@hasna/domains 0.0.25 → 0.0.27

package/dist/cli/index.js

@@ -36170,14 +36170,19 @@ __export(exports_route53, {
   upsertRecords: () => upsertRecords,
   upsertRecord: () => upsertRecord,
   updateNameservers: () => updateNameservers2,
+  transferDomain: () => transferDomain,
+  requestTransferOutAuthCode: () => requestTransferOutAuthCode,
   registerDomain: () => registerDomain2,
+  listTldPrices: () => listTldPrices,
   listRegisteredDomains: () => listRegisteredDomains,
   listRecords: () => listRecords,
   listHostedZones: () => listHostedZones,
+  getTldPrice: () => getTldPrice,
   getRegistrationStatus: () => getRegistrationStatus,
   getHostedZone: () => getHostedZone,
   getDomainDetail: () => getDomainDetail,
   getConfig: () => getConfig2,
+  findHostedZoneByNameservers: () => findHostedZoneByNameservers,
   findHostedZoneByDomain: () => findHostedZoneByDomain,
   deleteRecord: () => deleteRecord,
   deleteHostedZone: () => deleteHostedZone,
@@ -36187,26 +36192,17 @@ __export(exports_route53, {
 });
 function getConfig2() {
   return {
-    region: process.env["AWS_REGION"] || "us-east-1",
-    accessKeyId: process.env["AWS_ACCESS_KEY_ID"],
-    secretAccessKey: process.env["AWS_SECRET_ACCESS_KEY"],
-    sessionToken: process.env["AWS_SESSION_TOKEN"]
+    region: process.env["ROUTE53_REGION"] || process.env["ROUTE53_AWS_REGION"] || process.env["AWS_REGION"] || "us-east-1",
+    accessKeyId: process.env["ROUTE53_ACCESS_KEY_ID"] || process.env["AWS_ACCESS_KEY_ID"],
+    secretAccessKey: process.env["ROUTE53_SECRET_ACCESS_KEY"] || process.env["AWS_SECRET_ACCESS_KEY"],
+    sessionToken: process.env["ROUTE53_SESSION_TOKEN"] || process.env["AWS_SESSION_TOKEN"],
+    profile: process.env["ROUTE53_AWS_PROFILE"] || process.env["AWS_PROFILE"]
   };
 }
-function checkCredentials(cfg) {
-  if (cfg.accessKeyId && cfg.secretAccessKey)
-    return;
-  const hasEnv = !!(process.env["AWS_ACCESS_KEY_ID"] && process.env["AWS_SECRET_ACCESS_KEY"]);
-  const hasProfile = !!process.env["AWS_PROFILE"];
-  if (!hasEnv && !hasProfile) {
-    throw new Error("AWS credentials not configured. Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY (or AWS_PROFILE) environment variables.");
-  }
-}
 function makeClients(config2) {
   const cfg = config2 ?? getConfig2();
-  checkCredentials(cfg);
   const region = cfg.region || "us-east-1";
-  const credentials = cfg.accessKeyId && cfg.secretAccessKey ? { accessKeyId: cfg.accessKeyId, secretAccessKey: cfg.secretAccessKey, sessionToken: cfg.sessionToken } : undefined;
+  const credentials = cfg.accessKeyId && cfg.secretAccessKey ? { accessKeyId: cfg.accessKeyId, secretAccessKey: cfg.secretAccessKey, sessionToken: cfg.sessionToken } : cfg.profile ? fromIni({ profile: cfg.profile }) : undefined;
   return {
     route53: new Route53Client({ region, credentials }),
     domains: new Route53DomainsClient({ region: "us-east-1", credentials })
@@ -36217,49 +36213,106 @@ async function checkAvailability3(domain, config2) {
   const result = await domains.send(new CheckDomainAvailabilityCommand({ DomainName: domain }));
   const availability = {
     domain,
-    available: result.Availability === "AVAILABLE"
+    available: result.Availability === "AVAILABLE",
+    availability: result.Availability ?? "UNKNOWN"
   };
-  try {
-    const tld = domain.split(".").slice(1).join(".");
-    const prices = await domains.send(new ListPricesCommand({ Tld: tld, MaxItems: 1 }));
-    const price = prices.Prices?.[0];
-    if (price) {
-      availability.currency = price.RegistrationPrice?.Currency ?? price.RenewalPrice?.Currency ?? price.TransferPrice?.Currency;
-      if (price.RegistrationPrice?.Price != null)
-        availability.price = price.RegistrationPrice.Price.toString();
-      if (price.RenewalPrice?.Price != null)
-        availability.renewal_price = price.RenewalPrice.Price.toString();
-      if (price.TransferPrice?.Price != null)
-        availability.transfer_price = price.TransferPrice.Price.toString();
-    }
-  } catch {}
+  if (availability.available) {
+    try {
+      const tld = domain.split(".").slice(1).join(".");
+      const price = await getTldPrice(tld, config2);
+      if (price) {
+        availability.currency = price.currency;
+        availability.price = price.registration_price;
+        availability.renewal_price = price.renewal_price;
+        availability.transfer_price = price.transfer_price;
+      }
+    } catch {}
+  }
   return availability;
 }
-async function registerDomain2(domain, contact, durationYears = 1, autoRenew = true, config2) {
+function normalizeTld(tld) {
+  return tld.trim().replace(/^\./, "");
+}
+function priceString(value) {
+  return value == null ? undefined : value.toString();
+}
+function tldPriceFromRoute53Price(tld, price) {
+  return {
+    tld: price.Name || tld,
+    registration_price: priceString(price.RegistrationPrice?.Price),
+    renewal_price: priceString(price.RenewalPrice?.Price),
+    transfer_price: priceString(price.TransferPrice?.Price),
+    currency: price.RegistrationPrice?.Currency ?? price.RenewalPrice?.Currency ?? price.TransferPrice?.Currency
+  };
+}
+async function getTldPrice(tld, config2) {
+  const { domains } = makeClients(config2);
+  const normalized = normalizeTld(tld);
+  const prices = await domains.send(new ListPricesCommand({ Tld: normalized, MaxItems: 1 }));
+  const price = prices.Prices?.[0];
+  return price ? tldPriceFromRoute53Price(normalized, price) : null;
+}
+async function listTldPrices(config2) {
+  const { domains } = makeClients(config2);
+  const prices = [];
+  let marker;
+  do {
+    const result = await domains.send(new ListPricesCommand({ Marker: marker, MaxItems: 100 }));
+    for (const price of result.Prices ?? []) {
+      prices.push(tldPriceFromRoute53Price(price.Name || "", price));
+    }
+    marker = result.NextPageMarker;
+  } while (marker);
+  return prices;
+}
+async function registerDomain2(domain, contact, durationYears = 1, autoRenew = true, config2, options = {}) {
   const { domains } = makeClients(config2);
-  const contactDetail = {
+  const contactDetail = contactToRoute53Contact(contact);
+  const result = await domains.send(new RegisterDomainCommand({
+    DomainName: domain,
+    DurationInYears: durationYears,
+    AutoRenew: autoRenew,
+    AdminContact: contactDetail,
+    RegistrantContact: contactDetail,
+    TechContact: contactDetail,
+    PrivacyProtectAdminContact: options.privacy_protected ?? true,
+    PrivacyProtectRegistrantContact: options.privacy_protected ?? true,
+    PrivacyProtectTechContact: options.privacy_protected ?? true,
+    ...options.nameservers?.length ? { Nameservers: options.nameservers.map((Name) => ({ Name })) } : {}
+  }));
+  return { operationId: result.OperationId ?? "" };
+}
+function contactToRoute53Contact(contact) {
+  return {
     FirstName: contact.first_name,
     LastName: contact.last_name,
     Email: contact.email,
     PhoneNumber: contact.phone,
     AddressLine1: contact.address_line_1,
+    ...contact.address_line_2 ? { AddressLine2: contact.address_line_2 } : {},
     City: contact.city,
-    State: contact.state,
-    CountryCode: contact.country_code,
+    ...contact.state ? { State: contact.state } : {},
+    CountryCode: contact.country_code.toUpperCase(),
     ZipCode: contact.zip_code,
     ContactType: contact.organization_name ? "COMPANY" : "PERSON",
     ...contact.organization_name ? { OrganizationName: contact.organization_name } : {}
   };
-  const result = await domains.send(new RegisterDomainCommand({
+}
+async function transferDomain(domain, authCode, contact, durationYears = 1, autoRenew = true, config2, options = {}) {
+  const { domains } = makeClients(config2);
+  const contactDetail = contactToRoute53Contact(contact);
+  const result = await domains.send(new TransferDomainCommand({
     DomainName: domain,
+    AuthCode: authCode,
     DurationInYears: durationYears,
     AutoRenew: autoRenew,
     AdminContact: contactDetail,
     RegistrantContact: contactDetail,
     TechContact: contactDetail,
-    PrivacyProtectAdminContact: true,
-    PrivacyProtectRegistrantContact: true,
-    PrivacyProtectTechContact: true
+    PrivacyProtectAdminContact: options.privacy_protected ?? true,
+    PrivacyProtectRegistrantContact: options.privacy_protected ?? true,
+    PrivacyProtectTechContact: options.privacy_protected ?? true,
+    ...options.nameservers?.length ? { Nameservers: options.nameservers.map((Name) => ({ Name })) } : {}
   }));
   return { operationId: result.OperationId ?? "" };
 }
@@ -36274,14 +36327,60 @@ async function getRegistrationStatus(operationId, config2) {
 }
 async function getDomainDetail(domain, config2) {
   const { domains } = makeClients(config2);
-  const result = await domains.send(new GetDomainDetailCommand({ DomainName: domain }));
+  const [result, summary] = await Promise.all([
+    domains.send(new GetDomainDetailCommand({ DomainName: domain })),
+    getDomainSummary(domain, config2)
+  ]);
+  const privacy = result;
   return {
     domain: result.DomainName ?? domain,
-    expiry: result.ExpirationDate?.toISOString() ?? "",
-    auto_renew: result.AutoRenew ?? false,
-    transfer_lock: result.StatusList?.includes("TRANSFER_LOCK") ?? false,
+    expiry: result.ExpirationDate?.toISOString() ?? summary?.expiry ?? "",
+    auto_renew: result.AutoRenew ?? summary?.auto_renew ?? null,
+    transfer_lock: summary?.transfer_lock ?? (result.StatusList?.includes("TRANSFER_LOCK") ? true : null),
     created: result.CreationDate?.toISOString() ?? "",
-    nameservers: (result.Nameservers ?? []).map((ns) => ns.Name ?? "").filter(Boolean)
+    updated: result.UpdatedDate?.toISOString() ?? "",
+    nameservers: (result.Nameservers ?? []).map((ns) => ns.Name ?? "").filter(Boolean),
+    status_list: result.StatusList ?? [],
+    registrar_name: result.RegistrarName,
+    privacy_protected: privacy.RegistrantPrivacy ?? privacy.AdminPrivacy ?? privacy.TechPrivacy ?? null
+  };
+}
+async function getDomainSummary(domain, config2) {
+  let marker;
+  do {
+    const { domains } = makeClients(config2);
+    const result = await domains.send(new ListDomainsCommand({ Marker: marker, MaxItems: 100 }));
+    const summary = (result.Domains ?? []).find((item) => item.DomainName === domain);
+    if (summary) {
+      return {
+        domain: summary.DomainName ?? domain,
+        expiry: summary.Expiry?.toISOString() ?? "",
+        auto_renew: summary.AutoRenew ?? false,
+        transfer_lock: summary.TransferLock ?? false
+      };
+    }
+    marker = result.NextPageMarker;
+  } while (marker);
+  return null;
+}
+async function requestTransferOutAuthCode(domain, config2) {
+  const { domains } = makeClients(config2);
+  const detail = await getDomainDetail(domain, config2);
+  let transferLockDisabled = false;
+  let transferLockOperationId = null;
+  if (detail.transfer_lock) {
+    const result = await domains.send(new DisableDomainTransferLockCommand({ DomainName: domain }));
+    transferLockDisabled = true;
+    transferLockOperationId = result.OperationId ?? null;
+  }
+  const authCodeResult = await domains.send(new RetrieveDomainAuthCodeCommand({ DomainName: domain }));
+  if (!authCodeResult.AuthCode) {
+    throw new Error("Route53 did not return a domain transfer authorization code");
+  }
+  return {
+    auth_code: authCodeResult.AuthCode,
+    transfer_lock_disabled: transferLockDisabled,
+    transfer_lock_operation_id: transferLockOperationId
   };
 }
 async function updateNameservers2(domain, nameservers, config2, client2) {
@@ -36319,9 +36418,22 @@ function cleanZoneId(id) {
 function normalizeZoneId(id) {
   return cleanZoneId(id.trim());
 }
-async function createHostedZone(domain, comment, config2) {
+function normalizeNameserver(value) {
+  return value.trim().toLowerCase().replace(/\.$/, "");
+}
+function nameserversMatch(a4, b4) {
+  if (a4.length !== b4.length)
+    return false;
+  const left = [...new Set(a4.map(normalizeNameserver))].sort();
+  const right = [...new Set(b4.map(normalizeNameserver))].sort();
+  return left.length === right.length && left.every((value, index) => value === right[index]);
+}
+function cleanChangeId(id) {
+  return id?.replace("/change/", "") || null;
+}
+async function createHostedZone(domain, comment, config2, options) {
   const { route53 } = makeClients(config2);
-  const callerRef = `domains-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+  const callerRef = options?.callerReference ?? `domains-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   const result = await route53.send(new CreateHostedZoneCommand({
     Name: domain,
     CallerReference: callerRef,
@@ -36368,7 +36480,38 @@ async function getHostedZone(hostedZoneId, config2) {
 }
 async function deleteHostedZone(hostedZoneId, config2) {
   const { route53 } = makeClients(config2);
-  await route53.send(new DeleteHostedZoneCommand({ Id: normalizeZoneId(hostedZoneId) }));
+  const zoneId = normalizeZoneId(hostedZoneId);
+  const managedRecords = [];
+  let nextName;
+  let nextType;
+  let nextIdentifier;
+  do {
+    const result = await route53.send(new ListResourceRecordSetsCommand({
+      HostedZoneId: zoneId,
+      StartRecordName: nextName,
+      StartRecordType: nextType,
+      StartRecordIdentifier: nextIdentifier
+    }));
+    managedRecords.push(...result.ResourceRecordSets?.filter((record) => record.Type !== "NS" && record.Type !== "SOA") ?? []);
+    nextName = result.IsTruncated ? result.NextRecordName : undefined;
+    nextType = result.IsTruncated ? result.NextRecordType : undefined;
+    nextIdentifier = result.IsTruncated ? result.NextRecordIdentifier : undefined;
+  } while (nextName && nextType);
+  for (let index = 0;index < managedRecords.length; index += 100) {
+    const batch = managedRecords.slice(index, index + 100);
+    if (batch.length === 0)
+      continue;
+    await route53.send(new ChangeResourceRecordSetsCommand({
+      HostedZoneId: zoneId,
+      ChangeBatch: {
+        Changes: batch.map((record) => ({
+          Action: "DELETE",
+          ResourceRecordSet: record
+        }))
+      }
+    }));
+  }
+  await route53.send(new DeleteHostedZoneCommand({ Id: zoneId }));
 }
 async function findHostedZoneByDomain(domain, config2) {
   const zones = await listHostedZones(config2);
@@ -36383,6 +36526,24 @@ async function findHostedZoneByDomain(domain, config2) {
   }
   return candidates[0] ?? null;
 }
+async function findHostedZoneByNameservers(domain, nameservers, config2) {
+  if (!nameservers.length)
+    return null;
+  const { route53 } = makeClients(config2);
+  const result = await route53.send(new ListHostedZonesByNameCommand({ DNSName: domain }));
+  const zones = (result.HostedZones ?? []).filter((zone) => zone.Name?.replace(/\.$/, "") === domain && !zone.Config?.PrivateZone);
+  for (const zone of zones) {
+    const id = cleanZoneId(zone.Id ?? "");
+    if (!id)
+      continue;
+    const detail = await getHostedZone(id, config2);
+    const delegatedNameservers = detail.name_servers ?? [];
+    if (nameserversMatch(delegatedNameservers, nameservers)) {
+      return { ...detail, id, name_servers: delegatedNameservers };
+    }
+  }
+  return null;
+}
 function rrsToRecord(rrs) {
   if (rrs.AliasTarget) {
     return {
@@ -36446,36 +36607,44 @@ async function listRecords(hostedZoneId, config2) {
   } while (nextName);
   return records;
 }
-async function upsertRecord(hostedZoneId, record, config2) {
+async function upsertRecord(hostedZoneId, record, config2, options) {
   const { route53 } = makeClients(config2);
-  await route53.send(new ChangeResourceRecordSetsCommand({
+  const result = await route53.send(new ChangeResourceRecordSetsCommand({
     HostedZoneId: normalizeZoneId(hostedZoneId),
     ChangeBatch: {
+      ...options?.comment ? { Comment: options.comment } : {},
       Changes: [{ Action: "UPSERT", ResourceRecordSet: recordToRrs(record) }]
     }
   }));
+  return { changeId: cleanChangeId(result.ChangeInfo?.Id) };
 }
-async function deleteRecord(hostedZoneId, record, config2) {
+async function deleteRecord(hostedZoneId, record, config2, options) {
   const { route53 } = makeClients(config2);
-  await route53.send(new ChangeResourceRecordSetsCommand({
+  const result = await route53.send(new ChangeResourceRecordSetsCommand({
     HostedZoneId: normalizeZoneId(hostedZoneId),
     ChangeBatch: {
+      ...options?.comment ? { Comment: options.comment } : {},
       Changes: [{ Action: "DELETE", ResourceRecordSet: recordToRrs(record) }]
     }
   }));
+  return { changeId: cleanChangeId(result.ChangeInfo?.Id) };
 }
-async function upsertRecords(hostedZoneId, records, config2) {
+async function upsertRecords(hostedZoneId, records, config2, options) {
   if (records.length === 0)
-    return;
+    return { changeId: null };
   const { route53 } = makeClients(config2);
   const changes = records.map((r4) => ({
     Action: "UPSERT",
     ResourceRecordSet: recordToRrs(r4)
   }));
-  await route53.send(new ChangeResourceRecordSetsCommand({
+  const result = await route53.send(new ChangeResourceRecordSetsCommand({
     HostedZoneId: normalizeZoneId(hostedZoneId),
-    ChangeBatch: { Changes: changes }
+    ChangeBatch: {
+      ...options?.comment ? { Comment: options.comment } : {},
+      Changes: changes
+    }
   }));
+  return { changeId: cleanChangeId(result.ChangeInfo?.Id) };
 }
 function createRoute53Provider(config2) {
   const cfg = config2 ?? getConfig2();
@@ -36538,7 +36707,7 @@ function createRoute53Provider(config2) {
         expires: detail.expiry,
         nameservers: detail.nameservers,
         status: "active",
-        auto_renew: detail.auto_renew
+        auto_renew: detail.auto_renew ?? false
       };
     },
     async registerDomain(domain, contact, options = {}) {
@@ -36653,6 +36822,7 @@ function createRoute53Provider(config2) {
 var init_route53 = __esm(() => {
   init_dist_es12();
   init_dist_es13();
+  init_dist_es9();
 });
 
 // src/lib/env-aliases.ts
@@ -36689,7 +36859,16 @@ function providerEnvNames(provider) {
     case "cloudflare":
       return flattenEnvNames([CLOUDFLARE_ENV.apiToken, CLOUDFLARE_ENV.apiKey, CLOUDFLARE_ENV.email, CLOUDFLARE_ENV.accountId]);
     case "route53":
-      return ["AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION"];
+      return flattenEnvNames([
+        ROUTE53_ENV.profile,
+        ROUTE53_ENV.accessKeyId,
+        ROUTE53_ENV.secretAccessKey,
+        ROUTE53_ENV.sessionToken,
+        ROUTE53_ENV.region,
+        ROUTE53_ENV.webIdentityTokenFile,
+        ROUTE53_ENV.roleArn,
+        ROUTE53_ENV.containerCredentials
+      ]);
     default:
       return [];
   }
@@ -36709,13 +36888,18 @@ function hasProviderCredentials(provider, env = process.env) {
       const keyMode = hasEveryEnv(env, [CLOUDFLARE_ENV.apiKey, CLOUDFLARE_ENV.email]);
       return tokenMode || keyMode;
     }
-    case "route53":
-      return !!env["AWS_PROFILE"] || hasEveryEnv(env, [["AWS_ACCESS_KEY_ID"], ["AWS_SECRET_ACCESS_KEY"]]);
+    case "route53": {
+      const profileMode = !!firstEnv(env, ROUTE53_ENV.profile);
+      const keyMode = hasEveryEnv(env, [ROUTE53_ENV.accessKeyId, ROUTE53_ENV.secretAccessKey]);
+      const webIdentityMode = hasEveryEnv(env, [ROUTE53_ENV.webIdentityTokenFile, ROUTE53_ENV.roleArn]);
+      const containerMode = !!firstEnv(env, ROUTE53_ENV.containerCredentials);
+      return profileMode || keyMode || webIdentityMode || containerMode;
+    }
     default:
       return false;
   }
 }
-var NAMECHEAP_ENV, GODADDY_ENV, BRANDSIGHT_ENV, SEDO_ENV, CLOUDFLARE_ENV;
+var NAMECHEAP_ENV, GODADDY_ENV, BRANDSIGHT_ENV, SEDO_ENV, CLOUDFLARE_ENV, ROUTE53_ENV;
 var init_env_aliases = __esm(() => {
   NAMECHEAP_ENV = {
     apiKey: ["NAMECHEAP_API_KEY"],
@@ -36745,6 +36929,19 @@ var init_env_aliases = __esm(() => {
     email: ["CLOUDFLARE_EMAIL"],
     accountId: ["CLOUDFLARE_ACCOUNT_ID"]
   };
+  ROUTE53_ENV = {
+    accessKeyId: ["ROUTE53_ACCESS_KEY_ID", "AWS_ACCESS_KEY_ID"],
+    secretAccessKey: ["ROUTE53_SECRET_ACCESS_KEY", "AWS_SECRET_ACCESS_KEY"],
+    sessionToken: ["ROUTE53_SESSION_TOKEN", "AWS_SESSION_TOKEN"],
+    profile: ["ROUTE53_AWS_PROFILE", "AWS_PROFILE"],
+    region: ["ROUTE53_REGION", "ROUTE53_AWS_REGION", "AWS_REGION"],
+    webIdentityTokenFile: ["AWS_WEB_IDENTITY_TOKEN_FILE"],
+    roleArn: ["AWS_ROLE_ARN"],
+    containerCredentials: [
+      "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",
+      "AWS_CONTAINER_CREDENTIALS_FULL_URI"
+    ]
+  };
 });
 
 // src/lib/cloudflare-auth.ts
@@ -36774,12 +36971,12 @@ var init_cloudflare_auth = __esm(() => {
 function getConfig3() {
   return resolveCloudflareConfig();
 }
-function checkCredentials2(cfg) {
+function checkCredentials(cfg) {
   cloudflareAuthHeaders(cfg);
 }
 async function cfFetch(path, opts = {}) {
   const cfg = opts.config ?? getConfig3();
-  checkCredentials2(cfg);
+  checkCredentials(cfg);
   const res = await fetch(`${CF_BASE}${path}`, {
     method: opts.method ?? "GET",
     headers: {
@@ -37689,12 +37886,16 @@ __export(exports_sedo, {
   resolveSedoConfig: () => resolveSedoConfig,
   removeDomainFromSedo: () => removeDomainFromSedo,
   recordSedoPurchase: () => recordSedoPurchase,
+  parseSedoSearchResponse: () => parseSedoSearchResponse,
+  parseSedoFault: () => parseSedoFault,
   listSedoPortfolio: () => listSedoPortfolio,
   getSedoConfig: () => getSedoConfig,
   editDomainOnSedo: () => editDomainOnSedo,
   checkSedoStatus: () => checkSedoStatus,
   checkSedoBlacklist: () => checkSedoBlacklist,
-  addDomainToSedo: () => addDomainToSedo
+  buildSedoSearchParams: () => buildSedoSearchParams,
+  addDomainToSedo: () => addDomainToSedo,
+  SEDO_CURRENCY_CODES: () => SEDO_CURRENCY_CODES
 });
 function resolveSedoConfig(env = process.env) {
   return {
@@ -37721,17 +37922,17 @@ function sedoCapability(env = process.env) {
     notes: configured ? "Credentials present; Sedo supports marketplace search, portfolio listing, listing edits, and recorded purchases, but not registrar DNS or direct self-serve registration through this CLI." : "Not configured; Sedo is marketplace-only here, not registrar DNS."
   };
 }
-function buildXmlParams(params) {
+function buildAuthParams(config2) {
   return {
-    partnerid: params.partnerId,
-    signkey: params.signKey,
-    username: params.username,
-    password: params.password
+    partnerid: config2.partnerId,
+    signkey: config2.signKey,
+    username: config2.username,
+    password: config2.password
   };
 }
-async function sedoRequest(action, config2, extraParams = {}) {
+async function sedoRequestRaw(action, config2, extraParams = {}) {
   const params = new URLSearchParams({
-    ...buildXmlParams(config2),
+    ...buildAuthParams(config2),
     output_method: "xml",
     ...Object.fromEntries(Object.entries(extraParams).map(([k4, v2]) => [k4, String(v2)]))
   });
@@ -37740,9 +37941,23 @@ async function sedoRequest(action, config2, extraParams = {}) {
   if (!resp.ok) {
     throw new Error(`Sedo API ${action} failed: ${resp.status} ${resp.statusText}`);
   }
-  const text = await resp.text();
+  return resp.text();
+}
+async function sedoRequest(action, config2, extraParams = {}) {
+  const text = await sedoRequestRaw(action, config2, extraParams);
+  const fault = parseSedoFault(text);
+  if (fault) {
+    throw new Error(`Sedo API ${action} fault ${fault.code}: ${fault.message}`);
+  }
   return parseSedoXml(text);
 }
+function parseSedoFault(xml) {
+  if (!/<SEDOFAULT\b/i.test(xml))
+    return null;
+  const code = xml.match(/<faultcode[^>]*>([^<]*)<\/faultcode>/i)?.[1]?.trim() || "UNKNOWN";
+  const message = xml.match(/<faultstring[^>]*>([^<]*)<\/faultstring>/i)?.[1]?.trim() || code;
+  return { code, message };
+}
 function parseSedoXml(xml) {
   const result = {};
   const itemMatches = xml.match(/<item[^>]*>([\s\S]*?)<\/item>/g);
@@ -37768,11 +37983,12 @@ function parseSedoItemXml(itemXml) {
   }
   return obj;
 }
-async function searchSedoDomains(query, options = {}) {
-  const config2 = getSedoConfig();
+function buildSedoSearchParams(query, options = {}) {
   const params = {
-    searchword: query,
-    limit: options.limit || 100
+    keyword: query,
+    kwtype: options.kwtype || "C",
+    resultsize: options.limit || 100,
+    language: options.language || "en"
   };
   if (options.tld)
     params.tld = options.tld;
@@ -37780,20 +37996,35 @@ async function searchSedoDomains(query, options = {}) {
     params.price_min = options.minPrice;
   if (options.maxPrice)
     params.price_max = options.maxPrice;
-  const response = await sedoRequest("DomainSearch", config2, params);
+  return params;
+}
+function parseSedoSearchResponse(xml) {
+  const fault = parseSedoFault(xml);
+  if (fault) {
+    throw new Error(`Sedo DomainSearch fault ${fault.code}: ${fault.message}`);
+  }
+  const response = parseSedoXml(xml);
   const items = response.items || [];
-  const domains = items.map((item) => ({
-    domain: item.domain || "",
-    forSale: item.for_sale === "1" || item.for_sale === "true",
-    price: item.price ? parseFloat(item.price) : undefined,
-    currency: item.currency || undefined,
-    status: item.status || undefined,
-    isPremium: item.premium === "1" || item.premium === "true"
-  }));
-  return {
-    domains,
-    total: parseInt(response.total || "0") || items.length
-  };
+  const domains = items.map((item) => {
+    const rawPrice = item.price;
+    const price = rawPrice !== undefined ? parseFloat(rawPrice) : undefined;
+    const currencyCode = item.currency;
+    const currency = currencyCode !== undefined ? SEDO_CURRENCY_CODES[currencyCode] || currencyCode : undefined;
+    return {
+      domain: item.domain || "",
+      forSale: true,
+      price: price && price > 0 ? price : undefined,
+      currency: price && price > 0 ? currency : undefined,
+      status: item.type || undefined
+    };
+  });
+  return { domains, total: domains.length };
+}
+async function searchSedoDomains(query, options = {}) {
+  const config2 = getSedoConfig();
+  const params = buildSedoSearchParams(query, options);
+  const xml = await sedoRequestRaw("DomainSearch", config2, params);
+  return parseSedoSearchResponse(xml);
 }
 async function searchHealthDomains(options = {}) {
   return searchSedoDomains("health", { ...options, limit: options.limit || 100 });
@@ -37917,11 +38148,16 @@ function recordSedoPurchase(domain, price, orderId) {
   });
   return created;
 }
-var BASE_URL = "https://api.sedo.com/api/v1/";
+var BASE_URL = "https://api.sedo.com/api/v1/", SEDO_CURRENCY_CODES;
 var init_sedo = __esm(() => {
   init_env_aliases();
   init_domains();
   init_domain_history();
+  SEDO_CURRENCY_CODES = {
+    "0": "EUR",
+    "1": "USD",
+    "2": "GBP"
+  };
 });
 
 // src/lib/creds-check.ts
@@ -37937,12 +38173,16 @@ function missingStatus(provider, detail) {
 }
 function checkProvisioningCredentials(env = process.env) {
   const out = [];
-  const hasAwsKeys = !!(env["AWS_ACCESS_KEY_ID"] && env["AWS_SECRET_ACCESS_KEY"]);
-  const hasAwsProfile = !!env["AWS_PROFILE"];
-  if (hasAwsProfile || hasAwsKeys) {
-    out.push(configuredStatus("route53", hasAwsProfile ? `profile:${env["AWS_PROFILE"]}` : "access-keys", "AWS credentials present (Route 53 Domains API uses us-east-1)"));
+  const awsProfile = firstEnv(env, ROUTE53_ENV.profile);
+  const awsAccessKey = firstEnv(env, ROUTE53_ENV.accessKeyId);
+  const awsSecretKey = firstEnv(env, ROUTE53_ENV.secretAccessKey);
+  const hasAwsKeys = !!(awsAccessKey && awsSecretKey);
+  const hasWebIdentity = !!(firstEnv(env, ROUTE53_ENV.webIdentityTokenFile) && firstEnv(env, ROUTE53_ENV.roleArn));
+  const hasContainerCredentials = !!firstEnv(env, ROUTE53_ENV.containerCredentials);
+  if (awsProfile || hasAwsKeys || hasWebIdentity || hasContainerCredentials) {
+    out.push(configuredStatus("route53", awsProfile ? `profile:${awsProfile.value}` : hasAwsKeys ? "access-keys" : hasWebIdentity ? "web-identity" : "container-credentials", "AWS credentials present (Route 53 Domains API uses us-east-1)"));
   } else {
-    out.push(missingStatus("route53", "Set AWS_PROFILE or AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY"));
+    out.push(missingStatus("route53", "Set ROUTE53_AWS_PROFILE/AWS_PROFILE, ROUTE53_ACCESS_KEY_ID+ROUTE53_SECRET_ACCESS_KEY, or AWS provider-chain credentials"));
   }
   const cf = resolveCloudflareConfig(env);
   const cfMode = cf.apiToken ? "token" : cf.apiKey && cf.email ? "global-key" : "none";
@@ -38066,7 +38306,7 @@ function registerSedoCommand(program2) {
       }
       console.log(`Sedo marketplace \u2014 "${keyword}" (${result.total} total):`);
       for (const d4 of result.domains) {
-        const price = d4.price ? ` \u2014 $${d4.price.toLocaleString()} ${d4.currency || ""}` : "";
+        const price = d4.price ? ` \u2014 ${d4.price.toLocaleString()} ${d4.currency || ""}`.trimEnd() : " \u2014 make offer";
         const premium = d4.isPremium ? " [PREMIUM]" : "";
         console.log(`  ${d4.domain}${price}${premium}`);
       }
@@ -49184,7 +49424,7 @@ init_route53();
 import { readFileSync as readFileSync6 } from "fs";
 
 // src/lib/zone-setup.ts
-function nameserversMatch(a4, b4) {
+function nameserversMatch2(a4, b4) {
   const norm = (ns) => new Set(ns.map((n2) => n2.trim().toLowerCase().replace(/\.$/, "")));
   const sa = norm(a4);
   const sb = norm(b4);
@@ -49211,7 +49451,7 @@ async function setupDomainZone(domain, deps) {
   }
   let nsUpdated = false;
   const registrarNs = await deps.getRegistrarNs(domain);
-  if (!nameserversMatch(registrarNs, zone.name_servers)) {
+  if (!nameserversMatch2(registrarNs, zone.name_servers)) {
     await deps.setRegistrarNs(domain, zone.name_servers);
     nsUpdated = true;
     log("ns_aligned", { domain, zoneId: zone.id, nameservers: zone.name_servers });