[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_299":300,"_301":302},"routes/_app.x.$handle.$name",{"_98":97,"_32":46,"_106":88,"_27":54,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":60,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",29,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/porkbun.ts","latestPath","fileId","5303dab6-9ff8-11f1-8157-1607ee4eb77e","name","porkbun.ts","fileType","script","content","import type { DomainAvailability, DomainPricing, PricingResult } from \"../shared/types.ts\";\nimport { normalizeDomain } from \"./rdap.ts\";\n\n/**\n * Porkbun publishes its whole retail price list unauthenticated, so a lookup\n * can carry a price without asking anyone for an API key. These are list\n * prices for ordinary names: premium and reserved names are quoted per-domain\n * and only Porkbun's authenticated checkDomain endpoint knows those.\n */\nconst PRICING_URL = \"https://api.porkbun.com/api/json/v3/pricing/get\";\nconst PRICING_TTL_MS = 6 * 60 * 60 * 1000;\n/** Per-name availability, unlike the list above, needs credentials. */\nconst CHECK_URL = \"https://api.porkbun.com/api/json/v3/domain/checkDomain/\";\nconst CHECK_TTL_MS = 10 * 60 * 1000;\nconst CHECK_TIMEOUT_MS = 15_000;\n/** Porkbun's documented default is one check per 10 seconds per account, and it\n * is billed against the account rather than the caller, so a burst of visitors\n * shares one budget. Assume the default until a response tells us otherwise. */\nconst DEFAULT_CHECK_WINDOW_MS = 10_000;\n/** Generous on purpose: Porkbun builds the whole 900-TLD list per request and\n * measures 15-20 seconds cold. Only the request that misses the cache waits. */\nconst REQUEST_TIMEOUT_MS = 30_000;\n\ninterface PricingResponse {\n status: string;\n pricing: Record;\n}\n\nlet cache: { fetchedAt: number; prices: Map } | null = null;\nlet inflight: Promise> | null = null;\n\nfunction getPrices(): Promise> {\n if (cache && Date.now() - cache.fetchedAt < PRICING_TTL_MS) return Promise.resolve(cache.prices);\n // That 15-20 second fetch is long enough that several visitors can pile up\n // behind it. They should share one request, not start their own.\n inflight ??= fetchPrices().finally(() => inflight = null);\n return inflight;\n}\n\nasync function fetchPrices(): Promise> {\n const res = await fetch(PRICING_URL, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`Porkbun pricing returned ${res.status}`);\n const body = (await res.json()) as PricingResponse;\n if (body?.status !== \"SUCCESS\") throw new Error(`Porkbun pricing returned ${body?.status}`);\n\n const prices = new Map();\n for (const [rawSuffix, entry] of Object.entries(body.pricing ?? {})) {\n // Handshake names resolve outside ICANN DNS, so their prices describe\n // something this site can't look up in a registry.\n if (entry?.specialType === \"handshake\") continue;\n\n const suffix = rawSuffix.toLowerCase();\n const registration = amount(entry?.registration);\n const renewal = amount(entry?.renewal);\n const transfer = amount(entry?.transfer);\n if (registration === undefined && renewal === undefined) continue;\n\n prices.set(suffix, { suffix, registration, renewal, transfer, currency: \"USD\" });\n }\n\n cache = { fetchedAt: Date.now(), prices };\n return prices;\n}\n\nfunction amount(value: unknown): number | undefined {\n if (typeof value !== \"string\" || !value.trim()) return undefined;\n const price = Number(value);\n return Number.isFinite(price) ? price : undefined;\n}\n\ninterface CheckResponse {\n status: string;\n message?: string;\n code?: string;\n ttlRemaining?: number;\n response?: {\n avail?: string;\n price?: string;\n regularPrice?: string;\n firstYearPromo?: string;\n premium?: string;\n minDuration?: number;\n };\n limits?: { TTL?: number; limit?: number; used?: number };\n}\n\nconst checkCache = new Map();\nconst checkInflight = new Map>();\n/** Closed until this moment to stay inside Porkbun's per-account check budget. */\nlet checkGateUntil = 0;\n\n/** Absent credentials disable the check rather than failing the request: the\n * registry answer is the product, and this only annotates it. */\nfunction credentials(): { apikey: string; secretapikey: string } | null {\n const apikey = readEnv(\"PORKBUN_API_KEY\");\n const secretapikey = readEnv(\"PORKBUN_SECRET_API_KEY\");\n return apikey && secretapikey ? { apikey, secretapikey } : null;\n}\n\nfunction readEnv(name: string): string | undefined {\n try {\n return Deno.env.get(name) || undefined;\n } catch {\n return undefined; // no env access in this runtime\n }\n}\n\n/**\n * Ask Porkbun whether it will actually sell this exact name.\n *\n * Returns undefined for every \"we don't know\" case — no credentials, gate\n * closed, timeout, error, or an `avail` we don't recognise. Undefined must stay\n * indistinguishable from \"not asked\", because the caller renders a contradiction\n * of the registry's verdict and may only do that on an explicit answer.\n */\nexport async function checkAvailability(domain: string): Promise {\n const auth = credentials();\n if (!auth) return undefined;\n\n const cached = checkCache.get(domain);\n if (cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) return cached.availability;\n\n const pending = checkInflight.get(domain);\n if (pending) return pending;\n\n // One check per window across the whole account, so a name that misses the\n // cache while the gate is shut goes unanswered rather than queueing up behind\n // it — a visitor waiting 10 seconds for a garnish is worse than no garnish.\n if (Date.now() < checkGateUntil) return undefined;\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS; // shut it before awaiting\n\n const request = runCheck(domain, auth).finally(() => checkInflight.delete(domain));\n checkInflight.set(domain, request);\n return request;\n}\n\nasync function runCheck(\n domain: string,\n auth: { apikey: string; secretapikey: string },\n): Promise {\n let body: CheckResponse;\n try {\n const res = await fetch(`${CHECK_URL}${encodeURIComponent(domain)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(auth),\n signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),\n });\n // Porkbun reports a tripped rate limit as both 429 and a 200 whose status is\n // ERROR, so the body is what decides — but a 429 carries no useful body.\n if (res.status === 429) {\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS;\n return undefined;\n }\n body = (await res.json()) as CheckResponse;\n } catch {\n return undefined;\n }\n\n // A window we were told about beats the assumed default.\n const windowMs = (body.limits?.TTL ?? body.ttlRemaining ?? 0) * 1000;\n if (windowMs > 0) checkGateUntil = Date.now() + windowMs;\n\n const avail = body.response?.avail;\n if (body.status !== \"SUCCESS\" || (avail !== \"yes\" && avail !== \"no\")) return undefined;\n\n const availability: DomainAvailability = {\n registrable: avail === \"yes\",\n premium: body.response?.premium === \"yes\",\n price: amount(body.response?.price),\n regularPrice: amount(body.response?.regularPrice),\n firstYearPromo: body.response?.firstYearPromo === \"yes\",\n minDuration: typeof body.response?.minDuration === \"number\" && body.response.minDuration > 1\n ? body.response.minDuration\n : undefined,\n checkedAt: new Date().toISOString(),\n };\n\n checkCache.set(domain, { checkedAt: Date.now(), availability });\n return availability;\n}\n\n/**\n * Price the name the visitor typed. Porkbun sells some ccTLDs at the second\n * level — `co.uk` is its own line item, priced apart from `uk` — so match the\n * longest suffix of the name that it actually lists.\n */\nexport async function lookupPricing(\n query: string,\n options: { checkAvailability?: boolean } = {},\n): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n\n // Neither call needs the other's answer, so the per-name check doesn't wait\n // behind the price list's cold build.\n const [prices, availability] = await Promise.all([\n // A price is a garnish on the registry answer. If Porkbun is down or slow,\n // the visitor still keeps the thing they came for.\n getPrices().catch(() => null),\n options.checkAvailability ? checkAvailability(domain) : undefined,\n ]);\n\n return { domain, pricing: prices ? matchSuffix(domain, prices) : undefined, availability };\n}\n\nfunction matchSuffix(domain: string, prices: Map): DomainPricing | undefined {\n const labels = domain.split(\".\");\n for (let i = 1; i < labels.length; i++) {\n const pricing = prices.get(labels.slice(i).join(\".\"));\n if (pricing) return pricing;\n }\n return undefined;\n}\n","import type {\n AvailabilityResult,\n DomainAvailability,\n DomainPricing,\n PricingResult,\n} from \"../shared/types.ts\";\nimport { normalizeDomain } from \"./rdap.ts\";\n\n/**\n * Porkbun publishes its whole retail price list unauthenticated, so a lookup\n * can carry a price without asking anyone for an API key. These are list\n * prices for ordinary names: premium and reserved names are quoted per-domain\n * and only Porkbun's authenticated checkDomain endpoint knows those.\n */\nconst PRICING_URL = \"https://api.porkbun.com/api/json/v3/pricing/get\";\nconst PRICING_TTL_MS = 6 * 60 * 60 * 1000;\n/** Per-name availability, unlike the list above, needs credentials. */\nconst CHECK_URL = \"https://api.porkbun.com/api/json/v3/domain/checkDomain/\";\nconst CHECK_TTL_MS = 10 * 60 * 1000;\n/** Tighter than it looks: the page holds its verdict until this answers, so\n * every second here is a second the visitor stares at an unfinished card.\n * Porkbun normally answers in about a second; past ten it isn't going to. */\nconst CHECK_TIMEOUT_MS = 10_000;\n/** Porkbun's documented default is one check per 10 seconds per account, and it\n * is billed against the account rather than the caller, so a burst of visitors\n * shares one budget. Assume the default until a response tells us otherwise. */\nconst DEFAULT_CHECK_WINDOW_MS = 10_000;\n/** Generous on purpose: Porkbun builds the whole 900-TLD list per request and\n * measures 15-20 seconds cold. Only the request that misses the cache waits. */\nconst REQUEST_TIMEOUT_MS = 30_000;\n\ninterface PricingResponse {\n status: string;\n pricing: Record;\n}\n\nlet cache: { fetchedAt: number; prices: Map } | null = null;\nlet inflight: Promise> | null = null;\n\nfunction getPrices(): Promise> {\n if (cache && Date.now() - cache.fetchedAt < PRICING_TTL_MS) return Promise.resolve(cache.prices);\n // That 15-20 second fetch is long enough that several visitors can pile up\n // behind it. They should share one request, not start their own.\n inflight ??= fetchPrices().finally(() => inflight = null);\n return inflight;\n}\n\nasync function fetchPrices(): Promise> {\n const res = await fetch(PRICING_URL, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`Porkbun pricing returned ${res.status}`);\n const body = (await res.json()) as PricingResponse;\n if (body?.status !== \"SUCCESS\") throw new Error(`Porkbun pricing returned ${body?.status}`);\n\n const prices = new Map();\n for (const [rawSuffix, entry] of Object.entries(body.pricing ?? {})) {\n // Handshake names resolve outside ICANN DNS, so their prices describe\n // something this site can't look up in a registry.\n if (entry?.specialType === \"handshake\") continue;\n\n const suffix = rawSuffix.toLowerCase();\n const registration = amount(entry?.registration);\n const renewal = amount(entry?.renewal);\n const transfer = amount(entry?.transfer);\n if (registration === undefined && renewal === undefined) continue;\n\n prices.set(suffix, { suffix, registration, renewal, transfer, currency: \"USD\" });\n }\n\n cache = { fetchedAt: Date.now(), prices };\n return prices;\n}\n\nfunction amount(value: unknown): number | undefined {\n if (typeof value !== \"string\" || !value.trim()) return undefined;\n const price = Number(value);\n return Number.isFinite(price) ? price : undefined;\n}\n\ninterface CheckResponse {\n status: string;\n message?: string;\n code?: string;\n ttlRemaining?: number;\n response?: {\n avail?: string;\n price?: string;\n regularPrice?: string;\n firstYearPromo?: string;\n premium?: string;\n minDuration?: number;\n };\n limits?: { TTL?: number; limit?: number; used?: number };\n}\n\nconst checkCache = new Map();\nconst checkInflight = new Map>();\n/** Closed until this moment to stay inside Porkbun's per-account check budget. */\nlet checkGateUntil = 0;\n\n/** Absent credentials disable the check rather than failing the request: the\n * registry answer is the product, and this only annotates it. */\nfunction credentials(): { apikey: string; secretapikey: string } | null {\n const apikey = readEnv(\"PORKBUN_API_KEY\");\n const secretapikey = readEnv(\"PORKBUN_SECRET_API_KEY\");\n return apikey && secretapikey ? { apikey, secretapikey } : null;\n}\n\nfunction readEnv(name: string): string | undefined {\n try {\n return Deno.env.get(name) || undefined;\n } catch {\n return undefined; // no env access in this runtime\n }\n}\n\n/**\n * Ask Porkbun whether it will actually sell this exact name.\n *\n * Returns undefined for every \"we don't know\" case — no credentials, gate\n * closed, timeout, error, or an `avail` we don't recognise. Undefined must stay\n * indistinguishable from \"not asked\", because the caller renders a contradiction\n * of the registry's verdict and may only do that on an explicit answer.\n */\nexport async function checkAvailability(domain: string): Promise {\n const auth = credentials();\n if (!auth) return undefined;\n\n const cached = checkCache.get(domain);\n if (cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) return cached.availability;\n\n const pending = checkInflight.get(domain);\n if (pending) return pending;\n\n // One check per window across the whole account, so a name that misses the\n // cache while the gate is shut goes unanswered rather than queueing up behind\n // it. The page is holding a verdict open on this: better to hand back the\n // registry's own hedged answer now than the confirmed one ten seconds late.\n if (Date.now() < checkGateUntil) return undefined;\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS; // shut it before awaiting\n\n const request = runCheck(domain, auth).finally(() => checkInflight.delete(domain));\n checkInflight.set(domain, request);\n return request;\n}\n\nasync function runCheck(\n domain: string,\n auth: { apikey: string; secretapikey: string },\n): Promise {\n let body: CheckResponse;\n try {\n const res = await fetch(`${CHECK_URL}${encodeURIComponent(domain)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(auth),\n signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),\n });\n // Porkbun reports a tripped rate limit as both 429 and a 200 whose status is\n // ERROR, so the body is what decides — but a 429 carries no useful body.\n if (res.status === 429) {\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS;\n return undefined;\n }\n body = (await res.json()) as CheckResponse;\n } catch {\n return undefined;\n }\n\n // A window we were told about beats the assumed default.\n const windowMs = (body.limits?.TTL ?? body.ttlRemaining ?? 0) * 1000;\n if (windowMs > 0) checkGateUntil = Date.now() + windowMs;\n\n const avail = body.response?.avail;\n if (body.status !== \"SUCCESS\" || (avail !== \"yes\" && avail !== \"no\")) return undefined;\n\n const availability: DomainAvailability = {\n registrable: avail === \"yes\",\n premium: body.response?.premium === \"yes\",\n price: amount(body.response?.price),\n regularPrice: amount(body.response?.regularPrice),\n firstYearPromo: body.response?.firstYearPromo === \"yes\",\n minDuration: typeof body.response?.minDuration === \"number\" && body.response.minDuration > 1\n ? body.response.minDuration\n : undefined,\n checkedAt: new Date().toISOString(),\n };\n\n checkCache.set(domain, { checkedAt: Date.now(), availability });\n return availability;\n}\n\n/**\n * Ask Porkbun about one specific name. Deliberately separate from the pricing\n * lookup below: this one answers in about a second and the page waits on it\n * before it will call a name available, while the price list can take twenty\n * seconds to build and nothing waits on it.\n */\nexport async function lookupAvailability(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n return { domain, availability: await checkAvailability(domain) };\n}\n\n/**\n * Price the name the visitor typed. Porkbun sells some ccTLDs at the second\n * level — `co.uk` is its own line item, priced apart from `uk` — so match the\n * longest suffix of the name that it actually lists.\n */\nexport async function lookupPricing(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n\n // A price is a garnish on the registry answer. If Porkbun is down or slow,\n // the visitor still keeps the thing they came for.\n const prices = await getPrices().catch(() => null);\n return { domain, pricing: prices ? matchSuffix(domain, prices) : undefined };\n}\n\nfunction matchSuffix(domain: string, prices: Map): DomainPricing | undefined {\n const labels = domain.split(\".\");\n for (let i = 1; i < labels.length; i++) {\n const pricing = prices.get(labels.slice(i).join(\".\"));\n if (pricing) return pricing;\n }\n return undefined;\n}\n","createdAt",["D",1787603564724],"branchVersion","branchId","56b9e60d-44d2-4baf-b4cd-1a7b1ec05f36","id","a00dc9e7-a23e-4397-a1f9-3cf4c617a61f","whois",["D",1785166232232],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","b8f52b40-db4b-11ef-9fdc-e7ba3d98ed08","pinnedFileId","1ae3c4c2-89d0-11f1-8211-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","c0309a09-c920-43c3-9d64-1db94f641c1a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_18":56,"_102":103,"_104":25},"branch",{"_13":87,"_32":88,"_44":43,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":46,"_96":97},"isOwned",33,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","hunterparks","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yczhIY1pIYWJ5ZnVPVjgxM0R2OENRWTJlTW0ifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":295,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":296,"_82":297,"_84":298,"_86":25},"tree",[203,207,211,213,214,215,216,217],"files",[203,204,205,206,207,208,209,210,211,212,213,214,215,216,217],"counts",{"_193":151,"_194":64,"_195":151,"_196":197,"_198":199},"contents",[127,128,129,130,131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":187,"_32":188,"_30":189,"_137":-5,"_42":43,"_41":190,"_139":60,"_39":191,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_27":192},{"_44":182,"_32":183,"_30":184,"_137":-5,"_42":43,"_41":141,"_139":60,"_39":185,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_27":186},{"_44":175,"_32":176,"_30":177,"_137":-5,"_42":43,"_41":178,"_139":60,"_39":179,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_27":181},{"_44":168,"_32":169,"_30":170,"_137":-5,"_42":43,"_41":171,"_139":60,"_39":172,"_13":151,"_34":20,"_36":173,"_24":25,"_144":-5,"_27":174},{"_44":161,"_32":162,"_30":163,"_137":-5,"_42":43,"_41":164,"_139":60,"_39":165,"_13":151,"_34":20,"_36":166,"_24":25,"_144":-5,"_27":167},{"_44":154,"_32":155,"_30":156,"_137":-5,"_42":43,"_41":157,"_139":25,"_39":158,"_13":64,"_34":20,"_36":159,"_24":25,"_144":-5,"_27":160},{"_44":146,"_32":147,"_30":148,"_137":-5,"_42":43,"_41":149,"_139":60,"_39":150,"_13":151,"_34":20,"_36":152,"_24":25,"_144":-5,"_27":153},{"_44":135,"_32":136,"_30":58,"_137":-5,"_42":43,"_41":138,"_139":60,"_39":140,"_13":141,"_34":142,"_36":143,"_24":25,"_144":46,"_27":145},"5a5ee57b-69ee-414f-9125-633f1a12031f","main.ts","parentId",28,"latest",["D",1787603564789],4,"http","import { Hono } from \"https://esm.sh/hono@4.6.14\";\nimport { readProjectFile, serveProjectFile } from \"./backend/files.ts\";\nimport { lookupAvailability, lookupPricing } from \"./backend/porkbun.ts\";\nimport { lookupDomain } from \"./backend/rdap.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, _c) => {\n throw err;\n});\n\napp.get(\"/frontend/*\", (c) => serveProjectFile(c.req.path, import.meta.url));\n\napp.get(\"/api/lookup\", async (c) => {\n const query = c.req.query(\"domain\") ?? \"\";\n const result = await lookupDomain(query);\n return c.json(result, {\n // Registry data changes rarely; a short cache keeps repeat searches off the\n // registries without hiding a registration that just happened.\n headers: { \"cache-control\": result.status === \"error\" ? \"no-store\" : \"public, max-age=60\" },\n });\n});\n\n// Asks Porkbun whether it will sell this exact name, which is a different\n// question from RDAP's \"is there a registration record?\" and the only one that\n// can contradict it. The page blocks its verdict on this, so it stays a lone\n// fast call: no price list attached, and the answer is small enough that the\n// wait is Porkbun's round trip and nothing else. Only called for names the\n// registry reported as available — a registered name has nothing to learn here,\n// and the check is metered per account rather than per visitor.\napp.get(\"/api/availability\", async (c) => {\n const result = await lookupAvailability(c.req.query(\"domain\") ?? \"\");\n return c.json(result, {\n headers: {\n // No answer is not a cacheable fact — the next visitor should get a real\n // check rather than inherit a rate-limited silence.\n \"cache-control\": result.availability ? \"public, max-age=300\" : \"no-store\",\n },\n });\n});\n\n// Kept off the lookup path on purpose: Porkbun rebuilds its whole price list\n// per request and can take 20 seconds cold, which is no reason to hold up the\n// registry's answer — or the verdict above. Nobody waits on this unless they\n// ask for it, which the page makes a button.\napp.get(\"/api/pricing\", async (c) => {\n const result = await lookupPricing(c.req.query(\"domain\") ?? \"\");\n return c.json(result, {\n headers: {\n \"cache-control\": result.pricing ? \"public, max-age=3600\" : \"no-store\",\n },\n });\n});\n\napp.get(\"/\", async (c) => c.html(await readProjectFile(\"/frontend/index.html\", import.meta.url)));\n\nexport default app.fetch;\n","label",[136],"482c4167-2489-4dc5-8d09-755c0e9334ed","deno.json","b8c0f422-89d4-11f1-96e4-1607ee4eb77e",6,["D",1785168215020],0,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[147],"c214ea22-117c-4b4d-8bd8-bab27ca70657","README.md","b8efa9a2-89d4-11f1-8c5f-1607ee4eb77e",23,["D",1787602432102],"# whois\n\nType a domain, find out whether it's registered. The answer comes from the\nregistry of record over [RDAP](https://www.icann.org/rdap) — the protocol ICANN\nrequires registries to run alongside WHOIS — rather than from a reseller's\ncached list.\n\n## How a lookup works\n\n1. `backend/rdap.ts` normalizes what was typed: pasted URLs lose their scheme\n and path, IDNs are punycoded, a leading `www.` is dropped.\n2. The TLD is resolved to an RDAP service through\n [IANA's bootstrap file](https://data.iana.org/rdap/dns.json), cached for 12\n hours per instance.\n3. `GET /domain/` decides it: `200` means registered and carries\n the record, `404` means the registry has no entry.\n\nA handful of registries run RDAP without appearing in the bootstrap file\n(`.ac`, `.de`, `.io`, `.sh`). Those are listed in `SUPPLEMENTAL_SERVICES`, each\nverified against a known-registered name in that exact TLD. Never point a TLD at\na service that isn't authoritative for it — a foreign service answers `404`, and\n`404` is what makes this site say \"available\".\n\nTLDs with no RDAP service at all (`.co`, `.me`, and other ccTLDs) return\n`unsupported` instead of a guess.\n\n## What it costs\n\n`GET /api/pricing?domain=` answers with Porkbun's list price for the name's\nsuffix — first year, renewal, and inbound transfer, in USD. Porkbun publishes\n[its whole price list](https://api.porkbun.com/api/json/v3/pricing/get)\nunauthenticated, so this needs no API key.\n\nTwo things shape how it's wired up:\n\n- **It is deliberately not part of `/api/lookup`.** Porkbun rebuilds the entire\n 900-TLD list per request and measures 15–20 seconds cold. The registry's\n answer is what the visitor came for and never waits on a reseller. The page\n renders the verdict, then fills the price panel in when it arrives. A shared\n 6-hour cache (plus in-flight de-duplication, since a 20-second fetch is long\n enough for visitors to pile up behind it) means only the first request pays.\n- **The suffix is matched longest-first.** Porkbun sells some ccTLDs at the\n second level — `co.uk` is priced apart from `uk` — so `bbc.co.uk` is priced as\n `co.uk`, not `uk`.\n\nEntries marked `specialType: handshake` are dropped: those are Handshake names,\nwhich resolve outside ICANN DNS and so describe nothing this site can look up.\nThese are list prices for ordinary names; premium and reserved names are quoted\nper-domain. Losing this call costs the price panel and nothing else.\n\n## Whether you can actually buy it\n\nRDAP answers \"is there a registration record?\", which is not the question a\nvisitor is asking. Reserved, blocked and registry-held names own no RDAP object,\nso the registry reports `404` and the site reads that as available — correctly,\nand still misleadingly. `claude.run` is the example that prompted this: no\nregistry record, no DNS delegation, and not for sale.\n\nSet both of these to close the gap:\n\n```sh\nPORKBUN_API_KEY=pk1_...\nPORKBUN_SECRET_API_KEY=sk1_...\n```\n\nWith them set, `GET /api/pricing?domain=&check=1` also asks Porkbun's\nauthenticated [`checkDomain`](https://porkbun.com/api/json/v3/documentation)\nwhether it will sell that exact name, and returns an `availability` block:\n`registrable`, `premium`, and the per-name price. When it says no and the\nregistry said available, the card overturns its own verdict — the stamp becomes\n**Withheld** and the wording explains why the two answers disagree.\n\nThree constraints shape it:\n\n- **The check is rationed.** Porkbun's default is one check per 10 seconds *per\n account*, not per caller, so every visitor shares one budget. Results are\n cached per name for 10 minutes, concurrent checks for the same name share one\n request, and a name that misses the cache while the window is shut simply goes\n unanswered. Waiting 10 seconds for a garnish is worse than no garnish.\n- **The page only spends a check on an `available` verdict.** That is the one\n answer a registrar can contradict; a name the registry already reports as\n registered has nothing to learn from asking.\n- **Silence is never a confirmation.** No credentials, gate shut, timeout, rate\n limit, or an unrecognised `avail` all return no `availability` at all, which\n renders exactly as it did before the check existed. Only an explicit answer\n from Porkbun is ever allowed to move the verdict.\n\nWithout the credentials the endpoint behaves exactly as it always did.\n\n## Files\n\n| Path | What it does |\n| --------------------- | -------------------------------------------------- |\n| `main.ts` | Hono app: static routes, `/api/lookup`, `/api/pricing` |\n| `backend/rdap.ts` | Bootstrap cache, normalization, RDAP record parsing |\n| `backend/porkbun.ts` | Price-list cache and longest-suffix price matching |\n| `backend/files.ts` | Static file helpers, with a local-disk fallback |\n| `frontend/` | The page: HTML, CSS, and the renderer |\n| `shared/types.ts` | The API response contracts |\n\n## Running it\n\n```sh\nvt push # deploy to Val Town\ndeno run -A serve.ts # or preview locally, see below\n```\n\nFor a local preview, point Deno's server at the exported handler:\n\n```ts\nimport app from \"./main.ts\";\nDeno.serve({ port: 8787 }, app);\n```\n\n`backend/files.ts` reads from disk when it sees a `file://` URL, so the static\nroutes work outside Val Town too.\n",[155],"ca69b9ae-1cf9-4d6c-9a61-5651045b9f2b","AGENTS.md","b93476cc-89d4-11f1-aa0d-1607ee4eb77e",15,["D",1785168215146],"You are an advanced assistant specialized in generating Val Town code.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider refactoring it into subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious operations)\n- Follow modern ES6+ conventions and functional programming practices if possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = 'todo_app_users_2';\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(`SELECT * FROM ${TABLE_NAME} WHERE id = ?`, [1]);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add _2 or _3) to create a fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({ \n subject: \"Hi\", \n text: \"Hi\", \n html: \"

Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[162],"1c9e7a6c-9507-4148-bbd1-2fc34f94a828",".vtignore","b8c60a48-89d4-11f1-97dc-1607ee4eb77e",7,["D",1785168215096],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[169],"1e49960f-1466-46fa-a5e2-7137c8eecfb7","shared","b8698246-89d4-11f1-97dc-1607ee4eb77e",2,["D",1785168214472],"directory",[176],"64242c32-bb1f-495a-b292-5472fd3ed691","frontend","b898b818-89d4-11f1-9340-1607ee4eb77e",["D",1785168214803],[183],"57fa537f-e8b3-4f1e-b82d-2babea12af78","backend","b87e942e-89d4-11f1-97dc-1607ee4eb77e",3,["D",1785168214649],[188],"pulls","branches","forks","envVars",{"_200":178,"_202":151},"connections",{"_200":151,"_201":151},"count","unfilledCount","emptyCount",{"_44":187,"_32":188,"_30":189,"_137":-5,"_42":43,"_41":190,"_139":60,"_39":292,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_219":293,"_27":294},{"_44":284,"_32":285,"_30":286,"_137":189,"_42":43,"_41":287,"_139":60,"_39":288,"_13":151,"_34":35,"_36":289,"_24":25,"_144":-5,"_219":290,"_27":291},{"_44":280,"_32":33,"_30":31,"_137":189,"_42":43,"_41":14,"_139":60,"_39":281,"_13":64,"_34":35,"_36":38,"_24":25,"_144":-5,"_219":282,"_27":283},{"_44":272,"_32":273,"_30":274,"_137":189,"_42":43,"_41":275,"_139":60,"_39":276,"_13":151,"_34":35,"_36":277,"_24":25,"_144":-5,"_219":278,"_27":279},{"_44":182,"_32":183,"_30":184,"_137":-5,"_42":43,"_41":141,"_139":60,"_39":269,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_219":270,"_27":271},{"_44":261,"_32":262,"_30":263,"_137":184,"_42":43,"_41":264,"_139":25,"_39":265,"_13":64,"_34":20,"_36":266,"_24":25,"_144":-5,"_219":267,"_27":268},{"_44":253,"_32":254,"_30":255,"_137":184,"_42":43,"_41":256,"_139":25,"_39":257,"_13":178,"_34":35,"_36":258,"_24":25,"_144":-5,"_219":259,"_27":260},{"_44":245,"_32":246,"_30":247,"_137":184,"_42":43,"_41":248,"_139":60,"_39":249,"_13":190,"_34":20,"_36":250,"_24":25,"_144":-5,"_219":251,"_27":252},{"_44":175,"_32":176,"_30":177,"_137":-5,"_42":43,"_41":178,"_139":60,"_39":242,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_219":243,"_27":244},{"_44":234,"_32":235,"_30":236,"_137":177,"_42":43,"_41":237,"_139":60,"_39":238,"_13":178,"_34":35,"_36":239,"_24":25,"_144":-5,"_219":240,"_27":241},{"_44":168,"_32":169,"_30":170,"_137":-5,"_42":43,"_41":171,"_139":60,"_39":231,"_13":151,"_34":20,"_36":173,"_24":25,"_144":-5,"_219":232,"_27":233},{"_44":161,"_32":162,"_30":163,"_137":-5,"_42":43,"_41":164,"_139":60,"_39":228,"_13":151,"_34":20,"_36":166,"_24":25,"_144":-5,"_219":229,"_27":230},{"_44":154,"_32":155,"_30":156,"_137":-5,"_42":43,"_41":157,"_139":25,"_39":225,"_13":64,"_34":20,"_36":159,"_24":25,"_144":-5,"_219":226,"_27":227},{"_44":146,"_32":147,"_30":148,"_137":-5,"_42":43,"_41":149,"_139":60,"_39":222,"_13":151,"_34":20,"_36":152,"_24":25,"_144":-5,"_219":223,"_27":224},{"_44":135,"_32":136,"_30":58,"_137":-5,"_42":43,"_41":138,"_139":60,"_39":218,"_13":141,"_34":142,"_36":143,"_24":25,"_144":46,"_219":220,"_27":221},["D",1787603564789],"children",[],[136],["D",1785168215020],[],[147],["D",1787602432102],[],[155],["D",1785168215146],[],[162],["D",1785168215096],[],[169],"42a32d37-f183-42f4-bc77-a9c03186f6f3","types.ts","b8b6a26a-89d4-11f1-bf8b-1607ee4eb77e",27,["D",1787603564613],"/** Shape of the /api/lookup and /api/pricing responses. Kept in shared/ as the\n * contract the frontend renders against. */\n\nexport type LookupStatus =\n | \"registered\" // the registry returned a record\n | \"available\" // the registry has no record for this name\n | \"unsupported\" // no RDAP service is published for this TLD\n | \"invalid\" // the input isn't a domain name we can query\n | \"error\"; // the registry failed to answer\n\nexport interface DomainRecord {\n registrar?: string;\n registrarIanaId?: string;\n registered?: string;\n expires?: string;\n updated?: string;\n statuses: string[];\n nameservers: string[];\n dnssec?: boolean;\n}\n\nexport interface DomainPricing {\n /** The suffix Porkbun prices. Some ccTLDs are sold at the second level, so\n * this can be two labels (`co.uk`) rather than the bare TLD. */\n suffix: string;\n /** First-year price. Often promotional, and often below the renewal. */\n registration?: number;\n /** What the name costs every year after the first. */\n renewal?: number;\n /** Price to move an existing registration in, usually a year included. */\n transfer?: number;\n /** ISO 4217 code for the amounts above. */\n currency: string;\n}\n\nexport interface LookupResult {\n /** What the visitor typed. */\n query: string;\n /** The normalized, punycoded name that was queried. */\n domain: string;\n /** Unicode form, when the name was an IDN. */\n unicodeName?: string;\n tld: string;\n status: LookupStatus;\n /** Hostname of the RDAP service that answered. */\n source?: string;\n /** UTC timestamp of the answer. */\n answeredAt?: string;\n record?: DomainRecord;\n /** Human-readable explanation for invalid, unsupported, and error results. */\n message?: string;\n /** Caveat worth showing alongside an otherwise good answer. */\n note?: string;\n}\n\n/**\n * Porkbun's answer to \"will you sell me this exact name?\", which is a different\n * question from RDAP's \"is there a registration record?\". Reserved, blocked and\n * registry-held names have no RDAP object, so they read as available there\n * while a registrar still refuses them.\n */\nexport interface DomainAvailability {\n /** Porkbun will sell it. False means it exists, is reserved, or is withheld. */\n registrable: boolean;\n /** Registry-tier premium, priced per-name rather than off the list. */\n premium: boolean;\n /** Per-name first-year price. Differs from the list price on premium names. */\n price?: number;\n /** The same name's price once any first-year promotion lapses. */\n regularPrice?: number;\n /** Whether `price` is a promotional first-year rate. */\n firstYearPromo?: boolean;\n /** Years the registry makes you buy up front, when it insists on more than one. */\n minDuration?: number;\n /** UTC timestamp of the check. */\n checkedAt: string;\n}\n\nexport interface PricingResult {\n /** The normalized name the price was matched against. */\n domain: string;\n /** Absent when Porkbun doesn't sell the suffix, or didn't answer in time. */\n pricing?: DomainPricing;\n}\n\nexport interface AvailabilityResult {\n /** The normalized name that was checked. */\n domain: string;\n /**\n * Absent whenever the check didn't run or didn't answer — no credentials,\n * rate-limited, timed out, or an error. Absent means \"unknown\", never\n * \"registrable\": only an explicit answer from Porkbun sets this.\n */\n availability?: DomainAvailability;\n}\n",[],[176,235],["D",1785168214472],[212],[176],"62cdf598-e5ea-412e-9365-1a0ed41ff2c4","style.css","b902bd26-89d4-11f1-8536-1607ee4eb77e",26,["D",1787603564596],":root {\n --paper: #c9d3d6;\n --card: #f4f6f5;\n --ink: #16232b;\n --ink-2: #5c6d74;\n --rule: #a9b7bb;\n --stamp-taken: #a32b22;\n --stamp-free: #1c6a55;\n --stamp-held: #8a5a1b;\n\n --mono: \"IBM Plex Mono\", ui-monospace, SFMono-Regular, Menlo, monospace;\n --sans: \"IBM Plex Sans\", system-ui, -apple-system, Segoe UI, sans-serif;\n\n --pad-top: clamp(2rem, 8vw, 5.5rem);\n --pad-bottom: 3rem;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: border-box;\n}\n\nbody {\n margin: 0;\n padding: var(--pad-top) 1.25rem var(--pad-bottom);\n background-color: var(--paper);\n /* Ledger ruling: the page is the book the registry keeps. */\n background-image: repeating-linear-gradient(\n to bottom,\n transparent 0 27px,\n rgba(22, 35, 43, 0.055) 27px 28px\n );\n color: var(--ink);\n font-family: var(--sans);\n font-size: 16px;\n line-height: 1.55;\n -webkit-font-smoothing: antialiased;\n}\n\n::selection {\n background: var(--stamp-taken);\n color: var(--card);\n}\n\na {\n color: inherit;\n text-decoration-color: var(--rule);\n text-underline-offset: 3px;\n}\n\na:hover {\n text-decoration-color: currentColor;\n}\n\n:focus-visible {\n outline: 2px solid var(--ink);\n outline-offset: 3px;\n}\n\n.sheet {\n max-width: 44rem;\n margin: 0 auto;\n}\n\n/* Before the first search there's only the title and the field, so sit them in\n the middle of the screen; results push the page back to a normal top flow. */\nbody:has(#result:empty) .sheet {\n display: flex;\n flex-direction: column;\n justify-content: center;\n min-height: calc(100dvh - var(--pad-top) - var(--pad-bottom));\n}\n\n.eyebrow {\n margin: 0 0 1.25rem;\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\nh1 {\n margin: 0;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(2.25rem, 7vw, 3.5rem);\n letter-spacing: -0.035em;\n line-height: 1;\n}\n\n/* ---------- lookup form ---------- */\n\n.lookup {\n display: grid;\n grid-template-columns: 1fr auto;\n align-items: end;\n gap: 1rem;\n margin: clamp(2rem, 6vw, 3rem) 0 0;\n}\n\n.label {\n display: block;\n margin-bottom: 0.4rem;\n font-size: 0.6875rem;\n font-weight: 500;\n letter-spacing: 0.16em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.input {\n display: block;\n width: 100%;\n padding: 0 0 0.35rem;\n border: 0;\n background: transparent;\n color: var(--ink);\n font-family: var(--mono);\n font-weight: 500;\n font-size: clamp(1.5rem, 5vw, 2rem);\n letter-spacing: -0.02em;\n}\n\n.input::placeholder {\n color: var(--rule);\n}\n\n.input:focus {\n outline: none;\n}\n\n.field-rule {\n position: relative;\n height: 2px;\n overflow: hidden;\n background: var(--ink);\n}\n\n.input:focus + .field-rule {\n box-shadow: 0 2px 0 var(--ink);\n}\n\n.field-progress {\n position: absolute;\n top: 0;\n left: -45%;\n width: 45%;\n height: 2px;\n background: var(--stamp-taken);\n opacity: 0;\n}\n\n.is-loading .field-progress {\n opacity: 1;\n animation: sweep 900ms linear infinite;\n}\n\n@keyframes sweep {\n from {\n left: -45%;\n }\n to {\n left: 100%;\n }\n}\n\n.search {\n /* Wide enough for \"Checking…\" so the field doesn't resize mid-lookup. */\n min-width: 10.5rem;\n padding: 0.85rem 1.6rem;\n border: 0;\n background: var(--ink);\n color: var(--paper);\n font-family: var(--mono);\n font-weight: 600;\n font-size: 0.8125rem;\n letter-spacing: 0.14em;\n text-transform: uppercase;\n cursor: pointer;\n transition: transform 120ms ease, background-color 120ms ease;\n}\n\n.search:hover:not(:disabled) {\n background: var(--stamp-taken);\n}\n\n.search:active:not(:disabled) {\n transform: translateY(1px);\n}\n\n.search:disabled {\n cursor: progress;\n background: var(--ink-2);\n}\n\n/* ---------- result cards ---------- */\n\n.result:empty {\n display: none;\n}\n\n.card {\n position: relative;\n margin-top: clamp(2rem, 5vw, 2.75rem);\n padding: 1.5rem clamp(1.25rem, 4vw, 2rem) 1.25rem;\n background: var(--card);\n border: 1px solid var(--rule);\n box-shadow: 4px 4px 0 rgba(22, 35, 43, 0.09);\n animation: card-in 220ms ease-out both, jolt 160ms ease-out 300ms both;\n}\n\n@keyframes card-in {\n from {\n opacity: 0;\n transform: translateY(8px);\n }\n to {\n opacity: 1;\n transform: translateY(0);\n }\n}\n\n@keyframes jolt {\n 0%,\n 100% {\n transform: translateY(0);\n }\n 45% {\n transform: translateY(2px);\n }\n}\n\n.card-head {\n display: flex;\n align-items: flex-start;\n justify-content: space-between;\n flex-wrap: wrap;\n gap: 1rem;\n}\n\n.card-title {\n margin: 0.15rem 0 0;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(1.25rem, 4.5vw, 1.6rem);\n letter-spacing: -0.02em;\n word-break: break-all;\n}\n\n.card-idn {\n margin: 0.2rem 0 0;\n font-family: var(--mono);\n font-size: 0.875rem;\n color: var(--ink-2);\n}\n\n/* The signature: a rubber stamp pressed onto the record. */\n.stamp {\n flex: none;\n margin: 0.25rem -0.25rem 0 0;\n padding: 0.3em 0.6em;\n border: 3px solid currentColor;\n outline: 1px solid currentColor;\n outline-offset: 3px;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(0.875rem, 3.2vw, 1.125rem);\n letter-spacing: 0.14em;\n text-transform: uppercase;\n opacity: 0.88;\n transform: rotate(-8deg);\n mix-blend-mode: multiply;\n animation: stamp-in 320ms cubic-bezier(0.2, 0.8, 0.3, 1) 240ms both;\n}\n\n.stamp--taken {\n color: var(--stamp-taken);\n}\n\n.stamp--free {\n color: var(--stamp-free);\n}\n\n/* Unregistered but not for sale — neither the red of a taken name nor the\n green of one you can have. */\n.stamp--held {\n color: var(--stamp-held);\n}\n\n@keyframes stamp-in {\n from {\n opacity: 0;\n transform: rotate(-8deg) scale(2.5);\n }\n 60% {\n opacity: 0.95;\n transform: rotate(-8deg) scale(0.94);\n }\n to {\n opacity: 0.88;\n transform: rotate(-8deg) scale(1);\n }\n}\n\n.verdict {\n margin: 1.25rem 0 0;\n max-width: 52ch;\n color: var(--ink-2);\n}\n\n.verdict strong {\n color: var(--ink);\n font-weight: 500;\n}\n\n.rows {\n margin: 1.4rem 0 0;\n display: grid;\n gap: 0.7rem;\n}\n\n.row {\n display: flex;\n align-items: baseline;\n gap: 0.6rem;\n}\n\n.row dt {\n flex: none;\n font-size: 0.6875rem;\n font-weight: 500;\n letter-spacing: 0.16em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.leader {\n flex: 1 1 2rem;\n border-bottom: 1px dotted var(--rule);\n transform: translateY(-0.3em);\n}\n\n.row dd {\n margin: 0;\n flex: 0 1 auto;\n text-align: right;\n font-family: var(--mono);\n font-size: 0.9375rem;\n word-break: break-word;\n}\n\n.row dd .aside {\n color: var(--ink-2);\n}\n\n.row dd .stack {\n display: block;\n}\n\n/* The card is on the record with everything it knows and honest about the one\n thing it doesn't — yet. Breathes so it reads as pending, not as a caveat. */\n.pending {\n color: var(--ink-2);\n animation: breathe 1.6s ease-in-out infinite;\n}\n\n@keyframes breathe {\n 50% {\n opacity: 0.4;\n }\n}\n\n.note {\n margin: 1.25rem 0 0;\n padding-left: 0.9rem;\n border-left: 2px solid var(--stamp-taken);\n font-size: 0.9375rem;\n color: var(--ink-2);\n}\n\n/* A price is a quote from a reseller, not part of the registry's record, so it\n sits in its own torn-off panel rather than among the rows above. */\n.pricing {\n margin: 1.5rem -0.5rem 0;\n padding: 0.9rem 1rem 1rem;\n background: rgba(22, 35, 43, 0.035);\n border-top: 1px solid var(--rule);\n border-bottom: 1px solid var(--rule);\n}\n\n.pricing-head {\n margin: 0;\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.pricing-button {\n margin-top: 0.85rem;\n padding: 0.6rem 1.1rem;\n border: 1px solid var(--ink);\n background: transparent;\n color: var(--ink);\n font-family: var(--mono);\n font-size: 0.75rem;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n cursor: pointer;\n transition: background-color 120ms ease, color 120ms ease;\n}\n\n.pricing-button:hover:not(:disabled) {\n background: var(--ink);\n color: var(--card);\n}\n\n.pricing-button:active:not(:disabled) {\n transform: translateY(1px);\n}\n\n.pricing-button:disabled {\n border-color: var(--rule);\n color: var(--ink-2);\n cursor: progress;\n}\n\n.pricing .rows {\n margin-top: 0.85rem;\n gap: 0.55rem;\n}\n\n.pricing .row dd {\n font-weight: 500;\n}\n\n.pricing-foot {\n margin: 0.9rem 0 0;\n font-size: 0.8125rem;\n color: var(--ink-2);\n}\n\n.source {\n margin: 1.5rem 0 0;\n padding-top: 0.85rem;\n border-top: 1px dotted var(--rule);\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.08em;\n color: var(--ink-2);\n}\n\n/* ---------- narrow screens ---------- */\n\n@media (max-width: 34rem) {\n .lookup {\n grid-template-columns: 1fr;\n }\n\n .search {\n justify-self: stretch;\n }\n\n /* Stamp lands above the name, so a long domain can't push it around. */\n .card-head {\n flex-direction: column-reverse;\n align-items: stretch;\n }\n\n .stamp {\n align-self: flex-end;\n margin: 0 0 0.25rem;\n }\n\n .row {\n display: block;\n }\n\n .row dd {\n text-align: left;\n margin-top: 0.15rem;\n }\n\n .leader {\n display: none;\n }\n}\n\n@media (prefers-reduced-motion: reduce) {\n *,\n *::before,\n *::after {\n animation-duration: 0.001ms !important;\n animation-iteration-count: 1 !important;\n transition-duration: 0.001ms !important;\n }\n\n .is-loading .field-progress {\n left: 0;\n width: 100%;\n }\n}\n",[],[183,246],"e424ec59-5804-47a7-bf9e-ae3f7d7f5e34","index.js","b8e328a8-89d4-11f1-9340-1607ee4eb77e",24,["D",1787602431912],"const form = document.getElementById(\"lookup\");\nconst input = document.getElementById(\"domain\");\nconst button = document.getElementById(\"search\");\nconst result = document.getElementById(\"result\");\n\nform.addEventListener(\"submit\", (event) => {\n event.preventDefault();\n search(input.value);\n});\n\n// Let a shared URL open straight onto its answer.\nconst initial = new URLSearchParams(location.search).get(\"q\");\nif (initial) {\n input.value = initial;\n search(initial);\n} else {\n input.focus();\n}\n\nasync function search(query) {\n const domain = query.trim();\n if (!domain) {\n input.focus();\n return;\n }\n\n setLoading(true);\n history.replaceState(null, \"\", `?q=${encodeURIComponent(domain)}`);\n\n try {\n const res = await fetch(`/api/lookup?domain=${encodeURIComponent(domain)}`);\n if (!res.ok) throw new Error(`lookup failed: ${res.status}`);\n render(await res.json());\n } catch {\n render({\n query: domain,\n domain,\n status: \"error\",\n message: \"The lookup service didn't answer. Check your connection and search again.\",\n });\n } finally {\n setLoading(false);\n }\n}\n\nfunction setLoading(loading) {\n form.classList.toggle(\"is-loading\", loading);\n button.disabled = loading;\n button.textContent = loading ? \"Checking…\" : \"Search\";\n}\n\nfunction render(data) {\n const card = document.createElement(\"article\");\n card.className = \"card\";\n card.innerHTML = data.status === \"registered\"\n ? registeredCard(data)\n : data.status === \"available\"\n ? availableCard(data)\n : messageCard(data);\n result.replaceChildren(card);\n loadPricing(data, card);\n}\n\nfunction registeredCard(data) {\n const r = data.record ?? {};\n const rows = [\n row(\"Registrar\", r.registrar ? withAside(r.registrar, r.registrarIanaId && `IANA ${r.registrarIanaId}`) : null),\n row(\"Registered\", dateCell(r.registered)),\n row(\"Expires\", dateCell(r.expires)),\n row(\"Updated\", dateCell(r.updated)),\n row(\"Status\", r.statuses?.length ? stack(r.statuses) : null),\n row(\"Name servers\", r.nameservers?.length ? stack(r.nameservers) : null),\n row(\"DNSSEC\", r.dnssec === undefined ? null : r.dnssec ? \"Signed\" : \"Unsigned\"),\n ].join(\"\");\n\n return `\n ${head(data, \"taken\", \"Registered\")}\n

${esc(data.domain)} is in the .${esc(data.tld)} registry.

${rows}\n ${note(data)}\n ${pricingSlot(data)}\n ${source(data)}\n `;\n}\n\nfunction availableCard(data) {\n return `\n ${head(data, \"free\", \"Available\")}\n

\n The .${esc(data.tld)} registry holds no record for ${esc(data.domain)}.\n A registrar should be able to sell it — reserved and premium names are the exception.\n

\n ${note(data)}\n ${pricingSlot(data)}\n ${source(data)}\n `;\n}\n\nfunction messageCard(data) {\n const titles = {\n invalid: \"Not a domain name\",\n unsupported: `.${data.tld} isn't reachable by RDAP`,\n error: \"No answer from the registry\",\n };\n const extra = data.status === \"unsupported\"\n ? `

ICANN's own lookup tool covers some registries that don't publish RDAP.

`\n : \"\";\n\n return `\n

${data.status === \"invalid\" ? \"Check the spelling\" : \"Can't check\"}

${esc(titles[data.status] ?? \"Lookup failed\")}

${esc(data.message ?? \"\")}

\n ${extra}\n ${pricingSlot(data)}\n ${source(data)}\n `;\n}\n\nfunction head(data, tone, stampLabel) {\n const idn = data.unicodeName && data.unicodeName !== data.domain\n ? `

${esc(data.unicodeName)}

`\n : \"\";\n\n return `\n

Registry record

${esc(data.domain)}

\n ${idn}\n

${esc(stampLabel)}

\n `;\n}\n\nfunction row(label, value) {\n if (!value) return \"\";\n return `

${esc(label)}

${value}

`;\n}\n\nfunction withAside(value, aside) {\n return aside ? `${esc(value)} ${esc(aside)}` : esc(value);\n}\n\nfunction stack(values) {\n return values.map((v) => `${esc(v)}`).join(\"\");\n}\n\nfunction dateCell(iso) {\n if (!iso) return null;\n const date = new Date(iso);\n if (Number.isNaN(date.getTime())) return esc(iso);\n return withAside(date.toISOString().slice(0, 10), relative(date));\n}\n\n/** \"3 years ago\" / \"in 2 months\", for judging how settled a registration is. */\nfunction relative(date) {\n const days = Math.round((date.getTime() - Date.now()) / 86_400_000);\n const fmt = new Intl.RelativeTimeFormat(\"en\", { numeric: \"auto\" });\n if (Math.abs(days) >= 365) return fmt.format(Math.round(days / 365.25), \"year\");\n if (Math.abs(days) >= 31) return fmt.format(Math.round(days / 30.44), \"month\");\n return fmt.format(days, \"day\");\n}\n\nfunction note(data) {\n return data.note ? `

${esc(data.note)}

` : \"\";\n}\n\n/**\n * The price arrives on its own schedule — Porkbun's list can take 20 seconds to\n * build — so the card reserves a place for it and fills it in on arrival.\n */\nfunction pricingSlot(data) {\n if (!data.tld) return \"\";\n return `\n

Retail price

Checking Porkbun's price list…

\n `;\n}\n\nlet pricingRequest = 0;\n\nasync function loadPricing(data, card) {\n const slot = card.querySelector(\"[data-pricing]\");\n if (!slot) return;\n\n const request = ++pricingRequest;\n // Only an \"available\" verdict can be contradicted by a registrar, and the\n // check is metered per account, so don't spend one on a settled answer.\n const check = data.status === \"available\" ? \"&check=1\" : \"\";\n let pricing, availability;\n try {\n const res = await fetch(\n `/api/pricing?domain=${encodeURIComponent(data.domain || data.query)}${check}`,\n );\n if (res.ok) ({ pricing, availability } = await res.json());\n } catch {\n // No price is a fine outcome — the registry's answer stands on its own.\n }\n\n if (request !== pricingRequest) return; // a newer search owns the page now\n\n if (data.status === \"available\" && availability && !availability.registrable) {\n withhold(data, card);\n }\n\n const panel = pricingPanel(pricing, availability);\n if (panel) slot.innerHTML = panel;\n else slot.remove(); // an empty bordered box is worse than no panel at all\n}\n\n/**\n * The registry has no record, yet the registrar won't sell the name. That is\n * what reserved, blocked and registry-held names look like: they own no RDAP\n * object, so \"Available\" is the honest reading of the registry and still the\n * wrong answer to the question being asked. Overturn the verdict rather than\n * leaving the correction as a footnote under a green stamp.\n */\nfunction withhold(data, card) {\n const stamp = card.querySelector(\".stamp\");\n if (stamp) {\n stamp.classList.replace(\"stamp--free\", \"stamp--held\");\n stamp.textContent = \"Withheld\";\n }\n\n const verdict = card.querySelector(\".verdict\");\n if (verdict) {\n verdict.innerHTML = `\n The .${esc(data.tld)} registry holds no record for ${esc(data.domain)},\n but Porkbun won't sell it. Names that are reserved, blocked, or held back by the\n registry look unregistered over RDAP — this one isn't yours to take.\n `;\n }\n}\n\n/** What the name costs, kept visibly apart from the registry's own record. */\nfunction pricingPanel(p, availability) {\n const rows = p\n ? [\n row(\"First year\", money(p.registration)),\n row(\"Renewal\", money(p.renewal, \"/yr\")),\n row(\"Transfer in\", money(p.transfer)),\n ].join(\"\")\n : \"\";\n const foot = availabilityFoot(availability, Boolean(rows));\n if (!rows && !foot) return \"\";\n\n const head = p\n ? `Porkbun\n list price · .${esc(p.suffix)} · ${esc(p.currency)}`\n : `Porkbun`;\n\n return `\n

${head}

\n ${rows ? `

${rows}` : \"\"}\n ${foot ?? `

Premium and reserved names are quoted individually.

`}\n `;\n}\n\n/**\n * Porkbun's per-name answer, which is the only thing here that knows about this\n * name rather than about its suffix. Null when the check didn't run, leaving the\n * generic caveat in place — silence never gets reported as a confirmation.\n */\nfunction availabilityFoot(a, hasListPrice) {\n if (!a) return null;\n\n if (!a.registrable) {\n // Only point at the list price when there is one to point at.\n return hasListPrice\n ? `

Porkbun won't sell this name. The prices above are\n what the suffix costs, not what this name costs.

`\n : `

Porkbun won't sell this name.

`;\n }\n\n if (typeof a.price !== \"number\") {\n return `

Porkbun confirms this exact name is registrable.

`;\n }\n\n const minimum = a.minDuration ? `, ${a.minDuration}-year minimum` : \"\";\n if (a.premium) {\n return `

Porkbun quotes ${money(a.price)} for this\n exact name — a premium registration, priced apart from the list${esc(minimum)}.

`;\n }\n\n const then = a.firstYearPromo && typeof a.regularPrice === \"number\"\n ? ` for the first year, then ${money(a.regularPrice)}`\n : \"\";\n return `

Porkbun confirms this exact name is registrable at\n ${money(a.price)}${then}${esc(minimum)}.

`;\n}\n\nfunction money(amount, per = \"\") {\n if (typeof amount !== \"number\") return null;\n // Free is a real price here — some registries don't charge to transfer in.\n return amount === 0 ? \"Free\" : esc(`$${amount.toFixed(2)}${per}`);\n}\n\nfunction source(data) {\n if (!data.source) return \"\";\n const at = data.answeredAt ? ` · ${data.answeredAt.slice(11, 19)} UTC` : \"\";\n return `

Answered by ${esc(data.source)}${esc(at)}

`;\n}\n\nfunction esc(value) {\n return String(value).replace(\n /[&<>\"']/g,\n (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c]),\n );\n}\n",[],[183,254],"0ebe74f2-b02d-4ac6-9549-87db305ade6b","index.html","b8d5c3c0-89d4-11f1-96e4-1607ee4eb77e",19,["D",1785168433628],"\n\n \n \n \n WHOIS Lookup\n \n \n \n \n \n \n \n \n \n

WHOIS Lookup

\n\n \n\n

\n\n \n \n\n",[],[183,262],["D",1785168214803],[208,209,210],[183],"62a20e79-1d40-4355-836c-5dc3f1dc3c54","rdap.ts","b8d99310-89d4-11f1-aa02-1607ee4eb77e",10,["D",1785168215079],"import type { DomainRecord, LookupResult } from \"../shared/types.ts\";\n\n/** ICANN/IANA's authoritative map of TLD -> RDAP service. */\nconst BOOTSTRAP_URL = \"https://data.iana.org/rdap/dns.json\";\nconst BOOTSTRAP_TTL_MS = 12 * 60 * 60 * 1000;\nconst REQUEST_TIMEOUT_MS = 10_000;\n\n/**\n * Registries that run RDAP but that IANA's bootstrap file doesn't list.\n * Each entry was checked against a known-registered name in that exact TLD.\n * Never point a TLD at a service that isn't authoritative for it: a foreign\n * RDAP service answers 404, and 404 is how we read \"available\".\n */\nconst SUPPLEMENTAL_SERVICES: Record = {\n ac: \"https://rdap.identitydigital.services/rdap/\",\n de: \"https://rdap.denic.de/\",\n io: \"https://rdap.identitydigital.services/rdap/\",\n sh: \"https://rdap.identitydigital.services/rdap/\",\n};\n\ninterface BootstrapFile {\n publication: string;\n services: [string[], string[]][];\n}\n\nlet bootstrapCache: { fetchedAt: number; map: Map } | null = null;\n\nasync function getServiceMap(): Promise> {\n if (bootstrapCache && Date.now() - bootstrapCache.fetchedAt < BOOTSTRAP_TTL_MS) {\n return bootstrapCache.map;\n }\n\n const res = await fetch(BOOTSTRAP_URL, {\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n if (!res.ok) throw new Error(`IANA bootstrap returned ${res.status}`);\n const bootstrap = (await res.json()) as BootstrapFile;\n\n const map = new Map();\n for (const [tlds, urls] of bootstrap.services) {\n const base = urls.find((u) => u.startsWith(\"https://\")) ?? urls[0];\n if (!base) continue;\n for (const tld of tlds) map.set(tld.toLowerCase(), base);\n }\n for (const [tld, base] of Object.entries(SUPPLEMENTAL_SERVICES)) {\n if (!map.has(tld)) map.set(tld, base);\n }\n\n bootstrapCache = { fetchedAt: Date.now(), map };\n return map;\n}\n\ninterface NormalizedDomain {\n domain: string;\n unicodeName?: string;\n tld: string;\n labelCount: number;\n}\n\n/**\n * Reduce whatever was typed to an ASCII (punycoded) domain name. Accepts pasted\n * URLs and IDNs; drops a leading \"www.\" since it is never registrable itself.\n */\nexport function normalizeDomain(input: string): NormalizedDomain | { error: string } {\n const raw = input.trim().replace(/^[a-z][a-z0-9+.-]*:\\/\\//i, \"\").split(/[/?#]/)[0]\n .replace(/\\.$/, \"\");\n if (!raw) return { error: \"Enter a domain name to look up.\" };\n\n let hostname: string;\n try {\n hostname = new URL(`http://${raw}`).hostname;\n } catch {\n return { error: `\"${input.trim()}\" isn't a domain name.` };\n }\n\n const domain = hostname.replace(/^www\\./, \"\");\n const labels = domain.split(\".\");\n if (labels.length < 2) {\n return { error: `Add a top-level domain — try \"${domain}.com\".` };\n }\n if (domain.length > 253 || labels.some((l) => !/^[a-z0-9-]{1,63}$/.test(l))) {\n return { error: `\"${input.trim()}\" isn't a domain name.` };\n }\n\n // URL() punycodes IDNs one way only, so keep what was typed as the unicode form.\n const typed = raw.toLowerCase().replace(/^www\\./, \"\");\n const unicodeName = domain.includes(\"xn--\") && typed !== domain ? typed : undefined;\n return { domain, unicodeName, tld: labels[labels.length - 1], labelCount: labels.length };\n}\n\nexport async function lookupDomain(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) {\n return { query, domain: \"\", tld: \"\", status: \"invalid\", message: normalized.error };\n }\n\n const { domain, unicodeName, tld, labelCount } = normalized;\n const base = { query, domain, unicodeName, tld };\n\n const services = await getServiceMap();\n const service = services.get(tld);\n if (!service) {\n return {\n ...base,\n status: \"unsupported\",\n message:\n `IANA publishes no RDAP service for .${tld}, so the registry can't be asked directly.`,\n };\n }\n\n const url = `${service.replace(/\\/?$/, \"/\")}domain/${encodeURIComponent(domain)}`;\n const source = new URL(url).hostname;\n const answeredAt = new Date().toISOString();\n\n let res: Response;\n try {\n res = await fetch(url, {\n headers: { accept: \"application/rdap+json, application/json\" },\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n } catch (err) {\n // A registry that is slow or down is a normal outcome here, not a bug to\n // surface as a 500 — the visitor needs to know who failed to answer.\n const reason = err instanceof DOMException && err.name === \"TimeoutError\"\n ? `${source} took longer than ${REQUEST_TIMEOUT_MS / 1000} seconds to answer.`\n : `${source} couldn't be reached.`;\n return { ...base, status: \"error\", source, message: reason };\n }\n\n if (res.status === 404) {\n return {\n ...base,\n status: \"available\",\n source,\n answeredAt,\n note: labelCount > 2\n ? `${domain} has ${labelCount} labels. If it's a subdomain, look up the name it sits under instead.`\n : undefined,\n };\n }\n\n if (res.status === 429) {\n return {\n ...base,\n status: \"error\",\n source,\n message: `${source} is rate-limiting lookups. Wait a moment and search again.`,\n };\n }\n\n if (!res.ok) {\n return {\n ...base,\n status: \"error\",\n source,\n message: `${source} answered ${res.status} ${res.statusText}.`.trim(),\n };\n }\n\n const data = await res.json();\n if (data?.errorCode === 404) {\n return { ...base, status: \"available\", source, answeredAt };\n }\n\n return {\n ...base,\n domain: typeof data?.ldhName === \"string\" ? data.ldhName.toLowerCase() : domain,\n unicodeName: typeof data?.unicodeName === \"string\" ? data.unicodeName : unicodeName,\n status: \"registered\",\n source,\n answeredAt,\n record: parseRecord(data),\n };\n}\n\nfunction parseRecord(data: any): DomainRecord {\n const registrar = (data?.entities ?? []).find((e: any) => e?.roles?.includes(\"registrar\"));\n\n return {\n registrar: vcardValue(registrar?.vcardArray, \"fn\"),\n registrarIanaId: (registrar?.publicIds ?? []).find((id: any) =>\n id?.type === \"IANA Registrar ID\"\n )?.identifier,\n registered: eventDate(data, \"registration\"),\n expires: eventDate(data, \"expiration\"),\n updated: eventDate(data, \"last changed\"),\n statuses: (data?.status ?? []).filter((s: unknown) => typeof s === \"string\"),\n nameservers: (data?.nameservers ?? [])\n .map((ns: any) => typeof ns?.ldhName === \"string\" ? ns.ldhName.toLowerCase() : null)\n .filter(Boolean),\n dnssec: data?.secureDNS?.delegationSigned ?? undefined,\n };\n}\n\nfunction eventDate(data: any, action: string): string | undefined {\n const event = (data?.events ?? []).find((e: any) => e?.eventAction === action);\n return typeof event?.eventDate === \"string\" ? event.eventDate : undefined;\n}\n\n/** vCard entries are [\"fn\", {}, \"text\", \"Registrar Name\"] tuples. */\nfunction vcardValue(vcardArray: any, field: string): string | undefined {\n const entry = (vcardArray?.[1] ?? []).find((e: any) => e?.[0] === field);\n const value = entry?.[3];\n return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n}\n",[],[188,273],"d6be8105-2462-431d-9e07-55d091f81db8",["D",1787603564724],[],[188,33],"163aa5f4-c617-4f00-bba3-c0982dde2551","files.ts","b8cc58f8-89d4-11f1-9e1f-1607ee4eb77e",8,["D",1785168215152],"import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n\n/**\n * Val Town's file helpers resolve project files through the esm.town URL of the\n * running val, which doesn't exist when the same code runs from disk. These\n * wrappers keep `deno run` working for local preview; on Val Town they hand off\n * to the standard helpers untouched.\n */\n\nconst CONTENT_TYPES: Record = {\n css: \"text/css; charset=utf-8\",\n html: \"text/html; charset=utf-8\",\n js: \"text/javascript; charset=utf-8\",\n json: \"application/json; charset=utf-8\",\n svg: \"image/svg+xml\",\n};\n\nconst isLocal = (metaUrl: string) => metaUrl.startsWith(\"file://\");\n\nexport function readProjectFile(path: string, metaUrl: string): Promise {\n if (!isLocal(metaUrl)) return readFile(path, metaUrl);\n return Deno.readTextFile(new URL(`.${path}`, metaUrl));\n}\n\nexport async function serveProjectFile(path: string, metaUrl: string): Promise {\n if (!isLocal(metaUrl)) return serveFile(path, metaUrl);\n\n const body = await Deno.readTextFile(new URL(`.${path}`, metaUrl)).catch(() => null);\n if (body === null) return new Response(\"Not found\", { status: 404 });\n\n const extension = path.split(\".\").pop() ?? \"\";\n return new Response(body, {\n headers: { \"content-type\": CONTENT_TYPES[extension] ?? \"text/plain; charset=utf-8\" },\n });\n}\n",[],[188,285],["D",1785168214649],[204,205,206],[188],["D",1785166232232],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_18":56,"_102":103,"_104":25},{"_13":87,"_32":88,"_44":43,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":46,"_96":97},"ctx",{"_80":-5,"_124":332,"_333":334,"_335":336,"_337":25,"_338":25,"_339":25,"_340":60,"_341":-5,"_342":-7,"_343":-7,"_344":151,"_345":25,"_346":25,"_347":-5,"_348":25,"_349":25,"_350":25,"_351":-5},"ENV",{"_303":304,"_305":306,"_307":88,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v29