@gusnips/one-click-dns 0.1.0 → 0.1.1

package/dist/server/index.cjs

@@ -801,10 +801,35 @@ var MESSAGES = {
   zone_read_missing: () => "That token can't read your domains",
   dns_edit_missing: () => "That token can't change DNS records",
   zone_not_found: (p) => `No zone holds ${p.hostname ?? "that name"}`,
-  conflict: (p) => `${p.hostname ?? "That name"} already has a record (type ${p.type ?? "?"})`,
+  conflict: (p) => `${p.hostname ?? "That name"} already has a record${p.type ? ` (type ${p.type})` : ""}`,
   unavailable: () => "Couldn't reach the DNS host"
 };
 
+// src/writers/policy.ts
+function zoneCandidates(hostname) {
+  const labels = hostname.split(".");
+  const names = [];
+  for (let start = 0; start < labels.length - 1; start++) names.push(labels.slice(start).join("."));
+  return names;
+}
+var unquoted = (content) => content.replace(/"\s+"/g, "").replace(/^"|"$/g, "");
+var sameValue = (record, existing) => record.type === "CNAME" ? normalizeDnsName(existing.content) === normalizeDnsName(record.value) : unquoted(existing.content) === record.value;
+var isSpf = (text2) => /^v=spf1(?:\s|$)/i.test(unquoted(text2).trim());
+function blocks(record, existing) {
+  if (record.type === "CNAME" || existing.type === "CNAME") return true;
+  return existing.type === "TXT" && isSpf(record.value) && isSpf(existing.content);
+}
+function decide(record, existing, hostname) {
+  const ours = existing.find((r) => r.type === record.type && sameValue(record, r));
+  if (ours) {
+    if (record.type === "CNAME" && ours.proxied === true) return { kind: "unproxy", id: ours.id };
+    return { kind: "unchanged" };
+  }
+  const blocker = existing.find((r) => blocks(record, r));
+  if (blocker) throw new DnsWriteError("conflict", { hostname, type: blocker.type });
+  return { kind: "create" };
+}
+
 // src/writers/cloudflare.ts
 var API = "https://api.cloudflare.com/client/v4";
 var TIMEOUT_MS = 1e4;
@@ -890,19 +915,6 @@ function recordsOf(result) {
     };
   });
 }
-function zoneCandidates(hostname) {
-  const labels = hostname.split(".");
-  const names = [];
-  for (let start = 0; start < labels.length - 1; start++) names.push(labels.slice(start).join("."));
-  return names;
-}
-var unquoted = (content) => content.replace(/"\s+"/g, "").replace(/^"|"$/g, "");
-var sameValue = (record, existing) => record.type === "CNAME" ? normalizeDnsName(existing.content) === normalizeDnsName(record.value) : unquoted(existing.content) === record.value;
-var isSpf = (text2) => /^v=spf1(?:\s|$)/i.test(unquoted(text2).trim());
-function blocks(record, existing) {
-  if (record.type === "CNAME" || existing.type === "CNAME") return true;
-  return existing.type === "TXT" && isSpf(record.value) && isSpf(existing.content);
-}
 var cloudflare = {
   host: "cloudflare",
   /** Add the record (DNS only) to the Cloudflare zone that holds its name. An identical record
@@ -931,11 +943,11 @@ var cloudflare = {
         subject
       )
     );
-    const ours = existing.find((r) => r.type === record.type && sameValue(record, r));
-    if (ours) {
-      if (record.type !== "CNAME" || ours.proxied !== true) return "unchanged";
+    const decision = decide(record, existing, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    if (decision.kind === "unproxy") {
       resultOf(
-        await call(doFetch, token, `/zones/${zoneId}/dns_records/${ours.id}`, {
+        await call(doFetch, token, `/zones/${zoneId}/dns_records/${decision.id}`, {
           method: "PATCH",
           body: { proxied: false }
         }),
@@ -944,8 +956,6 @@ var cloudflare = {
       );
       return "unproxied";
     }
-    const blocker = existing.find((r) => blocks(record, r));
-    if (blocker) throw new DnsWriteError("conflict", { hostname, type: blocker.type });
     resultOf(
       await call(doFetch, token, `/zones/${zoneId}/dns_records`, {
         method: "POST",
@@ -967,8 +977,298 @@ var cloudflare = {
   }
 };
 
+// src/writers/digitalocean.ts
+var API2 = "https://api.digitalocean.com/v2";
+var TIMEOUT_MS2 = 1e4;
+var MAX_BODY_BYTES2 = 512 * 1024;
+var RECORD_TYPE2 = /^[A-Z0-9]{1,12}$/;
+async function call2(doFetch, token, path, send) {
+  const res = await fetchBounded(
+    doFetch,
+    `${API2}${path}`,
+    {
+      method: send ? "POST" : "GET",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: "application/json",
+        ...send ? { "Content-Type": "application/json" } : {}
+      },
+      body: send ? JSON.stringify(send.body) : void 0
+    },
+    { timeoutMs: TIMEOUT_MS2, maxBytes: MAX_BODY_BYTES2 }
+  );
+  if (!res) return { status: 0, body: null };
+  let json = null;
+  try {
+    json = JSON.parse(res.text);
+  } catch {
+  }
+  return { status: res.status, body: isObject(json) ? json : null };
+}
+function refusal2(answer, stage, hostname) {
+  if (answer.status === 401) return new DnsWriteError("token_invalid");
+  if (answer.status === 403)
+    return new DnsWriteError(stage === "reading" ? "zone_read_missing" : "dns_edit_missing");
+  if (answer.status === 422 && stage === "writing")
+    return new DnsWriteError("conflict", { hostname });
+  return new DnsWriteError("unavailable");
+}
+function recordsOf2(body) {
+  const rows = body?.domain_records;
+  if (!Array.isArray(rows)) throw new DnsWriteError("unavailable");
+  return rows.map((row) => {
+    if (!isObject(row) || typeof row.id !== "number" || typeof row.type !== "string" || typeof row.data !== "string" || !RECORD_TYPE2.test(row.type))
+      throw new DnsWriteError("unavailable");
+    return { id: String(row.id), type: row.type, content: row.data };
+  });
+}
+var digitalocean = {
+  host: "digitalocean",
+  /** Add the record to the DigitalOcean domain that holds its name. An identical record is left
+   *  as it is. DigitalOcean has no proxy, so the outcome is `created` or `unchanged`. */
+  async addRecord({ token, record, fetch: doFetch = fetch }) {
+    const hostname = normalizeDnsName(record.name);
+    let zone;
+    let existing = [];
+    for (const candidate of zoneCandidates(hostname)) {
+      const query = new URLSearchParams({ name: hostname, per_page: "200" });
+      const answer = await call2(
+        doFetch,
+        token,
+        `/domains/${encodeURIComponent(candidate)}/records?${query}`
+      );
+      if (answer.status === 200) {
+        zone = candidate;
+        existing = recordsOf2(answer.body);
+        break;
+      }
+      if (answer.status !== 404) throw refusal2(answer, "reading", hostname);
+    }
+    if (!zone) throw new DnsWriteError("zone_not_found", { hostname });
+    const decision = decide(record, existing, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    const name = hostname === zone ? "@" : hostname.slice(0, -(zone.length + 1));
+    const created = await call2(doFetch, token, `/domains/${encodeURIComponent(zone)}/records`, {
+      body: {
+        type: record.type,
+        name,
+        data: record.type === "CNAME" ? `${normalizeDnsName(record.value)}.` : record.value,
+        // The API lists these as required for a TXT; they mean nothing for one.
+        ...record.type === "TXT" ? { flags: null, tag: null } : {}
+      }
+    });
+    if (created.status !== 201) throw refusal2(created, "writing", hostname);
+    return "created";
+  }
+};
+
+// src/writers/namecom.ts
+var API3 = "https://api.name.com/core/v1";
+var TIMEOUT_MS3 = 1e4;
+var MAX_BODY_BYTES3 = 512 * 1024;
+var PER_PAGE = 500;
+var MAX_PAGES = 10;
+var TTL = 300;
+var RECORD_TYPE3 = /^[A-Z0-9]{1,12}$/;
+function basicOf(token) {
+  const at = token.indexOf(":");
+  return at > 0 && at < token.length - 1 && !/\s/.test(token) ? btoa(token) : null;
+}
+async function call3(doFetch, basic, path, send) {
+  const res = await fetchBounded(
+    doFetch,
+    `${API3}${path}`,
+    {
+      method: send ? "POST" : "GET",
+      headers: {
+        Authorization: `Basic ${basic}`,
+        Accept: "application/json",
+        ...send ? { "Content-Type": "application/json" } : {}
+      },
+      body: send ? JSON.stringify(send.body) : void 0
+    },
+    { timeoutMs: TIMEOUT_MS3, maxBytes: MAX_BODY_BYTES3 }
+  );
+  if (!res) return { status: 0, body: null };
+  let json = null;
+  try {
+    json = JSON.parse(res.text);
+  } catch {
+  }
+  return { status: res.status, body: isObject(json) ? json : null };
+}
+function refusal3(answer, stage, hostname) {
+  if (answer.status === 401) return new DnsWriteError("token_invalid");
+  if (answer.status === 403)
+    return new DnsWriteError(stage === "reading" ? "zone_read_missing" : "dns_edit_missing");
+  if (answer.status === 409) return new DnsWriteError("conflict", { hostname });
+  return new DnsWriteError("unavailable");
+}
+function pageOf(body) {
+  const rows = body?.records;
+  if (!Array.isArray(rows)) throw new DnsWriteError("unavailable");
+  const records = rows.map((row) => {
+    if (!isObject(row) || typeof row.id !== "number" || typeof row.type !== "string" || typeof row.answer !== "string" || typeof row.fqdn !== "string" || !RECORD_TYPE3.test(row.type))
+      throw new DnsWriteError("unavailable");
+    return { id: String(row.id), type: row.type, content: row.answer, name: row.fqdn };
+  });
+  return { records, more: typeof body?.nextPage === "number" };
+}
+var namecom = {
+  host: "name-com",
+  /** Add the record to the Name.com domain that holds its name. An identical record is left as
+   *  it is. Name.com has no proxy, so the outcome is `created` or `unchanged`. */
+  async addRecord({ token, record, fetch: doFetch = fetch }) {
+    const hostname = normalizeDnsName(record.name);
+    const basic = basicOf(token);
+    if (!basic) throw new DnsWriteError("token_invalid");
+    let zone;
+    let existing = [];
+    for (const candidate of zoneCandidates(hostname)) {
+      const path = `/domains/${encodeURIComponent(candidate)}/records`;
+      const first = await call3(doFetch, basic, `${path}?perPage=${PER_PAGE}`);
+      if (first.status === 404) continue;
+      if (first.status !== 200) throw refusal3(first, "reading", hostname);
+      zone = candidate;
+      let page = pageOf(first.body);
+      existing = page.records;
+      for (let next = 2; page.more && next <= MAX_PAGES; next++) {
+        const answer = await call3(doFetch, basic, `${path}?perPage=${PER_PAGE}&page=${next}`);
+        if (answer.status !== 200) throw refusal3(answer, "reading", hostname);
+        page = pageOf(answer.body);
+        existing = existing.concat(page.records);
+      }
+      if (page.more) throw new DnsWriteError("unavailable");
+      break;
+    }
+    if (!zone) throw new DnsWriteError("zone_not_found", { hostname });
+    const here = existing.filter(
+      (r) => r.name !== void 0 && normalizeDnsName(r.name) === hostname
+    );
+    const decision = decide(record, here, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    const host = hostname === zone ? "@" : hostname.slice(0, -(zone.length + 1));
+    const created = await call3(doFetch, basic, `/domains/${encodeURIComponent(zone)}/records`, {
+      body: { host, type: record.type, answer: record.value, ttl: TTL }
+    });
+    if (created.status !== 200) throw refusal3(created, "writing", hostname);
+    const stored = created.body?.answer;
+    if (typeof stored !== "string" || !sameValue(record, { content: stored }))
+      throw new DnsWriteError("unavailable");
+    return "created";
+  }
+};
+
+// src/writers/porkbun.ts
+var API4 = "https://api.porkbun.com/api/json/v3";
+var TIMEOUT_MS4 = 1e4;
+var MAX_BODY_BYTES4 = 256 * 1024;
+var KEY_CODES = /* @__PURE__ */ new Set([
+  "API_KEY_REQUIRED",
+  "INVALID_API_KEYS_001",
+  "INVALID_TOKEN",
+  "INVALID_USER"
+]);
+var ACCESS_CODES = /* @__PURE__ */ new Set(["API_ACCESS_DISABLED", "IP_NOT_ALLOWED", "DOMAIN_NOT_ALLOWED"]);
+var NOT_A_ZONE_CODES = /* @__PURE__ */ new Set(["INVALID_DOMAIN", "DOMAIN_NOT_FOUND"]);
+var ID2 = /^[0-9]{1,20}$/;
+var RECORD_TYPE4 = /^[A-Z0-9]{1,12}$/;
+function keysOf(token) {
+  const at = token.indexOf(":");
+  const key = token.slice(0, at);
+  const secret = token.slice(at + 1);
+  return at > 0 && secret && !/\s/.test(token) ? { key, secret } : null;
+}
+async function call4(doFetch, keys, path, send) {
+  const res = await fetchBounded(
+    doFetch,
+    `${API4}${path}`,
+    {
+      method: send ? "POST" : "GET",
+      headers: {
+        "X-API-Key": keys.key,
+        "X-Secret-API-Key": keys.secret,
+        Accept: "application/json",
+        ...send ? { "Content-Type": "application/json" } : {}
+      },
+      body: send ? JSON.stringify(send.body) : void 0
+    },
+    { timeoutMs: TIMEOUT_MS4, maxBytes: MAX_BODY_BYTES4 }
+  );
+  if (!res) return { code: "", ok: false, body: null };
+  let json = null;
+  try {
+    json = JSON.parse(res.text);
+  } catch {
+  }
+  const body = isObject(json) ? json : null;
+  return {
+    code: typeof body?.code === "string" ? body.code : "",
+    ok: res.status === 200 && body?.status === "SUCCESS",
+    body
+  };
+}
+function refusal4(answer, hostname) {
+  if (KEY_CODES.has(answer.code)) return new DnsWriteError("token_invalid");
+  if (ACCESS_CODES.has(answer.code)) return new DnsWriteError("dns_edit_missing");
+  if (answer.code === "RECORD_CONFLICT") return new DnsWriteError("conflict", { hostname });
+  return new DnsWriteError("unavailable");
+}
+function recordsOf3(body) {
+  const rows = body?.records;
+  if (!Array.isArray(rows)) throw new DnsWriteError("unavailable");
+  return rows.map((row) => {
+    if (!isObject(row) || typeof row.id !== "string" || typeof row.name !== "string" || typeof row.type !== "string" || typeof row.content !== "string" || !ID2.test(row.id) || !RECORD_TYPE4.test(row.type))
+      throw new DnsWriteError("unavailable");
+    return { id: row.id, type: row.type, content: row.content, name: row.name };
+  });
+}
+var porkbun = {
+  host: "porkbun",
+  /** Add the record to the Porkbun domain that holds its name. An identical record is left as
+   *  it is. Porkbun has no proxy, so the outcome is `created` or `unchanged`. */
+  async addRecord({ token, record, comment, fetch: doFetch = fetch }) {
+    const hostname = normalizeDnsName(record.name);
+    const keys = keysOf(token);
+    if (!keys) throw new DnsWriteError("token_invalid");
+    let zone;
+    let existing = [];
+    for (const candidate of zoneCandidates(hostname)) {
+      const answer = await call4(doFetch, keys, `/dns/retrieve/${encodeURIComponent(candidate)}`);
+      if (answer.ok) {
+        zone = candidate;
+        existing = recordsOf3(answer.body).filter(
+          (r) => r.name !== void 0 && normalizeDnsName(r.name) === hostname
+        );
+        break;
+      }
+      if (!NOT_A_ZONE_CODES.has(answer.code)) throw refusal4(answer, hostname);
+    }
+    if (!zone) throw new DnsWriteError("zone_not_found", { hostname });
+    const decision = decide(record, existing, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    const subdomain = hostname === zone ? "" : hostname.slice(0, -(zone.length + 1));
+    const created = await call4(doFetch, keys, `/dns/create/${encodeURIComponent(zone)}`, {
+      body: {
+        name: subdomain,
+        type: record.type,
+        content: record.value,
+        ...comment ? { notes: comment } : {}
+      }
+    });
+    if (created.code === "DUPLICATE_RECORD") return "unchanged";
+    if (!created.ok) throw refusal4(created, hostname);
+    return "created";
+  }
+};
+
 // src/writers/index.ts
-var writers = { cloudflare };
+var writers = {
+  cloudflare,
+  digitalocean,
+  "name-com": namecom,
+  porkbun
+};
 
 // src/server/plan.ts
 async function planConnection(input, io) {

package/dist/server/index.d.cts

@@ -1,4 +1,5 @@
 import { Resolver } from 'node:dns/promises';
+import { F as FetchFn } from '../bounded-fetch-nozW2egX.cjs';
 import { h as DnsZone, e as DnsHostReading, D as DnsHostId } from '../hosts-B0_V4Ned.cjs';
 
 /** What one question came back with. `absent` is DNS answering that nothing is there; `failed`
@@ -56,7 +57,7 @@ declare const CONNECT_PROVIDERS: readonly ConnectProvider[];
 
 interface DiscoveryIo {
     txt: DnsLookups["txt"];
-    fetch?: typeof fetch;
+    fetch?: FetchFn;
 }
 type Discovery = {
     found: true;
@@ -141,4 +142,4 @@ interface PlanInput {
 }
 declare function planConnection(input: PlanInput, io: DiscoveryIo & ZoneLookups): Promise<ConnectPlan>;
 
-export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, type PlanInput, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver };
+export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, FetchFn, type PlanInput, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver };

package/dist/server/index.d.ts

@@ -1,4 +1,5 @@
 import { Resolver } from 'node:dns/promises';
+import { F as FetchFn } from '../bounded-fetch-nozW2egX.js';
 import { h as DnsZone, e as DnsHostReading, D as DnsHostId } from '../hosts-B0_V4Ned.js';
 
 /** What one question came back with. `absent` is DNS answering that nothing is there; `failed`
@@ -56,7 +57,7 @@ declare const CONNECT_PROVIDERS: readonly ConnectProvider[];
 
 interface DiscoveryIo {
     txt: DnsLookups["txt"];
-    fetch?: typeof fetch;
+    fetch?: FetchFn;
 }
 type Discovery = {
     found: true;
@@ -141,4 +142,4 @@ interface PlanInput {
 }
 declare function planConnection(input: PlanInput, io: DiscoveryIo & ZoneLookups): Promise<ConnectPlan>;
 
-export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, type PlanInput, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver };
+export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, FetchFn, type PlanInput, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver };

package/dist/server/index.js

@@ -5,7 +5,7 @@ import {
   fetchBounded,
   isObject,
   writers
-} from "../chunk-FGM7S7GQ.js";
+} from "../chunk-56ZUD4EQ.js";
 import {
   normalizeDnsName
 } from "../chunk-P2O7INDB.js";