@gusnips/one-click-dns 0.1.0 → 0.1.2

package/dist/server/index.cjs

@@ -27,7 +27,8 @@ __export(server_exports, {
   readDnsZone: () => readDnsZone,
   signedApplyUrl: () => signedApplyUrl,
   systemDnsLookups: () => systemDnsLookups,
-  systemResolver: () => systemResolver
+  systemResolver: () => systemResolver,
+  templateCoverage: () => templateCoverage
 });
 module.exports = __toCommonJS(server_exports);
 
@@ -657,22 +658,25 @@ var CONNECT_PROVIDERS = [
 // src/bounded-fetch.ts
 var import_server = require("@gusnips/server");
 async function fetchBounded(doFetch, url, init, limits) {
-  try {
-    const res = await doFetch(url, {
-      ...init,
-      redirect: "manual",
-      signal: AbortSignal.timeout(limits.timeoutMs)
-    });
-    if (res.type === "opaqueredirect" || res.status >= 300 && res.status < 400) {
-      await res.body?.cancel().catch(() => void 0);
-      return { status: res.status || 302, text: "" };
+  const signal = AbortSignal.timeout(limits.timeoutMs);
+  const outOfTime = new Promise((resolve) => {
+    signal.addEventListener("abort", () => resolve(null), { once: true });
+  });
+  const attempt = async () => {
+    try {
+      const res = await doFetch(url, { ...init, redirect: "manual", signal });
+      if (res.type === "opaqueredirect" || res.status >= 300 && res.status < 400) {
+        await res.body?.cancel().catch(() => void 0);
+        return { status: res.status || 302, text: "" };
+      }
+      const { bytes, truncated } = await (0, import_server.readBounded)(res.body, limits.maxBytes);
+      if (truncated) return null;
+      return { status: res.status, text: new TextDecoder().decode(bytes) };
+    } catch {
+      return null;
     }
-    const { bytes, truncated } = await (0, import_server.readBounded)(res.body, limits.maxBytes);
-    if (truncated) return null;
-    return { status: res.status, text: new TextDecoder().decode(bytes) };
-  } catch {
-    return null;
-  }
+  };
+  return Promise.race([attempt(), outOfTime]);
 }
 
 // src/guards.ts
@@ -771,6 +775,25 @@ async function ask(io, args, deadline) {
   };
 }
 
+// src/server/connect/coverage.ts
+async function templateCoverage(io, args) {
+  const { providerId, serviceId, timeoutMs = 5e3, providers = CONNECT_PROVIDERS } = args;
+  const answers = await Promise.all(
+    providers.map(async (provider) => {
+      const answer = await fetchBounded(
+        io.fetch ?? fetch,
+        `${provider.api}/v2/domainTemplates/providers/${providerId}/services/${serviceId}`,
+        { method: "GET", headers: { Accept: "application/json" } },
+        { timeoutMs, maxBytes: 64 * 1024 }
+      );
+      if (answer?.status === 200) return [provider.id, "supported"];
+      if (answer?.status === 404) return [provider.id, "not_supported"];
+      return [provider.id, "unanswered"];
+    })
+  );
+  return Object.fromEntries(answers);
+}
+
 // src/server/connect/sign.ts
 var import_node_crypto = require("crypto");
 var encode = (value) => encodeURIComponent(value).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`).replace(/%20/g, "+");
@@ -801,10 +824,35 @@ var MESSAGES = {
   zone_read_missing: () => "That token can't read your domains",
   dns_edit_missing: () => "That token can't change DNS records",
   zone_not_found: (p) => `No zone holds ${p.hostname ?? "that name"}`,
-  conflict: (p) => `${p.hostname ?? "That name"} already has a record (type ${p.type ?? "?"})`,
+  conflict: (p) => `${p.hostname ?? "That name"} already has a record${p.type ? ` (type ${p.type})` : ""}`,
   unavailable: () => "Couldn't reach the DNS host"
 };
 
+// src/writers/policy.ts
+function zoneCandidates(hostname) {
+  const labels = hostname.split(".");
+  const names = [];
+  for (let start = 0; start < labels.length - 1; start++) names.push(labels.slice(start).join("."));
+  return names;
+}
+var unquoted = (content) => content.replace(/"\s+"/g, "").replace(/^"|"$/g, "");
+var sameValue = (record, existing) => record.type === "CNAME" ? normalizeDnsName(existing.content) === normalizeDnsName(record.value) : unquoted(existing.content) === record.value;
+var isSpf = (text2) => /^v=spf1(?:\s|$)/i.test(unquoted(text2).trim());
+function blocks(record, existing) {
+  if (record.type === "CNAME" || existing.type === "CNAME") return true;
+  return existing.type === "TXT" && isSpf(record.value) && isSpf(existing.content);
+}
+function decide(record, existing, hostname) {
+  const ours = existing.find((r) => r.type === record.type && sameValue(record, r));
+  if (ours) {
+    if (record.type === "CNAME" && ours.proxied === true) return { kind: "unproxy", id: ours.id };
+    return { kind: "unchanged" };
+  }
+  const blocker = existing.find((r) => blocks(record, r));
+  if (blocker) throw new DnsWriteError("conflict", { hostname, type: blocker.type });
+  return { kind: "create" };
+}
+
 // src/writers/cloudflare.ts
 var API = "https://api.cloudflare.com/client/v4";
 var TIMEOUT_MS = 1e4;
@@ -890,19 +938,6 @@ function recordsOf(result) {
     };
   });
 }
-function zoneCandidates(hostname) {
-  const labels = hostname.split(".");
-  const names = [];
-  for (let start = 0; start < labels.length - 1; start++) names.push(labels.slice(start).join("."));
-  return names;
-}
-var unquoted = (content) => content.replace(/"\s+"/g, "").replace(/^"|"$/g, "");
-var sameValue = (record, existing) => record.type === "CNAME" ? normalizeDnsName(existing.content) === normalizeDnsName(record.value) : unquoted(existing.content) === record.value;
-var isSpf = (text2) => /^v=spf1(?:\s|$)/i.test(unquoted(text2).trim());
-function blocks(record, existing) {
-  if (record.type === "CNAME" || existing.type === "CNAME") return true;
-  return existing.type === "TXT" && isSpf(record.value) && isSpf(existing.content);
-}
 var cloudflare = {
   host: "cloudflare",
   /** Add the record (DNS only) to the Cloudflare zone that holds its name. An identical record
@@ -931,11 +966,11 @@ var cloudflare = {
         subject
       )
     );
-    const ours = existing.find((r) => r.type === record.type && sameValue(record, r));
-    if (ours) {
-      if (record.type !== "CNAME" || ours.proxied !== true) return "unchanged";
+    const decision = decide(record, existing, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    if (decision.kind === "unproxy") {
       resultOf(
-        await call(doFetch, token, `/zones/${zoneId}/dns_records/${ours.id}`, {
+        await call(doFetch, token, `/zones/${zoneId}/dns_records/${decision.id}`, {
           method: "PATCH",
           body: { proxied: false }
         }),
@@ -944,8 +979,6 @@ var cloudflare = {
       );
       return "unproxied";
     }
-    const blocker = existing.find((r) => blocks(record, r));
-    if (blocker) throw new DnsWriteError("conflict", { hostname, type: blocker.type });
     resultOf(
       await call(doFetch, token, `/zones/${zoneId}/dns_records`, {
         method: "POST",
@@ -967,8 +1000,298 @@ var cloudflare = {
   }
 };
 
+// src/writers/digitalocean.ts
+var API2 = "https://api.digitalocean.com/v2";
+var TIMEOUT_MS2 = 1e4;
+var MAX_BODY_BYTES2 = 512 * 1024;
+var RECORD_TYPE2 = /^[A-Z0-9]{1,12}$/;
+async function call2(doFetch, token, path, send) {
+  const res = await fetchBounded(
+    doFetch,
+    `${API2}${path}`,
+    {
+      method: send ? "POST" : "GET",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: "application/json",
+        ...send ? { "Content-Type": "application/json" } : {}
+      },
+      body: send ? JSON.stringify(send.body) : void 0
+    },
+    { timeoutMs: TIMEOUT_MS2, maxBytes: MAX_BODY_BYTES2 }
+  );
+  if (!res) return { status: 0, body: null };
+  let json = null;
+  try {
+    json = JSON.parse(res.text);
+  } catch {
+  }
+  return { status: res.status, body: isObject(json) ? json : null };
+}
+function refusal2(answer, stage, hostname) {
+  if (answer.status === 401) return new DnsWriteError("token_invalid");
+  if (answer.status === 403)
+    return new DnsWriteError(stage === "reading" ? "zone_read_missing" : "dns_edit_missing");
+  if (answer.status === 422 && stage === "writing")
+    return new DnsWriteError("conflict", { hostname });
+  return new DnsWriteError("unavailable");
+}
+function recordsOf2(body) {
+  const rows = body?.domain_records;
+  if (!Array.isArray(rows)) throw new DnsWriteError("unavailable");
+  return rows.map((row) => {
+    if (!isObject(row) || typeof row.id !== "number" || typeof row.type !== "string" || typeof row.data !== "string" || !RECORD_TYPE2.test(row.type))
+      throw new DnsWriteError("unavailable");
+    return { id: String(row.id), type: row.type, content: row.data };
+  });
+}
+var digitalocean = {
+  host: "digitalocean",
+  /** Add the record to the DigitalOcean domain that holds its name. An identical record is left
+   *  as it is. DigitalOcean has no proxy, so the outcome is `created` or `unchanged`. */
+  async addRecord({ token, record, fetch: doFetch = fetch }) {
+    const hostname = normalizeDnsName(record.name);
+    let zone;
+    let existing = [];
+    for (const candidate of zoneCandidates(hostname)) {
+      const query = new URLSearchParams({ name: hostname, per_page: "200" });
+      const answer = await call2(
+        doFetch,
+        token,
+        `/domains/${encodeURIComponent(candidate)}/records?${query}`
+      );
+      if (answer.status === 200) {
+        zone = candidate;
+        existing = recordsOf2(answer.body);
+        break;
+      }
+      if (answer.status !== 404) throw refusal2(answer, "reading", hostname);
+    }
+    if (!zone) throw new DnsWriteError("zone_not_found", { hostname });
+    const decision = decide(record, existing, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    const name = hostname === zone ? "@" : hostname.slice(0, -(zone.length + 1));
+    const created = await call2(doFetch, token, `/domains/${encodeURIComponent(zone)}/records`, {
+      body: {
+        type: record.type,
+        name,
+        data: record.type === "CNAME" ? `${normalizeDnsName(record.value)}.` : record.value,
+        // The API lists these as required for a TXT; they mean nothing for one.
+        ...record.type === "TXT" ? { flags: null, tag: null } : {}
+      }
+    });
+    if (created.status !== 201) throw refusal2(created, "writing", hostname);
+    return "created";
+  }
+};
+
+// src/writers/namecom.ts
+var API3 = "https://api.name.com/core/v1";
+var TIMEOUT_MS3 = 1e4;
+var MAX_BODY_BYTES3 = 512 * 1024;
+var PER_PAGE = 500;
+var MAX_PAGES = 10;
+var TTL = 300;
+var RECORD_TYPE3 = /^[A-Z0-9]{1,12}$/;
+function basicOf(token) {
+  const at = token.indexOf(":");
+  return at > 0 && at < token.length - 1 && !/\s/.test(token) ? btoa(token) : null;
+}
+async function call3(doFetch, basic, path, send) {
+  const res = await fetchBounded(
+    doFetch,
+    `${API3}${path}`,
+    {
+      method: send ? "POST" : "GET",
+      headers: {
+        Authorization: `Basic ${basic}`,
+        Accept: "application/json",
+        ...send ? { "Content-Type": "application/json" } : {}
+      },
+      body: send ? JSON.stringify(send.body) : void 0
+    },
+    { timeoutMs: TIMEOUT_MS3, maxBytes: MAX_BODY_BYTES3 }
+  );
+  if (!res) return { status: 0, body: null };
+  let json = null;
+  try {
+    json = JSON.parse(res.text);
+  } catch {
+  }
+  return { status: res.status, body: isObject(json) ? json : null };
+}
+function refusal3(answer, stage, hostname) {
+  if (answer.status === 401) return new DnsWriteError("token_invalid");
+  if (answer.status === 403)
+    return new DnsWriteError(stage === "reading" ? "zone_read_missing" : "dns_edit_missing");
+  if (answer.status === 409) return new DnsWriteError("conflict", { hostname });
+  return new DnsWriteError("unavailable");
+}
+function pageOf(body) {
+  const rows = body?.records;
+  if (!Array.isArray(rows)) throw new DnsWriteError("unavailable");
+  const records = rows.map((row) => {
+    if (!isObject(row) || typeof row.id !== "number" || typeof row.type !== "string" || typeof row.answer !== "string" || typeof row.fqdn !== "string" || !RECORD_TYPE3.test(row.type))
+      throw new DnsWriteError("unavailable");
+    return { id: String(row.id), type: row.type, content: row.answer, name: row.fqdn };
+  });
+  return { records, more: typeof body?.nextPage === "number" };
+}
+var namecom = {
+  host: "name-com",
+  /** Add the record to the Name.com domain that holds its name. An identical record is left as
+   *  it is. Name.com has no proxy, so the outcome is `created` or `unchanged`. */
+  async addRecord({ token, record, fetch: doFetch = fetch }) {
+    const hostname = normalizeDnsName(record.name);
+    const basic = basicOf(token);
+    if (!basic) throw new DnsWriteError("token_invalid");
+    let zone;
+    let existing = [];
+    for (const candidate of zoneCandidates(hostname)) {
+      const path = `/domains/${encodeURIComponent(candidate)}/records`;
+      const first = await call3(doFetch, basic, `${path}?perPage=${PER_PAGE}`);
+      if (first.status === 404) continue;
+      if (first.status !== 200) throw refusal3(first, "reading", hostname);
+      zone = candidate;
+      let page = pageOf(first.body);
+      existing = page.records;
+      for (let next = 2; page.more && next <= MAX_PAGES; next++) {
+        const answer = await call3(doFetch, basic, `${path}?perPage=${PER_PAGE}&page=${next}`);
+        if (answer.status !== 200) throw refusal3(answer, "reading", hostname);
+        page = pageOf(answer.body);
+        existing = existing.concat(page.records);
+      }
+      if (page.more) throw new DnsWriteError("unavailable");
+      break;
+    }
+    if (!zone) throw new DnsWriteError("zone_not_found", { hostname });
+    const here = existing.filter(
+      (r) => r.name !== void 0 && normalizeDnsName(r.name) === hostname
+    );
+    const decision = decide(record, here, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    const host = hostname === zone ? "@" : hostname.slice(0, -(zone.length + 1));
+    const created = await call3(doFetch, basic, `/domains/${encodeURIComponent(zone)}/records`, {
+      body: { host, type: record.type, answer: record.value, ttl: TTL }
+    });
+    if (created.status !== 200) throw refusal3(created, "writing", hostname);
+    const stored = created.body?.answer;
+    if (typeof stored !== "string" || !sameValue(record, { content: stored }))
+      throw new DnsWriteError("unavailable");
+    return "created";
+  }
+};
+
+// src/writers/porkbun.ts
+var API4 = "https://api.porkbun.com/api/json/v3";
+var TIMEOUT_MS4 = 1e4;
+var MAX_BODY_BYTES4 = 256 * 1024;
+var KEY_CODES = /* @__PURE__ */ new Set([
+  "API_KEY_REQUIRED",
+  "INVALID_API_KEYS_001",
+  "INVALID_TOKEN",
+  "INVALID_USER"
+]);
+var ACCESS_CODES = /* @__PURE__ */ new Set(["API_ACCESS_DISABLED", "IP_NOT_ALLOWED", "DOMAIN_NOT_ALLOWED"]);
+var NOT_A_ZONE_CODES = /* @__PURE__ */ new Set(["INVALID_DOMAIN", "DOMAIN_NOT_FOUND"]);
+var ID2 = /^[0-9]{1,20}$/;
+var RECORD_TYPE4 = /^[A-Z0-9]{1,12}$/;
+function keysOf(token) {
+  const at = token.indexOf(":");
+  const key = token.slice(0, at);
+  const secret = token.slice(at + 1);
+  return at > 0 && secret && !/\s/.test(token) ? { key, secret } : null;
+}
+async function call4(doFetch, keys, path, send) {
+  const res = await fetchBounded(
+    doFetch,
+    `${API4}${path}`,
+    {
+      method: send ? "POST" : "GET",
+      headers: {
+        "X-API-Key": keys.key,
+        "X-Secret-API-Key": keys.secret,
+        Accept: "application/json",
+        ...send ? { "Content-Type": "application/json" } : {}
+      },
+      body: send ? JSON.stringify(send.body) : void 0
+    },
+    { timeoutMs: TIMEOUT_MS4, maxBytes: MAX_BODY_BYTES4 }
+  );
+  if (!res) return { code: "", ok: false, body: null };
+  let json = null;
+  try {
+    json = JSON.parse(res.text);
+  } catch {
+  }
+  const body = isObject(json) ? json : null;
+  return {
+    code: typeof body?.code === "string" ? body.code : "",
+    ok: res.status === 200 && body?.status === "SUCCESS",
+    body
+  };
+}
+function refusal4(answer, hostname) {
+  if (KEY_CODES.has(answer.code)) return new DnsWriteError("token_invalid");
+  if (ACCESS_CODES.has(answer.code)) return new DnsWriteError("dns_edit_missing");
+  if (answer.code === "RECORD_CONFLICT") return new DnsWriteError("conflict", { hostname });
+  return new DnsWriteError("unavailable");
+}
+function recordsOf3(body) {
+  const rows = body?.records;
+  if (!Array.isArray(rows)) throw new DnsWriteError("unavailable");
+  return rows.map((row) => {
+    if (!isObject(row) || typeof row.id !== "string" || typeof row.name !== "string" || typeof row.type !== "string" || typeof row.content !== "string" || !ID2.test(row.id) || !RECORD_TYPE4.test(row.type))
+      throw new DnsWriteError("unavailable");
+    return { id: row.id, type: row.type, content: row.content, name: row.name };
+  });
+}
+var porkbun = {
+  host: "porkbun",
+  /** Add the record to the Porkbun domain that holds its name. An identical record is left as
+   *  it is. Porkbun has no proxy, so the outcome is `created` or `unchanged`. */
+  async addRecord({ token, record, comment, fetch: doFetch = fetch }) {
+    const hostname = normalizeDnsName(record.name);
+    const keys = keysOf(token);
+    if (!keys) throw new DnsWriteError("token_invalid");
+    let zone;
+    let existing = [];
+    for (const candidate of zoneCandidates(hostname)) {
+      const answer = await call4(doFetch, keys, `/dns/retrieve/${encodeURIComponent(candidate)}`);
+      if (answer.ok) {
+        zone = candidate;
+        existing = recordsOf3(answer.body).filter(
+          (r) => r.name !== void 0 && normalizeDnsName(r.name) === hostname
+        );
+        break;
+      }
+      if (!NOT_A_ZONE_CODES.has(answer.code)) throw refusal4(answer, hostname);
+    }
+    if (!zone) throw new DnsWriteError("zone_not_found", { hostname });
+    const decision = decide(record, existing, hostname);
+    if (decision.kind === "unchanged") return "unchanged";
+    const subdomain = hostname === zone ? "" : hostname.slice(0, -(zone.length + 1));
+    const created = await call4(doFetch, keys, `/dns/create/${encodeURIComponent(zone)}`, {
+      body: {
+        name: subdomain,
+        type: record.type,
+        content: record.value,
+        ...comment ? { notes: comment } : {}
+      }
+    });
+    if (created.code === "DUPLICATE_RECORD") return "unchanged";
+    if (!created.ok) throw refusal4(created, hostname);
+    return "created";
+  }
+};
+
 // src/writers/index.ts
-var writers = { cloudflare };
+var writers = {
+  cloudflare,
+  digitalocean,
+  "name-com": namecom,
+  porkbun
+};
 
 // src/server/plan.ts
 async function planConnection(input, io) {
@@ -1016,5 +1339,6 @@ async function planConnection(input, io) {
   readDnsZone,
   signedApplyUrl,
   systemDnsLookups,
-  systemResolver
+  systemResolver,
+  templateCoverage
 });

package/dist/server/index.d.cts

@@ -1,4 +1,5 @@
 import { Resolver } from 'node:dns/promises';
+import { F as FetchFn } from '../bounded-fetch-nozW2egX.cjs';
 import { h as DnsZone, e as DnsHostReading, D as DnsHostId } from '../hosts-B0_V4Ned.cjs';
 
 /** What one question came back with. `absent` is DNS answering that nothing is there; `failed`
@@ -56,7 +57,7 @@ declare const CONNECT_PROVIDERS: readonly ConnectProvider[];
 
 interface DiscoveryIo {
     txt: DnsLookups["txt"];
-    fetch?: typeof fetch;
+    fetch?: FetchFn;
 }
 type Discovery = {
     found: true;
@@ -83,6 +84,18 @@ declare function discoverConnect(io: DiscoveryIo, args: {
     providers?: readonly ConnectProvider[];
 }): Promise<Discovery>;
 
+type TemplateSupport = "supported" | "not_supported" | "unanswered";
+/** The answer of each provider, by our id for it (`cloudflare`). A status that says "not now"
+ *  (429, 5xx), a failed request or a redirect is `unanswered`, never "no". */
+declare function templateCoverage(io: {
+    fetch?: FetchFn;
+}, args: {
+    providerId: string;
+    serviceId: string;
+    timeoutMs?: number;
+    providers?: readonly ConnectProvider[];
+}): Promise<Record<string, TemplateSupport>>;
+
 /** Who is asking, as the templates name it. */
 interface DomainConnectIdentity {
     /** The provider id our templates are filed under in the Templates repository
@@ -141,4 +154,4 @@ interface PlanInput {
 }
 declare function planConnection(input: PlanInput, io: DiscoveryIo & ZoneLookups): Promise<ConnectPlan>;
 
-export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, type PlanInput, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver };
+export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, FetchFn, type PlanInput, type TemplateSupport, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver, templateCoverage };

package/dist/server/index.d.ts

@@ -1,4 +1,5 @@
 import { Resolver } from 'node:dns/promises';
+import { F as FetchFn } from '../bounded-fetch-nozW2egX.js';
 import { h as DnsZone, e as DnsHostReading, D as DnsHostId } from '../hosts-B0_V4Ned.js';
 
 /** What one question came back with. `absent` is DNS answering that nothing is there; `failed`
@@ -56,7 +57,7 @@ declare const CONNECT_PROVIDERS: readonly ConnectProvider[];
 
 interface DiscoveryIo {
     txt: DnsLookups["txt"];
-    fetch?: typeof fetch;
+    fetch?: FetchFn;
 }
 type Discovery = {
     found: true;
@@ -83,6 +84,18 @@ declare function discoverConnect(io: DiscoveryIo, args: {
     providers?: readonly ConnectProvider[];
 }): Promise<Discovery>;
 
+type TemplateSupport = "supported" | "not_supported" | "unanswered";
+/** The answer of each provider, by our id for it (`cloudflare`). A status that says "not now"
+ *  (429, 5xx), a failed request or a redirect is `unanswered`, never "no". */
+declare function templateCoverage(io: {
+    fetch?: FetchFn;
+}, args: {
+    providerId: string;
+    serviceId: string;
+    timeoutMs?: number;
+    providers?: readonly ConnectProvider[];
+}): Promise<Record<string, TemplateSupport>>;
+
 /** Who is asking, as the templates name it. */
 interface DomainConnectIdentity {
     /** The provider id our templates are filed under in the Templates repository
@@ -141,4 +154,4 @@ interface PlanInput {
 }
 declare function planConnection(input: PlanInput, io: DiscoveryIo & ZoneLookups): Promise<ConnectPlan>;
 
-export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, type PlanInput, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver };
+export { CONNECT_PROVIDERS, type ConnectMethod, type ConnectPlan, type ConnectProvider, type Discovery, type DiscoveryIo, type DnsAnswer, type DnsAsk, type DnsLookups, type DomainConnectIdentity, FetchFn, type PlanInput, type TemplateSupport, type ZoneLookups, discoverConnect, dnsHostOf, planConnection, readDnsZone, signedApplyUrl, systemDnsLookups, systemResolver, templateCoverage };

package/dist/server/index.js

@@ -5,7 +5,7 @@ import {
   fetchBounded,
   isObject,
   writers
-} from "../chunk-FGM7S7GQ.js";
+} from "../chunk-4XNRV7QR.js";
 import {
   normalizeDnsName
 } from "../chunk-P2O7INDB.js";
@@ -211,6 +211,25 @@ async function ask(io, args, deadline) {
   };
 }
 
+// src/server/connect/coverage.ts
+async function templateCoverage(io, args) {
+  const { providerId, serviceId, timeoutMs = 5e3, providers = CONNECT_PROVIDERS } = args;
+  const answers = await Promise.all(
+    providers.map(async (provider) => {
+      const answer = await fetchBounded(
+        io.fetch ?? fetch,
+        `${provider.api}/v2/domainTemplates/providers/${providerId}/services/${serviceId}`,
+        { method: "GET", headers: { Accept: "application/json" } },
+        { timeoutMs, maxBytes: 64 * 1024 }
+      );
+      if (answer?.status === 200) return [provider.id, "supported"];
+      if (answer?.status === 404) return [provider.id, "not_supported"];
+      return [provider.id, "unanswered"];
+    })
+  );
+  return Object.fromEntries(answers);
+}
+
 // src/server/connect/sign.ts
 import { createPrivateKey, sign } from "crypto";
 var encode = (value) => encodeURIComponent(value).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`).replace(/%20/g, "+");
@@ -270,5 +289,6 @@ export {
   readDnsZone,
   signedApplyUrl,
   systemDnsLookups,
-  systemResolver
+  systemResolver,
+  templateCoverage
 };