@hasna/domains 0.0.22 → 0.0.24

package/README.md

@@ -7,11 +7,11 @@ Domain portfolio, registrar, marketplace, and DNS management for AI agents — C
 - **Domain portfolio management** — track registrar, expiry, SSL, nameservers, pricing, lifecycle status, and notes
 - **Registrar sync and purchase flows** — direct Route 53 and Namecheap registration plus GoDaddy and Brandsight provider surfaces through a shared provider registry
 - **Nameserver delegation** — Route 53 and Namecheap adapters can update registrar nameservers when the provider API supports it
-- **Cloudflare-first DNS** — create or reuse Cloudflare zones and manage DNS records through the DNS provider layer
+- **DNS provider management** — create or reuse Cloudflare or Route 53 zones and manage DNS records through the DNS provider layer
 - **DNS record CRUD** — A, AAAA, CNAME, MX, TXT, NS, SRV records
 - **Sedo marketplace tools** — search, portfolio/listing management, blacklist checks, and recorded Sedo purchases
-- **AWS diagnostics** — sync Route 53 registered domains and report AWS/Beepmedia credential metadata without printing secret values
-- **Credential diagnostics** — redacted checks for Route 53, Beepmedia AWS env aliases, Cloudflare, Namecheap, GoDaddy, Brandsight, and Sedo
+- **AWS diagnostics** — sync Route 53 registered domains and hosted zones without printing secret values
+- **Credential diagnostics** — redacted checks for Route 53, Cloudflare, Namecheap, GoDaddy, Brandsight, and Sedo
 - **Expiry alerts** — set alerts for domain expiry and SSL certificate expiry
 - **WHOIS lookup** — query and store registrar/expiry info from WHOIS
 - **SSL certificate check** — verify SSL issuer and expiry
@@ -30,7 +30,7 @@ Domain portfolio, registrar, marketplace, and DNS management for AI agents — C
 npm install -g @hasna/domains
 ```
 
-Data is stored at `~/.hasna/domains/domains.db`. Override with `HASNA_DOMAINS_DB_PATH`, `HASNA_DOMAINS_DIR`, or `DOMAINS_DIR`.
+Data is stored in the local domains data directory (`$XDG_DATA_HOME/open-domains` or `~/.local/share/open-domains` for new installs; existing legacy installs continue using their current directory). Override with `DOMAINS_DB_PATH`, `DOMAINS_DIR`, or the legacy `HASNA_DOMAINS_DB_PATH` / `HASNA_DOMAINS_DIR` names.
 
 ## Quick Start
 
@@ -38,7 +38,7 @@ Data is stored at `~/.hasna/domains/domains.db`. Override with `HASNA_DOMAINS_DB
 # Set defaults used by availability, buy, setup, DNS, and doctor commands
 domains config set default-registrar route53
 domains config set default-dns cloudflare
-domains config set purchase-aws-profile hasna-xyz-infra
+domains config set purchase-aws-profile production-domains
 
 # Add registrant contact defaults used by registrar purchase APIs
 domains config set contact.first_name Jane
@@ -156,23 +156,23 @@ Prefer the `domains` CLI over raw registrar CLIs for Route 53 availability, regi
 ## AWS Domain Discovery
 
 ```bash
-# Sync registered domains from specific AWS accounts
-AWS_PROFILE=hasna domains sync --provider route53
-AWS_PROFILE=hasna-xyz-infra domains sync --provider route53
+# Sync registered domains and hosted zones from specific AWS profiles
+AWS_PROFILE=production-domains domains sync --provider route53
+AWS_PROFILE=shared-dns domains sync --provider route53
 
 # Check all configured providers and redacted credential status
 domains providers --json
 domains doctor --json
 ```
 
-Route 53 sync imports registered domains when the selected AWS account permits `route53domains:ListDomains`. Beepmedia AWS metadata can be inspected through redacted diagnostics, but domain-looking SSM/Secrets names should only be imported after review because they do not prove registrar ownership.
+Route 53 sync imports registered domains when the selected AWS account permits `route53domains:ListDomains`, and hosted zones when the account permits Route 53 hosted-zone reads. Domain-looking names from unrelated systems such as SSM parameters or Secrets Manager should only be imported after review because they do not prove registrar ownership.
 
 ## Storage Sync
 
 Set one of these environment variables to sync with a remote PostgreSQL storage database:
 
 ```bash
-export HASNA_DOMAINS_DATABASE_URL="postgres://..."
+export DOMAINS_DATABASE_URL="postgres://..."
 
 domains storage status
 domains storage push
@@ -216,13 +216,16 @@ Stdio remains the default transport for gradual rollout.
 
 | Variable | Description |
 |----------|-------------|
+| `DOMAINS_DB_PATH` | Override database file path |
 | `HASNA_DOMAINS_DB_PATH` | Override database file path |
+| `DOMAINS_CONFIG_PATH` | Override config file path |
+| `DOMAINS_CONFIG_DIR` | Override config directory |
 | `HASNA_DOMAINS_DIR` | Override database directory |
 | `DOMAINS_DIR` | Override database directory fallback |
-| `HASNA_DOMAINS_DATABASE_URL` | Remote storage PostgreSQL database URL |
-| `DOMAINS_DATABASE_URL` | Remote storage PostgreSQL database URL fallback |
-| `HASNA_DOMAINS_STORAGE_MODE` | Storage mode: `local`, `remote`, or `hybrid` |
-| `DOMAINS_STORAGE_MODE` | Storage mode fallback |
+| `DOMAINS_DATABASE_URL` | Remote storage PostgreSQL database URL |
+| `HASNA_DOMAINS_DATABASE_URL` | Legacy remote storage PostgreSQL database URL fallback |
+| `DOMAINS_STORAGE_MODE` | Storage mode: `local`, `remote`, or `hybrid` |
+| `HASNA_DOMAINS_STORAGE_MODE` | Legacy storage mode fallback |
 | `AWS_PROFILE` | AWS profile for Route 53 Domains and hosted zones |
 | `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN` | AWS credential fallback |
 | `DOMAINS_PURCHASE_AWS_PROFILE` | Purchase profile fallback when config has no `purchase_aws_profile` |
@@ -236,7 +239,6 @@ Stdio remains the default transport for gradual rollout.
 | `GODADDY_API_KEY`, `GODADDY_API_SECRET` | GoDaddy API credentials |
 | `BRANDSIGHT_API_KEY`, `BRANDSIGHT_API_SECRET`, `BRANDSIGHT_CUSTOMER_ID` | Brandsight / GoDaddy Corporate Domains credentials |
 | `SEDO_PARTNER_ID`, `SEDO_API_KEY`, `SEDO_USERNAME`, `SEDO_PASSWORD` | Sedo marketplace API credentials |
-| `HASNAXYZ_*` scoped aliases | Supported for Cloudflare, Brandsight, Sedo, and Beepmedia AWS diagnostics |
 
 ## License
 

package/dist/cli/commands/domain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/domain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkDzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAq0B5D"}
+{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/domain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8DzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA00B5D"}

package/dist/cli/index.js

@@ -2348,20 +2348,26 @@ import { copyFileSync, existsSync as existsSync2, mkdirSync, readdirSync, statSy
 import { dirname, join as join2, resolve } from "path";
 import { homedir as homedir2 } from "os";
 function getDbPath() {
+  if (process.env["DOMAINS_DB_PATH"])
+    return process.env["DOMAINS_DB_PATH"];
   if (process.env["HASNA_DOMAINS_DB_PATH"])
     return process.env["HASNA_DOMAINS_DB_PATH"];
-  const explicit = process.env["HASNA_DOMAINS_DIR"] ?? process.env["DOMAINS_DIR"];
+  const explicit = process.env["DOMAINS_DIR"] ?? process.env["HASNA_DOMAINS_DIR"];
   if (explicit) {
     return join2(explicit, "domains.db");
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir2();
-  migrateDotfile("domains");
-  return join2(home, ".hasna", "domains", "domains.db");
-}
-function migrateDotfile(name) {
+  const legacyDir = join2(home, ".hasna", "domains");
+  if (existsSync2(legacyDir))
+    return join2(legacyDir, "domains.db");
+  const xdgData = process.env["XDG_DATA_HOME"] || join2(home, ".local", "share");
+  const newDir = join2(xdgData, "open-domains");
+  migrateDotfile("domains", newDir);
+  return join2(newDir, "domains.db");
+}
+function migrateDotfile(name, newDir) {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir2();
   const oldDir = join2(home, `.${name}`);
-  const newDir = join2(home, ".hasna", name);
   if (!existsSync2(oldDir) || existsSync2(newDir))
     return;
   mkdirSync(newDir, { recursive: true });
@@ -34950,8 +34956,6 @@ function providerEnvNames(provider) {
       return flattenEnvNames([CLOUDFLARE_ENV.apiToken, CLOUDFLARE_ENV.apiKey, CLOUDFLARE_ENV.email, CLOUDFLARE_ENV.accountId]);
     case "route53":
       return ["AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION"];
-    case "aws:beepmedia":
-      return flattenEnvNames([BEEPMEDIA_AWS_ENV.accessKeyId, BEEPMEDIA_AWS_ENV.secretAccessKey]);
     default:
       return [];
   }
@@ -34973,13 +34977,11 @@ function hasProviderCredentials(provider, env = process.env) {
     }
     case "route53":
       return !!env["AWS_PROFILE"] || hasEveryEnv(env, [["AWS_ACCESS_KEY_ID"], ["AWS_SECRET_ACCESS_KEY"]]);
-    case "aws:beepmedia":
-      return hasEveryEnv(env, [BEEPMEDIA_AWS_ENV.accessKeyId, BEEPMEDIA_AWS_ENV.secretAccessKey]);
     default:
       return false;
   }
 }
-var NAMECHEAP_ENV, GODADDY_ENV, BRANDSIGHT_ENV, SEDO_ENV, CLOUDFLARE_ENV, BEEPMEDIA_AWS_ENV;
+var NAMECHEAP_ENV, GODADDY_ENV, BRANDSIGHT_ENV, SEDO_ENV, CLOUDFLARE_ENV;
 var init_env_aliases = __esm(() => {
   NAMECHEAP_ENV = {
     apiKey: ["NAMECHEAP_API_KEY"],
@@ -34991,43 +34993,23 @@ var init_env_aliases = __esm(() => {
     apiSecret: ["GODADDY_API_SECRET"]
   };
   BRANDSIGHT_ENV = {
-    apiKey: [
-      "BRANDSIGHT_API_KEY",
-      "HASNAXYZ_BRANDSIGHT_LIVE_API_KEY",
-      "HASNAXYZ_BRANDSIGHT_SANDBOX_API_KEY"
-    ],
-    apiSecret: [
-      "BRANDSIGHT_API_SECRET",
-      "HASNAXYZ_BRANDSIGHT_LIVE_API_SECRET",
-      "HASNAXYZ_BRANDSIGHT_SANDBOX_API_SECRET"
-    ],
-    customerId: [
-      "BRANDSIGHT_CUSTOMER_ID",
-      "HASNAXYZ_BRANDSIGHT_LIVE_CUSTOMER_ID",
-      "HASNAXYZ_BRANDSIGHT_SANDBOX_CUSTOMER_ID"
-    ],
-    shopperId: [
-      "BRANDSIGHT_SHOPPER_ID",
-      "HASNAXYZ_BRANDSIGHT_LIVE_SHOPPER_ID",
-      "HASNAXYZ_BRANDSIGHT_SANDBOX_SHOPPER_ID"
-    ],
-    accountId: ["BRANDSIGHT_ACCOUNT_ID", "HASNAXYZ_BRANDSIGHT_LIVE_ACCOUNT_ID"]
+    apiKey: ["BRANDSIGHT_API_KEY"],
+    apiSecret: ["BRANDSIGHT_API_SECRET"],
+    customerId: ["BRANDSIGHT_CUSTOMER_ID"],
+    shopperId: ["BRANDSIGHT_SHOPPER_ID"],
+    accountId: ["BRANDSIGHT_ACCOUNT_ID"]
   };
   SEDO_ENV = {
-    partnerId: ["SEDO_PARTNER_ID", "HASNAXYZ_SEDO_LIVE_PARTNER_ID"],
-    signKey: ["SEDO_API_KEY", "SEDO_SIGN_KEY", "HASNAXYZ_SEDO_LIVE_API_KEY"],
-    username: ["SEDO_USERNAME", "SEDO_EMAIL", "HASNAXYZ_SEDO_LIVE_USERNAME", "HASNAXYZ_SEDO_LIVE_EMAIL"],
-    password: ["SEDO_PASSWORD", "HASNAXYZ_SEDO_LIVE_PASSWORD"]
+    partnerId: ["SEDO_PARTNER_ID"],
+    signKey: ["SEDO_API_KEY", "SEDO_SIGN_KEY"],
+    username: ["SEDO_USERNAME", "SEDO_EMAIL"],
+    password: ["SEDO_PASSWORD"]
   };
   CLOUDFLARE_ENV = {
-    apiToken: ["CLOUDFLARE_API_TOKEN", "HASNAXYZ_CLOUDFLARE_LIVE_API_TOKEN"],
-    apiKey: ["CLOUDFLARE_API_KEY", "HASNAXYZ_CLOUDFLARE_LIVE_API_KEY"],
-    email: ["CLOUDFLARE_EMAIL", "HASNAXYZ_CLOUDFLARE_LIVE_EMAIL"],
-    accountId: ["CLOUDFLARE_ACCOUNT_ID", "HASNAXYZ_CLOUDFLARE_LIVE_ACCOUNT_ID"]
-  };
-  BEEPMEDIA_AWS_ENV = {
-    accessKeyId: ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_ACCESS_KEY_ID", "BEEPMEDIA_AWS_ACCESS_KEY_ID"],
-    secretAccessKey: ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_SECRET_ACCESS_KEY", "BEEPMEDIA_AWS_SECRET_ACCESS_KEY"]
+    apiToken: ["CLOUDFLARE_API_TOKEN"],
+    apiKey: ["CLOUDFLARE_API_KEY"],
+    email: ["CLOUDFLARE_EMAIL"],
+    accountId: ["CLOUDFLARE_ACCOUNT_ID"]
   };
 });
 
@@ -35302,13 +35284,13 @@ function brandsightCapability(env = process.env) {
   return {
     configured,
     gated: true,
-    notes: configured ? "Credentials present, but GoDaddy Corporate Domains (Brandsight) is enterprise/contract-only; use Route53 for automated purchase." : "Not configured and enterprise/contract-only; not usable for automated purchase."
+    notes: configured ? "Credentials present, but GoDaddy Corporate Domains (Brandsight) registration and renewal are enterprise/contract-gated." : "Not configured; GoDaddy Corporate Domains (Brandsight) is enterprise/contract-gated."
   };
 }
 function getApiKey() {
   const key = resolveBrandsightConfig().apiKey;
   if (!key) {
-    throw new BrandsightApiError("Brandsight API key is not set. Set BRANDSIGHT_API_KEY or HASNAXYZ_BRANDSIGHT_LIVE_API_KEY.");
+    throw new BrandsightApiError("Brandsight API key is not set. Set BRANDSIGHT_API_KEY.");
   }
   return key;
 }
@@ -35344,7 +35326,7 @@ async function apiGet(path, apiKey, baseUrl = BRANDSIGHT_BASE) {
 function requireDomainConfig(config) {
   const cfg = config ?? getConfig4();
   if (!cfg.apiKey || !cfg.apiSecret || !cfg.customerId) {
-    throw new BrandsightApiError("Brandsight Domain API credentials are not configured. Set BRANDSIGHT_API_KEY, BRANDSIGHT_API_SECRET, and BRANDSIGHT_CUSTOMER_ID (or HASNAXYZ_BRANDSIGHT_LIVE_* aliases).");
+    throw new BrandsightApiError("Brandsight Domain API credentials are not configured. Set BRANDSIGHT_API_KEY, BRANDSIGHT_API_SECRET, and BRANDSIGHT_CUSTOMER_ID.");
   }
   return cfg;
 }
@@ -35791,9 +35773,9 @@ __export(exports_config, {
 });
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join4 } from "path";
+import { dirname as dirname4, join as join4 } from "path";
 function getPurchaseProfile() {
-  return loadConfig3().purchase_aws_profile ?? process.env["DOMAINS_PURCHASE_AWS_PROFILE"] ?? undefined;
+  return process.env["DOMAINS_PURCHASE_AWS_PROFILE"] ?? loadConfig3().purchase_aws_profile ?? undefined;
 }
 function applyPurchaseProfile() {
   if (process.env["AWS_ACCESS_KEY_ID"] || process.env["AWS_PROFILE"])
@@ -35804,7 +35786,16 @@ function applyPurchaseProfile() {
   return profile;
 }
 function configPath() {
-  return join4(homedir4(), ".hasna", "domains", "config.json");
+  if (process.env["DOMAINS_CONFIG_PATH"])
+    return process.env["DOMAINS_CONFIG_PATH"];
+  const dir = process.env["DOMAINS_CONFIG_DIR"];
+  if (dir)
+    return join4(dir, "config.json");
+  const legacyDir = join4(homedir4(), ".hasna", "domains");
+  if (existsSync3(legacyDir))
+    return join4(legacyDir, "config.json");
+  const xdgConfig = process.env["XDG_CONFIG_HOME"] || join4(homedir4(), ".config");
+  return join4(xdgConfig, "open-domains", "config.json");
 }
 function loadConfig3() {
   const path = configPath();
@@ -35818,7 +35809,7 @@ function loadConfig3() {
 }
 function saveConfig(config) {
   const path = configPath();
-  const dir = join4(homedir4(), ".hasna", "domains");
+  const dir = dirname4(path);
   if (!existsSync3(dir))
     mkdirSync2(dir, { recursive: true });
   writeFileSync(path, JSON.stringify(config, null, 2), "utf-8");
@@ -35977,7 +35968,7 @@ function getSedoConfig() {
   const config = resolveSedoConfig();
   const { partnerId, signKey, username, password } = config;
   if (!partnerId || !signKey || !username || !password) {
-    throw new Error("Sedo credentials not configured. Required: SEDO_PARTNER_ID, SEDO_API_KEY, SEDO_USERNAME, SEDO_PASSWORD (or HASNAXYZ_SEDO_LIVE_* aliases)");
+    throw new Error("Sedo credentials not configured. Required: SEDO_PARTNER_ID, SEDO_API_KEY, SEDO_USERNAME, SEDO_PASSWORD");
   }
   return { partnerId, signKey, username, password };
 }
@@ -36213,13 +36204,6 @@ function checkProvisioningCredentials(env = process.env) {
   } else {
     out.push(missingStatus("route53", "Set AWS_PROFILE or AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY"));
   }
-  const beepmediaAws = hasProviderCredentials("aws:beepmedia", env);
-  out.push({
-    provider: "aws:beepmedia",
-    configured: beepmediaAws,
-    mode: beepmediaAws ? "scoped-env" : "none",
-    detail: beepmediaAws ? "Beepmedia AWS scoped env keys are present; export them as AWS_* or use AWS_PROFILE=beepmedia for Route53 sync." : `Set ${BEEPMEDIA_AWS_ENV.accessKeyId.join(" or ")} and ${BEEPMEDIA_AWS_ENV.secretAccessKey.join(" or ")}`
-  });
   const cf = resolveCloudflareConfig(env);
   const cfMode = cf.apiToken ? "token" : cf.apiKey && cf.email ? "global-key" : "none";
   out.push({
@@ -36242,7 +36226,7 @@ function checkProvisioningCredentials(env = process.env) {
     detail: gd.notes
   });
   const bs = brandsightCapability(env);
-  const bsMode = firstEnv(env, ["BRANDSIGHT_API_KEY"]) ? "standard-env" : bs.configured ? "scoped-env" : "none";
+  const bsMode = firstEnv(env, ["BRANDSIGHT_API_KEY"]) ? "standard-env" : "none";
   out.push({
     provider: "brandsight",
     configured: bs.configured,
@@ -36250,7 +36234,7 @@ function checkProvisioningCredentials(env = process.env) {
     detail: bs.notes
   });
   const sedo = sedoCapability(env);
-  const sedoMode = firstEnv(env, ["SEDO_API_KEY"]) ? "standard-env" : sedo.configured ? "scoped-env" : "none";
+  const sedoMode = firstEnv(env, ["SEDO_API_KEY"]) ? "standard-env" : "none";
   out.push({
     provider: "sedo",
     configured: sedo.configured,
@@ -42619,6 +42603,17 @@ function parseOptionalNumber(value, flagName) {
   }
   return parsed;
 }
+async function createDnsZoneForProvider(domain, provider) {
+  if (provider === "cloudflare") {
+    const zone = await ensureZone(domain);
+    return { zoneId: zone.id, nameservers: zone.nameservers ?? [] };
+  }
+  if (provider === "route53") {
+    const zone = await createHostedZone(domain, "Managed by domains CLI");
+    return { zoneId: zone.id, nameservers: zone.name_servers ?? [] };
+  }
+  throw new Error(`DNS provider '${provider}' is not supported by domain purchase delegation yet`);
+}
 function requireDomain(identifier) {
   const details = getDomainDetails(identifier);
   if (!details) {
@@ -43029,7 +43024,7 @@ WHOIS for ${result.domain} [${result.source}]:`);
       process.exit(1);
     }
   });
-  domain.command("buy <name>").description("Purchase or record a domain via registrar provider (contact defaults from: domains config set contact.*)").option("--provider <name>", "Registrar provider (default: config default-registrar or route53)").option("--registrar <name>", "Registrar/seller for recorded purchases (alias of --provider)").option("--email <email>", "Registrant email").option("--first-name <n>", "First name").option("--last-name <n>", "Last name").option("--phone <p>", "Phone").option("--address <a>", "Street address").option("--city <c>", "City").option("--state <s>", "State/province").option("--country <c>", "Country code").option("--zip <z>", "ZIP code").option("--org <o>", "Organization").option("--price <amount>", "Record a completed purchase instead of registering via Route 53").option("--expires <date>", "Expiry date for recorded purchases").option("--auto-renew <bool>", "Auto-renew for recorded purchases (true/false)").option("--years <n>", "Years", "1").option("--wait", "Poll until registration completes").option("--dns <provider>", "DNS provider to delegate to after purchase (always cloudflare)", "cloudflare").option("--no-delegate", "Skip delegating DNS to Cloudflare after purchase").action(async (name, opts) => {
+  domain.command("buy <name>").description("Purchase or record a domain via registrar provider (contact defaults from: domains config set contact.*)").option("--provider <name>", "Registrar provider (default: config default-registrar or route53)").option("--registrar <name>", "Registrar/seller for recorded purchases (alias of --provider)").option("--email <email>", "Registrant email").option("--first-name <n>", "First name").option("--last-name <n>", "Last name").option("--phone <p>", "Phone").option("--address <a>", "Street address").option("--city <c>", "City").option("--state <s>", "State/province").option("--country <c>", "Country code").option("--zip <z>", "ZIP code").option("--org <o>", "Organization").option("--price <amount>", "Record a completed purchase instead of registering via Route 53").option("--expires <date>", "Expiry date for recorded purchases").option("--auto-renew <bool>", "Auto-renew for recorded purchases (true/false)").option("--years <n>", "Years", "1").option("--wait", "Poll until registration completes").option("--dns <provider>", "DNS provider to delegate to after purchase (default: config default-dns or cloudflare)").option("--no-delegate", "Skip nameserver delegation after purchase").action(async (name, opts) => {
     const recordedPrice = parseOptionalNumber(opts.price, "--price");
     if (recordedPrice !== undefined) {
       const registrarName = opts.registrar ?? opts.provider ?? "manual";
@@ -43053,6 +43048,7 @@ WHOIS for ${result.domain} [${result.source}]:`);
     }
     const cfg = loadConfig3();
     const providerName = opts.registrar ?? opts.provider ?? cfg.default_registrar ?? "route53";
+    const dnsProvider = opts.dns ?? cfg.default_dns ?? "cloudflare";
     const purchaseProfile = providerName === "route53" ? applyPurchaseProfile() : undefined;
     if (purchaseProfile)
       console.log(`Using purchase AWS profile: ${purchaseProfile}`);
@@ -43104,17 +43100,16 @@ WHOIS for ${result.domain} [${result.source}]:`);
         console.log(`\u2713 Registered and added to portfolio`);
         if (reg.orderId)
           console.log(`  Order: ${reg.orderId}`);
-        const dnsProvider = opts.dns ?? "cloudflare";
-        if (opts.delegate !== false && dnsProvider === "cloudflare") {
+        if (opts.delegate !== false) {
           if (!provider.updateNameservers) {
             console.log(`  DNS: ${providerName} registration succeeded, but nameserver updates are not implemented for this provider.`);
           } else {
-            const zone = await ensureZone(name);
+            const zone = await createDnsZoneForProvider(name, dnsProvider);
             const nsUpdate = await provider.updateNameservers(name, zone.nameservers);
             const existing2 = getDomainByName(name);
             if (existing2)
               updateDomain(existing2.id, { nameservers: zone.nameservers });
-            console.log(`\u2713 Cloudflare zone ${zone.id}; nameservers updated${nsUpdate.operationId ? ` (op ${nsUpdate.operationId})` : ""}`);
+            console.log(`\u2713 ${dnsProvider} zone ${zone.zoneId}; nameservers updated${nsUpdate.operationId ? ` (op ${nsUpdate.operationId})` : ""}`);
           }
         }
         return;
@@ -43178,27 +43173,30 @@ WHOIS for ${result.domain} [${result.source}]:`);
         });
       }
       console.log(`\u2713 Added to portfolio`);
-      const dnsProvider = opts.dns ?? "cloudflare";
-      if (opts.delegate !== false && dnsProvider === "cloudflare") {
+      if (opts.delegate !== false) {
         if (!opts.wait) {
           console.log(`  DNS: run 'domains domain buy ${name} --wait' or delegate later \u2014 registration must finish before NS can change.`);
         } else {
           try {
-            console.log(`Delegating DNS to Cloudflare...`);
-            const del = await delegateDomainToCloudflare(name, {
+            console.log(`Delegating DNS to ${dnsProvider}...`);
+            const del = dnsProvider === "cloudflare" ? await delegateDomainToCloudflare(name, {
               createCloudflareZone: async (d3) => {
                 const z2 = await ensureZone(d3);
                 return { id: z2.id, nameservers: z2.nameservers };
               },
               updateNameservers: (d3, ns) => updateNameservers2(d3, ns)
-            });
+            }) : await (async () => {
+              const zone = await createDnsZoneForProvider(name, dnsProvider);
+              const nsUpdate = await updateNameservers2(name, zone.nameservers);
+              return { zoneId: zone.zoneId, nameservers: zone.nameservers, operationId: nsUpdate.operationId };
+            })();
             const existing2 = getDomainByName(name);
             if (existing2)
               updateDomain(existing2.id, { nameservers: del.nameservers });
-            console.log(`\u2713 Cloudflare zone ${del.zoneId}; nameservers \u2192 ${del.nameservers.join(", ")} (op ${del.operationId})`);
+            console.log(`\u2713 ${dnsProvider} zone ${del.zoneId}; nameservers \u2192 ${del.nameservers.join(", ")} (op ${del.operationId})`);
           } catch (e3) {
             console.error(`\u26A0 DNS delegation failed (domain is registered): ${e3 instanceof Error ? e3.message : String(e3)}`);
-            console.error(`  Retry: create the Cloudflare zone and point Route53 NS at it.`);
+            console.error(`  Retry: create the DNS zone and point Route53 NS at it.`);
           }
         }
       }
@@ -43263,7 +43261,7 @@ Setting up ${name}`);
         nameservers = zone.nameservers ?? [];
         console.log("ready (" + zone.id + ")");
       } else {
-        const zone = await createHostedZone(name, `Managed by @hasna/domains`);
+        const zone = await createHostedZone(name, "Managed by domains CLI");
         nameservers = zone.name_servers ?? [];
         console.log(`created (${zone.id})`);
       }
@@ -44120,7 +44118,7 @@ function registerConfigCommands(program2) {
       return;
     }
     console.log(`
-Configuration (~/.hasna/domains/config.json):`);
+Configuration:`);
     console.log(`  default-registrar:    ${cfg.default_registrar ?? "(not set)"}`);
     console.log(`  default-dns:          ${cfg.default_dns ?? "(not set)"}`);
     console.log(`  purchase-aws-profile: ${cfg.purchase_aws_profile ?? "(not set)"}`);
@@ -44197,7 +44195,7 @@ function registerDoctorCommand(program2) {
       const count = countDomains();
       ok(`Local DB accessible (${count} domain${count !== 1 ? "s" : ""})`);
     } catch {
-      fail("Local DB not accessible", "Check ~/.hasna/domains/domains.db");
+      fail("Local DB not accessible", "Check DOMAINS_DB_PATH, DOMAINS_DIR, or the default local data directory");
     }
     section("Config");
     const cfg = loadConfig3();
@@ -44276,7 +44274,7 @@ ${"\u2500".repeat(45)}`);
 // src/cli/commands/mcp-install.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname4, join as join5 } from "path";
+import { dirname as dirname5, join as join5 } from "path";
 import { execSync as execSync3 } from "child_process";
 var MCP_SERVER_NAME = "domains";
 function getClaudeConfigPaths() {
@@ -44293,7 +44291,7 @@ function getMcpBinaryPath() {
   }
 }
 function ensureConfigDir(configPath2) {
-  const dir = dirname4(configPath2);
+  const dir = dirname5(configPath2);
   if (!existsSync4(dir)) {
     mkdirSync3(dir, { recursive: true });
   }
@@ -44893,7 +44891,7 @@ DNS Records for ${domain}:`);
           return { id: full.id, name_servers: full.name_servers };
         },
         createZone: async (d3) => {
-          const z2 = await createHostedZone(d3, `Managed by @hasna/domains`);
+          const z2 = await createHostedZone(d3, "Managed by domains CLI");
           return { id: z2.id, name_servers: z2.name_servers ?? [] };
         },
         getRegistrarNs: async (d3) => (await getDomainDetail(d3)).nameservers,
@@ -47276,10 +47274,10 @@ var PRIMARY_KEYS = {
   domain_history: ["id"],
   domain_reputation: ["id"]
 };
-var DOMAINS_STORAGE_ENV = "HASNA_DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_FALLBACK_ENV = "DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_MODE_ENV = "HASNA_DOMAINS_STORAGE_MODE";
-var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_ENV = "DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_FALLBACK_ENV = "HASNA_DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_MODE_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "HASNA_DOMAINS_STORAGE_MODE";
 var STORAGE_DATABASE_ENV = [DOMAINS_STORAGE_ENV, DOMAINS_STORAGE_FALLBACK_ENV];
 var STORAGE_MODE_ENV = [DOMAINS_STORAGE_MODE_ENV, DOMAINS_STORAGE_MODE_FALLBACK_ENV];
 function firstEnv2(names) {
@@ -47307,7 +47305,7 @@ function getStorageMode() {
 async function getStoragePg() {
   const url = getStorageDatabaseUrl();
   if (!url) {
-    throw new Error("Missing HASNA_DOMAINS_DATABASE_URL or DOMAINS_DATABASE_URL");
+    throw new Error("Missing DOMAINS_DATABASE_URL or HASNA_DOMAINS_DATABASE_URL");
   }
   return new PgAdapterAsync(url);
 }

package/dist/db/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/db/database.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAiCtC,wBAAgB,WAAW,IAAI,QAAQ,CA8CtC;AAED,wBAAgB,aAAa,IAAI,IAAI,CAKpC"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/db/database.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAsCtC,wBAAgB,WAAW,IAAI,QAAQ,CA8CtC;AAED,wBAAgB,aAAa,IAAI,IAAI,CAKpC"}

package/dist/db/storage-sync.d.ts

@@ -24,12 +24,12 @@ export interface StorageStatus {
     tables: typeof STORAGE_TABLES;
     sync: StorageSyncMeta[];
 }
-export declare const DOMAINS_STORAGE_ENV = "HASNA_DOMAINS_DATABASE_URL";
-export declare const DOMAINS_STORAGE_FALLBACK_ENV = "DOMAINS_DATABASE_URL";
-export declare const DOMAINS_STORAGE_MODE_ENV = "HASNA_DOMAINS_STORAGE_MODE";
-export declare const DOMAINS_STORAGE_MODE_FALLBACK_ENV = "DOMAINS_STORAGE_MODE";
-export declare const STORAGE_DATABASE_ENV: readonly ["HASNA_DOMAINS_DATABASE_URL", "DOMAINS_DATABASE_URL"];
-export declare const STORAGE_MODE_ENV: readonly ["HASNA_DOMAINS_STORAGE_MODE", "DOMAINS_STORAGE_MODE"];
+export declare const DOMAINS_STORAGE_ENV = "DOMAINS_DATABASE_URL";
+export declare const DOMAINS_STORAGE_FALLBACK_ENV = "HASNA_DOMAINS_DATABASE_URL";
+export declare const DOMAINS_STORAGE_MODE_ENV = "DOMAINS_STORAGE_MODE";
+export declare const DOMAINS_STORAGE_MODE_FALLBACK_ENV = "HASNA_DOMAINS_STORAGE_MODE";
+export declare const STORAGE_DATABASE_ENV: readonly ["DOMAINS_DATABASE_URL", "HASNA_DOMAINS_DATABASE_URL"];
+export declare const STORAGE_MODE_ENV: readonly ["DOMAINS_STORAGE_MODE", "HASNA_DOMAINS_STORAGE_MODE"];
 export declare function getStorageDatabaseUrl(): string | null;
 export declare function getStorageDatabaseEnvName(): (typeof STORAGE_DATABASE_ENV)[number] | null;
 export declare function getStorageMode(): StorageMode;

package/dist/db/storage-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-sync.d.ts","sourceRoot":"","sources":["../../src/db/storage-sync.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,eAAO,MAAM,cAAc,yIASjB,CAAC;AACX,eAAO,MAAM,sBAAsB,yIAAiB,CAAC;AAErD,KAAK,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAcpD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAC3C,MAAM,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEvC,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,OAAO,oBAAoB,CAAC;IACjC,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,OAAO,cAAc,CAAC;IAC9B,IAAI,EAAE,eAAe,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,mBAAmB,+BAA+B,CAAC;AAChE,eAAO,MAAM,4BAA4B,yBAAyB,CAAC;AACnE,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AACrE,eAAO,MAAM,iCAAiC,yBAAyB,CAAC;AACxE,eAAO,MAAM,oBAAoB,iEAA+D,CAAC;AACjG,eAAO,MAAM,gBAAgB,iEAAyE,CAAC;AAiBvG,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,yBAAyB,IAAI,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAKxF;AAED,wBAAgB,cAAc,IAAI,WAAW,CAG5C;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,cAAc,CAAC,CAM5D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,wBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAY/F;AAED,wBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAY/F;AAED,wBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAAC,IAAI,EAAE,iBAAiB,EAAE,CAAA;CAAE,CAAC,CAIpI;AAED,wBAAgB,qBAAqB,IAAI,eAAe,EAAE,CAIzD;AAED,wBAAgB,gBAAgB,IAAI,aAAa,CAShD;AAED,wBAAgB,cAAc,IAAI,eAAe,EAAE,CAElD;AAED,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAO/D"}
+{"version":3,"file":"storage-sync.d.ts","sourceRoot":"","sources":["../../src/db/storage-sync.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,eAAO,MAAM,cAAc,yIASjB,CAAC;AACX,eAAO,MAAM,sBAAsB,yIAAiB,CAAC;AAErD,KAAK,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAcpD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAC3C,MAAM,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEvC,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,OAAO,oBAAoB,CAAC;IACjC,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,OAAO,cAAc,CAAC;IAC9B,IAAI,EAAE,eAAe,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AACzE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAC/D,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAC9E,eAAO,MAAM,oBAAoB,iEAA+D,CAAC;AACjG,eAAO,MAAM,gBAAgB,iEAAyE,CAAC;AAiBvG,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,yBAAyB,IAAI,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAKxF;AAED,wBAAgB,cAAc,IAAI,WAAW,CAG5C;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,cAAc,CAAC,CAM5D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,wBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAY/F;AAED,wBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAY/F;AAED,wBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAAC,IAAI,EAAE,iBAAiB,EAAE,CAAA;CAAE,CAAC,CAIpI;AAED,wBAAgB,qBAAqB,IAAI,eAAe,EAAE,CAIzD;AAED,wBAAgB,gBAAgB,IAAI,aAAa,CAShD;AAED,wBAAgB,cAAc,IAAI,eAAe,EAAE,CAElD;AAED,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAO/D"}

package/dist/index.js

@@ -27352,20 +27352,26 @@ var MIGRATIONS = [
 // src/db/database.ts
 var _db = null;
 function getDbPath() {
+  if (process.env["DOMAINS_DB_PATH"])
+    return process.env["DOMAINS_DB_PATH"];
   if (process.env["HASNA_DOMAINS_DB_PATH"])
     return process.env["HASNA_DOMAINS_DB_PATH"];
-  const explicit = process.env["HASNA_DOMAINS_DIR"] ?? process.env["DOMAINS_DIR"];
+  const explicit = process.env["DOMAINS_DIR"] ?? process.env["HASNA_DOMAINS_DIR"];
   if (explicit) {
     return join(explicit, "domains.db");
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir();
-  migrateDotfile("domains");
-  return join(home, ".hasna", "domains", "domains.db");
-}
-function migrateDotfile(name) {
+  const legacyDir = join(home, ".hasna", "domains");
+  if (existsSync(legacyDir))
+    return join(legacyDir, "domains.db");
+  const xdgData = process.env["XDG_DATA_HOME"] || join(home, ".local", "share");
+  const newDir = join(xdgData, "open-domains");
+  migrateDotfile("domains", newDir);
+  return join(newDir, "domains.db");
+}
+function migrateDotfile(name, newDir) {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir();
   const oldDir = join(home, `.${name}`);
-  const newDir = join(home, ".hasna", name);
   if (!existsSync(oldDir) || existsSync(newDir))
     return;
   mkdirSync(newDir, { recursive: true });
@@ -28655,10 +28661,10 @@ var PRIMARY_KEYS = {
   domain_history: ["id"],
   domain_reputation: ["id"]
 };
-var DOMAINS_STORAGE_ENV = "HASNA_DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_FALLBACK_ENV = "DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_MODE_ENV = "HASNA_DOMAINS_STORAGE_MODE";
-var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_ENV = "DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_FALLBACK_ENV = "HASNA_DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_MODE_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "HASNA_DOMAINS_STORAGE_MODE";
 var STORAGE_DATABASE_ENV = [DOMAINS_STORAGE_ENV, DOMAINS_STORAGE_FALLBACK_ENV];
 var STORAGE_MODE_ENV = [DOMAINS_STORAGE_MODE_ENV, DOMAINS_STORAGE_MODE_FALLBACK_ENV];
 function firstEnv(names) {
@@ -28693,7 +28699,7 @@ function getStorageMode() {
 async function getStoragePg() {
   const url = getStorageDatabaseUrl();
   if (!url) {
-    throw new Error("Missing HASNA_DOMAINS_DATABASE_URL or DOMAINS_DATABASE_URL");
+    throw new Error("Missing DOMAINS_DATABASE_URL or HASNA_DOMAINS_DATABASE_URL");
   }
   return new PgAdapterAsync(url);
 }
@@ -36204,43 +36210,23 @@ var GODADDY_ENV = {
   apiSecret: ["GODADDY_API_SECRET"]
 };
 var BRANDSIGHT_ENV = {
-  apiKey: [
-    "BRANDSIGHT_API_KEY",
-    "HASNAXYZ_BRANDSIGHT_LIVE_API_KEY",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_API_KEY"
-  ],
-  apiSecret: [
-    "BRANDSIGHT_API_SECRET",
-    "HASNAXYZ_BRANDSIGHT_LIVE_API_SECRET",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_API_SECRET"
-  ],
-  customerId: [
-    "BRANDSIGHT_CUSTOMER_ID",
-    "HASNAXYZ_BRANDSIGHT_LIVE_CUSTOMER_ID",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_CUSTOMER_ID"
-  ],
-  shopperId: [
-    "BRANDSIGHT_SHOPPER_ID",
-    "HASNAXYZ_BRANDSIGHT_LIVE_SHOPPER_ID",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_SHOPPER_ID"
-  ],
-  accountId: ["BRANDSIGHT_ACCOUNT_ID", "HASNAXYZ_BRANDSIGHT_LIVE_ACCOUNT_ID"]
+  apiKey: ["BRANDSIGHT_API_KEY"],
+  apiSecret: ["BRANDSIGHT_API_SECRET"],
+  customerId: ["BRANDSIGHT_CUSTOMER_ID"],
+  shopperId: ["BRANDSIGHT_SHOPPER_ID"],
+  accountId: ["BRANDSIGHT_ACCOUNT_ID"]
 };
 var SEDO_ENV = {
-  partnerId: ["SEDO_PARTNER_ID", "HASNAXYZ_SEDO_LIVE_PARTNER_ID"],
-  signKey: ["SEDO_API_KEY", "SEDO_SIGN_KEY", "HASNAXYZ_SEDO_LIVE_API_KEY"],
-  username: ["SEDO_USERNAME", "SEDO_EMAIL", "HASNAXYZ_SEDO_LIVE_USERNAME", "HASNAXYZ_SEDO_LIVE_EMAIL"],
-  password: ["SEDO_PASSWORD", "HASNAXYZ_SEDO_LIVE_PASSWORD"]
+  partnerId: ["SEDO_PARTNER_ID"],
+  signKey: ["SEDO_API_KEY", "SEDO_SIGN_KEY"],
+  username: ["SEDO_USERNAME", "SEDO_EMAIL"],
+  password: ["SEDO_PASSWORD"]
 };
 var CLOUDFLARE_ENV = {
-  apiToken: ["CLOUDFLARE_API_TOKEN", "HASNAXYZ_CLOUDFLARE_LIVE_API_TOKEN"],
-  apiKey: ["CLOUDFLARE_API_KEY", "HASNAXYZ_CLOUDFLARE_LIVE_API_KEY"],
-  email: ["CLOUDFLARE_EMAIL", "HASNAXYZ_CLOUDFLARE_LIVE_EMAIL"],
-  accountId: ["CLOUDFLARE_ACCOUNT_ID", "HASNAXYZ_CLOUDFLARE_LIVE_ACCOUNT_ID"]
-};
-var BEEPMEDIA_AWS_ENV = {
-  accessKeyId: ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_ACCESS_KEY_ID", "BEEPMEDIA_AWS_ACCESS_KEY_ID"],
-  secretAccessKey: ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_SECRET_ACCESS_KEY", "BEEPMEDIA_AWS_SECRET_ACCESS_KEY"]
+  apiToken: ["CLOUDFLARE_API_TOKEN"],
+  apiKey: ["CLOUDFLARE_API_KEY"],
+  email: ["CLOUDFLARE_EMAIL"],
+  accountId: ["CLOUDFLARE_ACCOUNT_ID"]
 };
 function providerEnvNames(provider) {
   switch (provider.toLowerCase()) {
@@ -36262,8 +36248,6 @@ function providerEnvNames(provider) {
       return flattenEnvNames([CLOUDFLARE_ENV.apiToken, CLOUDFLARE_ENV.apiKey, CLOUDFLARE_ENV.email, CLOUDFLARE_ENV.accountId]);
     case "route53":
       return ["AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION"];
-    case "aws:beepmedia":
-      return flattenEnvNames([BEEPMEDIA_AWS_ENV.accessKeyId, BEEPMEDIA_AWS_ENV.secretAccessKey]);
     default:
       return [];
   }
@@ -36285,8 +36269,6 @@ function hasProviderCredentials(provider, env = process.env) {
     }
     case "route53":
       return !!env["AWS_PROFILE"] || hasEveryEnv(env, [["AWS_ACCESS_KEY_ID"], ["AWS_SECRET_ACCESS_KEY"]]);
-    case "aws:beepmedia":
-      return hasEveryEnv(env, [BEEPMEDIA_AWS_ENV.accessKeyId, BEEPMEDIA_AWS_ENV.secretAccessKey]);
     default:
       return false;
   }
@@ -36583,7 +36565,7 @@ var BRANDSIGHT_DOMAIN_BASE = "https://api.godaddy.com/v2";
 function requireDomainConfig(config) {
   const cfg = config ?? getConfig4();
   if (!cfg.apiKey || !cfg.apiSecret || !cfg.customerId) {
-    throw new BrandsightApiError("Brandsight Domain API credentials are not configured. Set BRANDSIGHT_API_KEY, BRANDSIGHT_API_SECRET, and BRANDSIGHT_CUSTOMER_ID (or HASNAXYZ_BRANDSIGHT_LIVE_* aliases).");
+    throw new BrandsightApiError("Brandsight Domain API credentials are not configured. Set BRANDSIGHT_API_KEY, BRANDSIGHT_API_SECRET, and BRANDSIGHT_CUSTOMER_ID.");
   }
   return cfg;
 }
@@ -37284,7 +37266,7 @@ async function delegateDomainToCloudflare(domain, deps) {
 // src/lib/capability.ts
 var PROVIDER_CAPABILITIES = {
   route53: { canBuy: true, canDns: true, gated: false, notes: "Full self-serve buy + hosted zones via AWS API; primary buy path." },
-  cloudflare: { canBuy: false, canDns: true, gated: false, notes: "DNS/zone management only; not a registrar. Always our DNS." },
+  cloudflare: { canBuy: false, canDns: true, gated: false, notes: "DNS/zone management only; not a registrar." },
   namecheap: { canBuy: true, canDns: true, gated: false, notes: "Buy + DNS via API; requires API access + whitelisted IP." },
   godaddy: { canBuy: false, canDns: true, gated: true, notes: "Availability remains threshold-gated; this CLI supports sync/renew/DNS records where account access qualifies, but not direct automated purchase." },
   brandsight: { canBuy: true, canDns: true, gated: true, notes: "GoDaddy Corporate Domains (enterprise/contract-only); this CLI supports portfolio, registration, renewal, nameserver, and DNS operations through the official v2 API when the account contract permits it." },
@@ -37309,7 +37291,15 @@ function selectBuyRegistrar(preference) {
   }
   return "route53";
 }
-function selectDnsProvider() {
+function selectDnsProvider(preference) {
+  if (preference) {
+    const c3 = getCapability(preference);
+    if (!c3.canDns)
+      throw new Error(`Provider '${preference}' cannot manage DNS`);
+    if (c3.gated)
+      throw new Error(`Provider '${preference}' DNS is gated and may require account approval: ${c3.notes}`);
+    return preference.toLowerCase();
+  }
   return "cloudflare";
 }
 // src/lib/registration-poll.ts

package/dist/lib/capability.d.ts

@@ -9,7 +9,7 @@
  *   - Brandsight / GoDaddy Corporate Domains: enterprise-contract-only, but
  *     official v2 API supports portfolio, registration, renewal, nameserver,
  *     and DNS operations.
- *   - Cloudflare: DNS only (no registration) → always our DNS.
+ *   - Cloudflare: DNS only (no registration) → common default DNS provider.
  *   - Namecheap: buy + DNS via API (sandbox/whitelist required) → usable.
  */
 export interface ProviderCapability {
@@ -27,6 +27,6 @@ export declare function canBuy(name: string): boolean;
  * self-serve API). An explicit preference is honored only if it is non-gated.
  */
 export declare function selectBuyRegistrar(preference?: string): string;
-/** DNS is always Cloudflare, regardless of where the domain was bought. */
-export declare function selectDnsProvider(): string;
+/** Choose a DNS provider, defaulting to Cloudflare when no preference is set. */
+export declare function selectDnsProvider(preference?: string): string;
 //# sourceMappingURL=capability.d.ts.map

package/dist/lib/capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/lib/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAOpE,CAAC;AAIF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAE9D;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/lib/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAOpE,CAAC;AAIF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAE9D;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ7D"}

package/dist/lib/cloudflare.d.ts

@@ -31,7 +31,8 @@ export declare function createZone(domain: string, config?: CloudflareConfig): P
 /**
  * Find-or-create a Cloudflare zone and return its assigned nameservers.
  * Idempotent: reuses an existing zone for the domain if present. The returned
- * nameservers are what the registrar should be delegated to (always-Cloudflare).
+ * nameservers are what the registrar should be delegated to when Cloudflare is
+ * the selected DNS provider.
  *
  * `deps` is injectable for testing; defaults to the real getZone/createZone.
  */

package/dist/lib/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/lib/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EAIxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAIjC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAqCD,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAkBpF;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQvG;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAUnG;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE;IACL,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1E,GACA,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF;AAID,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkBxG;AAkBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrH;AAyBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7G;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjI;AA4BD,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,WAAW,GAAG,uBAAuB,CA+EzG"}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/lib/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EAIxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAIjC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAqCD,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAkBpF;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQvG;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAUnG;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE;IACL,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1E,GACA,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF;AAID,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkBxG;AAkBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrH;AAyBD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7G;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjI;AA4BD,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,WAAW,GAAG,uBAAuB,CA+EzG"}

package/dist/lib/config.d.ts

@@ -1,5 +1,5 @@
 /**
- * Persistent config stored at ~/.hasna/domains/config.json
+ * Persistent config stored in the domains config directory.
  */
 export interface DomainContact {
     first_name?: string;
@@ -21,9 +21,9 @@ export interface DomainsConfig {
     contact?: DomainContact;
 }
 /**
- * AWS profile to use for domain purchases. For this app, domains are bought in
- * the hasna-xyz-infra account. Resolved from config, then env. Applying it sets
- * process.env.AWS_PROFILE when no explicit AWS creds are already present.
+ * AWS profile to use for Route 53 domain purchases. Resolved from config, then
+ * env. Applying it sets process.env.AWS_PROFILE when no explicit AWS creds are
+ * already present.
  */
 export declare function getPurchaseProfile(): string | undefined;
 /** Set AWS_PROFILE from config for purchase ops if no explicit creds are set. */

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAKzD;AAMD,wBAAgB,UAAU,IAAI,aAAa,CAQ1C;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAKtD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAe1E;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CAC9C,GAAG;IACF,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IACpE,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAC1E,QAAQ,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9C,CA2BA;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAKzD;AAYD,wBAAgB,UAAU,IAAI,aAAa,CAQ1C;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAKtD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAe1E;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CAC9C,GAAG;IACF,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IACpE,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAC1E,QAAQ,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9C,CA2BA;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhE"}

package/dist/lib/creds-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"creds-check.d.ts","sourceRoot":"","sources":["../../src/lib/creds-check.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAqD,GAC1F,UAAU,EAAE,CA2Ed"}
+{"version":3,"file":"creds-check.d.ts","sourceRoot":"","sources":["../../src/lib/creds-check.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAqD,GAC1F,UAAU,EAAE,CA+Dd"}

package/dist/lib/delegate.d.ts

@@ -1,5 +1,5 @@
 /**
- * Cloudflare delegation — the always-Cloudflare-DNS rule in one place.
+ * Cloudflare delegation helper for domains that should use Cloudflare DNS.
  *
  * After a domain is registered with ANY registrar, DNS is managed in Cloudflare:
  * create (or reuse) a Cloudflare zone, then point the registrar's nameservers at

package/dist/lib/env-aliases.d.ts

@@ -16,27 +16,23 @@ export declare const GODADDY_ENV: {
     readonly apiSecret: readonly ["GODADDY_API_SECRET"];
 };
 export declare const BRANDSIGHT_ENV: {
-    readonly apiKey: readonly ["BRANDSIGHT_API_KEY", "HASNAXYZ_BRANDSIGHT_LIVE_API_KEY", "HASNAXYZ_BRANDSIGHT_SANDBOX_API_KEY"];
-    readonly apiSecret: readonly ["BRANDSIGHT_API_SECRET", "HASNAXYZ_BRANDSIGHT_LIVE_API_SECRET", "HASNAXYZ_BRANDSIGHT_SANDBOX_API_SECRET"];
-    readonly customerId: readonly ["BRANDSIGHT_CUSTOMER_ID", "HASNAXYZ_BRANDSIGHT_LIVE_CUSTOMER_ID", "HASNAXYZ_BRANDSIGHT_SANDBOX_CUSTOMER_ID"];
-    readonly shopperId: readonly ["BRANDSIGHT_SHOPPER_ID", "HASNAXYZ_BRANDSIGHT_LIVE_SHOPPER_ID", "HASNAXYZ_BRANDSIGHT_SANDBOX_SHOPPER_ID"];
-    readonly accountId: readonly ["BRANDSIGHT_ACCOUNT_ID", "HASNAXYZ_BRANDSIGHT_LIVE_ACCOUNT_ID"];
+    readonly apiKey: readonly ["BRANDSIGHT_API_KEY"];
+    readonly apiSecret: readonly ["BRANDSIGHT_API_SECRET"];
+    readonly customerId: readonly ["BRANDSIGHT_CUSTOMER_ID"];
+    readonly shopperId: readonly ["BRANDSIGHT_SHOPPER_ID"];
+    readonly accountId: readonly ["BRANDSIGHT_ACCOUNT_ID"];
 };
 export declare const SEDO_ENV: {
-    readonly partnerId: readonly ["SEDO_PARTNER_ID", "HASNAXYZ_SEDO_LIVE_PARTNER_ID"];
-    readonly signKey: readonly ["SEDO_API_KEY", "SEDO_SIGN_KEY", "HASNAXYZ_SEDO_LIVE_API_KEY"];
-    readonly username: readonly ["SEDO_USERNAME", "SEDO_EMAIL", "HASNAXYZ_SEDO_LIVE_USERNAME", "HASNAXYZ_SEDO_LIVE_EMAIL"];
-    readonly password: readonly ["SEDO_PASSWORD", "HASNAXYZ_SEDO_LIVE_PASSWORD"];
+    readonly partnerId: readonly ["SEDO_PARTNER_ID"];
+    readonly signKey: readonly ["SEDO_API_KEY", "SEDO_SIGN_KEY"];
+    readonly username: readonly ["SEDO_USERNAME", "SEDO_EMAIL"];
+    readonly password: readonly ["SEDO_PASSWORD"];
 };
 export declare const CLOUDFLARE_ENV: {
-    readonly apiToken: readonly ["CLOUDFLARE_API_TOKEN", "HASNAXYZ_CLOUDFLARE_LIVE_API_TOKEN"];
-    readonly apiKey: readonly ["CLOUDFLARE_API_KEY", "HASNAXYZ_CLOUDFLARE_LIVE_API_KEY"];
-    readonly email: readonly ["CLOUDFLARE_EMAIL", "HASNAXYZ_CLOUDFLARE_LIVE_EMAIL"];
-    readonly accountId: readonly ["CLOUDFLARE_ACCOUNT_ID", "HASNAXYZ_CLOUDFLARE_LIVE_ACCOUNT_ID"];
-};
-export declare const BEEPMEDIA_AWS_ENV: {
-    readonly accessKeyId: readonly ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_ACCESS_KEY_ID", "BEEPMEDIA_AWS_ACCESS_KEY_ID"];
-    readonly secretAccessKey: readonly ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_SECRET_ACCESS_KEY", "BEEPMEDIA_AWS_SECRET_ACCESS_KEY"];
+    readonly apiToken: readonly ["CLOUDFLARE_API_TOKEN"];
+    readonly apiKey: readonly ["CLOUDFLARE_API_KEY"];
+    readonly email: readonly ["CLOUDFLARE_EMAIL"];
+    readonly accountId: readonly ["CLOUDFLARE_ACCOUNT_ID"];
 };
 export declare function providerEnvNames(provider: string): string[];
 export declare function hasProviderCredentials(provider: string, env?: Env): boolean;

package/dist/lib/env-aliases.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-aliases.d.ts","sourceRoot":"","sources":["../../src/lib/env-aliases.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAErD,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,CAMjF;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAErF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAEhF;AAED,eAAO,MAAM,aAAa;;;;CAIhB,CAAC;AAEX,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;;CAsBjB,CAAC;AAEX,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AAEX,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAyB3D;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,GAAwB,GAC5B,OAAO,CAsBT"}
+{"version":3,"file":"env-aliases.d.ts","sourceRoot":"","sources":["../../src/lib/env-aliases.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAErD,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,CAMjF;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAErF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAEhF;AAED,eAAO,MAAM,aAAa;;;;CAIhB,CAAC;AAEX,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;;CAMjB,CAAC;AAEX,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAuB3D;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,GAAwB,GAC5B,OAAO,CAoBT"}

package/dist/lib/ns-drift.d.ts

@@ -1,5 +1,5 @@
 /**
- * NS drift reconciler — enforces the always-Cloudflare-DNS invariant across the
+ * NS drift reconciler — enforces Cloudflare DNS delegation for portfolios that choose it.
  * portfolio: every domain's nameservers must point to Cloudflare. Detects drift
  * (registrar NS not Cloudflare) and can re-delegate. Pure detection + an
  * injected reconcile loop, so it is fully testable.

package/dist/lib/route53.d.ts

@@ -96,9 +96,8 @@ type Route53DomainsSend = {
 /**
  * Point a domain's nameservers at a new set (the Cloudflare zone NS).
  *
- * Enforces the always-Cloudflare-DNS rule: after a domain is registered with
- * ANY registrar, delegate DNS to Cloudflare by calling this with the Cloudflare
- * zone's nameservers. Returns the async operation id (poll getOperationDetail).
+ * Point a Route 53-registered domain at the chosen DNS provider's nameservers.
+ * Returns the async operation id (poll getOperationDetail).
  */
 export declare function updateNameservers(domain: string, nameservers: string[], config?: Route53Config, client?: Route53DomainsSend): Promise<{
     operationId: string;

package/dist/lib/route53.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route53.d.ts","sourceRoot":"","sources":["../../src/lib/route53.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH,OAAO,KAAK,EACV,YAAY,EAOb,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iFAAiF;IACjF,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kGAAkG;IAClG,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAID,wBAAgB,SAAS,IAAI,aAAa,CAOzC;AAgCD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgC3G;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,aAAa,SAAI,EACjB,SAAS,UAAO,EAChB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAgClC;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAUhE;AAED,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAWnG;AAED,gFAAgF;AAChF,KAAK,kBAAkB,GAAG;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAExF;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,CAAC,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAmB/F;AAaD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAsB,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAoBvF;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,GAAG;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAatD;AAED,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlG;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAWnH;AA6CD,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA2BxG;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAaf;AAID,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,YAAY,CAqM1E"}
+{"version":3,"file":"route53.d.ts","sourceRoot":"","sources":["../../src/lib/route53.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH,OAAO,KAAK,EACV,YAAY,EAOb,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iFAAiF;IACjF,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kGAAkG;IAClG,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAID,wBAAgB,SAAS,IAAI,aAAa,CAOzC;AAgCD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgC3G;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,aAAa,SAAI,EACjB,SAAS,UAAO,EAChB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAgClC;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAUhE;AAED,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAWnG;AAED,gFAAgF;AAChF,KAAK,kBAAkB,GAAG;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAExF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,CAAC,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAmB/F;AAaD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAsB,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAoBvF;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,GAAG;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAatD;AAED,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlG;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAWnH;AA6CD,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA2BxG;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAaf;AAID,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,YAAY,CAqM1E"}

package/dist/mcp/index.js

@@ -31395,20 +31395,26 @@ var MIGRATIONS = [
 // src/db/database.ts
 var _db = null;
 function getDbPath() {
+  if (process.env["DOMAINS_DB_PATH"])
+    return process.env["DOMAINS_DB_PATH"];
   if (process.env["HASNA_DOMAINS_DB_PATH"])
     return process.env["HASNA_DOMAINS_DB_PATH"];
-  const explicit = process.env["HASNA_DOMAINS_DIR"] ?? process.env["DOMAINS_DIR"];
+  const explicit = process.env["DOMAINS_DIR"] ?? process.env["HASNA_DOMAINS_DIR"];
   if (explicit) {
     return join(explicit, "domains.db");
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir();
-  migrateDotfile("domains");
-  return join(home, ".hasna", "domains", "domains.db");
-}
-function migrateDotfile(name) {
+  const legacyDir = join(home, ".hasna", "domains");
+  if (existsSync(legacyDir))
+    return join(legacyDir, "domains.db");
+  const xdgData = process.env["XDG_DATA_HOME"] || join(home, ".local", "share");
+  const newDir = join(xdgData, "open-domains");
+  migrateDotfile("domains", newDir);
+  return join(newDir, "domains.db");
+}
+function migrateDotfile(name, newDir) {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir();
   const oldDir = join(home, `.${name}`);
-  const newDir = join(home, ".hasna", name);
   if (!existsSync(oldDir) || existsSync(newDir))
     return;
   mkdirSync(newDir, { recursive: true });
@@ -39812,43 +39818,23 @@ var GODADDY_ENV = {
   apiSecret: ["GODADDY_API_SECRET"]
 };
 var BRANDSIGHT_ENV = {
-  apiKey: [
-    "BRANDSIGHT_API_KEY",
-    "HASNAXYZ_BRANDSIGHT_LIVE_API_KEY",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_API_KEY"
-  ],
-  apiSecret: [
-    "BRANDSIGHT_API_SECRET",
-    "HASNAXYZ_BRANDSIGHT_LIVE_API_SECRET",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_API_SECRET"
-  ],
-  customerId: [
-    "BRANDSIGHT_CUSTOMER_ID",
-    "HASNAXYZ_BRANDSIGHT_LIVE_CUSTOMER_ID",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_CUSTOMER_ID"
-  ],
-  shopperId: [
-    "BRANDSIGHT_SHOPPER_ID",
-    "HASNAXYZ_BRANDSIGHT_LIVE_SHOPPER_ID",
-    "HASNAXYZ_BRANDSIGHT_SANDBOX_SHOPPER_ID"
-  ],
-  accountId: ["BRANDSIGHT_ACCOUNT_ID", "HASNAXYZ_BRANDSIGHT_LIVE_ACCOUNT_ID"]
+  apiKey: ["BRANDSIGHT_API_KEY"],
+  apiSecret: ["BRANDSIGHT_API_SECRET"],
+  customerId: ["BRANDSIGHT_CUSTOMER_ID"],
+  shopperId: ["BRANDSIGHT_SHOPPER_ID"],
+  accountId: ["BRANDSIGHT_ACCOUNT_ID"]
 };
 var SEDO_ENV = {
-  partnerId: ["SEDO_PARTNER_ID", "HASNAXYZ_SEDO_LIVE_PARTNER_ID"],
-  signKey: ["SEDO_API_KEY", "SEDO_SIGN_KEY", "HASNAXYZ_SEDO_LIVE_API_KEY"],
-  username: ["SEDO_USERNAME", "SEDO_EMAIL", "HASNAXYZ_SEDO_LIVE_USERNAME", "HASNAXYZ_SEDO_LIVE_EMAIL"],
-  password: ["SEDO_PASSWORD", "HASNAXYZ_SEDO_LIVE_PASSWORD"]
+  partnerId: ["SEDO_PARTNER_ID"],
+  signKey: ["SEDO_API_KEY", "SEDO_SIGN_KEY"],
+  username: ["SEDO_USERNAME", "SEDO_EMAIL"],
+  password: ["SEDO_PASSWORD"]
 };
 var CLOUDFLARE_ENV = {
-  apiToken: ["CLOUDFLARE_API_TOKEN", "HASNAXYZ_CLOUDFLARE_LIVE_API_TOKEN"],
-  apiKey: ["CLOUDFLARE_API_KEY", "HASNAXYZ_CLOUDFLARE_LIVE_API_KEY"],
-  email: ["CLOUDFLARE_EMAIL", "HASNAXYZ_CLOUDFLARE_LIVE_EMAIL"],
-  accountId: ["CLOUDFLARE_ACCOUNT_ID", "HASNAXYZ_CLOUDFLARE_LIVE_ACCOUNT_ID"]
-};
-var BEEPMEDIA_AWS_ENV = {
-  accessKeyId: ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_ACCESS_KEY_ID", "BEEPMEDIA_AWS_ACCESS_KEY_ID"],
-  secretAccessKey: ["HASNASTUDIO_BEEPMEDIA_AWS_LIVE_SECRET_ACCESS_KEY", "BEEPMEDIA_AWS_SECRET_ACCESS_KEY"]
+  apiToken: ["CLOUDFLARE_API_TOKEN"],
+  apiKey: ["CLOUDFLARE_API_KEY"],
+  email: ["CLOUDFLARE_EMAIL"],
+  accountId: ["CLOUDFLARE_ACCOUNT_ID"]
 };
 function providerEnvNames(provider) {
   switch (provider.toLowerCase()) {
@@ -39870,8 +39856,6 @@ function providerEnvNames(provider) {
       return flattenEnvNames([CLOUDFLARE_ENV.apiToken, CLOUDFLARE_ENV.apiKey, CLOUDFLARE_ENV.email, CLOUDFLARE_ENV.accountId]);
     case "route53":
       return ["AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION"];
-    case "aws:beepmedia":
-      return flattenEnvNames([BEEPMEDIA_AWS_ENV.accessKeyId, BEEPMEDIA_AWS_ENV.secretAccessKey]);
     default:
       return [];
   }
@@ -39893,8 +39877,6 @@ function hasProviderCredentials(provider, env = process.env) {
     }
     case "route53":
       return !!env["AWS_PROFILE"] || hasEveryEnv(env, [["AWS_ACCESS_KEY_ID"], ["AWS_SECRET_ACCESS_KEY"]]);
-    case "aws:beepmedia":
-      return hasEveryEnv(env, [BEEPMEDIA_AWS_ENV.accessKeyId, BEEPMEDIA_AWS_ENV.secretAccessKey]);
     default:
       return false;
   }
@@ -40170,7 +40152,7 @@ var _fetchFn = null;
 function getApiKey() {
   const key = resolveBrandsightConfig().apiKey;
   if (!key) {
-    throw new BrandsightApiError("Brandsight API key is not set. Set BRANDSIGHT_API_KEY or HASNAXYZ_BRANDSIGHT_LIVE_API_KEY.");
+    throw new BrandsightApiError("Brandsight API key is not set. Set BRANDSIGHT_API_KEY.");
   }
   return key;
 }
@@ -40208,7 +40190,7 @@ async function apiGet(path, apiKey, baseUrl = BRANDSIGHT_BASE) {
 function requireDomainConfig(config) {
   const cfg = config ?? getConfig4();
   if (!cfg.apiKey || !cfg.apiSecret || !cfg.customerId) {
-    throw new BrandsightApiError("Brandsight Domain API credentials are not configured. Set BRANDSIGHT_API_KEY, BRANDSIGHT_API_SECRET, and BRANDSIGHT_CUSTOMER_ID (or HASNAXYZ_BRANDSIGHT_LIVE_* aliases).");
+    throw new BrandsightApiError("Brandsight Domain API credentials are not configured. Set BRANDSIGHT_API_KEY, BRANDSIGHT_API_SECRET, and BRANDSIGHT_CUSTOMER_ID.");
   }
   return cfg;
 }
@@ -40924,9 +40906,18 @@ async function syncAll(dbFns) {
 // src/lib/config.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join3 } from "path";
+import { dirname as dirname4, join as join3 } from "path";
 function configPath() {
-  return join3(homedir3(), ".hasna", "domains", "config.json");
+  if (process.env["DOMAINS_CONFIG_PATH"])
+    return process.env["DOMAINS_CONFIG_PATH"];
+  const dir = process.env["DOMAINS_CONFIG_DIR"];
+  if (dir)
+    return join3(dir, "config.json");
+  const legacyDir = join3(homedir3(), ".hasna", "domains");
+  if (existsSync2(legacyDir))
+    return join3(legacyDir, "config.json");
+  const xdgConfig = process.env["XDG_CONFIG_HOME"] || join3(homedir3(), ".config");
+  return join3(xdgConfig, "open-domains", "config.json");
 }
 function loadConfig3() {
   const path = configPath();
@@ -41364,10 +41355,10 @@ var PRIMARY_KEYS = {
   domain_history: ["id"],
   domain_reputation: ["id"]
 };
-var DOMAINS_STORAGE_ENV = "HASNA_DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_FALLBACK_ENV = "DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_MODE_ENV = "HASNA_DOMAINS_STORAGE_MODE";
-var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_ENV = "DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_FALLBACK_ENV = "HASNA_DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_MODE_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "HASNA_DOMAINS_STORAGE_MODE";
 var STORAGE_DATABASE_ENV = [DOMAINS_STORAGE_ENV, DOMAINS_STORAGE_FALLBACK_ENV];
 var STORAGE_MODE_ENV = [DOMAINS_STORAGE_MODE_ENV, DOMAINS_STORAGE_MODE_FALLBACK_ENV];
 function firstEnv2(names) {
@@ -41395,7 +41386,7 @@ function getStorageMode() {
 async function getStoragePg() {
   const url = getStorageDatabaseUrl();
   if (!url) {
-    throw new Error("Missing HASNA_DOMAINS_DATABASE_URL or DOMAINS_DATABASE_URL");
+    throw new Error("Missing DOMAINS_DATABASE_URL or HASNA_DOMAINS_DATABASE_URL");
   }
   return new PgAdapterAsync(url);
 }
@@ -41812,7 +41803,7 @@ function buildServer() {
     description: "Link an email or email thread to a tracked domain.",
     inputSchema: {
       domain: exports_external.string().describe("Domain ID or name"),
-      email_id: exports_external.string().describe("Email ID from @hasna/emails"),
+      email_id: exports_external.string().describe("Email ID from the connected email system"),
       thread_id: exports_external.string().optional().describe("Optional email thread ID"),
       type: exports_external.enum(DOMAIN_EMAIL_TYPES)
     }
@@ -42574,7 +42565,7 @@ function buildServer() {
         zoneId = zone.id;
         nameservers = zone.nameservers ?? [];
       } else {
-        const zone = await createHostedZone(domain, "Managed by @hasna/domains");
+        const zone = await createHostedZone(domain, "Managed by domains MCP");
         zoneId = zone.id;
         nameservers = zone.name_servers ?? [];
       }

package/dist/storage.js

@@ -5355,20 +5355,26 @@ var MIGRATIONS = [
 // src/db/database.ts
 var _db = null;
 function getDbPath() {
+  if (process.env["DOMAINS_DB_PATH"])
+    return process.env["DOMAINS_DB_PATH"];
   if (process.env["HASNA_DOMAINS_DB_PATH"])
     return process.env["HASNA_DOMAINS_DB_PATH"];
-  const explicit = process.env["HASNA_DOMAINS_DIR"] ?? process.env["DOMAINS_DIR"];
+  const explicit = process.env["DOMAINS_DIR"] ?? process.env["HASNA_DOMAINS_DIR"];
   if (explicit) {
     return join(explicit, "domains.db");
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir();
-  migrateDotfile("domains");
-  return join(home, ".hasna", "domains", "domains.db");
+  const legacyDir = join(home, ".hasna", "domains");
+  if (existsSync(legacyDir))
+    return join(legacyDir, "domains.db");
+  const xdgData = process.env["XDG_DATA_HOME"] || join(home, ".local", "share");
+  const newDir = join(xdgData, "open-domains");
+  migrateDotfile("domains", newDir);
+  return join(newDir, "domains.db");
 }
-function migrateDotfile(name) {
+function migrateDotfile(name, newDir) {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir();
   const oldDir = join(home, `.${name}`);
-  const newDir = join(home, ".hasna", name);
   if (!existsSync(oldDir) || existsSync(newDir))
     return;
   mkdirSync(newDir, { recursive: true });
@@ -5442,10 +5448,10 @@ var PRIMARY_KEYS = {
   domain_history: ["id"],
   domain_reputation: ["id"]
 };
-var DOMAINS_STORAGE_ENV = "HASNA_DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_FALLBACK_ENV = "DOMAINS_DATABASE_URL";
-var DOMAINS_STORAGE_MODE_ENV = "HASNA_DOMAINS_STORAGE_MODE";
-var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_ENV = "DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_FALLBACK_ENV = "HASNA_DOMAINS_DATABASE_URL";
+var DOMAINS_STORAGE_MODE_ENV = "DOMAINS_STORAGE_MODE";
+var DOMAINS_STORAGE_MODE_FALLBACK_ENV = "HASNA_DOMAINS_STORAGE_MODE";
 var STORAGE_DATABASE_ENV = [DOMAINS_STORAGE_ENV, DOMAINS_STORAGE_FALLBACK_ENV];
 var STORAGE_MODE_ENV = [DOMAINS_STORAGE_MODE_ENV, DOMAINS_STORAGE_MODE_FALLBACK_ENV];
 function firstEnv(names) {
@@ -5480,7 +5486,7 @@ function getStorageMode() {
 async function getStoragePg() {
   const url = getStorageDatabaseUrl();
   if (!url) {
-    throw new Error("Missing HASNA_DOMAINS_DATABASE_URL or DOMAINS_DATABASE_URL");
+    throw new Error("Missing DOMAINS_DATABASE_URL or HASNA_DOMAINS_DATABASE_URL");
   }
   return new PgAdapterAsync(url);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/domains",
-  "version": "0.0.22",
+  "version": "0.0.24",
   "description": "Domain portfolio and DNS management for AI agents — CLI + MCP server with SQLite",
   "type": "module",
   "main": "dist/index.js",
@@ -32,7 +32,7 @@
     "dev:cli": "bun run src/cli/index.ts",
     "dev:mcp": "bun run src/mcp/index.ts",
     "prepublishOnly": "bun run build",
-    "postinstall": "mkdir -p $HOME/.hasna/domains 2>/dev/null || true"
+    "postinstall": "mkdir -p ${XDG_DATA_HOME:-$HOME/.local/share}/open-domains ${XDG_CONFIG_HOME:-$HOME/.config}/open-domains 2>/dev/null || true"
   },
   "keywords": [
     "domains",