[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_115":-5,"_20":116,"_22":117,"_118":119,"_120":121,"_25":122,"_24":-5,"_123":-5,"_124":-5,"_125":53,"_126":127,"_128":44,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","alimalik901","name","untitled-2415","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","83b5d8a2-fccf-11f0-8268-42dde27851f2","emailValidator.ts","fileId","a9124988-fcc9-11f0-85e6-42dde27851f2","parentId","branchId","9cfa0816-fcc9-11f0-81b7-42dde27851f2","branchVersion",15,"latest",true,"createdAt",["D",1769662864651],12,"fileType","http","content","/**\n * Email-domain gatekeeper (drop-in) — BEST PRACTICAL STRATEGIES\n *\n * What it does:\n * 1) Deliverability check (MX or A/AAAA fallback) ✅ \"valid/invalid\"\n * 2) Disposable detection:\n * - Known disposable domains from GitHub list ✅\n * - Known disposable MX infrastructure (MX exchange) ✅ (catches new rotating domains)\n * - Known disposable NS infrastructure (nameservers) ✅ (often shared)\n * 3) Reputation / bounce signals (you pass in) ✅\n * 4) Outputs PRETTY text by default, JSON with &format=json ✅\n *\n * Usage:\n * - Pretty (default): ?domains=a.com,b.com\n * - JSON: ?domains=a.com,b.com&format=json\n * - Provide bounce stats:\n * &bounces=domain.com:0.92,gmail.com:0.01\n * &attempts=domain.com:120,gmail.com:5000\n * (attempts lets the code avoid overreacting to tiny sample sizes)\n * - Control list refresh:\n * &refresh=1 (force refresh lists and infra caches now)\n * &infra=0 (skip infra learning; only domain list)\n *\n * Notes:\n * - No strategy can be perfect without a reputation provider.\n * - The best win is \"disposable MX/NS infra mapping\" + your bounce history.\n */\n\nimport { resolve4, resolve6, resolveMx, resolveNs } from \"node:dns/promises\";\n\n// ------------------------ Config: GitHub Sources ------------------------\n// These are signals, not a \"block list you provide\". Your input list is ?domains=...\nconst DISPOSABLE_DOMAIN_LIST_URL =\n \"https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/main/disposable_email_blocklist.conf\";\nconst DISPOSABLE_ALLOWLIST_URL =\n \"https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/main/allowlist.conf\";\n\n// ------------------------ Caching ------------------------\nconst LIST_TTL_MS = 6 * 60 * 60 * 1000; // 6h\nconst INFRA_TTL_MS = 24 * 60 * 60 * 1000; // 24h (MX/NS infra changes slower)\nconst INFRA_BUILD_MAX_DOMAINS = 5000; // cap for serverless safety (adjust if needed)\nconst INFRA_CONCURRENCY = 50; // DNS concurrency for infra build\n\nlet cachedLists: null | {\n fetchedAt: number;\n domains: Set; // disposable domain set\n allow: Set;\n} = null;\n\nlet cachedInfra: null | {\n builtAt: number;\n mx: Set; // disposable MX exchanges\n ns: Set; // disposable nameservers\n sampled: number; // number of disposable domains sampled to build infra\n} = null;\n\n// ------------------------ Types ------------------------\ntype Deliverability =\n | \"DELIVERABLE_MX\"\n | \"DELIVERABLE_FALLBACK\"\n | \"UNDELIVERABLE\"\n | \"DNS_ERROR\";\ntype Risk = \"ALLOW\" | \"REQUIRE_VERIFICATION\" | \"BLOCK\";\n\ninterface MXRecordOut {\n exchange: string;\n priority: number;\n}\n\ninterface DomainResult {\n input: string;\n domain: string;\n\n deliverability: Deliverability;\n hasMx: boolean;\n\n // Signals\n disposableDomainHit: boolean;\n allowlistHit: boolean;\n disposableMxHit: boolean;\n disposableNsHit: boolean;\n\n bounceRate?: number; // 0..1 (optional)\n attempts?: number; // (optional)\n\n score: number; // 0..100\n decision: Risk;\n reasons: string[];\n\n mxRecords?: MXRecordOut[];\n selectedMx?: MXRecordOut;\n nsRecords?: string[];\n\n debug: {\n durationMs: number;\n listAgeSec?: number;\n infraAgeSec?: number;\n aCount?: number;\n aaaaCount?: number;\n failedAt?:\n | \"parse\"\n | \"list_fetch\"\n | \"infra_build\"\n | \"mx\"\n | \"fallback\"\n | \"ns\";\n error?: { code?: string; message: string };\n };\n}\n\n// ------------------------ Helpers ------------------------\nfunction pad(s: string, n: number) {\n const v = s ?? \"\";\n return v.length >= n ? v.slice(0, n) : v.padEnd(n);\n}\n\nfunction splitTokens(raw: string): string[] {\n return raw.split(/[\\s,]+/g).map((t) => t.trim()).filter(Boolean);\n}\n\nfunction normalizeDomain(token: string): string {\n const afterAt = token.includes(\"@\") ? token.split(\"@\").pop()! : token;\n return afterAt.replace(/^@+/, \"\").toLowerCase();\n}\n\nfunction parseDomains(raw: string): { input: string; domain: string }[] {\n const tokens = splitTokens(raw);\n const out = tokens.map((t) => ({ input: t, domain: normalizeDomain(t) }));\n\n const seen = new Set();\n return out.filter(({ domain }) => {\n if (!domain) return true;\n if (seen.has(domain)) return false;\n seen.add(domain);\n return true;\n });\n}\n\nfunction isProbablyDomain(d: string): boolean {\n return !!d && d.includes(\".\") && !d.startsWith(\".\") && !d.endsWith(\".\");\n}\n\n// For subdomains: check parents, e.g. a.b.yopmail.com => yopmail.com\nfunction domainAndParents(domain: string): string[] {\n const parts = domain.split(\".\").filter(Boolean);\n const out: string[] = [];\n for (let i = 0; i < parts.length - 1; i++) out.push(parts.slice(i).join(\".\"));\n return out;\n}\n\nfunction parseNumberMap(raw: string | null): Map {\n // format: dom:val,dom:val\n const m = new Map();\n if (!raw) return m;\n for (const part of raw.split(\",\").map((x) => x.trim()).filter(Boolean)) {\n const [dom, vStr] = part.split(\":\").map((x) => x.trim());\n if (!dom || !vStr) continue;\n const v = Number(vStr);\n if (!Number.isFinite(v)) continue;\n m.set(dom.toLowerCase(), v);\n }\n return m;\n}\n\nasync function fetchText(url: string): Promise {\n const res = await fetch(url, { headers: { \"cache-control\": \"no-cache\" } });\n if (!res.ok) throw new Error(`HTTP ${res.status} for ${url}`);\n return res.text();\n}\n\nfunction parseConfDomainsToSet(conf: string): Set {\n const set = new Set();\n for (const line of conf.split(/\\r?\\n/g)) {\n const v = line.trim().toLowerCase();\n if (!v || v.startsWith(\"#\")) continue;\n set.add(v);\n }\n return set;\n}\n\nasync function getLists(forceRefresh: boolean): Promise<{\n ok: boolean;\n domains: Set;\n allow: Set;\n ageSec: number;\n err?: string;\n}> {\n const now = Date.now();\n\n if (\n !forceRefresh && cachedLists && now - cachedLists.fetchedAt < LIST_TTL_MS\n ) {\n return {\n ok: true,\n domains: cachedLists.domains,\n allow: cachedLists.allow,\n ageSec: Math.floor((now - cachedLists.fetchedAt) / 1000),\n };\n }\n\n try {\n const [blockTxt, allowTxt] = await Promise.all([\n fetchText(DISPOSABLE_DOMAIN_LIST_URL),\n fetchText(DISPOSABLE_ALLOWLIST_URL),\n ]);\n\n cachedLists = {\n fetchedAt: now,\n domains: parseConfDomainsToSet(blockTxt),\n allow: parseConfDomainsToSet(allowTxt),\n };\n\n return {\n ok: true,\n domains: cachedLists.domains,\n allow: cachedLists.allow,\n ageSec: 0,\n };\n } catch (e: any) {\n return {\n ok: false,\n domains: cachedLists?.domains ?? new Set(),\n allow: cachedLists?.allow ?? new Set(),\n ageSec: cachedLists\n ? Math.floor((now - cachedLists.fetchedAt) / 1000)\n : 0,\n err: e?.message ?? String(e),\n };\n }\n}\n\n// Simple concurrency mapper\nasync function mapWithConcurrency(\n items: T[],\n limit: number,\n fn: (item: T) => Promise,\n): Promise {\n const results: R[] = new Array(items.length);\n let idx = 0;\n const workers = Array.from(\n { length: Math.min(limit, items.length) },\n async () => {\n while (idx < items.length) {\n const current = idx++;\n results[current] = await fn(items[current]);\n }\n },\n );\n await Promise.all(workers);\n return results;\n}\n\n/**\n * Build \"disposable infra\" sets:\n * - MX exchanges used by known disposable domains\n * - NS used by known disposable domains\n *\n * This is the KEY strategy to catch new disposable domains not yet in the domain list.\n */\nasync function getInfra(\n disposableDomains: Set,\n forceRefresh: boolean,\n enableInfra: boolean,\n): Promise<{\n ok: boolean;\n mx: Set;\n ns: Set;\n ageSec: number;\n sampled: number;\n err?: string;\n}> {\n const now = Date.now();\n\n if (!enableInfra) {\n return {\n ok: true,\n mx: cachedInfra?.mx ?? new Set(),\n ns: cachedInfra?.ns ?? new Set(),\n ageSec: cachedInfra ? Math.floor((now - cachedInfra.builtAt) / 1000) : 0,\n sampled: cachedInfra?.sampled ?? 0,\n };\n }\n\n if (\n !forceRefresh && cachedInfra && now - cachedInfra.builtAt < INFRA_TTL_MS\n ) {\n return {\n ok: true,\n mx: cachedInfra.mx,\n ns: cachedInfra.ns,\n ageSec: Math.floor((now - cachedInfra.builtAt) / 1000),\n sampled: cachedInfra.sampled,\n };\n }\n\n try {\n const all = Array.from(disposableDomains);\n const sample = all.slice(0, Math.min(all.length, INFRA_BUILD_MAX_DOMAINS));\n\n const mxSet = new Set();\n const nsSet = new Set();\n\n // Resolve MX and NS for each sampled disposable domain\n await mapWithConcurrency(sample, INFRA_CONCURRENCY, async (d) => {\n // MX\n try {\n const mx = await resolveMx(d);\n for (const r of mx) mxSet.add(r.exchange.toLowerCase());\n } catch {\n // ignore\n }\n // NS\n try {\n const ns = await resolveNs(d);\n for (const n of ns) nsSet.add(n.toLowerCase());\n } catch {\n // ignore\n }\n return true;\n });\n\n cachedInfra = {\n builtAt: now,\n mx: mxSet,\n ns: nsSet,\n sampled: sample.length,\n };\n\n return {\n ok: true,\n mx: mxSet,\n ns: nsSet,\n ageSec: 0,\n sampled: sample.length,\n };\n } catch (e: any) {\n return {\n ok: false,\n mx: cachedInfra?.mx ?? new Set(),\n ns: cachedInfra?.ns ?? new Set(),\n ageSec: cachedInfra ? Math.floor((now - cachedInfra.builtAt) / 1000) : 0,\n sampled: cachedInfra?.sampled ?? 0,\n err: e?.message ?? String(e),\n };\n }\n}\n\n// ------------------------ Scoring / Decision ------------------------\n// This is where “allow email to go through” becomes practical.\n// You can tune weights later; these defaults are sane.\nfunction computeScoreAndDecision(args: {\n disposableDomainHit: boolean;\n allowlistHit: boolean;\n disposableMxHit: boolean;\n disposableNsHit: boolean;\n deliverability: Deliverability;\n bounceRate?: number;\n attempts?: number;\n}): { score: number; decision: Risk; reasons: string[] } {\n const reasons: string[] = [];\n let score = 0;\n\n // Deliverability is separate from fraud; but undeliverable should be blocked.\n if (args.deliverability === \"UNDELIVERABLE\") {\n return {\n score: 100,\n decision: \"BLOCK\",\n reasons: [\"Undeliverable domain (no MX and no A/AAAA).\"],\n };\n }\n if (args.deliverability === \"DNS_ERROR\") {\n // unknown deliverability -> usually require verification instead of blocking\n score += 25;\n reasons.push(\"DNS error (unknown deliverability) adds risk.\");\n }\n\n // Allowlist overrides disposable signals (reduces false positives)\n if (args.allowlistHit) {\n reasons.push(\"Allowlist hit: overrides disposable signals.\");\n // Still can use bounce signal below\n } else {\n if (args.disposableDomainHit) {\n score += 90;\n reasons.push(\"Known disposable domain hit (+90).\");\n }\n if (args.disposableMxHit) {\n score += 70;\n reasons.push(\"Disposable MX infrastructure hit (+70).\");\n }\n if (args.disposableNsHit) {\n score += 50;\n reasons.push(\"Disposable NS infrastructure hit (+50).\");\n }\n }\n\n // Bounce signal (only trust if sample size is meaningful)\n const bounce = args.bounceRate;\n const attempts = args.attempts;\n\n if (bounce !== undefined) {\n const b = Math.max(0, Math.min(1, bounce));\n const n = attempts ?? 0;\n\n if (n >= 50) {\n // strong signal\n const add = Math.round(b * 60);\n score += add;\n reasons.push(\n `Bounce rate ${Math.round(b * 100)}% with attempts=${n} (+${add}).`,\n );\n } else if (n >= 10) {\n // medium signal\n const add = Math.round(b * 30);\n score += add;\n reasons.push(\n `Bounce rate ${Math.round(b * 100)}% with attempts=${n} (+${add}).`,\n );\n } else {\n reasons.push(\n `Bounce rate provided but attempts=${n} too low to weigh strongly.`,\n );\n }\n } else {\n reasons.push(\"No bounce signal provided.\");\n }\n\n score = Math.max(0, Math.min(100, score));\n\n // Decision thresholds (tune to taste)\n let decision: Risk;\n if (score >= 80) decision = \"BLOCK\";\n else if (score >= 40) decision = \"REQUIRE_VERIFICATION\";\n else decision = \"ALLOW\";\n\n return { score, decision, reasons };\n}\n\n// ------------------------ Evaluation ------------------------\nasync function evaluateDomain(\n input: string,\n domain: string,\n listOk: boolean,\n listAgeSec: number,\n disposableDomains: Set,\n allow: Set,\n infraOk: boolean,\n infraAgeSec: number,\n infraMx: Set,\n infraNs: Set,\n bounceMap: Map,\n attemptsMap: Map,\n): Promise {\n const start = Date.now();\n\n if (!isProbablyDomain(domain)) {\n return {\n input,\n domain,\n deliverability: \"UNDELIVERABLE\",\n hasMx: false,\n disposableDomainHit: false,\n allowlistHit: false,\n disposableMxHit: false,\n disposableNsHit: false,\n score: 100,\n decision: \"BLOCK\",\n reasons: [\"Invalid domain token after normalization.\"],\n debug: {\n durationMs: Date.now() - start,\n failedAt: \"parse\",\n listAgeSec,\n infraAgeSec,\n },\n };\n }\n\n // Disposable domain hit (with parent matching)\n const allowlistHit = domainAndParents(domain).some((d) => allow.has(d));\n const disposableDomainHit = !allowlistHit &&\n domainAndParents(domain).some((d) => disposableDomains.has(d));\n\n const bounceRateRaw = bounceMap.get(domain);\n const bounceRate = bounceRateRaw !== undefined\n ? Math.max(0, Math.min(1, bounceRateRaw))\n : undefined;\n const attempts = attemptsMap.get(domain);\n\n // DNS deliverability + MX selection\n let deliverability: Deliverability = \"DNS_ERROR\";\n let mxRecords: MXRecordOut[] | undefined;\n let selectedMx: MXRecordOut | undefined;\n let aCount = 0;\n let aaaaCount = 0;\n\n try {\n const mxRaw = await resolveMx(domain).catch(() => []);\n mxRecords = mxRaw\n .map((r) => ({\n exchange: r.exchange.toLowerCase(),\n priority: r.priority,\n }))\n .sort((a, b) => a.priority - b.priority);\n\n if (mxRecords.length > 0) {\n deliverability = \"DELIVERABLE_MX\";\n selectedMx = mxRecords[0];\n } else {\n const [a4, a6] = await Promise.allSettled([\n resolve4(domain),\n resolve6(domain),\n ]);\n aCount = a4.status === \"fulfilled\" ? a4.value.length : 0;\n aaaaCount = a6.status === \"fulfilled\" ? a6.value.length : 0;\n deliverability = (aCount > 0 || aaaaCount > 0)\n ? \"DELIVERABLE_FALLBACK\"\n : \"UNDELIVERABLE\";\n }\n } catch (err: any) {\n // keep deliverability DNS_ERROR\n }\n\n // NS resolution (infrastructure signal)\n let nsRecords: string[] | undefined;\n let disposableNsHit = false;\n try {\n const ns = await resolveNs(domain);\n nsRecords = ns.map((x) => x.toLowerCase());\n if (infraOk && nsRecords.length > 0) {\n disposableNsHit = nsRecords.some((n) => infraNs.has(n));\n }\n } catch {\n // ignore\n }\n\n // MX infra hit\n const disposableMxHit = infraOk &&\n !!selectedMx &&\n infraMx.has(selectedMx.exchange.toLowerCase());\n\n const { score, decision, reasons } = computeScoreAndDecision({\n disposableDomainHit,\n allowlistHit,\n disposableMxHit,\n disposableNsHit,\n deliverability,\n bounceRate,\n attempts,\n });\n\n // Add context reasons\n if (!listOk) {\n reasons.unshift(\n \"Disposable domain list fetch failed; domain-hit signal may be incomplete.\",\n );\n }\n if (!infraOk) {\n reasons.unshift(\n \"Disposable infra build failed; MX/NS infra signals may be incomplete.\",\n );\n }\n\n if (deliverability === \"DELIVERABLE_MX\") {\n reasons.unshift(\"MX records found (can receive email).\");\n }\n if (deliverability === \"DELIVERABLE_FALLBACK\") {\n reasons.unshift(\"No MX; A/AAAA exists (SMTP fallback possible).\");\n }\n if (deliverability === \"DNS_ERROR\") {\n reasons.unshift(\"DNS error when checking deliverability.\");\n }\n\n if (allowlistHit) {\n reasons.push(\"Allowlist: treated as non-disposable for classification.\");\n } else if (disposableDomainHit) reasons.push(\"Disposable-domain list match.\");\n else reasons.push(\"No disposable-domain list match.\");\n\n if (disposableMxHit) reasons.push(\"Disposable MX infra match (strong).\");\n if (disposableNsHit) reasons.push(\"Disposable NS infra match (medium).\");\n\n return {\n input,\n domain,\n deliverability,\n hasMx: deliverability === \"DELIVERABLE_MX\",\n disposableDomainHit,\n allowlistHit,\n disposableMxHit,\n disposableNsHit,\n bounceRate,\n attempts,\n score,\n decision,\n reasons,\n mxRecords,\n selectedMx,\n nsRecords,\n debug: {\n durationMs: Date.now() - start,\n listAgeSec,\n infraAgeSec,\n aCount,\n aaaaCount,\n },\n };\n}\n\n// ------------------------ Output (Pretty by default) ------------------------\nfunction prettyOutput(meta: {\n listStatus: string;\n infraStatus: string;\n}, results: DomainResult[]) {\n const totals = results.reduce((a, r) => {\n a.total++;\n a[r.decision] = (a[r.decision] ?? 0) + 1;\n a[r.deliverability] = (a[r.deliverability] ?? 0) + 1;\n a.disposableHits += r.disposableDomainHit ? 1 : 0;\n a.mxInfraHits += r.disposableMxHit ? 1 : 0;\n a.nsInfraHits += r.disposableNsHit ? 1 : 0;\n return a;\n }, {\n total: 0,\n ALLOW: 0,\n REQUIRE_VERIFICATION: 0,\n BLOCK: 0,\n DELIVERABLE_MX: 0,\n DELIVERABLE_FALLBACK: 0,\n UNDELIVERABLE: 0,\n DNS_ERROR: 0,\n disposableHits: 0,\n mxInfraHits: 0,\n nsInfraHits: 0,\n } as any);\n\n const lines: string[] = [];\n lines.push(\"Email Domain Allow/Verify/Block Evaluation\");\n lines.push(\"=\".repeat(160));\n lines.push(`Disposable list: ${meta.listStatus}`);\n lines.push(`Infra map: ${meta.infraStatus}`);\n lines.push(\n `Total=${totals.total} | ALLOW=${totals.ALLOW} | VERIFY=${totals.REQUIRE_VERIFICATION} | BLOCK=${totals.BLOCK} | MX=${totals.DELIVERABLE_MX} | FALLBACK=${totals.DELIVERABLE_FALLBACK} | UNDELIVERABLE=${totals.UNDELIVERABLE} | DNS_ERROR=${totals.DNS_ERROR}`,\n );\n lines.push(\n `Signals: domainHits=${totals.disposableHits} | mxInfraHits=${totals.mxInfraHits} | nsInfraHits=${totals.nsInfraHits}`,\n );\n lines.push(\"\");\n\n lines.push(\n [\n pad(\"Domain\", 26),\n pad(\"Deliverability\", 20),\n pad(\"Decision\", 20),\n pad(\"Score\", 5),\n pad(\"List\", 5),\n pad(\"MXI\", 4),\n pad(\"NSI\", 4),\n pad(\"Bounce\", 10),\n pad(\"Selected MX / Fallback\", 40),\n pad(\"ms\", 5),\n \"Key reasons\",\n ].join(\" | \"),\n );\n lines.push(\"-\".repeat(190));\n\n for (const r of results) {\n const mxOrFallback = r.deliverability === \"DELIVERABLE_MX\"\n ? `${r.selectedMx?.exchange ?? \"-\"} (p=${r.selectedMx?.priority ?? \"-\"})`\n : r.deliverability === \"DELIVERABLE_FALLBACK\"\n ? `A=${r.debug.aCount ?? 0}, AAAA=${r.debug.aaaaCount ?? 0}`\n : \"-\";\n\n const bounce = r.bounceRate === undefined\n ? \"-\"\n : `${Math.round(r.bounceRate * 100)}% (n=${r.attempts ?? 0})`;\n\n // show only top 2-3 reasons in table (full reasons still appended below)\n const keyReasons = r.reasons.slice(0, 3).join(\" \");\n\n lines.push(\n [\n pad(r.domain, 26),\n pad(r.deliverability, 20),\n pad(r.decision, 20),\n pad(String(r.score), 5),\n pad(\n r.disposableDomainHit ? \"yes\" : (r.allowlistHit ? \"allow\" : \"no\"),\n 5,\n ),\n pad(r.disposableMxHit ? \"yes\" : \"no\", 4),\n pad(r.disposableNsHit ? \"yes\" : \"no\", 4),\n pad(bounce, 10),\n pad(mxOrFallback, 40),\n pad(String(r.debug.durationMs), 5),\n keyReasons,\n ].join(\" | \"),\n );\n\n // Print extended reasons for non-ALLOW or debug interest\n if (r.decision !== \"ALLOW\") {\n lines.push(` ↳ reasons: ${r.reasons.join(\" | \")}`);\n }\n }\n\n lines.push(\"\");\n lines.push(\"Query params:\");\n lines.push(\" ?domains=a.com,b.com\");\n lines.push(\" &format=json (raw JSON)\");\n lines.push(\" &refresh=1 (force refresh lists + infra)\");\n lines.push(\" &infra=0 (skip infra mapping; list-only)\");\n lines.push(\" &bounces=dom:0.9,dom2:0.01 (your bounce rate signal 0..1)\");\n lines.push(\n \" &attempts=dom:120,dom2:5000 (sample size for bounce weighting)\",\n );\n return lines.join(\"\\n\");\n}\n\n// ------------------------ Handler ------------------------\nexport default async function (req: Request): Promise {\n if (req.method !== \"GET\") return new Response(\"Use GET\", { status: 405 });\n\n const url = new URL(req.url);\n const domainsParam = url.searchParams.get(\"domains\");\n const format = (url.searchParams.get(\"format\") || \"pretty\").toLowerCase();\n const forceRefresh = url.searchParams.get(\"refresh\") === \"1\";\n const enableInfra = url.searchParams.get(\"infra\") !== \"0\";\n\n const bounceMap = parseNumberMap(url.searchParams.get(\"bounces\"));\n const attemptsMap = parseNumberMap(url.searchParams.get(\"attempts\"));\n\n if (!domainsParam) {\n const msg =\n \"Missing 'domains' parameter.\\nExample:\\n ?domains=yopmail.com,example.com\\nOptional:\\n &bounces=yopmail.com:0.9\\n &attempts=yopmail.com:120\\n &refresh=1\\n &format=json\\n\";\n if (format === \"json\") {\n return Response.json({ error: msg }, { status: 400 });\n }\n return new Response(msg, {\n status: 400,\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n\n // 1) Load lists\n const list = await getLists(forceRefresh);\n const listStatus = list.ok\n ? `OK (age ${list.ageSec}s) from GitHub`\n : `FAILED (${list.err}) — disposable domain signal may be incomplete`;\n\n // 2) Build infra map (MX/NS sets)\n const infra = await getInfra(list.domains, forceRefresh, enableInfra);\n const infraStatus = enableInfra\n ? (infra.ok\n ? `OK (age ${infra.ageSec}s), sampled=${infra.sampled} disposable domains`\n : `FAILED (${infra.err}) — infra signals incomplete (age ${infra.ageSec}s, sampled=${infra.sampled})`)\n : \"DISABLED (infra=0)\";\n\n const inputs = parseDomains(domainsParam);\n\n const results = await Promise.all(\n inputs.map((d) =>\n evaluateDomain(\n d.input,\n d.domain,\n list.ok,\n list.ageSec,\n list.domains,\n list.allow,\n infra.ok,\n infra.ageSec,\n infra.mx,\n infra.ns,\n bounceMap,\n attemptsMap,\n )\n ),\n );\n\n if (format === \"json\") {\n return Response.json(\n {\n meta: {\n disposableListUrl: DISPOSABLE_DOMAIN_LIST_URL,\n allowlistUrl: DISPOSABLE_ALLOWLIST_URL,\n listStatus,\n infraStatus,\n },\n count: results.length,\n results,\n },\n { status: 200 },\n );\n }\n\n return new Response(prettyOutput({ listStatus, infraStatus }, results), {\n status: 200,\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1769662864651],"children",[],[35],"9cf9b50a-fcc9-11f0-81b7-42dde27851f2",["D",1769660330068],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","019c07f8-845a-756f-92e1-7e027898138f","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019c07f8-845a-756f-92e1-8297aa3e26a6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_114":110},"org",{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzM4dXIySjVhdHpqaXA4S3R6dzRTeTVqSkFJNCJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":148,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":149,"_95":150,"_97":151,"_99":53},[145],"files",[145],"counts",{"_135":77,"_136":137,"_138":77,"_31":139,"_140":141},[133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":134},[35],"pulls","branches",1,"forks",{"_142":77,"_144":77},"connections",{"_142":77,"_143":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":146,"_18":147},[],[35],["D",1769660330068],{"_11":12,"_114":110},{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_130":185,"_186":187,"_188":189,"_190":53,"_191":53,"_192":53,"_193":44,"_194":-5,"_195":-7,"_196":-7,"_197":77,"_198":53,"_199":53,"_200":-5,"_201":53,"_202":53,"_203":53,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":16,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code