[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","hunterparks","name","whois","path","backend/porkbun.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":38,"_66":67,"_68":-5,"_69":-5,"_70":-5,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/hunterparks/whois/code/backend/porkbun.ts","extension","id","d6be8105-2462-431d-9e07-55d091f81db8","porkbun.ts","fileId","5303dab6-9ff8-11f1-8157-1607ee4eb77e","parentId","b87e942e-89d4-11f1-97dc-1607ee4eb77e","branchId","56b9e60d-44d2-4baf-b4cd-1a7b1ec05f36","branchVersion",29,"latest",true,"createdAt",["D",1787603564724],"version",1,"fileType","script","content","import type {\n AvailabilityResult,\n DomainAvailability,\n DomainPricing,\n PricingResult,\n} from \"../shared/types.ts\";\nimport { normalizeDomain } from \"./rdap.ts\";\n\n/**\n * Porkbun publishes its whole retail price list unauthenticated, so a lookup\n * can carry a price without asking anyone for an API key. These are list\n * prices for ordinary names: premium and reserved names are quoted per-domain\n * and only Porkbun's authenticated checkDomain endpoint knows those.\n */\nconst PRICING_URL = \"https://api.porkbun.com/api/json/v3/pricing/get\";\nconst PRICING_TTL_MS = 6 * 60 * 60 * 1000;\n/** Per-name availability, unlike the list above, needs credentials. */\nconst CHECK_URL = \"https://api.porkbun.com/api/json/v3/domain/checkDomain/\";\nconst CHECK_TTL_MS = 10 * 60 * 1000;\n/** Tighter than it looks: the page holds its verdict until this answers, so\n * every second here is a second the visitor stares at an unfinished card.\n * Porkbun normally answers in about a second; past ten it isn't going to. */\nconst CHECK_TIMEOUT_MS = 10_000;\n/** Porkbun's documented default is one check per 10 seconds per account, and it\n * is billed against the account rather than the caller, so a burst of visitors\n * shares one budget. Assume the default until a response tells us otherwise. */\nconst DEFAULT_CHECK_WINDOW_MS = 10_000;\n/** Generous on purpose: Porkbun builds the whole 900-TLD list per request and\n * measures 15-20 seconds cold. Only the request that misses the cache waits. */\nconst REQUEST_TIMEOUT_MS = 30_000;\n\ninterface PricingResponse {\n status: string;\n pricing: Record;\n}\n\nlet cache: { fetchedAt: number; prices: Map } | null = null;\nlet inflight: Promise> | null = null;\n\nfunction getPrices(): Promise> {\n if (cache && Date.now() - cache.fetchedAt < PRICING_TTL_MS) return Promise.resolve(cache.prices);\n // That 15-20 second fetch is long enough that several visitors can pile up\n // behind it. They should share one request, not start their own.\n inflight ??= fetchPrices().finally(() => inflight = null);\n return inflight;\n}\n\nasync function fetchPrices(): Promise> {\n const res = await fetch(PRICING_URL, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`Porkbun pricing returned ${res.status}`);\n const body = (await res.json()) as PricingResponse;\n if (body?.status !== \"SUCCESS\") throw new Error(`Porkbun pricing returned ${body?.status}`);\n\n const prices = new Map();\n for (const [rawSuffix, entry] of Object.entries(body.pricing ?? {})) {\n // Handshake names resolve outside ICANN DNS, so their prices describe\n // something this site can't look up in a registry.\n if (entry?.specialType === \"handshake\") continue;\n\n const suffix = rawSuffix.toLowerCase();\n const registration = amount(entry?.registration);\n const renewal = amount(entry?.renewal);\n const transfer = amount(entry?.transfer);\n if (registration === undefined && renewal === undefined) continue;\n\n prices.set(suffix, { suffix, registration, renewal, transfer, currency: \"USD\" });\n }\n\n cache = { fetchedAt: Date.now(), prices };\n return prices;\n}\n\nfunction amount(value: unknown): number | undefined {\n if (typeof value !== \"string\" || !value.trim()) return undefined;\n const price = Number(value);\n return Number.isFinite(price) ? price : undefined;\n}\n\ninterface CheckResponse {\n status: string;\n message?: string;\n code?: string;\n ttlRemaining?: number;\n response?: {\n avail?: string;\n price?: string;\n regularPrice?: string;\n firstYearPromo?: string;\n premium?: string;\n minDuration?: number;\n };\n limits?: { TTL?: number; limit?: number; used?: number };\n}\n\nconst checkCache = new Map();\nconst checkInflight = new Map>();\n/** Closed until this moment to stay inside Porkbun's per-account check budget. */\nlet checkGateUntil = 0;\n\n/** Absent credentials disable the check rather than failing the request: the\n * registry answer is the product, and this only annotates it. */\nfunction credentials(): { apikey: string; secretapikey: string } | null {\n const apikey = readEnv(\"PORKBUN_API_KEY\");\n const secretapikey = readEnv(\"PORKBUN_SECRET_API_KEY\");\n return apikey && secretapikey ? { apikey, secretapikey } : null;\n}\n\nfunction readEnv(name: string): string | undefined {\n try {\n return Deno.env.get(name) || undefined;\n } catch {\n return undefined; // no env access in this runtime\n }\n}\n\n/**\n * Ask Porkbun whether it will actually sell this exact name.\n *\n * Returns undefined for every \"we don't know\" case — no credentials, gate\n * closed, timeout, error, or an `avail` we don't recognise. Undefined must stay\n * indistinguishable from \"not asked\", because the caller renders a contradiction\n * of the registry's verdict and may only do that on an explicit answer.\n */\nexport async function checkAvailability(domain: string): Promise {\n const auth = credentials();\n if (!auth) return undefined;\n\n const cached = checkCache.get(domain);\n if (cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) return cached.availability;\n\n const pending = checkInflight.get(domain);\n if (pending) return pending;\n\n // One check per window across the whole account, so a name that misses the\n // cache while the gate is shut goes unanswered rather than queueing up behind\n // it. The page is holding a verdict open on this: better to hand back the\n // registry's own hedged answer now than the confirmed one ten seconds late.\n if (Date.now() < checkGateUntil) return undefined;\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS; // shut it before awaiting\n\n const request = runCheck(domain, auth).finally(() => checkInflight.delete(domain));\n checkInflight.set(domain, request);\n return request;\n}\n\nasync function runCheck(\n domain: string,\n auth: { apikey: string; secretapikey: string },\n): Promise {\n let body: CheckResponse;\n try {\n const res = await fetch(`${CHECK_URL}${encodeURIComponent(domain)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(auth),\n signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),\n });\n // Porkbun reports a tripped rate limit as both 429 and a 200 whose status is\n // ERROR, so the body is what decides — but a 429 carries no useful body.\n if (res.status === 429) {\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS;\n return undefined;\n }\n body = (await res.json()) as CheckResponse;\n } catch {\n return undefined;\n }\n\n // A window we were told about beats the assumed default.\n const windowMs = (body.limits?.TTL ?? body.ttlRemaining ?? 0) * 1000;\n if (windowMs > 0) checkGateUntil = Date.now() + windowMs;\n\n const avail = body.response?.avail;\n if (body.status !== \"SUCCESS\" || (avail !== \"yes\" && avail !== \"no\")) return undefined;\n\n const availability: DomainAvailability = {\n registrable: avail === \"yes\",\n premium: body.response?.premium === \"yes\",\n price: amount(body.response?.price),\n regularPrice: amount(body.response?.regularPrice),\n firstYearPromo: body.response?.firstYearPromo === \"yes\",\n minDuration: typeof body.response?.minDuration === \"number\" && body.response.minDuration > 1\n ? body.response.minDuration\n : undefined,\n checkedAt: new Date().toISOString(),\n };\n\n checkCache.set(domain, { checkedAt: Date.now(), availability });\n return availability;\n}\n\n/**\n * Ask Porkbun about one specific name. Deliberately separate from the pricing\n * lookup below: this one answers in about a second and the page waits on it\n * before it will call a name available, while the price list can take twenty\n * seconds to build and nothing waits on it.\n */\nexport async function lookupAvailability(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n return { domain, availability: await checkAvailability(domain) };\n}\n\n/**\n * Price the name the visitor typed. Porkbun sells some ccTLDs at the second\n * level — `co.uk` is its own line item, priced apart from `uk` — so match the\n * longest suffix of the name that it actually lists.\n */\nexport async function lookupPricing(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n\n // A price is a garnish on the registry answer. If Porkbun is down or slow,\n // the visitor still keeps the thing they came for.\n const prices = await getPrices().catch(() => null);\n return { domain, pricing: prices ? matchSuffix(domain, prices) : undefined };\n}\n\nfunction matchSuffix(domain: string, prices: Map): DomainPricing | undefined {\n const labels = domain.split(\".\");\n for (let i = 1; i < labels.length; i++) {\n const pricing = prices.get(labels.slice(i).join(\".\"));\n if (pricing) return pricing;\n }\n return undefined;\n}\n","deleted",false,"label",[47,24],"backend","a00dc9e7-a23e-4397-a1f9-3cf4c617a61f",["D",1785166232232],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","b8f52b40-db4b-11ef-9fdc-e7ba3d98ed08","pinnedFileId","1ae3c4c2-89d0-11f1-8211-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","c0309a09-c920-43c3-9d64-1db94f641c1a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_104":100},"org",{"_9":10,"_98":-5,"_99":100,"_58":59,"_101":102,"_103":44},"branch",{"_37":88,"_11":89,"_22":30,"_90":48,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",33,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yczhIY1pIYWJ5ZnVPVjgxM0R2OENRWTJlTW0ifQ","tier","pro","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_138":139,"_140":141,"_142":143,"_144":44,"_145":44,"_146":44,"_147":34,"_148":-5,"_149":-7,"_150":-7,"_151":152,"_153":44,"_154":44,"_155":-5,"_156":44,"_157":44,"_158":44,"_159":-5},"ENV",{"_109":110,"_111":112,"_113":89,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount",0,"flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]