[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_278":279,"_280":281},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_228":229,"_47":-7,"_230":-5,"_17":231,"_232":233,"_234":235,"_236":237,"_238":239,"_61":-5,"_240":-5,"_241":-5,"_242":24,"_243":244,"_245":86,"_246":-5,"_247":-5,"_248":249},"routes/_app.x.$handle.$name.branch.$branch.history",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5},"handle","alimalik901","name","untitled-2415","branchName","main","project",{"_41":182,"_13":14,"_45":183,"_184":-5,"_185":24,"_186":187,"_188":187,"_189":-5,"_190":-5,"_25":76,"_191":-5,"_192":24,"_193":-5,"_194":-5,"_195":20,"_49":50,"_196":-5,"_197":-5,"_198":-5,"_199":-5,"_200":201,"_202":201,"_203":204,"_205":204,"_206":204,"_207":201,"_208":201,"_59":209,"_210":211,"_212":213,"_214":24},"page",0,"history",[26,27,28,29,30,31,32,33,34,35,36,37,38,39,40],"hasNext",false,"userId",{"_41":175,"_43":44,"_45":176,"_47":177,"_49":50,"_51":168,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":178,"_61":179,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":180},{"_41":168,"_43":44,"_45":169,"_47":170,"_49":50,"_51":161,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":171,"_61":172,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":173},{"_41":161,"_43":44,"_45":162,"_47":163,"_49":50,"_51":154,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":164,"_61":165,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":166},{"_41":154,"_43":44,"_45":155,"_47":156,"_49":50,"_51":147,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":157,"_61":158,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":159},{"_41":147,"_43":44,"_45":148,"_47":149,"_49":50,"_51":140,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":150,"_61":151,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":152},{"_41":140,"_43":44,"_45":141,"_47":142,"_49":50,"_51":133,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":143,"_61":144,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":145},{"_41":133,"_43":44,"_45":134,"_47":135,"_49":50,"_51":126,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":136,"_61":137,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":138},{"_41":126,"_43":44,"_45":127,"_47":128,"_49":50,"_51":119,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":129,"_61":130,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":131},{"_41":119,"_43":44,"_45":120,"_47":121,"_49":50,"_51":112,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":122,"_61":123,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":124},{"_41":112,"_43":44,"_45":113,"_47":114,"_49":50,"_51":104,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":115,"_61":116,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":117},{"_41":104,"_43":44,"_45":105,"_47":106,"_49":50,"_51":96,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":107,"_61":108,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":109},{"_41":96,"_43":44,"_45":97,"_47":98,"_49":50,"_51":87,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":99,"_61":100,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":101},{"_41":87,"_43":44,"_45":88,"_47":89,"_49":50,"_51":79,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":90,"_61":91,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":92},{"_41":79,"_43":44,"_45":80,"_47":81,"_49":50,"_51":42,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":82,"_61":83,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":84},{"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68},"id","9cfd02d2-fcc9-11f0-81b7-42dde27851f2","branchId","9cfa0816-fcc9-11f0-81b7-42dde27851f2","createdAt",["D",1769660330081],"version",1,"orgId","019c07f8-845a-756f-92e1-8297aa3e26a6","parentId","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_41":76,"_49":50,"_11":12,"_77":78},"file",{"_70":71,"_13":72,"_73":74,"_75":24},"pull","merge","revert","multiple","commits",[69],{"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5},"fileId","9cfbe2f8-fcc9-11f0-81b7-42dde27851f2","main.ts","fileType","script","deleted","019c07f8-845a-756f-92e1-7e027898138f","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzM4dXIySjVhdHpqaXA4S3R6dzRTeTVqSkFJNCJ9","a2f2fa20-fcc9-11f0-bcb7-42dde27851f2",["D",1769660340070],2,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":71,"_13":72,"_73":74,"_75":86},[85],{"_41":79,"_43":44,"_45":80,"_47":81,"_49":50,"_51":42,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":82,"_61":83,"_63":-5,"_64":-5,"_65":-5},true,"a9145f66-fcc9-11f0-85e6-42dde27851f2",["D",1769660350357],3,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":95,"_73":74,"_75":24},[93],{"_41":87,"_43":44,"_45":88,"_47":89,"_49":50,"_51":79,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":90,"_61":91,"_63":-5,"_64":-5,"_65":-5},"a9124988-fcc9-11f0-85e6-42dde27851f2","new-file-9315.ts","17096a84-fcca-11f0-b37a-42dde27851f2",["D",1769660534835],4,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":95,"_73":103,"_75":24},[102],{"_41":96,"_43":44,"_45":97,"_47":98,"_49":50,"_51":87,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":99,"_61":100,"_63":-5,"_64":-5,"_65":-5},"http","17107766-fcca-11f0-9635-42dde27851f2",["D",1769660534836],5,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[110],{"_41":104,"_43":44,"_45":105,"_47":106,"_49":50,"_51":96,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":107,"_61":108,"_63":-5,"_64":-5,"_65":-5},"emailValidator.ts","17419de6-fcca-11f0-9f60-42dde27851f2",["D",1769660535199],6,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[118],{"_41":112,"_43":44,"_45":113,"_47":114,"_49":50,"_51":104,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":115,"_61":116,"_63":-5,"_64":-5,"_65":-5},"20e29fa8-fcca-11f0-a85e-42dde27851f2",["D",1769660551354],7,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[125],{"_41":119,"_43":44,"_45":120,"_47":121,"_49":50,"_51":112,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":122,"_61":123,"_63":-5,"_64":-5,"_65":-5},"49673560-fcca-11f0-8f34-42dde27851f2",["D",1769660619330],8,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[132],{"_41":126,"_43":44,"_45":127,"_47":128,"_49":50,"_51":119,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":129,"_61":130,"_63":-5,"_64":-5,"_65":-5},"2724d510-fccb-11f0-ba6c-42dde27851f2",["D",1769660991352],9,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[139],{"_41":133,"_43":44,"_45":134,"_47":135,"_49":50,"_51":126,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":136,"_61":137,"_63":-5,"_64":-5,"_65":-5},"4be02670-fccb-11f0-9a7b-42dde27851f2",["D",1769661052987],10,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[146],{"_41":140,"_43":44,"_45":141,"_47":142,"_49":50,"_51":133,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":143,"_61":144,"_63":-5,"_64":-5,"_65":-5},"925c80ca-fccc-11f0-b420-42dde27851f2",["D",1769661600732],11,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[153],{"_41":147,"_43":44,"_45":148,"_47":149,"_49":50,"_51":140,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":150,"_61":151,"_63":-5,"_64":-5,"_65":-5},"db1d08ca-fccc-11f0-a2f1-42dde27851f2",["D",1769661722775],12,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[160],{"_41":154,"_43":44,"_45":155,"_47":156,"_49":50,"_51":147,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":157,"_61":158,"_63":-5,"_64":-5,"_65":-5},"34178a04-fccd-11f0-9a02-42dde27851f2",["D",1769661872064],13,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[167],{"_41":161,"_43":44,"_45":162,"_47":163,"_49":50,"_51":154,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":164,"_61":165,"_63":-5,"_64":-5,"_65":-5},"5ba24734-fcce-11f0-b805-42dde27851f2",["D",1769662367906],14,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[174],{"_41":168,"_43":44,"_45":169,"_47":170,"_49":50,"_51":161,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":171,"_61":172,"_63":-5,"_64":-5,"_65":-5},"83b86932-fccf-11f0-8268-42dde27851f2",["D",1769662864651],15,{"_41":76,"_49":50,"_11":12,"_77":78},{"_70":94,"_13":111,"_73":103,"_75":24},[181],{"_41":175,"_43":44,"_45":176,"_47":177,"_49":50,"_51":168,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":178,"_61":179,"_63":-5,"_64":-5,"_65":-5},"9cf9b50a-fcc9-11f0-81b7-42dde27851f2",["D",1769660330068],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_227":78},"org",{"_11":12,"_223":-5,"_77":78,"_25":76,"_224":225,"_226":24},"branch",{"_47":177,"_13":16,"_41":44,"_215":182,"_216":-5,"_217":-5,"_218":-5,"_219":-5,"_220":-5,"_221":14,"_222":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","tier","free","canRestrictVals","profileImageUrl","path","","adoptOrgId",{"_41":182,"_13":14,"_45":274,"_184":-5,"_185":24,"_186":187,"_188":187,"_189":-5,"_190":-5,"_25":76,"_191":-5,"_192":24,"_193":-5,"_194":-5,"_195":20,"_49":50,"_196":-5,"_197":-5,"_198":-5,"_199":-5,"_200":201,"_202":201,"_203":204,"_205":204,"_206":204,"_207":201,"_208":201,"_59":275,"_210":276,"_212":277,"_214":24},"tree",[269],"files",[269],"counts",{"_259":20,"_260":48,"_261":20,"_262":263,"_264":265},"contents",[250],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":251,"_13":111,"_70":94,"_51":-5,"_43":44,"_252":177,"_253":86,"_45":254,"_47":156,"_73":103,"_255":256,"_75":24,"_257":-5,"_228":258},"83b5d8a2-fccf-11f0-8268-42dde27851f2","branchVersion","latest",["D",1769662864651],"content","/**\n * Email-domain gatekeeper (drop-in) — BEST PRACTICAL STRATEGIES\n *\n * What it does:\n * 1) Deliverability check (MX or A/AAAA fallback) ✅ \"valid/invalid\"\n * 2) Disposable detection:\n * - Known disposable domains from GitHub list ✅\n * - Known disposable MX infrastructure (MX exchange) ✅ (catches new rotating domains)\n * - Known disposable NS infrastructure (nameservers) ✅ (often shared)\n * 3) Reputation / bounce signals (you pass in) ✅\n * 4) Outputs PRETTY text by default, JSON with &format=json ✅\n *\n * Usage:\n * - Pretty (default): ?domains=a.com,b.com\n * - JSON: ?domains=a.com,b.com&format=json\n * - Provide bounce stats:\n * &bounces=domain.com:0.92,gmail.com:0.01\n * &attempts=domain.com:120,gmail.com:5000\n * (attempts lets the code avoid overreacting to tiny sample sizes)\n * - Control list refresh:\n * &refresh=1 (force refresh lists and infra caches now)\n * &infra=0 (skip infra learning; only domain list)\n *\n * Notes:\n * - No strategy can be perfect without a reputation provider.\n * - The best win is \"disposable MX/NS infra mapping\" + your bounce history.\n */\n\nimport { resolve4, resolve6, resolveMx, resolveNs } from \"node:dns/promises\";\n\n// ------------------------ Config: GitHub Sources ------------------------\n// These are signals, not a \"block list you provide\". Your input list is ?domains=...\nconst DISPOSABLE_DOMAIN_LIST_URL =\n \"https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/main/disposable_email_blocklist.conf\";\nconst DISPOSABLE_ALLOWLIST_URL =\n \"https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/main/allowlist.conf\";\n\n// ------------------------ Caching ------------------------\nconst LIST_TTL_MS = 6 * 60 * 60 * 1000; // 6h\nconst INFRA_TTL_MS = 24 * 60 * 60 * 1000; // 24h (MX/NS infra changes slower)\nconst INFRA_BUILD_MAX_DOMAINS = 5000; // cap for serverless safety (adjust if needed)\nconst INFRA_CONCURRENCY = 50; // DNS concurrency for infra build\n\nlet cachedLists: null | {\n fetchedAt: number;\n domains: Set; // disposable domain set\n allow: Set;\n} = null;\n\nlet cachedInfra: null | {\n builtAt: number;\n mx: Set; // disposable MX exchanges\n ns: Set; // disposable nameservers\n sampled: number; // number of disposable domains sampled to build infra\n} = null;\n\n// ------------------------ Types ------------------------\ntype Deliverability =\n | \"DELIVERABLE_MX\"\n | \"DELIVERABLE_FALLBACK\"\n | \"UNDELIVERABLE\"\n | \"DNS_ERROR\";\ntype Risk = \"ALLOW\" | \"REQUIRE_VERIFICATION\" | \"BLOCK\";\n\ninterface MXRecordOut {\n exchange: string;\n priority: number;\n}\n\ninterface DomainResult {\n input: string;\n domain: string;\n\n deliverability: Deliverability;\n hasMx: boolean;\n\n // Signals\n disposableDomainHit: boolean;\n allowlistHit: boolean;\n disposableMxHit: boolean;\n disposableNsHit: boolean;\n\n bounceRate?: number; // 0..1 (optional)\n attempts?: number; // (optional)\n\n score: number; // 0..100\n decision: Risk;\n reasons: string[];\n\n mxRecords?: MXRecordOut[];\n selectedMx?: MXRecordOut;\n nsRecords?: string[];\n\n debug: {\n durationMs: number;\n listAgeSec?: number;\n infraAgeSec?: number;\n aCount?: number;\n aaaaCount?: number;\n failedAt?:\n | \"parse\"\n | \"list_fetch\"\n | \"infra_build\"\n | \"mx\"\n | \"fallback\"\n | \"ns\";\n error?: { code?: string; message: string };\n };\n}\n\n// ------------------------ Helpers ------------------------\nfunction pad(s: string, n: number) {\n const v = s ?? \"\";\n return v.length >= n ? v.slice(0, n) : v.padEnd(n);\n}\n\nfunction splitTokens(raw: string): string[] {\n return raw.split(/[\\s,]+/g).map((t) => t.trim()).filter(Boolean);\n}\n\nfunction normalizeDomain(token: string): string {\n const afterAt = token.includes(\"@\") ? token.split(\"@\").pop()! : token;\n return afterAt.replace(/^@+/, \"\").toLowerCase();\n}\n\nfunction parseDomains(raw: string): { input: string; domain: string }[] {\n const tokens = splitTokens(raw);\n const out = tokens.map((t) => ({ input: t, domain: normalizeDomain(t) }));\n\n const seen = new Set();\n return out.filter(({ domain }) => {\n if (!domain) return true;\n if (seen.has(domain)) return false;\n seen.add(domain);\n return true;\n });\n}\n\nfunction isProbablyDomain(d: string): boolean {\n return !!d && d.includes(\".\") && !d.startsWith(\".\") && !d.endsWith(\".\");\n}\n\n// For subdomains: check parents, e.g. a.b.yopmail.com => yopmail.com\nfunction domainAndParents(domain: string): string[] {\n const parts = domain.split(\".\").filter(Boolean);\n const out: string[] = [];\n for (let i = 0; i < parts.length - 1; i++) out.push(parts.slice(i).join(\".\"));\n return out;\n}\n\nfunction parseNumberMap(raw: string | null): Map {\n // format: dom:val,dom:val\n const m = new Map();\n if (!raw) return m;\n for (const part of raw.split(\",\").map((x) => x.trim()).filter(Boolean)) {\n const [dom, vStr] = part.split(\":\").map((x) => x.trim());\n if (!dom || !vStr) continue;\n const v = Number(vStr);\n if (!Number.isFinite(v)) continue;\n m.set(dom.toLowerCase(), v);\n }\n return m;\n}\n\nasync function fetchText(url: string): Promise {\n const res = await fetch(url, { headers: { \"cache-control\": \"no-cache\" } });\n if (!res.ok) throw new Error(`HTTP ${res.status} for ${url}`);\n return res.text();\n}\n\nfunction parseConfDomainsToSet(conf: string): Set {\n const set = new Set();\n for (const line of conf.split(/\\r?\\n/g)) {\n const v = line.trim().toLowerCase();\n if (!v || v.startsWith(\"#\")) continue;\n set.add(v);\n }\n return set;\n}\n\nasync function getLists(forceRefresh: boolean): Promise<{\n ok: boolean;\n domains: Set;\n allow: Set;\n ageSec: number;\n err?: string;\n}> {\n const now = Date.now();\n\n if (\n !forceRefresh && cachedLists && now - cachedLists.fetchedAt < LIST_TTL_MS\n ) {\n return {\n ok: true,\n domains: cachedLists.domains,\n allow: cachedLists.allow,\n ageSec: Math.floor((now - cachedLists.fetchedAt) / 1000),\n };\n }\n\n try {\n const [blockTxt, allowTxt] = await Promise.all([\n fetchText(DISPOSABLE_DOMAIN_LIST_URL),\n fetchText(DISPOSABLE_ALLOWLIST_URL),\n ]);\n\n cachedLists = {\n fetchedAt: now,\n domains: parseConfDomainsToSet(blockTxt),\n allow: parseConfDomainsToSet(allowTxt),\n };\n\n return {\n ok: true,\n domains: cachedLists.domains,\n allow: cachedLists.allow,\n ageSec: 0,\n };\n } catch (e: any) {\n return {\n ok: false,\n domains: cachedLists?.domains ?? new Set(),\n allow: cachedLists?.allow ?? new Set(),\n ageSec: cachedLists\n ? Math.floor((now - cachedLists.fetchedAt) / 1000)\n : 0,\n err: e?.message ?? String(e),\n };\n }\n}\n\n// Simple concurrency mapper\nasync function mapWithConcurrency(\n items: T[],\n limit: number,\n fn: (item: T) => Promise,\n): Promise {\n const results: R[] = new Array(items.length);\n let idx = 0;\n const workers = Array.from(\n { length: Math.min(limit, items.length) },\n async () => {\n while (idx < items.length) {\n const current = idx++;\n results[current] = await fn(items[current]);\n }\n },\n );\n await Promise.all(workers);\n return results;\n}\n\n/**\n * Build \"disposable infra\" sets:\n * - MX exchanges used by known disposable domains\n * - NS used by known disposable domains\n *\n * This is the KEY strategy to catch new disposable domains not yet in the domain list.\n */\nasync function getInfra(\n disposableDomains: Set,\n forceRefresh: boolean,\n enableInfra: boolean,\n): Promise<{\n ok: boolean;\n mx: Set;\n ns: Set;\n ageSec: number;\n sampled: number;\n err?: string;\n}> {\n const now = Date.now();\n\n if (!enableInfra) {\n return {\n ok: true,\n mx: cachedInfra?.mx ?? new Set(),\n ns: cachedInfra?.ns ?? new Set(),\n ageSec: cachedInfra ? Math.floor((now - cachedInfra.builtAt) / 1000) : 0,\n sampled: cachedInfra?.sampled ?? 0,\n };\n }\n\n if (\n !forceRefresh && cachedInfra && now - cachedInfra.builtAt < INFRA_TTL_MS\n ) {\n return {\n ok: true,\n mx: cachedInfra.mx,\n ns: cachedInfra.ns,\n ageSec: Math.floor((now - cachedInfra.builtAt) / 1000),\n sampled: cachedInfra.sampled,\n };\n }\n\n try {\n const all = Array.from(disposableDomains);\n const sample = all.slice(0, Math.min(all.length, INFRA_BUILD_MAX_DOMAINS));\n\n const mxSet = new Set();\n const nsSet = new Set();\n\n // Resolve MX and NS for each sampled disposable domain\n await mapWithConcurrency(sample, INFRA_CONCURRENCY, async (d) => {\n // MX\n try {\n const mx = await resolveMx(d);\n for (const r of mx) mxSet.add(r.exchange.toLowerCase());\n } catch {\n // ignore\n }\n // NS\n try {\n const ns = await resolveNs(d);\n for (const n of ns) nsSet.add(n.toLowerCase());\n } catch {\n // ignore\n }\n return true;\n });\n\n cachedInfra = {\n builtAt: now,\n mx: mxSet,\n ns: nsSet,\n sampled: sample.length,\n };\n\n return {\n ok: true,\n mx: mxSet,\n ns: nsSet,\n ageSec: 0,\n sampled: sample.length,\n };\n } catch (e: any) {\n return {\n ok: false,\n mx: cachedInfra?.mx ?? new Set(),\n ns: cachedInfra?.ns ?? new Set(),\n ageSec: cachedInfra ? Math.floor((now - cachedInfra.builtAt) / 1000) : 0,\n sampled: cachedInfra?.sampled ?? 0,\n err: e?.message ?? String(e),\n };\n }\n}\n\n// ------------------------ Scoring / Decision ------------------------\n// This is where “allow email to go through” becomes practical.\n// You can tune weights later; these defaults are sane.\nfunction computeScoreAndDecision(args: {\n disposableDomainHit: boolean;\n allowlistHit: boolean;\n disposableMxHit: boolean;\n disposableNsHit: boolean;\n deliverability: Deliverability;\n bounceRate?: number;\n attempts?: number;\n}): { score: number; decision: Risk; reasons: string[] } {\n const reasons: string[] = [];\n let score = 0;\n\n // Deliverability is separate from fraud; but undeliverable should be blocked.\n if (args.deliverability === \"UNDELIVERABLE\") {\n return {\n score: 100,\n decision: \"BLOCK\",\n reasons: [\"Undeliverable domain (no MX and no A/AAAA).\"],\n };\n }\n if (args.deliverability === \"DNS_ERROR\") {\n // unknown deliverability -> usually require verification instead of blocking\n score += 25;\n reasons.push(\"DNS error (unknown deliverability) adds risk.\");\n }\n\n // Allowlist overrides disposable signals (reduces false positives)\n if (args.allowlistHit) {\n reasons.push(\"Allowlist hit: overrides disposable signals.\");\n // Still can use bounce signal below\n } else {\n if (args.disposableDomainHit) {\n score += 90;\n reasons.push(\"Known disposable domain hit (+90).\");\n }\n if (args.disposableMxHit) {\n score += 70;\n reasons.push(\"Disposable MX infrastructure hit (+70).\");\n }\n if (args.disposableNsHit) {\n score += 50;\n reasons.push(\"Disposable NS infrastructure hit (+50).\");\n }\n }\n\n // Bounce signal (only trust if sample size is meaningful)\n const bounce = args.bounceRate;\n const attempts = args.attempts;\n\n if (bounce !== undefined) {\n const b = Math.max(0, Math.min(1, bounce));\n const n = attempts ?? 0;\n\n if (n >= 50) {\n // strong signal\n const add = Math.round(b * 60);\n score += add;\n reasons.push(\n `Bounce rate ${Math.round(b * 100)}% with attempts=${n} (+${add}).`,\n );\n } else if (n >= 10) {\n // medium signal\n const add = Math.round(b * 30);\n score += add;\n reasons.push(\n `Bounce rate ${Math.round(b * 100)}% with attempts=${n} (+${add}).`,\n );\n } else {\n reasons.push(\n `Bounce rate provided but attempts=${n} too low to weigh strongly.`,\n );\n }\n } else {\n reasons.push(\"No bounce signal provided.\");\n }\n\n score = Math.max(0, Math.min(100, score));\n\n // Decision thresholds (tune to taste)\n let decision: Risk;\n if (score >= 80) decision = \"BLOCK\";\n else if (score >= 40) decision = \"REQUIRE_VERIFICATION\";\n else decision = \"ALLOW\";\n\n return { score, decision, reasons };\n}\n\n// ------------------------ Evaluation ------------------------\nasync function evaluateDomain(\n input: string,\n domain: string,\n listOk: boolean,\n listAgeSec: number,\n disposableDomains: Set,\n allow: Set,\n infraOk: boolean,\n infraAgeSec: number,\n infraMx: Set,\n infraNs: Set,\n bounceMap: Map,\n attemptsMap: Map,\n): Promise {\n const start = Date.now();\n\n if (!isProbablyDomain(domain)) {\n return {\n input,\n domain,\n deliverability: \"UNDELIVERABLE\",\n hasMx: false,\n disposableDomainHit: false,\n allowlistHit: false,\n disposableMxHit: false,\n disposableNsHit: false,\n score: 100,\n decision: \"BLOCK\",\n reasons: [\"Invalid domain token after normalization.\"],\n debug: {\n durationMs: Date.now() - start,\n failedAt: \"parse\",\n listAgeSec,\n infraAgeSec,\n },\n };\n }\n\n // Disposable domain hit (with parent matching)\n const allowlistHit = domainAndParents(domain).some((d) => allow.has(d));\n const disposableDomainHit = !allowlistHit &&\n domainAndParents(domain).some((d) => disposableDomains.has(d));\n\n const bounceRateRaw = bounceMap.get(domain);\n const bounceRate = bounceRateRaw !== undefined\n ? Math.max(0, Math.min(1, bounceRateRaw))\n : undefined;\n const attempts = attemptsMap.get(domain);\n\n // DNS deliverability + MX selection\n let deliverability: Deliverability = \"DNS_ERROR\";\n let mxRecords: MXRecordOut[] | undefined;\n let selectedMx: MXRecordOut | undefined;\n let aCount = 0;\n let aaaaCount = 0;\n\n try {\n const mxRaw = await resolveMx(domain).catch(() => []);\n mxRecords = mxRaw\n .map((r) => ({\n exchange: r.exchange.toLowerCase(),\n priority: r.priority,\n }))\n .sort((a, b) => a.priority - b.priority);\n\n if (mxRecords.length > 0) {\n deliverability = \"DELIVERABLE_MX\";\n selectedMx = mxRecords[0];\n } else {\n const [a4, a6] = await Promise.allSettled([\n resolve4(domain),\n resolve6(domain),\n ]);\n aCount = a4.status === \"fulfilled\" ? a4.value.length : 0;\n aaaaCount = a6.status === \"fulfilled\" ? a6.value.length : 0;\n deliverability = (aCount > 0 || aaaaCount > 0)\n ? \"DELIVERABLE_FALLBACK\"\n : \"UNDELIVERABLE\";\n }\n } catch (err: any) {\n // keep deliverability DNS_ERROR\n }\n\n // NS resolution (infrastructure signal)\n let nsRecords: string[] | undefined;\n let disposableNsHit = false;\n try {\n const ns = await resolveNs(domain);\n nsRecords = ns.map((x) => x.toLowerCase());\n if (infraOk && nsRecords.length > 0) {\n disposableNsHit = nsRecords.some((n) => infraNs.has(n));\n }\n } catch {\n // ignore\n }\n\n // MX infra hit\n const disposableMxHit = infraOk &&\n !!selectedMx &&\n infraMx.has(selectedMx.exchange.toLowerCase());\n\n const { score, decision, reasons } = computeScoreAndDecision({\n disposableDomainHit,\n allowlistHit,\n disposableMxHit,\n disposableNsHit,\n deliverability,\n bounceRate,\n attempts,\n });\n\n // Add context reasons\n if (!listOk) {\n reasons.unshift(\n \"Disposable domain list fetch failed; domain-hit signal may be incomplete.\",\n );\n }\n if (!infraOk) {\n reasons.unshift(\n \"Disposable infra build failed; MX/NS infra signals may be incomplete.\",\n );\n }\n\n if (deliverability === \"DELIVERABLE_MX\") {\n reasons.unshift(\"MX records found (can receive email).\");\n }\n if (deliverability === \"DELIVERABLE_FALLBACK\") {\n reasons.unshift(\"No MX; A/AAAA exists (SMTP fallback possible).\");\n }\n if (deliverability === \"DNS_ERROR\") {\n reasons.unshift(\"DNS error when checking deliverability.\");\n }\n\n if (allowlistHit) {\n reasons.push(\"Allowlist: treated as non-disposable for classification.\");\n } else if (disposableDomainHit) reasons.push(\"Disposable-domain list match.\");\n else reasons.push(\"No disposable-domain list match.\");\n\n if (disposableMxHit) reasons.push(\"Disposable MX infra match (strong).\");\n if (disposableNsHit) reasons.push(\"Disposable NS infra match (medium).\");\n\n return {\n input,\n domain,\n deliverability,\n hasMx: deliverability === \"DELIVERABLE_MX\",\n disposableDomainHit,\n allowlistHit,\n disposableMxHit,\n disposableNsHit,\n bounceRate,\n attempts,\n score,\n decision,\n reasons,\n mxRecords,\n selectedMx,\n nsRecords,\n debug: {\n durationMs: Date.now() - start,\n listAgeSec,\n infraAgeSec,\n aCount,\n aaaaCount,\n },\n };\n}\n\n// ------------------------ Output (Pretty by default) ------------------------\nfunction prettyOutput(meta: {\n listStatus: string;\n infraStatus: string;\n}, results: DomainResult[]) {\n const totals = results.reduce((a, r) => {\n a.total++;\n a[r.decision] = (a[r.decision] ?? 0) + 1;\n a[r.deliverability] = (a[r.deliverability] ?? 0) + 1;\n a.disposableHits += r.disposableDomainHit ? 1 : 0;\n a.mxInfraHits += r.disposableMxHit ? 1 : 0;\n a.nsInfraHits += r.disposableNsHit ? 1 : 0;\n return a;\n }, {\n total: 0,\n ALLOW: 0,\n REQUIRE_VERIFICATION: 0,\n BLOCK: 0,\n DELIVERABLE_MX: 0,\n DELIVERABLE_FALLBACK: 0,\n UNDELIVERABLE: 0,\n DNS_ERROR: 0,\n disposableHits: 0,\n mxInfraHits: 0,\n nsInfraHits: 0,\n } as any);\n\n const lines: string[] = [];\n lines.push(\"Email Domain Allow/Verify/Block Evaluation\");\n lines.push(\"=\".repeat(160));\n lines.push(`Disposable list: ${meta.listStatus}`);\n lines.push(`Infra map: ${meta.infraStatus}`);\n lines.push(\n `Total=${totals.total} | ALLOW=${totals.ALLOW} | VERIFY=${totals.REQUIRE_VERIFICATION} | BLOCK=${totals.BLOCK} | MX=${totals.DELIVERABLE_MX} | FALLBACK=${totals.DELIVERABLE_FALLBACK} | UNDELIVERABLE=${totals.UNDELIVERABLE} | DNS_ERROR=${totals.DNS_ERROR}`,\n );\n lines.push(\n `Signals: domainHits=${totals.disposableHits} | mxInfraHits=${totals.mxInfraHits} | nsInfraHits=${totals.nsInfraHits}`,\n );\n lines.push(\"\");\n\n lines.push(\n [\n pad(\"Domain\", 26),\n pad(\"Deliverability\", 20),\n pad(\"Decision\", 20),\n pad(\"Score\", 5),\n pad(\"List\", 5),\n pad(\"MXI\", 4),\n pad(\"NSI\", 4),\n pad(\"Bounce\", 10),\n pad(\"Selected MX / Fallback\", 40),\n pad(\"ms\", 5),\n \"Key reasons\",\n ].join(\" | \"),\n );\n lines.push(\"-\".repeat(190));\n\n for (const r of results) {\n const mxOrFallback = r.deliverability === \"DELIVERABLE_MX\"\n ? `${r.selectedMx?.exchange ?? \"-\"} (p=${r.selectedMx?.priority ?? \"-\"})`\n : r.deliverability === \"DELIVERABLE_FALLBACK\"\n ? `A=${r.debug.aCount ?? 0}, AAAA=${r.debug.aaaaCount ?? 0}`\n : \"-\";\n\n const bounce = r.bounceRate === undefined\n ? \"-\"\n : `${Math.round(r.bounceRate * 100)}% (n=${r.attempts ?? 0})`;\n\n // show only top 2-3 reasons in table (full reasons still appended below)\n const keyReasons = r.reasons.slice(0, 3).join(\" \");\n\n lines.push(\n [\n pad(r.domain, 26),\n pad(r.deliverability, 20),\n pad(r.decision, 20),\n pad(String(r.score), 5),\n pad(\n r.disposableDomainHit ? \"yes\" : (r.allowlistHit ? \"allow\" : \"no\"),\n 5,\n ),\n pad(r.disposableMxHit ? \"yes\" : \"no\", 4),\n pad(r.disposableNsHit ? \"yes\" : \"no\", 4),\n pad(bounce, 10),\n pad(mxOrFallback, 40),\n pad(String(r.debug.durationMs), 5),\n keyReasons,\n ].join(\" | \"),\n );\n\n // Print extended reasons for non-ALLOW or debug interest\n if (r.decision !== \"ALLOW\") {\n lines.push(` ↳ reasons: ${r.reasons.join(\" | \")}`);\n }\n }\n\n lines.push(\"\");\n lines.push(\"Query params:\");\n lines.push(\" ?domains=a.com,b.com\");\n lines.push(\" &format=json (raw JSON)\");\n lines.push(\" &refresh=1 (force refresh lists + infra)\");\n lines.push(\" &infra=0 (skip infra mapping; list-only)\");\n lines.push(\" &bounces=dom:0.9,dom2:0.01 (your bounce rate signal 0..1)\");\n lines.push(\n \" &attempts=dom:120,dom2:5000 (sample size for bounce weighting)\",\n );\n return lines.join(\"\\n\");\n}\n\n// ------------------------ Handler ------------------------\nexport default async function (req: Request): Promise {\n if (req.method !== \"GET\") return new Response(\"Use GET\", { status: 405 });\n\n const url = new URL(req.url);\n const domainsParam = url.searchParams.get(\"domains\");\n const format = (url.searchParams.get(\"format\") || \"pretty\").toLowerCase();\n const forceRefresh = url.searchParams.get(\"refresh\") === \"1\";\n const enableInfra = url.searchParams.get(\"infra\") !== \"0\";\n\n const bounceMap = parseNumberMap(url.searchParams.get(\"bounces\"));\n const attemptsMap = parseNumberMap(url.searchParams.get(\"attempts\"));\n\n if (!domainsParam) {\n const msg =\n \"Missing 'domains' parameter.\\nExample:\\n ?domains=yopmail.com,example.com\\nOptional:\\n &bounces=yopmail.com:0.9\\n &attempts=yopmail.com:120\\n &refresh=1\\n &format=json\\n\";\n if (format === \"json\") {\n return Response.json({ error: msg }, { status: 400 });\n }\n return new Response(msg, {\n status: 400,\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n\n // 1) Load lists\n const list = await getLists(forceRefresh);\n const listStatus = list.ok\n ? `OK (age ${list.ageSec}s) from GitHub`\n : `FAILED (${list.err}) — disposable domain signal may be incomplete`;\n\n // 2) Build infra map (MX/NS sets)\n const infra = await getInfra(list.domains, forceRefresh, enableInfra);\n const infraStatus = enableInfra\n ? (infra.ok\n ? `OK (age ${infra.ageSec}s), sampled=${infra.sampled} disposable domains`\n : `FAILED (${infra.err}) — infra signals incomplete (age ${infra.ageSec}s, sampled=${infra.sampled})`)\n : \"DISABLED (infra=0)\";\n\n const inputs = parseDomains(domainsParam);\n\n const results = await Promise.all(\n inputs.map((d) =>\n evaluateDomain(\n d.input,\n d.domain,\n list.ok,\n list.ageSec,\n list.domains,\n list.allow,\n infra.ok,\n infra.ageSec,\n infra.mx,\n infra.ns,\n bounceMap,\n attemptsMap,\n )\n ),\n );\n\n if (format === \"json\") {\n return Response.json(\n {\n meta: {\n disposableListUrl: DISPOSABLE_DOMAIN_LIST_URL,\n allowlistUrl: DISPOSABLE_ALLOWLIST_URL,\n listStatus,\n infraStatus,\n },\n count: results.length,\n results,\n },\n { status: 200 },\n );\n }\n\n return new Response(prettyOutput({ listStatus, infraStatus }, results), {\n status: 200,\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n}","label",[111],"pulls","branches","forks","envVars",{"_266":20,"_268":20},"connections",{"_266":20,"_267":20},"count","unfilledCount","emptyCount",{"_41":251,"_13":111,"_70":94,"_51":-5,"_43":44,"_252":177,"_253":86,"_45":270,"_47":156,"_73":103,"_255":256,"_75":24,"_257":-5,"_271":272,"_228":273},["D",1769662864651],"children",[],[111],["D",1769660330068],{"_11":12,"_227":78},{"_11":12,"_223":-5,"_77":78,"_25":76,"_224":225,"_226":24},{"_47":177,"_13":16,"_41":44,"_215":182,"_216":-5,"_217":-5,"_218":-5,"_219":-5,"_220":-5,"_221":14,"_222":12},"ctx",{"_59":-5,"_247":311,"_312":313,"_314":315,"_316":24,"_317":24,"_318":24,"_319":86,"_320":-5,"_321":-7,"_322":-7,"_323":20,"_324":24,"_325":24,"_326":-5,"_327":24,"_328":24,"_329":24,"_330":-5},"ENV",{"_282":283,"_284":285,"_286":16,"_287":288,"_289":290,"_291":292,"_293":294,"_295":296,"_297":298,"_299":300,"_301":302,"_303":304,"_305":306,"_307":308,"_309":310},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History