@zhin.js/plugin-nettools 0.0.0-stage → 0.1.0

package/lib/whois.js

@@ -0,0 +1,345 @@
+/**
+ * Domain registration lookup over RDAP (RFC 9082/9083), the JSON successor
+ * of WHOIS.
+ *
+ * 1. The IANA bootstrap registry (`data.iana.org/rdap/dns.json`) maps each TLD
+ *    to its registry's RDAP base URL. It is cached in memory (default 24 h).
+ *    Only `https://` bases are used.
+ * 2. If the bootstrap is unavailable, lacks the TLD or the registry server
+ *    fails, we fall back to the public redirector `rdap.org`.
+ * 3. Last resort: the 60s API WHOIS endpoint (`60s.viki.moe/v2/whois`), which
+ *    also covers TLDs without RDAP such as `.cn`. Registrant personal data in
+ *    that answer is ignored on purpose.
+ * 4. HTTP 404 from the TLD's own registry is authoritative ("not
+ *    registered"). A 404 from rdap.org is not (the TLD may simply have no
+ *    RDAP), so the WHOIS fallback still runs.
+ * 5. For names with more than two labels (e.g. `www.example.com`) that are
+ *    not registered we retry once with the leftmost label removed.
+ */
+import { NettoolsError } from './errors.js';
+export const IANA_RDAP_BOOTSTRAP_URL = 'https://data.iana.org/rdap/dns.json';
+export const RDAP_FALLBACK_BASE_URL = 'https://rdap.org/';
+export const WHOIS_FALLBACK_URL = 'https://60s.viki.moe/v2/whois';
+export const DEFAULT_BOOTSTRAP_TTL_MS = 24 * 60 * 60 * 1000;
+const RDAP_ACCEPT = 'application/rdap+json, application/json;q=0.9';
+export class RdapClient {
+    #http;
+    #bootstrapTtlMs;
+    #cache;
+    constructor(http, bootstrapTtlMs = DEFAULT_BOOTSTRAP_TTL_MS) {
+        this.#http = http;
+        this.#bootstrapTtlMs = bootstrapTtlMs;
+    }
+    async lookup(domain, signal) {
+        const first = await this.#lookupExact(domain, signal);
+        if (first.registered) {
+            return first;
+        }
+        const labels = domain.split('.');
+        if (labels.length <= 2) {
+            return first;
+        }
+        const parent = labels.slice(1).join('.');
+        const second = await this.#lookupExact(parent, signal);
+        return second.registered ? second : first;
+    }
+    async #lookupExact(domain, signal) {
+        const failures = [];
+        const registryBases = await this.#registryBases(domain, signal);
+        for (const base of registryBases) {
+            try {
+                return await this.#query(base, domain, signal);
+            }
+            catch (error) {
+                rethrowIfAborted(error);
+                failures.push(error);
+            }
+        }
+        let rdapOrgAnswer;
+        try {
+            rdapOrgAnswer = await this.#query(RDAP_FALLBACK_BASE_URL, domain, signal);
+            if (rdapOrgAnswer.registered) {
+                return rdapOrgAnswer;
+            }
+        }
+        catch (error) {
+            rethrowIfAborted(error);
+            failures.push(error);
+        }
+        try {
+            return await this.#queryWhoisFallback(domain, signal);
+        }
+        catch (error) {
+            rethrowIfAborted(error);
+            failures.push(error);
+        }
+        if (rdapOrgAnswer) {
+            return rdapOrgAnswer;
+        }
+        const lastError = failures[failures.length - 1];
+        if (lastError instanceof NettoolsError) {
+            throw lastError;
+        }
+        throw new NettoolsError('network', 'RDAP / WHOIS 查询失败', { cause: lastError });
+    }
+    async #queryWhoisFallback(domain, signal) {
+        const url = new URL(WHOIS_FALLBACK_URL);
+        url.searchParams.set('domain', domain);
+        const response = await this.#http.fetchJson(url, {
+            provider: 'WHOIS (60s.viki.moe)',
+            ...(signal ? { signal } : {}),
+        });
+        return parseWhoisFallback(response.body, domain, url.hostname);
+    }
+    async #query(base, domain, signal) {
+        const baseUrl = new URL(base.endsWith('/') ? base : `${base}/`);
+        const url = new URL(`domain/${encodeURIComponent(domain)}`, baseUrl);
+        const response = await this.#http.fetchJson(url, {
+            provider: `RDAP (${baseUrl.hostname})`,
+            accept: RDAP_ACCEPT,
+            passStatuses: [404],
+            ...(signal ? { signal } : {}),
+        });
+        if (response.status === 404) {
+            return unregistered(domain, baseUrl.hostname);
+        }
+        return parseRdapDomain(response.body, domain, baseUrl.hostname);
+    }
+    /** RDAP base URLs for the domain's TLD; empty when the bootstrap is unavailable. */
+    async #registryBases(domain, signal) {
+        const servers = await this.#bootstrap(signal);
+        if (!servers) {
+            return [];
+        }
+        const labels = domain.split('.');
+        for (let index = 0; index < labels.length; index += 1) {
+            const suffix = labels.slice(index).join('.');
+            const match = servers.get(suffix);
+            if (match) {
+                return match;
+            }
+        }
+        return [];
+    }
+    async #bootstrap(signal) {
+        const now = this.#http.dependencies.now();
+        if (this.#cache && now - this.#cache.fetchedAt < this.#bootstrapTtlMs) {
+            return this.#cache.servers;
+        }
+        try {
+            const response = await this.#http.fetchJson(new URL(IANA_RDAP_BOOTSTRAP_URL), {
+                provider: 'IANA RDAP bootstrap',
+                ...(signal ? { signal } : {}),
+            });
+            const servers = parseBootstrap(response.body);
+            this.#cache = { fetchedAt: now, servers };
+            return servers;
+        }
+        catch (error) {
+            if (error instanceof NettoolsError && error.kind === 'aborted') {
+                throw error;
+            }
+            // Stale data beats no data; otherwise fall back to rdap.org.
+            return this.#cache?.servers;
+        }
+    }
+}
+/** Parse the IANA bootstrap file into suffix → https base URLs. */
+export function parseBootstrap(body) {
+    const servers = new Map();
+    if (!isRecord(body) || !Array.isArray(body.services)) {
+        throw new NettoolsError('malformed', 'IANA RDAP 引导数据格式异常');
+    }
+    for (const service of body.services) {
+        if (!Array.isArray(service) || !Array.isArray(service[0]) || !Array.isArray(service[1])) {
+            continue;
+        }
+        const urls = service[1].filter((value) => typeof value === 'string' && value.startsWith('https://'));
+        if (urls.length === 0) {
+            continue;
+        }
+        for (const suffix of service[0]) {
+            if (typeof suffix === 'string' && suffix.length > 0) {
+                servers.set(suffix.toLowerCase(), Object.freeze(urls));
+            }
+        }
+    }
+    return servers;
+}
+export function parseRdapDomain(body, domain, source) {
+    if (!isRecord(body)) {
+        throw new NettoolsError('malformed', 'RDAP 返回了无法识别的数据');
+    }
+    if (body.objectClassName !== undefined && body.objectClassName !== 'domain') {
+        throw new NettoolsError('malformed', 'RDAP 返回的不是域名对象');
+    }
+    const name = typeof body.ldhName === 'string' ? body.ldhName.toLowerCase() : domain;
+    const events = Array.isArray(body.events) ? body.events : [];
+    const eventDate = (action) => {
+        for (const event of events) {
+            if (isRecord(event) && event.eventAction === action && typeof event.eventDate === 'string') {
+                return event.eventDate;
+            }
+        }
+        return undefined;
+    };
+    const statuses = Array.isArray(body.status)
+        ? body.status.filter((value) => typeof value === 'string')
+        : [];
+    const nameservers = [];
+    if (Array.isArray(body.nameservers)) {
+        for (const nameserver of body.nameservers) {
+            if (isRecord(nameserver) && typeof nameserver.ldhName === 'string') {
+                nameservers.push(nameserver.ldhName.toLowerCase());
+            }
+        }
+    }
+    const secureDns = isRecord(body.secureDNS) ? body.secureDNS : undefined;
+    const dnssec = typeof secureDns?.delegationSigned === 'boolean' ? secureDns.delegationSigned : undefined;
+    return Object.freeze({
+        domain: name,
+        registered: true,
+        registrar: findRegistrarName(body.entities),
+        statuses: Object.freeze(statuses),
+        createdAt: eventDate('registration'),
+        expiresAt: eventDate('expiration'),
+        updatedAt: eventDate('last changed'),
+        nameservers: Object.freeze(nameservers),
+        dnssec,
+        source,
+    });
+}
+/**
+ * Parse the 60s API WHOIS answer. Only registry-level facts are kept;
+ * registrant name / organisation / e-mail are deliberately dropped.
+ */
+export function parseWhoisFallback(body, domain, source) {
+    if (!isRecord(body) || !isRecord(body.data)) {
+        throw new NettoolsError('malformed', 'WHOIS 服务返回了无法识别的数据');
+    }
+    if (typeof body.code === 'number' && body.code !== 200 && body.code !== 0) {
+        throw new NettoolsError('http', `WHOIS 服务返回错误 ${body.code}`);
+    }
+    const data = body.data;
+    const text = (value) => typeof value === 'string' && value.trim() ? value.trim() : undefined;
+    const statuses = Array.isArray(data.status)
+        ? data.status.filter((value) => typeof value === 'string')
+        : [];
+    const nameservers = Array.isArray(data.nameservers)
+        ? data.nameservers.filter((value) => typeof value === 'string').map((value) => value.toLowerCase())
+        : [];
+    const registrar = text(data.registrar);
+    const createdAt = epochToIso(data.created_at) ?? text(data.created);
+    const expiresAt = epochToIso(data.expires_at) ?? text(data.expires);
+    const updatedAt = epochToIso(data.updated_at) ?? text(data.updated);
+    const registered = Boolean(registrar || createdAt || expiresAt || statuses.length > 0 || nameservers.length > 0);
+    if (!registered) {
+        return unregistered(domain, source);
+    }
+    const dnssecText = text(data.dnssec)?.toLowerCase();
+    const dnssec = dnssecText === undefined ? undefined : dnssecText !== 'unsigned' && dnssecText !== 'no';
+    return Object.freeze({
+        domain: (text(data.domain) ?? domain).toLowerCase(),
+        registered: true,
+        registrar,
+        statuses: Object.freeze(statuses),
+        createdAt,
+        expiresAt,
+        updatedAt,
+        nameservers: Object.freeze(nameservers),
+        dnssec,
+        source,
+    });
+}
+function epochToIso(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
+        return undefined;
+    }
+    return new Date(value).toISOString();
+}
+function rethrowIfAborted(error) {
+    if (error instanceof NettoolsError && error.kind === 'aborted') {
+        throw error;
+    }
+}
+function findRegistrarName(entities) {
+    if (!Array.isArray(entities)) {
+        return undefined;
+    }
+    for (const entity of entities) {
+        if (!isRecord(entity) || !Array.isArray(entity.roles) || !entity.roles.includes('registrar')) {
+            continue;
+        }
+        const fullName = readVcardFullName(entity.vcardArray);
+        if (fullName) {
+            return fullName;
+        }
+        if (typeof entity.handle === 'string') {
+            return entity.handle;
+        }
+    }
+    return undefined;
+}
+/** jCard: ["vcard", [["fn", {}, "text", "Name"], …]] */
+function readVcardFullName(vcard) {
+    if (!Array.isArray(vcard) || !Array.isArray(vcard[1])) {
+        return undefined;
+    }
+    for (const property of vcard[1]) {
+        if (Array.isArray(property) && property[0] === 'fn' && typeof property[3] === 'string' && property[3].trim()) {
+            return property[3].trim();
+        }
+    }
+    return undefined;
+}
+function unregistered(domain, source) {
+    return Object.freeze({
+        domain,
+        registered: false,
+        registrar: undefined,
+        statuses: Object.freeze([]),
+        createdAt: undefined,
+        expiresAt: undefined,
+        updatedAt: undefined,
+        nameservers: Object.freeze([]),
+        dnssec: undefined,
+        source,
+    });
+}
+export function formatWhoisRecord(record) {
+    if (!record.registered) {
+        return `📇 ${record.domain}\n未查询到注册信息（可能未注册，或该后缀未提供 RDAP）`;
+    }
+    const lines = [`📇 ${record.domain} 注册信息（来源：${record.source}）`];
+    if (record.registrar) {
+        lines.push(`注册商：${record.registrar}`);
+    }
+    if (record.createdAt) {
+        lines.push(`注册时间：${formatDate(record.createdAt)}`);
+    }
+    if (record.expiresAt) {
+        lines.push(`到期时间：${formatDate(record.expiresAt)}`);
+    }
+    if (record.updatedAt) {
+        lines.push(`最近更新：${formatDate(record.updatedAt)}`);
+    }
+    if (record.statuses.length > 0) {
+        lines.push(`状态：${record.statuses.join(', ')}`);
+    }
+    if (record.nameservers.length > 0) {
+        lines.push(`DNS 服务器：${record.nameservers.join(', ')}`);
+    }
+    if (record.dnssec !== undefined) {
+        lines.push(`DNSSEC：${record.dnssec ? '已启用' : '未启用'}`);
+    }
+    return lines.join('\n');
+}
+/** Keep the date part of an ISO timestamp (UTC); leave anything else untouched. */
+function formatDate(value) {
+    const match = /^(\d{4}-\d{2}-\d{2})T/u.exec(value);
+    return match ? `${match[1]} (UTC)` : value;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=whois.js.map

package/lib/whois.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whois.js","sourceRoot":"","sources":["../src/whois.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,qCAAqC,CAAC;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,WAAW,GAAG,+CAA+C,CAAC;AAoBpE,MAAM,OAAO,UAAU;IACZ,KAAK,CAAa;IAClB,eAAe,CAAS;IACjC,MAAM,CAA6B;IAEnC,YAAY,IAAgB,EAAE,cAAc,GAAG,wBAAwB;QACrE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,MAAoB;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,MAAoB;QACrD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,aAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1E,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;gBAC7B,OAAO,aAAa,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,SAAS,YAAY,aAAa,EAAE,CAAC;YACvC,MAAM,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,MAAoB;QAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;YAC/C,QAAQ,EAAE,sBAAsB;YAChC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAc,EAAE,MAAoB;QAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;YAC/C,QAAQ,EAAE,SAAS,OAAO,CAAC,QAAQ,GAAG;YACtC,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,CAAC,GAAG,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,MAAoB;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAoB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE;gBAC5E,QAAQ,EAAE,qBAAqB;gBAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/D,MAAM,KAAK,CAAC;YACd,CAAC;YACD,6DAA6D;YAC7D,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAC5B,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAC/F,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,MAAc,EAAE,MAAc;IAC3E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC5E,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACpF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAG,CAAC,MAAc,EAAsB,EAAE;QACvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC3F,OAAO,KAAK,CAAC,SAAS,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,SAAS,EAAE,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IACzG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,SAAS,EAAE,SAAS,CAAC,cAAc,CAAC;QACpC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC;QAClC,SAAS,EAAE,SAAS,CAAC,cAAc,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,MAAc,EAAE,MAAc;IAC9E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,KAAc,EAAsB,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7H,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,IAAI,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,IAAI,CAAC;IACvG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE;QACnD,UAAU,EAAE,IAAI;QAChB,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,SAAS;QACT,SAAS;QACT,SAAS;QACT,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiB;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wDAAwD;AACxD,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7G,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,MAAc;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,SAAS;QACjB,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,MAAM,MAAM,CAAC,MAAM,gCAAgC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["/**\n * Domain registration lookup over RDAP (RFC 9082/9083), the JSON successor\n * of WHOIS.\n *\n * 1. The IANA bootstrap registry (`data.iana.org/rdap/dns.json`) maps each TLD\n *    to its registry's RDAP base URL. It is cached in memory (default 24 h).\n *    Only `https://` bases are used.\n * 2. If the bootstrap is unavailable, lacks the TLD or the registry server\n *    fails, we fall back to the public redirector `rdap.org`.\n * 3. Last resort: the 60s API WHOIS endpoint (`60s.viki.moe/v2/whois`), which\n *    also covers TLDs without RDAP such as `.cn`. Registrant personal data in\n *    that answer is ignored on purpose.\n * 4. HTTP 404 from the TLD's own registry is authoritative (\"not\n *    registered\"). A 404 from rdap.org is not (the TLD may simply have no\n *    RDAP), so the WHOIS fallback still runs.\n * 5. For names with more than two labels (e.g. `www.example.com`) that are\n *    not registered we retry once with the leftmost label removed.\n */\nimport { NettoolsError } from './errors.js';\nimport type { HttpClient } from './http.js';\n\nexport const IANA_RDAP_BOOTSTRAP_URL = 'https://data.iana.org/rdap/dns.json';\nexport const RDAP_FALLBACK_BASE_URL = 'https://rdap.org/';\nexport const WHOIS_FALLBACK_URL = 'https://60s.viki.moe/v2/whois';\nexport const DEFAULT_BOOTSTRAP_TTL_MS = 24 * 60 * 60 * 1000;\nconst RDAP_ACCEPT = 'application/rdap+json, application/json;q=0.9';\n\nexport interface WhoisRecord {\n  readonly domain: string;\n  readonly registered: boolean;\n  readonly registrar: string | undefined;\n  readonly statuses: readonly string[];\n  readonly createdAt: string | undefined;\n  readonly expiresAt: string | undefined;\n  readonly updatedAt: string | undefined;\n  readonly nameservers: readonly string[];\n  readonly dnssec: boolean | undefined;\n  readonly source: string;\n}\n\ninterface BootstrapCache {\n  readonly fetchedAt: number;\n  readonly servers: ReadonlyMap<string, readonly string[]>;\n}\n\nexport class RdapClient {\n  readonly #http: HttpClient;\n  readonly #bootstrapTtlMs: number;\n  #cache: BootstrapCache | undefined;\n\n  constructor(http: HttpClient, bootstrapTtlMs = DEFAULT_BOOTSTRAP_TTL_MS) {\n    this.#http = http;\n    this.#bootstrapTtlMs = bootstrapTtlMs;\n  }\n\n  async lookup(domain: string, signal?: AbortSignal): Promise<WhoisRecord> {\n    const first = await this.#lookupExact(domain, signal);\n    if (first.registered) {\n      return first;\n    }\n    const labels = domain.split('.');\n    if (labels.length <= 2) {\n      return first;\n    }\n    const parent = labels.slice(1).join('.');\n    const second = await this.#lookupExact(parent, signal);\n    return second.registered ? second : first;\n  }\n\n  async #lookupExact(domain: string, signal?: AbortSignal): Promise<WhoisRecord> {\n    const failures: unknown[] = [];\n    const registryBases = await this.#registryBases(domain, signal);\n    for (const base of registryBases) {\n      try {\n        return await this.#query(base, domain, signal);\n      } catch (error) {\n        rethrowIfAborted(error);\n        failures.push(error);\n      }\n    }\n\n    let rdapOrgAnswer: WhoisRecord | undefined;\n    try {\n      rdapOrgAnswer = await this.#query(RDAP_FALLBACK_BASE_URL, domain, signal);\n      if (rdapOrgAnswer.registered) {\n        return rdapOrgAnswer;\n      }\n    } catch (error) {\n      rethrowIfAborted(error);\n      failures.push(error);\n    }\n\n    try {\n      return await this.#queryWhoisFallback(domain, signal);\n    } catch (error) {\n      rethrowIfAborted(error);\n      failures.push(error);\n    }\n\n    if (rdapOrgAnswer) {\n      return rdapOrgAnswer;\n    }\n    const lastError = failures[failures.length - 1];\n    if (lastError instanceof NettoolsError) {\n      throw lastError;\n    }\n    throw new NettoolsError('network', 'RDAP / WHOIS 查询失败', { cause: lastError });\n  }\n\n  async #queryWhoisFallback(domain: string, signal?: AbortSignal): Promise<WhoisRecord> {\n    const url = new URL(WHOIS_FALLBACK_URL);\n    url.searchParams.set('domain', domain);\n    const response = await this.#http.fetchJson(url, {\n      provider: 'WHOIS (60s.viki.moe)',\n      ...(signal ? { signal } : {}),\n    });\n    return parseWhoisFallback(response.body, domain, url.hostname);\n  }\n\n  async #query(base: string, domain: string, signal?: AbortSignal): Promise<WhoisRecord> {\n    const baseUrl = new URL(base.endsWith('/') ? base : `${base}/`);\n    const url = new URL(`domain/${encodeURIComponent(domain)}`, baseUrl);\n    const response = await this.#http.fetchJson(url, {\n      provider: `RDAP (${baseUrl.hostname})`,\n      accept: RDAP_ACCEPT,\n      passStatuses: [404],\n      ...(signal ? { signal } : {}),\n    });\n    if (response.status === 404) {\n      return unregistered(domain, baseUrl.hostname);\n    }\n    return parseRdapDomain(response.body, domain, baseUrl.hostname);\n  }\n\n  /** RDAP base URLs for the domain's TLD; empty when the bootstrap is unavailable. */\n  async #registryBases(domain: string, signal?: AbortSignal): Promise<readonly string[]> {\n    const servers = await this.#bootstrap(signal);\n    if (!servers) {\n      return [];\n    }\n    const labels = domain.split('.');\n    for (let index = 0; index < labels.length; index += 1) {\n      const suffix = labels.slice(index).join('.');\n      const match = servers.get(suffix);\n      if (match) {\n        return match;\n      }\n    }\n    return [];\n  }\n\n  async #bootstrap(signal?: AbortSignal): Promise<ReadonlyMap<string, readonly string[]> | undefined> {\n    const now = this.#http.dependencies.now();\n    if (this.#cache && now - this.#cache.fetchedAt < this.#bootstrapTtlMs) {\n      return this.#cache.servers;\n    }\n    try {\n      const response = await this.#http.fetchJson(new URL(IANA_RDAP_BOOTSTRAP_URL), {\n        provider: 'IANA RDAP bootstrap',\n        ...(signal ? { signal } : {}),\n      });\n      const servers = parseBootstrap(response.body);\n      this.#cache = { fetchedAt: now, servers };\n      return servers;\n    } catch (error) {\n      if (error instanceof NettoolsError && error.kind === 'aborted') {\n        throw error;\n      }\n      // Stale data beats no data; otherwise fall back to rdap.org.\n      return this.#cache?.servers;\n    }\n  }\n}\n\n/** Parse the IANA bootstrap file into suffix → https base URLs. */\nexport function parseBootstrap(body: unknown): ReadonlyMap<string, readonly string[]> {\n  const servers = new Map<string, readonly string[]>();\n  if (!isRecord(body) || !Array.isArray(body.services)) {\n    throw new NettoolsError('malformed', 'IANA RDAP 引导数据格式异常');\n  }\n  for (const service of body.services) {\n    if (!Array.isArray(service) || !Array.isArray(service[0]) || !Array.isArray(service[1])) {\n      continue;\n    }\n    const urls = service[1].filter(\n      (value: unknown): value is string => typeof value === 'string' && value.startsWith('https://'),\n    );\n    if (urls.length === 0) {\n      continue;\n    }\n    for (const suffix of service[0]) {\n      if (typeof suffix === 'string' && suffix.length > 0) {\n        servers.set(suffix.toLowerCase(), Object.freeze(urls));\n      }\n    }\n  }\n  return servers;\n}\n\nexport function parseRdapDomain(body: unknown, domain: string, source: string): WhoisRecord {\n  if (!isRecord(body)) {\n    throw new NettoolsError('malformed', 'RDAP 返回了无法识别的数据');\n  }\n  if (body.objectClassName !== undefined && body.objectClassName !== 'domain') {\n    throw new NettoolsError('malformed', 'RDAP 返回的不是域名对象');\n  }\n  const name = typeof body.ldhName === 'string' ? body.ldhName.toLowerCase() : domain;\n  const events = Array.isArray(body.events) ? body.events : [];\n  const eventDate = (action: string): string | undefined => {\n    for (const event of events) {\n      if (isRecord(event) && event.eventAction === action && typeof event.eventDate === 'string') {\n        return event.eventDate;\n      }\n    }\n    return undefined;\n  };\n  const statuses = Array.isArray(body.status)\n    ? body.status.filter((value: unknown): value is string => typeof value === 'string')\n    : [];\n  const nameservers: string[] = [];\n  if (Array.isArray(body.nameservers)) {\n    for (const nameserver of body.nameservers) {\n      if (isRecord(nameserver) && typeof nameserver.ldhName === 'string') {\n        nameservers.push(nameserver.ldhName.toLowerCase());\n      }\n    }\n  }\n  const secureDns = isRecord(body.secureDNS) ? body.secureDNS : undefined;\n  const dnssec = typeof secureDns?.delegationSigned === 'boolean' ? secureDns.delegationSigned : undefined;\n  return Object.freeze({\n    domain: name,\n    registered: true,\n    registrar: findRegistrarName(body.entities),\n    statuses: Object.freeze(statuses),\n    createdAt: eventDate('registration'),\n    expiresAt: eventDate('expiration'),\n    updatedAt: eventDate('last changed'),\n    nameservers: Object.freeze(nameservers),\n    dnssec,\n    source,\n  });\n}\n\n/**\n * Parse the 60s API WHOIS answer. Only registry-level facts are kept;\n * registrant name / organisation / e-mail are deliberately dropped.\n */\nexport function parseWhoisFallback(body: unknown, domain: string, source: string): WhoisRecord {\n  if (!isRecord(body) || !isRecord(body.data)) {\n    throw new NettoolsError('malformed', 'WHOIS 服务返回了无法识别的数据');\n  }\n  if (typeof body.code === 'number' && body.code !== 200 && body.code !== 0) {\n    throw new NettoolsError('http', `WHOIS 服务返回错误 ${body.code}`);\n  }\n  const data = body.data;\n  const text = (value: unknown): string | undefined =>\n    typeof value === 'string' && value.trim() ? value.trim() : undefined;\n  const statuses = Array.isArray(data.status)\n    ? data.status.filter((value: unknown): value is string => typeof value === 'string')\n    : [];\n  const nameservers = Array.isArray(data.nameservers)\n    ? data.nameservers.filter((value: unknown): value is string => typeof value === 'string').map((value) => value.toLowerCase())\n    : [];\n  const registrar = text(data.registrar);\n  const createdAt = epochToIso(data.created_at) ?? text(data.created);\n  const expiresAt = epochToIso(data.expires_at) ?? text(data.expires);\n  const updatedAt = epochToIso(data.updated_at) ?? text(data.updated);\n  const registered = Boolean(registrar || createdAt || expiresAt || statuses.length > 0 || nameservers.length > 0);\n  if (!registered) {\n    return unregistered(domain, source);\n  }\n  const dnssecText = text(data.dnssec)?.toLowerCase();\n  const dnssec = dnssecText === undefined ? undefined : dnssecText !== 'unsigned' && dnssecText !== 'no';\n  return Object.freeze({\n    domain: (text(data.domain) ?? domain).toLowerCase(),\n    registered: true,\n    registrar,\n    statuses: Object.freeze(statuses),\n    createdAt,\n    expiresAt,\n    updatedAt,\n    nameservers: Object.freeze(nameservers),\n    dnssec,\n    source,\n  });\n}\n\nfunction epochToIso(value: unknown): string | undefined {\n  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {\n    return undefined;\n  }\n  return new Date(value).toISOString();\n}\n\nfunction rethrowIfAborted(error: unknown): void {\n  if (error instanceof NettoolsError && error.kind === 'aborted') {\n    throw error;\n  }\n}\n\nfunction findRegistrarName(entities: unknown): string | undefined {\n  if (!Array.isArray(entities)) {\n    return undefined;\n  }\n  for (const entity of entities) {\n    if (!isRecord(entity) || !Array.isArray(entity.roles) || !entity.roles.includes('registrar')) {\n      continue;\n    }\n    const fullName = readVcardFullName(entity.vcardArray);\n    if (fullName) {\n      return fullName;\n    }\n    if (typeof entity.handle === 'string') {\n      return entity.handle;\n    }\n  }\n  return undefined;\n}\n\n/** jCard: [\"vcard\", [[\"fn\", {}, \"text\", \"Name\"], …]] */\nfunction readVcardFullName(vcard: unknown): string | undefined {\n  if (!Array.isArray(vcard) || !Array.isArray(vcard[1])) {\n    return undefined;\n  }\n  for (const property of vcard[1]) {\n    if (Array.isArray(property) && property[0] === 'fn' && typeof property[3] === 'string' && property[3].trim()) {\n      return property[3].trim();\n    }\n  }\n  return undefined;\n}\n\nfunction unregistered(domain: string, source: string): WhoisRecord {\n  return Object.freeze({\n    domain,\n    registered: false,\n    registrar: undefined,\n    statuses: Object.freeze([]),\n    createdAt: undefined,\n    expiresAt: undefined,\n    updatedAt: undefined,\n    nameservers: Object.freeze([]),\n    dnssec: undefined,\n    source,\n  });\n}\n\nexport function formatWhoisRecord(record: WhoisRecord): string {\n  if (!record.registered) {\n    return `📇 ${record.domain}\\n未查询到注册信息（可能未注册，或该后缀未提供 RDAP）`;\n  }\n  const lines = [`📇 ${record.domain} 注册信息（来源：${record.source}）`];\n  if (record.registrar) {\n    lines.push(`注册商：${record.registrar}`);\n  }\n  if (record.createdAt) {\n    lines.push(`注册时间：${formatDate(record.createdAt)}`);\n  }\n  if (record.expiresAt) {\n    lines.push(`到期时间：${formatDate(record.expiresAt)}`);\n  }\n  if (record.updatedAt) {\n    lines.push(`最近更新：${formatDate(record.updatedAt)}`);\n  }\n  if (record.statuses.length > 0) {\n    lines.push(`状态：${record.statuses.join(', ')}`);\n  }\n  if (record.nameservers.length > 0) {\n    lines.push(`DNS 服务器：${record.nameservers.join(', ')}`);\n  }\n  if (record.dnssec !== undefined) {\n    lines.push(`DNSSEC：${record.dnssec ? '已启用' : '未启用'}`);\n  }\n  return lines.join('\\n');\n}\n\n/** Keep the date part of an ISO timestamp (UTC); leave anything else untouched. */\nfunction formatDate(value: string): string {\n  const match = /^(\\d{4}-\\d{2}-\\d{2})T/u.exec(value);\n  return match ? `${match[1]} (UTC)` : value;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n"]}

package/package.json

@@ -1,6 +1,108 @@
 {
   "name": "@zhin.js/plugin-nettools",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "Network tools plugin for Zhin.js — multi-region ping, RDAP whois, DNS-over-HTTPS lookup and domain price comparison (Plugin Runtime)",
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "import": "./lib/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "plugin.js",
+    "schema.json",
+    "commands",
+    "!commands/**/*.ts",
+    "skills",
+    "!skills/**/*.ts",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "keywords": [
+    "zhin",
+    "zhin.js",
+    "bot",
+    "plugin",
+    "ping",
+    "whois",
+    "rdap",
+    "dns",
+    "doh",
+    "domain"
+  ],
+  "author": {
+    "name": "lc-cn",
+    "email": "admin@liucl.cn",
+    "url": "https://github.com/lc-cn"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@zhin.js/skill": "1.1.7",
+    "@zhin.js/tool": "1.1.7"
+  },
+  "devDependencies": {
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10",
+    "zod": "^4.4.3",
+    "zhin.js": "1.1.11",
+    "@zhin.js/command": "1.1.8"
+  },
+  "peerDependencies": {
+    "zod": "^4.0.0",
+    "@zhin.js/command": "^1.1.8",
+    "zhin.js": "^1.1.11"
+  },
+  "peerDependenciesMeta": {
+    "@zhin.js/command": {
+      "optional": true
+    },
+    "zod": {
+      "optional": true
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zhinjs/zhin.git",
+    "directory": "plugins/utils/nettools"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "zhin": {
+    "protocol": 1,
+    "type": "plugin",
+    "entry": "./plugin.js",
+    "engine": "^1.0.0",
+    "runtime": "trusted",
+    "features": [
+      {
+        "package": "@zhin.js/command",
+        "api": "^1.0.0"
+      },
+      {
+        "package": "@zhin.js/tool",
+        "api": "^1.0.0"
+      },
+      {
+        "package": "@zhin.js/skill",
+        "api": "^1.0.0"
+      }
+    ],
+    "plugins": []
+  },
+  "scripts": {
+    "build": "tsc",
+    "check": "tsc -p tsconfig.check.json",
+    "clean": "rimraf lib",
+    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/utils/nettools/tests"
+  }
 }

package/plugin.js

@@ -0,0 +1,14 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { definePlugin } from 'zhin.js';
+import { nettoolsServiceToken } from "./lib/runtime.js";
+import { NettoolsService } from "./lib/service.js";
+export default definePlugin({
+    name: 'nettools',
+    metadata: {
+        displayName: '网络工具',
+    },
+    setup(context) {
+        const service = new NettoolsService({ config: context.config.get() });
+        context.resources.provide(nettoolsServiceToken, service);
+    },
+});

package/schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "cooldownSeconds": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 3600,
+      "default": 10,
+      "description": "Per-user cooldown in seconds, shared by all nettools commands and tools (0 disables)"
+    },
+    "requestTimeoutMs": {
+      "type": "integer",
+      "minimum": 1000,
+      "maximum": 30000,
+      "default": 8000,
+      "description": "Per-attempt timeout for each external HTTP request, in milliseconds"
+    },
+    "maxRetries": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 5,
+      "default": 2,
+      "description": "Retries for transient failures (network errors, timeouts, 429, 5xx) with exponential backoff and jitter"
+    },
+    "pingMaxNodes": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 10,
+      "default": 4,
+      "description": "Number of check-host.net probe nodes used by ping"
+    },
+    "pingPollIntervalMs": {
+      "type": "integer",
+      "minimum": 500,
+      "maximum": 10000,
+      "default": 2000,
+      "description": "Wait between ping result polls, in milliseconds"
+    },
+    "pingMaxPolls": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 10,
+      "default": 5,
+      "description": "Maximum number of ping result polls before reporting partial results"
+    },
+    "dohProviders": {
+      "type": "array",
+      "items": { "type": "string", "enum": ["cloudflare", "alidns", "google"] },
+      "default": ["cloudflare", "alidns", "google"],
+      "description": "DNS-over-HTTPS providers in fallback order"
+    },
+    "priceListLimit": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 20,
+      "default": 8,
+      "description": "Number of registrars shown in a domain price comparison"
+    }
+  }
+}

package/skills/nettools/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: nettools
+description: >-
+  网络诊断与域名信息能力：多地 Ping、RDAP whois、DNS 查询、域名价格比价。
+  用户问「某网站能不能访问 / 延迟多少」「这个域名什么时候到期」「查一下 MX/TXT 记录」
+  「.com 哪家注册便宜」时使用。
+keywords:
+  - ping
+  - whois
+  - dns
+  - 域名
+  - 解析
+  - 延迟
+  - 域名价格
+tags:
+  - network
+  - utility
+tools:
+  - net_ping
+  - whois_lookup
+  - dns_lookup
+  - domain_price
+---
+
+# 网络工具技能
+
+| 工具 | 用途 | 参数 |
+|------|------|------|
+| `net_ping` | 多地区 Ping（check-host.net） | `host`：公网域名或 IP |
+| `whois_lookup` | 域名注册信息（RDAP） | `domain` |
+| `dns_lookup` | DNS 查询（DoH） | `name`，`type`（默认 A） |
+| `domain_price` | 域名价格比价（nazhumi.com） | `suffix`，`order`（register/renew/transfer） |
+
+**Example:**
+```
+用户: github.com 的邮件服务器是哪些？
+→ dns_lookup(name="github.com", type="MX")
+```
+
+## 注意
+
+- 内网、回环、链路本地、组播、云元数据地址以及解析到这些地址的域名会被拒绝，直接把拒绝原因告诉用户即可，不要换写法重试。
+- 每个用户有冷却时间；遇到「操作太频繁」时请让用户稍后再试，不要连续重复调用。
+- 价格数据来自第三方聚合，提醒用户以注册商官网为准。

package/skills/nettools/tools/dns_lookup/index.js

@@ -0,0 +1,20 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { defineAgentTool } from '@zhin.js/tool';
+import { z } from 'zod';
+import { toolCallerKey } from "../../../../lib/cooldown.js";
+import { SUPPORTED_DNS_TYPES } from "../../../../lib/dns.js";
+import { nettoolsServiceToken } from "../../../../lib/runtime.js";
+export default defineAgentTool({
+    description: `通过 DNS-over-HTTPS 查询 DNS 记录。type 可选 ${SUPPORTED_DNS_TYPES.join('/')}，默认 A；PTR 时 name 可为 IP。`,
+    inputSchema: z.object({
+        name: z.string().min(1).max(255),
+        type: z.string().max(10).optional(),
+    }),
+    keywords: ['dns', '解析', 'nslookup', 'dig', 'mx', 'txt', 'cname'],
+    tags: ['网络', '域名'],
+    async execute({ name, type }, context) {
+        const service = context.use(nettoolsServiceToken);
+        const callerKey = toolCallerKey(context);
+        return service.run(() => service.dns(name, type, callerKey, context.signal));
+    },
+});