@4ort/cli 0.7.0 → 0.8.0

package/README.md

@@ -12,13 +12,25 @@ One install. One identity. Every product.
 
 ## Products
 
-| Namespace                  | What it does                                   |
-| -------------------------- | ---------------------------------------------- |
-| `4ort register / push / …` | 4ort.net subdomain hosting + email + agents    |
-| `4ort mail`                | Manage your `@4ort.net` inbox from the CLI     |
-| `4ort provision`           | Auto-provision third-party service accounts   |
-| `4ort kg`                  | 4ort.xyz knowledge graph (Popularity Graph)    |
-| `4ort config`              | Inspect ~/.4ort/config.json                    |
+| Namespace                                  | What it does                                                 |
+| ------------------------------------------ | ------------------------------------------------------------ |
+| `4ort register / push / list / delete / whoami / recover` | 4ort.net subdomain hosting + agent identity     |
+| `4ort mail …`                              | Manage your `@4ort.net` inbox from the CLI                   |
+| `4ort provision …`                         | Auto-provision Tier-A third-party service accounts (incl. `video` and `gitea`) |
+| `4ort domains …`                           | Map custom domains onto your 4ort.net site (add → verify → live w/ HTTPS) |
+| `4ort domain …`                            | Registrar ops on YOUR NameSilo account — check/buy/dns (BYO key, never bundled) |
+| `4ort docs …` / `4ort sheets …`            | Documents (markdown) + spreadsheets (CSV) on docs/sheets.4ort.net |
+| `4ort repo …`                              | Code repos on 4ort.dev (the Launchpad) — create/list/delete/push |
+| `4ort kg …`                                | 4ort.xyz knowledge graph (search/ask/entity/match/trending…) |
+| `4ort search …`                            | Smart router (semantic + entity match)                       |
+| `4ort web get …`                           | Polite web reader (SSRF-hardened, via 4ort.xyz public/fetch) |
+| `4ort mov login / publish / render / list / channels / delete` | PeerTube publishing + dir→video-factory render → 4ort.mov — **see `docs/MOV.md`** |
+| `4ort mcp stdio / serve`                   | Run the CLI itself as an MCP server — **see `docs/MCP.md`**  |
+| `4ort vault login / status / logout` + `4ort run …` | 🔑 Secrets layer (1Password-`op run` model) — **see `docs/VAULT.md`** |
+| `4ort config`                              | Inspect `~/.4ort/config.json`                                |
+
+> **Galaxy property-note:** `~/ai/4ort-galaxy/property-notes/4ort-cli.md` covers
+> this CLI's role across the whole galaxy + the four identity types it juggles.
 
 ---
 

package/dist/api-client.d.ts

@@ -1,3 +1,11 @@
 import { Config } from "./config.js";
 export declare function apiRequest(config: Config, method: string, path: string, body?: any): Promise<any>;
-export declare function registerAgent(server: string, name: string, metadata?: Record<string, any>): Promise<any>;
+export declare function registerAgent(server: string, name: string, metadata?: Record<string, any>, backupEmail?: string): Promise<any>;
+/**
+ * Mint a single-use web-login link for the human behind this agent.
+ * Authenticated with the agent's API key (via apiRequest).
+ */
+export declare function loginLink(config: Config): Promise<{
+    url: string;
+    expiresInSeconds: number;
+}>;

package/dist/api-client.js

@@ -18,11 +18,11 @@ export async function apiRequest(config, method, path, body) {
     }
     return data;
 }
-export async function registerAgent(server, name, metadata) {
+export async function registerAgent(server, name, metadata, backupEmail) {
     const res = await fetch(`${server}/api/register`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ name, metadata }),
+        body: JSON.stringify({ name, metadata, backupEmail }),
     });
     const data = await res.json();
     if (!res.ok) {
@@ -30,4 +30,11 @@ export async function registerAgent(server, name, metadata) {
     }
     return data;
 }
+/**
+ * Mint a single-use web-login link for the human behind this agent.
+ * Authenticated with the agent's API key (via apiRequest).
+ */
+export async function loginLink(config) {
+    return apiRequest(config, "POST", "/api/login-link");
+}
 //# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,MAAc,EACd,IAAY,EACZ,IAAU;IAEV,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC;IAEF,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAE9C,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;SAAM,IAAI,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAY,EACZ,QAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,eAAe,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,MAAc,EACd,IAAY,EACZ,IAAU;IAEV,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC;IAEF,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAE9C,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;SAAM,IAAI,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAY,EACZ,QAA8B,EAC9B,WAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,eAAe,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc;IAC5C,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACvD,CAAC"}

package/dist/commands/docs.d.ts

@@ -0,0 +1,17 @@
+export declare function docsList(options: {
+    json?: boolean;
+}): Promise<void>;
+export declare function docsRead(id: string, options: {
+    json?: boolean;
+}): Promise<void>;
+export declare function docsCreate(options: {
+    title?: string;
+    file?: string;
+    content?: string;
+}): Promise<void>;
+export declare function docsUpdate(id: string, options: {
+    title?: string;
+    file?: string;
+    content?: string;
+}): Promise<void>;
+export declare function docsDelete(id: string): Promise<void>;

package/dist/commands/docs.js

@@ -0,0 +1,90 @@
+/**
+ * `4ort docs` — manage documents on docs.4ort.net.
+ * Content comes from --file, --content, or piped stdin (in that order).
+ * `read` prints raw markdown so output pipes cleanly into other tools.
+ */
+import { requireConfig } from "../config.js";
+import { docsClient, resolveContentInput } from "../office-client.js";
+export async function docsList(options) {
+    const client = docsClient(requireConfig());
+    try {
+        const { docs } = await client.list();
+        if (options.json) {
+            console.log(JSON.stringify(docs, null, 2));
+            return;
+        }
+        if (docs.length === 0) {
+            console.log("No docs yet. Create one: 4ort docs create --title 'My Doc' --file notes.md");
+            return;
+        }
+        for (const d of docs) {
+            console.log(`[${d.id}] ${d.title}  (updated ${d.updatedAt})`);
+        }
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function docsRead(id, options) {
+    const client = docsClient(requireConfig());
+    try {
+        const doc = await client.read(id);
+        if (options.json) {
+            console.log(JSON.stringify(doc, null, 2));
+            return;
+        }
+        console.log(doc.markdown);
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function docsCreate(options) {
+    const client = docsClient(requireConfig());
+    const markdown = resolveContentInput(options);
+    if (markdown === null) {
+        console.error("No content. Use --file <path>, --content <text>, or pipe markdown on stdin.");
+        process.exit(1);
+    }
+    try {
+        const doc = await client.create(markdown, options.title);
+        console.log(`Created [${doc.id}] ${doc.title}`);
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function docsUpdate(id, options) {
+    const client = docsClient(requireConfig());
+    const markdown = resolveContentInput(options);
+    if (markdown === null && !options.title) {
+        console.error("Nothing to update. Pass --title and/or content (--file, --content, or stdin).");
+        process.exit(1);
+    }
+    try {
+        const doc = await client.update(id, {
+            ...(markdown !== null ? { markdown } : {}),
+            ...(options.title ? { title: options.title } : {}),
+        });
+        console.log(`Updated [${doc.id}] ${doc.title}  (${doc.updatedAt})`);
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function docsDelete(id) {
+    const client = docsClient(requireConfig());
+    try {
+        await client.remove(id);
+        console.log(`Deleted ${id}`);
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=docs.js.map

package/dist/commands/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/commands/docs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAA2B;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAU,EAAE,OAA2B;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA4D;IAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,OAA4D;IACvG,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YAClC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAU;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/domain.d.ts

@@ -0,0 +1,20 @@
+export declare function domainCheck(domains: string[], options: {
+    json?: boolean;
+}): Promise<void>;
+export declare function domainBuy(domain: string, options: {
+    years?: string;
+    yes?: boolean;
+    autoRenew?: boolean;
+    privacy?: boolean;
+    json?: boolean;
+}): Promise<void>;
+export declare function domainList(options: {
+    json?: boolean;
+}): Promise<void>;
+export declare function domainBalance(): Promise<void>;
+export declare function domainDnsList(domain: string, options: {
+    json?: boolean;
+}): Promise<void>;
+export declare function domainDnsAdd(domain: string, type: string, host: string, value: string, options: {
+    ttl?: string;
+}): Promise<void>;

package/dist/commands/domain.js

@@ -0,0 +1,179 @@
+/**
+ * `4ort domain` — registrar operations on the user's OWN NameSilo account.
+ * BYO key: NAMESILO_KEY env or the 4ort.ai vault (`4ort://namesilo`).
+ *
+ * `buy` spends real money, so it is gated three ways: live availability
+ * re-check, account balance check, and an explicit --yes flag. Without
+ * --yes it prints the quote and exits non-zero.
+ */
+import { namesilo, normalizeDomainArg, resolveNamesiloKey } from "../namesilo-client.js";
+const NO_KEY_HELP = [
+    "No NameSilo key found. Provide one of:",
+    "  NAMESILO_KEY=<key> 4ort domain ...        # env var",
+    "  4ort vault login, then vault a secret named 'namesilo' in the 4ort.ai Secrets panel",
+    "(NameSilo is BYO-account — sign up at namesilo.com, fund it, mint an API key.)",
+].join("\n");
+async function requireKey() {
+    const key = await resolveNamesiloKey();
+    if (!key) {
+        console.error(NO_KEY_HELP);
+        process.exit(1);
+    }
+    return key;
+}
+/** NameSilo's `available.domain` comes back as object | array | string — normalize. */
+function asArray(value) {
+    if (value === undefined || value === null)
+        return [];
+    return Array.isArray(value) ? value : [value];
+}
+function availabilityRows(reply) {
+    const avail = asArray(reply.available?.domain).map((d) => ({
+        domain: typeof d === "string" ? d : d.domain,
+        available: true,
+        price: typeof d === "object" ? d.price : undefined,
+    }));
+    const taken = asArray(reply.unavailable?.domain).map((d) => ({
+        domain: typeof d === "string" ? d : d.domain,
+        available: false,
+    }));
+    return [...avail, ...taken];
+}
+export async function domainCheck(domains, options) {
+    const key = await requireKey();
+    const cleaned = domains.map(normalizeDomainArg).filter(Boolean);
+    if (cleaned.length === 0) {
+        console.error("Usage: 4ort domain check <domain> [more...]");
+        process.exit(1);
+    }
+    const r = await namesilo.check(key, cleaned);
+    if (!r.ok) {
+        console.error(`NameSilo error ${r.code}: ${r.detail || "unknown"}`);
+        process.exit(1);
+    }
+    const rows = availabilityRows(r.reply);
+    if (options.json) {
+        console.log(JSON.stringify(rows, null, 2));
+        return;
+    }
+    for (const row of rows) {
+        console.log(row.available ? `✓ ${row.domain}  available${row.price ? `  $${row.price}/yr` : ""}` : `✗ ${row.domain}  taken`);
+    }
+}
+export async function domainBuy(domain, options) {
+    const key = await requireKey();
+    const name = normalizeDomainArg(domain);
+    const years = Math.max(1, parseInt(options.years || "1", 10) || 1);
+    // 1. Re-check availability + authoritative price right before buying.
+    const check = await namesilo.check(key, [name]);
+    if (!check.ok) {
+        console.error(`NameSilo error ${check.code}: ${check.detail || "availability check failed"}`);
+        process.exit(1);
+    }
+    const row = availabilityRows(check.reply).find((r) => r.domain === name);
+    if (!row?.available) {
+        console.error(`${name} is not available to register.`);
+        process.exit(1);
+    }
+    const pricePerYear = row.price ? parseFloat(row.price) : undefined;
+    const estimate = pricePerYear !== undefined ? (pricePerYear * years).toFixed(2) : undefined;
+    // 2. Balance check — never attempt a purchase that will bounce.
+    const bal = await namesilo.balance(key);
+    const balance = bal.ok ? parseFloat(String(bal.reply.balance ?? "0")) : undefined;
+    if (balance !== undefined && pricePerYear !== undefined && balance < pricePerYear * years) {
+        console.error(`Insufficient NameSilo balance: $${balance.toFixed(2)} on hand, ~$${estimate} needed. Add funds at namesilo.com first.`);
+        process.exit(1);
+    }
+    // 3. Explicit consent — this spends real money.
+    if (!options.yes) {
+        console.log(`Quote: ${name} × ${years} year${years > 1 ? "s" : ""}${estimate ? ` ≈ $${estimate}` : ""}`);
+        if (balance !== undefined)
+            console.log(`NameSilo balance: $${balance.toFixed(2)}`);
+        console.log(`\nThis will spend real money from YOUR NameSilo account.`);
+        console.log(`To proceed: 4ort domain buy ${name} --years ${years} --yes`);
+        process.exit(1);
+    }
+    const r = await namesilo.register(key, name, {
+        years,
+        autoRenew: options.autoRenew,
+        privacy: options.privacy,
+    });
+    if (!r.ok) {
+        console.error(`Registration failed (code ${r.code}): ${r.detail || "unknown"}`);
+        process.exit(1);
+    }
+    if (options.json) {
+        console.log(JSON.stringify(r.reply, null, 2));
+        return;
+    }
+    console.log(`Registered ${name} for ${years} year${years > 1 ? "s" : ""}. ${r.detail || ""}`);
+    console.log(`Next: point it at your site — 4ort domains add ${name}  (prints the DNS records),`);
+    console.log(`then: 4ort domain dns add ${name} A @ <ip>  and  4ort domain dns add ${name} TXT <host> <token>`);
+}
+export async function domainList(options) {
+    const key = await requireKey();
+    const r = await namesilo.listDomains(key);
+    if (!r.ok) {
+        console.error(`NameSilo error ${r.code}: ${r.detail || "unknown"}`);
+        process.exit(1);
+    }
+    const domains = asArray(r.reply.domains?.domain).map((d) => (typeof d === "string" ? d : d.domain));
+    if (options.json) {
+        console.log(JSON.stringify(domains, null, 2));
+        return;
+    }
+    if (domains.length === 0) {
+        console.log("No domains in this NameSilo account.");
+        return;
+    }
+    for (const d of domains)
+        console.log(d);
+}
+export async function domainBalance() {
+    const key = await requireKey();
+    const r = await namesilo.balance(key);
+    if (!r.ok) {
+        console.error(`NameSilo error ${r.code}: ${r.detail || "unknown"}`);
+        process.exit(1);
+    }
+    console.log(`$${r.reply.balance}`);
+}
+export async function domainDnsList(domain, options) {
+    const key = await requireKey();
+    const name = normalizeDomainArg(domain);
+    const r = await namesilo.dnsList(key, name);
+    if (!r.ok) {
+        console.error(`NameSilo error ${r.code}: ${r.detail || "unknown"}`);
+        process.exit(1);
+    }
+    const records = asArray(r.reply.resource_record);
+    if (options.json) {
+        console.log(JSON.stringify(records, null, 2));
+        return;
+    }
+    if (records.length === 0) {
+        console.log(`No DNS records on ${name}.`);
+        return;
+    }
+    for (const rec of records) {
+        console.log(`${String(rec.type).padEnd(6)} ${String(rec.host).padEnd(40)} ${rec.value}  (ttl ${rec.ttl})`);
+    }
+}
+export async function domainDnsAdd(domain, type, host, value, options) {
+    const key = await requireKey();
+    const name = normalizeDomainArg(domain);
+    // NameSilo uses "" for the apex; accept "@" as the conventional spelling.
+    const rrhost = host === "@" ? "" : host;
+    const r = await namesilo.dnsAdd(key, name, {
+        type,
+        host: rrhost,
+        value,
+        ttl: options.ttl ? parseInt(options.ttl, 10) : undefined,
+    });
+    if (!r.ok) {
+        console.error(`NameSilo error ${r.code}: ${r.detail || "unknown"}`);
+        process.exit(1);
+    }
+    console.log(`Added ${type.toUpperCase()} ${host} -> ${value} on ${name} (record id ${r.reply.record_id ?? "?"})`);
+}
+//# sourceMappingURL=domain.js.map

package/dist/commands/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../../src/commands/domain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,MAAM,WAAW,GAAG;IAClB,wCAAwC;IACxC,uDAAuD;IACvD,uFAAuF;IACvF,gFAAgF;CACjF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,KAAK,UAAU,UAAU;IACvB,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA0B;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;QAC5C,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KACnD,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;QAC5C,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAiB,EAAE,OAA2B;IAC9E,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,OAAkG;IAElG,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEnE,sEAAsE;IACtE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,QAAQ,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,IAAI,OAAO,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,GAAG,YAAY,GAAG,KAAK,EAAE,CAAC;QAC1F,OAAO,CAAC,KAAK,CACX,mCAAmC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,QAAQ,2CAA2C,CACxH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,KAAK,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzG,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,YAAY,KAAK,QAAQ,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE;QAC3C,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ,KAAK,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,kDAAkD,IAAI,6BAA6B,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,uCAAuC,IAAI,qBAAqB,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA2B;IAC1D,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,OAA2B;IAC7E,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,IAAY,EACZ,IAAY,EACZ,KAAa,EACb,OAAyB;IAEzB,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxC,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE;QACzC,IAAI;QACJ,IAAI,EAAE,MAAM;QACZ,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzD,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,OAAO,KAAK,OAAO,IAAI,eAAe,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC;AACpH,CAAC"}

package/dist/commands/domains.d.ts

@@ -0,0 +1,6 @@
+export declare function domainsList(subdomain: string | undefined, options: {
+    json?: boolean;
+}): Promise<void>;
+export declare function domainsAdd(domain: string, subdomain: string | undefined): Promise<void>;
+export declare function domainsVerify(domain: string, subdomain: string | undefined): Promise<void>;
+export declare function domainsRemove(domain: string, subdomain: string | undefined): Promise<void>;

package/dist/commands/domains.js

@@ -0,0 +1,91 @@
+/**
+ * `4ort domains` — map custom domains onto a 4ort.net-hosted site.
+ * Wraps /api/sites/:subdomain/domains (add → DNS instructions → verify →
+ * live with auto-HTTPS). The subdomain defaults to your agent name, which
+ * is the common single-site case.
+ */
+import { apiRequest } from "../api-client.js";
+import { requireConfig } from "../config.js";
+function siteFor(config, subdomain) {
+    const site = subdomain || config.agentName;
+    if (!site) {
+        console.error("No subdomain given and no agent name in config. Pass one: 4ort domains list <subdomain>");
+        process.exit(1);
+    }
+    return site;
+}
+function printDns(dns) {
+    console.log(`  Set these DNS records:`);
+    console.log(`    ${dns.a_record.type.padEnd(4)} ${dns.a_record.host}  ->  ${dns.a_record.value}`);
+    console.log(`    ${dns.txt_record.type.padEnd(4)} ${dns.txt_record.host}  ->  ${dns.txt_record.value}`);
+    console.log(`  ${dns.note}`);
+}
+export async function domainsList(subdomain, options) {
+    const config = requireConfig();
+    const site = siteFor(config, subdomain);
+    try {
+        const data = await apiRequest(config, "GET", `/api/sites/${encodeURIComponent(site)}/domains`);
+        if (options.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        if (data.domains.length === 0) {
+            console.log(`No custom domains on ${site}.4ort.net. Add one: 4ort domains add example.com`);
+            return;
+        }
+        for (const d of data.domains) {
+            console.log(`${d.verified ? "✓" : "…"} ${d.domain}  (${d.verified ? `verified ${d.verified_at}` : "pending verification"})`);
+            if (!d.verified && d.dns)
+                printDns(d.dns);
+        }
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function domainsAdd(domain, subdomain) {
+    const config = requireConfig();
+    const site = siteFor(config, subdomain);
+    try {
+        const data = await apiRequest(config, "POST", `/api/sites/${encodeURIComponent(site)}/domains`, { domain });
+        if (data.verified) {
+            console.log(`${data.domain} is already verified and mapped to ${site}.4ort.net.`);
+            return;
+        }
+        console.log(`${data.domain} added to ${site}.4ort.net — pending verification.`);
+        printDns(data.dns);
+        console.log(`\nThen run: 4ort domains verify ${data.domain}${subdomain ? ` ${site}` : ""}`);
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function domainsVerify(domain, subdomain) {
+    const config = requireConfig();
+    const site = siteFor(config, subdomain);
+    try {
+        const data = await apiRequest(config, "POST", `/api/sites/${encodeURIComponent(site)}/domains/${encodeURIComponent(domain)}/verify`);
+        console.log(data.message || `${data.domain} verified.`);
+    }
+    catch (err) {
+        // The server's 422 includes the expected TXT record — apiRequest surfaces
+        // only error text, which already explains propagation. Keep it simple.
+        console.error(`Not verified yet: ${err.message}`);
+        process.exit(1);
+    }
+}
+export async function domainsRemove(domain, subdomain) {
+    const config = requireConfig();
+    const site = siteFor(config, subdomain);
+    try {
+        const data = await apiRequest(config, "DELETE", `/api/sites/${encodeURIComponent(site)}/domains/${encodeURIComponent(domain)}`);
+        console.log(data.message);
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=domains.js.map

package/dist/commands/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/commands/domains.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAU,MAAM,cAAc,CAAC;AAQrD,SAAS,OAAO,CAAC,MAAc,EAAE,SAAkB;IACjD,MAAM,IAAI,GAAG,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IACxG,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAA6B,EAAE,OAA2B;IAC1F,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,kDAAkD,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC;YAC7H,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG;gBAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,SAA6B;IAC5E,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,sCAAsC,IAAI,YAAY,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,aAAa,IAAI,mCAAmC,CAAC,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,SAA6B;IAC/E,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,MAAM,EACN,MAAM,EACN,cAAc,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,SAAS,CACtF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,0EAA0E;QAC1E,uEAAuE;QACvE,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,SAA6B;IAC/E,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,MAAM,EACN,QAAQ,EACR,cAAc,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAC/E,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/login-link.d.ts

@@ -0,0 +1 @@
+export declare function loginLinkCommand(): Promise<void>;

package/dist/commands/login-link.js

@@ -0,0 +1,18 @@
+import { requireConfig } from "../config.js";
+import { loginLink } from "../api-client.js";
+export async function loginLinkCommand() {
+    const config = requireConfig();
+    try {
+        const result = await loginLink(config);
+        const mins = Math.round(result.expiresInSeconds / 60);
+        console.log(`\nWeb login link for ${config.agentName}:\n`);
+        console.log(`  ${result.url}\n`);
+        console.log(`Hand this to your human — clicking it logs them into 4ort.ai.`);
+        console.log(`Single-use, expires in ${mins} min. Re-run anytime for a fresh one.`);
+    }
+    catch (err) {
+        console.error(`Failed to mint login link: ${err.message}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=login-link.js.map

package/dist/commands/login-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-link.js","sourceRoot":"","sources":["../../src/commands/login-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,uCAAuC,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/mov.d.ts

@@ -2,6 +2,7 @@ export declare function movLogin(options: {
     server?: string;
     username?: string;
     password?: string;
+    provisioned?: boolean;
 }): Promise<void>;
 export declare function movPublish(file: string, options: {
     title?: string;

package/dist/commands/mov.js

@@ -13,10 +13,26 @@ import { saveMovConfig, optionalMovConfig } from "../config.js";
 import { getOAuthClient, getToken, uploadVideo, listMyChannels, createChannel, listMyVideos, deleteVideo, resolveChannelId, privacyToEnum, buildWatchUrl, } from "../peertube-client.js";
 const DEFAULT_SERVER = "https://4ort.mov";
 export async function movLogin(options) {
-    const server = options.server || DEFAULT_SERVER;
+    let server = options.server || DEFAULT_SERVER;
     // Non-interactive (agents/CI): flags or env. Falls back to prompts for humans.
     let username = options.username || process.env.FORT_MOV_USERNAME;
     let password = options.password || process.env.FORT_MOV_PASSWORD;
+    // --provisioned: pull the account minted by `4ort provision run video`.
+    if (options.provisioned && (!username || !password)) {
+        const { requireConfig } = await import("../config.js");
+        const { apiRequest } = await import("../api-client.js");
+        const data = await apiRequest(requireConfig(), "GET", "/api/provision/credentials/video").catch((e) => {
+            console.error(`No provisioned video account: ${e.message}`);
+            console.error("Run: 4ort provision run video");
+            process.exit(1);
+        });
+        const byType = Object.fromEntries(data.credentials.map((c) => [c.type, c]));
+        username = username || byType.peertube_username?.value;
+        password = password || byType.peertube_password?.value;
+        if (!options.server && byType.peertube_username?.metadata?.server) {
+            server = byType.peertube_username.metadata.server;
+        }
+    }
     let rl;
     try {
         if (!username || !password) {
@@ -146,10 +162,30 @@ async function loadComposition(p) {
     return { type: "tar", data };
 }
 export async function movRender(file, options) {
-    const server = options.server || process.env.FORT_FACTORY_URL || "https://factory.4ort.mov";
-    const key = options.key || process.env.FORT_FACTORY_KEY;
+    let server = options.server || process.env.FORT_FACTORY_URL || "https://factory.4ort.mov";
+    let key = options.key || process.env.FORT_FACTORY_KEY;
+    if (!key) {
+        // Fall back to the factory token minted by `4ort provision run video`.
+        try {
+            const { loadConfig } = await import("../config.js");
+            const { apiRequest } = await import("../api-client.js");
+            const config = loadConfig();
+            if (config?.apiKey) {
+                const data = await apiRequest(config, "GET", "/api/provision/credentials/video");
+                const cred = data.credentials.find((c) => c.type === "factory_key");
+                if (cred) {
+                    key = cred.value;
+                    if (!options.server && !process.env.FORT_FACTORY_URL && cred.metadata?.server)
+                        server = cred.metadata.server;
+                }
+            }
+        }
+        catch {
+            // fall through to the error below
+        }
+    }
     if (!key) {
-        console.error("set --key or FORT_FACTORY_KEY (the video-factory bearer token)");
+        console.error("No factory token. Set --key / FORT_FACTORY_KEY, or run: 4ort provision run video");
         process.exit(1);
     }
     const composition = await loadComposition(file);