From b01ca9b38c441444761dbd0cccaa250290a4378e Mon Sep 17 00:00:00 2001
From: Pierre-Olivier Mercier <nemunaire@nemunai.re>
Date: Thu, 30 Oct 2025 12:59:37 +0700
Subject: [PATCH] Report invalid records in summary

---
 web/src/lib/components/SummaryCard.svelte | 45 ++++++++++++++++++++++-
 1 file changed, 43 insertions(+), 2 deletions(-)

diff --git a/web/src/lib/components/SummaryCard.svelte b/web/src/lib/components/SummaryCard.svelte
index cf08c2c..cfac2a7 100644
--- a/web/src/lib/components/SummaryCard.svelte
+++ b/web/src/lib/components/SummaryCard.svelte
@@ -130,6 +130,25 @@
             }
         }
 
+        // SPF DNS record check
+        const spfRecords = report.dns_results?.spf_records;
+        if (spfRecords && spfRecords.length > 0) {
+            const invalidSpfRecords = spfRecords.filter((r) => !r.valid && r.record);
+            if (invalidSpfRecords.length > 0) {
+                segments.push({ text: ". Your SPF record" });
+                if (invalidSpfRecords.length > 1) {
+                    segments.push({ text: "s are " });
+                } else {
+                    segments.push({ text: " is " });
+                }
+                segments.push({
+                    text: "invalid",
+                    highlight: { color: "danger", bold: true },
+                    link: "#dns-spf",
+                });
+            }
+        }
+
         // IP Reverse DNS (iprev) check
         const iprevResult = report.authentication?.iprev;
         if (iprevResult) {
@@ -217,6 +236,28 @@
             }
         }
 
+        // DKIM DNS record check
+        const dkimRecords = report.dns_results?.dkim_records;
+        if (dkimRecords && Object.keys(dkimRecords).length > 0) {
+            const invalidDkimKeys = Object.entries(dkimRecords)
+                .filter(([_, record]) => !record.valid && record.record)
+                .map(([key, _]) => key);
+
+            if (invalidDkimKeys.length > 0) {
+                segments.push({ text: ". Your DKIM record" });
+                if (invalidDkimKeys.length > 1) {
+                    segments.push({ text: "s are " });
+                } else {
+                    segments.push({ text: " is " });
+                }
+                segments.push({
+                    text: "invalid",
+                    highlight: { color: "danger", bold: true },
+                    link: "#dns-dkim",
+                });
+            }
+        }
+
         // DMARC policy check
         const dmarcRecord = report.dns_results?.dmarc_record;
         if (dmarcRecord) {
@@ -235,9 +276,9 @@
                 segments.push({ text: "none", highlight: { monospace: true, bold: true } });
                 segments.push({ text: "' policy", highlight: { bold: true } });
             } else if (!dmarcRecord.valid) {
-                segments.push({ text: ". Your DMARC record has " });
+                segments.push({ text: ". Your DMARC record is " });
                 segments.push({
-                    text: "issues",
+                    text: "invalid",
                     highlight: { color: "danger", bold: true },
                     link: "#dns-dmarc",
                 });