Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[148],"1c9e7a6c-9507-4148-bbd1-2fc34f94a828",".vtignore","b8c60a48-89d4-11f1-97dc-1607ee4eb77e",7,["D",1785168215096],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[155],"1e49960f-1466-46fa-a5e2-7137c8eecfb7","shared","b8698246-89d4-11f1-97dc-1607ee4eb77e",["D",1785168214472],"directory",[162],"64242c32-bb1f-495a-b292-5472fd3ed691","frontend","b898b818-89d4-11f1-9340-1607ee4eb77e",["D",1785168214803],[168],"57fa537f-e8b3-4f1e-b82d-2babea12af78","backend","b87e942e-89d4-11f1-97dc-1607ee4eb77e",3,["D",1785168214649],[173],"pulls","branches","forks","envVars",{"_185":144,"_187":136},"connections",{"_185":136,"_186":136},"count","unfilledCount","emptyCount",{"_18":172,"_20":173,"_116":174,"_117":-5,"_118":68,"_119":175,"_121":38,"_22":281,"_65":136,"_124":165,"_126":-5,"_128":26,"_129":-5,"_204":282,"_85":283},{"_18":273,"_20":274,"_116":275,"_117":174,"_118":68,"_119":276,"_121":38,"_22":277,"_65":136,"_124":224,"_126":278,"_128":26,"_129":-5,"_204":279,"_85":280},{"_18":265,"_20":266,"_116":267,"_117":174,"_118":68,"_119":268,"_121":38,"_22":269,"_65":42,"_124":224,"_126":270,"_128":26,"_129":-5,"_204":271,"_85":272},{"_18":257,"_20":258,"_116":259,"_117":174,"_118":68,"_119":260,"_121":38,"_22":261,"_65":136,"_124":224,"_126":262,"_128":26,"_129":-5,"_204":263,"_85":264},{"_18":167,"_20":168,"_116":169,"_117":-5,"_118":68,"_119":123,"_121":38,"_22":254,"_65":136,"_124":165,"_126":-5,"_128":26,"_129":-5,"_204":255,"_85":256},{"_18":246,"_20":247,"_116":248,"_117":169,"_118":68,"_119":249,"_121":38,"_22":250,"_65":144,"_124":95,"_126":251,"_128":26,"_129":-5,"_204":252,"_85":253},{"_18":239,"_20":240,"_116":241,"_117":169,"_118":68,"_119":66,"_121":38,"_22":242,"_65":123,"_124":224,"_126":243,"_128":26,"_129":-5,"_204":244,"_85":245},{"_18":231,"_20":232,"_116":233,"_117":169,"_118":68,"_119":234,"_121":38,"_22":235,"_65":175,"_124":95,"_126":236,"_128":26,"_129":-5,"_204":237,"_85":238},{"_18":161,"_20":162,"_116":163,"_117":-5,"_118":68,"_119":144,"_121":38,"_22":228,"_65":136,"_124":165,"_126":-5,"_128":26,"_129":-5,"_204":229,"_85":230},{"_18":219,"_20":220,"_116":221,"_117":163,"_118":68,"_119":222,"_121":38,"_22":223,"_65":144,"_124":224,"_126":225,"_128":26,"_129":-5,"_204":226,"_85":227},{"_18":154,"_20":155,"_116":156,"_117":-5,"_118":68,"_119":157,"_121":38,"_22":216,"_65":136,"_124":95,"_126":159,"_128":26,"_129":-5,"_204":217,"_85":218},{"_18":147,"_20":148,"_116":149,"_117":-5,"_118":68,"_119":150,"_121":38,"_22":213,"_65":136,"_124":95,"_126":152,"_128":26,"_129":-5,"_204":214,"_85":215},{"_18":139,"_20":140,"_116":141,"_117":-5,"_118":68,"_119":142,"_121":38,"_22":210,"_65":144,"_124":95,"_126":145,"_128":26,"_129":-5,"_204":211,"_85":212},{"_18":131,"_20":132,"_116":133,"_117":-5,"_118":68,"_119":134,"_121":38,"_22":207,"_65":136,"_124":95,"_126":137,"_128":26,"_129":-5,"_204":208,"_85":209},{"_18":114,"_20":115,"_116":36,"_117":-5,"_118":68,"_119":120,"_121":38,"_22":203,"_65":123,"_124":125,"_126":127,"_128":26,"_129":21,"_204":205,"_85":206},["D",1787603564789],"children",[],[115],["D",1785168215020],[],[132],["D",1787603564691],[],[140],["D",1785168215146],[],[148],["D",1785168215096],[],[155],"42a32d37-f183-42f4-bc77-a9c03186f6f3","types.ts","b8b6a26a-89d4-11f1-bf8b-1607ee4eb77e",27,["D",1787603564613],"script","/** Shape of the /api/lookup and /api/pricing responses. Kept in shared/ as the\n * contract the frontend renders against. */\n\nexport type LookupStatus =\n | \"registered\" // the registry returned a record\n | \"available\" // the registry has no record for this name\n | \"unsupported\" // no RDAP service is published for this TLD\n | \"invalid\" // the input isn't a domain name we can query\n | \"error\"; // the registry failed to answer\n\nexport interface DomainRecord {\n registrar?: string;\n registrarIanaId?: string;\n registered?: string;\n expires?: string;\n updated?: string;\n statuses: string[];\n nameservers: string[];\n dnssec?: boolean;\n}\n\nexport interface DomainPricing {\n /** The suffix Porkbun prices. Some ccTLDs are sold at the second level, so\n * this can be two labels (`co.uk`) rather than the bare TLD. */\n suffix: string;\n /** First-year price. Often promotional, and often below the renewal. */\n registration?: number;\n /** What the name costs every year after the first. */\n renewal?: number;\n /** Price to move an existing registration in, usually a year included. */\n transfer?: number;\n /** ISO 4217 code for the amounts above. */\n currency: string;\n}\n\nexport interface LookupResult {\n /** What the visitor typed. */\n query: string;\n /** The normalized, punycoded name that was queried. */\n domain: string;\n /** Unicode form, when the name was an IDN. */\n unicodeName?: string;\n tld: string;\n status: LookupStatus;\n /** Hostname of the RDAP service that answered. */\n source?: string;\n /** UTC timestamp of the answer. */\n answeredAt?: string;\n record?: DomainRecord;\n /** Human-readable explanation for invalid, unsupported, and error results. */\n message?: string;\n /** Caveat worth showing alongside an otherwise good answer. */\n note?: string;\n}\n\n/**\n * Porkbun's answer to \"will you sell me this exact name?\", which is a different\n * question from RDAP's \"is there a registration record?\". Reserved, blocked and\n * registry-held names have no RDAP object, so they read as available there\n * while a registrar still refuses them.\n */\nexport interface DomainAvailability {\n /** Porkbun will sell it. False means it exists, is reserved, or is withheld. */\n registrable: boolean;\n /** Registry-tier premium, priced per-name rather than off the list. */\n premium: boolean;\n /** Per-name first-year price. Differs from the list price on premium names. */\n price?: number;\n /** The same name's price once any first-year promotion lapses. */\n regularPrice?: number;\n /** Whether `price` is a promotional first-year rate. */\n firstYearPromo?: boolean;\n /** Years the registry makes you buy up front, when it insists on more than one. */\n minDuration?: number;\n /** UTC timestamp of the check. */\n checkedAt: string;\n}\n\nexport interface PricingResult {\n /** The normalized name the price was matched against. */\n domain: string;\n /** Absent when Porkbun doesn't sell the suffix, or didn't answer in time. */\n pricing?: DomainPricing;\n}\n\nexport interface AvailabilityResult {\n /** The normalized name that was checked. */\n domain: string;\n /**\n * Absent whenever the check didn't run or didn't answer — no credentials,\n * rate-limited, timed out, or an error. Absent means \"unknown\", never\n * \"registrable\": only an explicit answer from Porkbun sets this.\n */\n availability?: DomainAvailability;\n}\n",[],[162,220],["D",1785168214472],[197],[162],"62cdf598-e5ea-412e-9365-1a0ed41ff2c4","style.css","b902bd26-89d4-11f1-8536-1607ee4eb77e",26,["D",1787603564596],":root {\n --paper: #c9d3d6;\n --card: #f4f6f5;\n --ink: #16232b;\n --ink-2: #5c6d74;\n --rule: #a9b7bb;\n --stamp-taken: #a32b22;\n --stamp-free: #1c6a55;\n --stamp-held: #8a5a1b;\n\n --mono: \"IBM Plex Mono\", ui-monospace, SFMono-Regular, Menlo, monospace;\n --sans: \"IBM Plex Sans\", system-ui, -apple-system, Segoe UI, sans-serif;\n\n --pad-top: clamp(2rem, 8vw, 5.5rem);\n --pad-bottom: 3rem;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: border-box;\n}\n\nbody {\n margin: 0;\n padding: var(--pad-top) 1.25rem var(--pad-bottom);\n background-color: var(--paper);\n /* Ledger ruling: the page is the book the registry keeps. */\n background-image: repeating-linear-gradient(\n to bottom,\n transparent 0 27px,\n rgba(22, 35, 43, 0.055) 27px 28px\n );\n color: var(--ink);\n font-family: var(--sans);\n font-size: 16px;\n line-height: 1.55;\n -webkit-font-smoothing: antialiased;\n}\n\n::selection {\n background: var(--stamp-taken);\n color: var(--card);\n}\n\na {\n color: inherit;\n text-decoration-color: var(--rule);\n text-underline-offset: 3px;\n}\n\na:hover {\n text-decoration-color: currentColor;\n}\n\n:focus-visible {\n outline: 2px solid var(--ink);\n outline-offset: 3px;\n}\n\n.sheet {\n max-width: 44rem;\n margin: 0 auto;\n}\n\n/* Before the first search there's only the title and the field, so sit them in\n the middle of the screen; results push the page back to a normal top flow. */\nbody:has(#result:empty) .sheet {\n display: flex;\n flex-direction: column;\n justify-content: center;\n min-height: calc(100dvh - var(--pad-top) - var(--pad-bottom));\n}\n\n.eyebrow {\n margin: 0 0 1.25rem;\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\nh1 {\n margin: 0;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(2.25rem, 7vw, 3.5rem);\n letter-spacing: -0.035em;\n line-height: 1;\n}\n\n/* ---------- lookup form ---------- */\n\n.lookup {\n display: grid;\n grid-template-columns: 1fr auto;\n align-items: end;\n gap: 1rem;\n margin: clamp(2rem, 6vw, 3rem) 0 0;\n}\n\n.label {\n display: block;\n margin-bottom: 0.4rem;\n font-size: 0.6875rem;\n font-weight: 500;\n letter-spacing: 0.16em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.input {\n display: block;\n width: 100%;\n padding: 0 0 0.35rem;\n border: 0;\n background: transparent;\n color: var(--ink);\n font-family: var(--mono);\n font-weight: 500;\n font-size: clamp(1.5rem, 5vw, 2rem);\n letter-spacing: -0.02em;\n}\n\n.input::placeholder {\n color: var(--rule);\n}\n\n.input:focus {\n outline: none;\n}\n\n.field-rule {\n position: relative;\n height: 2px;\n overflow: hidden;\n background: var(--ink);\n}\n\n.input:focus + .field-rule {\n box-shadow: 0 2px 0 var(--ink);\n}\n\n.field-progress {\n position: absolute;\n top: 0;\n left: -45%;\n width: 45%;\n height: 2px;\n background: var(--stamp-taken);\n opacity: 0;\n}\n\n.is-loading .field-progress {\n opacity: 1;\n animation: sweep 900ms linear infinite;\n}\n\n@keyframes sweep {\n from {\n left: -45%;\n }\n to {\n left: 100%;\n }\n}\n\n.search {\n /* Wide enough for \"Checking…\" so the field doesn't resize mid-lookup. */\n min-width: 10.5rem;\n padding: 0.85rem 1.6rem;\n border: 0;\n background: var(--ink);\n color: var(--paper);\n font-family: var(--mono);\n font-weight: 600;\n font-size: 0.8125rem;\n letter-spacing: 0.14em;\n text-transform: uppercase;\n cursor: pointer;\n transition: transform 120ms ease, background-color 120ms ease;\n}\n\n.search:hover:not(:disabled) {\n background: var(--stamp-taken);\n}\n\n.search:active:not(:disabled) {\n transform: translateY(1px);\n}\n\n.search:disabled {\n cursor: progress;\n background: var(--ink-2);\n}\n\n/* ---------- result cards ---------- */\n\n.result:empty {\n display: none;\n}\n\n.card {\n position: relative;\n margin-top: clamp(2rem, 5vw, 2.75rem);\n padding: 1.5rem clamp(1.25rem, 4vw, 2rem) 1.25rem;\n background: var(--card);\n border: 1px solid var(--rule);\n box-shadow: 4px 4px 0 rgba(22, 35, 43, 0.09);\n animation: card-in 220ms ease-out both, jolt 160ms ease-out 300ms both;\n}\n\n@keyframes card-in {\n from {\n opacity: 0;\n transform: translateY(8px);\n }\n to {\n opacity: 1;\n transform: translateY(0);\n }\n}\n\n@keyframes jolt {\n 0%,\n 100% {\n transform: translateY(0);\n }\n 45% {\n transform: translateY(2px);\n }\n}\n\n.card-head {\n display: flex;\n align-items: flex-start;\n justify-content: space-between;\n flex-wrap: wrap;\n gap: 1rem;\n}\n\n.card-title {\n margin: 0.15rem 0 0;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(1.25rem, 4.5vw, 1.6rem);\n letter-spacing: -0.02em;\n word-break: break-all;\n}\n\n.card-idn {\n margin: 0.2rem 0 0;\n font-family: var(--mono);\n font-size: 0.875rem;\n color: var(--ink-2);\n}\n\n/* The signature: a rubber stamp pressed onto the record. */\n.stamp {\n flex: none;\n margin: 0.25rem -0.25rem 0 0;\n padding: 0.3em 0.6em;\n border: 3px solid currentColor;\n outline: 1px solid currentColor;\n outline-offset: 3px;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(0.875rem, 3.2vw, 1.125rem);\n letter-spacing: 0.14em;\n text-transform: uppercase;\n opacity: 0.88;\n transform: rotate(-8deg);\n mix-blend-mode: multiply;\n animation: stamp-in 320ms cubic-bezier(0.2, 0.8, 0.3, 1) 240ms both;\n}\n\n.stamp--taken {\n color: var(--stamp-taken);\n}\n\n.stamp--free {\n color: var(--stamp-free);\n}\n\n/* Unregistered but not for sale — neither the red of a taken name nor the\n green of one you can have. */\n.stamp--held {\n color: var(--stamp-held);\n}\n\n@keyframes stamp-in {\n from {\n opacity: 0;\n transform: rotate(-8deg) scale(2.5);\n }\n 60% {\n opacity: 0.95;\n transform: rotate(-8deg) scale(0.94);\n }\n to {\n opacity: 0.88;\n transform: rotate(-8deg) scale(1);\n }\n}\n\n.verdict {\n margin: 1.25rem 0 0;\n max-width: 52ch;\n color: var(--ink-2);\n}\n\n.verdict strong {\n color: var(--ink);\n font-weight: 500;\n}\n\n.rows {\n margin: 1.4rem 0 0;\n display: grid;\n gap: 0.7rem;\n}\n\n.row {\n display: flex;\n align-items: baseline;\n gap: 0.6rem;\n}\n\n.row dt {\n flex: none;\n font-size: 0.6875rem;\n font-weight: 500;\n letter-spacing: 0.16em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.leader {\n flex: 1 1 2rem;\n border-bottom: 1px dotted var(--rule);\n transform: translateY(-0.3em);\n}\n\n.row dd {\n margin: 0;\n flex: 0 1 auto;\n text-align: right;\n font-family: var(--mono);\n font-size: 0.9375rem;\n word-break: break-word;\n}\n\n.row dd .aside {\n color: var(--ink-2);\n}\n\n.row dd .stack {\n display: block;\n}\n\n/* The card is on the record with everything it knows and honest about the one\n thing it doesn't — yet. Breathes so it reads as pending, not as a caveat. */\n.pending {\n color: var(--ink-2);\n animation: breathe 1.6s ease-in-out infinite;\n}\n\n@keyframes breathe {\n 50% {\n opacity: 0.4;\n }\n}\n\n.note {\n margin: 1.25rem 0 0;\n padding-left: 0.9rem;\n border-left: 2px solid var(--stamp-taken);\n font-size: 0.9375rem;\n color: var(--ink-2);\n}\n\n/* A price is a quote from a reseller, not part of the registry's record, so it\n sits in its own torn-off panel rather than among the rows above. */\n.pricing {\n margin: 1.5rem -0.5rem 0;\n padding: 0.9rem 1rem 1rem;\n background: rgba(22, 35, 43, 0.035);\n border-top: 1px solid var(--rule);\n border-bottom: 1px solid var(--rule);\n}\n\n.pricing-head {\n margin: 0;\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.pricing-button {\n margin-top: 0.85rem;\n padding: 0.6rem 1.1rem;\n border: 1px solid var(--ink);\n background: transparent;\n color: var(--ink);\n font-family: var(--mono);\n font-size: 0.75rem;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n cursor: pointer;\n transition: background-color 120ms ease, color 120ms ease;\n}\n\n.pricing-button:hover:not(:disabled) {\n background: var(--ink);\n color: var(--card);\n}\n\n.pricing-button:active:not(:disabled) {\n transform: translateY(1px);\n}\n\n.pricing-button:disabled {\n border-color: var(--rule);\n color: var(--ink-2);\n cursor: progress;\n}\n\n.pricing .rows {\n margin-top: 0.85rem;\n gap: 0.55rem;\n}\n\n.pricing .row dd {\n font-weight: 500;\n}\n\n.pricing-foot {\n margin: 0.9rem 0 0;\n font-size: 0.8125rem;\n color: var(--ink-2);\n}\n\n.source {\n margin: 1.5rem 0 0;\n padding-top: 0.85rem;\n border-top: 1px dotted var(--rule);\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.08em;\n color: var(--ink-2);\n}\n\n/* ---------- narrow screens ---------- */\n\n@media (max-width: 34rem) {\n .lookup {\n grid-template-columns: 1fr;\n }\n\n .search {\n justify-self: stretch;\n }\n\n /* Stamp lands above the name, so a long domain can't push it around. */\n .card-head {\n flex-direction: column-reverse;\n align-items: stretch;\n }\n\n .stamp {\n align-self: flex-end;\n margin: 0 0 0.25rem;\n }\n\n .row {\n display: block;\n }\n\n .row dd {\n text-align: left;\n margin-top: 0.15rem;\n }\n\n .leader {\n display: none;\n }\n}\n\n@media (prefers-reduced-motion: reduce) {\n *,\n *::before,\n *::after {\n animation-duration: 0.001ms !important;\n animation-iteration-count: 1 !important;\n transition-duration: 0.001ms !important;\n }\n\n .is-loading .field-progress {\n left: 0;\n width: 100%;\n }\n}\n",[],[168,232],"3cef9601-5fd7-415d-9b6f-7bb126fb5442","index.js","b8e328a8-89d4-11f1-9340-1607ee4eb77e",["D",1787607349389],"const form = document.getElementById(\"lookup\");\nconst input = document.getElementById(\"domain\");\nconst button = document.getElementById(\"search\");\nconst result = document.getElementById(\"result\");\n\n/** Rises with each search so a slow answer can't overwrite a newer one. */\nlet searchToken = 0;\n\nform.addEventListener(\"submit\", (event) => {\n event.preventDefault();\n search(input.value);\n});\n\n// Let a shared URL open straight onto its answer. Runs last so the state it\n// touches is initialized: this fires during module evaluation, not on a later\n// user gesture like the submit above.\nconst initial = new URLSearchParams(location.search).get(\"q\");\nif (initial) {\n input.value = initial;\n search(initial);\n} else {\n input.focus();\n}\n\nasync function search(query) {\n const domain = query.trim();\n if (!domain) {\n input.focus();\n return;\n }\n\n const token = ++searchToken;\n setLoading(true);\n history.replaceState(null, \"\", `?q=${encodeURIComponent(domain)}`);\n\n try {\n const data = await lookup(domain);\n if (token !== searchToken) return;\n\n const card = render(data);\n // \"No registry record\" isn't yet an answer to \"can I have it?\" — reserved\n // and registry-held names read exactly the same way. The card stays\n // unstamped until Porkbun has been asked, so the page never prints a\n // verdict it is about to take back.\n if (data.status === \"available\") await settleVerdict(data, card, token);\n } finally {\n if (token === searchToken) setLoading(false);\n }\n}\n\nasync function lookup(domain) {\n try {\n const res = await fetch(`/api/lookup?domain=${encodeURIComponent(domain)}`);\n if (!res.ok) throw new Error(`lookup failed: ${res.status}`);\n return await res.json();\n } catch {\n return {\n query: domain,\n domain,\n status: \"error\",\n message: \"The lookup service didn't answer. Check your connection and search again.\",\n };\n }\n}\n\nfunction setLoading(loading) {\n form.classList.toggle(\"is-loading\", loading);\n button.disabled = loading;\n button.textContent = loading ? \"Checking…\" : \"Search\";\n}\n\nfunction render(data) {\n const card = document.createElement(\"article\");\n card.className = \"card\";\n card.innerHTML = data.status === \"registered\"\n ? registeredCard(data)\n : data.status === \"available\"\n ? availableCard(data)\n : messageCard(data);\n result.replaceChildren(card);\n // Every verdict but \"available\" is already final, so its price button can go\n // up now; the others get theirs once Porkbun has settled the stamp.\n if (data.status !== \"available\") mountPricing(card, data, null);\n return card;\n}\n\nfunction registeredCard(data) {\n const r = data.record ?? {};\n const rows = [\n row(\"Registrar\", r.registrar ? withAside(r.registrar, r.registrarIanaId && `IANA ${r.registrarIanaId}`) : null),\n row(\"Registered\", dateCell(r.registered)),\n row(\"Expires\", dateCell(r.expires)),\n row(\"Updated\", dateCell(r.updated)),\n row(\"Status\", r.statuses?.length ? stack(r.statuses) : null),\n row(\"Name servers\", r.nameservers?.length ? stack(r.nameservers) : null),\n row(\"DNSSEC\", r.dnssec === undefined ? null : r.dnssec ? \"Signed\" : \"Unsigned\"),\n ].join(\"\");\n\n return `\n ${head(data, stamp(\"taken\", \"Registered\"))}\n

${esc(data.domain)} is in the .${esc(data.tld)} registry.

${rows}\n ${note(data)}\n ${pricingSlot(data)}\n ${source(data)}\n `;\n}\n\n/**\n * Deliberately unstamped and non-committal. All the registry has said is that\n * it holds no record, which is true of names nobody can buy, so the card shows\n * what is known and names the question it is still waiting on.\n */\nfunction availableCard(data) {\n return `\n ${head(data)}\n

\n The .${esc(data.tld)} registry holds no record for ${esc(data.domain)}.\n Asking Porkbun whether it's actually for sale…\n

\n ${note(data)}\n ${pricingSlot(data)}\n ${source(data)}\n `;\n}\n\nfunction messageCard(data) {\n const titles = {\n invalid: \"Not a domain name\",\n unsupported: `.${data.tld} isn't reachable by RDAP`,\n error: \"No answer from the registry\",\n };\n const extra = data.status === \"unsupported\"\n ? `

ICANN's own lookup tool covers some registries that don't publish RDAP.

`\n : \"\";\n\n return `\n

${data.status === \"invalid\" ? \"Check the spelling\" : \"Can't check\"}

${esc(titles[data.status] ?? \"Lookup failed\")}

${esc(data.message ?? \"\")}

\n ${extra}\n ${pricingSlot(data)}\n ${source(data)}\n `;\n}\n\nfunction head(data, mark = \"\") {\n const idn = data.unicodeName && data.unicodeName !== data.domain\n ? `

${esc(data.unicodeName)}

`\n : \"\";\n\n return `\n

Registry record

${esc(data.domain)}

\n ${idn}\n

\n ${mark}\n

\n `;\n}\n\n/** The stamp is the verdict, so it is only ever pressed onto a settled one. */\nfunction stamp(tone, label) {\n return `

${esc(label)}

`;\n}\n\nfunction row(label, value) {\n if (!value) return \"\";\n return `

${esc(label)}

${value}

`;\n}\n\nfunction withAside(value, aside) {\n return aside ? `${esc(value)} ${esc(aside)}` : esc(value);\n}\n\nfunction stack(values) {\n return values.map((v) => `${esc(v)}`).join(\"\");\n}\n\nfunction dateCell(iso) {\n if (!iso) return null;\n const date = new Date(iso);\n if (Number.isNaN(date.getTime())) return esc(iso);\n return withAside(date.toISOString().slice(0, 10), relative(date));\n}\n\n/** \"3 years ago\" / \"in 2 months\", for judging how settled a registration is. */\nfunction relative(date) {\n const days = Math.round((date.getTime() - Date.now()) / 86_400_000);\n const fmt = new Intl.RelativeTimeFormat(\"en\", { numeric: \"auto\" });\n if (Math.abs(days) >= 365) return fmt.format(Math.round(days / 365.25), \"year\");\n if (Math.abs(days) >= 31) return fmt.format(Math.round(days / 30.44), \"month\");\n return fmt.format(days, \"day\");\n}\n\nfunction note(data) {\n return data.note ? `

${esc(data.note)}

` : \"\";\n}\n\n/**\n * Ask Porkbun whether it will sell this exact name, and only then say a word\n * about it. RDAP's 404 and a name that is reserved, blocked, or held back by\n * the registry are the same 404; the registrar is the only one who can tell\n * them apart. An unanswered check leaves the registry's own hedged reading\n * standing — silence is never allowed to read as a confirmation.\n */\nasync function settleVerdict(data, card, token) {\n let availability;\n try {\n const res = await fetch(`/api/availability?domain=${encodeURIComponent(data.domain)}`);\n if (res.ok) ({ availability } = await res.json());\n } catch {\n // Unknown, which is what an absent availability already means.\n }\n\n if (token !== searchToken) return; // a newer search owns the page now\n\n const held = availability && !availability.registrable;\n card.querySelector(\".card-head\")?.insertAdjacentHTML(\n \"beforeend\",\n held ? stamp(\"held\", \"Withheld\") : stamp(\"free\", \"Available\"),\n );\n\n const verdict = card.querySelector(\"[data-verdict]\");\n if (verdict) verdict.innerHTML = verdictText(data, availability);\n\n mountPricing(card, data, availability);\n}\n\nfunction verdictText(data, a) {\n const record =\n `The .${esc(data.tld)} registry holds no record for ${esc(data.domain)}`;\n\n // Porkbun didn't answer. Claim no more than the registry itself said, which\n // is exactly what this page claimed before it ever asked.\n if (!a) {\n return `${record}.\n A registrar should be able to sell it — reserved and premium names are the exception.`;\n }\n\n if (!a.registrable) {\n return `${record}, but Porkbun won't sell it. Names that are reserved, blocked, or held back\n by the registry look unregistered over RDAP — this one isn't yours to take.`;\n }\n\n if (a.premium) {\n // The one case where \"available\" on its own misleads about the cost, so the\n // number belongs in the verdict rather than behind the price button.\n const quote = typeof a.price === \"number\"\n ? `quoted at ${money(a.price)}, not the .${esc(data.tld)} list price`\n : `quoted per name rather than off the .${esc(data.tld)} list`;\n return `${record}, and Porkbun will sell it as a premium name — ${quote}.`;\n }\n\n return `${record}, and Porkbun confirms it will sell this exact name.`;\n}\n\n/**\n * The price list is its own slow question: Porkbun rebuilds the whole 900-TLD\n * table per request and can take twenty seconds cold. Most visitors came for\n * the verdict, so the price waits behind a button they can ignore.\n */\nfunction pricingSlot(data) {\n return data.tld ? `` : \"\";\n}\n\nfunction mountPricing(card, data, availability) {\n const slot = card.querySelector(\"[data-pricing]\");\n if (!slot) return;\n\n slot.innerHTML = `\n

Retail price

\n \n `;\n slot.hidden = false;\n slot.querySelector(\"button\").addEventListener(\n \"click\",\n (event) => loadPricing(slot, event.currentTarget, data, availability),\n );\n}\n\n/**\n * Nothing guards against a stale response here: the slot belongs to one card,\n * and a newer search has already replaced that card, so a late answer writes\n * into a node nobody is looking at.\n */\nasync function loadPricing(slot, button, data, availability) {\n button.disabled = true;\n button.textContent = \"Asking Porkbun…\";\n\n let pricing;\n try {\n const res = await fetch(`/api/pricing?domain=${encodeURIComponent(data.domain || data.query)}`);\n if (!res.ok) throw new Error(`pricing failed: ${res.status}`);\n ({ pricing } = await res.json());\n } catch {\n // They asked for this one, so leave them a way to ask again.\n button.disabled = false;\n button.textContent = \"No answer — ask again\";\n return;\n }\n\n slot.innerHTML = pricingPanel(pricing, availability) || `\n

Retail price

Porkbun doesn't sell .${esc(data.tld)} names.

\n `;\n}\n\n/** What the name costs, kept visibly apart from the registry's own record. */\nfunction pricingPanel(p, availability) {\n const rows = p\n ? [\n row(\"First year\", money(p.registration)),\n row(\"Renewal\", money(p.renewal, \"/yr\")),\n row(\"Transfer in\", money(p.transfer)),\n ].join(\"\")\n : \"\";\n const foot = availabilityFoot(availability, Boolean(rows));\n if (!rows && !foot) return \"\";\n\n const head = p\n ? `Porkbun\n list price · .${esc(p.suffix)} · ${esc(p.currency)}`\n : `Porkbun`;\n\n return `\n

${head}

\n ${rows ? `

${rows}` : \"\"}\n ${foot ?? `

Premium and reserved names are quoted individually.

`}\n `;\n}\n\n/**\n * Porkbun's per-name answer, which is the only thing here that knows about this\n * name rather than about its suffix. Null when the check didn't run, leaving the\n * generic caveat in place — silence never gets reported as a confirmation.\n */\nfunction availabilityFoot(a, hasListPrice) {\n if (!a) return null;\n\n if (!a.registrable) {\n // Only point at the list price when there is one to point at.\n return hasListPrice\n ? `

Porkbun won't sell this name. The prices above are\n what the suffix costs, not what this name costs.

`\n : `

Porkbun won't sell this name.

`;\n }\n\n if (typeof a.price !== \"number\") {\n return `

Porkbun confirms this exact name is registrable.

`;\n }\n\n const minimum = a.minDuration ? `, ${a.minDuration}-year minimum` : \"\";\n if (a.premium) {\n return `

Porkbun quotes ${money(a.price)} for this\n exact name — a premium registration, priced apart from the list${esc(minimum)}.

`;\n }\n\n const then = a.firstYearPromo && typeof a.regularPrice === \"number\"\n ? ` for the first year, then ${money(a.regularPrice)}`\n : \"\";\n return `

Porkbun confirms this exact name is registrable at\n ${money(a.price)}${then}${esc(minimum)}.

`;\n}\n\nfunction money(amount, per = \"\") {\n if (typeof amount !== \"number\") return null;\n // Free is a real price here — some registries don't charge to transfer in.\n if (amount === 0) return \"Free\";\n // Premium names reach four and five figures, where an ungrouped number is\n // genuinely hard to read at a glance.\n const digits = { minimumFractionDigits: 2, maximumFractionDigits: 2 };\n return esc(`$${amount.toLocaleString(\"en-US\", digits)}${per}`);\n}\n\nfunction source(data) {\n if (!data.source) return \"\";\n const at = data.answeredAt ? ` · ${data.answeredAt.slice(11, 19)} UTC` : \"\";\n return `

Answered by ${esc(data.source)}${esc(at)}

`;\n}\n\nfunction esc(value) {\n return String(value).replace(\n /[&<>\"']/g,\n (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c]),\n );\n}\n",[],[168,240],"e89ccef8-720b-46fa-bcbd-d438fbd0e858","index.html","b8d5c3c0-89d4-11f1-96e4-1607ee4eb77e",32,["D",1787604523827],"\n\n \n \n \n WHOIS Lookup\n \n \n \n \n \n \n \n \n \n \n

WHOIS Lookup

\n\n \n\n

\n\n \n \n\n",[],[168,247],["D",1785168214803],[193,194,195],[168],"62a20e79-1d40-4355-836c-5dc3f1dc3c54","rdap.ts","b8d99310-89d4-11f1-aa02-1607ee4eb77e",10,["D",1785168215079],"import type { DomainRecord, LookupResult } from \"../shared/types.ts\";\n\n/** ICANN/IANA's authoritative map of TLD -> RDAP service. */\nconst BOOTSTRAP_URL = \"https://data.iana.org/rdap/dns.json\";\nconst BOOTSTRAP_TTL_MS = 12 * 60 * 60 * 1000;\nconst REQUEST_TIMEOUT_MS = 10_000;\n\n/**\n * Registries that run RDAP but that IANA's bootstrap file doesn't list.\n * Each entry was checked against a known-registered name in that exact TLD.\n * Never point a TLD at a service that isn't authoritative for it: a foreign\n * RDAP service answers 404, and 404 is how we read \"available\".\n */\nconst SUPPLEMENTAL_SERVICES: Record = {\n ac: \"https://rdap.identitydigital.services/rdap/\",\n de: \"https://rdap.denic.de/\",\n io: \"https://rdap.identitydigital.services/rdap/\",\n sh: \"https://rdap.identitydigital.services/rdap/\",\n};\n\ninterface BootstrapFile {\n publication: string;\n services: [string[], string[]][];\n}\n\nlet bootstrapCache: { fetchedAt: number; map: Map } | null = null;\n\nasync function getServiceMap(): Promise> {\n if (bootstrapCache && Date.now() - bootstrapCache.fetchedAt < BOOTSTRAP_TTL_MS) {\n return bootstrapCache.map;\n }\n\n const res = await fetch(BOOTSTRAP_URL, {\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n if (!res.ok) throw new Error(`IANA bootstrap returned ${res.status}`);\n const bootstrap = (await res.json()) as BootstrapFile;\n\n const map = new Map();\n for (const [tlds, urls] of bootstrap.services) {\n const base = urls.find((u) => u.startsWith(\"https://\")) ?? urls[0];\n if (!base) continue;\n for (const tld of tlds) map.set(tld.toLowerCase(), base);\n }\n for (const [tld, base] of Object.entries(SUPPLEMENTAL_SERVICES)) {\n if (!map.has(tld)) map.set(tld, base);\n }\n\n bootstrapCache = { fetchedAt: Date.now(), map };\n return map;\n}\n\ninterface NormalizedDomain {\n domain: string;\n unicodeName?: string;\n tld: string;\n labelCount: number;\n}\n\n/**\n * Reduce whatever was typed to an ASCII (punycoded) domain name. Accepts pasted\n * URLs and IDNs; drops a leading \"www.\" since it is never registrable itself.\n */\nexport function normalizeDomain(input: string): NormalizedDomain | { error: string } {\n const raw = input.trim().replace(/^[a-z][a-z0-9+.-]*:\\/\\//i, \"\").split(/[/?#]/)[0]\n .replace(/\\.$/, \"\");\n if (!raw) return { error: \"Enter a domain name to look up.\" };\n\n let hostname: string;\n try {\n hostname = new URL(`http://${raw}`).hostname;\n } catch {\n return { error: `\"${input.trim()}\" isn't a domain name.` };\n }\n\n const domain = hostname.replace(/^www\\./, \"\");\n const labels = domain.split(\".\");\n if (labels.length < 2) {\n return { error: `Add a top-level domain — try \"${domain}.com\".` };\n }\n if (domain.length > 253 || labels.some((l) => !/^[a-z0-9-]{1,63}$/.test(l))) {\n return { error: `\"${input.trim()}\" isn't a domain name.` };\n }\n\n // URL() punycodes IDNs one way only, so keep what was typed as the unicode form.\n const typed = raw.toLowerCase().replace(/^www\\./, \"\");\n const unicodeName = domain.includes(\"xn--\") && typed !== domain ? typed : undefined;\n return { domain, unicodeName, tld: labels[labels.length - 1], labelCount: labels.length };\n}\n\nexport async function lookupDomain(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) {\n return { query, domain: \"\", tld: \"\", status: \"invalid\", message: normalized.error };\n }\n\n const { domain, unicodeName, tld, labelCount } = normalized;\n const base = { query, domain, unicodeName, tld };\n\n const services = await getServiceMap();\n const service = services.get(tld);\n if (!service) {\n return {\n ...base,\n status: \"unsupported\",\n message:\n `IANA publishes no RDAP service for .${tld}, so the registry can't be asked directly.`,\n };\n }\n\n const url = `${service.replace(/\\/?$/, \"/\")}domain/${encodeURIComponent(domain)}`;\n const source = new URL(url).hostname;\n const answeredAt = new Date().toISOString();\n\n let res: Response;\n try {\n res = await fetch(url, {\n headers: { accept: \"application/rdap+json, application/json\" },\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n } catch (err) {\n // A registry that is slow or down is a normal outcome here, not a bug to\n // surface as a 500 — the visitor needs to know who failed to answer.\n const reason = err instanceof DOMException && err.name === \"TimeoutError\"\n ? `${source} took longer than ${REQUEST_TIMEOUT_MS / 1000} seconds to answer.`\n : `${source} couldn't be reached.`;\n return { ...base, status: \"error\", source, message: reason };\n }\n\n if (res.status === 404) {\n return {\n ...base,\n status: \"available\",\n source,\n answeredAt,\n note: labelCount > 2\n ? `${domain} has ${labelCount} labels. If it's a subdomain, look up the name it sits under instead.`\n : undefined,\n };\n }\n\n if (res.status === 429) {\n return {\n ...base,\n status: \"error\",\n source,\n message: `${source} is rate-limiting lookups. Wait a moment and search again.`,\n };\n }\n\n if (!res.ok) {\n return {\n ...base,\n status: \"error\",\n source,\n message: `${source} answered ${res.status} ${res.statusText}.`.trim(),\n };\n }\n\n const data = await res.json();\n if (data?.errorCode === 404) {\n return { ...base, status: \"available\", source, answeredAt };\n }\n\n return {\n ...base,\n domain: typeof data?.ldhName === \"string\" ? data.ldhName.toLowerCase() : domain,\n unicodeName: typeof data?.unicodeName === \"string\" ? data.unicodeName : unicodeName,\n status: \"registered\",\n source,\n answeredAt,\n record: parseRecord(data),\n };\n}\n\nfunction parseRecord(data: any): DomainRecord {\n const registrar = (data?.entities ?? []).find((e: any) => e?.roles?.includes(\"registrar\"));\n\n return {\n registrar: vcardValue(registrar?.vcardArray, \"fn\"),\n registrarIanaId: (registrar?.publicIds ?? []).find((id: any) =>\n id?.type === \"IANA Registrar ID\"\n )?.identifier,\n registered: eventDate(data, \"registration\"),\n expires: eventDate(data, \"expiration\"),\n updated: eventDate(data, \"last changed\"),\n statuses: (data?.status ?? []).filter((s: unknown) => typeof s === \"string\"),\n nameservers: (data?.nameservers ?? [])\n .map((ns: any) => typeof ns?.ldhName === \"string\" ? ns.ldhName.toLowerCase() : null)\n .filter(Boolean),\n dnssec: data?.secureDNS?.delegationSigned ?? undefined,\n };\n}\n\nfunction eventDate(data: any, action: string): string | undefined {\n const event = (data?.events ?? []).find((e: any) => e?.eventAction === action);\n return typeof event?.eventDate === \"string\" ? event.eventDate : undefined;\n}\n\n/** vCard entries are [\"fn\", {}, \"text\", \"Registrar Name\"] tuples. */\nfunction vcardValue(vcardArray: any, field: string): string | undefined {\n const entry = (vcardArray?.[1] ?? []).find((e: any) => e?.[0] === field);\n const value = entry?.[3];\n return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n}\n",[],[173,258],"d6be8105-2462-431d-9e07-55d091f81db8","porkbun.ts","5303dab6-9ff8-11f1-8157-1607ee4eb77e",29,["D",1787603564724],"import type {\n AvailabilityResult,\n DomainAvailability,\n DomainPricing,\n PricingResult,\n} from \"../shared/types.ts\";\nimport { normalizeDomain } from \"./rdap.ts\";\n\n/**\n * Porkbun publishes its whole retail price list unauthenticated, so a lookup\n * can carry a price without asking anyone for an API key. These are list\n * prices for ordinary names: premium and reserved names are quoted per-domain\n * and only Porkbun's authenticated checkDomain endpoint knows those.\n */\nconst PRICING_URL = \"https://api.porkbun.com/api/json/v3/pricing/get\";\nconst PRICING_TTL_MS = 6 * 60 * 60 * 1000;\n/** Per-name availability, unlike the list above, needs credentials. */\nconst CHECK_URL = \"https://api.porkbun.com/api/json/v3/domain/checkDomain/\";\nconst CHECK_TTL_MS = 10 * 60 * 1000;\n/** Tighter than it looks: the page holds its verdict until this answers, so\n * every second here is a second the visitor stares at an unfinished card.\n * Porkbun normally answers in about a second; past ten it isn't going to. */\nconst CHECK_TIMEOUT_MS = 10_000;\n/** Porkbun's documented default is one check per 10 seconds per account, and it\n * is billed against the account rather than the caller, so a burst of visitors\n * shares one budget. Assume the default until a response tells us otherwise. */\nconst DEFAULT_CHECK_WINDOW_MS = 10_000;\n/** Generous on purpose: Porkbun builds the whole 900-TLD list per request and\n * measures 15-20 seconds cold. Only the request that misses the cache waits. */\nconst REQUEST_TIMEOUT_MS = 30_000;\n\ninterface PricingResponse {\n status: string;\n pricing: Record;\n}\n\nlet cache: { fetchedAt: number; prices: Map } | null = null;\nlet inflight: Promise> | null = null;\n\nfunction getPrices(): Promise> {\n if (cache && Date.now() - cache.fetchedAt < PRICING_TTL_MS) return Promise.resolve(cache.prices);\n // That 15-20 second fetch is long enough that several visitors can pile up\n // behind it. They should share one request, not start their own.\n inflight ??= fetchPrices().finally(() => inflight = null);\n return inflight;\n}\n\nasync function fetchPrices(): Promise> {\n const res = await fetch(PRICING_URL, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`Porkbun pricing returned ${res.status}`);\n const body = (await res.json()) as PricingResponse;\n if (body?.status !== \"SUCCESS\") throw new Error(`Porkbun pricing returned ${body?.status}`);\n\n const prices = new Map();\n for (const [rawSuffix, entry] of Object.entries(body.pricing ?? {})) {\n // Handshake names resolve outside ICANN DNS, so their prices describe\n // something this site can't look up in a registry.\n if (entry?.specialType === \"handshake\") continue;\n\n const suffix = rawSuffix.toLowerCase();\n const registration = amount(entry?.registration);\n const renewal = amount(entry?.renewal);\n const transfer = amount(entry?.transfer);\n if (registration === undefined && renewal === undefined) continue;\n\n prices.set(suffix, { suffix, registration, renewal, transfer, currency: \"USD\" });\n }\n\n cache = { fetchedAt: Date.now(), prices };\n return prices;\n}\n\nfunction amount(value: unknown): number | undefined {\n if (typeof value !== \"string\" || !value.trim()) return undefined;\n const price = Number(value);\n return Number.isFinite(price) ? price : undefined;\n}\n\ninterface CheckResponse {\n status: string;\n message?: string;\n code?: string;\n ttlRemaining?: number;\n response?: {\n avail?: string;\n price?: string;\n regularPrice?: string;\n firstYearPromo?: string;\n premium?: string;\n minDuration?: number;\n };\n limits?: { TTL?: number; limit?: number; used?: number };\n}\n\nconst checkCache = new Map();\nconst checkInflight = new Map>();\n/** Closed until this moment to stay inside Porkbun's per-account check budget. */\nlet checkGateUntil = 0;\n\n/** Absent credentials disable the check rather than failing the request: the\n * registry answer is the product, and this only annotates it. */\nfunction credentials(): { apikey: string; secretapikey: string } | null {\n const apikey = readEnv(\"PORKBUN_API_KEY\");\n const secretapikey = readEnv(\"PORKBUN_SECRET_API_KEY\");\n return apikey && secretapikey ? { apikey, secretapikey } : null;\n}\n\nfunction readEnv(name: string): string | undefined {\n try {\n return Deno.env.get(name) || undefined;\n } catch {\n return undefined; // no env access in this runtime\n }\n}\n\n/**\n * Ask Porkbun whether it will actually sell this exact name.\n *\n * Returns undefined for every \"we don't know\" case — no credentials, gate\n * closed, timeout, error, or an `avail` we don't recognise. Undefined must stay\n * indistinguishable from \"not asked\", because the caller renders a contradiction\n * of the registry's verdict and may only do that on an explicit answer.\n */\nexport async function checkAvailability(domain: string): Promise {\n const auth = credentials();\n if (!auth) return undefined;\n\n const cached = checkCache.get(domain);\n if (cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) return cached.availability;\n\n const pending = checkInflight.get(domain);\n if (pending) return pending;\n\n // One check per window across the whole account, so a name that misses the\n // cache while the gate is shut goes unanswered rather than queueing up behind\n // it. The page is holding a verdict open on this: better to hand back the\n // registry's own hedged answer now than the confirmed one ten seconds late.\n if (Date.now() < checkGateUntil) return undefined;\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS; // shut it before awaiting\n\n const request = runCheck(domain, auth).finally(() => checkInflight.delete(domain));\n checkInflight.set(domain, request);\n return request;\n}\n\nasync function runCheck(\n domain: string,\n auth: { apikey: string; secretapikey: string },\n): Promise {\n let body: CheckResponse;\n try {\n const res = await fetch(`${CHECK_URL}${encodeURIComponent(domain)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(auth),\n signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),\n });\n // Porkbun reports a tripped rate limit as both 429 and a 200 whose status is\n // ERROR, so the body is what decides — but a 429 carries no useful body.\n if (res.status === 429) {\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS;\n return undefined;\n }\n body = (await res.json()) as CheckResponse;\n } catch {\n return undefined;\n }\n\n // A window we were told about beats the assumed default.\n const windowMs = (body.limits?.TTL ?? body.ttlRemaining ?? 0) * 1000;\n if (windowMs > 0) checkGateUntil = Date.now() + windowMs;\n\n const avail = body.response?.avail;\n if (body.status !== \"SUCCESS\" || (avail !== \"yes\" && avail !== \"no\")) return undefined;\n\n const availability: DomainAvailability = {\n registrable: avail === \"yes\",\n premium: body.response?.premium === \"yes\",\n price: amount(body.response?.price),\n regularPrice: amount(body.response?.regularPrice),\n firstYearPromo: body.response?.firstYearPromo === \"yes\",\n minDuration: typeof body.response?.minDuration === \"number\" && body.response.minDuration > 1\n ? body.response.minDuration\n : undefined,\n checkedAt: new Date().toISOString(),\n };\n\n checkCache.set(domain, { checkedAt: Date.now(), availability });\n return availability;\n}\n\n/**\n * Ask Porkbun about one specific name. Deliberately separate from the pricing\n * lookup below: this one answers in about a second and the page waits on it\n * before it will call a name available, while the price list can take twenty\n * seconds to build and nothing waits on it.\n */\nexport async function lookupAvailability(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n return { domain, availability: await checkAvailability(domain) };\n}\n\n/**\n * Price the name the visitor typed. Porkbun sells some ccTLDs at the second\n * level — `co.uk` is its own line item, priced apart from `uk` — so match the\n * longest suffix of the name that it actually lists.\n */\nexport async function lookupPricing(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n\n // A price is a garnish on the registry answer. If Porkbun is down or slow,\n // the visitor still keeps the thing they came for.\n const prices = await getPrices().catch(() => null);\n return { domain, pricing: prices ? matchSuffix(domain, prices) : undefined };\n}\n\nfunction matchSuffix(domain: string, prices: Map): DomainPricing | undefined {\n const labels = domain.split(\".\");\n for (let i = 1; i < labels.length; i++) {\n const pricing = prices.get(labels.slice(i).join(\".\"));\n if (pricing) return pricing;\n }\n return undefined;\n}\n",[],[173,266],"163aa5f4-c617-4f00-bba3-c0982dde2551","files.ts","b8cc58f8-89d4-11f1-9e1f-1607ee4eb77e",8,["D",1785168215152],"import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n\n/**\n * Val Town's file helpers resolve project files through the esm.town URL of the\n * running val, which doesn't exist when the same code runs from disk. These\n * wrappers keep `deno run` working for local preview; on Val Town they hand off\n * to the standard helpers untouched.\n */\n\nconst CONTENT_TYPES: Record = {\n css: \"text/css; charset=utf-8\",\n html: \"text/html; charset=utf-8\",\n js: \"text/javascript; charset=utf-8\",\n json: \"application/json; charset=utf-8\",\n svg: \"image/svg+xml\",\n};\n\nconst isLocal = (metaUrl: string) => metaUrl.startsWith(\"file://\");\n\nexport function readProjectFile(path: string, metaUrl: string): Promise {\n if (!isLocal(metaUrl)) return readFile(path, metaUrl);\n return Deno.readTextFile(new URL(`.${path}`, metaUrl));\n}\n\nexport async function serveProjectFile(path: string, metaUrl: string): Promise {\n if (!isLocal(metaUrl)) return serveFile(path, metaUrl);\n\n const body = await Deno.readTextFile(new URL(`.${path}`, metaUrl)).catch(() => null);\n if (body === null) return new Response(\"Not found\", { status: 404 });\n\n const extension = path.split(\".\").pop() ?? \"\";\n return new Response(body, {\n headers: { \"content-type\": CONTENT_TYPES[extension] ?? \"text/plain; charset=utf-8\" },\n });\n}\n",[],[173,274],["D",1785168214649],[189,190,191],[173],["D",1785166232232],{"_16":17,"_83":79},{"_16":17,"_77":-5,"_78":79,"_33":34,"_80":81,"_82":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_103":321,"_322":323,"_324":325,"_326":26,"_327":26,"_328":26,"_329":38,"_330":-5,"_331":-7,"_332":-7,"_333":136,"_334":26,"_335":26,"_336":-5,"_337":26,"_338":26,"_339":26,"_340":-5},"ENV",{"_292":293,"_294":295,"_296":67,"_297":298,"_299":300,"_301":302,"_303":304,"_305":306,"_307":308,"_309":310,"_311":312,"_313":314,"_315":316,"_317":318,"_319":320},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]