@hasna/domains 0.0.3 → 0.0.5

package/dist/cli/index.js

@@ -3196,7 +3196,7 @@ var require_headStream = __commonJS((exports) => {
     if ((0, stream_type_check_1.isReadableStream)(stream)) {
       return (0, headStream_browser_1.headStream)(stream, bytes);
     }
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const collector = new Collector;
       collector.limit = bytes;
       stream.pipe(collector);
@@ -3207,7 +3207,7 @@ var require_headStream = __commonJS((exports) => {
       collector.on("error", reject);
       collector.on("finish", function() {
         const bytes2 = new Uint8Array(Buffer.concat(this.buffers));
-        resolve2(bytes2);
+        resolve3(bytes2);
       });
     });
   };
@@ -3403,21 +3403,21 @@ var require_dist_cjs13 = __commonJS((exports) => {
     let sendBody = true;
     if (!externalAgent && expect === "100-continue") {
       sendBody = await Promise.race([
-        new Promise((resolve2) => {
-          timeoutId = Number(timing.setTimeout(() => resolve2(true), Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
+        new Promise((resolve3) => {
+          timeoutId = Number(timing.setTimeout(() => resolve3(true), Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
         }),
-        new Promise((resolve2) => {
+        new Promise((resolve3) => {
           httpRequest.on("continue", () => {
             timing.clearTimeout(timeoutId);
-            resolve2(true);
+            resolve3(true);
           });
           httpRequest.on("response", () => {
             timing.clearTimeout(timeoutId);
-            resolve2(false);
+            resolve3(false);
           });
           httpRequest.on("error", () => {
             timing.clearTimeout(timeoutId);
-            resolve2(false);
+            resolve3(false);
           });
         })
       ]);
@@ -3492,13 +3492,13 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return socketWarningTimestamp;
     }
     constructor(options) {
-      this.configProvider = new Promise((resolve2, reject) => {
+      this.configProvider = new Promise((resolve3, reject) => {
         if (typeof options === "function") {
           options().then((_options) => {
-            resolve2(this.resolveDefaultConfig(_options));
+            resolve3(this.resolveDefaultConfig(_options));
           }).catch(reject);
         } else {
-          resolve2(this.resolveDefaultConfig(options));
+          resolve3(this.resolveDefaultConfig(options));
         }
       });
     }
@@ -3518,7 +3518,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new Promise((_resolve, _reject) => {
         let writeRequestBodyPromise = undefined;
         const timeouts = [];
-        const resolve2 = async (arg) => {
+        const resolve3 = async (arg) => {
           await writeRequestBodyPromise;
           timeouts.forEach(timing.clearTimeout);
           _resolve(arg);
@@ -3582,7 +3582,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             headers: getTransformedHeaders(res.headers),
             body: res
           });
-          resolve2({ response: httpResponse });
+          resolve3({ response: httpResponse });
         });
         req.on("error", (err) => {
           if (NODEJS_TIMEOUT_ERROR_CODES.includes(err.code)) {
@@ -3794,13 +3794,13 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new NodeHttp2Handler(instanceOrOptions);
     }
     constructor(options) {
-      this.configProvider = new Promise((resolve2, reject) => {
+      this.configProvider = new Promise((resolve3, reject) => {
         if (typeof options === "function") {
           options().then((opts) => {
-            resolve2(opts || {});
+            resolve3(opts || {});
           }).catch(reject);
         } else {
-          resolve2(options || {});
+          resolve3(options || {});
         }
       });
     }
@@ -3820,7 +3820,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new Promise((_resolve, _reject) => {
         let fulfilled = false;
         let writeRequestBodyPromise = undefined;
-        const resolve2 = async (arg) => {
+        const resolve3 = async (arg) => {
           await writeRequestBodyPromise;
           _resolve(arg);
         };
@@ -3875,7 +3875,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             body: req
           });
           fulfilled = true;
-          resolve2({ response: httpResponse });
+          resolve3({ response: httpResponse });
           if (disableConcurrentStreams) {
             session.close();
             this.connectionManager.deleteSession(authority, session);
@@ -3952,7 +3952,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
     if (isReadableStreamInstance(stream)) {
       return collectReadableStream(stream);
     }
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const collector = new Collector;
       stream.pipe(collector);
       stream.on("error", (err) => {
@@ -3962,7 +3962,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       collector.on("error", reject);
       collector.on("finish", function() {
         const bytes = new Uint8Array(Buffer.concat(this.bufferedBytes));
-        resolve2(bytes);
+        resolve3(bytes);
       });
     });
   };
@@ -4003,7 +4003,7 @@ var require_dist_cjs14 = __commonJS((exports) => {
     return new Request(url, requestOptions);
   }
   function requestTimeout(timeoutInMs = 0) {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       if (timeoutInMs) {
         setTimeout(() => {
           const timeoutError = new Error(`Request did not complete within ${timeoutInMs} ms`);
@@ -4119,7 +4119,7 @@ var require_dist_cjs14 = __commonJS((exports) => {
         requestTimeout(requestTimeoutInMs)
       ];
       if (abortSignal) {
-        raceOfPromises.push(new Promise((resolve2, reject) => {
+        raceOfPromises.push(new Promise((resolve3, reject) => {
           const onAbort = () => {
             const abortError = buildAbortError(abortSignal);
             reject(abortError);
@@ -4199,7 +4199,7 @@ var require_dist_cjs14 = __commonJS((exports) => {
     return collected;
   }
   function readToBase64(blob) {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const reader = new FileReader;
       reader.onloadend = () => {
         if (reader.readyState !== 2) {
@@ -4208,7 +4208,7 @@ var require_dist_cjs14 = __commonJS((exports) => {
         const result = reader.result ?? "";
         const commaIndex = result.indexOf(",");
         const dataOffset = commaIndex > -1 ? commaIndex + 1 : result.length;
-        resolve2(result.substring(dataOffset));
+        resolve3(result.substring(dataOffset));
       };
       reader.onabort = () => reject(new Error("Read aborted"));
       reader.onerror = () => reject(reader.error);
@@ -5415,11 +5415,11 @@ var require_tslib = __commonJS((exports, module) => {
     };
     __awaiter = function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve2) {
-          resolve2(value);
+        return value instanceof P ? value : new P(function(resolve3) {
+          resolve3(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve2, reject) {
+      return new (P || (P = Promise))(function(resolve3, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -5435,7 +5435,7 @@ var require_tslib = __commonJS((exports, module) => {
           }
         }
         function step(result) {
-          result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve3(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -5664,14 +5664,14 @@ var require_tslib = __commonJS((exports, module) => {
       }, i);
       function verb(n) {
         i[n] = o[n] && function(v) {
-          return new Promise(function(resolve2, reject) {
-            v = o[n](v), settle(resolve2, reject, v.done, v.value);
+          return new Promise(function(resolve3, reject) {
+            v = o[n](v), settle(resolve3, reject, v.done, v.value);
           });
         };
       }
-      function settle(resolve2, reject, d, v) {
+      function settle(resolve3, reject, d, v) {
         Promise.resolve(v).then(function(v2) {
-          resolve2({ value: v2, done: d });
+          resolve3({ value: v2, done: d });
         }, reject);
       }
     };
@@ -15357,7 +15357,7 @@ var require_dist_cjs31 = __commonJS((exports) => {
       this.refillTokenBucket();
       if (amount > this.currentCapacity) {
         const delay = (amount - this.currentCapacity) / this.fillRate * 1000;
-        await new Promise((resolve2) => DefaultRateLimiter.setTimeoutFn(resolve2, delay));
+        await new Promise((resolve3) => DefaultRateLimiter.setTimeoutFn(resolve3, delay));
       }
       this.currentCapacity = this.currentCapacity - amount;
     }
@@ -15651,7 +15651,7 @@ var require_dist_cjs32 = __commonJS((exports) => {
       }
     }
   }
-  var USER_AGENT = "user-agent";
+  var USER_AGENT2 = "user-agent";
   var X_AMZ_USER_AGENT = "x-amz-user-agent";
   var SPACE = " ";
   var UA_NAME_SEPARATOR = "/";
@@ -15699,9 +15699,9 @@ var require_dist_cjs32 = __commonJS((exports) => {
     ].join(SPACE);
     if (options.runtime !== "browser") {
       if (normalUAValue) {
-        headers[X_AMZ_USER_AGENT] = headers[X_AMZ_USER_AGENT] ? `${headers[USER_AGENT]} ${normalUAValue}` : normalUAValue;
+        headers[X_AMZ_USER_AGENT] = headers[X_AMZ_USER_AGENT] ? `${headers[USER_AGENT2]} ${normalUAValue}` : normalUAValue;
       }
-      headers[USER_AGENT] = sdkUserAgentValue;
+      headers[USER_AGENT2] = sdkUserAgentValue;
     } else {
       headers[X_AMZ_USER_AGENT] = sdkUserAgentValue;
     }
@@ -16803,7 +16803,7 @@ var require_dist_cjs40 = __commonJS((exports) => {
             const delayFromResponse = getDelayFromRetryAfterHeader(err.$response);
             const delay = Math.max(delayFromResponse || 0, delayFromDecider);
             totalDelay += delay;
-            await new Promise((resolve2) => setTimeout(resolve2, delay));
+            await new Promise((resolve3) => setTimeout(resolve3, delay));
             continue;
           }
           if (!err.$metadata) {
@@ -16955,7 +16955,7 @@ var require_dist_cjs40 = __commonJS((exports) => {
           attempts = retryToken.getRetryCount();
           const delay = retryToken.getRetryDelay();
           totalRetryDelay += delay;
-          await new Promise((resolve2) => setTimeout(resolve2, delay));
+          await new Promise((resolve3) => setTimeout(resolve3, delay));
         }
       }
     } else {
@@ -17078,7 +17078,7 @@ var init_dist_es = __esm(() => {
 import { Buffer as Buffer2 } from "buffer";
 import { request } from "http";
 function httpRequest(options) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const req = request({
       method: "GET",
       ...options,
@@ -17103,7 +17103,7 @@ function httpRequest(options) {
         chunks.push(chunk);
       });
       res.on("end", () => {
-        resolve2(Buffer2.concat(chunks));
+        resolve3(Buffer2.concat(chunks));
         req.destroy();
       });
     });
@@ -17564,7 +17564,7 @@ var retryWrapper = (toRetry, maxRetries, delayMs) => {
       try {
         return await toRetry();
       } catch (e) {
-        await new Promise((resolve2) => setTimeout(resolve2, delayMs));
+        await new Promise((resolve3) => setTimeout(resolve3, delayMs));
       }
     }
     return await toRetry();
@@ -17874,12 +17874,12 @@ var require_dist_cjs41 = __commonJS((exports) => {
     }
     return ["md/nodejs", node_process.versions.node];
   };
-  var getNodeModulesParentDirs = (dirname3) => {
+  var getNodeModulesParentDirs = (dirname4) => {
     const cwd = process.cwd();
-    if (!dirname3) {
+    if (!dirname4) {
       return [cwd];
     }
-    const normalizedPath = node_path.normalize(dirname3);
+    const normalizedPath = node_path.normalize(dirname4);
     const parts = normalizedPath.split(node_path.sep);
     const nodeModulesIndex = parts.indexOf("node_modules");
     const parentDir = nodeModulesIndex !== -1 ? parts.slice(0, nodeModulesIndex).join(node_path.sep) : normalizedPath;
@@ -17926,8 +17926,8 @@ var require_dist_cjs41 = __commonJS((exports) => {
       tscVersion = null;
       return;
     }
-    const dirname3 = typeof __dirname !== "undefined" ? __dirname : undefined;
-    const nodeModulesParentDirs = getNodeModulesParentDirs(dirname3);
+    const dirname4 = typeof __dirname !== "undefined" ? __dirname : undefined;
+    const nodeModulesParentDirs = getNodeModulesParentDirs(dirname4);
     let versionFromApp;
     for (const nodeModulesParentDir of nodeModulesParentDirs) {
       try {
@@ -23670,7 +23670,7 @@ var require_signin = __commonJS((exports) => {
 import { createHash, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname3, join as join7 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 var import_property_provider18, import_protocol_http2, import_shared_ini_file_loader6, LoginCredentialsFetcher;
 var init_LoginCredentialsFetcher = __esm(() => {
   import_property_provider18 = __toESM(require_dist_cjs23(), 1);
@@ -23823,7 +23823,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
     }
     async saveToken(token) {
       const tokenFilePath = this.getTokenFilePath();
-      const directory = dirname3(tokenFilePath);
+      const directory = dirname4(tokenFilePath);
       try {
         await fs2.mkdir(directory, { recursive: true });
       } catch (error) {}
@@ -34022,6 +34022,11 @@ function deleteDomain(id) {
   const result = db.prepare("DELETE FROM domains WHERE id = ?").run(id);
   return result.changes > 0;
 }
+function countDomains() {
+  const db = getDatabase();
+  const row = db.prepare("SELECT COUNT(*) as count FROM domains").get();
+  return row.count;
+}
 function searchDomains(query) {
   return listDomains({ search: query });
 }
@@ -34170,6 +34175,28 @@ function deleteAlert(id) {
 }
 // src/db/dns-tools.ts
 import { execSync } from "child_process";
+
+// src/lib/version.ts
+import { readFileSync as readFileSync2 } from "fs";
+import { dirname as dirname3, resolve as resolve2 } from "path";
+import { fileURLToPath } from "url";
+var cachedVersion = null;
+function getPackageVersion() {
+  if (cachedVersion)
+    return cachedVersion;
+  try {
+    const moduleDir = dirname3(fileURLToPath(import.meta.url));
+    const packageJsonPath = resolve2(moduleDir, "../../package.json");
+    const pkg = JSON.parse(readFileSync2(packageJsonPath, "utf8"));
+    cachedVersion = pkg.version ?? "0.0.0";
+  } catch {
+    cachedVersion = "0.0.0";
+  }
+  return cachedVersion;
+}
+var USER_AGENT = `open-domains/${getPackageVersion()}`;
+
+// src/db/dns-tools.ts
 function whoisLookup(domainName) {
   let raw;
   try {
@@ -34383,7 +34410,7 @@ async function discoverSubdomains(domain) {
     const url = `https://crt.sh/?q=%25.${encodeURIComponent(domain)}&output=json`;
     const response = await fetch(url, {
       signal: AbortSignal.timeout(15000),
-      headers: { "User-Agent": "open-domains/0.0.1" }
+      headers: { "User-Agent": USER_AGENT }
     });
     if (!response.ok) {
       return {
@@ -34554,502 +34581,6 @@ function csvEscape(value) {
   }
   return value;
 }
-function checkAllDomains() {
-  const domains = listDomains();
-  const results = [];
-  for (const domain of domains) {
-    const result = {
-      domain: domain.name,
-      domain_id: domain.id
-    };
-    try {
-      const whois = whoisLookup(domain.name);
-      result.whois = {
-        registrar: whois.registrar,
-        expires_at: whois.expires_at
-      };
-    } catch (error) {
-      result.whois = {
-        registrar: null,
-        expires_at: null,
-        error: error instanceof Error ? error.message : String(error)
-      };
-    }
-    const ssl = checkSsl(domain.name);
-    result.ssl = {
-      issuer: ssl.issuer,
-      expires_at: ssl.expires_at,
-      error: ssl.error
-    };
-    const validation = validateDns(domain.id);
-    if (validation) {
-      result.dns_validation = {
-        valid: validation.valid,
-        issue_count: validation.issues.length,
-        errors: validation.issues.map((i) => `[${i.type}] ${i.message}`)
-      };
-    }
-    results.push(result);
-  }
-  return results;
-}
-// src/cli/commands/domains.ts
-import { writeFileSync as writeFileSync2 } from "fs";
-function registerDomainCommands(program2) {
-  program2.command("add").description("Add a new domain").requiredOption("--name <name>", "Domain name (e.g. example.com)").option("--registrar <registrar>", "Domain registrar").option("--status <status>", "Status (active/expired/transferring/redemption)", "active").option("--registered-at <date>", "Registration date (ISO)").option("--expires-at <date>", "Expiration date (ISO)").option("--no-auto-renew", "Disable auto-renew").option("--nameservers <ns>", "Comma-separated nameservers").option("--ssl-expires-at <date>", "SSL expiration date (ISO)").option("--ssl-issuer <issuer>", "SSL certificate issuer").option("--notes <notes>", "Notes").option("--json", "Output as JSON", false).action((opts) => {
-    const domain = createDomain({
-      name: opts.name,
-      registrar: opts.registrar,
-      status: opts.status,
-      registered_at: opts.registeredAt,
-      expires_at: opts.expiresAt,
-      auto_renew: opts.autoRenew,
-      nameservers: opts.nameservers ? opts.nameservers.split(",").map((s) => s.trim()) : undefined,
-      ssl_expires_at: opts.sslExpiresAt,
-      ssl_issuer: opts.sslIssuer,
-      notes: opts.notes
-    });
-    if (opts.json) {
-      console.log(JSON.stringify(domain, null, 2));
-    } else {
-      console.log(`Created domain: ${domain.name} (${domain.id})`);
-    }
-  });
-  program2.command("get").description("Get a domain by ID").argument("<id>", "Domain ID").option("--json", "Output as JSON", false).action((id, opts) => {
-    const domain = getDomain(id);
-    if (!domain) {
-      console.error(`Domain '${id}' not found.`);
-      process.exit(1);
-    }
-    if (opts.json) {
-      console.log(JSON.stringify(domain, null, 2));
-    } else {
-      console.log(`${domain.name} [${domain.status}]`);
-      if (domain.registrar)
-        console.log(`  Registrar: ${domain.registrar}`);
-      if (domain.expires_at)
-        console.log(`  Expires: ${domain.expires_at}`);
-      if (domain.ssl_expires_at)
-        console.log(`  SSL Expires: ${domain.ssl_expires_at}`);
-      if (domain.ssl_issuer)
-        console.log(`  SSL Issuer: ${domain.ssl_issuer}`);
-      console.log(`  Auto-renew: ${domain.auto_renew ? "yes" : "no"}`);
-      if (domain.nameservers.length)
-        console.log(`  Nameservers: ${domain.nameservers.join(", ")}`);
-      if (domain.notes)
-        console.log(`  Notes: ${domain.notes}`);
-    }
-  });
-  program2.command("list").description("List domains").option("--search <query>", "Search by name, registrar, or notes").option("--status <status>", "Filter by status").option("--registrar <registrar>", "Filter by registrar").option("--limit <n>", "Limit results").option("--json", "Output as JSON", false).action((opts) => {
-    const domains = listDomains({
-      search: opts.search,
-      status: opts.status,
-      registrar: opts.registrar,
-      limit: opts.limit ? parseInt(opts.limit) : undefined
-    });
-    if (opts.json) {
-      console.log(JSON.stringify(domains, null, 2));
-    } else {
-      if (domains.length === 0) {
-        console.log("No domains found.");
-        return;
-      }
-      for (const d of domains) {
-        const expires = d.expires_at ? ` (expires ${d.expires_at})` : "";
-        console.log(`  ${d.name} [${d.status}]${expires}`);
-      }
-      console.log(`
-${domains.length} domain(s)`);
-    }
-  });
-  program2.command("update").description("Update a domain").argument("<id>", "Domain ID").option("--name <name>", "Domain name").option("--registrar <registrar>", "Registrar").option("--status <status>", "Status").option("--registered-at <date>", "Registration date").option("--expires-at <date>", "Expiration date").option("--auto-renew <bool>", "Auto-renew (true/false)").option("--nameservers <ns>", "Comma-separated nameservers").option("--ssl-expires-at <date>", "SSL expiration date").option("--ssl-issuer <issuer>", "SSL issuer").option("--notes <notes>", "Notes").option("--json", "Output as JSON", false).action((id, opts) => {
-    const input = {};
-    if (opts.name !== undefined)
-      input.name = opts.name;
-    if (opts.registrar !== undefined)
-      input.registrar = opts.registrar;
-    if (opts.status !== undefined)
-      input.status = opts.status;
-    if (opts.registeredAt !== undefined)
-      input.registered_at = opts.registeredAt;
-    if (opts.expiresAt !== undefined)
-      input.expires_at = opts.expiresAt;
-    if (opts.autoRenew !== undefined)
-      input.auto_renew = opts.autoRenew === "true";
-    if (opts.nameservers !== undefined)
-      input.nameservers = opts.nameservers.split(",").map((s) => s.trim());
-    if (opts.sslExpiresAt !== undefined)
-      input.ssl_expires_at = opts.sslExpiresAt;
-    if (opts.sslIssuer !== undefined)
-      input.ssl_issuer = opts.sslIssuer;
-    if (opts.notes !== undefined)
-      input.notes = opts.notes;
-    const domain = updateDomain(id, input);
-    if (!domain) {
-      console.error(`Domain '${id}' not found.`);
-      process.exit(1);
-    }
-    if (opts.json) {
-      console.log(JSON.stringify(domain, null, 2));
-    } else {
-      console.log(`Updated: ${domain.name}`);
-    }
-  });
-  program2.command("delete").description("Delete a domain").argument("<id>", "Domain ID").action((id) => {
-    const deleted = deleteDomain(id);
-    if (deleted) {
-      console.log(`Deleted domain ${id}`);
-    } else {
-      console.error(`Domain '${id}' not found.`);
-      process.exit(1);
-    }
-  });
-  program2.command("search").description("Search domains").argument("<query>", "Search term").option("--json", "Output as JSON", false).action((query, opts) => {
-    const results = searchDomains(query);
-    if (opts.json) {
-      console.log(JSON.stringify(results, null, 2));
-    } else {
-      if (results.length === 0) {
-        console.log(`No domains matching "${query}".`);
-        return;
-      }
-      for (const d of results) {
-        console.log(`  ${d.name} [${d.status}]`);
-      }
-    }
-  });
-  program2.command("expiring").description("List domains expiring within N days").option("--days <n>", "Number of days ahead", "30").option("--json", "Output as JSON", false).action((opts) => {
-    const days = parseInt(opts.days);
-    const domains = listExpiring(days);
-    if (opts.json) {
-      console.log(JSON.stringify(domains, null, 2));
-    } else {
-      if (domains.length === 0) {
-        console.log(`No domains expiring within ${days} days.`);
-        return;
-      }
-      console.log(`Domains expiring within ${days} days:`);
-      for (const d of domains) {
-        console.log(`  ${d.name} \u2014 expires ${d.expires_at}`);
-      }
-    }
-  });
-  program2.command("ssl").description("List domains with SSL expiring within N days").option("--days <n>", "Number of days ahead", "30").option("--json", "Output as JSON", false).action((opts) => {
-    const days = parseInt(opts.days);
-    const domains = listSslExpiring(days);
-    if (opts.json) {
-      console.log(JSON.stringify(domains, null, 2));
-    } else {
-      if (domains.length === 0) {
-        console.log(`No SSL certificates expiring within ${days} days.`);
-        return;
-      }
-      console.log(`SSL certificates expiring within ${days} days:`);
-      for (const d of domains) {
-        console.log(`  ${d.name} \u2014 SSL expires ${d.ssl_expires_at} (${d.ssl_issuer || "unknown issuer"})`);
-      }
-    }
-  });
-  program2.command("stats").description("Show domain portfolio statistics").option("--json", "Output as JSON", false).action((opts) => {
-    const stats = getDomainStats();
-    if (opts.json) {
-      console.log(JSON.stringify(stats, null, 2));
-    } else {
-      console.log("Domain Portfolio Stats:");
-      console.log(`  Total: ${stats.total}`);
-      console.log(`  Active: ${stats.active}`);
-      console.log(`  Expired: ${stats.expired}`);
-      console.log(`  Transferring: ${stats.transferring}`);
-      console.log(`  Redemption: ${stats.redemption}`);
-      console.log(`  Auto-renew enabled: ${stats.auto_renew_enabled}`);
-      console.log(`  Expiring (30 days): ${stats.expiring_30_days}`);
-      console.log(`  SSL expiring (30 days): ${stats.ssl_expiring_30_days}`);
-    }
-  });
-  program2.command("whois").description("Run WHOIS lookup for a domain and update DB record").argument("<name>", "Domain name (e.g. example.com)").option("--json", "Output as JSON", false).action((name, opts) => {
-    try {
-      const result = whoisLookup(name);
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.log(`WHOIS for ${result.domain}:`);
-        console.log(`  Registrar: ${result.registrar || "unknown"}`);
-        console.log(`  Expires: ${result.expires_at || "unknown"}`);
-        if (result.nameservers.length > 0) {
-          console.log(`  Nameservers: ${result.nameservers.join(", ")}`);
-        }
-      }
-    } catch (error) {
-      console.error(`WHOIS lookup failed: ${error instanceof Error ? error.message : String(error)}`);
-      process.exit(1);
-    }
-  });
-  program2.command("ssl-check").description("Check SSL certificate for a domain and update DB record").argument("<name>", "Domain name (e.g. example.com)").option("--json", "Output as JSON", false).action((name, opts) => {
-    const result = checkSsl(name);
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      if (result.error) {
-        console.error(`SSL check failed: ${result.error}`);
-        process.exit(1);
-      }
-      console.log(`SSL Certificate for ${result.domain}:`);
-      console.log(`  Issuer: ${result.issuer || "unknown"}`);
-      console.log(`  Expires: ${result.expires_at || "unknown"}`);
-      if (result.subject)
-        console.log(`  Subject: ${result.subject}`);
-    }
-  });
-  program2.command("export").description("Export all domains as CSV or JSON").option("--format <format>", "Export format (csv or json)", "json").option("--output <file>", "Write to file instead of stdout").action((opts) => {
-    const format = opts.format === "csv" ? "csv" : "json";
-    const output = exportPortfolio(format);
-    if (opts.output) {
-      writeFileSync2(opts.output, output, "utf-8");
-      console.log(`Exported to ${opts.output}`);
-    } else {
-      console.log(output);
-    }
-  });
-  program2.command("check-all").description("Run WHOIS + SSL + DNS validation on all domains").option("--json", "Output as JSON", false).action((opts) => {
-    const results = checkAllDomains();
-    if (opts.json) {
-      console.log(JSON.stringify(results, null, 2));
-    } else {
-      if (results.length === 0) {
-        console.log("No domains to check.");
-        return;
-      }
-      for (const r of results) {
-        console.log(`
-${r.domain}:`);
-        if (r.whois) {
-          console.log(`  WHOIS: registrar=${r.whois.registrar || "?"}, expires=${r.whois.expires_at || "?"}`);
-          if (r.whois.error)
-            console.log(`    Error: ${r.whois.error}`);
-        }
-        if (r.ssl) {
-          console.log(`  SSL: issuer=${r.ssl.issuer || "?"}, expires=${r.ssl.expires_at || "?"}`);
-          if (r.ssl.error)
-            console.log(`    Error: ${r.ssl.error}`);
-        }
-        if (r.dns_validation) {
-          console.log(`  DNS: valid=${r.dns_validation.valid}, issues=${r.dns_validation.issue_count}`);
-          for (const e of r.dns_validation.errors) {
-            console.log(`    ${e}`);
-          }
-        }
-      }
-      console.log(`
-Checked ${results.length} domain(s)`);
-    }
-  });
-}
-
-// src/cli/commands/dns.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "fs";
-function registerDnsCommands(program2) {
-  const dnsCmd = program2.command("dns").description("DNS record management");
-  dnsCmd.command("list").description("List DNS records for a domain").argument("<domain-id>", "Domain ID").option("--type <type>", "Filter by record type (A/AAAA/CNAME/MX/TXT/NS/SRV)").option("--json", "Output as JSON", false).action((domainId, opts) => {
-    const records = listDnsRecords(domainId, opts.type);
-    if (opts.json) {
-      console.log(JSON.stringify(records, null, 2));
-    } else {
-      if (records.length === 0) {
-        console.log("No DNS records found.");
-        return;
-      }
-      for (const r of records) {
-        const priority = r.priority !== null ? ` (priority: ${r.priority})` : "";
-        console.log(`  ${r.type}	${r.name}	${r.value}	TTL:${r.ttl}${priority}`);
-      }
-    }
-  });
-  dnsCmd.command("add").description("Add a DNS record").requiredOption("--domain <id>", "Domain ID").requiredOption("--type <type>", "Record type (A/AAAA/CNAME/MX/TXT/NS/SRV)").requiredOption("--name <name>", "Record name").requiredOption("--value <value>", "Record value").option("--ttl <ttl>", "TTL in seconds", "3600").option("--priority <n>", "Priority (for MX/SRV)").option("--json", "Output as JSON", false).action((opts) => {
-    const record = createDnsRecord({
-      domain_id: opts.domain,
-      type: opts.type,
-      name: opts.name,
-      value: opts.value,
-      ttl: parseInt(opts.ttl),
-      priority: opts.priority ? parseInt(opts.priority) : undefined
-    });
-    if (opts.json) {
-      console.log(JSON.stringify(record, null, 2));
-    } else {
-      console.log(`Created DNS record: ${record.type} ${record.name} -> ${record.value} (${record.id})`);
-    }
-  });
-  dnsCmd.command("update").description("Update a DNS record").argument("<id>", "Record ID").option("--type <type>", "Record type").option("--name <name>", "Record name").option("--value <value>", "Record value").option("--ttl <ttl>", "TTL in seconds").option("--priority <n>", "Priority").option("--json", "Output as JSON", false).action((id, opts) => {
-    const input = {};
-    if (opts.type !== undefined)
-      input.type = opts.type;
-    if (opts.name !== undefined)
-      input.name = opts.name;
-    if (opts.value !== undefined)
-      input.value = opts.value;
-    if (opts.ttl !== undefined)
-      input.ttl = parseInt(opts.ttl);
-    if (opts.priority !== undefined)
-      input.priority = parseInt(opts.priority);
-    const record = updateDnsRecord(id, input);
-    if (!record) {
-      console.error(`DNS record '${id}' not found.`);
-      process.exit(1);
-    }
-    if (opts.json) {
-      console.log(JSON.stringify(record, null, 2));
-    } else {
-      console.log(`Updated DNS record: ${record.type} ${record.name} -> ${record.value}`);
-    }
-  });
-  dnsCmd.command("remove").description("Remove a DNS record").argument("<id>", "Record ID").action((id) => {
-    const deleted = deleteDnsRecord(id);
-    if (deleted) {
-      console.log(`Deleted DNS record ${id}`);
-    } else {
-      console.error(`DNS record '${id}' not found.`);
-      process.exit(1);
-    }
-  });
-  dnsCmd.command("check-propagation").description("Check DNS propagation across multiple servers").argument("<domain>", "Domain name to check").option("--record <type>", "Record type (A/AAAA/CNAME/MX/TXT/NS)", "A").option("--json", "Output as JSON", false).action((domain, opts) => {
-    const result = checkDnsPropagation(domain, opts.record);
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`DNS Propagation for ${result.domain} (${result.record_type}):`);
-      console.log(`  Consistent: ${result.consistent ? "yes" : "NO"}`);
-      for (const s of result.servers) {
-        const values = s.values.length > 0 ? s.values.join(", ") : "(empty)";
-        const status = s.status === "error" ? ` [ERROR: ${s.error}]` : "";
-        console.log(`  ${s.name} (${s.server}): ${values}${status}`);
-      }
-    }
-  });
-  dnsCmd.command("export").description("Export DNS records as BIND zone file").argument("<domain-id>", "Domain ID").option("--output <file>", "Write to file instead of stdout").action((domainId, opts) => {
-    const zone = exportZoneFile(domainId);
-    if (!zone) {
-      console.error(`Domain '${domainId}' not found.`);
-      process.exit(1);
-    }
-    if (opts.output) {
-      writeFileSync3(opts.output, zone, "utf-8");
-      console.log(`Exported zone file to ${opts.output}`);
-    } else {
-      console.log(zone);
-    }
-  });
-  dnsCmd.command("import").description("Import DNS records from a BIND zone file").argument("<domain-id>", "Domain ID").requiredOption("--file <path>", "Path to zone file").option("--json", "Output as JSON", false).action((domainId, opts) => {
-    let content;
-    try {
-      content = readFileSync2(opts.file, "utf-8");
-    } catch {
-      console.error(`Could not read file: ${opts.file}`);
-      process.exit(1);
-    }
-    const result = importZoneFile(domainId, content);
-    if (!result) {
-      console.error(`Domain '${domainId}' not found.`);
-      process.exit(1);
-    }
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`Imported ${result.imported} record(s), skipped ${result.skipped}`);
-      if (result.errors.length > 0) {
-        console.log("Errors:");
-        for (const e of result.errors) {
-          console.log(`  - ${e}`);
-        }
-      }
-    }
-  });
-  dnsCmd.command("discover-subdomains").description("Discover subdomains via certificate transparency logs (crt.sh)").argument("<domain>", "Domain name").option("--json", "Output as JSON", false).action(async (domain, opts) => {
-    const result = await discoverSubdomains(domain);
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      if (result.error) {
-        console.error(`Discovery failed: ${result.error}`);
-        process.exit(1);
-      }
-      if (result.subdomains.length === 0) {
-        console.log(`No subdomains found for ${domain}.`);
-        return;
-      }
-      console.log(`Subdomains for ${domain} (source: ${result.source}):`);
-      for (const s of result.subdomains) {
-        console.log(`  ${s}`);
-      }
-      console.log(`
-${result.subdomains.length} subdomain(s) found`);
-    }
-  });
-  dnsCmd.command("validate").description("Validate DNS records for common issues").argument("<domain-id>", "Domain ID").option("--json", "Output as JSON", false).action((domainId, opts) => {
-    const result = validateDns(domainId);
-    if (!result) {
-      console.error(`Domain '${domainId}' not found.`);
-      process.exit(1);
-    }
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`DNS Validation for ${result.domain_name}:`);
-      console.log(`  Valid: ${result.valid ? "yes" : "NO"}`);
-      if (result.issues.length === 0) {
-        console.log("  No issues found.");
-      } else {
-        for (const issue of result.issues) {
-          const prefix = issue.type === "error" ? "ERROR" : "WARN";
-          console.log(`  [${prefix}] ${issue.message}`);
-        }
-      }
-    }
-  });
-}
-
-// src/cli/commands/alerts.ts
-function registerAlertCommands(program2) {
-  const alertCmd = program2.command("alert").description("Alert management");
-  alertCmd.command("set").description("Set an alert for a domain").requiredOption("--domain <id>", "Domain ID").requiredOption("--type <type>", "Alert type (expiry/ssl_expiry/dns_change)").option("--days-before <n>", "Trigger N days before").option("--json", "Output as JSON", false).action((opts) => {
-    const alert = createAlert({
-      domain_id: opts.domain,
-      type: opts.type,
-      trigger_days_before: opts.daysBefore ? parseInt(opts.daysBefore) : undefined
-    });
-    if (opts.json) {
-      console.log(JSON.stringify(alert, null, 2));
-    } else {
-      const daysBefore = alert.trigger_days_before ? ` (${alert.trigger_days_before} days before)` : "";
-      console.log(`Created alert: ${alert.type}${daysBefore} for domain ${alert.domain_id} (${alert.id})`);
-    }
-  });
-  alertCmd.command("list").description("List alerts for a domain").argument("<domain-id>", "Domain ID").option("--json", "Output as JSON", false).action((domainId, opts) => {
-    const alerts = listAlerts(domainId);
-    if (opts.json) {
-      console.log(JSON.stringify(alerts, null, 2));
-    } else {
-      if (alerts.length === 0) {
-        console.log("No alerts set.");
-        return;
-      }
-      for (const a of alerts) {
-        const daysBefore = a.trigger_days_before ? ` (${a.trigger_days_before} days before)` : "";
-        const sent = a.sent_at ? ` \u2014 sent ${a.sent_at}` : "";
-        console.log(`  ${a.type}${daysBefore}${sent}`);
-      }
-    }
-  });
-  alertCmd.command("remove").description("Remove an alert").argument("<id>", "Alert ID").action((id) => {
-    const deleted = deleteAlert(id);
-    if (deleted) {
-      console.log(`Deleted alert ${id}`);
-    } else {
-      console.error(`Alert '${id}' not found.`);
-      process.exit(1);
-    }
-  });
-}
-
 // src/lib/namecheap.ts
 function getConfig() {
   const apiKey = process.env["NAMECHEAP_API_KEY"];
@@ -42156,6 +41687,368 @@ function createRoute53Provider(config) {
   };
 }
 
+// src/lib/cloudflare.ts
+function getConfig3() {
+  return {
+    apiToken: process.env["CLOUDFLARE_API_TOKEN"],
+    accountId: process.env["CLOUDFLARE_ACCOUNT_ID"]
+  };
+}
+function checkCredentials2(cfg) {
+  if (!cfg.apiToken) {
+    throw new Error("Cloudflare credentials not configured. Set CLOUDFLARE_API_TOKEN environment variable.");
+  }
+}
+var CF_BASE = "https://api.cloudflare.com/client/v4";
+async function cfFetch(path, opts = {}) {
+  const cfg = opts.config ?? getConfig3();
+  checkCredentials2(cfg);
+  const res = await fetch(`${CF_BASE}${path}`, {
+    method: opts.method ?? "GET",
+    headers: {
+      Authorization: `Bearer ${cfg.apiToken}`,
+      "Content-Type": "application/json"
+    },
+    body: opts.body ? JSON.stringify(opts.body) : undefined
+  });
+  const json = await res.json();
+  if (!json.success) {
+    const msg = json.errors?.[0]?.message ?? `Cloudflare API error (${res.status})`;
+    throw new Error(msg);
+  }
+  return json.result;
+}
+async function listZones(config) {
+  const zones = [];
+  let page = 1;
+  while (true) {
+    const result = await cfFetch(`/zones?per_page=50&page=${page}`, { config });
+    if (!result || result.length === 0)
+      break;
+    for (const z2 of result) {
+      zones.push({ id: z2.id, name: z2.name, status: z2.status, nameservers: z2.name_servers, original_nameservers: z2.original_name_servers });
+    }
+    if (result.length < 50)
+      break;
+    page++;
+  }
+  return zones;
+}
+async function getZone(domain, config) {
+  const result = await cfFetch(`/zones?name=${encodeURIComponent(domain)}`, { config });
+  if (!result || result.length === 0)
+    return null;
+  const z2 = result[0];
+  return { id: z2.id, name: z2.name, status: z2.status, nameservers: z2.name_servers, original_nameservers: z2.original_name_servers };
+}
+async function createZone(domain, config) {
+  const cfg = config ?? getConfig3();
+  if (!cfg.accountId) {
+    throw new Error("CLOUDFLARE_ACCOUNT_ID is required to create a zone.");
+  }
+  const result = await cfFetch("/zones", { method: "POST", body: { name: domain, account: { id: cfg.accountId }, jump_start: false }, config: cfg });
+  return { id: result.id, name: result.name, status: result.status, nameservers: result.name_servers };
+}
+async function deleteZone(zoneId, config) {
+  await cfFetch(`/zones/${zoneId}`, { method: "DELETE", config });
+}
+async function listRecords2(zoneId, config) {
+  const records = [];
+  let page = 1;
+  while (true) {
+    const result = await cfFetch(`/zones/${zoneId}/dns_records?per_page=100&page=${page}`, { config });
+    if (!result || result.length === 0)
+      break;
+    for (const r3 of result) {
+      records.push({ id: r3.id, type: r3.type, name: r3.name, content: r3.content, ttl: r3.ttl, priority: r3.priority, proxied: r3.proxied });
+    }
+    if (result.length < 100)
+      break;
+    page++;
+  }
+  return records;
+}
+async function upsertRecord2(zoneId, record, config) {
+  const existing = await cfFetch(`/zones/${zoneId}/dns_records?type=${record.type}&name=${encodeURIComponent(record.name)}`, { config });
+  const body = {
+    type: record.type,
+    name: record.name,
+    content: record.content,
+    ttl: record.ttl ?? 1,
+    priority: record.priority,
+    proxied: record.proxied ?? false
+  };
+  if (existing && existing.length > 0) {
+    await cfFetch(`/zones/${zoneId}/dns_records/${existing[0].id}`, { method: "PUT", body, config });
+  } else {
+    await cfFetch(`/zones/${zoneId}/dns_records`, { method: "POST", body, config });
+  }
+}
+function createCloudflareProvider(config) {
+  const cfg = config ?? getConfig3();
+  return {
+    name: "cloudflare",
+    async getDnsRecords(domain) {
+      const zone = await getZone(domain, cfg);
+      if (!zone)
+        return [];
+      const records = await listRecords2(zone.id, cfg);
+      return records.map((r3) => ({
+        type: r3.type,
+        name: r3.name,
+        value: r3.content,
+        ttl: r3.ttl === 1 ? 0 : r3.ttl,
+        priority: r3.priority
+      }));
+    },
+    async setDnsRecords(domain, records) {
+      const zone = await getZone(domain, cfg);
+      if (!zone)
+        throw new Error(`No Cloudflare zone found for ${domain}`);
+      for (const r3 of records) {
+        await upsertRecord2(zone.id, { type: r3.type, name: r3.name, content: r3.value, ttl: r3.ttl || 1, priority: r3.priority }, cfg);
+      }
+      return true;
+    }
+  };
+}
+
+// src/lib/brandsight.ts
+class BrandsightApiError extends Error {
+  statusCode;
+  responseBody;
+  constructor(message, statusCode, responseBody) {
+    super(message);
+    this.statusCode = statusCode;
+    this.responseBody = responseBody;
+    this.name = "BrandsightApiError";
+  }
+}
+var _fetchFn = null;
+function getApiKey() {
+  const key = process.env["BRANDSIGHT_API_KEY"];
+  if (!key) {
+    throw new BrandsightApiError("BRANDSIGHT_API_KEY environment variable is not set");
+  }
+  return key;
+}
+function getConfig4() {
+  return {
+    apiKey: process.env["BRANDSIGHT_API_KEY"] ?? "",
+    accountId: process.env["BRANDSIGHT_ACCOUNT_ID"]
+  };
+}
+var BRANDSIGHT_BASE = "https://api.brandsight.com/v1";
+async function apiRequest3(method, path, apiKey, body, baseUrl = BRANDSIGHT_BASE) {
+  const fetchFn = _fetchFn || globalThis.fetch;
+  const url = `${baseUrl}${path}`;
+  const headers = {
+    Authorization: `Bearer ${apiKey}`,
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "User-Agent": USER_AGENT
+  };
+  try {
+    const response = await fetchFn(url, {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : undefined,
+      signal: AbortSignal.timeout(15000)
+    });
+    if (!response.ok) {
+      throw new BrandsightApiError(`Brandsight API ${method} ${path} failed with status ${response.status}`, response.status, await response.text());
+    }
+    const data = await response.json();
+    return { data, stub: false };
+  } catch (error) {
+    if (error instanceof BrandsightApiError)
+      throw error;
+    return { data: null, stub: true };
+  }
+}
+async function apiGet(path, apiKey, baseUrl = BRANDSIGHT_BASE) {
+  const fetchFn = _fetchFn || globalThis.fetch;
+  const url = `${baseUrl}${path}`;
+  const headers = {
+    Authorization: `Bearer ${apiKey}`,
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "User-Agent": USER_AGENT
+  };
+  try {
+    const response = await fetchFn(url, {
+      method: "GET",
+      headers,
+      signal: AbortSignal.timeout(15000)
+    });
+    if (!response.ok) {
+      throw new BrandsightApiError(`Brandsight API GET ${path} failed with status ${response.status}`, response.status, await response.text());
+    }
+    const data = await response.json();
+    return { data, stub: false };
+  } catch (error) {
+    if (error instanceof BrandsightApiError)
+      throw error;
+    return { data: null, stub: true };
+  }
+}
+function generateStubAlerts(brandName) {
+  const now = new Date().toISOString();
+  return [
+    { domain: `${brandName}-deals.com`, type: "keyword", registered_at: now },
+    { domain: `${brandName.replace(/a/gi, "4").replace(/e/gi, "3")}.com`, type: "homoglyph", registered_at: now },
+    { domain: `${brandName}s.com`, type: "typosquat", registered_at: now }
+  ];
+}
+function generateStubSimilarDomains(domain) {
+  const base = domain.replace(/\.[^.]+$/, "");
+  const tld = domain.slice(base.length);
+  return [
+    `${base}-online${tld}`,
+    `${base}s${tld}`,
+    `${base.replace(/a/gi, "4")}${tld}`,
+    `${base}-app${tld}`,
+    `get${base}${tld}`
+  ];
+}
+function generateStubThreatAssessment(domain) {
+  return {
+    domain,
+    risk_level: "low",
+    threats: [],
+    recommendation: "No immediate threats detected. Continue routine monitoring."
+  };
+}
+async function monitorBrand(brandName) {
+  const apiKey = getApiKey();
+  const result = await apiGet(`/brands/${encodeURIComponent(brandName)}/monitor`, apiKey);
+  if (result.stub) {
+    return { brand: brandName, alerts: generateStubAlerts(brandName), stub: true };
+  }
+  return { brand: brandName, alerts: result.data.alerts, stub: false };
+}
+async function getSimilarDomains(domain) {
+  const apiKey = getApiKey();
+  const result = await apiGet(`/domains/${encodeURIComponent(domain)}/similar`, apiKey);
+  if (result.stub) {
+    return { domain, similar: generateStubSimilarDomains(domain), stub: true };
+  }
+  return { domain, similar: result.data.similar, stub: false };
+}
+async function getThreatAssessment(domain) {
+  const apiKey = getApiKey();
+  const result = await apiGet(`/domains/${encodeURIComponent(domain)}/threats`, apiKey);
+  if (result.stub) {
+    return { ...generateStubThreatAssessment(domain), stub: true };
+  }
+  return { ...result.data, stub: false };
+}
+async function listDomains2(config) {
+  const cfg = config ?? getConfig4();
+  const result = await apiGet("/portfolio/domains", cfg.apiKey);
+  if (result.stub)
+    return [];
+  return result.data.domains ?? [];
+}
+async function getDomainInfo3(domain, config) {
+  const cfg = config ?? getConfig4();
+  const result = await apiGet(`/portfolio/domains/${encodeURIComponent(domain)}`, cfg.apiKey);
+  if (result.stub)
+    return null;
+  return result.data;
+}
+async function checkAvailability4(domain, config) {
+  const cfg = config ?? getConfig4();
+  const result = await apiGet(`/domains/check?domain=${encodeURIComponent(domain)}`, cfg.apiKey);
+  if (result.stub)
+    return { domain, available: false };
+  return result.data;
+}
+async function renewDomain3(domain, years = 1, config) {
+  const cfg = config ?? getConfig4();
+  const result = await apiRequest3("POST", `/portfolio/domains/${encodeURIComponent(domain)}/renew`, cfg.apiKey, { years });
+  if (result.stub)
+    return { success: false };
+  return { success: true, orderId: result.data.orderId };
+}
+async function syncToLocalDb3(dbFns, config) {
+  const domains = await listDomains2(config);
+  let synced = 0, created = 0, updated = 0;
+  const errors = [];
+  for (const d3 of domains) {
+    try {
+      const existing = dbFns.getDomainByName(d3.domain);
+      if (existing) {
+        dbFns.updateDomain(existing.id, {
+          registrar: "Brandsight",
+          expires_at: d3.expires || undefined,
+          auto_renew: d3.auto_renew,
+          status: "active",
+          nameservers: d3.nameservers
+        });
+        updated++;
+      } else {
+        dbFns.createDomain({
+          name: d3.domain,
+          registrar: "Brandsight",
+          expires_at: d3.expires || undefined,
+          auto_renew: d3.auto_renew,
+          status: "active",
+          nameservers: d3.nameservers
+        });
+        created++;
+      }
+      synced++;
+    } catch (err) {
+      errors.push(`${d3.domain}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  return { synced, created, updated, errors };
+}
+function createBrandsightProvider(config) {
+  const cfg = config ?? getConfig4();
+  return {
+    name: "brandsight",
+    async listDomains() {
+      const domains = await listDomains2(cfg);
+      return domains.map((d3) => ({
+        domain: d3.domain,
+        registrar: "Brandsight",
+        created: "",
+        expires: d3.expires,
+        nameservers: d3.nameservers,
+        status: d3.status === "ACTIVE" ? "active" : d3.status.toLowerCase(),
+        auto_renew: d3.auto_renew
+      }));
+    },
+    async getDomainInfo(domain) {
+      const d3 = await getDomainInfo3(domain, cfg);
+      if (!d3)
+        throw new Error(`Domain not found in Brandsight: ${domain}`);
+      return {
+        domain: d3.domain,
+        registrar: "Brandsight",
+        created: "",
+        expires: d3.expires,
+        nameservers: d3.nameservers,
+        status: d3.status === "ACTIVE" ? "active" : d3.status.toLowerCase(),
+        auto_renew: d3.auto_renew
+      };
+    },
+    async renewDomain(domain) {
+      const result = await renewDomain3(domain, 1, cfg);
+      return { domain, success: result.success, orderId: result.orderId };
+    },
+    async checkAvailability(domain) {
+      const result = await checkAvailability4(domain, cfg);
+      return { domain: result.domain, available: result.available };
+    },
+    async syncToLocalDb(dbFns) {
+      return syncToLocalDb3(dbFns, cfg);
+    }
+  };
+}
+
 // src/lib/registrar.ts
 function createNamecheapProvider() {
   return {
@@ -42308,422 +42201,1312 @@ function createGoDaddyProvider() {
     }
   };
 }
-function getProvider(name) {
-  switch (name) {
-    case "namecheap":
-      return createNamecheapProvider();
-    case "godaddy":
-      return createGoDaddyProvider();
-    case "route53":
-      return createRoute53Provider();
-    default:
-      throw new Error(`Unknown registrar provider: ${name}`);
-  }
-}
-function getAvailableProviders() {
-  return [
-    {
+var providerRegistry = new Map([
+  ["namecheap", {
+    info: {
       name: "namecheap",
-      configured: !!(process.env["NAMECHEAP_API_KEY"] && process.env["NAMECHEAP_USERNAME"] && process.env["NAMECHEAP_CLIENT_IP"]),
+      type: "full",
+      configured: false,
       envVars: ["NAMECHEAP_API_KEY", "NAMECHEAP_USERNAME", "NAMECHEAP_CLIENT_IP"]
     },
-    {
+    createRegistrar: createNamecheapProvider,
+    createDns: createNamecheapProvider
+  }],
+  ["godaddy", {
+    info: {
       name: "godaddy",
-      configured: !!(process.env["GODADDY_API_KEY"] && process.env["GODADDY_API_SECRET"]),
+      type: "full",
+      configured: false,
       envVars: ["GODADDY_API_KEY", "GODADDY_API_SECRET"]
     },
-    {
+    createRegistrar: createGoDaddyProvider,
+    createDns: createGoDaddyProvider
+  }],
+  ["route53", {
+    info: {
       name: "route53",
-      configured: !!(process.env["AWS_ACCESS_KEY_ID"] && process.env["AWS_SECRET_ACCESS_KEY"]),
+      type: "full",
+      configured: false,
       envVars: ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION"]
     },
-    {
+    createRegistrar: () => createRoute53Provider(),
+    createDns: () => createRoute53Provider()
+  }],
+  ["cloudflare", {
+    info: {
+      name: "cloudflare",
+      type: "dns",
+      configured: false,
+      envVars: ["CLOUDFLARE_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"]
+    },
+    createDns: createCloudflareProvider
+  }],
+  ["brandsight", {
+    info: {
       name: "brandsight",
-      configured: !!process.env["BRANDSIGHT_API_KEY"],
-      envVars: ["BRANDSIGHT_API_KEY"]
-    }
-  ];
+      type: "registrar",
+      configured: false,
+      envVars: ["BRANDSIGHT_API_KEY", "BRANDSIGHT_ACCOUNT_ID"]
+    },
+    createRegistrar: createBrandsightProvider
+  }]
+]);
+function isConfigured(envVars) {
+  return envVars.slice(0, 2).every((v3) => !!process.env[v3]);
 }
-async function syncAll(dbFns) {
-  const available = getAvailableProviders().filter((p3) => p3.configured && (p3.name === "namecheap" || p3.name === "godaddy" || p3.name === "route53"));
-  const result = {
-    providers: [],
-    totalSynced: 0,
-    totalErrors: []
-  };
-  for (const info of available) {
-    try {
-      const provider = getProvider(info.name);
-      const syncResult = await provider.syncToLocalDb(dbFns);
-      result.providers.push({ name: info.name, result: syncResult });
-      result.totalSynced += syncResult.synced;
-      result.totalErrors.push(...syncResult.errors.map((e3) => `[${info.name}] ${e3}`));
-    } catch (error) {
-      const msg = `[${info.name}] Sync failed: ${error instanceof Error ? error.message : String(error)}`;
-      result.totalErrors.push(msg);
-      result.providers.push({
-        name: info.name,
-        result: { synced: 0, created: 0, updated: 0, errors: [msg] }
-      });
-    }
-  }
-  return result;
+function getAvailableProviders() {
+  return Array.from(providerRegistry.values()).map((e3) => ({
+    ...e3.info,
+    configured: isConfigured(e3.info.envVars)
+  }));
+}
+function getRegistrarProvider(name) {
+  const entry = providerRegistry.get(name);
+  if (!entry?.createRegistrar)
+    throw new Error(`No registrar provider: ${name}`);
+  return entry.createRegistrar();
+}
+function getDnsProvider(name) {
+  const entry = providerRegistry.get(name);
+  if (!entry?.createDns)
+    throw new Error(`No DNS provider: ${name}`);
+  return entry.createDns();
 }
 function autoDetectRegistrar(domain, getDomainByName2) {
   const dbDomain = getDomainByName2(domain);
-  if (!dbDomain || !dbDomain.registrar)
+  if (!dbDomain?.registrar)
     return null;
-  const registrar = dbDomain.registrar.toLowerCase();
-  if (registrar.includes("namecheap"))
+  const r3 = dbDomain.registrar.toLowerCase();
+  if (r3.includes("namecheap"))
     return "namecheap";
-  if (registrar.includes("godaddy"))
+  if (r3.includes("godaddy"))
     return "godaddy";
-  if (registrar.includes("route 53") || registrar.includes("route53") || registrar.includes("aws"))
+  if (r3.includes("route 53") || r3.includes("route53") || r3.includes("aws"))
     return "route53";
+  if (r3.includes("cloudflare"))
+    return "cloudflare";
+  if (r3.includes("brandsight"))
+    return "brandsight";
   return null;
 }
 
-// src/cli/commands/providers.ts
-function registerProviderCommands(program2) {
-  program2.command("providers").description("Show which registrar providers are configured").option("--json", "Output as JSON", false).action((opts) => {
-    const providers = getAvailableProviders();
+// src/lib/config.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join8 } from "path";
+function configPath() {
+  return join8(homedir8(), ".hasna", "domains", "config.json");
+}
+function loadConfig3() {
+  const path = configPath();
+  if (!existsSync6(path))
+    return {};
+  try {
+    return JSON.parse(readFileSync4(path, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function saveConfig(config) {
+  const path = configPath();
+  const dir = join8(homedir8(), ".hasna", "domains");
+  if (!existsSync6(dir))
+    mkdirSync5(dir, { recursive: true });
+  writeFileSync2(path, JSON.stringify(config, null, 2), "utf-8");
+}
+function setConfigKey(keyPath, value) {
+  const config = loadConfig3();
+  const parts = keyPath.split(".");
+  if (parts.length === 1) {
+    config[parts[0]] = value;
+  } else if (parts.length === 2 && parts[0] === "contact") {
+    if (!config.contact)
+      config.contact = {};
+    config.contact[parts[1]] = value;
+  } else {
+    throw new Error(`Unknown config key: ${keyPath}`);
+  }
+  saveConfig(config);
+  return config;
+}
+function resolveContact(opts) {
+  const cfg = loadConfig3().contact ?? {};
+  const get = (opt, cfgKey) => opt || cfg[cfgKey] || "";
+  const first_name = get(opts.firstName, "first_name");
+  const last_name = get(opts.lastName, "last_name");
+  const email = get(opts.email, "email");
+  const phone = get(opts.phone, "phone");
+  const address_line_1 = get(opts.address, "address_line_1");
+  const city = get(opts.city, "city");
+  const state = get(opts.state, "state");
+  const country_code = get(opts.country, "country_code");
+  const zip_code = get(opts.zip, "zip_code");
+  const organization_name = opts.org || cfg.organization_name;
+  const missing = ["first_name", "last_name", "email", "phone", "address_line_1", "city", "state", "country_code", "zip_code"].filter((k3) => !{ first_name, last_name, email, phone, address_line_1, city, state, country_code, zip_code }[k3]);
+  if (missing.length > 0) {
+    throw new Error(`Missing registrant contact fields: ${missing.join(", ")}.
+` + `Set defaults with: domains config set contact.<field> <value>`);
+  }
+  return { first_name, last_name, email, phone, address_line_1, city, state, country_code, zip_code, organization_name };
+}
+
+// src/cli/commands/domain.ts
+function registerDomainCommand(program2) {
+  const domain = program2.command("domain").description("Domain portfolio management");
+  domain.command("list").description("List all domains in the portfolio").option("--status <status>", "Filter by status (active/expired/transferring/redemption)").option("--registrar <name>", "Filter by registrar").option("--json", "Output JSON").action((opts) => {
+    const domains = listDomains({ status: opts.status, registrar: opts.registrar });
     if (opts.json) {
-      console.log(JSON.stringify(providers, null, 2));
-    } else {
-      console.log("Registrar Providers:");
-      for (const p3 of providers) {
-        const status = p3.configured ? "CONFIGURED" : "not configured";
-        console.log(`  ${p3.name}: ${status}`);
-        if (!p3.configured) {
-          console.log(`    Missing: ${p3.envVars.join(", ")}`);
-        }
+      console.log(JSON.stringify({ domains, count: domains.length }, null, 2));
+      return;
+    }
+    if (domains.length === 0) {
+      console.log("No domains found.");
+      return;
+    }
+    for (const d3 of domains) {
+      const exp = d3.expires_at ? ` (expires ${d3.expires_at.split("T")[0]})` : "";
+      console.log(`  ${d3.name} [${d3.status}]${exp}`);
+    }
+    console.log(`
+${domains.length} domain(s)`);
+  });
+  domain.command("get <id>").description("Get a domain by ID").option("--json", "Output JSON").action((id, opts) => {
+    const d3 = getDomain(id);
+    if (!d3) {
+      console.error(`Domain '${id}' not found.`);
+      process.exit(1);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(d3, null, 2));
+      return;
+    }
+    console.log(`
+${d3.name} [${d3.status}]`);
+    if (d3.registrar)
+      console.log(`  Registrar:  ${d3.registrar}`);
+    if (d3.expires_at)
+      console.log(`  Expires:    ${d3.expires_at.split("T")[0]}`);
+    console.log(`  Auto-renew: ${d3.auto_renew ? "yes" : "no"}`);
+    if (d3.notes)
+      console.log(`  Notes:      ${d3.notes}`);
+    console.log();
+  });
+  domain.command("add").description("Add a domain to the portfolio").requiredOption("--name <name>", "Domain name").option("--registrar <name>", "Registrar name").option("--status <s>", "Status (active/expired/transferring/redemption)", "active").option("--expires <date>", "Expiry date (YYYY-MM-DD)").option("--notes <text>", "Notes").option("--json", "Output JSON").action((opts) => {
+    const d3 = createDomain({
+      name: opts.name,
+      registrar: opts.registrar,
+      status: opts.status,
+      expires_at: opts.expires,
+      notes: opts.notes
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(d3, null, 2));
+      return;
+    }
+    console.log(`Created domain: ${d3.name} (${d3.id})`);
+  });
+  domain.command("update <id>").description("Update a domain").option("--registrar <name>", "Registrar").option("--status <s>", "Status").option("--expires <date>", "Expiry date").option("--notes <text>", "Notes").option("--json", "Output JSON").action((id, opts) => {
+    const d3 = updateDomain(id, {
+      registrar: opts.registrar,
+      status: opts.status,
+      expires_at: opts.expires,
+      notes: opts.notes
+    });
+    if (!d3) {
+      console.error(`Domain '${id}' not found.`);
+      process.exit(1);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(d3, null, 2));
+      return;
+    }
+    console.log(`Updated: ${d3.name}`);
+  });
+  domain.command("delete <id>").description("Delete a domain from the portfolio").action((id) => {
+    const deleted = deleteDomain(id);
+    if (deleted)
+      console.log(`Deleted domain ${id}`);
+    else {
+      console.error(`Domain '${id}' not found.`);
+      process.exit(1);
+    }
+  });
+  domain.command("search <query>").description("Search domains by name, registrar, or notes").option("--json", "Output JSON").action((query, opts) => {
+    const results = searchDomains(query);
+    if (opts.json) {
+      console.log(JSON.stringify({ results, count: results.length }, null, 2));
+      return;
+    }
+    for (const d3 of results)
+      console.log(`  ${d3.name} [${d3.status}]`);
+    if (results.length === 0)
+      console.log("No results.");
+  });
+  domain.command("expiring").description("List domains expiring soon").option("--days <n>", "Days threshold", "30").option("--json", "Output JSON").action((opts) => {
+    const domains = listExpiring(parseInt(opts.days));
+    if (opts.json) {
+      console.log(JSON.stringify(domains, null, 2));
+      return;
+    }
+    if (domains.length === 0) {
+      console.log(`No domains expiring within ${opts.days} days.`);
+      return;
+    }
+    console.log(`
+Expiring within ${opts.days} days:`);
+    for (const d3 of domains)
+      console.log(`  ${d3.name.padEnd(40)} expires ${(d3.expires_at ?? "").split("T")[0]}`);
+    console.log();
+  });
+  domain.command("stats").description("Show portfolio statistics").option("--json", "Output JSON").action((opts) => {
+    const stats = getDomainStats();
+    if (opts.json) {
+      console.log(JSON.stringify(stats, null, 2));
+      return;
+    }
+    console.log("Domain Portfolio Stats:");
+    for (const [k3, v3] of Object.entries(stats)) {
+      console.log(`  ${k3.replace(/_/g, " ")}: ${v3}`);
+    }
+  });
+  domain.command("whois <name>").description("Run WHOIS lookup and update local DB record").option("--json", "Output JSON").action((name, opts) => {
+    const result = whoisLookup(name);
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    console.log(`
+WHOIS for ${result.domain}:`);
+    console.log(`  Registrar: ${result.registrar ?? "unknown"}`);
+    console.log(`  Expires:   ${result.expires_at ?? "unknown"}`);
+    if (result.nameservers.length) {
+      console.log(`  NS: ${result.nameservers.join(", ")}`);
+    }
+    console.log();
+  });
+  domain.command("export").description("Export all domains as CSV or JSON").option("--format <fmt>", "Format: csv or json", "json").action((opts) => {
+    const output = exportPortfolio(opts.format);
+    console.log(output);
+  });
+  domain.command("check <domains...>").description("Check domain availability via configured registrar").option("--provider <name>", "Registrar provider to use").action(async (domains, opts) => {
+    const cfg = loadConfig3();
+    const providerName = opts.provider ?? cfg.default_registrar ?? "route53";
+    const results = await Promise.allSettled(domains.map(async (d3) => {
+      const provider = getRegistrarProvider(providerName);
+      return provider.checkAvailability(d3);
+    }));
+    let anyError = false;
+    for (let i3 = 0;i3 < domains.length; i3++) {
+      const r3 = results[i3];
+      if (r3.status === "rejected") {
+        const reason = r3.reason;
+        console.error(`\u2717 ${domains[i3]}: ${reason instanceof Error ? reason.message : String(reason)}`);
+        anyError = true;
+      } else {
+        const result = r3.value;
+        console.log(`${result.available ? "\u2713" : "\u2717"} ${result.domain} is ${result.available ? "available" : "not available"}`);
       }
     }
+    if (anyError)
+      process.exit(1);
   });
-  program2.command("sync").description("Sync domains from a provider to local DB").option("--provider <provider>", "Provider name (namecheap, godaddy)").option("--all", "Sync from all configured providers").option("--json", "Output as JSON", false).action(async (opts) => {
-    if (opts.all) {
+  domain.command("sync").description("Sync domains from a provider to the local DB").option("--provider <name>", "Provider name (default: all configured)").action(async (opts) => {
+    const providers = opts.provider ? [opts.provider] : getAvailableProviders().filter((p3) => p3.configured && p3.type !== "dns" && p3.name !== "brandsight").map((p3) => p3.name);
+    for (const name of providers) {
       try {
-        const result = await syncAll({
-          getDomainByName,
-          createDomain,
-          updateDomain
-        });
-        if (opts.json) {
-          console.log(JSON.stringify(result, null, 2));
-        } else {
-          console.log(`Synced ${result.totalSynced} domain(s) from ${result.providers.length} provider(s)`);
-          for (const p3 of result.providers) {
-            console.log(`  ${p3.name}: ${p3.result.synced} synced`);
-          }
-          if (result.totalErrors.length > 0) {
-            console.log("Errors:");
-            for (const e3 of result.totalErrors) {
-              console.log(`  - ${e3}`);
-            }
-          }
-        }
-      } catch (error) {
-        console.error(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
-        process.exit(1);
+        const provider = getRegistrarProvider(name);
+        const result = await provider.syncToLocalDb({ getDomainByName, createDomain, updateDomain });
+        console.log(`\u2713 [${name}] Synced ${result.synced} (${result.created} new, ${result.updated} updated)`);
+        if (result.errors.length > 0)
+          console.log(`  Errors: ${result.errors.join(", ")}`);
+      } catch (e3) {
+        console.error(`\u2717 [${name}] ${e3 instanceof Error ? e3.message : String(e3)}`);
       }
-      return;
     }
-    const provider = (opts.provider || "").toLowerCase();
-    if (!provider) {
-      console.error("Specify --provider <name> or --all");
+  });
+  domain.command("renew <name>").description("Renew a domain via its registrar provider").option("--provider <name>", "Override provider").action(async (name, opts) => {
+    const providerName = opts.provider ?? autoDetectRegistrar(name, getDomainByName) ?? loadConfig3().default_registrar;
+    if (!providerName) {
+      console.error("Could not detect provider. Use --provider.");
+      process.exit(1);
+    }
+    const provider = getRegistrarProvider(providerName);
+    const result = await provider.renewDomain(name);
+    if (result.success) {
+      console.log(`\u2713 Renewed: ${name}`);
+      if (result.orderId)
+        console.log(`  Order: ${result.orderId}`);
+    } else {
+      console.error(`\u2717 Renewal failed or not supported for ${providerName}`);
+      process.exit(1);
+    }
+  });
+  domain.command("buy <name>").description("Purchase a domain via Route 53 (contact defaults from: domains config set contact.*)").option("--provider <name>", "Registrar provider (default: config default-registrar or route53)").option("--email <email>", "Registrant email").option("--first-name <n>", "First name").option("--last-name <n>", "Last name").option("--phone <p>", "Phone").option("--address <a>", "Street address").option("--city <c>", "City").option("--state <s>", "State/province").option("--country <c>", "Country code").option("--zip <z>", "ZIP code").option("--org <o>", "Organization").option("--years <n>", "Years", "1").option("--wait", "Poll until registration completes").action(async (name, opts) => {
+    const cfg = loadConfig3();
+    const providerName = opts.provider ?? cfg.default_registrar ?? "route53";
+    if (providerName !== "route53") {
+      console.error(`Direct domain purchase only supported via route53. Got: ${providerName}`);
       process.exit(1);
     }
-    if (provider === "namecheap") {
+    try {
+      const avail = await checkAvailability3(name);
+      if (!avail.available) {
+        console.error(`\u2717 ${name} is not available`);
+        process.exit(1);
+      }
+      const price = avail.price ? ` (USD ${avail.price}/yr)` : "";
+      console.log(`\u2713 Available${price}`);
+      let contact;
       try {
-        const result = await syncToLocalDb({
-          getDomainByName,
-          createDomain,
-          updateDomain
-        });
-        if (opts.json) {
-          console.log(JSON.stringify(result, null, 2));
-        } else {
-          console.log(`Synced ${result.synced} domain(s) from Namecheap`);
-          for (const d3 of result.domains) {
-            console.log(`  ${d3}`);
-          }
-          if (result.errors.length > 0) {
-            console.log("Errors:");
-            for (const e3 of result.errors) {
-              console.log(`  - ${e3}`);
-            }
-          }
+        contact = resolveContact(opts);
+      } catch (e3) {
+        console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+        process.exit(1);
+      }
+      console.log(`Registering ${name}...`);
+      const reg = await registerDomain(name, contact, parseInt(opts.years));
+      console.log(`\u2713 Submitted (operation: ${reg.operationId})`);
+      if (opts.wait) {
+        let status = "IN_PROGRESS";
+        while (status === "IN_PROGRESS" || status === "SUBMITTED") {
+          await new Promise((r3) => setTimeout(r3, 1e4));
+          const s3 = await getRegistrationStatus(reg.operationId);
+          status = s3.status;
+          process.stdout.write(`  Status: ${status}\r`);
         }
-      } catch (error) {
-        console.error(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
+        console.log();
+        if (status !== "SUCCESSFUL") {
+          console.error(`\u2717 Registration ${status}`);
+          process.exit(1);
+        }
+        console.log(`\u2713 Registration complete`);
+      }
+      createDomain({ name, registrar: "AWS Route 53", status: "active", auto_renew: true });
+      console.log(`\u2713 Added to portfolio`);
+      if (!opts.wait)
+        console.log(`  Check: domains r53 status ${reg.operationId}`);
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+  domain.command("setup <name>").description("Full setup: buy domain + create DNS zone + point nameservers (contact defaults from config)").option("--registrar <n>", "Registrar provider (default: config default-registrar or route53)").option("--dns <n>", "DNS provider (default: config default-dns or route53)").option("--email <e>", "Registrant email").option("--first-name <n>", "First name").option("--last-name <n>", "Last name").option("--phone <p>", "Phone").option("--address <a>", "Street address").option("--city <c>", "City").option("--state <s>", "State/province").option("--country <c>", "Country code").option("--zip <z>", "ZIP code").option("--org <o>", "Organization").option("--years <n>", "Years", "1").option("--wait", "Poll until registration completes before creating DNS zone").action(async (name, opts) => {
+    const cfg = loadConfig3();
+    const registrarName = opts.registrar ?? cfg.default_registrar ?? "route53";
+    const dnsName = opts.dns ?? cfg.default_dns ?? registrarName;
+    console.log(`
+Setting up ${name}`);
+    console.log(`  Registrar: ${registrarName}  |  DNS: ${dnsName}
+`);
+    try {
+      process.stdout.write("[1/4] Checking availability... ");
+      const avail = await checkAvailability3(name);
+      if (!avail.available) {
+        console.log("not available");
+        console.error(`\u2717 ${name} is not available`);
+        process.exit(1);
+      }
+      const price = avail.price ? `(USD ${avail.price}/yr)` : "";
+      console.log(`available ${price}`);
+      if (registrarName !== "route53") {
+        console.error("Direct domain purchase currently only supported via route53.");
         process.exit(1);
       }
-    } else if (provider === "godaddy") {
+      let contact;
       try {
-        const result = await syncToLocalDb2({
-          getDomainByName,
-          createDomain,
-          updateDomain
-        });
-        if (opts.json) {
-          console.log(JSON.stringify(result, null, 2));
-        } else {
-          console.log(`Synced ${result.synced} domain(s) from GoDaddy (created: ${result.created}, updated: ${result.updated})`);
-          if (result.errors.length > 0) {
-            console.log("Errors:");
-            for (const e3 of result.errors) {
-              console.log(`  - ${e3}`);
-            }
-          }
-        }
-      } catch (error) {
-        console.error(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
+        contact = resolveContact(opts);
+      } catch (e3) {
+        console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
         process.exit(1);
       }
+      process.stdout.write("[2/4] Registering domain... ");
+      const reg = await registerDomain(name, contact, parseInt(opts.years));
+      console.log(`submitted (${reg.operationId})`);
+      if (opts.wait) {
+        let status = "IN_PROGRESS";
+        while (status === "IN_PROGRESS" || status === "SUBMITTED") {
+          await new Promise((r3) => setTimeout(r3, 1e4));
+          const s3 = await getRegistrationStatus(reg.operationId);
+          status = s3.status;
+          process.stdout.write(`  Waiting: ${status}...\r`);
+        }
+        console.log();
+        if (status !== "SUCCESSFUL") {
+          console.error(`\u2717 Registration ${status}`);
+          process.exit(1);
+        }
+        console.log("  Registration confirmed");
+      }
+      process.stdout.write("[3/4] Creating DNS zone... ");
+      let nameservers = [];
+      if (dnsName === "cloudflare") {
+        const zone = await createZone(name);
+        nameservers = zone.nameservers ?? [];
+        console.log(`created (${zone.id})`);
+      } else {
+        const zone = await createHostedZone(name, `Managed by @hasna/domains`);
+        nameservers = zone.name_servers ?? [];
+        console.log(`created (${zone.id})`);
+      }
+      process.stdout.write("[4/4] Adding to portfolio... ");
+      createDomain({ name, registrar: `AWS Route 53`, status: "active", auto_renew: true, nameservers });
+      console.log("done");
+      console.log(`
+\u2713 Setup complete for ${name}`);
+      if (!opts.wait) {
+        console.log(`  \u26A0 Registration pending \u2014 check: domains r53 status ${reg.operationId}`);
+        console.log(`  \u26A0 If registration fails, clean up: domains zone delete <zoneId> --force`);
+      }
+      if (nameservers.length > 0) {
+        console.log(`
+  Point your registrar to these name servers:`);
+        for (const ns of nameservers)
+          console.log(`    ${ns}`);
+      }
+      console.log();
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+}
+
+// src/cli/commands/dns.ts
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
+function registerDnsCommands(program2) {
+  const dnsCmd = program2.command("dns").description("DNS record management");
+  dnsCmd.command("list").description("List DNS records for a domain").argument("<domain-id>", "Domain ID").option("--type <type>", "Filter by record type (A/AAAA/CNAME/MX/TXT/NS/SRV)").option("--json", "Output as JSON", false).action((domainId, opts) => {
+    const records = listDnsRecords(domainId, opts.type);
+    if (opts.json) {
+      console.log(JSON.stringify(records, null, 2));
+    } else {
+      if (records.length === 0) {
+        console.log("No DNS records found.");
+        return;
+      }
+      for (const r3 of records) {
+        const priority = r3.priority !== null ? ` (priority: ${r3.priority})` : "";
+        console.log(`  ${r3.type}	${r3.name}	${r3.value}	TTL:${r3.ttl}${priority}`);
+      }
+    }
+  });
+  dnsCmd.command("add").description("Add a DNS record").requiredOption("--domain <id>", "Domain ID").requiredOption("--type <type>", "Record type (A/AAAA/CNAME/MX/TXT/NS/SRV)").requiredOption("--name <name>", "Record name").requiredOption("--value <value>", "Record value").option("--ttl <ttl>", "TTL in seconds", "3600").option("--priority <n>", "Priority (for MX/SRV)").option("--json", "Output as JSON", false).action((opts) => {
+    const record = createDnsRecord({
+      domain_id: opts.domain,
+      type: opts.type,
+      name: opts.name,
+      value: opts.value,
+      ttl: parseInt(opts.ttl),
+      priority: opts.priority ? parseInt(opts.priority) : undefined
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(record, null, 2));
+    } else {
+      console.log(`Created DNS record: ${record.type} ${record.name} -> ${record.value} (${record.id})`);
+    }
+  });
+  dnsCmd.command("update").description("Update a DNS record").argument("<id>", "Record ID").option("--type <type>", "Record type").option("--name <name>", "Record name").option("--value <value>", "Record value").option("--ttl <ttl>", "TTL in seconds").option("--priority <n>", "Priority").option("--json", "Output as JSON", false).action((id, opts) => {
+    const input = {};
+    if (opts.type !== undefined)
+      input.type = opts.type;
+    if (opts.name !== undefined)
+      input.name = opts.name;
+    if (opts.value !== undefined)
+      input.value = opts.value;
+    if (opts.ttl !== undefined)
+      input.ttl = parseInt(opts.ttl);
+    if (opts.priority !== undefined)
+      input.priority = parseInt(opts.priority);
+    const record = updateDnsRecord(id, input);
+    if (!record) {
+      console.error(`DNS record '${id}' not found.`);
+      process.exit(1);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(record, null, 2));
     } else {
-      console.error(`Unsupported provider: ${provider}. Supported: namecheap, godaddy`);
+      console.log(`Updated DNS record: ${record.type} ${record.name} -> ${record.value}`);
+    }
+  });
+  dnsCmd.command("remove").description("Remove a DNS record").argument("<id>", "Record ID").action((id) => {
+    const deleted = deleteDnsRecord(id);
+    if (deleted) {
+      console.log(`Deleted DNS record ${id}`);
+    } else {
+      console.error(`DNS record '${id}' not found.`);
       process.exit(1);
     }
   });
-  program2.command("renew").description("Renew a domain via provider (auto-detects registrar from DB if --provider not given)").argument("<name>", "Domain name (e.g. example.com)").option("--provider <provider>", "Provider name (namecheap, godaddy)").option("--years <n>", "Number of years to renew", "1").option("--json", "Output as JSON", false).action(async (name, opts) => {
-    let provider = (opts.provider || "").toLowerCase();
-    if (!provider) {
-      const detected = autoDetectRegistrar(name, getDomainByName);
-      if (!detected) {
-        console.error(`Could not auto-detect registrar for '${name}'. Use --provider.`);
-        process.exit(1);
+  dnsCmd.command("check-propagation").description("Check DNS propagation across multiple servers").argument("<domain>", "Domain name to check").option("--record <type>", "Record type (A/AAAA/CNAME/MX/TXT/NS)", "A").option("--json", "Output as JSON", false).action((domain, opts) => {
+    const result = checkDnsPropagation(domain, opts.record);
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.log(`DNS Propagation for ${result.domain} (${result.record_type}):`);
+      console.log(`  Consistent: ${result.consistent ? "yes" : "NO"}`);
+      for (const s3 of result.servers) {
+        const values = s3.values.length > 0 ? s3.values.join(", ") : "(empty)";
+        const status = s3.status === "error" ? ` [ERROR: ${s3.error}]` : "";
+        console.log(`  ${s3.name} (${s3.server}): ${values}${status}`);
       }
-      provider = detected;
-      console.log(`Auto-detected registrar: ${provider}`);
     }
-    if (provider === "namecheap") {
-      try {
-        const result = await renewDomain(name, parseInt(opts.years));
-        if (opts.json) {
-          console.log(JSON.stringify(result, null, 2));
-        } else {
-          console.log(`Renewed ${result.domain} successfully via Namecheap`);
-          if (result.chargedAmount)
-            console.log(`  Charged: $${result.chargedAmount}`);
-          if (result.orderId)
-            console.log(`  Order ID: ${result.orderId}`);
+  });
+  dnsCmd.command("export").description("Export DNS records as BIND zone file").argument("<domain-id>", "Domain ID").option("--output <file>", "Write to file instead of stdout").action((domainId, opts) => {
+    const zone = exportZoneFile(domainId);
+    if (!zone) {
+      console.error(`Domain '${domainId}' not found.`);
+      process.exit(1);
+    }
+    if (opts.output) {
+      writeFileSync3(opts.output, zone, "utf-8");
+      console.log(`Exported zone file to ${opts.output}`);
+    } else {
+      console.log(zone);
+    }
+  });
+  dnsCmd.command("import").description("Import DNS records from a BIND zone file").argument("<domain-id>", "Domain ID").requiredOption("--file <path>", "Path to zone file").option("--json", "Output as JSON", false).action((domainId, opts) => {
+    let content;
+    try {
+      content = readFileSync5(opts.file, "utf-8");
+    } catch {
+      console.error(`Could not read file: ${opts.file}`);
+      process.exit(1);
+    }
+    const result = importZoneFile(domainId, content);
+    if (!result) {
+      console.error(`Domain '${domainId}' not found.`);
+      process.exit(1);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.log(`Imported ${result.imported} record(s), skipped ${result.skipped}`);
+      if (result.errors.length > 0) {
+        console.log("Errors:");
+        for (const e3 of result.errors) {
+          console.log(`  - ${e3}`);
         }
-      } catch (error) {
-        console.error(`Renewal failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+  });
+  dnsCmd.command("discover-subdomains").description("Discover subdomains via certificate transparency logs (crt.sh)").argument("<domain>", "Domain name").option("--json", "Output as JSON", false).action(async (domain, opts) => {
+    const result = await discoverSubdomains(domain);
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      if (result.error) {
+        console.error(`Discovery failed: ${result.error}`);
         process.exit(1);
       }
-    } else if (provider === "godaddy") {
-      try {
-        const result = await renewDomain2(name);
-        if (opts.json) {
-          console.log(JSON.stringify(result, null, 2));
-        } else {
-          console.log(`Renewed ${name} successfully via GoDaddy`);
-          if (result.orderId)
-            console.log(`  Order ID: ${result.orderId}`);
-          if (result.total)
-            console.log(`  Total: $${(result.total / 100).toFixed(2)}`);
+      if (result.subdomains.length === 0) {
+        console.log(`No subdomains found for ${domain}.`);
+        return;
+      }
+      console.log(`Subdomains for ${domain} (source: ${result.source}):`);
+      for (const s3 of result.subdomains) {
+        console.log(`  ${s3}`);
+      }
+      console.log(`
+${result.subdomains.length} subdomain(s) found`);
+    }
+  });
+  dnsCmd.command("validate").description("Validate DNS records for common issues").argument("<domain-id>", "Domain ID").option("--json", "Output as JSON", false).action((domainId, opts) => {
+    const result = validateDns(domainId);
+    if (!result) {
+      console.error(`Domain '${domainId}' not found.`);
+      process.exit(1);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.log(`DNS Validation for ${result.domain_name}:`);
+      console.log(`  Valid: ${result.valid ? "yes" : "NO"}`);
+      if (result.issues.length === 0) {
+        console.log("  No issues found.");
+      } else {
+        for (const issue of result.issues) {
+          const prefix = issue.type === "error" ? "ERROR" : "WARN";
+          console.log(`  [${prefix}] ${issue.message}`);
         }
-      } catch (error) {
-        console.error(`Renewal failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+  });
+  dnsCmd.command("pull <domain>").description("Pull live DNS records from provider into local DB").option("--provider <name>", "DNS provider (route53, cloudflare) \u2014 defaults to config default-dns").action(async (domain, opts) => {
+    const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
+    try {
+      const provider = getDnsProvider(providerName);
+      const records = await provider.getDnsRecords(domain);
+      const dbDomain = getDomainByName(domain);
+      if (!dbDomain) {
+        console.error(`Domain '${domain}' not found in local DB. Add it first: domains domain add --name ${domain}`);
         process.exit(1);
       }
-    } else {
-      console.error(`Unsupported provider: ${provider}. Supported: namecheap, godaddy`);
+      let count = 0;
+      for (const r3 of records) {
+        createDnsRecord({ domain_id: dbDomain.id, type: r3.type, name: r3.name, value: r3.value, ttl: r3.ttl, priority: r3.priority });
+        count++;
+      }
+      console.log(`\u2713 Pulled ${count} record(s) from ${providerName} into local DB for ${domain}`);
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+  dnsCmd.command("push <domain-id>").description("Push local DB records to live DNS provider").option("--provider <name>", "DNS provider \u2014 defaults to config default-dns").action(async (domainId, opts) => {
+    const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
+    try {
+      const records = listDnsRecords(domainId);
+      if (records.length === 0) {
+        console.log("No local DNS records to push.");
+        return;
+      }
+      const dbDomain = getDomain(domainId) ?? (() => {
+        throw new Error(`Domain '${domainId}' not found`);
+      })();
+      const provider = getDnsProvider(providerName);
+      await provider.setDnsRecords(dbDomain.name, records.map((r3) => ({
+        type: r3.type,
+        name: r3.name,
+        value: r3.value,
+        ttl: r3.ttl,
+        priority: r3.priority ?? undefined
+      })));
+      console.log(`\u2713 Pushed ${records.length} record(s) to ${providerName} for ${dbDomain.name}`);
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
       process.exit(1);
     }
   });
-  program2.command("check").description("Check domain availability").argument("<name>", "Domain name (e.g. example.com)").option("--json", "Output as JSON", false).action(async (name, opts) => {
+}
+
+// src/cli/commands/zone.ts
+function resolveProvider(flag) {
+  return flag ?? loadConfig3().default_dns ?? "route53";
+}
+function registerZoneCommand(program2) {
+  const zone = program2.command("zone").description("Hosted zone management (provider-agnostic)");
+  zone.command("list").description("List all hosted zones").option("--provider <name>", "DNS provider (route53, cloudflare) \u2014 defaults to config default-dns").option("--json", "Output JSON").action(async (opts) => {
+    const provider = resolveProvider(opts.provider);
     try {
-      const result = await checkAvailability(name);
+      let zones;
+      if (provider === "cloudflare") {
+        zones = (await listZones()).map((z2) => ({ id: z2.id, name: z2.name, status: z2.status, nameservers: z2.nameservers }));
+      } else {
+        zones = await listHostedZones();
+      }
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        console.log(JSON.stringify(zones, null, 2));
+        return;
+      }
+      if (zones.length === 0) {
+        console.log("No hosted zones.");
+        return;
+      }
+      console.log(`
+Hosted Zones (${provider}):`);
+      for (const z2 of zones) {
+        const extra = z2.record_count !== undefined ? `  ${z2.record_count} records` : "";
+        console.log(`  ${z2.id.padEnd(32)} ${z2.name}${extra}`);
+      }
+      console.log();
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+  zone.command("create <domain>").description("Create a hosted zone").option("--provider <name>", "DNS provider").option("--comment <text>", "Zone comment (Route 53 only)").action(async (domain, opts) => {
+    const provider = resolveProvider(opts.provider);
+    try {
+      if (provider === "cloudflare") {
+        const z2 = await createZone(domain);
+        console.log(`\u2713 Zone created: ${domain} (${z2.id})`);
+        if (z2.nameservers?.length) {
+          console.log(`  Name servers:`);
+          for (const ns of z2.nameservers)
+            console.log(`    ${ns}`);
+        }
       } else {
-        if (result.available) {
-          console.log(`${result.domain} is AVAILABLE`);
-        } else {
-          console.log(`${result.domain} is NOT available`);
+        const z2 = await createHostedZone(domain, opts.comment);
+        console.log(`\u2713 Zone created: ${domain} (${z2.id})`);
+        if (z2.name_servers?.length) {
+          console.log(`  Name servers:`);
+          for (const ns of z2.name_servers)
+            console.log(`    ${ns}`);
         }
       }
-    } catch (error) {
-      console.error(`Availability check failed: ${error instanceof Error ? error.message : String(error)}`);
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+  zone.command("info <zoneId>").description("Get details of a hosted zone").option("--provider <name>", "DNS provider").option("--json", "Output JSON").action(async (zoneId, opts) => {
+    const provider = resolveProvider(opts.provider);
+    try {
+      if (provider === "cloudflare") {
+        const zones = await listZones();
+        const z2 = zones.find((z3) => z3.id === zoneId || z3.name === zoneId);
+        if (!z2) {
+          console.error(`Zone not found: ${zoneId}`);
+          process.exit(1);
+        }
+        if (opts.json) {
+          console.log(JSON.stringify(z2, null, 2));
+          return;
+        }
+        console.log(`
+Zone: ${z2.name}`);
+        console.log(`  ID:     ${z2.id}`);
+        console.log(`  Status: ${z2.status}`);
+        if (z2.nameservers?.length) {
+          console.log(`  Name servers:`);
+          for (const ns of z2.nameservers)
+            console.log(`    ${ns}`);
+        }
+        console.log();
+      } else {
+        const z2 = await getHostedZone(zoneId);
+        if (opts.json) {
+          console.log(JSON.stringify(z2, null, 2));
+          return;
+        }
+        console.log(`
+Zone: ${z2.name}`);
+        console.log(`  ID:      ${z2.id}`);
+        console.log(`  Records: ${z2.record_count}`);
+        if (z2.comment)
+          console.log(`  Comment: ${z2.comment}`);
+        if (z2.name_servers?.length) {
+          console.log(`  Name servers:`);
+          for (const ns of z2.name_servers)
+            console.log(`    ${ns}`);
+        }
+        console.log();
+      }
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+  zone.command("delete <zoneId>").description("Delete a hosted zone (irreversible \u2014 requires --force)").option("--provider <name>", "DNS provider").option("--force", "Confirm deletion").action(async (zoneId, opts) => {
+    const provider = resolveProvider(opts.provider);
+    try {
+      if (!opts.force) {
+        console.log(`Would delete zone: ${zoneId} (${provider})`);
+        console.log("Re-run with --force to confirm.");
+        return;
+      }
+      if (provider === "cloudflare") {
+        await deleteZone(zoneId);
+      } else {
+        await deleteHostedZone(zoneId);
+      }
+      console.log(`\u2713 Zone deleted: ${zoneId}`);
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
       process.exit(1);
     }
   });
 }
 
-// src/lib/brandsight.ts
-class BrandsightApiError extends Error {
-  statusCode;
-  responseBody;
-  constructor(message, statusCode, responseBody) {
-    super(message);
-    this.statusCode = statusCode;
-    this.responseBody = responseBody;
-    this.name = "BrandsightApiError";
-  }
-}
-var _fetchFn = null;
-function getApiKey() {
-  const key = process.env["BRANDSIGHT_API_KEY"];
-  if (!key) {
-    throw new BrandsightApiError("BRANDSIGHT_API_KEY environment variable is not set");
-  }
-  return key;
+// src/cli/commands/ssl.ts
+function registerSslCommand(program2) {
+  const ssl = program2.command("ssl").description("SSL certificate management");
+  ssl.command("check <domain>").description("Check SSL certificate for a domain and update the local DB record").option("--json", "Output JSON").action((domain, opts) => {
+    const result = checkSsl(domain);
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    console.log(`
+SSL Certificate for ${result.domain}:`);
+    if (result.error) {
+      console.log(`  Error: ${result.error}`);
+    } else {
+      console.log(`  Issuer:  ${result.issuer ?? "unknown"}`);
+      console.log(`  Expires: ${result.expires_at ? result.expires_at.split("T")[0] : "unknown"}`);
+    }
+    console.log();
+  });
+  ssl.command("expiring").description("List domains with SSL certificates expiring soon").option("--days <n>", "Days threshold", "30").option("--json", "Output JSON").action((opts) => {
+    const domains = listSslExpiring(parseInt(opts.days));
+    if (opts.json) {
+      console.log(JSON.stringify(domains, null, 2));
+      return;
+    }
+    if (domains.length === 0) {
+      console.log(`No SSL certificates expiring within ${opts.days} days.`);
+      return;
+    }
+    console.log(`
+SSL expiring within ${opts.days} days:`);
+    for (const d3 of domains) {
+      const exp = d3.ssl_expires_at ? d3.ssl_expires_at.split("T")[0] : "unknown";
+      console.log(`  ${d3.name.padEnd(40)} expires ${exp}`);
+    }
+    console.log();
+  });
 }
-async function apiGet(path, apiKey, baseUrl = "https://api.brandsight.com/v1") {
-  const fetchFn = _fetchFn || globalThis.fetch;
-  const url = `${baseUrl}${path}`;
-  const headers = {
-    Authorization: `Bearer ${apiKey}`,
-    "Content-Type": "application/json",
-    Accept: "application/json",
-    "User-Agent": "open-domains/0.0.1"
-  };
-  try {
-    const response = await fetchFn(url, {
-      method: "GET",
-      headers,
-      signal: AbortSignal.timeout(15000)
+
+// src/cli/commands/alerts.ts
+function registerAlertCommands(program2) {
+  const alertCmd = program2.command("alert").description("Alert management");
+  alertCmd.command("set").description("Set an alert for a domain").requiredOption("--domain <id>", "Domain ID").requiredOption("--type <type>", "Alert type (expiry/ssl_expiry/dns_change)").option("--days-before <n>", "Trigger N days before").option("--json", "Output as JSON", false).action((opts) => {
+    const alert = createAlert({
+      domain_id: opts.domain,
+      type: opts.type,
+      trigger_days_before: opts.daysBefore ? parseInt(opts.daysBefore) : undefined
     });
-    if (!response.ok) {
-      throw new BrandsightApiError(`Brandsight API GET ${path} failed with status ${response.status}`, response.status, await response.text());
+    if (opts.json) {
+      console.log(JSON.stringify(alert, null, 2));
+    } else {
+      const daysBefore = alert.trigger_days_before ? ` (${alert.trigger_days_before} days before)` : "";
+      console.log(`Created alert: ${alert.type}${daysBefore} for domain ${alert.domain_id} (${alert.id})`);
     }
-    const data = await response.json();
-    return { data, stub: false };
-  } catch (error) {
-    if (error instanceof BrandsightApiError)
-      throw error;
-    return { data: null, stub: true };
-  }
-}
-function generateStubAlerts(brandName) {
-  const now = new Date().toISOString();
-  return [
-    { domain: `${brandName}-deals.com`, type: "keyword", registered_at: now },
-    { domain: `${brandName.replace(/a/gi, "4").replace(/e/gi, "3")}.com`, type: "homoglyph", registered_at: now },
-    { domain: `${brandName}s.com`, type: "typosquat", registered_at: now }
-  ];
-}
-function generateStubSimilarDomains(domain) {
-  const base = domain.replace(/\.[^.]+$/, "");
-  const tld = domain.slice(base.length);
-  return [
-    `${base}-online${tld}`,
-    `${base}s${tld}`,
-    `${base.replace(/a/gi, "4")}${tld}`,
-    `${base}-app${tld}`,
-    `get${base}${tld}`
-  ];
-}
-function generateStubThreatAssessment(domain) {
-  return {
-    domain,
-    risk_level: "low",
-    threats: [],
-    recommendation: "No immediate threats detected. Continue routine monitoring."
-  };
-}
-async function monitorBrand(brandName) {
-  const apiKey = getApiKey();
-  const result = await apiGet(`/brands/${encodeURIComponent(brandName)}/monitor`, apiKey);
-  if (result.stub) {
-    return { brand: brandName, alerts: generateStubAlerts(brandName), stub: true };
-  }
-  return { brand: brandName, alerts: result.data.alerts, stub: false };
-}
-async function getSimilarDomains(domain) {
-  const apiKey = getApiKey();
-  const result = await apiGet(`/domains/${encodeURIComponent(domain)}/similar`, apiKey);
-  if (result.stub) {
-    return { domain, similar: generateStubSimilarDomains(domain), stub: true };
-  }
-  return { domain, similar: result.data.similar, stub: false };
-}
-async function getThreatAssessment(domain) {
-  const apiKey = getApiKey();
-  const result = await apiGet(`/domains/${encodeURIComponent(domain)}/threats`, apiKey);
-  if (result.stub) {
-    return { ...generateStubThreatAssessment(domain), stub: true };
-  }
-  return { ...result.data, stub: false };
+  });
+  alertCmd.command("list").description("List alerts for a domain").argument("<domain-id>", "Domain ID").option("--json", "Output as JSON", false).action((domainId, opts) => {
+    const alerts = listAlerts(domainId);
+    if (opts.json) {
+      console.log(JSON.stringify(alerts, null, 2));
+    } else {
+      if (alerts.length === 0) {
+        console.log("No alerts set.");
+        return;
+      }
+      for (const a3 of alerts) {
+        const daysBefore = a3.trigger_days_before ? ` (${a3.trigger_days_before} days before)` : "";
+        const sent = a3.sent_at ? ` \u2014 sent ${a3.sent_at}` : "";
+        console.log(`  ${a3.type}${daysBefore}${sent}`);
+      }
+    }
+  });
+  alertCmd.command("remove").description("Remove an alert").argument("<id>", "Alert ID").action((id) => {
+    const deleted = deleteAlert(id);
+    if (deleted) {
+      console.log(`Deleted alert ${id}`);
+    } else {
+      console.error(`Alert '${id}' not found.`);
+      process.exit(1);
+    }
+  });
 }
 
-// src/cli/commands/brandsight.ts
-function registerBrandsightCommands(program2) {
-  program2.command("monitor").description("Monitor a brand for similar domain registrations (Brandsight)").argument("<brand>", "Brand name to monitor").option("--json", "Output as JSON", false).action(async (brand, opts) => {
+// src/cli/commands/monitor.ts
+function registerMonitorCommand(program2) {
+  const monitor = program2.command("monitor").description("Brand monitoring and threat detection (Brandsight)");
+  monitor.command("watch <brand>").description("Monitor a brand for new lookalike domain registrations").option("--json", "Output JSON").action(async (brand, opts) => {
     try {
       const result = await monitorBrand(brand);
       if (opts.json) {
         console.log(JSON.stringify(result, null, 2));
-      } else {
-        if (result.stub)
-          console.log("(stub data \u2014 Brandsight API unreachable)");
-        console.log(`Brand monitoring for "${result.brand}":`);
-        if (result.alerts.length === 0) {
-          console.log("  No alerts.");
-        } else {
-          for (const a3 of result.alerts) {
-            console.log(`  [${a3.type}] ${a3.domain} \u2014 registered ${a3.registered_at}`);
-          }
-        }
-        console.log(`
-${result.alerts.length} alert(s)`);
+        return;
       }
-    } catch (error) {
-      console.error(`Monitor failed: ${error instanceof Error ? error.message : String(error)}`);
+      console.log(JSON.stringify(result, null, 2));
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
       process.exit(1);
     }
   });
-  program2.command("similar").description("Find typosquat/competing domains similar to a domain (Brandsight)").argument("<domain>", "Domain to check").option("--json", "Output as JSON", false).action(async (domain, opts) => {
+  monitor.command("similar <domain>").description("Find typosquat and competing domains similar to a domain").option("--json", "Output JSON").action(async (domain, opts) => {
     try {
       const result = await getSimilarDomains(domain);
       if (opts.json) {
         console.log(JSON.stringify(result, null, 2));
-      } else {
-        if (result.stub)
-          console.log("(stub data \u2014 Brandsight API unreachable)");
-        console.log(`Similar domains for ${result.domain}:`);
-        for (const d3 of result.similar) {
-          console.log(`  ${d3}`);
-        }
-        console.log(`
-${result.similar.length} similar domain(s)`);
+        return;
       }
-    } catch (error) {
-      console.error(`Similar domains check failed: ${error instanceof Error ? error.message : String(error)}`);
+      console.log(JSON.stringify(result, null, 2));
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
       process.exit(1);
     }
   });
-  program2.command("threats").description("Get threat assessment for a domain (Brandsight)").argument("<domain>", "Domain to assess").option("--json", "Output as JSON", false).action(async (domain, opts) => {
+  monitor.command("threats <domain>").description("Get a threat assessment for a domain (risk level, threats, recommendation)").option("--json", "Output JSON").action(async (domain, opts) => {
     try {
       const result = await getThreatAssessment(domain);
       if (opts.json) {
         console.log(JSON.stringify(result, null, 2));
+        return;
+      }
+      console.log(JSON.stringify(result, null, 2));
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+}
+
+// src/cli/commands/provider.ts
+function registerProviderCommand(program2) {
+  const provider = program2.command("provider").description("Configure and test registrar/DNS providers");
+  provider.command("list").description("Show all providers and their configuration status").option("--json", "Output JSON").action((opts) => {
+    const providers = getAvailableProviders();
+    if (opts.json) {
+      console.log(JSON.stringify(providers, null, 2));
+      return;
+    }
+    console.log(`
+Registrar / DNS Providers:`);
+    for (const p3 of providers) {
+      const status = p3.configured ? "\u2713 configured" : "\u2717 not configured";
+      const type = p3.type === "full" ? "registrar + dns" : p3.type;
+      console.log(`  ${p3.name.padEnd(12)} [${type}]  ${status}`);
+      if (!p3.configured) {
+        console.log(`    Missing: ${p3.envVars.join(", ")}`);
+      }
+    }
+    console.log();
+  });
+  provider.command("test <name>").description("Live-test a provider's credentials").action(async (name) => {
+    const providers = getAvailableProviders();
+    const info = providers.find((p3) => p3.name === name);
+    if (!info) {
+      console.error(`Unknown provider: ${name}`);
+      process.exit(1);
+    }
+    if (!info.configured) {
+      console.error(`\u2717 ${name} is not configured. Set: ${info.envVars.join(", ")}`);
+      process.exit(1);
+    }
+    console.log(`Testing ${name}...`);
+    try {
+      if (info.type === "registrar" || info.type === "full") {
+        const reg = getRegistrarProvider(name);
+        await reg.listDomains();
+        console.log(`\u2713 Registrar connection OK`);
+      }
+      if (info.type === "dns" || info.type === "full") {
+        const dns = getDnsProvider(name);
+        await dns.getDnsRecords("__test_nonexistent_domain__.invalid");
+        console.log(`\u2713 DNS connection OK`);
+      }
+    } catch (e3) {
+      const msg = e3 instanceof Error ? e3.message : String(e3);
+      if (msg.includes("not found") || msg.includes("No hosted zone") || msg.includes("NXDOMAIN")) {
+        console.log(`\u2713 Connection OK (no domains yet)`);
       } else {
-        if (result.stub)
-          console.log("(stub data \u2014 Brandsight API unreachable)");
-        console.log(`Threat Assessment for ${result.domain}:`);
-        console.log(`  Risk Level: ${result.risk_level}`);
-        if (result.threats.length > 0) {
-          console.log("  Threats:");
-          for (const t3 of result.threats) {
-            console.log(`    - ${t3}`);
-          }
+        console.error(`\u2717 ${name} test failed: ${msg}`);
+        process.exit(1);
+      }
+    }
+  });
+}
+
+// src/cli/commands/config.ts
+var VALID_KEYS = [
+  "default-registrar",
+  "default-dns",
+  "contact.first-name",
+  "contact.last-name",
+  "contact.email",
+  "contact.phone",
+  "contact.address",
+  "contact.city",
+  "contact.state",
+  "contact.country",
+  "contact.zip",
+  "contact.org"
+];
+function registerConfigCommands(program2) {
+  const config = program2.command("config").description("View and set configuration");
+  config.command("show").description("Show current configuration").option("--json", "Output JSON").action((opts) => {
+    const cfg = loadConfig3();
+    if (opts.json) {
+      console.log(JSON.stringify(cfg, null, 2));
+      return;
+    }
+    console.log(`
+Configuration (~/.hasna/domains/config.json):`);
+    console.log(`  default-registrar: ${cfg.default_registrar ?? "(not set)"}`);
+    console.log(`  default-dns:       ${cfg.default_dns ?? "(not set)"}`);
+    if (cfg.contact && Object.keys(cfg.contact).length > 0) {
+      console.log(`
+  contact:`);
+      for (const [k3, v3] of Object.entries(cfg.contact)) {
+        if (v3)
+          console.log(`    ${k3}: ${v3}`);
+      }
+    } else {
+      console.log("  contact:           (not set)");
+    }
+    console.log();
+  });
+  config.command("set <key> <value>").description(`Set a config value. Keys: ${VALID_KEYS.join(", ")}`).action((key, value) => {
+    const normalized = key.replace(/-/g, "_");
+    try {
+      setConfigKey(normalized, value);
+      console.log(`\u2713 Set ${key} = ${value}`);
+    } catch (e3) {
+      console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+      process.exit(1);
+    }
+  });
+  config.command("unset <key>").description("Remove a config value").action((key) => {
+    const normalized = key.replace(/-/g, "_");
+    const cfg = loadConfig3();
+    const parts = normalized.split(".");
+    if (parts.length === 1) {
+      delete cfg[parts[0]];
+    } else if (parts.length === 2 && parts[0] === "contact" && cfg.contact) {
+      delete cfg.contact[parts[1]];
+    }
+    saveConfig(cfg);
+    console.log(`\u2713 Unset ${key}`);
+  });
+}
+
+// src/cli/commands/doctor.ts
+import { execSync as execSync2 } from "child_process";
+function registerDoctorCommand(program2) {
+  program2.command("doctor").description("Run diagnostics \u2014 check credentials, DB, and provider connectivity").action(async () => {
+    let passed = 0;
+    let failed = 0;
+    function ok(msg) {
+      console.log(`  \u2713 ${msg}`);
+      passed++;
+    }
+    function fail(msg, fix) {
+      console.log(`  \u2717 ${msg}`);
+      if (fix)
+        console.log(`    \u2192 ${fix}`);
+      failed++;
+    }
+    console.log(`
+\u2500\u2500 Database \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+    try {
+      const count = countDomains();
+      ok(`Local DB accessible (${count} domain${count !== 1 ? "s" : ""})`);
+    } catch (e3) {
+      fail("Local DB not accessible", `Check ~/.hasna/domains/domains.db`);
+    }
+    console.log(`
+\u2500\u2500 Config \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+    const cfg = loadConfig3();
+    if (cfg.default_registrar)
+      ok(`default-registrar: ${cfg.default_registrar}`);
+    else
+      fail("No default registrar set", "domains config set default-registrar route53");
+    if (cfg.default_dns)
+      ok(`default-dns: ${cfg.default_dns}`);
+    else
+      fail("No default DNS provider set", "domains config set default-dns cloudflare");
+    const contactFields = ["first_name", "last_name", "email", "phone", "address_line_1", "city", "state", "country_code", "zip_code"];
+    const missingContact = contactFields.filter((f3) => !cfg.contact?.[f3]);
+    if (missingContact.length === 0)
+      ok("Registrant contact info complete");
+    else
+      fail(`Missing contact fields: ${missingContact.join(", ")}`, "domains config set contact.<field> <value>");
+    console.log(`
+\u2500\u2500 Providers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+    const providers = getAvailableProviders().filter((p3) => p3.name !== "brandsight");
+    for (const p3 of providers) {
+      if (!p3.configured) {
+        fail(`${p3.name}: not configured`, `Set: ${p3.envVars.join(", ")}`);
+        continue;
+      }
+      try {
+        if (p3.type === "registrar" || p3.type === "full") {
+          const reg = getRegistrarProvider(p3.name);
+          await reg.listDomains();
         } else {
-          console.log("  Threats: none detected");
+          const dns = getDnsProvider(p3.name);
+          await dns.getDnsRecords("__test__.invalid");
+        }
+        ok(`${p3.name}: connected`);
+      } catch (e3) {
+        const msg = e3 instanceof Error ? e3.message : String(e3);
+        if (msg.includes("not found") || msg.includes("No hosted zone") || msg.includes("No Cloudflare zone")) {
+          ok(`${p3.name}: connected (no domains yet)`);
+        } else {
+          fail(`${p3.name}: ${msg}`);
         }
-        console.log(`  Recommendation: ${result.recommendation}`);
       }
-    } catch (error) {
-      console.error(`Threat assessment failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    console.log(`
+\u2500\u2500 Tools \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+    try {
+      execSync2("whois --version 2>/dev/null || whois example.com 2>/dev/null", { timeout: 3000 });
+      ok("whois binary found");
+    } catch {
+      fail("whois not installed", "apt install whois  /  brew install whois");
+    }
+    console.log(`
+${"\u2500".repeat(45)}`);
+    console.log(`  ${passed} passed  /  ${failed} failed
+`);
+    if (failed > 0)
       process.exit(1);
+  });
+}
+
+// src/cli/commands/mcp-install.ts
+import { existsSync as existsSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join9 } from "path";
+import { execSync as execSync3 } from "child_process";
+var MCP_SERVER_NAME = "domains";
+function getClaudeConfigPaths() {
+  return {
+    global: join9(homedir9(), ".claude", "claude_desktop_config.json"),
+    project: join9(process.cwd(), ".claude", "settings.json")
+  };
+}
+function getMcpBinaryPath() {
+  try {
+    return execSync3("which domains-mcp", { encoding: "utf-8" }).trim();
+  } catch {
+    return "domains-mcp";
+  }
+}
+function registerMcpCommand(program2) {
+  const mcp = program2.command("mcp").description("MCP server management for AI agents");
+  mcp.command("install").description("Register domains MCP server with Claude Code").option("--project", "Install in project .claude/settings.json instead of global config").action((opts) => {
+    const paths = getClaudeConfigPaths();
+    const configPath2 = opts.project ? paths.project : paths.global;
+    const binary = getMcpBinaryPath();
+    let config = {};
+    if (existsSync7(configPath2)) {
+      try {
+        config = JSON.parse(readFileSync6(configPath2, "utf-8"));
+      } catch {
+        config = {};
+      }
+    }
+    const mcpServers = config.mcpServers ?? {};
+    mcpServers[MCP_SERVER_NAME] = { command: binary, args: [] };
+    config.mcpServers = mcpServers;
+    writeFileSync4(configPath2, JSON.stringify(config, null, 2), "utf-8");
+    console.log(`\u2713 MCP server registered: ${MCP_SERVER_NAME}`);
+    console.log(`  Config: ${configPath2}`);
+    console.log(`  Binary: ${binary}`);
+    console.log(`
+  Restart Claude Code to activate.`);
+  });
+  mcp.command("uninstall").description("Remove domains MCP server from Claude Code config").option("--project", "Remove from project config instead of global").action((opts) => {
+    const paths = getClaudeConfigPaths();
+    const configPath2 = opts.project ? paths.project : paths.global;
+    if (!existsSync7(configPath2)) {
+      console.log("Config file not found \u2014 nothing to remove.");
+      return;
+    }
+    const config = JSON.parse(readFileSync6(configPath2, "utf-8"));
+    const mcpServers = config.mcpServers;
+    if (!mcpServers?.[MCP_SERVER_NAME]) {
+      console.log(`MCP server '${MCP_SERVER_NAME}' is not registered.`);
+      return;
+    }
+    delete mcpServers[MCP_SERVER_NAME];
+    writeFileSync4(configPath2, JSON.stringify(config, null, 2), "utf-8");
+    console.log(`\u2713 MCP server removed: ${MCP_SERVER_NAME}`);
+  });
+  mcp.command("status").description("Check if domains MCP server is registered").action(() => {
+    const paths = getClaudeConfigPaths();
+    for (const [label, configPath2] of [["global", paths.global], ["project", paths.project]]) {
+      if (!existsSync7(configPath2)) {
+        console.log(`  ${label}: not found`);
+        continue;
+      }
+      try {
+        const config = JSON.parse(readFileSync6(configPath2, "utf-8"));
+        const mcpServers = config.mcpServers;
+        if (mcpServers?.[MCP_SERVER_NAME]) {
+          console.log(`  ${label}: \u2713 registered`);
+        } else {
+          console.log(`  ${label}: \u2717 not registered`);
+        }
+      } catch {
+        console.log(`  ${label}: error reading config`);
+      }
     }
   });
 }
 
+// src/cli/commands/serve.ts
+function registerServeCommand(program2) {
+  const packageVersion = getPackageVersion();
+  program2.command("serve").description("Start HTTP API server").option("--port <n>", "Port to listen on", "3000").option("--host <h>", "Host to bind to", "127.0.0.1").action(async (opts) => {
+    const port = parseInt(opts.port);
+    const server = Bun.serve({
+      port,
+      hostname: opts.host,
+      fetch(req) {
+        const url = new URL(req.url);
+        const path = url.pathname;
+        const method = req.method;
+        const json = (data, status = 200) => new Response(JSON.stringify(data), {
+          status,
+          headers: { "Content-Type": "application/json" }
+        });
+        const notFound = () => json({ error: "Not found" }, 404);
+        try {
+          if (method === "GET" && path === "/health") {
+            return json({ status: "ok", version: packageVersion });
+          }
+          if (method === "GET" && path === "/domains") {
+            const search = url.searchParams.get("search") ?? undefined;
+            const status = url.searchParams.get("status");
+            const domains = listDomains({ search, status });
+            return json({ domains, count: domains.length });
+          }
+          if (method === "POST" && path === "/domains") {
+            return req.json().then((body) => {
+              const domain = createDomain(body);
+              return json(domain, 201);
+            });
+          }
+          const domainMatch = path.match(/^\/domains\/([^/]+)$/);
+          if (domainMatch) {
+            const id = domainMatch[1];
+            if (method === "GET") {
+              const domain = getDomain(id);
+              return domain ? json(domain) : notFound();
+            }
+            if (method === "PUT" || method === "PATCH") {
+              return req.json().then((body) => {
+                const domain = updateDomain(id, body);
+                return domain ? json(domain) : notFound();
+              });
+            }
+            if (method === "DELETE") {
+              const deleted = deleteDomain(id);
+              return json({ id, deleted });
+            }
+          }
+          const dnsMatch = path.match(/^\/domains\/([^/]+)\/dns$/);
+          if (dnsMatch) {
+            const id = dnsMatch[1];
+            if (method === "GET") {
+              const records = listDnsRecords(id);
+              return json({ records, count: records.length });
+            }
+            if (method === "POST") {
+              return req.json().then((body) => {
+                const record = createDnsRecord({ ...body, domain_id: id });
+                return json(record, 201);
+              });
+            }
+          }
+          return notFound();
+        } catch (e3) {
+          return json({ error: e3 instanceof Error ? e3.message : String(e3) }, 500);
+        }
+      }
+    });
+    console.log(`\u2713 domains API server running at http://${opts.host}:${port}`);
+    console.log(`  GET  /health`);
+    console.log(`  GET  /domains`);
+    console.log(`  POST /domains`);
+    console.log(`  GET  /domains/:id`);
+    console.log(`  PUT  /domains/:id`);
+    console.log(`  DELETE /domains/:id`);
+    console.log(`  GET  /domains/:id/dns`);
+    console.log(`  POST /domains/:id/dns`);
+    console.log(`
+  Press Ctrl+C to stop.`);
+    await new Promise(() => {});
+  });
+}
+
 // src/cli/commands/route53.ts
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 function registerRoute53Commands(program2) {
   const r53 = program2.command("r53").description("AWS Route 53 \u2014 domain purchase, hosted zones & DNS");
   r53.command("check <domains...>").description("Check if one or more domains are available for purchase").action(async (domains) => {
@@ -42757,25 +43540,20 @@ function registerRoute53Commands(program2) {
       process.exit(1);
     }
   });
-  r53.command("buy <domain>").description("Register (purchase) a domain via Route 53").requiredOption("--email <email>", "Registrant email").requiredOption("--first-name <name>", "First name").requiredOption("--last-name <name>", "Last name").requiredOption("--phone <phone>", "Phone (e.g. +1.5551234567)").requiredOption("--address <addr>", "Street address").requiredOption("--city <city>", "City").requiredOption("--state <state>", "State/province").requiredOption("--country <code>", "Country code (e.g. US, RO)").requiredOption("--zip <zip>", "ZIP/postal code").option("--org <name>", "Organization name").option("--years <n>", "Registration years", "1").option("--no-auto-renew", "Disable auto-renewal").action(async (domain, opts) => {
+  r53.command("buy <domain>").description("Register (purchase) a domain via Route 53 (contact defaults from: domains config set contact.*)").option("--email <email>", "Registrant email").option("--first-name <name>", "First name").option("--last-name <name>", "Last name").option("--phone <phone>", "Phone (e.g. +40.754013776)").option("--address <addr>", "Street address").option("--city <city>", "City").option("--state <state>", "State/province").option("--country <code>", "Country code (e.g. US, RO)").option("--zip <zip>", "ZIP/postal code").option("--org <name>", "Organization name").option("--years <n>", "Registration years", "1").option("--no-auto-renew", "Disable auto-renewal").action(async (domain, opts) => {
     try {
       const avail = await checkAvailability3(domain);
       if (!avail.available) {
         console.error(`\u2717 ${domain} is not available for registration`);
         process.exit(1);
       }
-      const contact = {
-        first_name: opts.firstName,
-        last_name: opts.lastName,
-        email: opts.email,
-        phone: opts.phone,
-        address_line_1: opts.address,
-        city: opts.city,
-        state: opts.state,
-        country_code: opts.country,
-        zip_code: opts.zip,
-        organization_name: opts.org
-      };
+      let contact;
+      try {
+        contact = resolveContact(opts);
+      } catch (e3) {
+        console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+        process.exit(1);
+      }
       console.log(`Registering ${domain}...`);
       const result = await registerDomain(domain, contact, parseInt(opts.years), opts.autoRenew);
       console.log(`\u2713 Registration submitted: ${domain}`);
@@ -43017,7 +43795,7 @@ DNS Records for ${domain}:`);
     try {
       let raw;
       try {
-        raw = readFileSync4(opts.file, "utf-8");
+        raw = readFileSync7(opts.file, "utf-8");
       } catch {
         console.error(`Could not read file: ${opts.file}`);
         process.exit(1);
@@ -43056,7 +43834,7 @@ DNS Records for ${domain}:`);
       process.exit(1);
     }
   });
-  r53.command("full-setup <domain>").description("Buy domain + create zone + sync to DB \u2014 all in one").requiredOption("--email <email>", "Registrant email").requiredOption("--first-name <name>", "First name").requiredOption("--last-name <name>", "Last name").requiredOption("--phone <phone>", "Phone").requiredOption("--address <addr>", "Street address").requiredOption("--city <city>", "City").requiredOption("--state <state>", "State/province").requiredOption("--country <code>", "Country code").requiredOption("--zip <zip>", "ZIP code").option("--org <name>", "Organization name").option("--years <n>", "Registration years", "1").option("--wait", "Poll until registration completes (or fails)").action(async (domain, opts) => {
+  r53.command("full-setup <domain>").description("Buy domain + create zone + sync to DB \u2014 all in one (contact defaults from: domains config set contact.*)").option("--email <email>", "Registrant email").option("--first-name <name>", "First name").option("--last-name <name>", "Last name").option("--phone <phone>", "Phone").option("--address <addr>", "Street address").option("--city <city>", "City").option("--state <state>", "State/province").option("--country <code>", "Country code").option("--zip <zip>", "ZIP code").option("--org <name>", "Organization name").option("--years <n>", "Registration years", "1").option("--wait", "Poll until registration completes (or fails)").action(async (domain, opts) => {
     try {
       console.log(`[1/4] Checking availability...`);
       const avail = await checkAvailability3(domain);
@@ -43067,18 +43845,13 @@ DNS Records for ${domain}:`);
       const price = avail.price ? ` (${avail.currency ?? "USD"} ${avail.price}/yr)` : "";
       console.log(`  \u2713 Available${price}`);
       console.log(`[2/4] Registering domain...`);
-      const contact = {
-        first_name: opts.firstName,
-        last_name: opts.lastName,
-        email: opts.email,
-        phone: opts.phone,
-        address_line_1: opts.address,
-        city: opts.city,
-        state: opts.state,
-        country_code: opts.country,
-        zip_code: opts.zip,
-        organization_name: opts.org
-      };
+      let contact;
+      try {
+        contact = resolveContact(opts);
+      } catch (e3) {
+        console.error(`Error: ${e3 instanceof Error ? e3.message : String(e3)}`);
+        process.exit(1);
+      }
       const reg = await registerDomain(domain, contact, parseInt(opts.years));
       console.log(`  \u2713 Submitted (operation: ${reg.operationId})`);
       if (opts.wait) {
@@ -43134,11 +43907,17 @@ DNS Records for ${domain}:`);
 
 // src/cli/index.ts
 var program2 = new Command;
-program2.name("domains").description("Domain portfolio and DNS management for AI agents").version("0.0.3");
-registerDomainCommands(program2);
+program2.name("domains").description("Domain portfolio and DNS management for AI agents").version(getPackageVersion());
+registerDomainCommand(program2);
 registerDnsCommands(program2);
+registerZoneCommand(program2);
+registerSslCommand(program2);
 registerAlertCommands(program2);
-registerProviderCommands(program2);
-registerBrandsightCommands(program2);
+registerMonitorCommand(program2);
+registerProviderCommand(program2);
+registerConfigCommands(program2);
+registerDoctorCommand(program2);
+registerMcpCommand(program2);
+registerServeCommand(program2);
 registerRoute53Commands(program2);
 program2.parse(process.argv);