@gusnips/one-click-dns 0.0.0-stage → 0.1.1

package/dist/index.cjs

@@ -0,0 +1,745 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  DNS_HOSTS: () => DNS_HOSTS,
+  DNS_HOST_IDS: () => DNS_HOST_IDS,
+  cnameTemplate: () => cnameTemplate,
+  detectDnsHosts: () => detectDnsHosts,
+  dkimTemplate: () => dkimTemplate,
+  dmarcTemplate: () => dmarcTemplate,
+  dnsRecordRow: () => dnsRecordRow,
+  mxTemplate: () => mxTemplate,
+  normalizeDnsName: () => normalizeDnsName,
+  recordNameInZone: () => recordNameInZone,
+  relativeName: () => relativeName,
+  spfTemplate: () => spfTemplate,
+  templateFileName: () => templateFileName,
+  trapOf: () => trapOf,
+  verificationTemplate: () => verificationTemplate
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/dns-name.ts
+function normalizeDnsName(name) {
+  return name.trim().toLowerCase().replace(/\.$/, "");
+}
+
+// src/hosts.ts
+var DNS_HOST_IDS = [
+  "cloudflare",
+  "godaddy",
+  "namecheap",
+  "namecheap-hosting",
+  "squarespace",
+  "route53",
+  "google-cloud-dns",
+  "azure-dns",
+  "ionos",
+  "hostinger",
+  "porkbun",
+  "name-com",
+  "dynadot",
+  "namesilo",
+  "gandi",
+  "ovhcloud",
+  "digitalocean",
+  "hetzner",
+  "vercel",
+  "netlify",
+  "wix",
+  "wordpress-com",
+  "cpanel",
+  "bluehost",
+  "hostgator",
+  "hostgator-br",
+  "siteground",
+  "registro-br",
+  "locaweb",
+  "kinghost",
+  "uol-host",
+  "umbler",
+  "dnsimple"
+];
+var NO_FIELDS = { name: null, value: null };
+var SHORT = { kind: "shortName" };
+var TRAILING_DOT = { kind: "trailingDot" };
+var QUOTED_TXT = { kind: "quotedTxt" };
+var CPANEL_EDITOR = {
+  link: null,
+  open: "Zone Editor",
+  add: "Add Record",
+  save: "Save Record",
+  cname: { name: "Name", value: "Record" },
+  txt: { name: "Name", value: "Record" },
+  root: null,
+  traps: []
+};
+var DNS_HOSTS = {
+  cloudflare: {
+    name: "Cloudflare",
+    // Documented: <name>.ns.cloudflare.com, and <color>.foundationdns.{com,net,org}.
+    ns: [/^[a-z0-9-]+\.ns\.cloudflare\.com$/, /^[a-z0-9-]+\.foundationdns\.(com|net|org)$/],
+    link: "https://dash.cloudflare.com/?to=/:account/:zone/dns/records",
+    open: "DNS Records",
+    add: "Add record",
+    save: "Save",
+    cname: { name: "Name", value: "Target" },
+    // The dashboard's label for a TXT value is not on a docs page.
+    txt: { name: "Name", value: null },
+    root: "@",
+    traps: [{ kind: "proxyOff", field: "Proxy status", value: "DNS only" }, SHORT]
+  },
+  godaddy: {
+    name: "GoDaddy",
+    // Observed: ns<NN>.domaincontrol.com (GoDaddy's docs show only ns1).
+    ns: [/^ns\d{1,2}\.domaincontrol\.com$/],
+    link: null,
+    open: "DNS",
+    add: "Add New Record",
+    save: "Save",
+    cname: { name: "Name", value: "Value" },
+    txt: { name: "Name", value: "Value" },
+    root: "@",
+    traps: [SHORT]
+  },
+  namecheap: {
+    name: "Namecheap",
+    // Documented: dns1/2.registrar-servers.com (BasicDNS), pdns1/2 (PremiumDNS),
+    // freedns1-5 (FreeDNS).
+    ns: [/^(dns|pdns|freedns)\d\.registrar-servers\.com$/],
+    link: null,
+    open: "Advanced DNS",
+    add: "Add New Record",
+    save: "Save All Changes",
+    cname: { name: "Host", value: "Value" },
+    txt: { name: "Host", value: "Value" },
+    root: "@",
+    traps: [SHORT]
+  },
+  "namecheap-hosting": {
+    name: "Namecheap hosting",
+    // Documented: dns1/2.namecheaphosting.com. The records live in cPanel, not Advanced DNS.
+    ns: [/^dns\d\.namecheaphosting\.com$/],
+    ...CPANEL_EDITOR
+  },
+  squarespace: {
+    name: "Squarespace",
+    ns: [
+      // Documented: Google Cloud DNS nameservers "ending in squarespacedns.com".
+      /^[a-z0-9-]+\.squarespacedns\.com$/,
+      // Observed, listed so that these names read as ambiguous (domains moved from Google
+      // Domains sit on Google's names; older Squarespace domains on NS1's).
+      /^ns-cloud-[a-z]\d\.googledomains\.com$/,
+      /^dns\d\.p\d{2}\.nsone\.net$/
+    ],
+    link: null,
+    open: "DNS Settings",
+    add: "Add record",
+    save: "Save",
+    cname: { name: "Name", value: "Data" },
+    txt: { name: "Name", value: "Text" },
+    root: "@",
+    traps: [SHORT]
+  },
+  route53: {
+    name: "Amazon Route 53",
+    // Documented: ns-<n>.awsdns-<nn>.{com,net,org,co.uk}.
+    ns: [/^ns-\d+\.awsdns-\d+\.(com|net|org|co\.uk)$/],
+    link: "https://console.aws.amazon.com/route53/v2/hostedzones",
+    open: "Hosted zones",
+    add: "Create record",
+    save: "Create records",
+    cname: { name: "Record name", value: "Value" },
+    txt: { name: "Record name", value: "Value" },
+    // "don't enter a value (for example, an @ symbol) in the Name field".
+    root: "",
+    traps: [SHORT, QUOTED_TXT]
+  },
+  "google-cloud-dns": {
+    name: "Google Cloud DNS",
+    // Documented: ns-cloud-<a-d><1-4>.googledomains.com. Squarespace domains moved from
+    // Google Domains use the same names, so a set of them is ambiguous.
+    ns: [/^ns-cloud-[a-z]\d\.googledomains\.com$/],
+    link: null,
+    open: null,
+    add: "Add standard",
+    save: "Create",
+    cname: { name: "DNS name", value: null },
+    txt: { name: "DNS name", value: null },
+    // "To create a resource record at the domain apex, leave the DNS name field blank."
+    root: "",
+    traps: [SHORT]
+  },
+  "azure-dns": {
+    name: "Azure DNS",
+    // Documented: ns<1-4>-<nn>.azure-dns.{com,net,org,info}.
+    ns: [/^ns\d-\d+\.azure-dns\.(com|net|org|info)$/],
+    link: null,
+    open: "Record sets",
+    add: "Add",
+    save: "Add",
+    cname: { name: "Name", value: null },
+    txt: { name: "Name", value: null },
+    root: "@",
+    traps: [SHORT]
+  },
+  ionos: {
+    name: "IONOS",
+    // Documented: ns1<ZZZ>.ui-dns.{de,biz,org,com}, ZZZ from 016 to 126.
+    ns: [/^ns1\d{3}\.ui-dns\.(de|biz|org|com)$/],
+    link: null,
+    open: "DNS",
+    add: "Add Record",
+    save: "Save",
+    // The two articles spell the name box differently.
+    cname: { name: "Hostname", value: "Point to" },
+    txt: { name: "Host name", value: "Value" },
+    root: "@",
+    traps: [SHORT]
+  },
+  hostinger: {
+    name: "Hostinger",
+    // No pattern: ns1/2.dns-parking.com is a search snippet, never confirmed on a page of
+    // theirs. The picker reaches Hostinger.
+    ns: [],
+    link: null,
+    open: "DNS Zone Editor",
+    add: null,
+    save: "Add Record",
+    cname: { name: "Name", value: "Points to" },
+    txt: { name: "Name", value: "TXT value" },
+    root: "@",
+    traps: [SHORT, { kind: "oneSpf" }]
+  },
+  porkbun: {
+    name: "Porkbun",
+    // Documented: <city>.ns.porkbun.com.
+    ns: [/^[a-z]+\.ns\.porkbun\.com$/],
+    link: null,
+    open: "DNS",
+    add: "Add Record",
+    save: "Add",
+    cname: { name: "Host", value: "Answer" },
+    txt: { name: "Host", value: "Answer" },
+    // "If you're adding DNS records to your root domain, you will leave this field blank."
+    root: "",
+    traps: [SHORT]
+  },
+  "name-com": {
+    name: "Name.com",
+    // Observed: ns1<abc>.name.com to ns4<abc>.name.com.
+    ns: [/^ns[1-4][a-z]{3}\.name\.com$/],
+    link: null,
+    open: "Manage DNS Records",
+    add: null,
+    save: "Add Record",
+    cname: { name: "Host", value: "Answer" },
+    txt: { name: "Host", value: "Answer" },
+    root: null,
+    traps: [SHORT]
+  },
+  dynadot: {
+    name: "Dynadot",
+    // A Dynadot staff answer on its forum: ns1/2.dyna-ns.net.
+    ns: [/^ns\d\.dyna-ns\.net$/],
+    link: null,
+    open: "DNS Settings",
+    add: null,
+    save: "Save Settings",
+    cname: { name: "Subdomain Record", value: "IP Address or Target Host" },
+    txt: NO_FIELDS,
+    // The zone's own name goes in a separate "Domain Record" section, never as "@".
+    root: null,
+    traps: [SHORT]
+  },
+  namesilo: {
+    name: "NameSilo",
+    // Documented: ns1-3.dnsowl.com.
+    ns: [/^ns\d\.dnsowl\.com$/],
+    link: null,
+    open: null,
+    add: null,
+    save: "Submit",
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    // "You can leave the hostname blank ... If you do enter an "@", we will convert that".
+    root: "",
+    traps: []
+  },
+  gandi: {
+    name: "Gandi",
+    // Observed: ns-<n>-<a|b|c>.gandi.net.
+    ns: [/^ns-\d+-[abc]\.gandi\.net$/],
+    link: null,
+    open: "DNS Records",
+    add: "Add",
+    save: null,
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    root: null,
+    traps: [SHORT]
+  },
+  ovhcloud: {
+    name: "OVHcloud",
+    // Documented: (ns|dns)<nn or nnn>.ovh.net, and (ns|dns)200.anycast.me.
+    ns: [/^(ns|dns)\d{2,3}\.ovh\.net$/, /^(ns|dns)200\.anycast\.me$/],
+    link: null,
+    open: "DNS zone",
+    add: "Add an entry",
+    save: null,
+    cname: { name: "Subdomain", value: "Target" },
+    txt: { name: "Subdomain", value: "Target" },
+    root: null,
+    traps: [SHORT, TRAILING_DOT]
+  },
+  digitalocean: {
+    name: "DigitalOcean",
+    // Documented: ns1-3.digitalocean.com.
+    ns: [/^ns[1-3]\.digitalocean\.com$/],
+    link: null,
+    open: "Domains",
+    add: "Create a record",
+    save: "Create Record",
+    cname: { name: "Hostname", value: "Is an alias of" },
+    txt: { name: "Hostname", value: "TXT Value" },
+    root: "@",
+    traps: [SHORT, TRAILING_DOT]
+  },
+  hetzner: {
+    name: "Hetzner",
+    ns: [
+      // Documented: the primary, secondary (still used by older zones) and konsoleH names.
+      /^(hydrogen|oxygen|helium)\.ns\.hetzner\.(com|de)$/,
+      /^[a-z0-9]+\.first-ns\.de$/,
+      /^[a-z0-9]+\.second-ns\.(de|com)$/,
+      /^ns1\.your-server\.de$/
+    ],
+    link: null,
+    open: "DNS",
+    add: null,
+    save: "Add",
+    cname: { name: "Name", value: "Alias / Value" },
+    txt: { name: "Name", value: null },
+    root: "@",
+    traps: [SHORT, TRAILING_DOT, QUOTED_TXT]
+  },
+  vercel: {
+    name: "Vercel",
+    // Documented: ns1-4.vercel-dns.com (the "alternates" are not named).
+    ns: [/^ns[1-4]\.vercel-dns\.com$/],
+    link: "https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fdomains",
+    open: "Domains",
+    add: null,
+    save: "Add",
+    cname: { name: "Name", value: "Value" },
+    txt: { name: "Name", value: "Value" },
+    // "Leave Name blank for the root domain."
+    root: "",
+    traps: [SHORT]
+  },
+  netlify: {
+    name: "Netlify",
+    // Documented: "a format similar to dns1.p01.nsone.net". NS1's names are shared with
+    // older Squarespace zones, so a set of them is ambiguous.
+    ns: [/^dns\d\.p\d{2}\.nsone\.net$/],
+    link: null,
+    open: "DNS",
+    add: "Add new record",
+    save: "Save",
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    root: null,
+    traps: []
+  },
+  wix: {
+    name: "Wix",
+    // Observed: ns<n>.wixdns.net. A domain "connected to Wix via pointing" keeps its old
+    // name servers, so it never matches here.
+    ns: [/^ns\d+\.wixdns\.net$/],
+    link: null,
+    open: "Manage DNS Records",
+    add: "Add Record",
+    save: "Save",
+    cname: { name: "Host Name", value: "Value" },
+    txt: { name: "Host Name", value: "Value" },
+    // "Leave this field blank if you were instructed to add an @ sign."
+    root: "",
+    traps: []
+  },
+  "wordpress-com": {
+    name: "WordPress.com",
+    // Documented: ns1-3.wordpress.com.
+    ns: [/^ns[1-3]\.wordpress\.com$/],
+    link: "https://wordpress.com/domains/",
+    open: "DNS records",
+    add: "Add record",
+    save: null,
+    cname: { name: "Name (host)", value: "Alias of (points to)" },
+    txt: { name: "Name", value: "Text" },
+    root: "@",
+    // The Name box takes the label or the whole name, and ignores quotes around a TXT value.
+    traps: []
+  },
+  cpanel: {
+    // Hosting companies run their own name servers, so there is no pattern: the picker
+    // reaches it.
+    name: "cPanel",
+    ns: [],
+    ...CPANEL_EDITOR
+  },
+  bluehost: {
+    name: "Bluehost",
+    // Documented: ns1/2.bluehost.com. Its help is behind a captcha and the menu path was
+    // read from a 2024 archive, so no label is quoted.
+    ns: [/^ns[12]\.bluehost\.com$/],
+    link: null,
+    open: null,
+    add: null,
+    save: null,
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    root: null,
+    traps: []
+  },
+  hostgator: {
+    name: "HostGator",
+    // Documented: hgns1/2.hostgator.com for new customers, ns<NNNN>.hostgator.com before
+    // November 2023.
+    ns: [/^hgns\d\.hostgator\.com$/, /^ns\d{4}\.hostgator\.com$/],
+    link: null,
+    open: "DNS",
+    add: "+ ADD RECORD",
+    save: "ADD",
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    root: null,
+    traps: []
+  },
+  "hostgator-br": {
+    name: "HostGator Brasil",
+    // Documented: dns3/4.hostgator.com.br for a registered domain with no plan yet. A plan's
+    // names come in its activation email and are not on a page.
+    ns: [/^dns[34]\.hostgator\.com\.br$/],
+    link: null,
+    open: "Editar Zona Avan\xE7ada de DNS",
+    add: "Adicionar registro",
+    save: "Adicionar",
+    // The value box's name changes with the type ("O nome é alterado conforme o Tipo").
+    cname: { name: "Nome", value: null },
+    txt: { name: "Nome", value: null },
+    root: null,
+    traps: []
+  },
+  siteground: {
+    name: "SiteGround",
+    // Documented: ns1/2.siteground.net.
+    ns: [/^ns[12]\.siteground\.net$/],
+    link: null,
+    open: "DNS Zone Editor",
+    add: null,
+    save: "Create",
+    cname: { name: "Name", value: null },
+    txt: { name: "Name", value: null },
+    root: null,
+    traps: [SHORT]
+  },
+  "registro-br": {
+    name: "Registro.br",
+    // Observed: a.auto.dns.br and b.auto.dns.br.
+    ns: [/^[ab]\.auto\.dns\.br$/],
+    link: null,
+    open: "CONFIGURAR ZONA DNS",
+    add: null,
+    save: null,
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    root: null,
+    traps: [{ kind: "advancedMode", mode: "Modo Avan\xE7ado" }]
+  },
+  locaweb: {
+    name: "Locaweb",
+    // Documented: ns1-3.locaweb.com.br.
+    ns: [/^ns[1-3]\.locaweb\.com\.br$/],
+    link: null,
+    open: "Editar zona DNS",
+    add: "Adicionar entrada",
+    save: null,
+    cname: { name: "Entrada", value: "Conte\xFAdo" },
+    txt: { name: "Entrada", value: "Conte\xFAdo" },
+    // "o campo Entrada é preenchido por padrão com apenas um ponto (.)".
+    root: ".",
+    traps: []
+  },
+  kinghost: {
+    name: "KingHost",
+    // Documented: dns1-6.kinghost.com.br.
+    ns: [/^dns[1-6]\.kinghost\.com\.br$/],
+    link: null,
+    open: "Gerenciar DNS",
+    add: "+ ADICIONAR DNS",
+    save: "ADICIONAR DNS",
+    // The form is a screenshot, so the case of "host" and "destino" is unconfirmed.
+    cname: NO_FIELDS,
+    txt: NO_FIELDS,
+    root: "@",
+    traps: [{ kind: "secondSave", button: "SALVAR ALTERA\xC7\xD5ES" }]
+  },
+  "uol-host": {
+    name: "UOL Host",
+    // Documented: ns1-3.dominios.uol.com.br.
+    ns: [/^ns[1-3]\.dominios\.uol\.com\.br$/],
+    link: null,
+    open: "Administrar DNS",
+    add: "Criar nova entrada",
+    save: "Salvar entrada",
+    cname: { name: "Entrada", value: "Destino" },
+    txt: { name: "Entrada", value: "Valor" },
+    root: "",
+    traps: []
+  },
+  umbler: {
+    name: "Umbler",
+    // Documented: ns<NNN>.umbler.{com,in,com.br,co.uk}.
+    ns: [/^ns\d{3}\.umbler\.(com|in|com\.br|co\.uk)$/],
+    link: null,
+    open: "Editor de DNS",
+    add: "Adicionar",
+    save: "Salvar",
+    cname: { name: "Nome", value: "Endere\xE7o" },
+    txt: { name: "Nome", value: "Dados" },
+    root: "@",
+    traps: [SHORT]
+  },
+  dnsimple: {
+    name: "DNSimple",
+    // Documented: ns1-4.dnsimple-edge.{com,net,io,org}, and the legacy ns1-4.dnsimple.com.
+    ns: [/^ns[1-4]\.dnsimple-edge\.(com|net|io|org)$/, /^ns[1-4]\.dnsimple\.com$/],
+    link: null,
+    open: "Record editor",
+    add: "Add record",
+    save: "Add Record",
+    cname: { name: "Name", value: "Content" },
+    txt: { name: "Name", value: "Content" },
+    root: "",
+    traps: [SHORT]
+  }
+};
+function trapOf(host, kind) {
+  return host.traps.find((trap) => trap.kind === kind);
+}
+function detectDnsHosts(nameservers) {
+  const names = nameservers.map(normalizeDnsName).filter(Boolean);
+  if (!names.length) return [];
+  return DNS_HOST_IDS.filter(
+    (id) => names.every((name) => DNS_HOSTS[id].ns.some((pattern) => pattern.test(name)))
+  );
+}
+
+// src/records.ts
+function relativeName(name, zone) {
+  if (!zone) return name;
+  if (name === zone) return "";
+  return name.endsWith(`.${zone}`) ? name.slice(0, -(zone.length + 1)) : name;
+}
+function recordNameInZone(name, zone) {
+  if (!zone) return null;
+  return relativeName(name, zone) || "@";
+}
+function dnsRecordRow(host, zone, spec) {
+  const data = host ? DNS_HOSTS[host] : null;
+  const relative = relativeName(spec.name, zone);
+  const atRoot = spec.type !== "CNAME" && relative === "";
+  const name = atRoot ? data?.root ?? "@" : relative || spec.name;
+  if (spec.type === "CNAME" || spec.type === "MX") {
+    const target = spec.value && data && trapOf(data, "trailingDot") ? `${spec.value}.` : spec.value;
+    if (spec.type === "CNAME")
+      return { type: "CNAME", name, value: target, atRoot: false, rootUnsure: false };
+    return {
+      type: "MX",
+      name,
+      value: target,
+      priority: spec.priority,
+      atRoot,
+      rootUnsure: atRoot && (!data || data.root === null)
+    };
+  }
+  return {
+    type: "TXT",
+    name,
+    value: spec.value && data && trapOf(data, "quotedTxt") ? `"${spec.value}"` : spec.value,
+    atRoot,
+    rootUnsure: atRoot && (!data || data.root === null)
+  };
+}
+
+// src/templates.ts
+var TTL = 3600;
+function template(identity, serviceId, fallback, wording, records, hostRequired) {
+  return {
+    providerId: identity.providerId,
+    providerName: identity.providerName,
+    serviceId: wording.serviceId ?? serviceId,
+    serviceName: wording.serviceName ?? fallback.serviceName,
+    version: wording.version ?? 1,
+    logoUrl: identity.logoUrl,
+    description: wording.description ?? fallback.description,
+    ...fallback.variableDescription ? { variableDescription: fallback.variableDescription } : {},
+    syncPubKeyDomain: identity.syncPubKeyDomain,
+    syncRedirectDomain: identity.syncRedirectDomain,
+    ...hostRequired ? { hostRequired } : {},
+    records
+  };
+}
+function templateFileName(t) {
+  return `${t.providerId}.${t.serviceId}.json`.toLowerCase();
+}
+function cnameTemplate(identity, options) {
+  return template(
+    identity,
+    options.serviceId ?? "custom-domain",
+    {
+      serviceName: "Connect a custom domain",
+      description: "Points your subdomain at us. The subdomain is the host parameter.",
+      variableDescription: options.variableDescription
+    },
+    options,
+    [{ type: "CNAME", host: "@", pointsTo: options.pointsTo, ttl: TTL }],
+    true
+  );
+}
+function dmarcTemplate(identity, options = {}) {
+  return template(
+    identity,
+    "dmarc",
+    {
+      serviceName: "DMARC record for your sending domain",
+      description: "Adds a DMARC record that only monitors (p=none), so mailbox providers can see that your sending domain has a policy. It rejects and quarantines nothing.",
+      variableDescription: options.rua ? "%dmarcRua%: the email address that gets the DMARC aggregate reports." : void 0
+    },
+    options,
+    [
+      {
+        type: "TXT",
+        host: "_dmarc",
+        data: options.rua ? "v=DMARC1; p=none; rua=mailto:%dmarcRua%" : "v=DMARC1; p=none",
+        ttl: TTL,
+        txtConflictMatchingMode: "Prefix",
+        txtConflictMatchingPrefix: "v=DMARC1",
+        essential: "OnApply"
+      }
+    ]
+  );
+}
+function spfTemplate(identity, options = {}) {
+  return template(
+    identity,
+    "spf",
+    {
+      serviceName: "Allow us to send email for your domain",
+      description: "Adds our sending service to your domain's SPF record, next to what is already there.",
+      variableDescription: "%include%: the domain to include, such as _spf.example.com."
+    },
+    options,
+    [{ type: "SPFM", host: "@", spfRules: "include:%include%" }]
+  );
+}
+function dkimTemplate(identity, options = {}) {
+  const keys = options.keys ?? 2;
+  const numbers = Array.from({ length: keys }, (_, index) => index + 1);
+  return template(
+    identity,
+    "dkim",
+    {
+      serviceName: "Sign your email with our key",
+      description: "Adds the CNAME records that let us sign email sent from your domain.",
+      variableDescription: numbers.map((n) => `%selector${n}%: the key name, ${n} of ${keys}; %target${n}%: where it points`).join("; ")
+    },
+    options,
+    numbers.map((n) => ({
+      type: "CNAME",
+      host: `%selector${n}%._domainkey`,
+      pointsTo: `%target${n}%`,
+      ttl: TTL
+    }))
+  );
+}
+function mxTemplate(identity, options) {
+  return template(
+    identity,
+    "mx",
+    {
+      serviceName: "Receive email for your domain with us",
+      description: "Sends the email for your domain to our mail servers."
+    },
+    options,
+    [
+      {
+        type: "MX",
+        host: "@",
+        pointsTo: options.pointsTo,
+        priority: options.priority ?? 10,
+        ttl: TTL
+      }
+    ]
+  );
+}
+function verificationTemplate(identity, options) {
+  return template(
+    identity,
+    "domain-verification",
+    {
+      serviceName: "Verify your domain",
+      description: "Adds the record that shows us you own this domain.",
+      variableDescription: "%value%: the verification token we gave you."
+    },
+    options,
+    [
+      {
+        type: "TXT",
+        host: options.host ?? "@",
+        data: `${options.prefix}%value%`,
+        ttl: TTL,
+        txtConflictMatchingMode: "Prefix",
+        txtConflictMatchingPrefix: options.prefix,
+        essential: "OnApply"
+      }
+    ]
+  );
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DNS_HOSTS,
+  DNS_HOST_IDS,
+  cnameTemplate,
+  detectDnsHosts,
+  dkimTemplate,
+  dmarcTemplate,
+  dnsRecordRow,
+  mxTemplate,
+  normalizeDnsName,
+  recordNameInZone,
+  relativeName,
+  spfTemplate,
+  templateFileName,
+  trapOf,
+  verificationTemplate
+});