dkimkit 0.0.0-stage → 0.7.0

package/README.md

@@ -1,3 +1,162 @@
-# Temporary Holding Version
+# DKIMkit
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Authenticate a sending domain with **SendGrid, Postmark, Mailgun or Amazon SES**, and optionally set up inbound email, with one command or from a local web interface. The tool gets the records from your email provider, writes them to your DNS host, waits until they're live, has the provider verify them, and registers the inbound webhook.
+
+| Provider | Records | Inbound email |
+|---|---|---|
+| SendGrid | 3 CNAMEs | Inbound Parse, at `parse.<domain>` |
+| Postmark | DKIM TXT + Return-Path CNAME | One inbound domain per Postmark server |
+| Mailgun | SPF + DKIM TXT, tracking CNAME | A route, on the Mailgun domain itself (send from a subdomain like `mg.example.com`) |
+| Amazon SES | 3 DKIM CNAMEs + MAIL FROM MX and SPF | Not supported yet |
+
+When a provider needs an SPF record and the name already has one, the provider is added to the existing record. Two SPF records on one name would make SPF fail.
+
+```bash
+export SENDGRID_API_KEY=SG.xxxx
+export CLOUDFLARE_API_TOKEN=xxxx      # or use --dns route53, or --dns manual for copy-paste records
+
+npx dkimkit --domain example.com \
+  --inbound-url https://api.example.com/webhooks/inbound-email
+```
+
+```
+✔ SendGrid domain created: example.com (id 12345678)
+
+DNS plan (cloudflare):
+  + create   CNAME em1234.example.com → u1234.wl.sendgrid.net
+  + create   CNAME s1._domainkey.example.com → s1.domainkey.u1234.wl.sendgrid.net
+  + create   CNAME s2._domainkey.example.com → s2.domainkey.u1234.wl.sendgrid.net
+  + create   MX parse.example.com → 10 mx.sendgrid.net
+
+Apply these changes to cloudflare? [y/N] y
+✔ Wrote 4 DNS record(s)
+✔ All 4 DNS records are live
+✔ SendGrid verified the domain
+✔ Inbound parse created: parse.example.com → https://api.example.com/webhooks/inbound-email
+
+example.com is authenticated with SendGrid.
+```
+
+## Web interface
+
+```bash
+npx dkimkit ui            # opens http://127.0.0.1:4545/?token=…
+```
+
+The web interface walks through the same flow: enter the domain and credentials, preview the exact DNS changes (with conflicts highlighted), then apply them while each step updates live. Credentials typed into the page are used for that request only and never stored. Leave a field blank to use the environment variable.
+
+The server listens on 127.0.0.1 only. The one-time link swaps its token for an `HttpOnly; SameSite=Strict` cookie. Requests whose `Host` header isn't localhost are refused, which blocks DNS rebinding. API calls must be JSON POSTs, which other sites can't send without a CORS preflight that this server never approves.
+
+## Hosted multi-tenant API
+
+For SaaS products whose customers send from their own domains. Register a customer's domain with one call and get the records back to show them, or have the API write them through the customer's Cloudflare or Route 53 account. A background worker drives each domain to verified and calls your signed webhook along the way.
+
+```bash
+export ENCRYPTION_KEY=$(npx dkimkit-api generate-encryption-key)
+SENDGRID_API_KEY=SG.xxx npx dkimkit-api create-account --name "Acme" --with-sendgrid-key
+npx dkimkit-api serve
+
+curl -X POST localhost:8080/v1/domains -H "Authorization: Bearer dk_live_…" -H "Content-Type: application/json" \
+  -d '{"domain": "customer.com", "tenant_id": "cus_42", "dns": {"provider": "manual"}}'
+```
+
+See **[docs/hosted-api.md](docs/hosted-api.md)** for endpoints, lifecycle, webhooks and deployment (Dockerfile included).
+
+### Bulk setup in the dashboard
+
+Signed-in users can paste up to 100 domains from any registrar into **Domains** at `/dashboard`. Each gets sender authentication at the account's email provider and, optionally, inbound email to a shared webhook URL. The DNS host of each domain is detected from its nameservers: domains on Cloudflare or Route 53 have their records written with a token or keys entered in the form, and the rest get their records grouped by DNS host, with CSV and zone file downloads. Statuses update live until each domain is verified. See **[docs/getting-started.md](docs/getting-started.md)**.
+
+### Plans and billing
+
+Self-serve and pay-as-you-go: anyone signs up free at `/dashboard` with just an email and gets 3 domains. Adding a payment method unlocks unlimited domains at $2 per active domain per month after the first 3. Payments run through [Dodo Payments](https://dodopayments.com), a merchant of record that handles global tax and works for individual developers (Stripe is supported too). Usage is reported to the provider's meter automatically, and customers manage payment and cancellation in its hosted portal. See **[docs/billing.md](docs/billing.md)**.
+
+## What it does
+
+Steps below use SendGrid; the other providers follow the same flow through their own APIs.
+
+1. **Domain authentication.** Reuses an existing SendGrid authenticated domain, or creates one with `POST /v3/whitelabel/domains` (`automatic_security: true`, which gives 3 CNAMEs).
+2. **DNS plan.** Diffs the required records against what is already in the zone. A record that already matches is left alone. A proxied Cloudflare CNAME has proxying turned off. A record pointing somewhere else is reported as a **conflict** and nothing is written, unless you pass `--overwrite`. Records of other types are never deleted.
+3. **Apply.** Writes the records after you confirm, or straight away with `--yes`.
+4. **Propagation.** Polls the zone's **authoritative nameservers** directly, not a cached resolver, until every record is visible (`--wait`, default 300s).
+5. **Verify.** Calls `POST /v3/whitelabel/domains/{id}/validate`. It retries, because SendGrid's resolvers can lag behind the authoritative servers.
+6. **Inbound parse.** Creates or updates `/v3/user/parse/settings` and adds the `MX → mx.sendgrid.net` record. This step runs only after the domain is verified, because SendGrid requires that.
+
+Each step is idempotent. If a run ends with "DNS not visible yet" or "not validated yet", run the same command again and it picks up where it stopped.
+
+## CLI
+
+| Flag | |
+|---|---|
+| `-d, --domain` | Domain to authenticate |
+| `--provider sendgrid\|postmark\|mailgun\|ses` | Email provider (default `sendgrid`) |
+| `--region` | Mailgun `us`/`eu`, or the Amazon SES region (or `AWS_REGION`) |
+| `--subdomain` | Return-path / MAIL FROM label (SendGrid picks one by default; Postmark `pm-bounces`; SES `mail`) |
+| `--dns cloudflare\|route53\|manual` | DNS host. `manual` prints records for any registrar and then polls DNS until they appear |
+| `--aws-profile`, `--zone-id` | Route53: credentials profile, and a hosted zone id if you don't want it looked up by name |
+| `--inbound-url`, `--inbound-host` | Receive email (host defaults to `parse.<domain>`; Mailgun: the domain itself) |
+| `--spam-check`, `--send-raw` | Inbound parse options |
+| `--overwrite` | Replace CNAME/MX records that point elsewhere |
+| `--dry-run` | Show the plan only. It may still create the SendGrid domain entry, because that is the only way to get the records |
+| `--on-behalf-of` | Run as a SendGrid subuser |
+| `-y, --yes`, `--json` | For CI and scripts |
+
+`dkimkit status -d example.com` shows SendGrid's per-record validation without changing anything.
+
+Exit codes: `0` done, `1` error, `2` incomplete (DNS pending, validation failed, or aborted).
+
+**Credentials.**
+- SendGrid (`SENDGRID_API_KEY`): needs *Sender Authentication* and *Inbound Parse* access.
+- Postmark (`POSTMARK_ACCOUNT_TOKEN`, plus `POSTMARK_INBOUND_SERVER_ID` to receive): an account API token.
+- Mailgun (`MAILGUN_API_KEY`, `MAILGUN_REGION`): a private API key.
+- Amazon SES: the usual AWS credentials plus `AWS_REGION`; needs `ses:CreateEmailIdentity`, `GetEmailIdentity`, `PutEmailIdentityMailFromAttributes` and `DeleteEmailIdentity`.
+- Cloudflare token: needs *Zone:Read* and *DNS:Edit* on the zone.
+- Route53: `AWS_ACCESS_KEY_ID`/`AWS_SECRET_ACCESS_KEY`/`AWS_SESSION_TOKEN`, or a profile in `~/.aws/credentials` (`AWS_PROFILE` or `--aws-profile`). The credentials need `route53:ListHostedZonesByName`, `route53:ListResourceRecordSets` and `route53:ChangeResourceRecordSets`. SSO and instance roles aren't read directly; export them with `aws configure export-credentials --format env`.
+
+Route53 keeps one record set per name and type, so the tool merges into existing sets. For example, the SPF TXT is added next to your existing TXT values rather than replacing them. All changes for a zone go in one atomic `UPSERT` batch. Requests are signed with a built-in SigV4 implementation, whose test fixtures were generated with botocore.
+
+## Library
+
+Full reference: **[docs/library.md](docs/library.md)** (also at [dkimkit.com/docs/library](https://dkimkit.com/docs/library)).
+
+The CLI is a thin layer over the library. Use the library to embed the same flow in your app's onboarding, for example per tenant with subusers:
+
+```ts
+import { setupDomain, SendGridProvider, CloudflareDns } from 'dkimkit';
+
+const result = await setupDomain(
+  new SendGridProvider({ apiKey, onBehalfOf: tenant.sendgridSubuser }),
+  new CloudflareDns({ apiToken: tenant.cloudflareToken }),
+  {
+    domain: tenant.domain,
+    inbound: { hostname: `parse.${tenant.domain}`, url: `https://app.example.com/inbound/${tenant.id}` },
+    onEvent: (e) => progress.push(tenant.id, e),   // stream steps to your UI
+  },
+);
+// result.status: 'complete' | 'dns-pending' | 'validation-failed' | 'aborted' | 'dry-run'
+```
+
+The flow depends on two interfaces in `src/types.ts`:
+
+- **`EmailProvider`** (`ensureDomain`, `validateDomain`, `inboundRecords`, `ensureInboundParse`). SendGrid, Postmark, Mailgun and Amazon SES (`createEmailProvider(name, credentials)`).
+- **`DnsProvider`** (`plan`, `apply`). Cloudflare, Route53 and manual today. Route53, DigitalOcean, GoDaddy and others fit this interface. `decideChange()` in `src/records.ts` handles the generic diff and conflict rules, so a new DNS provider only maps its API to `ExistingRecord`.
+
+## Development
+
+```bash
+npm install
+npm test        # builds, then runs node:test suites with mocked APIs and DNS
+
+# Also run the hosted API, widget and store suites against Postgres
+# (each test uses its own throwaway schema):
+TEST_DATABASE_URL=postgres://user@localhost/dkimkit_test npm test
+```
+
+No runtime dependencies. Requires Node 20+.
+
+## Roadmap
+
+- Managed DNS: point a domain's nameservers to the service once, and every record is handled from then on
+- Bulk domain buying: register many sending domains at once from the dashboard, authenticated automatically
+- DNS providers: DigitalOcean, GoDaddy, Namecheap, plus Domain Connect where the registrar supports it
+- Inbound email for Amazon SES (receipt rules → SNS → webhook)
+- OAuth connect for DNS hosts that support it, instead of pasted API tokens

package/dist/src/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/cli.js

@@ -0,0 +1,398 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { createInterface } from 'node:readline/promises';
+import { parseArgs } from 'node:util';
+import { spawn } from 'node:child_process';
+import { ApiError, apiErrorHint, ConfigError, DnsConflictError } from './errors.js';
+import { checkStatus, setupDomain } from './orchestrator.js';
+import { loadAwsCredentials } from './providers/dns/aws.js';
+import { createEmailProvider, EMAIL_PROVIDERS, isEmailProvider } from './providers/email/factory.js';
+import { createDnsProvider } from './providers/factory.js';
+import { describeRecord, normalizeName } from './records.js';
+import { startUiServer } from './server.js';
+const { version } = createRequire(import.meta.url)('../../package.json');
+const HELP = `dkimkit ${version}
+
+Authenticate a sending domain with SendGrid, Postmark, Mailgun or Amazon SES
+and (optionally) set up inbound email, writing the DNS records for you.
+
+Usage
+  dkimkit [setup] --domain example.com [options]
+  dkimkit status  --domain example.com
+  dkimkit ui      [--port 4545] [--no-open]     Open the web interface
+
+Options
+  -d, --domain <domain>       Domain to authenticate
+      --provider <name>       sendgrid | postmark | mailgun | ses (default: sendgrid)
+      --subdomain <name>      Return-path / MAIL FROM label (SendGrid picks one by default,
+                              Postmark pm-bounces, SES mail; not used by Mailgun)
+      --region <region>       Mailgun: us | eu. SES: AWS region (or AWS_REGION)
+      --dns <provider>        cloudflare | route53 | manual (default: cloudflare if CLOUDFLARE_API_TOKEN is set)
+      --inbound-url <url>     Receive email, POSTing it to this webhook (not with SES)
+      --inbound-host <host>   Hostname receiving mail (default: parse.<domain>;
+                              Mailgun: the domain itself)
+      --spam-check            Inbound: run spam check
+      --send-raw              Inbound: post the raw MIME message
+      --overwrite             Replace existing CNAME/MX records that point elsewhere
+      --dry-run               Show the DNS plan without writing anything
+      --wait <seconds>        Max time to wait for DNS propagation (default: 300)
+      --on-behalf-of <user>   Act as a SendGrid subuser
+      --aws-profile <name>    Route53: profile from ~/.aws/credentials
+      --zone-id <id>          Route53: hosted zone id (default: look up by domain)
+  -y, --yes                   Apply DNS changes without asking
+      --json                  Print the result as JSON
+  -h, --help                  Show this help
+  -v, --version               Show the version
+
+Environment
+  SENDGRID_API_KEY            SendGrid: Sender Authentication and Inbound Parse access
+  POSTMARK_ACCOUNT_TOKEN      Postmark account API token
+  POSTMARK_INBOUND_SERVER_ID  Postmark server that receives inbound mail
+  MAILGUN_API_KEY, MAILGUN_REGION
+  AWS_REGION                  Amazon SES region (SES uses the AWS credentials below)
+  CLOUDFLARE_API_TOKEN        Needs Zone:Read and DNS:Edit for the domain's zone
+  AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, AWS_PROFILE
+                              Route53 credentials (or ~/.aws/credentials)
+
+Re-running is safe: existing domains and records are reused.`;
+const useColor = Boolean(process.stdout.isTTY) && !process.env.NO_COLOR;
+const paint = (code) => (s) => (useColor ? `\x1b[${code}m${s}\x1b[0m` : s);
+const green = paint(32);
+const red = paint(31);
+const yellow = paint(33);
+const dim = paint(2);
+const bold = paint(1);
+class UsageError extends Error {
+}
+async function main() {
+    const { values, positionals } = parseArgs({
+        allowPositionals: true,
+        options: {
+            domain: { type: 'string', short: 'd' },
+            subdomain: { type: 'string' },
+            dns: { type: 'string' },
+            'inbound-url': { type: 'string' },
+            'inbound-host': { type: 'string' },
+            'spam-check': { type: 'boolean', default: false },
+            'send-raw': { type: 'boolean', default: false },
+            overwrite: { type: 'boolean', default: false },
+            'dry-run': { type: 'boolean', default: false },
+            wait: { type: 'string', default: '300' },
+            'on-behalf-of': { type: 'string' },
+            provider: { type: 'string', default: 'sendgrid' },
+            region: { type: 'string' },
+            'aws-profile': { type: 'string' },
+            'zone-id': { type: 'string' },
+            port: { type: 'string', default: '4545' },
+            'no-open': { type: 'boolean', default: false },
+            yes: { type: 'boolean', short: 'y', default: false },
+            json: { type: 'boolean', default: false },
+            help: { type: 'boolean', short: 'h', default: false },
+            version: { type: 'boolean', short: 'v', default: false },
+        },
+    });
+    if (values.help)
+        return print(HELP), 0;
+    if (values.version)
+        return print(version), 0;
+    const command = positionals[0] ?? 'setup';
+    if (!['setup', 'status', 'ui'].includes(command))
+        throw new UsageError(`Unknown command "${command}". See --help.`);
+    if (command === 'ui') {
+        const port = Number(values.port);
+        if (!Number.isInteger(port) || port < 0 || port > 65535)
+            throw new UsageError('--port must be a port number.');
+        const ui = await startUiServer({ port, version }).catch((err) => {
+            if (err.code === 'EADDRINUSE')
+                throw new UsageError(`Port ${port} is in use. Try --port ${port + 1}.`);
+            throw err;
+        });
+        print(`${green('✔')} Web interface running. Open this link (it only works on this machine):\n\n  ${bold(ui.url)}\n`);
+        print(dim('Press Ctrl+C to stop.'));
+        if (!values['no-open'])
+            openBrowser(ui.url);
+        await new Promise((resolve) => process.once('SIGINT', resolve));
+        await ui.close();
+        return 0;
+    }
+    const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY) && !values.json;
+    const providerName = values.provider;
+    if (!isEmailProvider(providerName))
+        throw new UsageError(`--provider must be one of: ${EMAIL_PROVIDERS.join(', ')}.`);
+    if (values['on-behalf-of'] && providerName !== 'sendgrid')
+        throw new UsageError('--on-behalf-of only applies to SendGrid.');
+    const credentials = await emailCredentialsFromEnv(providerName, values.region, values['aws-profile'], interactive);
+    const domainInput = values.domain || (interactive ? await ask('Domain to authenticate: ') : '');
+    if (!domainInput)
+        throw new UsageError('Pass --domain.');
+    const domain = normalizeName(domainInput);
+    const email = createEmailProvider(providerName, credentials, { subuser: values['on-behalf-of'] });
+    if (command === 'status') {
+        const status = await checkStatus(email, domain, values.subdomain);
+        if (values.json)
+            return print(JSON.stringify(status, null, 2)), status.validation?.valid ? 0 : 2;
+        if (!status.domain)
+            return print(`${red('✘')} No ${email.label} domain found for ${domain}.`), 2;
+        print(`${bold(domain)} ${dim(`(${email.label} id ${status.domain.id})`)}`);
+        for (const r of status.validation?.results ?? []) {
+            const record = status.domain.records.find((x) => x.purpose === r.record);
+            print(`  ${r.valid ? green('✔') : red('✘')} ${r.record.padEnd(12)} ${record ? describeRecord(record) : ''}`);
+            if (r.reason)
+                print(`    ${dim(r.reason)}`);
+        }
+        print(status.validation?.valid ? green('Authenticated.') : yellow('Not yet authenticated.'));
+        return status.validation?.valid ? 0 : 2;
+    }
+    const waitSeconds = Number(values.wait);
+    if (!Number.isFinite(waitSeconds) || waitSeconds < 0)
+        throw new UsageError('--wait must be a number of seconds.');
+    const dnsName = values.dns ?? (process.env.CLOUDFLARE_API_TOKEN ? 'cloudflare' : 'manual');
+    const cloudflareApiToken = dnsName === 'cloudflare' && !process.env.CLOUDFLARE_API_TOKEN && interactive
+        ? await askSecret('Cloudflare API token: ')
+        : undefined;
+    const dns = createDnsProvider(dnsName, {
+        cloudflareApiToken,
+        awsProfile: values['aws-profile'],
+        route53HostedZoneId: values['zone-id'],
+        onManualRecords: async (records) => {
+            if (values.json)
+                return;
+            print(`\nAdd these records at your DNS host ${dim('(disable any proxy/CDN on the CNAMEs)')}:\n`);
+            printRecordTable(records);
+            if (interactive)
+                await ask(`\nPress Enter once they're saved… `);
+        },
+    });
+    const inboundUrl = values['inbound-url'];
+    if (inboundUrl && !/^https:\/\//.test(inboundUrl))
+        throw new UsageError('--inbound-url must be an https:// URL.');
+    if (inboundUrl && !email.supportsInbound)
+        throw new UsageError(`Receiving email isn't supported with ${email.label} yet.`);
+    const inbound = inboundUrl
+        ? {
+            hostname: normalizeName(values['inbound-host'] ?? email.defaultInboundHostname(domain)),
+            url: inboundUrl,
+            spamCheck: values['spam-check'],
+            sendRaw: values['send-raw'],
+        }
+        : undefined;
+    const confirm = async () => {
+        if (values.yes || dns.name === 'manual')
+            return true;
+        if (!interactive) {
+            if (!values.json)
+                print(yellow('\nNot a terminal: pass --yes to apply these changes.'));
+            return false;
+        }
+        const answer = await ask(`\nApply these changes to ${dns.name}? [y/N] `);
+        return /^y(es)?$/i.test(answer);
+    };
+    const result = await setupDomain(email, dns, {
+        domain,
+        subdomain: values.subdomain,
+        inbound,
+        overwrite: values.overwrite,
+        dryRun: values['dry-run'],
+        confirm,
+        propagation: { timeoutMs: waitSeconds * 1000 },
+        onEvent: values.json ? undefined : createEventPrinter(dns.name, values['dry-run'], email.label),
+    });
+    if (values.json)
+        print(JSON.stringify(result, null, 2));
+    else
+        printSummary(result, email.label);
+    return result.status === 'complete' || result.status === 'dry-run' ? 0 : 2;
+}
+/** Credentials for the chosen provider from its environment variables (or a prompt, for single keys). */
+async function emailCredentialsFromEnv(provider, region, awsProfile, interactive) {
+    const env = process.env;
+    const secret = async (value, prompt, variable) => {
+        const v = value || (interactive ? await askSecret(prompt) : '');
+        if (!v)
+            throw new UsageError(`Set ${variable}.`);
+        return v;
+    };
+    switch (provider) {
+        case 'postmark':
+            return {
+                accountToken: await secret(env.POSTMARK_ACCOUNT_TOKEN, 'Postmark account API token: ', 'POSTMARK_ACCOUNT_TOKEN'),
+                ...(env.POSTMARK_INBOUND_SERVER_ID ? { inboundServerId: env.POSTMARK_INBOUND_SERVER_ID } : {}),
+            };
+        case 'mailgun':
+            return { apiKey: await secret(env.MAILGUN_API_KEY, 'Mailgun API key: ', 'MAILGUN_API_KEY'), region: region ?? env.MAILGUN_REGION ?? 'us' };
+        case 'ses': {
+            const aws = await loadAwsCredentials({ profile: awsProfile });
+            const sesRegion = region ?? env.AWS_REGION ?? env.AWS_DEFAULT_REGION;
+            if (!sesRegion)
+                throw new UsageError('Set AWS_REGION or pass --region for Amazon SES.');
+            return { ...aws, region: sesRegion };
+        }
+        default:
+            return { apiKey: await secret(env.SENDGRID_API_KEY, 'SendGrid API key: ', 'SENDGRID_API_KEY') };
+    }
+}
+function createEventPrinter(dnsName, dryRun, providerLabel) {
+    let progressShown = false;
+    const endProgress = () => {
+        if (progressShown && process.stdout.isTTY)
+            process.stdout.write('\n');
+        progressShown = false;
+    };
+    return (event) => {
+        switch (event.type) {
+            case 'domain':
+                print(`${green('✔')} ${providerLabel} domain ${event.auth.created ? 'created' : 'found'}: ${bold(event.auth.domain)} ${dim(`(id ${event.auth.id})`)}`);
+                break;
+            case 'plan':
+                if (dnsName !== 'manual') {
+                    print(`\nDNS plan (${dnsName}):`);
+                    printPlan(event.changes);
+                }
+                else if (dryRun) {
+                    print('\nRecords to add at your DNS host:\n');
+                    printRecordTable(event.changes.map((c) => c.record));
+                }
+                break;
+            case 'applied':
+                if (dnsName !== 'manual')
+                    print(`${green('✔')} Wrote ${event.changes.length} DNS record(s)`);
+                break;
+            case 'propagation': {
+                const seconds = Math.round(event.elapsedMs / 1000);
+                const done = event.total - event.pending.length;
+                const line = `… DNS visible on authoritative servers: ${done}/${event.total} ${dim(`(${seconds}s)`)}`;
+                if (event.pending.length === 0) {
+                    endProgress();
+                    print(`${green('✔')} All ${event.total} DNS records are live`);
+                }
+                else if (process.stdout.isTTY) {
+                    process.stdout.write(`\r\x1b[K${line}`);
+                    progressShown = true;
+                }
+                else {
+                    print(line);
+                }
+                break;
+            }
+            case 'validation':
+                endProgress();
+                if (event.result.valid)
+                    print(`${green('✔')} ${providerLabel} verified the domain`);
+                else
+                    print(dim(`… ${providerLabel} validation attempt ${event.attempt}: not valid yet`));
+                break;
+            case 'inbound':
+                print(`${green('✔')} Inbound parse ${event.action}: ${event.hostname} → ${event.url}`);
+                break;
+        }
+    };
+}
+function printPlan(changes) {
+    const label = {
+        create: ['+ create', green],
+        update: ['~ update', yellow],
+        noop: ['= exists', dim],
+        conflict: ['! conflict', red],
+    };
+    for (const c of changes) {
+        const [text, color] = label[c.action];
+        const reason = c.reason ? dim(` (${c.reason})`) : '';
+        print(`  ${color(text.padEnd(10))} ${describeRecord(c.record)}${reason}`);
+    }
+}
+function printRecordTable(records) {
+    const rows = records.map((r) => [r.type, r.name, r.priority !== undefined ? `${r.priority} ${r.value}` : r.value]);
+    const widths = [0, 1].map((i) => Math.max(...rows.map((row) => row[i].length), i === 0 ? 4 : 4));
+    print(`  ${bold('Type'.padEnd(widths[0]))}  ${bold('Name'.padEnd(widths[1]))}  ${bold('Value')}`);
+    rows.forEach(([type, name, value], i) => {
+        print(`  ${type.padEnd(widths[0])}  ${name.padEnd(widths[1])}  ${value}`);
+        if (records[i].note)
+            print(`  ${' '.repeat(widths[0])}  ${dim(records[i].note)}`);
+    });
+}
+function printSummary(result, providerLabel) {
+    print('');
+    switch (result.status) {
+        case 'complete':
+            print(green(bold(`${result.domain.domain} is authenticated with ${providerLabel}.`)));
+            break;
+        case 'dry-run':
+            print(dim('Dry run: no DNS changes made.'));
+            if (result.domain.created)
+                print(dim(`The ${providerLabel} domain entry was created so its records could be shown.`));
+            break;
+        case 'aborted':
+            print(yellow('Aborted: no DNS changes made.'));
+            break;
+        case 'dns-pending':
+            print(yellow('These records are not visible in DNS yet:'));
+            for (const r of result.pending ?? [])
+                print(`  ${describeRecord(r)}`);
+            print('DNS can take a while to propagate. Re-run the same command later; it picks up where it left off.');
+            break;
+        case 'validation-failed':
+            print(yellow(`DNS is live, but ${providerLabel} has not validated the domain yet:`));
+            for (const r of result.validation?.results ?? []) {
+                if (!r.valid)
+                    print(`  ${red('✘')} ${r.record}${r.reason ? `: ${r.reason}` : ''}`);
+            }
+            print(`${providerLabel} can lag a few minutes behind DNS. Re-run the same command, or check with \`status\`.`);
+            break;
+    }
+}
+function openBrowser(url) {
+    const [cmd, args] = process.platform === 'darwin' ? ['open', [url]] : process.platform === 'win32' ? ['cmd', ['/c', 'start', '', url]] : ['xdg-open', [url]];
+    try {
+        spawn(cmd, args, { stdio: 'ignore', detached: true }).on('error', () => { }).unref();
+    }
+    catch {
+        // The link is printed; opening it is a convenience.
+    }
+}
+function print(line) {
+    process.stdout.write(line + '\n');
+}
+async function ask(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        return (await rl.question(question)).trim();
+    }
+    finally {
+        rl.close();
+    }
+}
+async function askSecret(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: true });
+    process.stdout.write(question);
+    // Suppress echo of typed characters.
+    rl._writeToOutput = () => { };
+    try {
+        return (await rl.question('')).trim();
+    }
+    finally {
+        rl.close();
+        process.stdout.write('\n');
+    }
+}
+main().then((code) => process.exit(code), (err) => {
+    if (err instanceof UsageError || err instanceof ConfigError) {
+        process.stderr.write(`${red('✘')} ${err.message}\n`);
+    }
+    else if (err instanceof DnsConflictError) {
+        process.stderr.write(`${red('✘')} ${err.message}\nNothing was written. Fix those records, or pass --overwrite to replace CNAME/MX values.\n`);
+    }
+    else if (err instanceof ApiError) {
+        process.stderr.write(`${red('✘')} ${err.message}\n`);
+        const hint = apiErrorHint(err);
+        if (hint)
+            process.stderr.write(`${hint}\n`);
+    }
+    else if (err instanceof Error && 'code' in err && String(err.code).startsWith('ERR_PARSE_ARGS')) {
+        process.stderr.write(`${red('✘')} ${err.message}. See --help.\n`);
+    }
+    else {
+        process.stderr.write(`${red('✘')} ${err instanceof Error ? err.message : String(err)}\n`);
+    }
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAqC,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAyB,MAAM,8BAA8B,CAAC;AAC5H,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAwB,CAAC;AAEhG,MAAM,IAAI,GAAG,WAAW,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DA2C8B,CAAC;AAE9D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AACxE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;AACxB,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;AACtB,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;AACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtB,MAAM,UAAW,SAAQ,KAAK;CAAG;AAEjC,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACjD,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC/C,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC9C,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;YACxC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;YACjD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;YACzC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC9C,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;YACpD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;YACrD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;SACzD;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IAC1C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,OAAO,gBAAgB,CAAC,CAAC;IAEpH,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;QAC/G,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAA0B,EAAE,EAAE;YACrF,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,UAAU,CAAC,QAAQ,IAAI,0BAA0B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACvG,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,gFAAgF,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrH,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IACzF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAS,CAAC;IACtC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,8BAA8B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtH,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,YAAY,KAAK,UAAU;QAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;IAC5H,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,CAAC;IACnH,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAElG,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,qBAAqB,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACzE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7G,IAAI,CAAC,CAAC,MAAM;gBAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAElH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3F,MAAM,kBAAkB,GACtB,OAAO,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,WAAW;QAC1E,CAAC,CAAC,MAAM,SAAS,CAAC,wBAAwB,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE;QACrC,kBAAkB;QAClB,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC;QACjC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;QACtC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACjC,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO;YACxB,KAAK,CAAC,wCAAwC,GAAG,CAAC,uCAAuC,CAAC,KAAK,CAAC,CAAC;YACjG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,WAAW;gBAAE,MAAM,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACnE,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACzC,IAAI,UAAU,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IAClH,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,eAAe;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC;IAC3H,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC;YACE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YACvF,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC;SAC5B;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,OAAO,GAAG,KAAK,IAAsB,EAAE;QAC3C,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,KAAK,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,4BAA4B,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC;QACzE,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE;QAC3C,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;QACzB,OAAO;QACP,WAAW,EAAE,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,EAAE;QAC9C,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;KAChG,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;QACnD,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,uBAAuB,CAAC,QAAgB,EAAE,MAA0B,EAAE,UAA8B,EAAE,WAAoB;IACvI,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,EAAE,KAAyB,EAAE,MAAc,EAAE,QAAgB,EAAE,EAAE;QACnF,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,OAAO,QAAQ,GAAG,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO;gBACL,YAAY,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,8BAA8B,EAAE,wBAAwB,CAAC;gBAChH,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/F,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;QAC7I,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,kBAAkB,CAAC;YACrE,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,UAAU,CAAC,iDAAiD,CAAC,CAAC;YACxF,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvC,CAAC;QACD;YACE,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACpG,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,MAAe,EAAE,aAAqB;IACjF,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO,CAAC,KAAiB,EAAE,EAAE;QAC3B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,aAAa,WAAW,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvJ,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzB,KAAK,CAAC,eAAe,OAAO,IAAI,CAAC,CAAC;oBAClC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3B,CAAC;qBAAM,IAAI,MAAM,EAAE,CAAC;oBAClB,KAAK,CAAC,sCAAsC,CAAC,CAAC;oBAC9C,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,OAAO,KAAK,QAAQ;oBAAE,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;gBAC7F,MAAM;YACR,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAChD,MAAM,IAAI,GAAG,2CAA2C,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACtG,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC/B,WAAW,EAAE,CAAC;oBACd,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,KAAK,uBAAuB,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;oBACxC,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,YAAY;gBACf,WAAW,EAAE,CAAC;gBACd,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK;oBAAE,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,aAAa,sBAAsB,CAAC,CAAC;;oBAC/E,KAAK,CAAC,GAAG,CAAC,KAAK,aAAa,uBAAuB,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;gBACzF,MAAM;YACR,KAAK,SAAS;gBACZ,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvF,MAAM;QACV,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAwB;IACzC,MAAM,KAAK,GAAqE;QAC9E,MAAM,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;QAC3B,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC;QACvB,QAAQ,EAAE,CAAC,YAAY,EAAE,GAAG,CAAC;KAC9B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE;QACtC,KAAK,CAAC,KAAK,IAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,IAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI;YAAE,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAK,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB,EAAE,aAAqB;IAC9D,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,0BAA0B,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;YACtF,MAAM;QACR,KAAK,SAAS;YACZ,KAAK,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,aAAa,0DAA0D,CAAC,CAAC,CAAC;YACtH,MAAM;QACR,KAAK,SAAS;YACZ,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC/C,MAAM;QACR,KAAK,aAAa;YAChB,KAAK,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE;gBAAE,KAAK,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,KAAK,CAAC,kGAAkG,CAAC,CAAC;YAC1G,MAAM;QACR,KAAK,mBAAmB;YACtB,KAAK,CAAC,MAAM,CAAC,oBAAoB,aAAa,oCAAoC,CAAC,CAAC,CAAC;YACrF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;gBACjD,IAAI,CAAC,CAAC,CAAC,KAAK;oBAAE,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,KAAK,CAAC,GAAG,aAAa,uFAAuF,CAAC,CAAC;YAC/G,MAAM;IACV,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GACf,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3I,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,QAAgB;IACjC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB;IACvC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,qCAAqC;IACpC,EAAyD,CAAC,cAAc,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACrF,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAY,EAAE,EAAE;IACf,IAAI,GAAG,YAAY,UAAU,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACvD,CAAC;SAAM,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,6FAA6F,CAAC,CAAC;IAChJ,CAAC;SAAM,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}

package/dist/src/dns-host.d.ts

@@ -0,0 +1,10 @@
+import type { DnsProviderName } from './providers/factory.js';
+export interface DnsHost {
+    /** Display name, e.g. "GoDaddy"; null when unrecognized. */
+    name: string | null;
+    /** Set when we can write records there automatically. */
+    provider: Exclude<DnsProviderName, 'manual'> | null;
+    nameservers: string[];
+}
+/** Identifies where a domain's DNS is hosted from its NS records. Never throws. */
+export declare function detectDnsHost(domain: string, resolveNs?: (name: string) => Promise<string[]>): Promise<DnsHost>;

package/dist/src/dns-host.js

@@ -0,0 +1,31 @@
+import { findZoneNameservers } from './propagation.js';
+// Nameserver hostname patterns of common DNS hosts.
+const HOSTS = [
+    [/\.ns\.cloudflare\.com$/, 'Cloudflare', 'cloudflare'],
+    [/\.awsdns-\d+\.(com|net|org|co\.uk)$/, 'Amazon Route 53', 'route53'],
+    [/\.domaincontrol\.com$/, 'GoDaddy', null],
+    [/\.registrar-servers\.com$/, 'Namecheap', null],
+    [/^ns-cloud-[a-e]\d\.googledomains\.com$/, 'Google Cloud DNS', null],
+    [/\.digitalocean\.com$/, 'DigitalOcean', null],
+    [/\.vercel-dns\.com$/, 'Vercel', null],
+    [/\.azure-dns\.(com|net|org|info)$/, 'Azure DNS', null],
+    [/\.ui-dns\.(com|de|org|biz)$/, 'IONOS', null],
+    [/\.wixdns\.net$/, 'Wix', null],
+    [/\.nsone\.net$/, 'NS1', null],
+    [/\.gandi\.net$/, 'Gandi', null],
+    [/\.ovh\.net$/, 'OVHcloud', null],
+    [/\.porkbun\.com$/, 'Porkbun', null],
+    [/\.dnsimple(-edge)?\.(com|net|org)$/, 'DNSimple', null],
+    [/\.hover\.com$/, 'Hover', null],
+];
+/** Identifies where a domain's DNS is hosted from its NS records. Never throws. */
+export async function detectDnsHost(domain, resolveNs) {
+    const found = await findZoneNameservers(domain, resolveNs).catch(() => null);
+    const nameservers = found?.nameservers.map((n) => n.replace(/\.$/, '')) ?? [];
+    for (const [pattern, name, provider] of HOSTS) {
+        if (nameservers.length > 0 && nameservers.every((ns) => pattern.test(ns)))
+            return { name, provider, nameservers };
+    }
+    return { name: null, provider: null, nameservers };
+}
+//# sourceMappingURL=dns-host.js.map

package/dist/src/dns-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-host.js","sourceRoot":"","sources":["../../src/dns-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAWvD,oDAAoD;AACpD,MAAM,KAAK,GAA4C;IACrD,CAAC,wBAAwB,EAAE,YAAY,EAAE,YAAY,CAAC;IACtD,CAAC,qCAAqC,EAAE,iBAAiB,EAAE,SAAS,CAAC;IACrE,CAAC,uBAAuB,EAAE,SAAS,EAAE,IAAI,CAAC;IAC1C,CAAC,2BAA2B,EAAE,WAAW,EAAE,IAAI,CAAC;IAChD,CAAC,wCAAwC,EAAE,kBAAkB,EAAE,IAAI,CAAC;IACpE,CAAC,sBAAsB,EAAE,cAAc,EAAE,IAAI,CAAC;IAC9C,CAAC,oBAAoB,EAAE,QAAQ,EAAE,IAAI,CAAC;IACtC,CAAC,kCAAkC,EAAE,WAAW,EAAE,IAAI,CAAC;IACvD,CAAC,6BAA6B,EAAE,OAAO,EAAE,IAAI,CAAC;IAC9C,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC;IAC/B,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;IAC9B,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;IAChC,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC;IACjC,CAAC,iBAAiB,EAAE,SAAS,EAAE,IAAI,CAAC;IACpC,CAAC,oCAAoC,EAAE,UAAU,EAAE,IAAI,CAAC;IACxD,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;CACjC,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,SAA+C;IAE/C,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;QAC9C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACpH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC"}