@dakaio/domainscout-mcp 0.0.0-stage → 1.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dakaio.com
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,262 @@
-# Temporary Holding Version
+# DomainScout
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Domain research for AI agents.** Every good .com is taken. Find the ones that aren't.
+
+[![Add to Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/install-mcp?name=domainscout&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIkBkYWthaW8vZG9tYWluc2NvdXQtbWNwIl19)
+[![Install in VS Code](https://img.shields.io/badge/VS_Code-Install_DomainScout-0098FF?logo=visualstudiocode&logoColor=white)](https://vscode.dev/redirect/mcp/install?name=domainscout&config=%7B%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22%40dakaio%2Fdomainscout-mcp%22%5D%7D)
+[![Add to Claude Desktop](https://img.shields.io/badge/Claude_Desktop-Add_DomainScout-D97757?logo=claude&logoColor=white)](https://github.com/JohnDaka/domainscout-mcp/releases/latest/download/domainscout.mcpb)
+[![npm](https://img.shields.io/npm/v/@dakaio/domainscout-mcp)](https://www.npmjs.com/package/@dakaio/domainscout-mcp)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
+
+![DomainScout in an AI assistant: 500 brainstormed names checked in one call, the free .com domains with their prices](assets/domainscout-bulk.png)
+
+DomainScout is an MCP server for bulk domain search. Your AI assistant brainstorms hundreds of
+names, and DomainScout checks all of them in one call: which are free, what they cost and where
+to buy them. It runs on your own machine. You need no account and no server of ours, and API keys
+are optional.
+
+[Website](https://domainscout.dakaio.com) ·
+[npm](https://www.npmjs.com/package/@dakaio/domainscout-mcp) ·
+[MCP Registry](https://registry.modelcontextprotocol.io/v0.1/servers?search=com.dakaio/domainscout) ·
+[Examples](examples/README.md)
+
+## What it does
+
+- **Finds the free names in a long list.** Hundreds of names in one call; 500 .com names take
+  about 20 seconds.
+- **Checks for real.** DNS first, then the registry itself over RDAP, or WHOIS where a TLD has no
+  RDAP. A bought but unused domain is still reported as taken.
+- **Compares prices at nine registrars:** Cloudflare, Porkbun, Namecheap, Spaceship, GoDaddy,
+  Name.com, Dynadot, NameSilo and Hover. The first year, the renewal and any minimum term, cheapest
+  to own first.
+- **Spots the traps.** Premium and reserved names (with a registrar API key), and taken names that
+  are being deleted and may become available soon.
+- **Any TLD.** `.com`, `.net` and `.ai` by default; ask for any other.
+
+DomainScout does not invent names: your assistant does that, and DomainScout tells it which of
+them are really free.
+
+## Install
+
+Node 20 or newer.
+
+**Claude Desktop:** one click: [download the extension](https://github.com/JohnDaka/domainscout-mcp/releases/latest/download/domainscout.mcpb)
+and open it. Claude Desktop asks to install it, and lets you set the options below.
+
+**Claude Code**
+
+```bash
+claude mcp add domainscout -- npx -y @dakaio/domainscout-mcp
+```
+
+**Cursor and VS Code:** use the buttons at the top, or add the server to the MCP config.
+
+**Any MCP client:** add to the MCP config:
+
+```json
+{
+  "mcpServers": {
+    "domainscout": {
+      "command": "npx",
+      "args": ["-y", "@dakaio/domainscout-mcp"],
+      "env": { "DOMAINSCOUT_TLDS": "com,net,ai,io" }
+    }
+  }
+}
+```
+
+On Windows, if `npx` is not found, use `"command": "cmd"` with
+`"args": ["/c", "npx", "-y", "@dakaio/domainscout-mcp"]`.
+
+Then just ask: *"Brainstorm 200 names for my coffee subscription app and tell me which .com
+domains are free."*
+
+**From source:** `npm install && npm run build`, then run `node /path/to/domainscout-mcp/dist/index.js`
+in place of `npx -y @dakaio/domainscout-mcp`.
+
+## Tools
+
+### `check_domains`
+
+Checks whether domain names are free to register, and shows prices and where to buy the free
+ones. Read-only: it never registers or changes anything.
+
+| Parameter | Type | Default | What it is |
+|---|---|---|---|
+| `domains` | string[] (1 to 1,000 entries) | required | Names or domains: `acme`, `acme.io`, `https://acme.dev`. A name without a TLD is tried in every TLD from `tlds` |
+| `tlds` | string[] | `DOMAINSCOUT_TLDS` (`com,net,ai`) | TLDs for names given without one, e.g. `["com"]` for a long list |
+| `confirm` | boolean | `true` | Confirm free-looking names with registrar APIs, when you set keys |
+| `details` | boolean | `false` | Include the evidence from every source (DNS, RDAP, WHOIS, registrar API) |
+
+It returns a short text report for the model and the same data as structured content: a summary
+with counts per status, one result per domain (status, note, registration dates, buy links with
+prices), skipped entries and warnings.
+
+| Status | Meaning |
+|---|---|
+| `available` | A registrar API confirmed it can be registered; `premium` says whether it costs extra |
+| `likely_available` | Not in the registry or DNS, not confirmed by a registrar |
+| `taken` | Registered |
+| `reserved` | Blocked by the registry, or the registrar cannot sell it |
+| `unknown` | Could not verify right now (timeout, rate limit); try again |
+
+## Example
+
+You ask your assistant *"I'm naming a note-taking app. Brainstorm 500 names and tell me which .com
+domains are free."* The assistant calls `check_domains` once with all 500 names and gets back:
+
+```text
+Checked 500 domain(s) in 23.0s: 27 available, 473 taken.
+
+AVAILABLE (cheapest known offer for each):
+- quillloom.com: $10.46/yr at Cloudflare https://www.cloudflare.com/domains/search/?q=quillloom.com
+- scribeloom.com: $10.46/yr at Cloudflare https://www.cloudflare.com/domains/search/?q=scribeloom.com
+- scribebloom.com: $10.46/yr at Cloudflare https://www.cloudflare.com/domains/search/?q=scribebloom.com
+...
+TAKEN: quillwise.com, quillnest.com, quillflow.com, quillhub.com, quillpad.com, quillbox.com,
+  quillbase.com, quillkit.com, ...
+```
+
+Ask about a few favourites afterwards and each one gets every registrar's link and price. More
+real output, including the command line and JSON: [examples](examples/README.md).
+
+## How it checks
+
+For each domain, in parallel and within polite rate limits:
+
+1. **DNS.** If the TLD zone delegates the name, it is taken. This step is free and saves the
+   registries' rate limits.
+2. **The registry over RDAP**, the authoritative source. If the domain is found, it is taken;
+   the result includes expiry, and a note when the domain is being deleted and may become
+   available soon. A 404 means it is likely available.
+3. **WHOIS**, only for TLDs without RDAP (for example `.io` and `.de`) or when RDAP fails.
+4. **Your registrar API, optional.** If you set an API key, the registrar confirms that each
+   free-looking name can really be bought, flags premium names and gives the exact price.
+
+Having no DNS never proves a domain is free: a bought but unused domain has no DNS either.
+Without a registrar API key, "not in the registry" is reported as `likely_available`. Premium
+and registry-reserved names look the same there, so the registrar's page has the final price.
+
+## Authentication
+
+None. DomainScout works without an account or API keys. Registrar API keys are optional: with
+one, free-looking names are confirmed by the registrar, premium names are flagged and the exact
+price is shown. One key is enough. With several, the APIs are asked in this order, each name only
+until one answers.
+
+| Registrar | Variables | Where to get it |
+|---|---|---|
+| Name.com | `DOMAINSCOUT_NAMECOM_USERNAME`, `DOMAINSCOUT_NAMECOM_TOKEN` | Account Settings → Security → API Tokens |
+| Cloudflare | `DOMAINSCOUT_CLOUDFLARE_ACCOUNT_ID`, `DOMAINSCOUT_CLOUDFLARE_API_TOKEN` | API token with Registrar permission. The Registrar API is in beta |
+| Spaceship | `DOMAINSCOUT_SPACESHIP_API_KEY`, `DOMAINSCOUT_SPACESHIP_API_SECRET` | API Manager; the key needs the `domains:read` scope |
+| Porkbun | `DOMAINSCOUT_PORKBUN_API_KEY`, `DOMAINSCOUT_PORKBUN_SECRET_KEY` | porkbun.com/account/api |
+
+Each key is sent only to its own registrar's API, and it never appears in output, logs or error
+messages. If a registrar rejects a key, the result says so in its notes, and the check still
+works without that registrar.
+
+## Settings
+
+Set these as environment variables in the MCP config. All are optional.
+
+| Variable | Default | What it does |
+|---|---|---|
+| `DOMAINSCOUT_TLDS` | `com,net,ai` | TLDs tried for names given without one |
+| `DOMAINSCOUT_REGISTRARS` | all | Registrars to show buy links for, e.g. `cloudflare,porkbun,namecheap` |
+| `DOMAINSCOUT_MAX_CONCURRENCY` | `10` | Network requests in flight at once |
+| `DOMAINSCOUT_PER_HOST_CONCURRENCY` | `2` | Requests in flight to one RDAP server |
+| `DOMAINSCOUT_TIMEOUT_MS` | `10000` | Timeout of one request |
+| `DOMAINSCOUT_MAX_DOMAINS` | `500` | Domains per call, after adding TLDs |
+| `DOMAINSCOUT_CONFIRM_MAX` | `50` | Free domains per call confirmed through your registrar API |
+| `DOMAINSCOUT_DNS` | `on` | DNS pre-check |
+| `DOMAINSCOUT_DNS_SERVERS` | system | DNS servers to use, comma-separated |
+| `DOMAINSCOUT_PRICES` | `on` | Public price lists |
+| `DOMAINSCOUT_AFFILIATE` | `on` | Affiliate buy links (`off` gives plain links) |
+
+## Rate limits
+
+- **Per call:** up to 500 domains after adding TLDs (`DOMAINSCOUT_MAX_DOMAINS`, at most 10,000)
+  and 1,000 input entries.
+- **Registries:** each RDAP server gets at most 2 requests in flight and 5 per second; each WHOIS
+  server one query at a time, at most one per second. A server that answers "too many requests"
+  is left alone for as long as it asks, and the request is retried.
+- **Registrar APIs:** every API gets its documented limit (Name.com 10 requests per second,
+  Cloudflare 4, Spaceship 30 per 30 seconds, Porkbun 8 batches per minute), and at most
+  `DOMAINSCOUT_CONFIRM_MAX` names per call are confirmed. Porkbun throttles an account to 50 names
+  per 5 minutes for a day once it has checked about 1,800 names in 3 hours while registering few
+  of them; the limit keeps every call well below that. A tool call can pass `confirm: false` to
+  skip confirmation for a large list.
+
+## Pricing
+
+DomainScout is free and open source under the MIT license. There is no account, subscription or
+usage fee. The prices it shows are the registrars' own standard prices, from public price lists,
+or the exact price from your registrar API.
+
+## Privacy
+
+Your queries go straight from your machine to:
+
+- your DNS resolver,
+- the registries (RDAP/WHOIS),
+- two public price lists: the Porkbun price API, and cfdomainpricing.com, a community mirror
+  of Cloudflare's prices,
+- the APIs of registrars whose keys you set.
+
+`DOMAINSCOUT_PRICES=off` turns the price lists off. Nothing goes to a server of this project,
+because there is none.
+
+## Affiliate links
+
+Some buy links may be affiliate links. When they are, the result says so, and buying through
+them earns the project a commission at no extra cost to you. Links are always ordered by price
+and never by commission. `DOMAINSCOUT_AFFILIATE=off` turns them off.
+
+## Security
+
+The tool is read-only, runs on your machine, and sends each API key only to its own registrar.
+To report a vulnerability, see [SECURITY.md](SECURITY.md).
+
+## Support
+
+- Questions, bugs and ideas: [GitHub issues](https://github.com/JohnDaka/domainscout-mcp/issues)
+- Website: [domainscout.dakaio.com](https://domainscout.dakaio.com)
+
+## Command line
+
+```bash
+npx @dakaio/domainscout-mcp check acme getacme.io --tlds com,dev
+npx @dakaio/domainscout-mcp check acme --json --no-confirm
+npx @dakaio/domainscout-mcp check $(cat names.txt) --tlds com
+```
+
+## Development
+
+```bash
+npm run verify     # typecheck + lint (Biome) + tests with coverage thresholds
+npm run build
+```
+
+| Path | What it is |
+|---|---|
+| `src/core/` | The checking funnel, input parsing, shared types, network limits and retries |
+| `src/checkers/` | DNS, RDAP and WHOIS lookups |
+| `src/confirm/` | Confirmation through registrar APIs, one class per registrar |
+| `src/pricing/`, `src/registrars/` | Public price lists, buy links and affiliate templates |
+| `src/report/`, `src/messages/` | The text report and every text shown to people or to the model |
+| `src/scout/`, `src/server/`, `src/cli/` | The check as a whole, the MCP server and the command line |
+| `test/` | Vitest tests; the network is faked, except for a local WHOIS server |
+| `examples/` | Real output of the tool |
+| `site/` | The landing page at domainscout.dakaio.com: static HTML, released by a `landing-v<version>` tag (`npm --prefix site run release`) |
+| `server.json`, `manifest.json`, `glama.json` | Listings: the MCP Registry, the Claude Desktop extension, Glama |
+
+Releases: raise the version in a pull request with `npm run bump patch` (or `minor`, or an exact
+version such as `npm run bump 1.2.0`); it updates `package.json`, `package-lock.json`,
+`manifest.json` and `server.json` together. Then run `npm run release` on the merged `main`. It pushes the tag `v<version>`, and
+`.github/workflows/publish.yml` publishes to npm (trusted publishing), creates a GitHub Release
+with the Claude Desktop extension and publishes to the MCP Registry. The landing page goes out the
+same way: `npm run bump:site patch` in a pull request, then `npm --prefix site run release`.
+
+## License
+
+MIT © [dakaio.com](https://dakaio.com)

package/dist/checkers/dns.js

@@ -0,0 +1,58 @@
+import { randomBytes } from 'node:crypto';
+import { NODATA, NOTFOUND } from 'node:dns';
+import { Resolver } from 'node:dns/promises';
+import { DNS_MAX_TIMEOUT_MS, DNS_TRIES, WILDCARD_PROBE_BYTES, WILDCARD_PROBE_ENCODING, } from '../constants.js';
+import { joinLabels } from '../core/domain-name.js';
+import { PromiseCache } from '../core/promise-cache.js';
+import { DnsState } from '../core/types.js';
+/** DNS error codes that are answers, not failures. */
+const ANSWER_CODES = new Map()
+    // The name does not exist in the zone.
+    .set(NOTFOUND, DnsState.NxDomain)
+    // The name exists but has no NS records.
+    .set(NODATA, DnsState.NoData);
+/** NS lookups through the system resolver, or the DNS servers the user configured. */
+export class DnsChecker {
+    resolver;
+    /** Whether each TLD is a wildcard TLD; asked once per TLD. */
+    wildcards = new PromiseCache();
+    constructor(servers, timeoutMs) {
+        this.resolver = new Resolver({
+            timeout: Math.min(timeoutMs, DNS_MAX_TIMEOUT_MS),
+            tries: DNS_TRIES,
+        });
+        if (servers.length > 0)
+            this.resolver.setServers(servers);
+    }
+    /** Asks for the domain's nameservers: only a registered domain can be delegated in the TLD zone. */
+    async lookupNs(domain) {
+        const started = Date.now();
+        try {
+            const nameservers = await this.resolver.resolveNs(domain);
+            const state = nameservers.length > 0 ? DnsState.Delegated : DnsState.NoData;
+            return { state, nameservers, ms: Date.now() - started };
+        }
+        catch (error) {
+            return this.failedLookup(error, Date.now() - started);
+        }
+    }
+    /** A few TLDs answer for any name (wildcard); for them a DNS answer proves nothing. */
+    hasWildcard(tld) {
+        return this.wildcards.get(tld, () => this.probeWildcard(tld));
+    }
+    /** Looks up a random name that nobody has registered: a delegation means the TLD answers for anything. */
+    async probeWildcard(tld) {
+        const probe = randomBytes(WILDCARD_PROBE_BYTES).toString(WILDCARD_PROBE_ENCODING);
+        const lookup = await this.lookupNs(joinLabels(probe, tld));
+        return lookup.state === DnsState.Delegated;
+    }
+    /** "Does not exist" and "no NS records" are answers; anything else is a failure. */
+    failedLookup(error, ms) {
+        const code = error.code;
+        const state = code === undefined ? undefined : ANSWER_CODES.get(code);
+        if (state)
+            return { state, ms };
+        return { state: DnsState.Error, error: code ?? String(error), ms };
+    }
+}
+//# sourceMappingURL=dns.js.map

package/dist/checkers/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../../src/checkers/dns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAkB,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5D,sDAAsD;AACtD,MAAM,YAAY,GAAkC,IAAI,GAAG,EAAoB;IAC7E,uCAAuC;KACtC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,yCAAyC;KACxC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAEhC,sFAAsF;AACtF,MAAM,OAAO,UAAU;IACJ,QAAQ,CAAW;IACpC,8DAA8D;IAC7C,SAAS,GAAG,IAAI,YAAY,EAAmB,CAAC;IAEjE,YAAY,OAA0B,EAAE,SAAiB;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC;YAChD,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,WAAW,CAAC,GAAW;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,0GAA0G;IAClG,KAAK,CAAC,aAAa,CAAC,GAAW;QACrC,MAAM,KAAK,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,SAAS,CAAC;IAC7C,CAAC;IAED,oFAAoF;IAC5E,YAAY,CAAC,KAAc,EAAE,EAAU;QAC7C,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;CACF"}

package/dist/checkers/rdap-bootstrap.js

@@ -0,0 +1,55 @@
+import { HTTPS_PROTOCOL, LABEL_SEPARATOR, RDAP_BOOTSTRAP_TTL_MS, RDAP_BOOTSTRAP_URL, Retry, } from '../constants.js';
+import { ensureOk } from '../core/http.js';
+import { PromiseCache } from '../core/promise-cache.js';
+import { withRetry } from '../core/retry.js';
+/** Base URLs must end with a slash, so relative paths resolve below them. */
+const PATH_SEPARATOR = '/';
+/** IANA's list of RDAP servers (RFC 9224), loaded on first use and reused for a day. */
+export class RdapBootstrap {
+    network;
+    /** The loaded list. Shared by all lookups, so it never uses a caller's cancel signal. */
+    list = new PromiseCache(RDAP_BOOTSTRAP_TTL_MS);
+    constructor(network) {
+        this.network = network;
+    }
+    /** The RDAP base URL for a TLD, longest match first: "co.uk" tries "co.uk", then "uk". Undefined: no RDAP. */
+    async serverFor(tld) {
+        const servers = await this.list.get(RDAP_BOOTSTRAP_URL, () => this.load());
+        const match = this.suffixes(tld).find((suffix) => servers.has(suffix));
+        return match === undefined ? undefined : servers.get(match);
+    }
+    /** "co.uk" -> ["co.uk", "uk"] */
+    suffixes(tld) {
+        const labels = tld.split(LABEL_SEPARATOR);
+        return labels.map((_label, start) => labels.slice(start).join(LABEL_SEPARATOR));
+    }
+    load() {
+        return withRetry(() => this.network.run(() => this.fetchList()), Retry.bootstrap);
+    }
+    async fetchList() {
+        const url = new URL(RDAP_BOOTSTRAP_URL);
+        const response = await this.network.request(url);
+        await ensureOk(response, url);
+        const file = (await response.json());
+        return this.toServerList(file);
+    }
+    toServerList(file) {
+        const servers = new Map();
+        for (const [tlds, urls] of file.services ?? []) {
+            const base = this.preferredUrl(urls);
+            if (!base)
+                continue;
+            for (const tld of tlds)
+                servers.set(tld.toLowerCase(), base);
+        }
+        return servers;
+    }
+    /** The first https URL (or the first URL), ending with a slash. */
+    preferredUrl(urls) {
+        const url = urls.find((candidate) => new URL(candidate).protocol === HTTPS_PROTOCOL) ?? urls[0];
+        if (!url)
+            return undefined;
+        return url.endsWith(PATH_SEPARATOR) ? url : `${url}${PATH_SEPARATOR}`;
+    }
+}
+//# sourceMappingURL=rdap-bootstrap.js.map

package/dist/checkers/rdap-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rdap-bootstrap.js","sourceRoot":"","sources":["../../src/checkers/rdap-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,GACN,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAU7C,6EAA6E;AAC7E,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,wFAAwF;AACxF,MAAM,OAAO,aAAa;IAIK,OAAO;IAHpC,yFAAyF;IACxE,IAAI,GAAG,IAAI,YAAY,CAAqB,qBAAqB,CAAC,CAAC;IAEpF,YAA6B,OAAgB;uBAAhB,OAAO;IAAY,CAAC;IAEjD,8GAA8G;IAC9G,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,iCAAiC;IACzB,QAAQ,CAAC,GAAW;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAClF,CAAC;IAEO,IAAI;QACV,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,IAAmB;QACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mEAAmE;IAC3D,YAAY,CAAC,IAAuB;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,cAAc,EAAE,CAAC;IACxE,CAAC;CACF"}

package/dist/checkers/rdap.js

@@ -0,0 +1,75 @@
+import { Header, HttpStatus, RDAP_ACCEPT, RDAP_DOMAIN_PATH, RdapEvent, Retry, } from '../constants.js';
+import { errorMessage } from '../core/errors.js';
+import { discardBody, retryableError } from '../core/http.js';
+import { isRetryableStatus } from '../core/http-status.js';
+import { withRetry } from '../core/retry.js';
+import { LookupState } from '../core/types.js';
+import { becauseOf, ErrorText, httpStatusText } from '../messages/index.js';
+import { RdapBootstrap } from './rdap-bootstrap.js';
+/** Headers of every RDAP request. */
+const RDAP_HEADERS = { [Header.Accept]: RDAP_ACCEPT };
+/** The registry's own answer about a domain, over RDAP (RFC 9082/9083). */
+export class RdapChecker {
+    network;
+    bootstrap;
+    constructor(network, bootstrap = new RdapBootstrap(network)) {
+        this.network = network;
+        this.bootstrap = bootstrap;
+    }
+    async lookup(domain, tld, signal) {
+        let base;
+        try {
+            base = await this.bootstrap.serverFor(tld);
+        }
+        catch (error) {
+            const message = becauseOf(ErrorText.RdapListUnavailable, errorMessage(error));
+            return { state: LookupState.Error, error: message, ms: 0 };
+        }
+        if (!base)
+            return { state: LookupState.Unsupported };
+        return this.ask(new URL(`${RDAP_DOMAIN_PATH}${domain}`, base), signal);
+    }
+    /** Asks the server within its limits; rate limits, server errors and timeouts are retried. */
+    async ask(url, signal) {
+        const started = Date.now();
+        const send = () => this.fetchOnce(url, started, signal);
+        try {
+            const queued = () => this.network.viaQueues(this.network.rdapHosts, url.host, send, signal);
+            return await withRetry(queued, { ...Retry.rdap, signal });
+        }
+        catch (error) {
+            const ms = Date.now() - started;
+            return { state: LookupState.Error, server: url.host, error: errorMessage(error), ms };
+        }
+    }
+    /** 404 means not registered, 200 registered; 429 and 5xx throw to be retried. */
+    async fetchOnce(url, started, signal) {
+        const response = await this.network.request(url, { headers: RDAP_HEADERS }, signal);
+        const server = url.host;
+        const ms = Date.now() - started;
+        if (!response.ok)
+            await discardBody(response);
+        if (response.status === HttpStatus.NotFound)
+            return { state: LookupState.NotFound, server, ms };
+        if (isRetryableStatus(response.status))
+            throw retryableError(response, url);
+        if (!response.ok) {
+            return { state: LookupState.Error, server, error: httpStatusText(response.status), ms };
+        }
+        return this.registered((await response.json()), server, ms);
+    }
+    registered(data, server, ms) {
+        return {
+            state: LookupState.Registered,
+            server,
+            statuses: data.status ?? [],
+            created: this.eventDate(data, RdapEvent.Registration),
+            expires: this.eventDate(data, RdapEvent.Expiration),
+            ms,
+        };
+    }
+    eventDate(data, action) {
+        return data.events?.find((event) => event.eventAction === action)?.eventDate;
+    }
+}
+//# sourceMappingURL=rdap.js.map

package/dist/checkers/rdap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rdap.js","sourceRoot":"","sources":["../../src/checkers/rdap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,KAAK,GACN,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,qCAAqC;AACrC,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,OAAO,WAAW;IAEH,OAAO;IACP,SAAS;IAF5B,YACmB,OAAgB,EAChB,SAAS,GAAkB,IAAI,aAAa,CAAC,OAAO,CAAC;uBADrD,OAAO;yBACP,SAAS;IACzB,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,GAAW,EAAE,MAAoB;QAC5D,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,mBAAmB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,gBAAgB,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,8FAA8F;IACtF,KAAK,CAAC,GAAG,CAAC,GAAQ,EAAE,MAAoB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5F,OAAO,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAChC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,OAAe,EAAE,MAAoB;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAe,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAEO,UAAU,CAAC,IAAgB,EAAE,MAAc,EAAE,EAAU;QAC7D,OAAO;YACL,KAAK,EAAE,WAAW,CAAC,UAAU;YAC7B,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC;YACrD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;YACnD,EAAE;SACH,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,IAAgB,EAAE,MAAc;QAChD,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE,SAAS,CAAC;IAC/E,CAAC;CACF"}

package/dist/checkers/whois-client.js

@@ -0,0 +1,45 @@
+import { createConnection } from 'node:net';
+import { WHOIS_ENCODING, WHOIS_LINE_END, WHOIS_MAX_REPLY_BYTES, WHOIS_PORT } from '../constants.js';
+import { errorMessage, RetryableError } from '../core/errors.js';
+import { withTimeout } from '../core/signals.js';
+import { atHost, ErrorText } from '../messages/index.js';
+/**
+ * Sends one query to a WHOIS server over TCP (RFC 3912) and returns the whole reply.
+ * Timeouts and network errors become RetryableError; a cancel by the caller does not.
+ */
+export async function whoisQuery(server, query, timeoutMs, signal, port = WHOIS_PORT) {
+    if (signal?.aborted)
+        throw new Error(ErrorText.Cancelled);
+    const deadline = withTimeout(timeoutMs, signal);
+    const socket = createConnection({ host: server, port, signal: deadline });
+    socket.write(`${query}${WHOIS_LINE_END}`);
+    try {
+        return await readReply(socket);
+    }
+    catch (error) {
+        throw queryError(error, server, deadline, signal);
+    }
+    finally {
+        socket.destroy();
+    }
+}
+/** Reads until the server closes the connection, keeping at most WHOIS_MAX_REPLY_BYTES. */
+async function readReply(socket) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of socket) {
+        size += chunk.length;
+        if (size > WHOIS_MAX_REPLY_BYTES)
+            break;
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString(WHOIS_ENCODING);
+}
+/** A cancel stays a plain error; a timeout or a network error is worth another try. */
+function queryError(error, server, deadline, signal) {
+    if (signal?.aborted)
+        return new Error(ErrorText.Cancelled);
+    const reason = deadline.aborted ? ErrorText.TimedOut : errorMessage(error);
+    return new RetryableError(atHost(server, reason));
+}
+//# sourceMappingURL=whois-client.js.map

package/dist/checkers/whois-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whois-client.js","sourceRoot":"","sources":["../../src/checkers/whois-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAUzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,KAAa,EACb,SAAiB,EACjB,MAAoB,EACpB,IAAI,GAAW,UAAU;IAEzB,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,cAAc,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,SAAS,CAAC,MAAc;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,qBAAqB;YAAE,MAAM;QACxC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AACxD,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU,CACjB,KAAc,EACd,MAAc,EACd,QAAqB,EACrB,MAAoB;IAEpB,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3E,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC"}