@flaredlink/cli 0.1.1 → 0.2.0

package/README.md

@@ -13,21 +13,41 @@ Create an API token in the Flared app under Settings. `flared login` asks for it
 
 ## Commands
 
-| Command                                                                    | What it does                                                        |
-| -------------------------------------------------------------------------- | ------------------------------------------------------------------- |
-| `flared login [--token-stdin]`                                             | Save an API token after the API accepts it.                         |
-| `flared logout`                                                            | Delete the saved token. Revoke it in Settings to stop it working.   |
-| `flared whoami`                                                            | Show the token, its scopes, and the API URL.                        |
-| `flared link create URL [--slug S] [--title T] [--idempotency-key K]`      | Create a link and print its short URL. Reuse a key to retry safely. |
-| `flared link list [--search Q] [--limit N] [--cursor C] [--all]`           | List links, newest first.                                           |
-| `flared link get LINK`                                                     | Show one link.                                                      |
-| `flared link update LINK [--destination URL] [--title T \| --clear-title]` | Change the destination or the title.                                |
-| `flared link disable LINK`, `flared link enable LINK`                      | Stop or restart redirects. A disabled link keeps its slug.          |
-| `flared link qr LINK [--format svg\|png] [--out FILE]`                     | Make a QR code. SVG goes to standard output without `--out`.        |
-| `flared analytics LINK [--from YYYY-MM-DD] [--to YYYY-MM-DD]`              | Clicks by day, country, referrer, and device.                       |
-| `flared usage`                                                             | Recorded clicks this month and the allowance.                       |
-
-`LINK` is a link ID or a slug. Every command accepts `--json` for machine-readable output and `--api-url URL`.
+| Command                                                                                   | What it does                                                        |
+| ----------------------------------------------------------------------------------------- | ------------------------------------------------------------------- |
+| `flared login [--token-stdin]`                                                            | Save an API token after the API accepts it.                         |
+| `flared logout`                                                                           | Delete the saved token. Revoke it in Settings to stop it working.   |
+| `flared whoami`                                                                           | Show the token, its scopes, and the API URL.                        |
+| `flared link create URL [--slug S] [--title T] [--domain HOSTNAME] [--idempotency-key K]` | Create a link and print its short URL. Reuse a key to retry safely. |
+| `flared link list [--search Q] [--limit N] [--cursor C] [--all]`                          | List links, newest first.                                           |
+| `flared link get LINK`                                                                    | Show one link.                                                      |
+| `flared link update LINK [--destination URL] [--title T \| --clear-title]`                | Change the destination or the title.                                |
+| `flared link disable LINK`, `flared link enable LINK`                                     | Stop or restart redirects. A disabled link keeps its slug.          |
+| `flared link qr LINK [--format svg\|png] [--out FILE]`                                    | Make a QR code. SVG goes to standard output without `--out`.        |
+| `flared domain list`                                                                      | List domains, their status, and the DNS records to create.          |
+| `flared domain add HOSTNAME`                                                              | Add a subdomain you own and print the CNAME record to create.       |
+| `flared domain check DOMAIN`                                                              | Check the DNS record and the HTTPS certificate now.                 |
+| `flared domain remove DOMAIN --yes`                                                       | Remove a domain. Its links stop redirecting until you add it again. |
+| `flared analytics LINK [--from YYYY-MM-DD] [--to YYYY-MM-DD]`                             | Clicks by day, country, referrer, and device.                       |
+| `flared usage`                                                                            | Usage against the workspace limits, with warnings.                  |
+| `flared export --out FILE`                                                                | Save every link and the retained daily analytics as one JSON file.  |
+
+`LINK` is a link ID or a slug. `DOMAIN` is a domain hostname or ID. Every command accepts `--json` for machine-readable output and `--api-url URL`.
+
+## Custom domains
+
+Use a subdomain you own, such as `go.example.com`, for your short links:
+
+```sh
+flared domain add go.example.com
+# Create the CNAME record it prints, then:
+flared domain check go.example.com
+flared link create https://example.com/launch --domain go.example.com
+```
+
+`domain add`, `check`, and `remove` need a token with the `domains:write` scope; `domain list` and `--domain` need `domains:read`. A domain serves links once its status is `active`. Without `--domain`, a link uses the default domain. `flared domain remove` tells you how many active links stop and needs `--yes` to go ahead. The links and their slugs stay reserved, so adding the domain again restores them.
+
+`flared link qr` encodes the short URL: SVG by default, or a 512 × 512 PNG with `--format png --out FILE`.
 
 ## Self-hosted Flared
 
@@ -41,7 +61,7 @@ Point the CLI at your instance's API with `--api-url` or `FLARED_API_URL`, for e
 | 1    | Unexpected failure                                          |
 | 2    | Wrong command usage                                         |
 | 3    | Not signed in, or the token is invalid, expired, or revoked |
-| 4    | Not allowed, for example a missing scope                    |
+| 4    | Not allowed, for example a missing scope or a blocked link  |
 | 5    | Not found                                                   |
 | 6    | Rejected input or a conflict, such as a slug in use         |
 | 7    | Plan limit reached                                          |

package/dist/flared.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 // src/main.ts
-import { writeFile as writeFile2 } from "node:fs/promises";
+import { open, rename as rename2, rm as rm2, writeFile as writeFile2 } from "node:fs/promises";
 
 // src/cli.ts
 import { parseArgs } from "node:util";
-import QRCode from "qrcode";
 
 // ../contracts/src/analytics.ts
 var clickEventMaxAgeMs = 48 * 60 * 60 * 1000;
 var clickEventMaxSkewMs = 5 * 60 * 1000;
+var dayPattern = /^\d{4}-\d{2}-\d{2}$/;
 function isCount(value) {
   return Number.isSafeInteger(value) && value >= 0;
 }
@@ -26,7 +26,100 @@ function isUsage(value) {
   if (typeof value !== "object" || value === null)
     return false;
   const usage = value;
-  return typeof usage.month === "string" && isCount(usage.clicks) && isCount(usage.clickLimit) && typeof usage.asOf === "string";
+  return typeof usage.month === "string" && isCount(usage.clicks) && isCount(usage.clickLimit) && isCount(usage.unrecordedClicks) && (usage.unrecordedSince === null || typeof usage.unrecordedSince === "string") && isLimitUsage(usage.links) && isLimitUsage(usage.domains) && isCount(usage.retentionDays) && Array.isArray(usage.warnings) && usage.warnings.every(isUsageWarning) && typeof usage.asOf === "string";
+}
+function isLimitUsage(value) {
+  if (typeof value !== "object" || value === null)
+    return false;
+  const usage = value;
+  return isCount(usage.used) && isCount(usage.limit);
+}
+function isUsageWarning(value) {
+  if (typeof value !== "object" || value === null)
+    return false;
+  const warning = value;
+  return (warning.resource === "clicks" || warning.resource === "links" || warning.resource === "domains") && (warning.level === 80 || warning.level === 100);
+}
+
+// ../contracts/src/links.ts
+class LinkInputError extends Error {
+  field;
+  constructor(field, message) {
+    super(message);
+    this.field = field;
+  }
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isLink(value) {
+  if (!isRecord(value))
+    return false;
+  return typeof value.id === "string" && typeof value.domainId === "string" && typeof value.hostname === "string" && typeof value.slug === "string" && typeof value.shortUrl === "string" && typeof value.destination === "string" && (value.title === null || typeof value.title === "string") && typeof value.enabled === "boolean" && typeof value.createdAt === "string" && typeof value.updatedAt === "string";
+}
+function isListedLink(value) {
+  if (!isRecord(value) || !isLink(value))
+    return false;
+  const clicks = value.clicksLast30Days;
+  return clicks === null || Number.isSafeInteger(clicks) && clicks >= 0;
+}
+function isLinkPage(value) {
+  return isRecord(value) && Array.isArray(value.links) && value.links.every(isListedLink) && (value.nextCursor === null || typeof value.nextCursor === "string");
+}
+
+// ../contracts/src/domains.ts
+var domainStates = ["pending", "verifying", "active", "failed", "disabled"];
+var domainFailures = [
+  "dns_not_found",
+  "record_removed",
+  "certificate_failed",
+  "blocked",
+  "expired",
+  "provider_error"
+];
+function isDomainFailure(value) {
+  return typeof value === "string" && domainFailures.includes(value);
+}
+var domainClaimLifetimeMs = 7 * 24 * 60 * 60 * 1000;
+var domainCheckIntervalMs = 60 * 1000;
+var blockedTopLevels = new Set(["localhost", "local", "internal", "invalid", "test", "example"]);
+var labelPattern = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+function normalizeHostname(value) {
+  const invalid = (message) => new LinkInputError("hostname", message);
+  if (typeof value !== "string" || !value.trim())
+    throw invalid("Enter a hostname such as go.example.com.");
+  const trimmed = value.trim().toLowerCase().replace(/\.$/, "");
+  if (trimmed.length > 253 || /[\s/:?#@[\]*\\%]/.test(trimmed))
+    throw invalid("Enter only the hostname, such as go.example.com.");
+  let hostname;
+  try {
+    hostname = new URL(`https://${trimmed}`).hostname;
+  } catch {
+    throw invalid("Enter a valid hostname, such as go.example.com.");
+  }
+  const labels = hostname.split(".");
+  if (!labels.every((label) => labelPattern.test(label)) || hostname.length > 253)
+    throw invalid("Enter a valid hostname, such as go.example.com.");
+  if (labels.every((label) => /^\d+$/.test(label)) || /^\d+$/.test(labels[labels.length - 1]))
+    throw invalid("Use a hostname, not an IP address.");
+  if (blockedTopLevels.has(labels[labels.length - 1]))
+    throw invalid("Use a hostname on a public domain.");
+  if (labels.length < 3)
+    throw invalid("Use a subdomain such as go.example.com. Root domains are not supported.");
+  return hostname;
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var isCount2 = (value) => Number.isSafeInteger(value) && value >= 0;
+function isDomain(value) {
+  if (!isRecord2(value))
+    return false;
+  const error = value.error;
+  return typeof value.id === "string" && typeof value.hostname === "string" && (value.kind === "platform" || value.kind === "workspace") && domainStates.includes(value.state) && typeof value.isDefault === "boolean" && Array.isArray(value.records) && value.records.every((record) => isRecord2(record) && record.type === "CNAME" && typeof record.name === "string" && typeof record.value === "string") && (error === null || isRecord2(error) && isDomainFailure(error.code) && typeof error.message === "string") && (value.activeLinks === null || isCount2(value.activeLinks)) && typeof value.createdAt === "string" && (value.activatedAt === null || typeof value.activatedAt === "string");
+}
+function isDomainPage(value) {
+  return isRecord2(value) && Array.isArray(value.domains) && value.domains.every(isDomain) && isCount2(value.used) && isCount2(value.limit);
 }
 
 // ../contracts/src/errors.ts
@@ -38,6 +131,10 @@ var errorStatus = {
   DEFAULT_DOMAIN_UNAVAILABLE: 409,
   DOMAIN_UNAVAILABLE: 422,
   PLAN_LIMIT_REACHED: 403,
+  DOMAIN_TAKEN: 409,
+  DOMAIN_LIMIT_REACHED: 403,
+  DOMAINS_UNAVAILABLE: 503,
+  DOMAIN_CHECK_TOO_SOON: 429,
   RATE_LIMITED: 429,
   UNAUTHENTICATED: 401,
   ORIGIN_REJECTED: 403,
@@ -46,6 +143,9 @@ var errorStatus = {
   TOKEN_LIMIT_REACHED: 403,
   NO_WORKSPACE: 403,
   WORKSPACE_PENDING: 503,
+  ACCOUNT_DELETING: 409,
+  WORKSPACE_SUSPENDED: 403,
+  LINK_BLOCKED: 409,
   NOT_FOUND: 404,
   METHOD_NOT_ALLOWED: 405,
   PAYLOAD_TOO_LARGE: 413,
@@ -56,23 +156,38 @@ function isErrorCode(value) {
   return typeof value === "string" && Object.hasOwn(errorStatus, value);
 }
 
-// ../contracts/src/links.ts
-function isRecord(value) {
+// ../contracts/src/export.ts
+var exportFormat = "flared.export/1";
+var exportDimensions = ["country", "device", "referrer"];
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function isLink(value) {
-  if (!isRecord(value))
-    return false;
-  return typeof value.id === "string" && typeof value.domainId === "string" && typeof value.hostname === "string" && typeof value.slug === "string" && typeof value.shortUrl === "string" && typeof value.destination === "string" && (value.title === null || typeof value.title === "string") && typeof value.enabled === "boolean" && typeof value.createdAt === "string" && typeof value.updatedAt === "string";
+function isCount3(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
-function isListedLink(value) {
-  if (!isRecord(value) || !isLink(value))
-    return false;
-  const clicks = value.clicksLast30Days;
-  return clicks === null || Number.isSafeInteger(clicks) && clicks >= 0;
+function isDay(value) {
+  return typeof value === "string" && dayPattern.test(value);
 }
-function isLinkPage(value) {
-  return isRecord(value) && Array.isArray(value.links) && value.links.every(isListedLink) && (value.nextCursor === null || typeof value.nextCursor === "string");
+function isCursor(value) {
+  return value === null || typeof value === "string";
+}
+function isExportLinkPage(value) {
+  return isRecord3(value) && Array.isArray(value.links) && value.links.every(isLink) && isCursor(value.nextCursor);
+}
+function isAnalyticsPage(value, isRow) {
+  return isRecord3(value) && isDay(value.from) && isCount3(value.retentionDays) && Array.isArray(value.rows) && value.rows.every(isRow) && isCursor(value.nextCursor);
+}
+function isTotal(value) {
+  return isRecord3(value) && typeof value.linkId === "string" && isDay(value.day) && isCount3(value.clicks);
+}
+function isDimension(value) {
+  return isTotal(value) && isRecord3(value) && exportDimensions.some((dimension) => dimension === value.dimension) && typeof value.value === "string";
+}
+function isExportTotalsPage(value) {
+  return isAnalyticsPage(value, isTotal);
+}
+function isExportDimensionsPage(value) {
+  return isAnalyticsPage(value, isDimension);
 }
 
 // ../contracts/src/tokens.ts
@@ -81,11 +196,12 @@ var tokenScopes = [
   "links:write",
   "analytics:read",
   "domains:read",
+  "domains:write",
   "usage:read"
 ];
 var scopePresets = {
   full: [...tokenScopes],
-  read: tokenScopes.filter((scope) => scope !== "links:write")
+  read: tokenScopes.filter((scope) => scope.endsWith(":read"))
 };
 var tokenPrefix = "flr_";
 function isTokenScope(value) {
@@ -187,6 +303,8 @@ function createClient(options) {
         }
         throw new FlaredApiError("NETWORK_ERROR", "Could not reach the Flared API.", null);
       }
+      if (response.status === 204)
+        return { status: 204, headers: response.headers, body: null };
       if (response.ok) {
         const body = await response.json().catch(() => {
           return;
@@ -206,6 +324,20 @@ function createClient(options) {
     }
   }
   const id = (value) => encodeURIComponent(value);
+  const after = (cursor) => cursor ? `?cursor=${encodeURIComponent(cursor)}` : "";
+  async function page(path, valid) {
+    const { status, body } = await request("GET", path, { retry: true });
+    if (!valid(body))
+      throw invalid(status);
+    return body;
+  }
+  async function domainFrom(promise) {
+    const { status, body } = await promise;
+    const domain = record(body)?.domain;
+    if (!isDomain(domain))
+      throw invalid(status);
+    return domain;
+  }
   async function linkFrom(promise) {
     const { status, body } = await promise;
     const link = record(body)?.link;
@@ -273,10 +405,424 @@ function createClient(options) {
       if (!isUsage(usage))
         throw invalid(status);
       return usage;
+    },
+    async listDomains() {
+      const { status, body } = await request("GET", "/domains", { retry: true });
+      if (!isDomainPage(body))
+        throw invalid(status);
+      return body;
+    },
+    async addDomain(hostname) {
+      const response = request("POST", "/domains", { body: { hostname }, retry: true });
+      const { status } = await response;
+      return { domain: await domainFrom(response), created: status === 201 };
+    },
+    checkDomain(domainId) {
+      return domainFrom(request("POST", `/domains/${id(domainId)}/check`, { retry: false }));
+    },
+    async removeDomain(domainId) {
+      await request("DELETE", `/domains/${id(domainId)}`, { retry: false });
+    },
+    exportLinks(cursor) {
+      return page(`/export/links${after(cursor)}`, isExportLinkPage);
+    },
+    exportDailyTotals(cursor) {
+      return page(`/export/daily-totals${after(cursor)}`, isExportTotalsPage);
+    },
+    exportDailyDimensions(cursor) {
+      return page(`/export/daily-dimensions${after(cursor)}`, isExportDimensionsPage);
     }
   };
 }
 
+// ../client/src/export.ts
+async function writeExport(source, write, options = {}) {
+  const progress = { links: 0, dailyTotals: 0, dailyDimensions: 0 };
+  const exportedAt = new Date((options.now ?? Date.now)()).toISOString();
+  await write(`{"format":${JSON.stringify(exportFormat)},"exportedAt":"${exportedAt}"`);
+  async function section(name, read) {
+    await write(`,"${name}":[`);
+    let cursor;
+    do {
+      options.signal?.throwIfAborted();
+      const page = await read(cursor);
+      if (page.rows.length > 0)
+        await write((progress[name] > 0 ? "," : "") + page.rows.map((row) => JSON.stringify(row)).join(","));
+      progress[name] += page.rows.length;
+      options.onProgress?.({ ...progress });
+      cursor = page.nextCursor ?? undefined;
+    } while (cursor);
+    await write("]");
+  }
+  await section("links", async (cursor) => {
+    const page = await source.exportLinks(cursor);
+    return { rows: page.links, nextCursor: page.nextCursor };
+  });
+  let retained = null;
+  await section("dailyTotals", async (cursor) => {
+    const page = await source.exportDailyTotals(cursor);
+    retained ??= { from: page.from, retentionDays: page.retentionDays };
+    return page;
+  });
+  await section("dailyDimensions", (cursor) => source.exportDailyDimensions(cursor));
+  const { from, retentionDays } = retained ?? { from: null, retentionDays: null };
+  await write(`,"analyticsFrom":${JSON.stringify(from)},"retentionDays":${JSON.stringify(retentionDays)}}
+`);
+  return progress;
+}
+
+// ../../node_modules/.bun/lean-qr@2.7.4/node_modules/lean-qr/index.mjs
+var t = [0.2, 3 / 8, 5 / 9, 2 / 3];
+var o = (o2, e) => (r) => {
+  const n = 4 * o2 + r - 4, s = "*-04-39?2$%%$%%'$%''%'''%')(%'))%(++'(++'(+.'+-.',/3',33)-/5)-43).36)058*18<+37<+4:<,4:E,5<A-7>C/8@F/:EH/<EK0=FM1?IP2@KS3BNV4DPY5FS\\6HV_6IXb7K[e8N^i9Pam;Rdp<Tgt".charCodeAt(n) - 35, f = n > 8 ? s : 1, c = e / f | 0, i = e % f, l = f - i, a = n > 8 ? c * t[r] + (o2 > 5) & -2 : s, _ = c - a;
+  return { t: l * _ + i * _ + i, o: [[l, _], [i, _ + 1]], i: a };
+};
+var e = { min: 0, L: 0, M: 1, Q: 2, H: 3, max: 3 };
+var r = (t2) => new Uint8Array(t2);
+var n = (t2) => {
+  const o2 = new Error(`lean-qr error ${t2}`);
+  throw o2.code = t2, o2;
+};
+var s = (t2) => "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ $%*+-./:".indexOf(t2);
+var f = (t2) => t2.charCodeAt(0);
+var c = (...t2) => (o2, e2) => t2.forEach((t3) => t3(o2, e2));
+var i = (t2) => (o2) => {
+  o2.eci !== t2 && (o2.push(7, 4), t2 < 128 ? o2.push(t2, 8) : t2 < 16384 ? o2.push(32768 | t2, 16) : o2.push(12582912 | t2, 24), o2.eci = t2);
+};
+var l = (t2) => (o2, e2) => {
+  o2.push(4, 4), o2.push(t2.length, 8 + 8 * (e2 > 9)), t2.forEach((t3) => o2.push(t3, 8));
+};
+var a = (t2, o2, e2, r2, n2 = (t3, o3) => e2(t3.length, o3), s2 = r2 ? (o3) => c(i(r2), t2(o3)) : t2) => (s2.test = o2, s2.l = e2, s2.est = n2, s2.eci = r2 && [r2], s2);
+var _ = a((t2) => (o2, e2) => {
+  o2.push(1, 4), o2.push(t2.length, 10 + 2 * (e2 > 26) + 2 * (e2 > 9));
+  let r2 = 0;
+  for (;r2 < t2.length - 2; r2 += 3)
+    o2.push(+t2.slice(r2, r2 + 3), 10);
+  r2 < t2.length - 1 ? o2.push(+t2.slice(r2), 7) : r2 < t2.length && o2.push(+t2[r2], 4);
+}, (t2) => /[0-9]/.test(t2), (t2, o2) => 14 + 2 * (o2 > 26) + 2 * (o2 > 9) + 10 * t2 / 3);
+var u = a((t2) => (o2, e2) => {
+  o2.push(2, 4), o2.push(t2.length, 9 + 2 * (e2 > 26) + 2 * (e2 > 9));
+  let r2 = 0;
+  for (;r2 < t2.length - 1; r2 += 2)
+    o2.push(45 * s(t2[r2]) + s(t2[r2 + 1]), 11);
+  r2 < t2.length && o2.push(s(t2[r2]), 6);
+}, (t2) => s(t2) >= 0, (t2, o2) => 13 + 2 * (o2 > 26) + 2 * (o2 > 9) + 5.5 * t2);
+var d = a((t2) => l([...t2].map(f)), (t2) => f(t2) < 128, (t2, o2) => 12 + 8 * (o2 > 9) + 8 * t2);
+d._ = true, d.u = true;
+var p = a(d, (t2) => f(t2) < 256, d.l, 3);
+p._ = true;
+var m = new TextEncoder;
+var h = a((t2) => l(m.encode(t2)), () => 1, 0, 26, (t2, o2) => 12 + 8 * (o2 > 9) + 8 * m.encode(t2).length);
+h._ = true;
+var w = () => {
+  const t2 = new Map, o2 = new TextDecoder("sjis"), e2 = r(2);
+  for (let r2 = 0;r2 < 7973; ++r2)
+    e2[0] = r2 / 192 + 129 + 64 * (r2 > 5951), e2[1] = r2 % 192 + 64, t2.set(o2.decode(e2), r2);
+  return t2.delete("�"), w = () => t2, t2;
+};
+var y = a((t2) => (o2, e2) => {
+  o2.push(8, 4), o2.push(t2.length, 8 + 2 * (e2 > 26) + 2 * (e2 > 9));
+  for (const e3 of t2)
+    o2.push(w().get(e3), 13);
+}, (t2) => w().has(t2), (t2, o2) => 12 + 2 * (o2 > 26) + 2 * (o2 > 9) + 13 * t2);
+y._ = true;
+var g = [_, u, d, p, y, h];
+var b = { auto: (t2, { modes: o2 = g } = {}) => (e2, r2) => {
+  const s2 = o2.map((o3, e3) => {
+    const n2 = new Map, s3 = (t3, o4) => (n2.has(t3) || n2.set(t3, o4(t3, r2)), n2.get(t3));
+    return { m: o3, h: 1 << e3, C: o3.est("", r2), S: o3.l ? (t3, e4) => s3(e4 - t3, o3.l) : (e4, r3) => s3(t2.slice(e4, r3), o3.est) };
+  });
+  let f2 = [{ v: 0 }], c2 = 0, i2 = 0, l2 = -1;
+  for (const o3 of [...t2, ""]) {
+    let t3 = 0;
+    if (o3)
+      for (const e3 of s2)
+        e3.m.test(o3) && (t3 |= e3.h);
+    if (!o3 || t3 !== l2) {
+      if (l2 !== -1) {
+        const t4 = new Set(f2.map((t5) => t5.D)), o4 = [];
+        for (const { m: e3, C: r3, S: n2, h: a3 } of s2)
+          if (l2 & a3) {
+            const s3 = n2(c2, i2);
+            for (const l3 of e3.eci ?? t4)
+              if (!e3.u || !l3) {
+                let t5;
+                for (const o5 of f2)
+                  if (o5.D === l3 || e3.eci) {
+                    const f3 = o5.m === e3 && o5.D === l3, a4 = f3 ? o5.V : o5, _2 = e3._ && f3 ? o5.v + s3 - r3 : a4.v + 12 * (a4.D !== l3) + (f3 ? n2(f3 ? o5.$ : c2, i2) : s3);
+                    (!t5 || _2 < t5.v) && (t5 = { $: f3 ? o5.$ : c2, V: a4, m: e3, D: l3, A: i2, v: _2 });
+                  }
+                t5 && o4.push(t5);
+              }
+          }
+        f2 = o4;
+      }
+      l2 = t3, c2 = i2;
+    }
+    i2 += o3.length;
+  }
+  f2.length || n(5);
+  const a2 = [];
+  for (let o3 = f2.reduce((t3, o4) => o4.v < t3.v ? o4 : t3);o3.m; o3 = o3.V)
+    a2.push(o3.m(t2.slice(o3.$, o3.A)));
+  a2.reverse().forEach((t3) => t3(e2, r2));
+}, multi: c, eci: i, bytes: l, numeric: _, alphaNumeric: u, ascii: d, iso8859_1: p, shift_jis: y, utf8: h };
+var C = () => ({ F: r(2956), I: 0, push(t2, o2) {
+  for (let e2 = o2, r2 = 8 - (7 & this.I);e2 > 0; e2 -= r2, r2 = 8)
+    this.F[this.I >> 3] |= t2 << r2 >> e2, this.I += e2 < r2 ? e2 : r2;
+} });
+var x = (t2, o2 = t2 * t2, e2 = r(o2)) => ({ size: t2, K: e2, get: (o3, r2) => o3 >= 0 && o3 < t2 && !!(1 & e2[r2 * t2 + o3]), toString({ on: o3 = "##", off: e3 = "  ", lf: r2 = `
+`, pad: n2 = 4, padX: s2 = n2, padY: f2 = n2 } = {}) {
+  let c2 = "";
+  for (let n3 = -f2;n3 < t2 + f2; ++n3) {
+    for (let r3 = -s2;r3 < t2 + s2; ++r3)
+      c2 += this.get(r3, n3) ? o3 : e3;
+    c2 += r2;
+  }
+  return c2;
+}, toImageData(o3, { on: e3 = [0, 0, 0], off: r2 = [0, 0, 0, 0], pad: n2 = 4, padX: s2 = n2, padY: f2 = n2 } = {}) {
+  const c2 = t2 + 2 * s2, i2 = t2 + 2 * f2, l2 = o3.createImageData(c2, i2), a2 = new Uint32Array(l2.data.buffer);
+  l2.data.set([...e3, 255]);
+  const _2 = a2[0];
+  l2.data.set([...r2, 255]);
+  const u2 = a2[0];
+  for (let t3 = 0;t3 < i2; ++t3)
+    for (let o4 = 0;o4 < c2; ++o4)
+      a2[t3 * c2 + o4] = this.get(o4 - s2, t3 - f2) ? _2 : u2;
+  return l2;
+}, toCanvas(t3, o3) {
+  const e3 = t3.getContext("2d"), r2 = this.toImageData(e3, o3);
+  t3.width = r2.width, t3.height = r2.height, e3.putImageData(r2, 0, 0);
+}, toDataURL({ type: t3 = "image/png", scale: o3 = 1, ...e3 } = {}) {
+  const r2 = document.createElement("canvas"), n2 = r2.getContext("2d"), s2 = this.toImageData(n2, e3);
+  return r2.width = s2.width * o3, r2.height = s2.height * o3, n2.putImageData(s2, 0, 0), n2.imageSmoothingEnabled = false, n2.globalCompositeOperation = "copy", n2.drawImage(r2, 0, 0, s2.width, s2.height, 0, 0, r2.width, r2.height), r2.toDataURL(t3, 1);
+} });
+var z = [(t2, o2) => 1 & (t2 ^ o2), (t2, o2) => 1 & o2, (t2) => t2 % 3, (t2, o2) => (t2 + o2) % 3, (t2, o2) => 1 & (t2 / 3 ^ o2 >> 1), (t2, o2) => (t2 & o2 & 1) + t2 * o2 % 3, (t2, o2) => (t2 & o2) + t2 * o2 % 3 & 1, (t2, o2) => (t2 ^ o2) + t2 * o2 % 3 & 1];
+var E = r(511);
+for (let t2 = 0, o2 = 1;t2 < 255; o2 = 2 * o2 ^ 285 * (o2 > 127))
+  E[E[o2 + 255] = t2++] = o2;
+var M = (t2) => E[t2 % 255];
+var S = (t2) => E[t2 + 255];
+var v = (t2, o2) => {
+  const e2 = r(t2.length + o2.length - 1);
+  for (let r2 = 0;r2 < t2.length; ++r2)
+    for (let n2 = 0;n2 < o2.length; ++n2)
+      e2[r2 + n2] ^= M(t2[r2] + o2[n2]);
+  return e2.map(S);
+};
+var D = (t2, o2) => {
+  const e2 = r(t2.length + o2.length - 1);
+  e2.set(t2, 0);
+  for (let r2 = 0;r2 < t2.length; ++r2)
+    if (e2[r2]) {
+      const t3 = S(e2[r2]);
+      for (let n2 = 0;n2 < o2.length; ++n2)
+        e2[r2 + n2] ^= M(o2[n2] + t3);
+    }
+  return e2.slice(t2.length);
+};
+var L = [[0], [0, 0]];
+for (let t2 = 1;t2 < 30; ++t2)
+  L.push(v(L[t2], [0, t2]));
+var V = (t2, o2) => {
+  const e2 = [[], []];
+  let n2 = 0, s2 = 0;
+  for (const [r2, f3] of o2.o)
+    for (let c2 = 0;c2 < r2; ++c2, n2 += f3) {
+      const r3 = t2.slice(n2, n2 + f3);
+      e2[0].push(r3), e2[1].push(D(r3, L[o2.i])), s2 += f3 + o2.i;
+    }
+  const f2 = r(s2);
+  s2 = 0;
+  for (const t3 of e2)
+    for (let o3 = 0, e3 = -1;e3 < s2; ++o3) {
+      e3 = s2;
+      for (const e4 of t3)
+        o3 < e4.length && (f2[s2++] = e4[o3]);
+    }
+  return f2;
+};
+var $ = (t2, o2, e2) => {
+  let r2 = t2 <<= e2;
+  for (let t3 = 134217728;t3 >>= 1; )
+    r2 & t3 && (r2 ^= o2 * (t3 >> e2));
+  return r2 | t2;
+};
+var A = ({ size: t2, K: o2 }, e2) => {
+  const r2 = (e3, r3, n3, s3) => {
+    for (;n3-- > 0; e3 += t2)
+      o2.fill(s3, e3, e3 + r3);
+  }, n2 = (o3, e3, n3) => {
+    for (let s3 = 0;s3++ < 3; n3 -= 2)
+      r2(e3 * t2 + o3 - (n3 >> 1) * (t2 + 1), n3, n3, 2 | s3);
+  }, s2 = 2 * ((t2 - 13) / (1 + (e2 / 7 | 0)) / 2 + 0.75 | 0);
+  if (e2 > 1)
+    for (let o3 = t2 - 7;o3 > 8; o3 -= s2) {
+      for (let t3 = o3;t3 > 8; t3 -= s2)
+        n2(o3, t3, 5);
+      o3 < t2 - 7 && n2(o3, 6, 5);
+    }
+  if (e2 > 6)
+    for (let r3 = $(e2, 7973, 12), n3 = 1;n3 < 7; ++n3)
+      for (let e3 = 12;e3-- > 9; r3 >>= 1)
+        o2[n3 * t2 - e3] = 2 | 1 & r3;
+  r2(7, 2, 9, 2), r2(t2 - 8, 8, 9, 2);
+  for (let e3 = 0;e3 < t2; ++e3)
+    o2[6 * t2 + e3] = 3 ^ 1 & e3;
+  n2(3, 3, 7), n2(t2 - 4, 3, 7);
+  for (let e3 = 0;e3 < t2; ++e3)
+    for (let r3 = e3;r3 < t2; ++r3)
+      o2[r3 * t2 + e3] = o2[e3 * t2 + r3];
+  o2[(t2 - 8) * t2 + 8] = 3;
+};
+var F = ({ size: t2, K: o2 }) => {
+  const e2 = [];
+  for (let r2 = t2 - 2, n2 = t2, s2 = -1;r2 >= 0; r2 -= 2) {
+    for (r2 === 5 && (r2 = 4);n2 += s2, n2 !== -1 && n2 !== t2; ) {
+      const s3 = n2 * t2 + r2;
+      o2[s3 + 1] || e2.push(s3 + 1), o2[s3] || e2.push(s3);
+    }
+    s2 *= -1;
+  }
+  return e2;
+};
+var H = ({ K: t2 }, o2, e2) => o2.forEach((o3, r2) => t2[o3] = e2[r2 >> 3] >> (7 & ~r2) & 1);
+var I = ({ size: t2, K: o2 }, e2, r2, n2) => {
+  for (let r3 = 0;r3 < t2; ++r3)
+    for (let n3 = 0;n3 < t2; ++n3) {
+      const s3 = r3 * t2 + n3;
+      o2[s3] ^= !(e2(n3, r3) || 2 & o2[s3]);
+    }
+  let s2 = 21522 ^ $((1 ^ n2) << 3 | r2, 1335, 10);
+  for (let e3 = 0;e3++ < 8; s2 >>= 1)
+    o2[(e3 - (e3 < 7)) * t2 + 8] = 1 & s2, o2[9 * t2 - e3] = 1 & s2;
+  for (let e3 = 8;--e3, s2; s2 >>= 1)
+    o2[8 * t2 + e3 - (e3 < 7)] = 1 & s2, o2[(t2 - e3) * t2 + 8] = 1 & s2;
+};
+var K = ({ size: t2, K: o2 }, e2 = 0, r2 = 0) => {
+  for (let n2 = 0;n2 < t2; ++n2) {
+    for (let s2 = 0;s2 < 2; ++s2)
+      for (let f2, c2 = 0, i2 = 0, l2 = 2;c2 < t2; ++c2) {
+        const a2 = 1 & o2[s2 ? n2 * t2 + c2 : c2 * t2 + n2];
+        r2 += a2, i2 = (i2 >> 1 | 2098176) & (3047517 ^ a2 - 1), 2049 & i2 && (e2 += 40), a2 ^ l2 && (f2 = 0), l2 = a2, e2 += ++f2 === 5 ? 3 : f2 > 5;
+      }
+    if (n2)
+      for (let r3 = t2 + n2, s2 = 5 * o2[n2 - 1] ^ o2[n2];r3 < t2 * t2; r3 += t2) {
+        const t3 = 5 * o2[r3 - 1] ^ o2[r3];
+        e2 += 3 * !(1 & (s2 | t3) | 4 & (s2 ^ t3)), s2 = t3;
+      }
+  }
+  return e2 + 10 * (10 * Math.abs(r2 / (t2 * t2) - 1) | 0);
+};
+var N = [];
+var P = (t2 = n(1), { minCorrectionLevel: e2 = 0, maxCorrectionLevel: r2 = 3, minVersion: s2 = 1, maxVersion: f2 = 40, mask: c2, trailer: i2 = 60433, ...l2 } = {}) => {
+  r2 < e2 && n(3), f2 < s2 && n(2), typeof t2 == "string" && (t2 = b.auto(t2, l2));
+  for (let n2 = s2, l3 = 0;n2 <= f2; ++n2) {
+    let s3 = N[n2];
+    s3 || (N[n2] = s3 = x(4 * n2 + 17), A(s3, n2), s3.p = F(s3));
+    const f3 = o(n2, s3.p.length >> 3);
+    if (8 * f3(e2).t < l3)
+      continue;
+    const a2 = C();
+    t2(a2, n2), l3 = a2.I;
+    for (let t3 = r2;t3 >= e2; --t3) {
+      const o2 = f3(t3);
+      if (8 * o2.t < l3)
+        continue;
+      for (a2.I = l3 + 11 & -8;a2.I < 8 * o2.t; )
+        a2.push(i2, 16);
+      const e3 = x(s3.size, s3.K);
+      return H(e3, s3.p, V(a2.F, o2)), (z[c2] ? [z[c2]] : z).map((o3, r3) => {
+        const n3 = x(e3.size, e3.K);
+        return I(n3, o3, c2 ?? r3, t3), n3.s = z[c2] ? 0 : K(n3), n3;
+      }).reduce((t4, o3) => o3.s < t4.s ? o3 : t4);
+    }
+  }
+  n(4);
+};
+P.with = (...t2) => (o2, e2) => P(o2, { modes: [...g, ...t2], ...e2 });
+
+// ../client/src/qr.ts
+var defaultQrSize = 512;
+var quietZone = 4;
+function qrMatrix(text) {
+  return P(text, { minCorrectionLevel: e.M });
+}
+function qrSvg(text, size = defaultQrSize) {
+  const code = qrMatrix(text);
+  const span = code.size + quietZone * 2;
+  let path = "";
+  for (let y2 = 0;y2 < code.size; y2 += 1)
+    for (let x2 = 0;x2 < code.size; x2 += 1)
+      if (code.get(x2, y2))
+        path += `M${x2 + quietZone} ${y2 + quietZone}h1v1h-1z`;
+  return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${span} ${span}" width="${size}" height="${size}" shape-rendering="crispEdges"><rect width="${span}" height="${span}" fill="#fff"/><path d="${path}" fill="#000"/></svg>`;
+}
+async function qrPng(text, size = defaultQrSize) {
+  const code = qrMatrix(text);
+  const span = code.size + quietZone * 2;
+  const scale = Math.max(1, Math.floor(size / span));
+  const width = Math.max(size, span * scale);
+  const offset = Math.floor((width - code.size * scale) / 2);
+  const rowBytes = Math.ceil(width / 8);
+  const raw = new Uint8Array((rowBytes + 1) * width);
+  for (let y2 = 0;y2 < width; y2 += 1) {
+    const row = y2 * (rowBytes + 1);
+    const moduleY = Math.floor((y2 - offset) / scale);
+    for (let x2 = 0;x2 < width; x2 += 1) {
+      const moduleX = Math.floor((x2 - offset) / scale);
+      const dark = x2 >= offset && y2 >= offset && moduleX < code.size && moduleY < code.size && code.get(moduleX, moduleY);
+      if (!dark)
+        raw[row + 1 + (x2 >> 3)] |= 128 >> (x2 & 7);
+    }
+  }
+  const header = new Uint8Array(13);
+  const view = new DataView(header.buffer);
+  view.setUint32(0, width);
+  view.setUint32(4, width);
+  header.set([1, 0, 0, 0, 0], 8);
+  return concat([
+    new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10]),
+    chunk("IHDR", header),
+    chunk("IDAT", await deflate(raw)),
+    chunk("IEND", new Uint8Array(0))
+  ]);
+}
+async function deflate(data) {
+  const stream = new Blob([data]).stream().pipeThrough(new CompressionStream("deflate"));
+  return new Uint8Array(await new Response(stream).arrayBuffer());
+}
+function chunk(type, data) {
+  const out = new Uint8Array(12 + data.length);
+  const view = new DataView(out.buffer);
+  view.setUint32(0, data.length);
+  out.set(new TextEncoder().encode(type), 4);
+  out.set(data, 8);
+  view.setUint32(8 + data.length, crc32(out.subarray(4, 8 + data.length)));
+  return out;
+}
+var crcTable = Array.from({ length: 256 }, (_2, n2) => {
+  let c2 = n2;
+  for (let k = 0;k < 8; k += 1)
+    c2 = c2 & 1 ? 3988292384 ^ c2 >>> 1 : c2 >>> 1;
+  return c2 >>> 0;
+});
+function crc32(bytes) {
+  let c2 = 4294967295;
+  for (const byte of bytes)
+    c2 = crcTable[(c2 ^ byte) & 255] ^ c2 >>> 8;
+  return (c2 ^ 4294967295) >>> 0;
+}
+function concat(parts) {
+  const out = new Uint8Array(parts.reduce((total, part) => total + part.length, 0));
+  let at = 0;
+  for (const part of parts) {
+    out.set(part, at);
+    at += part.length;
+  }
+  return out;
+}
+
 // src/config.ts
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
@@ -301,6 +847,9 @@ function exitCodeFor(code) {
       return exitCodes.unauthenticated;
     case "INSUFFICIENT_SCOPE":
     case "NO_WORKSPACE":
+    case "ACCOUNT_DELETING":
+    case "WORKSPACE_SUSPENDED":
+    case "LINK_BLOCKED":
     case "ORIGIN_REJECTED":
     case "REAUTH_REQUIRED":
       return exitCodes.forbidden;
@@ -312,13 +861,17 @@ function exitCodeFor(code) {
     case "IDEMPOTENCY_KEY_REQUIRED":
     case "DEFAULT_DOMAIN_UNAVAILABLE":
     case "DOMAIN_UNAVAILABLE":
+    case "DOMAIN_TAKEN":
       return exitCodes.rejected;
     case "PLAN_LIMIT_REACHED":
     case "TOKEN_LIMIT_REACHED":
+    case "DOMAIN_LIMIT_REACHED":
       return exitCodes.planLimit;
     case "RATE_LIMITED":
+    case "DOMAIN_CHECK_TOO_SOON":
       return exitCodes.rateLimited;
     case "SERVICE_UNAVAILABLE":
+    case "DOMAINS_UNAVAILABLE":
     case "WORKSPACE_PENDING":
     case "NETWORK_ERROR":
       return exitCodes.unavailable;
@@ -411,7 +964,7 @@ function resolveToken(env, saved) {
 
 // src/output.ts
 function table(rows) {
-  const widths = rows[0].map((_, column) => Math.max(...rows.map((row) => row[column].length)));
+  const widths = rows[0].map((_2, column) => Math.max(...rows.map((row) => row[column].length)));
   return rows.map((row) => row.map((cell, column) => column === row.length - 1 ? cell : cell.padEnd(widths[column])).join("  ")).join(`
 `);
 }
@@ -421,6 +974,11 @@ function shorten(text, length) {
 function utc(iso) {
   return `${iso.slice(0, 16).replace("T", " ")} UTC`;
 }
+function linkStatus(link) {
+  if (link.blocked)
+    return `blocked (${link.blocked.reason})`;
+  return link.enabled ? "enabled" : "disabled";
+}
 function linkTable(links) {
   if (links.length === 0)
     return "No links.";
@@ -429,7 +987,7 @@ function linkTable(links) {
     ...links.map((link) => [
       link.shortUrl,
       link.clicksLast30Days === null ? "-" : String(link.clicksLast30Days),
-      link.enabled ? "enabled" : "disabled",
+      linkStatus(link),
       shorten(link.destination, 60)
     ])
   ]);
@@ -439,7 +997,7 @@ function linkDetails(link) {
     ["Short URL", link.shortUrl],
     ["Destination", link.destination],
     ["Title", link.title ?? "-"],
-    ["Status", link.enabled ? "enabled" : "disabled"],
+    ["Status", linkStatus(link)],
     ["Created", utc(link.createdAt)],
     ["Updated", utc(link.updatedAt)],
     ["ID", link.id]
@@ -448,7 +1006,7 @@ function linkDetails(link) {
 function top(rows) {
   if (rows.length === 0)
     return "-";
-  return [...rows].sort((a, b) => b.clicks - a.clicks).slice(0, 5).map((row) => `${row.value} ${row.clicks}`).join(", ");
+  return [...rows].sort((a2, b2) => b2.clicks - a2.clicks).slice(0, 5).map((row) => `${row.value} ${row.clicks}`).join(", ");
 }
 function analyticsReport(link, analytics) {
   const clicks = analytics.total === 1 ? "1 click" : `${analytics.total} clicks`;
@@ -467,8 +1025,24 @@ function analyticsReport(link, analytics) {
   ].join(`
 `);
 }
+function used(used2, limit, warning) {
+  return `${used2} of ${limit}${warning ? ` (${warning.level}%)` : ""}`;
+}
 function usageReport(usage) {
-  return `${usage.clicks} of ${usage.clickLimit} clicks recorded in ${usage.month} (as of ${utc(usage.asOf)}).`;
+  const warning = (resource) => usage.warnings.find((item) => item.resource === resource);
+  const rows = [
+    [`Clicks in ${usage.month}`, used(usage.clicks, usage.clickLimit, warning("clicks"))],
+    ["Active links", used(usage.links.used, usage.links.limit, warning("links"))],
+    ["Custom domains", used(usage.domains.used, usage.domains.limit, warning("domains"))],
+    ["History", `${usage.retentionDays} days`],
+    ["As of", utc(usage.asOf)]
+  ];
+  if (usage.unrecordedSince)
+    rows.splice(1, 0, [
+      "Not recorded",
+      `${usage.unrecordedClicks} clicks since ${utc(usage.unrecordedSince)}`
+    ]);
+  return table(rows);
 }
 function identityReport(identity, apiUrl) {
   const rows = identity.kind === "token" ? [
@@ -477,9 +1051,51 @@ function identityReport(identity, apiUrl) {
   ] : [["Session", "browser session"]];
   return table([...rows, ["Scopes", identity.scopes.join(", ")], ["API", apiUrl]]);
 }
+function domainKind(domain) {
+  if (domain.kind === "workspace")
+    return "yours";
+  return domain.isDefault ? "default" : "shared";
+}
+function domainTable(page) {
+  const rows = [
+    ["HOSTNAME", "STATUS", "KIND", "DNS RECORD"],
+    ...page.domains.map((domain) => [
+      domain.hostname,
+      domain.state,
+      domainKind(domain),
+      domain.records.map((record2) => `${record2.type} ${record2.name} -> ${record2.value}`).join(", ") || "-"
+    ])
+  ];
+  const problems = page.domains.flatMap((domain) => domain.error ? [`${domain.hostname}: ${domain.error.message}`] : []);
+  return [
+    table(rows),
+    "",
+    `${page.used} of ${page.limit} domains used.`,
+    ...problems.length ? ["", ...problems] : []
+  ].join(`
+`);
+}
+function domainDetails(domain) {
+  const lines = [
+    table([
+      ["Hostname", domain.hostname],
+      ["Status", domain.state],
+      ...domain.error ? [["Problem", domain.error.message]] : [],
+      ...domain.activeLinks === null ? [] : [["Active links", String(domain.activeLinks)]],
+      ["ID", domain.id]
+    ])
+  ];
+  if (domain.state !== "active" && domain.records.length > 0)
+    lines.push("", `Create ${domain.records.length === 1 ? "this DNS record" : "these DNS records"} where you manage the domain, then run flared domain check:`, "", table([
+      ["TYPE", "NAME", "VALUE"],
+      ...domain.records.map((record2) => [record2.type, record2.name, record2.value])
+    ]));
+  return lines.join(`
+`);
+}
 
 // src/version.ts
-var cliVersion = "0.1.1";
+var cliVersion = "0.2.0";
 
 // src/cli.ts
 var optionTypes = {
@@ -500,7 +1116,9 @@ var optionTypes = {
   format: { type: "string" },
   out: { type: "string" },
   from: { type: "string" },
-  to: { type: "string" }
+  to: { type: "string" },
+  domain: { type: "string" },
+  yes: { type: "boolean" }
 };
 var uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function resolveLink(client, reference) {
@@ -514,6 +1132,19 @@ async function resolveLink(client, reference) {
     throw new CliError(`No link with the slug "${reference}".`, exitCodes.notFound, "NOT_FOUND");
   throw new UsageError(`Several links use the slug "${reference}". Use the link ID.`);
 }
+async function resolveDomain(client, reference, workspaceOnly) {
+  let hostname;
+  try {
+    hostname = normalizeHostname(reference);
+  } catch {
+    hostname = reference.trim().toLowerCase().replace(/\.$/, "");
+  }
+  const { domains } = await client.listDomains();
+  const match = domains.find((domain) => (domain.id === reference || domain.hostname === hostname) && (!workspaceOnly || domain.kind === "workspace"));
+  if (!match)
+    throw new CliError(`No domain "${reference}" in this workspace. Run flared domain list.`, exitCodes.notFound, "NOT_FOUND");
+  return match;
+}
 function limitOf(value) {
   if (value === undefined)
     return;
@@ -581,13 +1212,22 @@ ${identityReport(identity, apiUrl)}`, {
     }
   },
   "link create": {
-    usage: "flared link create URL [--slug SLUG] [--title TITLE] [--idempotency-key KEY]",
-    summary: "Create a short link and print its URL.",
-    options: ["slug", "title", "idempotency-key"],
+    usage: "flared link create URL [--slug SLUG] [--title TITLE] [--domain HOSTNAME] [--idempotency-key KEY]",
+    summary: "Create a short link and print its URL. Without --domain, it uses the default domain.",
+    options: ["slug", "title", "domain", "idempotency-key"],
     args: 1,
     async run({ args, options, client, print }) {
-      const result = await (await client()).createLink({
+      const api = await client();
+      let domainId;
+      if (options.domain !== undefined) {
+        const domain = await resolveDomain(api, options.domain, false);
+        if (domain.state !== "active")
+          throw new CliError(`${domain.hostname} is ${domain.state}. Links can use it once it is active.`, exitCodes.rejected, "DOMAIN_UNAVAILABLE");
+        domainId = domain.id;
+      }
+      const result = await api.createLink({
         destination: args[0],
+        ...domainId ? { domainId } : {},
         ...options.slug ? { slug: options.slug } : {},
         ...options.title ? { title: options.title } : {},
         ...options["idempotency-key"] ? { idempotencyKey: options["idempotency-key"] } : {}
@@ -691,9 +1331,9 @@ More links: --cursor ${page.nextCursor}` : "";
         throw new UsageError("With --json, give --out FILE.");
       const api = await client();
       const link = await api.getLink(await resolveLink(api, args[0]));
-      const data = format === "svg" ? await QRCode.toString(link.shortUrl, { type: "svg", margin: 2 }) : new Uint8Array(await QRCode.toBuffer(link.shortUrl, { type: "png", width: 512 }));
       if (!options.out)
-        return io.stdout(String(data).trimEnd());
+        return io.stdout(qrSvg(link.shortUrl, defaultQrSize));
+      const data = format === "svg" ? qrSvg(link.shortUrl, defaultQrSize) : await qrPng(link.shortUrl, defaultQrSize);
       await io.writeFile(options.out, data);
       print(`Saved the QR code for ${link.shortUrl} to ${options.out}.`, {
         shortUrl: link.shortUrl,
@@ -702,6 +1342,61 @@ More links: --cursor ${page.nextCursor}` : "";
       });
     }
   },
+  "domain list": {
+    usage: "flared domain list",
+    summary: "List the domains for links, their status, and the DNS records to create.",
+    options: [],
+    args: 0,
+    async run({ client, print }) {
+      const page = await (await client()).listDomains();
+      print(domainTable(page), page);
+    }
+  },
+  "domain add": {
+    usage: "flared domain add HOSTNAME",
+    summary: "Add a subdomain you own, such as go.example.com, and print the DNS record to create.",
+    options: [],
+    args: 1,
+    async run({ args, client, print }) {
+      const { domain, created } = await (await client()).addDomain(args[0]);
+      const intro = created ? `Added ${domain.hostname}.` : `${domain.hostname} is already in this workspace.`;
+      print(`${intro}
+
+${domainDetails(domain)}`, { domain, created });
+    }
+  },
+  "domain check": {
+    usage: "flared domain check HOSTNAME_OR_ID",
+    summary: "Check the DNS record and the HTTPS certificate now.",
+    options: [],
+    args: 1,
+    async run({ args, client, print }) {
+      const api = await client();
+      const domain = await api.checkDomain((await resolveDomain(api, args[0], true)).id);
+      print(domainDetails(domain), { domain });
+    }
+  },
+  "domain remove": {
+    usage: "flared domain remove HOSTNAME_OR_ID --yes",
+    summary: "Remove a domain. Its links stop redirecting; adding it again restores them.",
+    options: ["yes"],
+    args: 1,
+    async run({ args, options, client, print }) {
+      const api = await client();
+      const domain = await resolveDomain(api, args[0], true);
+      const count = domain.activeLinks ?? 0;
+      const stops = `${count} active ${count === 1 ? "link" : "links"}`;
+      if (!options.yes)
+        throw new UsageError(`Removing ${domain.hostname} stops ${stops}. Run again with --yes to remove it.`);
+      await api.removeDomain(domain.id);
+      const restore = count ? ` ${stops} stopped redirecting. Add the domain again to restore them.` : "";
+      print(`Removed ${domain.hostname}.${restore}`, {
+        removed: true,
+        domain: { id: domain.id, hostname: domain.hostname },
+        activeLinks: count
+      });
+    }
+  },
   analytics: {
     usage: "flared analytics ID_OR_SLUG [--from YYYY-MM-DD] [--to YYYY-MM-DD]",
     summary: "Show clicks by day, country, referrer, and device.",
@@ -714,9 +1409,34 @@ More links: --cursor ${page.nextCursor}` : "";
       print(analyticsReport(link, analytics), { analytics });
     }
   },
+  export: {
+    usage: "flared export --out FILE",
+    summary: "Save every link and the retained daily analytics as one JSON file. The token needs links:read and analytics:read.",
+    options: ["out"],
+    args: 0,
+    async run({ options, io, json, client, print }) {
+      const out = options.out;
+      if (!out)
+        throw new UsageError("Give the file to write with --out FILE.");
+      const api = await client();
+      const file = await io.openFile(out);
+      if (!json)
+        io.stderr(`Exporting to ${out}…`);
+      let counts;
+      try {
+        counts = await writeExport(api, (text) => file.write(text));
+        await file.finish();
+      } catch (error) {
+        await file.discard();
+        throw error;
+      }
+      const numbers = new Intl.NumberFormat("en-US");
+      print(`Saved ${numbers.format(counts.links)} links, ${numbers.format(counts.dailyTotals)} daily totals, and ${numbers.format(counts.dailyDimensions)} daily breakdown rows to ${out}.`, { file: out, ...counts });
+    }
+  },
   usage: {
     usage: "flared usage",
-    summary: "Show recorded clicks this month and the allowance.",
+    summary: "Show usage against the workspace limits.",
     options: [],
     args: 0,
     async run({ client, print }) {
@@ -743,11 +1463,11 @@ function help() {
 }
 function findCommand(positionals) {
   const [first, second, ...rest] = positionals;
-  if (first === "link") {
-    const name = `link ${second ?? ""}`;
+  if (first === "link" || first === "domain") {
+    const name = `${first} ${second ?? ""}`;
     const command2 = commands[name];
     if (!command2)
-      throw new UsageError(`Unknown link command "${second ?? ""}".`);
+      throw new UsageError(`Unknown ${first} command "${second ?? ""}".`);
     return { name, command: command2, args: rest };
   }
   const command = first === undefined ? undefined : commands[first];
@@ -859,8 +1579,8 @@ function promptSecret(question) {
       else
         resolve(value);
     };
-    const onData = (chunk) => {
-      for (const character of chunk) {
+    const onData = (chunk2) => {
+      for (const character of chunk2) {
         if (character === "\r" || character === `
 `)
           return done();
@@ -877,8 +1597,8 @@ function promptSecret(question) {
 }
 async function readAll(stream) {
   let text = "";
-  for await (const chunk of stream)
-    text += chunk.toString();
+  for await (const chunk2 of stream)
+    text += chunk2.toString();
   return text;
 }
 
@@ -892,5 +1612,22 @@ process.exitCode = await run(process.argv.slice(2), {
   stdinIsTTY: process.stdin.isTTY === true,
   readSecret: promptSecret,
   readStdin: () => readAll(process.stdin),
-  writeFile: (path, data) => writeFile2(path, data)
+  writeFile: (path, data) => writeFile2(path, data),
+  async openFile(path) {
+    const partial = `${path}.partial`;
+    const handle = await open(partial, "w");
+    return {
+      write: async (text) => {
+        await handle.write(text);
+      },
+      async finish() {
+        await handle.close();
+        await rename2(partial, path);
+      },
+      async discard() {
+        await handle.close().catch(() => {});
+        await rm2(partial, { force: true });
+      }
+    };
+  }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@flaredlink/cli",
-	"version": "0.1.1",
+	"version": "0.2.0",
 	"description": "Create, edit, and measure Flared short links from your terminal.",
 	"license": "AGPL-3.0-only",
 	"type": "module",
@@ -20,8 +20,5 @@
 	],
 	"engines": {
 		"node": ">=20"
-	},
-	"dependencies": {
-		"qrcode": "1.5.4"
 	}
 }