptionField { return dav.InteractiveForm() }
+
+func (p *caldavProvider) ParseForm(r *http.Request) (sdk.CheckerOptions, error) {
+	return dav.ParseInteractiveForm(r)
+}

caldav/report.go

@@ -0,0 +1,22 @@
+package caldav
+
+import (
+	"encoding/json"
+	"fmt"
+
+	sdk "git.happydns.org/checker-sdk-go/checker"
+
+	"git.happydns.org/checker-dav/internal/dav"
+)
+
+// GetHTMLReport delegates to the shared renderer so CalDAV and CardDAV
+// produce visually identical reports. Downstream TLS probes attached via
+// ctx.Related(dav.TLSRelatedKey) are folded in.
+func (p *caldavProvider) GetHTMLReport(ctx sdk.ReportContext) (string, error) {
+	var d dav.Observation
+	if err := json.Unmarshal(ctx.Data(), &d); err != nil {
+		return "", fmt.Errorf("failed to unmarshal caldav report: %w", err)
+	}
+	d.Kind = dav.KindCalDAV
+	return dav.RenderReport(&d, "CalDAV Server", ctx.Related(dav.TLSRelatedKey))
+}

caldav/types.go

@@ -0,0 +1,9 @@
+// Package caldav wires the CalDAV-specific options, collect pipeline,
+// rules, and HTML report on top of the shared helpers in internal/dav.
+package caldav
+
+import "git.happydns.org/checker-dav/internal/dav"
+
+const ObservationKey = "caldav"
+
+type Data = dav.Observation